244ca68900264491030b80a89f2e2989fa3aeb938060baa9e3a2b2cc37d5b780

Analysis

max time kernel
40s
max time network
25s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 14:35

Target
RIW.exe
Size 138KB
Sample261009-rx86kabe37
SHA256 244ca68900264491030b80a89f2e2989fa3aeb938060baa9e3a2b2cc37d5b780
MD5 febcedcb743762eada992097a9ed3741
SHA1 6f4edfb59e342d6b234965dddaa11ccff8e5c27a
SHA512 0e15f76a0a65a6d9123ce59ddf9f01ac4c018d0f8ede79114fadc34ab87390dd304457fd0702c1ebca9d8b006c399d89052301fb14bf854b64d4bdcf6f435ad7
SSDEEP 3072:rijgzzDbMbJUelGkp5cLsr0UAUDLgMSa1EJz:rUgLbMb0S5cLjUDMMSa1EJz
TLSH
T11DD338E032D89D97FA74537C8585D222263DFAE596139B13D1A0A5730B62FC23DD23CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1560-0-0x00007FF7CE2E0000-0x00007FF7CE31E000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\RIW.exe
"C:\Users\Admin\AppData\Local\Temp\RIW.exe"
1⤵
PID:1560