Benign windows Download

LizardByte.Sunshine

Signed WiX installer for Sunshine, standard custom actions

MSI table combines PowerShell and renamed file targetsMSI table contains PowerShell executable marker

SHA-2561e211404b924fcf421657c71e1aaa95cf1f76e172cacf8ff8430beacc0e30e4a

URLhttps://github.com/LizardByte/Sunshine/releases/download/v2026.914.233613/Sunshine-Windows-ARM64-installer.msi

MaleculeK(Te)O₆(C₂As₃DyEr₂PPr)H₆(DbF₅Os₁₅Po₇TiU)Md₃(Bi₉Pa₂Si₃)

Evidence

MSI references PS1 stage 0xc91e1–0xc9471

⋯3 more rows
0xc9211a80100003d23180004002e5da3bc2000....=#.....].. .
0xc9221434d5f46505f6669726577616c6c2e73CM_FP_firewall.s
0xc92316372697074732e6164645f6669726577cripts.add_firew
0xc9241616c6c5f72756c652e62617400570000all_rule.bat.W..
0xc925100e524180004002e5da3bc2000434d5f..$.....].. .CM_
0xc926146505f6175746f73746172742e736372FP_autostart.scr
0xc9271697074732e6175746f73746172745f73ipts.autostart_s
0xc92816572766963652e62617400750000003cervice.bat.u...<
0xc929125180004002e5da3bc2000434d5f4650%.....].. .CM_FP
0xc92a15f6669726577616c6c2e736372697074_firewall.script
0xc92b1732e64656c6574655f6669726577616cs.delete_firewal
0xc92c16c5f72756c652e6261740034080000b1l_rule.bat.4....
0xc92d125180004002e5da3bc2000434d5f4650%.....].. .CM_FP
⋯8 more rows
0xc93612e73756e7368696e655f73657475705f.sunshine_setup_
0xc937170726f636573732e7073310072450000process.ps1.rE..
0xc93812b50180004002e5da3bc2000434d5f46+P.....].. .CM_F
0xc9391505f6173736574732e73637269707473P_assets.scripts
0xc93a12e73756e7368696e655f73657475702e.sunshine_setup.
0xc93b170733100d20400009d95180004002e5dps1............]
0xc93c1a3bc2000434d5f46505f617373657473.. .CM_FP_assets
⋯11 more rows

MSI table contains PowerShell executable marker 0x174a35c–0x174a64c

⋯7 more rows
0x174a3cc5f53756e7368696e65496e7374616c6c_SunshineInstall
0x174a3dc706f7765727368656c6c2e657865202dpowershell.exe -
0x174a3ec4e6f50726f66696c65202d4578656375NoProfile -Execu
0x174a3fc74696f6e506f6c696379204279706173tionPolicy Bypas
0x174a40c73202d46696c6520225b494e5354414cs -File "[INSTAL
0x174a41c4c5f524f4f545d736372697074735c73L_ROOT]scripts\s
0x174a42c756e7368696e652d73657475702e7073unshine-setup.ps
0x174a43c3122202d416374696f6e20696e7374611" -Action insta
0x174a44c6c6c43415f53756e7368696e65496e73llCA_SunshineIns
0x174a45c74616c6c53696c656e74706f77657273tallSilentpowers
0x174a46c68656c6c2e657865202d57696e646f77hell.exe -Window
0x174a47c5374796c652048696464656e202d4e6fStyle Hidden -No
0x174a48c50726f66696c65202d45786563757469Profile -Executi
0x174a49c6f6e506f6c6963792042797061737320onPolicy Bypass 
0x174a4ac2d46696c6520225b494e5354414c4c5f-File "[INSTALL_
0x174a4bc524f4f545d736372697074735c73756eROOT]scripts\sun
0x174a4cc7368696e652d73657475702e70733122shine-setup.ps1"
0x174a4dc202d416374696f6e20696e7374616c6c -Action install
⋯6 more rows
0x174a54c4f545d736372697074735c73756e7368OT]scripts\sunsh
0x174a55c696e652d73657475702e70733122202dine-setup.ps1" -
0x174a56c416374696f6e20756e696e7374616c6cAction uninstall
⋯7 more rows
0x174a5ec524f4f545d736372697074735c73756eROOT]scripts\sun
0x174a5fc7368696e652d73657475702e70733122shine-setup.ps1"
0x174a60c202d416374696f6e20756e696e737461 -Action uninsta
⋯4 more rows

MSI source-to-installed filename alias 0x174fc6e–0x174fe1e

⋯7 more rows
0x174fcde73696f6e53657175656e6365626f782esionSequencebox.
0x174fcee706e67697830743765667a2e706e677cpngix0t7efz.png|
0x174fcfe6465736b746f702d616c742e706e6764desktop-alt.pngd
0x174fd0e65736b746f702e706e67737465616d2eesktop.pngsteam.
0x174fd1e706e6770316a666c7663662e68746d7cpngp1jflvcf.htm|
0x174fd2e617070732e68746d6c6e327663733376apps.htmln2vcs3v
⋯15 more rows