Benign windows Download

GetItSimple.SoundMixer

Legitimate PyInstaller app

NtSuspendProcess and NtResumeProcess runtime resolutionBase64-encoded ZIP payload (2850 bytes decoded) at offset 0x34dd0
SHA-25649b6d533ac212e356d91d55861755d938fb09c39b8b7355ed9860d93f1273aef
URLhttps://github.com/get-it-simple/Windows-Sound-Mixer/releases/download/0.14.9/SoundMixer-0.14.9-x64-machine-setup.exe
MaleculeK₂(AmLi₄)O₈(Al₂CDy₃Er₃IPrSXe)H₁₁(Po₂₈Cm₂₃Cr₁₈Db₁₁Ds₂F₂₇Hf₇Mg₆Os₃₁Ti₂U₅)Md₇(Bi₁₃BkLiPaPtSi₄)Th

Evidence

NSIS self-extracting installer 0x25c6–0x2696
⋯3 more rows
0x25f62f00008b45d8a9f0ffffff757b817ddc/...E......u{.}.
0x2606efbeadde7572817de8496e7374756981....ur.}.Instui.
0x26167de4736f66747560817de04e756c6c75}.softu`.}.Nullu
0x2626570945088b45088b0d502a420083e002W.E..E...P*B....
⋯7 more rows
AI PyTorch or SafeTensors extension 0x27d55d0–0x27d5690
⋯3 more rows
0x27d5600f00ec8cf8b78b7ecc338f02938c8deaf.....x...8.)8...
0x27d5610482e707405ca78e77c8e79e047f20949H.pt..x.|.y.G..I
0x27d56207da5042117a7301f95a4544458f932b1}..!..0...TDX.2.
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.