Benign windows Download

gvim-portable 9.2.1037

Legitimate gVim portable installer

PowerShell web-download command sequenceCaptures keystrokes, screen and clipboard

SHA-256e75a8e5fb69abe3313a30077dedf41eab20706177b2ed40c55bd29a07be8792d

URLhttps://sourceforge.net/projects/portableapps/files/gVim%20Portable/gVimPortable_9.2.1037.paf.exe/download

MaleculeK(Te₃)O₇(Co₂C₂Dy₃ErPrSXe₃)H₁₀(Db₈Os₁₉Cm₁₅Cr₇F₁₉Hf₈Mg₂Po₂₂TiU₄)Md₅(Bi₁₄PaPt₂Si₃)

Evidence

NSIS self-extracting installer 0x25c4–0x2694

⋯3 more rows
0x25f42f00008b45d8a9f0ffffff757c817ddc/...E......u|.}.
0x2604efbeadde7573817de8496e7374756a81....us.}.Instuj.
0x26147de4736f66747561817de04e756c6c75}.softua.}.Nullu
0x2624580945088b45088b0df0a6420083e002X.E..E.....B....
⋯7 more rows

AI PyTorch or SafeTensors extension 0x86aaa3–0x86ab63

⋯3 more rows
0x86aad304d4b295454ff0ec76b8a3b6a12d8ffd....EO..v....-..
0x86aae32f7471552e70740dfc07d156551e4ed7/tqU.pt....VU.N.
0x86aaf37c913471e99aca84415055a4222adc8a|.4q....APU."*..
⋯7 more rows