Benign windows Download

AntonioOrionus.Arroxy

Standard NSIS installer

NSIS runtime error URL in dataNSIS runtime error title in data

SHA-256292b4f0628a18f9ae383df40091f9e0b38e553f118777840b515fe04db8b73f7

URLhttps://github.com/antonio-orionus/Arroxy/releases/download/v0.4.14/Arroxy-win-x64-Setup.exe

MaleculeO₄(As₇C₃DyEr₂)H₆(CmF₁₀Os₇Po₄TiU₂)Md₄(Bi₁₁PaSi)

Evidence

English function-word token "this" 0x0–0xb0

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000d8000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯6 more rows

Small code section in large PE 0x3c0–0x490

⋯3 more rows
0x3f000000000000000000000000000000000................
0x400558bec83ec5c837d0c0f742b837d0c46U....\.}..t+.}.F
0x4108b4514750d834818108b0de8ae470089.E.u..H......G..
0x420480450ff7510ff750cff7508ff151c82H.P.u..u..u.....
⋯7 more rows

x86 indirect call through a global pointer 0x4f9–0x5b9

⋯3 more rows
0x529804000ff765857ff1558804000ff7514[email protected][email protected].
0x5398b354c80400057ffd689450c8d45e468[email protected]
0x54920080000506aff68e02e470057ff152c ...Pj.h..G.W..,
⋯7 more rows

NSIS self-extracting installer 0x237c–0x244c

⋯3 more rows
0x23ac2d00008b45d8a9f0ffffff7572817ddc-...E......ur.}.
0x23bcefbeadde7569817de8496e7374756081....ui.}.Instu`.
0x23cc7de4736f66747557817de04e756c6c75}.softuW.}.Nullu
0x23dc4e0945088b45088b0df881420083e002N.E..E.....B....
⋯7 more rows

Modify file creation/access/write times 0x768a–0x774a

⋯3 more rows
0x76ba3400436c6f736548616e646c65001f034.CloseHandle...
0x76ca53657446696c6554696d65003900436fSetFileTime.9.Co
0x76da6d7061726546696c6554696d6500dc02mpareFileTime...
⋯7 more rows