Benign windows Download

cubezombies.MidnightAthenaeum 0.17.0

Legitimate Electron app installer

Attempts to modify Electron core filesMassive low-entropy writable .data section
SHA-2562bad93c1eacfbdd7cf3ca3b69ca025140db6b6bc75a8d91d2d01e63e922ac0fb
URLhttps://github.com/cubezombies/MidnightAthenaeum/releases/download/v0.17.0/MidnightAthenaeum-Setup-0.17.0.exe
MaleculeK₂(Am₃Li₃₂)O₁₁(As₃SAl₂C₂Ca₃CoDy₂Er₃PPrXe)H₁₁(Cm₇₇Cr₁₉Db₃₈Ds₃F₄₁Hf₁₀Mg₅Os₄₅Po₅₇Ti₃U₁₆)Md₉(Bi₁₄Bk₂HeInPa₂₄Pt₂Si₄)Th

Evidence

NSIS self-extracting installer 0x237c–0x244c
⋯3 more rows
0x23ac2d00008b45d8a9f0ffffff7572817ddc-...E......ur.}.
0x23bcefbeadde7569817de8496e7374756081....ui.}.Instu`.
0x23cc7de4736f66747557817de04e756c6c75}.softuW.}.Nullu
0x23dc4e0945088b45088b0df881420083e002N.E..E.....B....
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.