More specifically: All of the binaries are just Inno Setup files - even the proxy itself.

Which means it should be easy to wipe out with the next MSRT/Windows update. Considering unpacking Inno and decompiling that weird Pascal(?) scripting it uses has been a thing forever now (innounp). Meaning you can also fully reverse engineer this with a single CLI command and Notepad++ lol

Although this is super clever. I'll give them that.