Benign Download

Trojan-PSW.Win32.OnLineGames.aofe

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256345d2338d2ce021043b92fb732bc0cdb2fe408eb8e39ec06a60fe4174bc41495
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x2dc0–0x2ea0
⋯3 more rows
0x2df000000000000000000000000000000000................
0x2e003d2121256f7a7a2222227b37343c3120=!!%ozz"""{74<1
0x2e1066666d6c7b363a387a3e257a79223a22ffml{6:8z>%zy":"
0x2e20202630272d55555555555555f1783b55 &0'-UUUUUUU.x;U
0x2e309ee18422650e55554da64455b6bfc729..."e.UUM.DU...)
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.