Benign Download

Trojan-GameThief.Win32.MultiFirst.dd

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2563fa171f306ece13a0380feddb21aa40c37038e66a97027e51371b05a68c1f286
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x63da–0x64ba
⋯3 more rows
0x640a1b4f0e014f530e010000003500000038.O..OS.....5...8
0x641a504c4c48021717424c42160008005c5dPLLH...BLB....\]
0x642a565f165b5755176b6b6b616d007d0b61V_.[WU.kkkam.}.a
0x643a0f0b610f1748574b545d41511748574b..a..HWKT]AQ.HWK
0x644a4c16594b480000000000000000000000L.YKH...........
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.