Trojan-GameThief.Win32.OnLineGames.duf
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2564059337b2d51e7b1bd79a4c483b165d7c3e4cf933a5079a929b7e69640922b14
MaleculeMdTh
Evidence
⋯3 more rows
0x4d18b1b7000010720000ac71000074720000.....r...q..tr..
0x4d28fde1e1e5afbabaffe1a7bbe6fae0ffff................
0x4d38ffffbbf6faf8baffffffe1baf9fcfbbb................
0x4d48f4e6e5008bc88d71018a11413ad375f9.......q...A:.u.
0x4d582bce5150b90000008d881c20000089b0+.QP....... ....
⋯6 more rows
0x4dc800000000c685e3dfffff01c645fc0000............E...
0x4dd85068010050048b15fde1e1e5afbabaffPh..P...........
0x4de8e1a4bbe6fae0ffffffffbbf6faf8baf6................
0x4df8f6fdfdbaf9fcfbbbf4e6e5008bc88d79...............y
0x4e08018d6424000000008b406005b4060000..d$.....@`.....
0x4e188d85d04100000000c680bc0000000000...A............
0x4e28fde1e1e5afbabaf3eca4bbe6fae0ffff................
0x4e38ffffbbf6faf8bafffff3ecbaf9fcfbbb................
0x4e48f4e6e500b0e6aaf4a8b0e6b3e6a8b0e6................
0x4e58b3e0a8b0e6b3e5a8b0e6b3e6e5a8b0e6................
⋯7 more rows