Benign Download

Trojan-PSW.Win32.OnLineGames.anzr

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-2567858d2a24d8e026bb2c1049f986be815fbb146598dbc865c60127be120984bf5

MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x397c–0x3a3c

⋯3 more rows
0x39ac08104613400810461356081051000000[email protected]...
0x39bc5d4141450f1a1a0407041b04001b0701]AAE............
0x39cc001b0704001a42581a565c5b1b544645......BX.V\[.TFE
⋯7 more rows

Encoded content decoded: xor 0x3abc–0x3bcc

⋯3 more rows
0x3aec33322e646c6c00002d0000003b00000032.dll..-...;...
0x3afc665a53416254475069785c56475a465afZSAbTGPix\VGZFZ
0x3b0c534169625c5b515a4246697640474750SAib\[QZBFiv@GGP
0x3b1c5b41635047465c5a5b6967607b000000[AcPGF\Z[ig`{...
0x3b2c7463651b7459504741715c54595a5200tce.tYPGAq\TYZR.
0x3b3c7463651b65475a514056416a7b5a415ctce.eGZQ@VAj{ZA\
0x3b4c535c5654415c5a5b00000000fdc5e5f2S\VTA\Z[........
0x3b5ce29787d484d889d58aedf9d4ff8b0000................
⋯7 more rows