Benign Download

Trojan-GameThief.Win32.OnLineGames.xgs

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2568d0ec351bea404136348504fcbce7663772744549c51e36fa9f140dc04d32e53
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x33fc–0x34dc
⋯3 more rows
0x342c8d85d04100000000c680bc0000000000...A............
0x343cdcc0c0c48e9b9bd2cd869ac7dbc1dede................
0x344cdede9ad7dbd99bdeded2cd9bd8ddda9a................
0x345cd5c7c4008b5e188b7e1c0000516a4052.....^..~...Qj@R
0x346c53000000b0015b64890d0000000081c4S.....[d........
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.