Trojan-GameThief.Win32.OnLineGames.gwo
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2568dbf1ab8929d885d64c97fdde8dd58aaae9366d71b781888552a606e69763810
MaleculeMdTh
Evidence
⋯3 more rows
0x52e88bec83ec1453565764a1180000000000.....SVWd.......
0x52f8fce0e0e4aebbbbe3e3e3bafafde1f0e2................
0x5308f0baf7fbf9bbedfdfafce1f5faf3bbf8................
0x5318fdfabaf5e7e400008bc88d71018a1141...........q...A
0x53283ad375f92bce5150b90000008d88a820:.u.+.QP.......
0x5338000089b083c010508d4dac0057ff750c.......P.M..W.u.
0x53488bfeff7508000000c685e3dfffff01c6...u............
0x535845fc00005068010050048b15fce0e0e4E...Ph..P.......
0x5368aebbbbfee0a5bae7fbe1fefefefebaf7................
0x5378fbf9bbf7f7fcfcbbf8fdfabaf5e7e400................
0x53886368646c6f67696e0000000000000000chdlogin........
0x5398c680bc00000000008bc88d79018d6424...........y..d$
0x53a8000000008b406005b40600008d85d041.....@`........A
0x53b800000000fce0e0e4aebbbbe3e3e3bafa................
0x53c8fde1f0e2f0baf7fbf9bbf3f5faf5bbf8................
0x53d8fdfabaf5e7e40000b1e7abf5a9b1e7b2................
0x53e8e7a9b1e7b2e1a9b1e7b2e4a9b1e7b2e7................
⋯7 more rows