Benign Download

Trojan-GameThief.Win32.OnLineGames.udxl

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-256965a0ea707d3d0614642dc6c1adea0e24ab98c5642cdcfb57b70d9f4d13d5485

MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x6490–0x6550

⋯3 more rows
0x64c0a6a6a7a7000000000000002400000047...........$...G
0x64d02f3333377d68683d2133693e3e2b2b71/337}hh=!3i>>++q
0x64e0717f7f692429682b3e75726837283433q..i$)h+>urh7(43
⋯7 more rows

Encoded content decoded: xor 0x66a5–0x6785

⋯3 more rows
0x66d52787c123b14f131cf8cb252c000000e7'..#.O....%,....
0x66e58f939397ddc8c88b8193c99e9e8b8bd1................
0x66f5d1dfdfc98489c88b829e8e9d8e9e8892................
0x6705c8d4dfc897889493c986949700000000................
0x671500000000000000000000000000000000................
⋯7 more rows