Benign Download

Trojan-GameThief.Win32.Nilage.azm

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256a5a4087ccda9405a0990aba652b43db91f09adff711eb5ae8b3f25d931ff7bf7
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x4620–0x4700
⋯3 more rows
0x4650e55dc20400000000ffffffff4a000000.]..........J...
0x4660e8f4f4f0baafaff7f7f7aef7e9f3e8e2................
0x4670e5f4f4e5f2b6b8b6aee3efedaff2f4af................
0x4680eaf0f3e5eee4ede1e9ecaee1f3f0bff4................
0x4690efede1e9ecbdeeedc0b1b6b3aee3efed................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.