Trojan-GameThief.Win32.OnLineGames.iha
Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256ae8029c626ca792bbc294d9c32317f918355c8ceda1115f87e9ae19caebc7f01
MaleculeMdTh
Evidence
⋯3 more rows
0x5ba0ffff01c645fc00005068010050048b15....E...Ph..P...
0x5bb07c6060642e3b3b7e60253a677b617e7e|``d.;;~`%:g{a~~
0x5bc07e7e3a777b793b77777c7c3b787d7a3a~~:w{y;ww||;x}z:
0x5bd0756764006368646c6f67696e00000000ugd.chdlogin....
0x5be0000000007c6060642e3b3b6363633a7a....|``d.;;ccc:z
0x5bf07d617062703a777b793b6d7d7a7c6175}apbp:w{y;m}z|au
0x5c007a733b787d7a3a75676400008bc88d71zs;x}z:ugd.....q
0x5c10018a11413ad375f92bce5150b9000000...A:.u.+.QP....
0x5c208d88a820000089b083c010508d4dac00... .......P.M..
0x5c3057ff750c8bfeff75080000007c606064W.u....u....|``d
0x5c402e3b3b6363633a7a7d617062703a777b.;;ccc:z}apbp:w{
0x5c50793b73757a753b787d7a3a7567640000y;suzu;x}z:ugd..
0x5c6031672b752931673267293167326129311g+u)1g2g)1g2a)1
0x5c7067326429316732676429316732662931g2d)1g2gd)1g2f)1
⋯7 more rows