Benign Download

Trojan-GameThief.Win32.OnLineGames.ucdk

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256bedabd73e19b9dd768765097e1eb23696efb9671c094015ce66b1f9e61d9da4f
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x622a–0x630a
⋯3 more rows
0x625a4948474600000000000000280000006fIHGF.......(...o
0x626a071b1b1f5540400b075d410e0c5a5a59....U@@..]A..ZZY
0x627a59410c014035202128373737203a3b40YA..@5 !(777 :;@
0x628a1f001c1b410e1c1f0000000000000000....A...........
0x629a00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.