Benign Download

Trojan-GameThief.Win32.OnLineGames.xya

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256d9a41f7180e5790bc4565f4293e714e92b5d2c2bdcbf8f2077f2ab45302c418e
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x21cc–0x232c
⋯3 more rows
0x21fc00000000000000000000000001990000................
0x220cf1edede9a3b6b6f8f8f8b7aea1f3fbb7................
0x221cfaf6f4b6f5f8f6eaf1ecb6f5f0f7b7f8................
0x222ceae90000000000000000000000000000................
0x223c00000000000000000000000000000000................
⋯3 more rows
0x227c00000000000000000000000000000000................
0x228cf1edede9a3b6b6f8f8f8b7aea1f3fbb7................
0x229cfaf6f4b6f5f8f6eaf1eceef6eeb6f5f0................
0x22acf7b7f8eae90000000000000000000000................
0x22bc00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.