Benign Download

Trojan-GameThief.Win32.OnLineGames.unwu

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-256e95810d0afb791d6bc08a106a0d8e4bf1b72f9d5e7a7132715d64224eea21e53
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x7fda–0x80ba
⋯3 more rows
0x800a98999700000000000000002f000000aa.........../....
0x801ac2dededa908585dddddd84dccbc7929e................
0x802a9c9d929384c9c5c785d0c6d38598d8c2................
0x803acbc585d9c2c5dff5d2c3c484cbd9da00................
0x804a00000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.