IOCReport

loading gif

Files

File Path
Type
Category
Malicious
SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe.log
ASCII text, with CRLF line terminators
dropped
 malicious

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe
'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe'
malicious
C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe
C:\Users\user\Desktop\SecuriteInfo.com.Trojan.GenericKDZ.73120.139.exe
 malicious

URLs

Name
IP
Malicious
www.rizrvd.com/bw82/
malicious
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
unknown
 clean

Memdumps

Base Address
Regiontype
Protect
Malicious
26E1000
unkown
page read and write
 malicious
400000
unkown
page execute and read and write
 malicious
36E9000
unkown
page read and write
 malicious
4FB0000
unkown
page read and write
 clean
4CB000
unkown
page read and write
 clean
230000
unkown image
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4B90000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
841000
unkown
page read and write
 clean
7FF56644C000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
7FF5664BE000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
58C9000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
CFE000
stack
page read and write
 clean
5870000
unkown
page read and write
 clean
770000
unkown image
page readonly
 clean
7FF5A903C000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
50E2000
unkown
page read and write
 clean
83E000
unkown
page read and write
 clean
5830000
unkown
page read and write
 clean
849000
unkown
page read and write
 clean
598E000
stack
page read and write
 clean
1D714E02000
unkown
page read and write
 clean
230000
unkown image
page readonly
 clean
53977FB000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
2695000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7D0000
heap default
page read and write
 clean
4E00000
heap private
page execute and read and write
 clean
7FF5664C1000
unkown
page readonly
 clean
4BC0000
unkown
page read and write
 clean
861000
unkown
page read and write
 clean
1D714686000
unkown
page read and write
 clean
846000
unkown
page read and write
 clean
50D0000
unkown
page read and write
 clean
26D0000
heap private
page execute and read and write
 clean
2640000
unkown
page execute and read and write
 clean
888000
unkown
page read and write
 clean
512E000
unkown
page read and write
 clean
80E000
heap default
page read and write
 clean
4FB0000
unkown
page read and write
 clean
887000
unkown
page read and write
 clean
E60000
heap default
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5663EA000
unkown
page readonly
 clean
866000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
FB8F9FE000
unkown
page read and write
 clean
770000
unkown image
page readonly
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8FD8000
unkown
page readonly
 clean
5397AFD000
unkown
page read and write
 clean
7B0000
heap default
page read and write
 clean
4FB0000
unkown
page read and write
 clean
1D71466F000
unkown
page read and write
 clean
5900000
unkown
page read and write
 clean
5920000
unkown
page read and write
 clean
B2E000
stack
page read and write
 clean
4FB0000
unkown
page read and write
 clean
588C000
unkown
page read and write
 clean
866000
unkown
page read and write
 clean
53979FE000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
E6F000
unkown
page read and write
 clean
E6F000
unkown
page read and write
 clean
7FF56643C000
unkown
page readonly
 clean
7FF5A8F01000
unkown
page readonly
 clean
6F8000
stack
page read and write
 clean
A0A000
unkown
page execute and read and write
 clean
59CE000
unkown
page read and write
 clean
9F3000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
85E000
unkown
page read and write
 clean
58E0000
unkown
page read and write
 clean
2635000
unkown
page read and write
 clean
841000
unkown
page read and write
 clean
4E10000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
847000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
251C000
unkown
page read and write
 clean
5ACE000
stack
page read and write
 clean
7FF566455000
unkown
page readonly
 clean
800000
heap default
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
1D7144B0000
heap private
page read and write
 clean
7FF5663DA000
unkown
page readonly
 clean
4DF0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
83B000
unkown
page read and write
 clean
2630000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
7FF5A8F3C000
unkown
page readonly
 clean
5890000
unkown
page read and write
 clean
7FF5A90C9000
unkown
page readonly
 clean
DA0000
heap default
page read and write
 clean
5850000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
4E60000
unkown
page read and write
 clean
232000
unkown image
page readonly
 clean
58D0000
unkown
page read and write
 clean
4BB0000
unkown
page read and write
 clean
217CC2E0000
heap private
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
1D715000000
unkown
page readonly
 clean
7FF566405000
unkown
page readonly
 clean
217CC3FF000
heap private
page read and write
 clean
83B000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4B93000
unkown
page read and write
 clean
1370000
unkown
page execute and read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8FC2000
unkown
page readonly
 clean
7FF566460000
unkown
page readonly
 clean
57E0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A90C9000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
1D714520000
unkown
page readonly
 clean
7FF566419000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
5830000
unkown
page read and write
 clean
7FF5A9036000
unkown
page readonly
 clean
896000
unkown
page read and write
 clean
83F000
unkown
page read and write
 clean
4E10000
unkown
page read and write
 clean
7FF566467000
unkown
page readonly
 clean
896000
unkown
page read and write
 clean
77E000
unkown
page read and write
 clean
32E000
unkown image
page readonly
 clean
268D000
unkown
page read and write
 clean
4B50000
unkown
page read and write
 clean
770000
unkown image
page readonly
 clean
4DE0000
unkown
page execute and read and write
 clean
4FB0000
unkown
page read and write
 clean
4F7C000
unkown
page read and write
 clean
217CAAB0000
heap private
page read and write
 clean
4DF0000
unkown
page read and write
 clean
DA4000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
5860000
unkown
page read and write
 clean
4B90000
unkown
page read and write
 clean
7FF5663D6000
unkown
page readonly
 clean
1D714650000
unkown
page read and write
 clean
891000
heap default
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
243E000
unkown
page read and write
 clean
2520000
heap private
page read and write
 clean
50F0000
unkown
page read and write
 clean
217CACC0000
unkown
page readonly
 clean
4E60000
unkown
page execute and read and write
 clean
217CA6B0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
873000
heap default
page read and write
 clean
FB8F97C000
unkown
page read and write
 clean
4B30000
unkown
page read and write
 clean
1D714713000
unkown
page read and write
 clean
4B20000
unkown
page read and write
 clean
730000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
262F000
stack
page read and write
 clean
4FB0000
unkown
page read and write
 clean
1030000
unkown
page read and write
 clean
C2E000
stack
page read and write
 clean
2670000
unkown
page read and write
 clean
5910000
unkown
page read and write
 clean
1031000
unkown
page read and write
 clean
7FF56636A000
unkown
page readonly
 clean
1D714613000
unkown
page read and write
 clean
217CA710000
unkown
page read and write
 clean
588E000
unkown
page read and write
 clean
4B80000
unkown
page read and write
 clean
4BB0000
unkown
page read and write
 clean
4ED0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
863000
unkown
page read and write
 clean
874000
unkown
page read and write
 clean
7FF5663C0000
unkown
page readonly
 clean
53974FE000
unkown
page read and write
 clean
47DB000
stack
page read and write
 clean
7FF5A8BBA000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
874000
unkown
page read and write
 clean
7FF5A900F000
unkown
page readonly
 clean
7F5E0000
unkown
page execute and read and write
 clean
4BD0000
heap private
page read and write
 clean
4E20000
unkown
page read and write
 clean
1D714708000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
7FF5660DC000
unkown
page readonly
 clean
4BC0000
unkown
page read and write
 clean
858000
unkown
page read and write
 clean
7FF5A8ED3000
unkown
page readonly
 clean
DE0000
heap private
page read and write
 clean
4BC0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4B70000
unkown
page read and write
 clean
7FF5A8FD6000
unkown
page readonly
 clean
4B90000
unkown
page read and write
 clean
53978F7000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
A12000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8EDD000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8E9A000
unkown
page readonly
 clean
4FC0000
heap private
page read and write
 clean
7FF5A90C1000
unkown
page readonly
 clean
4FB1000
unkown
page read and write
 clean
E6E000
unkown
page read and write
 clean
4E26000
unkown
page read and write
 clean
1D71462A000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A9064000
unkown
page readonly
 clean
4B50000
unkown
page read and write
 clean
47E0000
unkown
page readonly
 clean
2674000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
FB8F8FE000
unkown
page read and write
 clean
4BA0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
58C0000
unkown
page read and write
 clean
217CC200000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
217CA76C000
heap default
page read and write
 clean
53976FD000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
1D71464A000
unkown
page read and write
 clean
26CF000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
230000
unkown image
page readonly
 clean
FB8F7FD000
unkown
page read and write
 clean
4BF000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
4C8000
unkown
page read and write
 clean
1D714CC0000
unkown
page readonly
 clean
7FF56642D000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4E10000
unkown
page read and write
 clean
84E000
unkown
page read and write
 clean
217CC0E0000
unkown
page readonly
 clean
E69000
unkown
page read and write
 clean
866000
unkown
page read and write
 clean
217CA73B000
heap default
page read and write
 clean
4DF0000
unkown
page read and write
 clean
7FF5A9060000
unkown
page readonly
 clean
161F000
unkown
page execute and read and write
 clean
4BC000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
859000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8FC0000
unkown
page readonly
 clean
5869000
unkown
page read and write
 clean
4BC1000
unkown
page read and write
 clean
32E000
unkown image
page readonly
 clean
1D7145F0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
9E4000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
A17000
unkown
page execute and read and write
 clean
970000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
217CA900000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
9DE000
unkown
page read and write
 clean
217CC1E0000
unkown
page readonly
 clean
7FF5A8FEA000
unkown
page readonly
 clean
4BB0000
unkown
page read and write
 clean
7FF5A9067000
unkown
page readonly
 clean
7FF5A9019000
unkown
page readonly
 clean
217CC4C0000
heap private
page read and write
 clean
A84000
unkown
page read and write
 clean
DF0000
unkown
page readonly
 clean
4BB0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
1D714510000
heap default
page read and write
 clean
148F000
unkown
page execute and read and write
 clean
7FF566464000
unkown
page readonly
 clean
840000
unkown
page read and write
 clean
5880000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
90D000
unkown
page read and write
 clean
FB8F6FE000
unkown
page read and write
 clean
7FF5663FE000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
5830000
unkown
page read and write
 clean
4BD3000
heap private
page read and write
 clean
FB8F77E000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
50E0000
unkown
page read and write
 clean
F60000
unkown
page readonly
 clean
539757E000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
7FF5A9005000
unkown
page readonly
 clean
7FF566431000
unkown
page readonly
 clean
85D000
heap default
page read and write
 clean
7FF5A9046000
unkown
page readonly
 clean
866000
unkown
page read and write
 clean
217CAAC0000
unkown
page readonly
 clean
5830000
unkown
page read and write
 clean
7FF5A8FD2000
unkown
page readonly
 clean
848000
unkown
page read and write
 clean
2660000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
1D71463C000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
50D0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8E4F000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
87B000
heap default
page read and write
 clean
58A0000
unkown
page read and write
 clean
217CAAB5000
heap private
page read and write
 clean
3CB000
unkown
page read and write
 clean
7FF5A8EB8000
unkown
page readonly
 clean
5BCE000
stack
page read and write
 clean
217CC1A0000
unkown
page readonly
 clean
E64000
unkown
page read and write
 clean
4E50000
heap private
page read and write
 clean
5780000
unkown
page read and write
 clean
1D714700000
unkown
page read and write
 clean
7FF5663D8000
unkown
page readonly
 clean
4BB0000
unkown
page read and write
 clean
1D714702000
unkown
page read and write
 clean
2650000
unkown
page read and write
 clean
217CC210000
heap private
page read and write
 clean
217CA730000
heap default
page read and write
 clean
50CE000
stack
page read and write
 clean
4E10000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
887000
heap default
page read and write
 clean
A20000
heap private
page read and write
 clean
894000
unkown
page read and write
 clean
84B000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5664C9000
unkown
page readonly
 clean
4B50000
unkown
page read and write
 clean
26B0000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
7FF566436000
unkown
page readonly
 clean
4B90000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4E10000
unkown
page read and write
 clean
1D714C70000
unkown
page read and write
 clean
4E20000
unkown
page read and write
 clean
7C0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF56614C000
unkown
page readonly
 clean
1D714655000
unkown
page read and write
 clean
5840000
unkown
page read and write
 clean
1D714800000
unkown
page readonly
 clean
899000
heap default
page read and write
 clean
5830000
unkown
page read and write
 clean
5830000
unkown
page read and write
 clean
217CC300000
heap private
page read and write
 clean
58F0000
unkown
page read and write
 clean
7FF56646D000
unkown
page readonly
 clean
FB8F67C000
unkown
page read and write
 clean
2690000
unkown
page read and write
 clean
1D71464F000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
83B000
unkown
page read and write
 clean
36E1000
unkown
page read and write
 clean
7FF5A8798000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
217CC0D0000
unkown
page readonly
 clean
9FD000
unkown
page execute and read and write
 clean
780000
unkown
page readonly
 clean
7FF5A902D000
unkown
page readonly
 clean
4C5000
unkown
page read and write
 clean
83D000
unkown
page read and write
 clean
4B9E000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
837000
unkown
page read and write
 clean
1D714600000
unkown
page read and write
 clean
58B0000
unkown
page read and write
 clean
4B50000
unkown
page readonly
 clean
4B80000
unkown
page read and write
 clean
4BB0000
unkown
page read and write
 clean
7FF56636E000
unkown
page readonly
 clean
4BB0000
unkown
page read and write
 clean
4B80000
unkown
page read and write
 clean
874000
unkown
page read and write
 clean
83D000
unkown
page read and write
 clean
7FF5A9055000
unkown
page readonly
 clean
4BC0000
unkown
page read and write
 clean
232000
unkown image
page readonly
 clean
267B000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A904C000
unkown
page readonly
 clean
8D0000
unkown
page readonly
 clean
4BB0000
unkown
page read and write
 clean
5840000
unkown
page execute and read and write
 clean
7FF566472000
unkown
page readonly
 clean
7FF566374000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4B60000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
5397675000
unkown
page read and write
 clean
82F000
unkown
page read and write
 clean
7FF5A8F07000
unkown
page readonly
 clean
4B40000
unkown
page read and write
 clean
A06000
unkown
page execute and read and write
 clean
4FB0000
unkown
page read and write
 clean
539747B000
unkown
page read and write
 clean
9ED000
unkown
page execute and read and write
 clean
269C000
unkown
page read and write
 clean
884000
unkown
page read and write
 clean
863000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
26A1000
unkown
page read and write
 clean
2687000
unkown
page read and write
 clean
7FF5664C9000
unkown
page readonly
 clean
1D714C60000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4D20000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
26C0000
unkown
page read and write
 clean
4BC0000
unkown
page read and write
 clean
4E40000
unkown
page read and write
 clean
850000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
84B000
unkown
page read and write
 clean
7FF565C7B000
unkown
page readonly
 clean
161B000
unkown
page execute and read and write
 clean
4FB0000
unkown
page read and write
 clean
83F000
unkown
page read and write
 clean
4B50000
unkown
page read and write
 clean
7FF5A8DEA000
unkown
page readonly
 clean
7FF5A90BE000
unkown
page readonly
 clean
86E000
unkown image
page readonly
 clean
4FB0000
unkown
page read and write
 clean
50D0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
4B60000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
7DB000
heap default
page read and write
 clean
85B000
unkown
page read and write
 clean
4B50000
unkown
page read and write
 clean
4B3000
unkown
page read and write
 clean
86E000
unkown image
page readonly
 clean
4BB0000
unkown
page read and write
 clean
7FF5A8BC0000
unkown
page readonly
 clean
4B60000
unkown
page read and write
 clean
9E3000
unkown
page execute and read and write
 clean
5680000
unkown
page read and write
 clean
4B90000
unkown
page read and write
 clean
2633000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
A1B000
unkown
page execute and read and write
 clean
217CA830000
unkown
page readonly
 clean
772000
unkown image
page readonly
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8FFE000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
7FF5A8E8E000
unkown
page readonly
 clean
7FF566446000
unkown
page readonly
 clean
7FF5663C2000
unkown
page readonly
 clean
217CC1F0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
7FF566143000
unkown
page readonly
 clean
28AC000
unkown
page read and write
 clean
7FF5A8866000
unkown
page readonly
 clean
7FF5A8BD0000
unkown
page readonly
 clean
4FB0000
unkown
page read and write
 clean
772000
unkown image
page readonly
 clean
843000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
148B000
unkown
page execute and read and write
 clean
4BB0000
unkown
page read and write
 clean
4AF000
unkown
page read and write
 clean
4FB0000
unkown
page read and write
 clean
There are 484 hidden memdumps, click here to show them.