Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=y
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\IQKAPMW1\www.keepandshare[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\X1FQLEDM\www.google[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{368AFD0A-8D53-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{368AFD0C-8D53-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{368AFD0D-8D53-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\5406e65db0d04a09e042d5fc[1].json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\5406e65db0d04a09e042d5fc[2].json
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\59f77fc955540b22fa000038[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\73f08661-a058-4e73-90df-bb12917a4ad6_eu[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmEU9fBBc9[1].ttf
|
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto
MediumRegularVersion 2.137; 2017Roboto-Me
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf
|
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto
BlackRegularVersion 2.137; 2017Roboto-Bla
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOmCnqEu92Fr1Mu4mxP[1].ttf
|
TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion
2.137; 2017Roboto-Regularht
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\analytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\app_store_badge[1].png
|
PNG image data, 168 x 50, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cream_dust[1].png
|
PNG image data, 50 x 50, 4-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fontawesome-webfont[1].eot
|
Embedded OpenType (EOT), FontAwesome family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\google_play_badge[1].png
|
PNG image data, 169 x 50, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo_48[1].png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\modalbox.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\recaptcha__en[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\screen_month_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\styles__ltr[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\webworker[1].js
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\59f77fc955540b22fa000038[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\73f08661-a058-4e73-90df-bb12917a4ad6[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AHRhs1D3ZquYsgAMpj5q2vpzkPMkbMfvPao1yrEQEiw[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\K&S_Logo@3x[1].png
|
PNG image data, 717 x 144, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bat[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\hypnotize_bg[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main[2].js
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\prototype-1.7.3.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen_day_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen_event_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen_sbs_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen_week_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen_year_view[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\seg[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tp.widget.bootstrap.min[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\voc_amy_kelly_md[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 200x194,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\1067089813[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\1067089813[2].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\183487702480957[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\183487702480957[2].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\K6ngFdK5haaaRGBV8waDwA[1].ttf
|
2010Version
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\WV1W1JAQ.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\api[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\email_validate[1].js
|
ASCII text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\f[1].txt
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\forest_bokeh_bg_hero[1].jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 1200x800,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hero_image.min_v2018[1].png
|
PNG image data, 800 x 500, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[2].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[3].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keepandshare_calendar_screenshot_01[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keepandshare_calendar_screenshot_02[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keepandshare_calendar_screenshot_03[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keepandshare_calendar_screenshot_04[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keepandshare_calendar_screenshot_05[1].jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x710, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\nHiQo1BypvYzt95zlPq1TvesZW2xOQ-xsNqO47m55DA[1].ttf
|
2010Cabin BoldV
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\seg[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\seg[2].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tagjs[1].js
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tp.widget.sync.bootstrap.min[1].js
|
UTF-8 Unicode (with BOM) text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tr[1].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tr[2].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\539ad60defb9600b94d7df2c[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\539adbd6dec7e10e686debee[1].json
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\anchor[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\contact_us[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\email_image_support_v3[1].png
|
PNG image data, 221 x 21, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\episodes-002.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f[1].txt
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f[2].txt
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].ico
|
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fbevents[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\index[1].htm
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keepandshare_calendar_screenshot_01[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keepandshare_calendar_screenshot_02[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keepandshare_calendar_screenshot_03[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keepandshare_calendar_screenshot_04[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\keepandshare_calendar_screenshot_05[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\master_external-20180124_1031.min[1].css
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\matchMedia[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\registration[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tr[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tr[2].gif
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF5715D24817D4D378.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC1456364037F95DB.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF9C80A2350DB77A3.TMP
|
data
|
dropped
|
|
There are 87 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4692 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://fontawesome.io
|
unknown
|
|
|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=y
|
unknown
|
|
|
|
http://developer.keepandshare.com/
|
unknown
|
|
|
|
https://keepn.com/graphics/lpgraphics/core_pages/index/hero_image.min_v2018.png
|
unknown
|
|
|
|
http://jquery.org/license
|
unknown
|
|
|
|
https://support.keepandshare.com
|
unknown
|
|
|
|
http://sizzlejs.com/
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e37e73c3c93ae04c0d91817
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f5da04502e8570acc36cb0c
|
unknown
|
|
|
|
https://www.keepandshare.com/business/registration_pre.php?form=free_trial
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5ebc367f25e5d209b8ea0577
|
unknown
|
|
|
|
https://www.keepandshare.com/business/registration_pre.php
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/contact_us.php
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e1c7f21c845450bec365306
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/message/request_consultation.php
|
unknown
|
|
|
|
https://www.keepandshare.com
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/calendar_self_booking.php
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e79154e3c93ae0964699854
|
unknown
|
|
|
|
https://www.keepandshare.com/m/index.php
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/contact_us.php
|
|
||
|
https://www.trustpilot.com/reviews/5e3bc02d3c93ae04c0db84c4
|
unknown
|
|
|
|
https://www.trustpilot.com/review/keepandshare.com
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5ed1613025e5d20a88a2d9c4
|
unknown
|
|
|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=y
|
|
||
|
http://www.keepandshare.com/business/support_email/support_email_form.php?type=support
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5eab597c086b64095444c602
|
unknown
|
|
|
|
https://connect.facebook.net/en_US/fbevents.js
|
unknown
|
|
|
|
https://www.keepandshare.com/business/registration.php?form=free_trial&ifr=y&lp=
|
unknown
|
|
|
|
http://getbootstrap.com)
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e723d163c93ae0964667056
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f095b1e3f06f202a45aef4b
|
unknown
|
|
|
|
https://www.keepandshare.com/
|
unknown
|
|
|
|
https://www.keepandshare.com/favicon.ico~
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5ed6a55825e5d20a88a5da9c
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f3eabd402e85708c8d534de
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e1ca337c8454503e830ec5c
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
|
|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=yRoot
|
unknown
|
|
|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=y$Error
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5eaafe03086b640954447d45
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f3164531a5a690788a5c826
|
unknown
|
|
|
|
https://support.keepandshare.com/a/solutions/categories/92413
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f738521798e6f0960230d13
|
unknown
|
|
|
|
https://www.trustpilot.com/evaluate/keepandshare.com
|
unknown
|
|
|
|
https://widget.trustpilot.com/trustboxes/539adbd6dec7e10e686debee/index.html?businessunitId=5654e51c
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
|
|
|
https://widget.trustpilot.com/trustboxes/539ad60defb9600b94d7df2c/index.html?businessunitId=5654e51c
|
unknown
|
|
|
|
https://www.trustpilot.com/evaluate/embed/keepandshare.com
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f281ed21a5a6907a4798d53
|
unknown
|
|
|
|
https://support.keepandshare.com/
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e25fd103c93ae0b249339a3
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5ee827277dd7530828c1edf1
|
unknown
|
|
|
|
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5ed4399625e5d20a88a4228a
|
unknown
|
|
|
|
https://www.keepandshare.com/business/support_email/support_email_form.php
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/contact_us.php-covid-19-names-pdf-2k?da=y
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e6acbbe3c93ae0964631243
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f6df3f1798e6f09601fe872
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e8abc41086b6409bc7df9cd
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f9708295e693f06f872130c
|
unknown
|
|
|
|
http://www.keepandshare.com/global/lp/js/matchMedia/0.1.1/matchMedia.js
|
unknown
|
|
|
|
http://www.keepandshare.com/business/support_email/support_email_form.php
|
unknown
|
|
|
|
https://www.keepandshare.com/htm/contact_us.php2Contact
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5fdba86d755dc107e0c6b8fa
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f9da8a95e693f06f87692bd
|
unknown
|
|
|
|
https://cct.google/taggy/agent.js
|
unknown
|
|
|
|
http://fontawesome.io/license
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f456f5e02e85708c8d8c2f3
|
unknown
|
|
|
|
http://fontawesome.io/license/
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f3237631a5a690788a638cf
|
unknown
|
|
|
|
https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
|
unknown
|
|
|
|
https://www.keepandshare.com/oc10/32417/enquest-covid-19-names-pdf-2k?da=y
|
unknown
|
|
|
|
https://www.keepandshare.com/xOnline
|
unknown
|
|
|
|
https://widget.trustpilot.com/trustboxes/5406e65db0d04a09e042d5fc/index.html?businessunitId=5654e51c
|
unknown
|
|
|
|
https://www.google.%/ads/ga-audiences
|
unknown
|
|
|
|
https://www.keepare.com/oc10/32417/enquest-covid-19-names-pdf-2k?da=yRoot
|
unknown
|
|
|
|
https://www.keepandshare.com/favicon.ico
|
unknown
|
|
|
|
https://www.keepandshare.com/index_signin.php
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f58d91702e85707dcef1486
|
unknown
|
|
|
|
http://www.iloveflipbooks.com/
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5eb584b525e5d209b8e58d15
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5dfa9f08c845450b74324784
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5f3678039cc22a073c979286
|
unknown
|
|
|
|
https://www.keepare.com/htm/contact_us.phpRoot
|
unknown
|
|
|
|
https://www.google.ch/pagead/1p-user-list/1067089813/?random
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5e56d2593c93ae0bc40aec17
|
unknown
|
|
|
|
http://scripts.sil.org/OFL
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5df630f7c845450b742f8871
|
unknown
|
|
|
|
https://www.trustpilot.com/reviews/5fc995ca5e693f07049f3a8b
|
unknown
|
|
|
|
https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
|
unknown
|
|
There are 81 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
star-mini.c10r.facebook.com
|
31.13.86.36
|
|
|
|
g.global-ssl.fastly.net
|
151.101.0.65
|
|
|
|
www.keepn.com
|
64.62.174.128
|
|
|
|
us-u.openx.net
|
34.98.64.218
|
|
|
|
stats.l.doubleclick.net
|
66.102.1.155
|
|
|
|
s.twitter.com
|
104.244.42.195
|
|
|
|
rec.mouseflowaps.netdna-cdn.com
|
23.111.9.38
|
|
|
|
prod-eu-pixel-collector-vpc-145135437.eu-west-1.elb.amazonaws.com
|
52.215.255.105
|
|
|
|
www.keepandshare.com
|
64.71.144.43
|
|
|
|
scontent.xx.fbcdn.net
|
157.240.17.15
|
|
|
|
googleads.g.doubleclick.net
|
172.217.168.34
|
|
|
|
keepn.com
|
66.160.183.118
|
|
|
|
cm.g.doubleclick.net
|
172.217.168.66
|
|
|
|
ads-bid.l.doubleclick.net
|
74.125.133.154
|
|
|
|
widget.trustpilot.com
|
52.84.138.122
|
|
|
|
www.google.ch
|
216.58.215.227
|
|
|
|
ib.anycast.adnxs.com
|
37.252.173.62
|
|
|
|
edge.gycpi.b.yahoodns.net
|
87.248.118.22
|
|
|
|
www.facebook.com
|
unknown
|
|
|
|
cdn.mouseflow.com
|
unknown
|
|
|
|
bid.g.doubleclick.net
|
unknown
|
|
|
|
pixel.rubiconproject.com
|
unknown
|
|
|
|
secure.adnxs.com
|
unknown
|
|
|
|
pixel-geo.prfct.co
|
unknown
|
|
|
|
connect.facebook.net
|
unknown
|
|
|
|
stats.g.doubleclick.net
|
unknown
|
|
|
|
analytics.twitter.com
|
unknown
|
|
|
|
ads.yahoo.com
|
unknown
|
|
|
|
tag.marinsm.com
|
unknown
|
|
There are 19 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.215.255.105
|
prod-eu-pixel-collector-vpc-145135437.eu-west-1.elb.amazonaws.com
|
United States
|
|
|
|
52.84.138.122
|
widget.trustpilot.com
|
United States
|
|
|
|
74.125.133.154
|
ads-bid.l.doubleclick.net
|
United States
|
|
|
|
23.111.9.38
|
rec.mouseflowaps.netdna-cdn.com
|
United States
|
|
|
|
66.160.183.118
|
keepn.com
|
United States
|
|
|
|
151.101.0.65
|
g.global-ssl.fastly.net
|
United States
|
|
|
|
157.240.17.15
|
scontent.xx.fbcdn.net
|
United States
|
|
|
|
66.102.1.155
|
stats.l.doubleclick.net
|
United States
|
|
|
|
64.62.174.128
|
www.keepn.com
|
United States
|
|
|
|
172.217.168.66
|
cm.g.doubleclick.net
|
United States
|
|
|
|
31.13.86.36
|
star-mini.c10r.facebook.com
|
Ireland
|
|
|
|
64.71.144.43
|
www.keepandshare.com
|
United States
|
|
|
|
216.58.215.227
|
www.google.ch
|
United States
|
|
|
|
87.248.118.22
|
edge.gycpi.b.yahoodns.net
|
United Kingdom
|
|
|
|
104.244.42.195
|
s.twitter.com
|
United States
|
|
|
|
172.217.168.34
|
googleads.g.doubleclick.net
|
United States
|
|
|
|
37.252.173.62
|
ib.anycast.adnxs.com
|
European Union
|
|
|
|
34.98.64.218
|
us-u.openx.net
|
United States
|
|
There are 8 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{368AFD0A-8D53-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
There are 34 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF562FAE000
|
unkown
|
page readonly
|
|
|
|
7FF589456000
|
unkown
|
page readonly
|
|
|
|
1EBE084C000
|
unkown
|
page read and write
|
|
|
|
A9760FF000
|
unkown
|
page read and write
|
|
|
|
97A60FB000
|
unkown
|
page read and write
|
|
|
|
7FF518F89000
|
unkown
|
page readonly
|
|
|
|
7FF562F88000
|
unkown
|
page readonly
|
|
|
|
7FF5628E3000
|
unkown
|
page readonly
|
|
|
|
1EBE0800000
|
unkown
|
page read and write
|
|
|
|
7FF5631C6000
|
unkown
|
page readonly
|
|
|
|
7FF58934C000
|
unkown
|
page readonly
|
|
|
|
15DAB4B0000
|
unkown
|
page readonly
|
|
|
|
7FF563240000
|
unkown
|
page readonly
|
|
|
|
1E85F513000
|
unkown
|
page read and write
|
|
|
|
1E8641D0000
|
unkown
|
page read and write
|
|
|
|
1E85F518000
|
unkown
|
page read and write
|
|
|
|
1E85EC7B000
|
unkown
|
page read and write
|
|
|
|
15DAB290000
|
heap private
|
page read and write
|
|
|
|
7FF58929E000
|
unkown
|
page readonly
|
|
|
|
7FF562D81000
|
unkown
|
page readonly
|
|
|
|
1E8644A4000
|
unkown
|
page readonly
|
|
|
|
7FF5894CE000
|
unkown
|
page readonly
|
|
|
|
7FF5893FA000
|
unkown
|
page readonly
|
|
|
|
7FF5631D5000
|
unkown
|
page readonly
|
|
|
|
7FF518F2D000
|
unkown
|
page readonly
|
|
|
|
7FF518E82000
|
unkown
|
page readonly
|
|
|
|
1E864650000
|
unkown
|
page readonly
|
|
|
|
1E85EC41000
|
unkown
|
page read and write
|
|
|
|
1E85EE00000
|
unkown
|
page readonly
|
|
|
|
7FF518EED000
|
unkown
|
page readonly
|
|
|
|
1EBE0A00000
|
unkown
|
page readonly
|
|
|
|
A9755AE000
|
unkown
|
page read and write
|
|
|
|
1E860023000
|
unkown
|
page read and write
|
|
|
|
1E85EBA0000
|
unkown
|
page read and write
|
|
|
|
7FF563123000
|
unkown
|
page readonly
|
|
|
|
7FF58925F000
|
unkown
|
page readonly
|
|
|
|
7FF562E5F000
|
unkown
|
page readonly
|
|
|
|
15DAB2CB000
|
heap default
|
page read and write
|
|
|
|
1E85F3D0000
|
unkown
|
page readonly
|
|
|
|
1E85EC8F000
|
unkown
|
page read and write
|
|
|
|
A97552E000
|
unkown
|
page read and write
|
|
|
|
1E85ED13000
|
unkown
|
page read and write
|
|
|
|
7FF518E2E000
|
unkown
|
page readonly
|
|
|
|
1EBE083C000
|
unkown
|
page read and write
|
|
|
|
97A5E7E000
|
unkown
|
page read and write
|
|
|
|
7FF518EFC000
|
unkown
|
page readonly
|
|
|
|
1E864530000
|
unkown
|
page read and write
|
|
|
|
15DAB2FC000
|
heap default
|
page read and write
|
|
|
|
1E8642AF000
|
unkown
|
page read and write
|
|
|
|
7FF5631B6000
|
unkown
|
page readonly
|
|
|
|
97A5F75000
|
unkown
|
page read and write
|
|
|
|
1EBE0821000
|
unkown
|
page read and write
|
|
|
|
1EBE0829000
|
unkown
|
page read and write
|
|
|
|
1E864223000
|
unkown
|
page read and write
|
|
|
|
1E85EB70000
|
heap default
|
page read and write
|
|
|
|
7FF562F6B000
|
unkown
|
page readonly
|
|
|
|
7FF56310B000
|
unkown
|
page readonly
|
|
|
|
1E864241000
|
unkown
|
page read and write
|
|
|
|
1E860001000
|
unkown
|
page read and write
|
|
|
|
1EBE0850000
|
unkown
|
page read and write
|
|
|
|
1E85EC13000
|
unkown
|
page read and write
|
|
|
|
1A3CF2E000
|
unkown
|
page read and write
|
|
|
|
7FF588C73000
|
unkown
|
page readonly
|
|
|
|
7FF562ECC000
|
unkown
|
page readonly
|
|
|
|
7FF518F7E000
|
unkown
|
page readonly
|
|
|
|
15DAB250000
|
unkown
|
page read and write
|
|
|
|
A97627B000
|
unkown
|
page read and write
|
|
|
|
15DAB230000
|
unkown
|
page read and write
|
|
|
|
7FF5630F7000
|
unkown
|
page readonly
|
|
|
|
7FF563152000
|
unkown
|
page readonly
|
|
|
|
1E864200000
|
unkown
|
page read and write
|
|
|
|
1E864040000
|
unkown
|
page read and write
|
|
|
|
7FF518E96000
|
unkown
|
page readonly
|
|
|
|
1E8641F0000
|
unkown
|
page read and write
|
|
|
|
7FF5893D0000
|
unkown
|
page readonly
|
|
|
|
A97637D000
|
unkown
|
page read and write
|
|
|
|
1EBE0710000
|
heap default
|
page read and write
|
|
|
|
1EBE084B000
|
unkown
|
page read and write
|
|
|
|
1E864410000
|
unkown
|
page read and write
|
|
|
|
A975E7B000
|
unkown
|
page read and write
|
|
|
|
1E85EBB0000
|
unkown
|
page read and write
|
|
|
|
7FF58943D000
|
unkown
|
page readonly
|
|
|
|
7FF518770000
|
unkown
|
page readonly
|
|
|
|
7FF518EF6000
|
unkown
|
page readonly
|
|
|
|
7FF562FCF000
|
unkown
|
page readonly
|
|
|
|
1E864212000
|
unkown
|
page read and write
|
|
|
|
1E8644B4000
|
unkown
|
page readonly
|
|
|
|
1E85F260000
|
unkown
|
page readonly
|
|
|
|
7FF58944C000
|
unkown
|
page readonly
|
|
|
|
7FF589317000
|
unkown
|
page readonly
|
|
|
|
7FF51876E000
|
unkown
|
page readonly
|
|
|
|
A975FFF000
|
unkown
|
page read and write
|
|
|
|
7FF589474000
|
unkown
|
page readonly
|
|
|
|
1E864610000
|
unkown
|
page readonly
|
|
|
|
A975EFF000
|
unkown
|
page read and write
|
|
|
|
1E864080000
|
unkown
|
page readonly
|
|
|
|
A97617F000
|
unkown
|
page read and write
|
|
|
|
7FF56317E000
|
unkown
|
page readonly
|
|
|
|
1E864330000
|
unkown
|
page read and write
|
|
|
|
7FF5892C8000
|
unkown
|
page readonly
|
|
|
|
7FF589470000
|
unkown
|
page readonly
|
|
|
|
1EBE088A000
|
unkown
|
page read and write
|
|
|
|
7FF5631B1000
|
unkown
|
page readonly
|
|
|
|
7FF589446000
|
unkown
|
page readonly
|
|
|
|
7FF563156000
|
unkown
|
page readonly
|
|
|
|
15DAD05F000
|
heap private
|
page read and write
|
|
|
|
7FF562D85000
|
unkown
|
page readonly
|
|
|
|
A975C7F000
|
unkown
|
page read and write
|
|
|
|
15DAB4A0000
|
unkown
|
page readonly
|
|
|
|
1E85EB80000
|
unkown
|
page readonly
|
|
|
|
1E85EC79000
|
unkown
|
page read and write
|
|
|
|
7FF562FEE000
|
unkown
|
page readonly
|
|
|
|
7FF5892AA000
|
unkown
|
page readonly
|
|
|
|
1E85F3E0000
|
unkown
|
page readonly
|
|
|
|
A975A7C000
|
unkown
|
page read and write
|
|
|
|
15DAB160000
|
unkown
|
page readonly
|
|
|
|
7FF518C03000
|
unkown
|
page readonly
|
|
|
|
1E85ECA1000
|
unkown
|
page read and write
|
|
|
|
1E85F502000
|
unkown
|
page read and write
|
|
|
|
1EBE0900000
|
unkown
|
page read and write
|
|
|
|
15DACF60000
|
heap private
|
page read and write
|
|
|
|
7FF518F89000
|
unkown
|
page readonly
|
|
|
|
1E864530000
|
unkown
|
page read and write
|
|
|
|
1E8644A0000
|
unkown
|
page read and write
|
|
|
|
1EBE0871000
|
unkown
|
page read and write
|
|
|
|
7FF5628D8000
|
unkown
|
page readonly
|
|
|
|
1EBE0913000
|
unkown
|
page read and write
|
|
|
|
7FF518EF1000
|
unkown
|
page readonly
|
|
|
|
1E864590000
|
unkown
|
page readonly
|
|
|
|
97A5B7B000
|
unkown
|
page read and write
|
|
|
|
7FF518EAA000
|
unkown
|
page readonly
|
|
|
|
7FF562F7C000
|
unkown
|
page readonly
|
|
|
|
1E8641DE000
|
unkown
|
page read and write
|
|
|
|
1E864271000
|
unkown
|
page read and write
|
|
|
|
1E85EB10000
|
heap private
|
page read and write
|
|
|
|
7FF563008000
|
unkown
|
page readonly
|
|
|
|
1E864030000
|
unkown
|
page read and write
|
|
|
|
7FF5631E4000
|
unkown
|
page readonly
|
|
|
|
7FF5631BC000
|
unkown
|
page readonly
|
|
|
|
7FF562F10000
|
unkown
|
page readonly
|
|
|
|
7FF588FCA000
|
unkown
|
page readonly
|
|
|
|
1E85EC95000
|
unkown
|
page read and write
|
|
|
|
7FF518E9A000
|
unkown
|
page readonly
|
|
|
|
7FF589311000
|
unkown
|
page readonly
|
|
|
|
1E85EC29000
|
unkown
|
page read and write
|
|
|
|
7FF562FFC000
|
unkown
|
page readonly
|
|
|
|
7FF588FE0000
|
unkown
|
page readonly
|
|
|
|
7FF563199000
|
unkown
|
page readonly
|
|
|
|
7FF562A85000
|
unkown
|
page readonly
|
|
|
|
7FF5892E3000
|
unkown
|
page readonly
|
|
|
|
A975F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5631E7000
|
unkown
|
page readonly
|
|
|
|
1E864630000
|
unkown
|
page readonly
|
|
|
|
1EBE084E000
|
unkown
|
page read and write
|
|
|
|
1EBE0902000
|
unkown
|
page read and write
|
|
|
|
1EBE0908000
|
unkown
|
page read and write
|
|
|
|
1EBE0EC0000
|
unkown
|
page readonly
|
|
|
|
7FF5893E8000
|
unkown
|
page readonly
|
|
|
|
1E85F500000
|
unkown
|
page read and write
|
|
|
|
1EBE089D000
|
unkown
|
page read and write
|
|
|
|
7FF5629E8000
|
unkown
|
page readonly
|
|
|
|
7FF562E18000
|
unkown
|
page readonly
|
|
|
|
7FF5891FA000
|
unkown
|
page readonly
|
|
|
|
7FF5894D9000
|
unkown
|
page readonly
|
|
|
|
A97647E000
|
unkown
|
page read and write
|
|
|
|
1E860020000
|
unkown
|
page read and write
|
|
|
|
1E85FB00000
|
unkown
|
page read and write
|
|
|
|
1E8644F0000
|
unkown
|
page read and write
|
|
|
|
1E864510000
|
unkown
|
page read and write
|
|
|
|
1E864500000
|
unkown
|
page read and write
|
|
|
|
15DAB525000
|
heap private
|
page read and write
|
|
|
|
7FF563001000
|
unkown
|
page readonly
|
|
|
|
1A3D37E000
|
unkown
|
page read and write
|
|
|
|
1E85F3C0000
|
unkown
|
page readonly
|
|
|
|
7FF5893E6000
|
unkown
|
page readonly
|
|
|
|
15DAB520000
|
heap private
|
page read and write
|
|
|
|
1A3D3FC000
|
unkown
|
page read and write
|
|
|
|
1E864230000
|
unkown
|
page read and write
|
|
|
|
7FF563127000
|
unkown
|
page readonly
|
|
|
|
7FF588FD0000
|
unkown
|
page readonly
|
|
|
|
15DAB3C0000
|
unkown
|
page readonly
|
|
|
|
1E85F402000
|
unkown
|
page read and write
|
|
|
|
7FF589465000
|
unkown
|
page readonly
|
|
|
|
1EBE084D000
|
unkown
|
page read and write
|
|
|
|
1EBE1200000
|
unkown
|
page readonly
|
|
|
|
7FF563101000
|
unkown
|
page readonly
|
|
|
|
1E865000000
|
unkown
|
page read and write
|
|
|
|
7FF518F0C000
|
unkown
|
page readonly
|
|
|
|
97A64FF000
|
unkown
|
page read and write
|
|
|
|
1EBE0E60000
|
unkown
|
page readonly
|
|
|
|
A975D7A000
|
unkown
|
page read and write
|
|
|
|
15DAB280000
|
unkown
|
page readonly
|
|
|
|
15DAB8C0000
|
unkown
|
page readonly
|
|
|
|
1E864400000
|
unkown
|
page read and write
|
|
|
|
7FF518F20000
|
unkown
|
page readonly
|
|
|
|
1A3CEAC000
|
unkown
|
page read and write
|
|
|
|
7FF518E34000
|
unkown
|
page readonly
|
|
|
|
7FF589429000
|
unkown
|
page readonly
|
|
|
|
7FF563158000
|
unkown
|
page readonly
|
|
|
|
1E8640D0000
|
unkown
|
page read and write
|
|
|
|
1E8640B0000
|
unkown
|
page read and write
|
|
|
|
1E8641D0000
|
unkown
|
page read and write
|
|
|
|
7FF563249000
|
unkown
|
page readonly
|
|
|
|
7FF518F06000
|
unkown
|
page readonly
|
|
|
|
7FF518F81000
|
unkown
|
page readonly
|
|
|
|
7FF563010000
|
unkown
|
page readonly
|
|
|
|
7FF518EC5000
|
unkown
|
page readonly
|
|
|
|
7FF563019000
|
unkown
|
page readonly
|
|
|
|
1E8641F1000
|
unkown
|
page read and write
|
|
|
|
1E85ED02000
|
unkown
|
page read and write
|
|
|
|
7FF589415000
|
unkown
|
page readonly
|
|
|
|
7FF563249000
|
unkown
|
page readonly
|
|
|
|
7FF562E56000
|
unkown
|
page readonly
|
|
|
|
1EBE07F0000
|
unkown
|
page readonly
|
|
|
|
7FF5630B5000
|
unkown
|
page readonly
|
|
|
|
1E85EED0000
|
unkown
|
page readonly
|
|
|
|
1E864530000
|
unkown
|
page read and write
|
|
|
|
7FF56316A000
|
unkown
|
page readonly
|
|
|
|
1E8641F4000
|
unkown
|
page read and write
|
|
|
|
97A62FE000
|
unkown
|
page read and write
|
|
|
|
7FF562EFE000
|
unkown
|
page readonly
|
|
|
|
1E8641D8000
|
unkown
|
page read and write
|
|
|
|
15DACE80000
|
heap private
|
page read and write
|
|
|
|
1E85EC91000
|
unkown
|
page read and write
|
|
|
|
7FF56323E000
|
unkown
|
page readonly
|
|
|
|
7FF562E7A000
|
unkown
|
page readonly
|
|
|
|
7FF518F32000
|
unkown
|
page readonly
|
|
|
|
7FF5631AD000
|
unkown
|
page readonly
|
|
|
|
7FF563140000
|
unkown
|
page readonly
|
|
|
|
1E8644E0000
|
unkown
|
page read and write
|
|
|
|
97A63FD000
|
unkown
|
page read and write
|
|
|
|
1E864620000
|
unkown
|
page read and write
|
|
|
|
1E85EC00000
|
unkown
|
page read and write
|
|
|
|
7FF562DD7000
|
unkown
|
page readonly
|
|
|
|
7FF56312C000
|
unkown
|
page readonly
|
|
|
|
97A5BFF000
|
unkown
|
page read and write
|
|
|
|
7FF58941F000
|
unkown
|
page readonly
|
|
|
|
1EBE0851000
|
unkown
|
page read and write
|
|
|
|
7FF5894D9000
|
unkown
|
page readonly
|
|
|
|
7FF563142000
|
unkown
|
page readonly
|
|
|
|
1A3D27D000
|
unkown
|
page read and write
|
|
|
|
7FF518EBE000
|
unkown
|
page readonly
|
|
|
|
7FF5631CC000
|
unkown
|
page readonly
|
|
|
|
7FF518F27000
|
unkown
|
page readonly
|
|
|
|
15DAB530000
|
unkown
|
page readonly
|
|
|
|
1E85F400000
|
unkown
|
page read and write
|
|
|
|
1E85F518000
|
unkown
|
page read and write
|
|
|
|
7FF58945C000
|
unkown
|
page readonly
|
|
|
|
7FF5630BC000
|
unkown
|
page readonly
|
|
|
|
A9754AC000
|
unkown
|
page read and write
|
|
|
|
1EBE0E70000
|
unkown
|
page read and write
|
|
|
|
1E86429B000
|
unkown
|
page read and write
|
|
|
|
15DAB100000
|
unkown
|
page readonly
|
|
|
|
1E85EC76000
|
unkown
|
page read and write
|
|
|
|
1EBE06B0000
|
heap private
|
page read and write
|
|
|
|
7FF56318F000
|
unkown
|
page readonly
|
|
|
|
7FF5631E0000
|
unkown
|
page readonly
|
|
|
|
7FF58940E000
|
unkown
|
page readonly
|
|
|
|
97A5FFE000
|
unkown
|
page read and write
|
|
|
|
7FF563138000
|
unkown
|
page readonly
|
|
|
|
15DAB490000
|
unkown
|
page readonly
|
|
|
|
7FF5893E2000
|
unkown
|
page readonly
|
|
|
|
7FF5894D1000
|
unkown
|
page readonly
|
|
|
|
1E86429D000
|
unkown
|
page read and write
|
|
|
|
1EBE0813000
|
unkown
|
page read and write
|
|
|
|
1E85F3A0000
|
unkown
|
page readonly
|
|
|
|
7FF563117000
|
unkown
|
page readonly
|
|
|
|
1E85EC71000
|
unkown
|
page read and write
|
|
|
|
7FF5892ED000
|
unkown
|
page readonly
|
|
|
|
1E85ECFF000
|
unkown
|
page read and write
|
|
|
|
1E85F3F0000
|
unkown
|
page readonly
|
|
|
|
7FF518E2A000
|
unkown
|
page readonly
|
|
|
|
1E85FCC0000
|
unkown
|
page readonly
|
|
|
|
1E864530000
|
unkown
|
page readonly
|
|
|
|
1E85EC58000
|
unkown
|
page read and write
|
|
|
|
7FF5630E1000
|
unkown
|
page readonly
|
|
|
|
7FF589477000
|
unkown
|
page readonly
|
|
|
|
15DAB270000
|
unkown
|
page readonly
|
|
|
|
A975B7A000
|
unkown
|
page read and write
|
|
|
|
1E8642B3000
|
unkown
|
page read and write
|
|
|
|
7FF518E98000
|
unkown
|
page readonly
|
|
|
|
1A3CFAF000
|
unkown
|
page read and write
|
|
|
|
1E864580000
|
unkown
|
page readonly
|
|
|
|
7FF518ED9000
|
unkown
|
page readonly
|
|
|
|
7FF5628E8000
|
unkown
|
page readonly
|
|
|
|
15DAB2E7000
|
heap default
|
page read and write
|
|
|
|
A9758F7000
|
unkown
|
page read and write
|
|
|
|
7FF562DC0000
|
unkown
|
page readonly
|
|
|
|
1E86424E000
|
unkown
|
page read and write
|
|
|
|
7FF562EF7000
|
unkown
|
page readonly
|
|
|
|
1E8644D8000
|
unkown
|
page write copy
|
|
|
|
1EBE1002000
|
unkown
|
page read and write
|
|
|
|
1EBE0853000
|
unkown
|
page read and write
|
|
|
|
1E860030000
|
unkown
|
page read and write
|
|
|
|
A97607F000
|
unkown
|
page read and write
|
|
|
|
1E85FBE0000
|
unkown
|
page read and write
|
|
|
|
7FF518F15000
|
unkown
|
page readonly
|
|
|
|
7FF562E5C000
|
unkown
|
page readonly
|
|
|
|
7FF518E80000
|
unkown
|
page readonly
|
|
|
|
1EBE0720000
|
unkown
|
page readonly
|
|
|
|
1E8644B0000
|
unkown
|
page readonly
|
|
|
|
7FF562DDE000
|
unkown
|
page readonly
|
|
|
|
7FF563185000
|
unkown
|
page readonly
|
|
|
|
7FF518C0C000
|
unkown
|
page readonly
|
|
|
|
1E85F3B0000
|
unkown
|
page readonly
|
|
|
|
1E85EB90000
|
unkown
|
page readonly
|
|
|
|
7FF518F24000
|
unkown
|
page readonly
|
|
|
|
1E864570000
|
unkown
|
page readonly
|
|
|
|
15DACDF0000
|
heap private
|
page read and write
|
|
|
|
1E85F415000
|
unkown
|
page read and write
|
|
|
|
7FF562E4D000
|
unkown
|
page readonly
|
|
|
|
7FF518B9C000
|
unkown
|
page readonly
|
|
|
|
7FF588B78000
|
unkown
|
page readonly
|
|
|
|
1E8644DC000
|
unkown
|
page readonly
|
|
|
|
7FF562F05000
|
unkown
|
page readonly
|
|
|
|
7FF5630C7000
|
unkown
|
page readonly
|
|
|
|
A97597E000
|
unkown
|
page read and write
|
|
|
|
1E8640C0000
|
unkown
|
page read and write
|
|
|
|
7FF5893D2000
|
unkown
|
page readonly
|
|
|
|
97A61F7000
|
unkown
|
page read and write
|
|
|
|
1E864414000
|
unkown
|
page read and write
|
|
|
|
1E864400000
|
unkown
|
page read and write
|
|
|
|
1E864320000
|
unkown
|
page read and write
|
|
|
|
15DAB2C0000
|
heap default
|
page read and write
|
|
|
|
1E8644A0000
|
unkown
|
page write copy
|
|
There are 315 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.keepandshare.com/htm/contact_us.php
|
|
|
|
https://www.keepandshare.com/doc10/32417/enquest-covid-19-names-pdf-2k?da=y
|
|