Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
http://covid19.iqwasithealth.com/jillian-ratke-iii/kathy_edler-43.zip
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9C23E855-C057-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9C23E857-C057-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9C23E858-C057-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\beback-soon[1].png
|
PNG image data, 1430 x 982, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css2[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\beback-soon[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\suspended[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\suspended[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mem5YaGs126MiZpBA-UN_r8-Vg[1].woff
|
Web Open Font Format, TrueType, length 57032, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mem8YaGs126MiZpBA-U1UQ[1].woff
|
Web Open Font Format, TrueType, length 55324, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\suspendedpage[1].htm
|
HTML document, UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF0730CF74CFD88E68.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF2D0378F71AA387A3.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF1FEBD55FD9ECCDE.TMP
|
data
|
dropped
|
|
There are 14 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5464 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://covid19.iqwasithealth.com/cgi-sys/suspendedpage.cgi
|
50.87.248.41
|
|
|
|
http://covid19.iqwasithealth.com/cgi-sys/suspendedpage.cgiRoot
|
unknown
|
|
|
|
http://covid19.iqwasithealth.com/favicon.ico
|
50.87.248.41
|
|
|
|
http://covid19.iqwasithealth.com/cgi-sys/suspendedpage.cgi
|
|
||
|
http://covid19.iqwasithealth.com/jillian-ratke-iii/kathy_edler-43.zip
|
50.87.248.41
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://bluehost-cdn.com/media/user/suspended_account/_bh/suspended.css
|
52.29.153.112
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://bluehost-cdn.com/media/user/suspended_account/_bh/beback-soon.png
|
52.29.153.112
|
|
There are 4 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
covid19.iqwasithealth.com
|
50.87.248.41
|
|
|
|
bluehost-cdn.com
|
52.29.153.112
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
50.87.248.41
|
covid19.iqwasithealth.com
|
United States
|
|
|
|
52.29.153.112
|
bluehost-cdn.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{9C23E855-C057-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-903
|
|
There are 17 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5B8B6C000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C7F000
|
unkown
|
page readonly
|
|
|
|
7FF579909000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D48000
|
unkown
|
page readonly
|
|
|
|
24D4B2D7000
|
heap default
|
page read and write
|
|
|
|
7FF5B8BF8000
|
unkown
|
page readonly
|
|
|
|
22872600000
|
unkown
|
page read and write
|
|
|
|
C5D00FF000
|
unkown
|
page read and write
|
|
|
|
24230900000
|
unkown
|
page read and write
|
|
|
|
C5CFAFE000
|
unkown
|
page read and write
|
|
|
|
7FF5790A4000
|
unkown
|
page readonly
|
|
|
|
7FF4F1AFE000
|
unkown
|
page readonly
|
|
|
|
7FF57951C000
|
unkown
|
page readonly
|
|
|
|
22AA8250000
|
heap default
|
page read and write
|
|
|
|
7FF557900000
|
unkown
|
page readonly
|
|
|
|
22AA8600000
|
unkown
|
page readonly
|
|
|
|
7FF5B8CB7000
|
unkown
|
page readonly
|
|
|
|
19E1FD00000
|
unkown
|
page read and write
|
|
|
|
7FF5920E8000
|
unkown
|
page readonly
|
|
|
|
19E1FC3C000
|
unkown
|
page read and write
|
|
|
|
19E1FC9B000
|
unkown
|
page read and write
|
|
|
|
4C1967E000
|
unkown
|
page read and write
|
|
|
|
7FF4F1D31000
|
unkown
|
page readonly
|
|
|
|
7FF5BE5B5000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D89000
|
unkown
|
page readonly
|
|
|
|
7FF5797AA000
|
unkown
|
page readonly
|
|
|
|
3D18B7E000
|
unkown
|
page read and write
|
|
|
|
1BCE67F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B84BB000
|
unkown
|
page readonly
|
|
|
|
1BCE6965000
|
heap private
|
page read and write
|
|
|
|
22AA8400000
|
unkown
|
page read and write
|
|
|
|
24230029000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D42000
|
unkown
|
page readonly
|
|
|
|
19E1FBC0000
|
unkown
|
page read and write
|
|
|
|
5A237FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F1CC5000
|
unkown
|
page readonly
|
|
|
|
7FF557C37000
|
unkown
|
page readonly
|
|
|
|
7FF5BE572000
|
unkown
|
page readonly
|
|
|
|
24230800000
|
unkown
|
page read and write
|
|
|
|
242357A0000
|
unkown
|
page read and write
|
|
|
|
19E20600000
|
unkown
|
page readonly
|
|
|
|
C5D047D000
|
unkown
|
page read and write
|
|
|
|
22AA845F000
|
unkown
|
page read and write
|
|
|
|
24230074000
|
unkown
|
page read and write
|
|
|
|
7FF4F1B77000
|
unkown
|
page readonly
|
|
|
|
22AA8508000
|
unkown
|
page read and write
|
|
|
|
24231100000
|
unkown
|
page readonly
|
|
|
|
22AA845C000
|
unkown
|
page read and write
|
|
|
|
24230FF0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5FC000
|
unkown
|
page readonly
|
|
|
|
24D4B510000
|
unkown
|
page readonly
|
|
|
|
7FF5B8C09000
|
unkown
|
page readonly
|
|
|
|
24235640000
|
unkown
|
page read and write
|
|
|
|
24230913000
|
unkown
|
page read and write
|
|
|
|
19E1FB30000
|
heap private
|
page read and write
|
|
|
|
7FF5B8BF1000
|
unkown
|
page readonly
|
|
|
|
7FF5B8971000
|
unkown
|
page readonly
|
|
|
|
7FF579800000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A3D000
|
unkown
|
page readonly
|
|
|
|
C5D007B000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C9D000
|
unkown
|
page readonly
|
|
|
|
5255F7E000
|
unkown
|
page read and write
|
|
|
|
4B8448B000
|
unkown
|
page read and write
|
|
|
|
2287262A000
|
unkown
|
page read and write
|
|
|
|
7FF557D76000
|
unkown
|
page readonly
|
|
|
|
7FF57983E000
|
unkown
|
page readonly
|
|
|
|
24D4B301000
|
unkown
|
page read and write
|
|
|
|
7FF5B8C00000
|
unkown
|
page readonly
|
|
|
|
24D4B301000
|
unkown
|
page read and write
|
|
|
|
7FF5B8DAC000
|
unkown
|
page readonly
|
|
|
|
22AA8A60000
|
unkown
|
page readonly
|
|
|
|
7FF5BE5BF000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AE7000
|
unkown
|
page readonly
|
|
|
|
C5CFBF7000
|
unkown
|
page read and write
|
|
|
|
7FF59210E000
|
unkown
|
page readonly
|
|
|
|
24D4B2FB000
|
unkown
|
page read and write
|
|
|
|
7FF579802000
|
unkown
|
page readonly
|
|
|
|
24235684000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5C9000
|
unkown
|
page readonly
|
|
|
|
22AA8340000
|
unkown
|
page readonly
|
|
|
|
7FF5BE180000
|
unkown
|
page readonly
|
|
|
|
242354B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5F6000
|
unkown
|
page readonly
|
|
|
|
24235770000
|
unkown
|
page read and write
|
|
|
|
7FF592115000
|
unkown
|
page readonly
|
|
|
|
24235780000
|
unkown
|
page read and write
|
|
|
|
22AA8350000
|
unkown
|
page read and write
|
|
|
|
7FF57987C000
|
unkown
|
page readonly
|
|
|
|
22AA8330000
|
unkown
|
page readonly
|
|
|
|
19E1FC5D000
|
unkown
|
page read and write
|
|
|
|
7FF579901000
|
unkown
|
page readonly
|
|
|
|
19E1FBA0000
|
unkown
|
page readonly
|
|
|
|
7FF5B8BBF000
|
unkown
|
page readonly
|
|
|
|
7FF5BE4B1000
|
unkown
|
page readonly
|
|
|
|
7FF557D1A000
|
unkown
|
page readonly
|
|
|
|
1BCE6910000
|
unkown
|
page readonly
|
|
|
|
2423583F000
|
unkown
|
page read and write
|
|
|
|
7FF5B8CAC000
|
unkown
|
page readonly
|
|
|
|
7FF557B1A000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C46000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CD0000
|
unkown
|
page readonly
|
|
|
|
24230056000
|
unkown
|
page read and write
|
|
|
|
22AA8260000
|
unkown
|
page readonly
|
|
|
|
19E1FD13000
|
unkown
|
page read and write
|
|
|
|
7FF557C31000
|
unkown
|
page readonly
|
|
|
|
7FF59213D000
|
unkown
|
page readonly
|
|
|
|
5A236FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B84CF000
|
unkown
|
page readonly
|
|
|
|
4B8450D000
|
unkown
|
page read and write
|
|
|
|
7FF5BE468000
|
unkown
|
page readonly
|
|
|
|
2287263C000
|
unkown
|
page read and write
|
|
|
|
2423584C000
|
unkown
|
page read and write
|
|
|
|
7FF557D08000
|
unkown
|
page readonly
|
|
|
|
24230958000
|
unkown
|
page read and write
|
|
|
|
7FF5BE4B7000
|
unkown
|
page readonly
|
|
|
|
7FF5798AD000
|
unkown
|
page readonly
|
|
|
|
7FF5B8DD7000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CD7000
|
unkown
|
page readonly
|
|
|
|
C5D067F000
|
unkown
|
page read and write
|
|
|
|
C5D027F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5EC000
|
unkown
|
page readonly
|
|
|
|
7FF57981A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE586000
|
unkown
|
page readonly
|
|
|
|
7FF557DF9000
|
unkown
|
page readonly
|
|
|
|
19E20402000
|
unkown
|
page read and write
|
|
|
|
24235790000
|
unkown
|
page read and write
|
|
|
|
C5D057C000
|
unkown
|
page read and write
|
|
|
|
24230959000
|
unkown
|
page read and write
|
|
|
|
1BCE65EB000
|
heap default
|
page read and write
|
|
|
|
7FF557D7C000
|
unkown
|
page readonly
|
|
|
|
1BCE6800000
|
unkown
|
page readonly
|
|
|
|
24230B01000
|
unkown
|
page read and write
|
|
|
|
7FF5797AE000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CD4000
|
unkown
|
page readonly
|
|
|
|
242300F9000
|
unkown
|
page read and write
|
|
|
|
24235855000
|
unkown
|
page read and write
|
|
|
|
1BCE6930000
|
unkown
|
page readonly
|
|
|
|
1BCE6607000
|
heap default
|
page read and write
|
|
|
|
19E1FC13000
|
unkown
|
page read and write
|
|
|
|
7FF5920EA000
|
unkown
|
page readonly
|
|
|
|
242358AD000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A46000
|
unkown
|
page readonly
|
|
|
|
22872800000
|
unkown
|
page readonly
|
|
|
|
7FF5B8CA5000
|
unkown
|
page readonly
|
|
|
|
19E1FC00000
|
unkown
|
page read and write
|
|
|
|
7FF5921D1000
|
unkown
|
page readonly
|
|
|
|
24230660000
|
unkown
|
page readonly
|
|
|
|
2287265C000
|
unkown
|
page read and write
|
|
|
|
22872713000
|
unkown
|
page read and write
|
|
|
|
7FF5BE4EC000
|
unkown
|
page readonly
|
|
|
|
4C1913D000
|
unkown
|
page read and write
|
|
|
|
5A2397E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8BDE000
|
unkown
|
page readonly
|
|
|
|
24D4B2EA000
|
unkown
|
page read and write
|
|
|
|
4B849FB000
|
unkown
|
page read and write
|
|
|
|
24235661000
|
unkown
|
page read and write
|
|
|
|
2423573C000
|
unkown
|
page readonly
|
|
|
|
24230730000
|
unkown
|
page readonly
|
|
|
|
24230113000
|
unkown
|
page read and write
|
|
|
|
2423006C000
|
unkown
|
page read and write
|
|
|
|
5A239FF000
|
unkown
|
page read and write
|
|
|
|
C5CFD7A000
|
unkown
|
page read and write
|
|
|
|
7FF5B851F000
|
unkown
|
page readonly
|
|
|
|
7FF557C6C000
|
unkown
|
page readonly
|
|
|
|
7FF592156000
|
unkown
|
page readonly
|
|
|
|
19E1FC53000
|
unkown
|
page read and write
|
|
|
|
7FF4F14D2000
|
unkown
|
page readonly
|
|
|
|
24230047000
|
unkown
|
page read and write
|
|
|
|
19E1FC4B000
|
unkown
|
page read and write
|
|
|
|
24235540000
|
unkown
|
page read and write
|
|
|
|
24235888000
|
unkown
|
page read and write
|
|
|
|
24D4B1A0000
|
unkown
|
page readonly
|
|
|
|
4C191BE000
|
unkown
|
page read and write
|
|
|
|
7FF5B8B9E000
|
unkown
|
page readonly
|
|
|
|
7FF557DF1000
|
unkown
|
page readonly
|
|
|
|
24235670000
|
unkown
|
page read and write
|
|
|
|
2423003D000
|
unkown
|
page read and write
|
|
|
|
24D4B4E0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B43000
|
unkown
|
page readonly
|
|
|
|
2423589A000
|
unkown
|
page read and write
|
|
|
|
5255CFE000
|
unkown
|
page read and write
|
|
|
|
22AA849E000
|
unkown
|
page read and write
|
|
|
|
7FF557D5D000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B00000
|
unkown
|
page readonly
|
|
|
|
1BCE65E0000
|
heap default
|
page read and write
|
|
|
|
228725E0000
|
unkown
|
page readonly
|
|
|
|
24230750000
|
unkown
|
page read and write
|
|
|
|
22872688000
|
unkown
|
page read and write
|
|
|
|
7FF5BE605000
|
unkown
|
page readonly
|
|
|
|
7FF592129000
|
unkown
|
page readonly
|
|
|
|
2422FFE0000
|
heap default
|
page read and write
|
|
|
|
3D182CB000
|
unkown
|
page read and write
|
|
|
|
24230102000
|
unkown
|
page read and write
|
|
|
|
24235710000
|
unkown
|
page read and write
|
|
|
|
242310F0000
|
unkown
|
page readonly
|
|
|
|
7FF5578EA000
|
unkown
|
page readonly
|
|
|
|
3D18977000
|
unkown
|
page read and write
|
|
|
|
242357F0000
|
unkown
|
page readonly
|
|
|
|
7FF557D90000
|
unkown
|
page readonly
|
|
|
|
7FF5B8E39000
|
unkown
|
page readonly
|
|
|
|
7FF557D49000
|
unkown
|
page readonly
|
|
|
|
24231471000
|
unkown
|
page read and write
|
|
|
|
19E1FD08000
|
unkown
|
page read and write
|
|
|
|
7FF5BE483000
|
unkown
|
page readonly
|
|
|
|
7FF5790F7000
|
unkown
|
page readonly
|
|
|
|
7FF5798B2000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AF5000
|
unkown
|
page readonly
|
|
|
|
24D4B301000
|
unkown
|
page read and write
|
|
|
|
7FF5BE39A000
|
unkown
|
page readonly
|
|
|
|
7FF557BCA000
|
unkown
|
page readonly
|
|
|
|
22AA8429000
|
unkown
|
page read and write
|
|
|
|
C5D01FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B8675000
|
unkown
|
page readonly
|
|
|
|
7FF4F1840000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A4C000
|
unkown
|
page readonly
|
|
|
|
22AA8502000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C6E000
|
unkown
|
page readonly
|
|
|
|
22872702000
|
unkown
|
page read and write
|
|
|
|
24235760000
|
unkown
|
page read and write
|
|
|
|
7FF592172000
|
unkown
|
page readonly
|
|
|
|
7FF59214C000
|
unkown
|
page readonly
|
|
|
|
19E1FED0000
|
unkown
|
page readonly
|
|
|
|
4B848F5000
|
unkown
|
page read and write
|
|
|
|
24235862000
|
unkown
|
page read and write
|
|
|
|
7FF5B8ABC000
|
unkown
|
page readonly
|
|
|
|
242310E0000
|
unkown
|
page readonly
|
|
|
|
7FF579871000
|
unkown
|
page readonly
|
|
|
|
7FF557BBE000
|
unkown
|
page readonly
|
|
|
|
24230F10000
|
unkown
|
page read and write
|
|
|
|
228728D0000
|
unkown
|
page readonly
|
|
|
|
24235AC0000
|
unkown
|
page readonly
|
|
|
|
24D4B505000
|
heap private
|
page read and write
|
|
|
|
2423564E000
|
unkown
|
page read and write
|
|
|
|
7FF5BE671000
|
unkown
|
page readonly
|
|
|
|
7FF5B84C4000
|
unkown
|
page readonly
|
|
|
|
C5D037F000
|
unkown
|
page read and write
|
|
|
|
52559CC000
|
unkown
|
page read and write
|
|
|
|
1BCE66E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B89C7000
|
unkown
|
page readonly
|
|
|
|
24231110000
|
unkown
|
page readonly
|
|
|
|
C5CFC7E000
|
unkown
|
page read and write
|
|
|
|
3D18A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D17000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D07000
|
unkown
|
page readonly
|
|
|
|
1BCE6900000
|
heap private
|
page read and write
|
|
|
|
24230815000
|
unkown
|
page read and write
|
|
|
|
7FF557D94000
|
unkown
|
page readonly
|
|
|
|
24D4B3D0000
|
unkown
|
page read and write
|
|
|
|
1BCE8550000
|
heap private
|
page read and write
|
|
|
|
7FF579816000
|
unkown
|
page readonly
|
|
|
|
C5CFE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B8AEE000
|
unkown
|
page readonly
|
|
|
|
24235AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5921D9000
|
unkown
|
page readonly
|
|
|
|
2423008E000
|
unkown
|
page read and write
|
|
|
|
24235670000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5DD000
|
unkown
|
page readonly
|
|
|
|
228725D0000
|
heap default
|
page read and write
|
|
|
|
7FF5BE582000
|
unkown
|
page readonly
|
|
|
|
7FF5921CE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE59A000
|
unkown
|
page readonly
|
|
|
|
7FF4F1830000
|
unkown
|
page readonly
|
|
|
|
7FF5797B4000
|
unkown
|
page readonly
|
|
|
|
24231130000
|
unkown
|
page readonly
|
|
|
|
24230740000
|
unkown
|
page read and write
|
|
|
|
7FF5790A2000
|
unkown
|
page readonly
|
|
|
|
7FF5BDD14000
|
unkown
|
page readonly
|
|
|
|
7FF557C03000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A08000
|
unkown
|
page readonly
|
|
|
|
7FF5BE570000
|
unkown
|
page readonly
|
|
|
|
1BCE8290000
|
heap private
|
page read and write
|
|
|
|
7FF5B8E2E000
|
unkown
|
page readonly
|
|
|
|
242300A9000
|
unkown
|
page read and write
|
|
|
|
24D4B200000
|
unkown
|
page readonly
|
|
|
|
24231120000
|
unkown
|
page readonly
|
|
|
|
7FF5B8CF1000
|
unkown
|
page readonly
|
|
|
|
24D4B3F0000
|
unkown
|
page read and write
|
|
|
|
7FF59215C000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B5B000
|
unkown
|
page readonly
|
|
|
|
7FF4F1D39000
|
unkown
|
page readonly
|
|
|
|
4B84D7E000
|
unkown
|
page read and write
|
|
|
|
7FF557D06000
|
unkown
|
page readonly
|
|
|
|
7FF557D3F000
|
unkown
|
page readonly
|
|
|
|
24235883000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D7F000
|
unkown
|
page readonly
|
|
|
|
7FF557D6C000
|
unkown
|
page readonly
|
|
|
|
242354A0000
|
unkown
|
page read and write
|
|
|
|
4C1987E000
|
unkown
|
page read and write
|
|
|
|
7FF4F1D2E000
|
unkown
|
page readonly
|
|
|
|
5255C7E000
|
unkown
|
page read and write
|
|
|
|
24230918000
|
unkown
|
page read and write
|
|
|
|
7FF5BE16A000
|
unkown
|
page readonly
|
|
|
|
5255E7E000
|
unkown
|
page read and write
|
|
|
|
22AA843C000
|
unkown
|
page read and write
|
|
|
|
19E1FB90000
|
heap default
|
page read and write
|
|
|
|
22AA81F0000
|
heap private
|
page read and write
|
|
|
|
7FF4F1C32000
|
unkown
|
page readonly
|
|
|
|
7FF57988C000
|
unkown
|
page readonly
|
|
|
|
228725F0000
|
unkown
|
page readonly
|
|
|
|
1BCE838F000
|
heap private
|
page read and write
|
|
|
|
24235520000
|
unkown
|
page read and write
|
|
|
|
7FF5BE43E000
|
unkown
|
page readonly
|
|
|
|
24235724000
|
unkown
|
page readonly
|
|
|
|
7FF557D35000
|
unkown
|
page readonly
|
|
|
|
1BCE6920000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D5A000
|
unkown
|
page readonly
|
|
|
|
7FF5B84D4000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CB6000
|
unkown
|
page readonly
|
|
|
|
3D1834E000
|
unkown
|
page read and write
|
|
|
|
7FF557D97000
|
unkown
|
page readonly
|
|
|
|
7FF5B89B0000
|
unkown
|
page readonly
|
|
|
|
24235720000
|
unkown
|
page readonly
|
|
|
|
24235640000
|
unkown
|
page read and write
|
|
|
|
1BCE68C0000
|
unkown
|
page readonly
|
|
|
|
242357A0000
|
unkown
|
page read and write
|
|
|
|
19E1FC6F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE617000
|
unkown
|
page readonly
|
|
|
|
7FF57982A000
|
unkown
|
page readonly
|
|
|
|
242358A3000
|
unkown
|
page read and write
|
|
|
|
7FF557CF0000
|
unkown
|
page readonly
|
|
|
|
7FF5921D9000
|
unkown
|
page readonly
|
|
|
|
22872602000
|
unkown
|
page read and write
|
|
|
|
22AA8500000
|
unkown
|
page read and write
|
|
|
|
C5CF7BC000
|
unkown
|
page read and write
|
|
|
|
1BCE6970000
|
unkown
|
page readonly
|
|
|
|
7FF5BE614000
|
unkown
|
page readonly
|
|
|
|
4B8458E000
|
unkown
|
page read and write
|
|
|
|
22872D30000
|
unkown
|
page read and write
|
|
|
|
C5CFA7D000
|
unkown
|
page read and write
|
|
|
|
1BCE661B000
|
heap default
|
page read and write
|
|
|
|
7FF5B8D46000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B78000
|
unkown
|
page readonly
|
|
|
|
242358C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D32000
|
unkown
|
page readonly
|
|
|
|
7FF57958C000
|
unkown
|
page readonly
|
|
|
|
4C1997E000
|
unkown
|
page read and write
|
|
|
|
242300B7000
|
unkown
|
page read and write
|
|
|
|
22872C60000
|
unkown
|
page readonly
|
|
|
|
7FF57986D000
|
unkown
|
page readonly
|
|
|
|
3D1887B000
|
unkown
|
page read and write
|
|
|
|
24235530000
|
unkown
|
page read and write
|
|
|
|
19E1FD02000
|
unkown
|
page read and write
|
|
|
|
7FF5B8DA6000
|
unkown
|
page readonly
|
|
|
|
7FF579876000
|
unkown
|
page readonly
|
|
|
|
C5D02FF000
|
unkown
|
page read and write
|
|
|
|
19E1FBB0000
|
unkown
|
page readonly
|
|
|
|
5255EFC000
|
unkown
|
page read and write
|
|
|
|
7FF4F182A000
|
unkown
|
page readonly
|
|
|
|
4B84A7E000
|
unkown
|
page read and write
|
|
|
|
22873000000
|
unkown
|
page readonly
|
|
|
|
3D186FC000
|
unkown
|
page read and write
|
|
|
|
24235800000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D30000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B71000
|
unkown
|
page readonly
|
|
|
|
7FF557CF2000
|
unkown
|
page readonly
|
|
|
|
4C19777000
|
unkown
|
page read and write
|
|
|
|
24235738000
|
unkown
|
page write copy
|
|
|
|
1BCE6580000
|
unkown
|
page readonly
|
|
|
|
22872570000
|
heap private
|
page read and write
|
|
|
|
7FF5B8A4F000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3FF000
|
unkown
|
page readonly
|
|
|
|
5A2367C000
|
unkown
|
page read and write
|
|
|
|
22AA8413000
|
unkown
|
page read and write
|
|
|
|
7FF5798A7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE5AE000
|
unkown
|
page readonly
|
|
|
|
24D4B2FC000
|
unkown
|
page read and write
|
|
|
|
7FF5B8DBC000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A6A000
|
unkown
|
page readonly
|
|
|
|
7FF4F1CAC000
|
unkown
|
page readonly
|
|
|
|
24235A90000
|
unkown
|
page read and write
|
|
|
|
7FF5BE679000
|
unkown
|
page readonly
|
|
|
|
7FF557D02000
|
unkown
|
page readonly
|
|
|
|
7FF5B85D1000
|
unkown
|
page readonly
|
|
|
|
2423581E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D1C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE170000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C75000
|
unkown
|
page readonly
|
|
|
|
2423008A000
|
unkown
|
page read and write
|
|
|
|
22AA8459000
|
unkown
|
page read and write
|
|
|
|
7FF5BDE12000
|
unkown
|
page readonly
|
|
|
|
24230918000
|
unkown
|
page read and write
|
|
|
|
24D4B500000
|
heap private
|
page read and write
|
|
|
|
4C194F5000
|
unkown
|
page read and write
|
|
|
|
242357A0000
|
unkown
|
page read and write
|
|
|
|
24235A80000
|
unkown
|
page readonly
|
|
|
|
242314A0000
|
unkown
|
page read and write
|
|
|
|
5255D7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F13D4000
|
unkown
|
page readonly
|
|
|
|
242302D0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE588000
|
unkown
|
page readonly
|
|
|
|
7FF579859000
|
unkown
|
page readonly
|
|
|
|
2287268D000
|
unkown
|
page read and write
|
|
|
|
3D1877D000
|
unkown
|
page read and write
|
|
|
|
7FF5BE610000
|
unkown
|
page readonly
|
|
|
|
24235680000
|
unkown
|
page read and write
|
|
|
|
1BCE67D0000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C48000
|
unkown
|
page readonly
|
|
|
|
7FF5798FE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE48D000
|
unkown
|
page readonly
|
|
|
|
7FF5B8627000
|
unkown
|
page readonly
|
|
|
|
1BCE6D00000
|
unkown
|
page readonly
|
|
|
|
1BCE662A000
|
unkown
|
page read and write
|
|
|
|
7FF4F1CA6000
|
unkown
|
page readonly
|
|
|
|
2423009A000
|
unkown
|
page read and write
|
|
|
|
24230200000
|
unkown
|
page readonly
|
|
|
|
24235664000
|
unkown
|
page read and write
|
|
|
|
7FF5798A4000
|
unkown
|
page readonly
|
|
|
|
7FF5B8E39000
|
unkown
|
page readonly
|
|
|
|
24230013000
|
unkown
|
page read and write
|
|
|
|
24235648000
|
unkown
|
page read and write
|
|
|
|
4B84B77000
|
unkown
|
page read and write
|
|
|
|
7FF579909000
|
unkown
|
page readonly
|
|
|
|
7FF5B850B000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B0A000
|
unkown
|
page readonly
|
|
|
|
22AA8497000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D75000
|
unkown
|
page readonly
|
|
|
|
22AA8452000
|
unkown
|
page read and write
|
|
|
|
24231493000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C89000
|
unkown
|
page readonly
|
|
|
|
4B84C7F000
|
unkown
|
page read and write
|
|
|
|
7FF4F1C42000
|
unkown
|
page readonly
|
|
|
|
7FF5B8E30000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D28000
|
unkown
|
page readonly
|
|
|
|
19E1FC49000
|
unkown
|
page read and write
|
|
|
|
7FF5578F0000
|
unkown
|
page readonly
|
|
|
|
22872670000
|
unkown
|
page read and write
|
|
|
|
7FF557DEE000
|
unkown
|
page readonly
|
|
|
|
2423582B000
|
unkown
|
page read and write
|
|
|
|
7FF5B8DB6000
|
unkown
|
page readonly
|
|
|
|
7FF557D66000
|
unkown
|
page readonly
|
|
|
|
19E1FC29000
|
unkown
|
page read and write
|
|
|
|
242310D0000
|
unkown
|
page readonly
|
|
|
|
7FF579818000
|
unkown
|
page readonly
|
|
|
|
24235750000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5E6000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B28000
|
unkown
|
page readonly
|
|
|
|
7FF5B8DA1000
|
unkown
|
page readonly
|
|
|
|
24235A00000
|
unkown
|
page readonly
|
|
|
|
7FF5BE44A000
|
unkown
|
page readonly
|
|
|
|
24230802000
|
unkown
|
page read and write
|
|
|
|
22AA8464000
|
unkown
|
page read and write
|
|
|
|
24230000000
|
unkown
|
page read and write
|
|
|
|
7FF4F1ABF000
|
unkown
|
page readonly
|
|
|
|
7FF592146000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D6E000
|
unkown
|
page readonly
|
|
|
|
5A2377E000
|
unkown
|
page read and write
|
|
|
|
19E1FC5D000
|
unkown
|
page read and write
|
|
|
|
7FF557BE8000
|
unkown
|
page readonly
|
|
|
|
C5CFF7E000
|
unkown
|
page read and write
|
|
|
|
24235811000
|
unkown
|
page read and write
|
|
|
|
1BCE8240000
|
heap private
|
page read and write
|
|
|
|
19E1FC4E000
|
unkown
|
page read and write
|
|
|
|
7FF557D85000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C5A000
|
unkown
|
page readonly
|
|
|
|
24231490000
|
unkown
|
page read and write
|
|
|
|
24D4B2E5000
|
unkown
|
page read and write
|
|
|
|
7FF4F1CBC000
|
unkown
|
page readonly
|
|
|
|
7FF557B7F000
|
unkown
|
page readonly
|
|
|
|
7FF5BE66E000
|
unkown
|
page readonly
|
|
|
|
24230076000
|
unkown
|
page read and write
|
|
|
|
22AA8C02000
|
unkown
|
page read and write
|
|
|
|
4C190BC000
|
unkown
|
page read and write
|
|
|
|
24230902000
|
unkown
|
page read and write
|
|
|
|
242357A0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE679000
|
unkown
|
page readonly
|
|
|
|
1BCE67B0000
|
unkown
|
page read and write
|
|
|
|
242354F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B8D9D000
|
unkown
|
page readonly
|
|
|
|
C5D017E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8DC5000
|
unkown
|
page readonly
|
|
|
|
7FF579845000
|
unkown
|
page readonly
|
|
|
|
3D183CE000
|
unkown
|
page read and write
|
|
|
|
22872E02000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A5A000
|
unkown
|
page readonly
|
|
|
|
7FF4F1C30000
|
unkown
|
page readonly
|
|
|
|
7FF579583000
|
unkown
|
page readonly
|
|
|
|
7FF5B8CE7000
|
unkown
|
page readonly
|
|
|
|
7FF5B8DD4000
|
unkown
|
page readonly
|
|
|
|
7FF4F1BAC000
|
unkown
|
page readonly
|
|
|
|
2422FF80000
|
heap private
|
page read and write
|
|
|
|
7FF557DF9000
|
unkown
|
page readonly
|
|
|
|
22872613000
|
unkown
|
page read and write
|
|
|
|
7FF5BDD1A000
|
unkown
|
page readonly
|
|
|
|
7FF579895000
|
unkown
|
page readonly
|
|
|
|
22AA8E00000
|
unkown
|
page readonly
|
|
|
|
7FF557D2E000
|
unkown
|
page readonly
|
|
|
|
7FF5B8BEC000
|
unkown
|
page readonly
|
|
|
|
4C195FB000
|
unkown
|
page read and write
|
|
|
|
7FF4F13DA000
|
unkown
|
page readonly
|
|
|
|
24230088000
|
unkown
|
page read and write
|
|
|
|
7FF5B8D13000
|
unkown
|
page readonly
|
|
|
|
7FF5B8975000
|
unkown
|
page readonly
|
|
|
|
7FF579886000
|
unkown
|
page readonly
|
|
|
|
7FF5B8CD1000
|
unkown
|
page readonly
|
|
|
|
7FF557C0D000
|
unkown
|
page readonly
|
|
|
|
24235710000
|
unkown
|
page write copy
|
|
|
|
1BCE6604000
|
heap default
|
page read and write
|
|
|
|
19E20940000
|
unkown
|
page readonly
|
|
|
|
24230071000
|
unkown
|
page read and write
|
|
|
|
7FF4F1D39000
|
unkown
|
page readonly
|
|
|
|
2422FFF0000
|
unkown
|
page readonly
|
|
|
|
1BCE6960000
|
heap private
|
page read and write
|
|
|
|
7FF5B8DD0000
|
unkown
|
page readonly
|
|
|
|
242357A0000
|
unkown
|
page readonly
|
|
|
|
5A238FF000
|
unkown
|
page read and write
|
|
|
|
242357E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B89CE000
|
unkown
|
page readonly
|
|
|
|
7FF592165000
|
unkown
|
page readonly
|
|
|
|
24235714000
|
unkown
|
page readonly
|
|
|
|
7FF5798A0000
|
unkown
|
page readonly
|
|
|
|
24235660000
|
unkown
|
page read and write
|
|
|
|
2287268F000
|
unkown
|
page read and write
|
|
|
|
7FF5B8CFB000
|
unkown
|
page readonly
|
|
|
|
19E1FE00000
|
unkown
|
page readonly
|
|
|
|
22AA8513000
|
unkown
|
page read and write
|
|
|
|
24D4B2D0000
|
heap default
|
page read and write
|
|
There are 506 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
http://covid19.iqwasithealth.com/cgi-sys/suspendedpage.cgi
|
|