Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%\microsoft\internet explorer\msimgsiz.dat
- %LOCALAPPDATA%\microsoft\internet explorer\domstore\index.dat
- %LOCALAPPDATA%\microsoft\internet explorer\domstore\cpxcd8h8\www.baidu[1].xml
- %APPDATA%\microsoft\internet explorer\userdata\index.dat
- %APPDATA%\microsoft\internet explorer\userdata\gci18nqe\userdatabidupsid[1].xml
Сетевая активность
Подключается к
- 'ba##u.com':80
- 'qu##wg.com':80
- 'qu##wg.com':443
- 'ps#.##static.com':443
- 'x1.#.lencr.org':80
- 'ps#####c.cdn.bcebos.com':443
- 'ps#.##static.com':80
- 'gi###.baidu.com':443
- 't1#.#aidu.com':443
- 't9.##idu.com':443
- 't7.##idu.com':443
- 't8.##idu.com':443
- 'he#####tatic.baidu.com':443
TCP
Запросы HTTP GET
- http://www.ba##u.com/
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-shop/index_d3c755b0.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-shop/tokens_134522e9.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-medical/index_ecf8427e.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-education/index_ecf8427e.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-medical/tokens_75516ff2.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-education/tokens_107433b3.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-dqa/index_9cd704bf.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-dqa/tokens_08dd699a.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-card/index_c3e6e1d4.css
- http://gi###.baidu.com/topone/src=https%3A%2F%2Fbkimg.cdn.bcebos.com%2Fsmart%2Ffc1f4134970a304e5eb2af96d0c8a786c8175ccd-bkimg-process%2Cv_1%2Crw_1%2Crh_1%2Cmaxl_800%2Cpad_1%3Fx-bce-process%3Dim...
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic/index_6954b244.css
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic/tokens_13950226.css
- http://www.ba##u.com/img/flexible/logo/pc/peak-result.png
- http://www.ba##u.com/img/flexible/logo/pc/result@2.png
- http://www.ba##u.com/img/flexible/logo/pc/result.png
- http://www.ba##u.com/img/bd_logo1.png
- http://m.##idu.com/se/static/font/cicon.eot?t=#############
- http://x1.#.lencr.org/
- http://www.ba##u.com/s?wd#########
- http://www.qu##wg.com/
- http://ps#.##static.com/r/www/cache/static/@baidu/cosmic-card/tokens_583a0c6c.css
- http://he#####tatic.baidu.com/cd37ed75a9387c5b.js
Другие
- 'qu##wg.com':443
- 'ps#.##static.com':443
- 'ps#####c.cdn.bcebos.com':443
- 'gi###.baidu.com':443
- 't8.##idu.com':443
- 't1#.#aidu.com':443
UDP
- DNS ASK pp##89.com
- DNS ASK gj##5.com
- DNS ASK qu##wg.com
- DNS ASK ba##u.com
- DNS ASK ps#.##static.com
- DNS ASK x1.#.lencr.org
- DNS ASK m.##idu.com
- DNS ASK ps#####c.cdn.bcebos.com
- DNS ASK gi###.baidu.com
- DNS ASK t7.##idu.com
- DNS ASK t1#.#aidu.com
- DNS ASK t9.##idu.com
- DNS ASK t8.##idu.com
- DNS ASK he#####tatic.baidu.com
Другое
Ищет следующие окна
- ClassName: '#32770' WindowName: 'Windows ÈÎÎñ¹ÜÀГÆ÷'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
