Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-694ef4e4-8b0.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-694ef4e7-f34.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\492ef11ba17de055_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\346e48d33b41718f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\8f3bb6b865053484_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f575bf87e43e1740_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\112003c34cf13e38_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3d7c8cc07f262412_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9b51bd3b5d8b81cc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\08f270c7df53fb36_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3b03970f4e8ac3ef_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0b649a825233157d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000009
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000a
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000c
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\789c7767b82301a4_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\0a4078dfb6efe55b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\fe8f1305e87792a9_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\dda89a8818473feb_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a2e542a126492910_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000d
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000e
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000f
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000010
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a8524542196b7511_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e8d1222ac3f9d625_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f310d520514d6d27_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b5322e81b5c3292d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\90df28c14d26d865_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4f230e509bb39653_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5ede6ec8c85530d8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f8d2bb453b2bd621_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000011
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db
- %TEMP%\6f911f26-2aaa-465f-9bf1-1b195de47c3e.tmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\b4e21b3a5608d64b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7932b4a1bdc02441_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000012
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\8bf3f003cfd2edd1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ec07eda228b6781b_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\134ad062135eb043_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000013
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bdd3ef0db744eb09_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000014
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bd1b05364db446e7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000015
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\135a9e73b7a29232_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b2fbab8702df8eea_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000016
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\191c26457b1d8ca1_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\55040de5c8055106_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\cb1d0723ccfe0233_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6afd35e90c0da95a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000017
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\ffcd50c74b2d9fbe_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000018
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\4922a9d84c45d3e2_0
- %TEMP%\a128ee11-74a0-4e49-aa25-364fdd5d2cb0.tmp
- %TEMP%\0e00c7e7-075f-4d7d-b3f4-f4019e452419.tmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000019
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\90bb6bb63be4c2f2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
- %LOCALAPPDATA%\microsoft\edge\user data\last browser
- %LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
- %LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
- %TEMP%\3892_20585727\manifest.json
- %TEMP%\3892_20585727\license.txt
- %TEMP%\3892_20585727\filtering rules
- %TEMP%\3892_20585727\_metadata\verified_contents.json
- %TEMP%\3892_20585727\manifest.fingerprint
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\9.33.0\indexing in progress
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\scoped_dir3892_1540038217\ruleset data
Удаляет файлы, которые сам же создал
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-694ef4e4-8b0.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-694ef4e7-f34.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %TEMP%\edge_bits_3892_1561343461\dde93974-5cbc-4ecc-898f-436e62207c34
- %LOCALAPPDATA%\microsoft\edge\user data\subresource filter\indexed rules\27\9.33.0\indexing in progress
Перемещает следующие файлы
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
Изменяет следующие файлы
- %LOCALAPPDATA%\microsoft\edge\user data\last version
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data
- %LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
- %LOCALAPPDATA%\microsoft\edge\user data\default\visited links
- %LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\history
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons
- %TEMP%\.ses
Подменяет следующие файлы
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\0f99574b6ab132fd80f1679347f251b1ebb09f1f\189a4c25-c676-46a2-9dc4-74e8eb001570\index-dir\temp-index
Сетевая активность
Подключается к
- 'co####.edge.skype.com':443
- 'ni#####s.forumid.net':80
- 'ni#####s.forumid.net':443
- 'x1.#.lencr.org':80
- 'ma#.#ddan.com':443
- 'aj##.#oogleapis.com':443
- 'il##web.com':443
- 'ca###.##nsentframework.com':443
- 'go#####agmanager.com':443
- 'pk#.goog':80
- 'ch#####.#onsentframework.com':443
- 'ac.###iencerun.com':443
- 'cd#.#aboola.com':443
- 'go#####a###ytics.com':443
- '2i##.net':443
- 'cr#.####g2.amazontrust.com':80
- 'x.##2.us':80
- 'a###ytics.google.com':443
- 'st###.#.doubleclick.net':443
- 'go##le.ru':443
- 'co####t.topicit.net':443
- 'cd#.#iglink.com':443
- 'im####.googleapis.com':443
- 'd.####encerun.com':443
- 'cm.#.##ubleclick.net':443
- 'se####.adnxs.com':443
- 'co########ching.mediarithmics.com':443
- 'co#######l-content.sirdata.io':443
- 'on###g-sys.com':443
- 'mp.#dex.io':443
- 'pr###d.a-mo.net':443
- 'pr####.media.net':443
- 'bt##.##arethrough.com':443
- 'cd#.##delivr.net':443
- 'localhost':443
- 'sc###t.4dex.io':443
- 'fa######.rubiconproject.com':443
- 'il######vents.taboola.com':443
- 'gu#.#riteo.com':443
- 'sy##.#aboola.com':443
- 'te##.com':443
- 'ce####rycorner.com':443
- 'ad.###bleclick.net':443
- 'eu#.###iconproject.com':443
- 'id###ync.com':443
- 'id.#-mx.com':443
- 'rt#.##adsrvr.com':443
- 'pi###.##biconproject.com':443
- 't.###.opera.com':443
- 'im####.pubmatic.com':443
- 'ss########obal.smartadserver.com':443
- 'cs.###anmedia.com':443
- 'ad#.##ickyadstv.com':443
- 'sy##.1rx.io':443
- 's.#####n-adsystem.com':443
- 'a.###rtb.com':443
- 'x.###switch.net':443
- 'to###.##biconproject.com':443
- 'b-###.#arketperf.com':443
- 'ad##id.info':443
TCP
Запросы HTTP GET
- http://ni#####s.forumid.net/
- http://x1.#.lencr.org/
- http://cr#.####g2.amazontrust.com/rootg2.cer
- http://x.##2.us/x.cer
Другие
- 'co####.edge.skype.com':443
- 'ni#####s.forumid.net':443
- 'cd#.#irdata.io':443
- 'aj##.#oogleapis.com':443
- 'il##web.com':443
- 'ca###.##nsentframework.com':443
- 'go#####agmanager.com':443
- 'ac.##uncdn.com':443
- 'ac.###iencerun.com':443
- 'cd#.#aboola.com':443
- '2i##.net':443
- 'go#####a###ytics.com':443
- 'st###.#.doubleclick.net':443
- 'a###ytics.google.com':443
- 'go##le.ru':443
- 'co####t.topicit.net':443
- 'cd#.#iglink.com':443
- 'im####.googleapis.com':443
- 'cm.#.##ubleclick.net':443
- 'ib.##nxs.com':443
- 'd.####encerun.com':443
- 'co########ching.mediarithmics.com':443
- 'ap#.####entframework.com':443
- 'on###g-sys.com':443
- 'pr####.media.net':443
- 'pr###d.a-mo.net':443
- 'bt##.##arethrough.com':443
- 'cd#.##delivr.net':443
- 'fa######.rubiconproject.com':443
- 'dn##dn.net':443
- 'il######vents.taboola.com':443
- 'am#####h.taboola.com':443
- 'te##.com':443
- 'ad.###bleclick.net':443
- 'eu#.###iconproject.com':443
- 'id###ync.com':443
- 'id.#-mx.com':443
- 'rt#.##adsrvr.com':443
- 'pi######.rubiconproject.com':443
- 't.###.opera.com':443
- 'im####.pubmatic.com':443
- 'ss########obal.smartadserver.com':443
- 'cs.###anmedia.com':443
- 'ad#.##ickyadstv.com':443
- 'sy##.1rx.io':443
- 'a.###rtb.com':443
- 's.#####n-adsystem.com':443
- 'x.###switch.net':443
- 'b-###.#arketperf.com':443
- 'ad##id.info':443
UDP
- DNS ASK co####.edge.skype.com
- DNS ASK ni#####s.forumid.net
- DNS ASK x1.#.lencr.org
- DNS ASK js.##dan.com
- DNS ASK ma#.#ddan.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK il##web.com
- DNS ASK ca###.##nsentframework.com
- DNS ASK go#####agmanager.com
- DNS ASK pk#.goog
- DNS ASK ch#####.#onsentframework.com
- DNS ASK ac.###iencerun.com
- DNS ASK 2i##.net
- DNS ASK cd#.#aboola.com
- DNS ASK go#####a###ytics.com
- DNS ASK cr#.####g2.amazontrust.com
- DNS ASK x.##2.us
- DNS ASK a###ytics.google.com
- DNS ASK st###.#.doubleclick.net
- DNS ASK cd#.#iglink.com
- DNS ASK co####t.topicit.net
- DNS ASK go##le.ru
- DNS ASK d.####encerun.com
- DNS ASK d.###oomy.com
- DNS ASK hb#####id.pubmatic.com
- DNS ASK ac.##uncdn.com
- DNS ASK im####.googleapis.com
- DNS ASK co#######l-content.sirdata.io
- DNS ASK co########ching.mediarithmics.com
- DNS ASK cm.#.##ubleclick.net
- DNS ASK ta######g.unrulymedia.com
- DNS ASK se####.adnxs.com
- DNS ASK cd#.#irdata.io
- DNS ASK ib.##nxs.com
- DNS ASK on###g-sys.com
- DNS ASK rt#.###premium.services
- DNS ASK pr###d.a-mo.net
- DNS ASK pr####.media.net
- DNS ASK bt##.##arethrough.com
- DNS ASK mp.#dex.io
- DNS ASK pr########ver.rubiconproject.com
- DNS ASK cd#.##delivr.net
- DNS ASK sc###t.4dex.io
- DNS ASK fa######.rubiconproject.com
- DNS ASK tr#.#aboola.com
- DNS ASK il######vents.taboola.com
- DNS ASK gu#.#riteo.com
- DNS ASK im####.taboola.com
- DNS ASK vi####t.taboola.com
- DNS ASK sy##.#aboola.com
- DNS ASK im#####p.taboola.com
- DNS ASK am#####h.taboola.com
- DNS ASK wf.##boola.com
- DNS ASK te##.com
- DNS ASK am######vents.taboola.com
- DNS ASK ce####rycorner.com
- DNS ASK i5#.#inypic.com
- DNS ASK eu#.###iconproject.com
- DNS ASK ad.###bleclick.net
- DNS ASK id###ync.com
- DNS ASK id.#-mx.com
- DNS ASK rt#.##adsrvr.com
- DNS ASK pi######.rubiconproject.com
- DNS ASK ad#.##ickyadstv.com
- DNS ASK pi###.##biconproject.com
- DNS ASK cs.###anmedia.com
- DNS ASK t.###.opera.com
- DNS ASK ss########obal.smartadserver.com
- DNS ASK im####.pubmatic.com
- DNS ASK sy##.1rx.io
- DNS ASK a.###rtb.com
- DNS ASK s.#####n-adsystem.com
- DNS ASK x.###switch.net
- DNS ASK dn##dn.net
- DNS ASK vi#####b.taboola.com
- DNS ASK to###.##biconproject.com
- DNS ASK b-###.#arketperf.com
- DNS ASK am###.taboola.com
- DNS ASK ap#.####entframework.com
- DNS ASK ad##id.info
Другое
Ищет следующие окна
- ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Запускает на исполнение
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument http://www.ninstars.forumid.net/ (со скрытым окном)
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://www.ninstars.forumid.net/ (со скрытым окном)
- '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1824,8190318302284728716,12479149349454144595,131072 --lang=en-US --service-sandbox-type=none --mojo-...
