Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdateWorm' = '"<Полный путь к файлу>"'
Изменения в файловой системе
Создает следующие файлы
- C:\users\public\worm_registry_real.txt
- C:\users\public\stiller.exe
- C:\users\public\worm_propagation.txt
- C:\users\public\worm_bios.txt
- C:\users\public\worm_stolen_data.txt
- C:\users\public\stealer_logs\chrome_passwords.txt
- C:\users\public\stealer_logs\cookies.txt
- C:\users\public\stealer_logs\crypto_wallets.txt
- C:\users\public\stealer_logs\discord_tokens.txt
- C:\users\public\stealer_logs\exfiltration_log.txt
- C:\users\public\stealer_logs\defender_bypass_log.txt
- C:\users\public\stealer_logs\registry_log.txt
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6aa98939-6cc.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6aa9893c-11d8.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cookies
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
- C:\users\public\stealer_logs\powershell_log.txt
- C:\users\public\stealer_logs\memory_scan_log.txt
- C:\users\public\stealer_logs\summary.txt
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\59ba6107012c1d75_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a5ee5fbffef0d929_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2e9cf51bb7881794_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\60407c55e16e8581_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\16c629029d2c34b3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\46bfbf88011d1114_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\acb4240b40384585_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5e3c50592e4a2618_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\quotamanager
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\2b10103a3c0fcdcc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
- %LOCALAPPDATA%\microsoft\edge\user data\default\databases\databases.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\eb72e663b163a48d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\4cb013792b196a35_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000009
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000a
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\4cb013792b196a35_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\2cc80dabc69f58b6_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
- %LOCALAPPDATA%\microsoft\edge\user data\last browser
- %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000b
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000c
- %LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\3cc4ef79e9486c2a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\9fd90cbe4107567d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\66e97915a1a74e58_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\d731f0fad9d588e0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\e0e75463fc23eb07_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\e0e75463fc23eb07_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\e8e38453fa096c4c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\e8e38453fa096c4c_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\319a495b894fe144_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\319a495b894fe144_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\c1711b4e09fc3541_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\c1711b4e09fc3541_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8272d991f92be172_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000d
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8272d991f92be172_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000e
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_00000f
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\9194c645bcc3d50e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000010
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\9194c645bcc3d50e_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\7b660d5519bdbb03_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\7b660d5519bdbb03_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8d1ddea4d7cb4e9d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8d1ddea4d7cb4e9d_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000011
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\48a9c27e17c8361f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\a09d110593936ecf_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\475faffbd76b7f8a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\475faffbd76b7f8a_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\blob_storage\20101b97-e7ec-48db-968b-1d3763a26a49\0
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6043c7326703c76a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\fdf91f6fac8fa86f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\fdf91f6fac8fa86f_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\ced6e3f4840a3eb6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\ced6e3f4840a3eb6_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8dfce2d2b39b5ec4_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\8dfce2d2b39b5ec4_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\24707fb4d5706b54_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\24707fb4d5706b54_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\6a3ce42379b911c5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\6a3ce42379b911c5_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\a064ced5eec7c2c2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\07bd7f369eb7edb6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\bf5291190ece81d9_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000012
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\335e69ddec2b9ac6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\c8e3d243213c2816_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\b2141b088ee5e98c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\2e2413a06637b0ec_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\9fd5f62bf71b3d75_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f83ade8a771e2311_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f6ddfce772b318e2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\02ffeb0fd7232ddf_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\87b78db93ca06597_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\22063dd5403b833c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\3107558eea9ba321_0
- %TEMP%\6cefab7c-337d-4adb-b3b7-f2deff66ff9f.tmp
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ecf4f84b241d1325_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\d949b6a948217766_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\afbf989a8c95bf2e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\3941d9264340cece_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\06c49d2fa0ad4bcd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\fad7b2239e784870_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\97de5abfe883dbcf_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\57976939f24b399a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e8c610db15382c0d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\55248bf5cdb1f722_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\98a16392447e67ac_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\d3d3117da1954c11_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\a8861e49fb8957aa_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\0b8c705721509f10_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\a14b1d1ba3ffefc8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\9f4ad6f7051df145_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\16559ac9c884651f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\10d52c8541d8e931_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\91bffe440af90184_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e939b9c74705d0f2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\40a9bd45a75375db_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\c9adc58020b2b3de_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\9527542be48ffabc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\d48cca5b61f158fe_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\c09d11a05755e8de_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\f549ece535126cd0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\bca21f99472447f3_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\0b3bd81b114681fa_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\383152c2a19b4e8f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\a6f27ff03ba78ebe_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\551f311ce70a041a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\b5f29d0312456036_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ce5fdc792b67fd6e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\88c1d03bb90903c8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\be581dea90cddde7_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e8f209bb953d0431_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\50ec495042a41f6d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\63650b2efa24c917_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\4c9a3bb214971f6c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\8ab4bfc157c68e03_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\4bfb0fd95edd59d2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ee0df4a02bea74ec_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\b3f87b55d8dbfa47_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\c3d986f17b5dc565_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\366f560b67a386ee_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\dec87465aca36c9e_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\8383e54a78e96fc0_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\0e68ef3e3bc686b2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\6b991611054a2e9f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\166a5b768db2d6dc_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e00a14b7237f316a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\f7d87e9c65f44131_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ca5a67fda3466f4d_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\cd85acb1c0e5f8f6_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ff7d190261fb21f8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\f6f13d7893cf7781_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\3761f940ae901389_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\a6b7c04cc881aa8f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\aa2af9656088cce5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\986d0106ec1842ce_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\4eceab7d2e5e75bd_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\4816386a87d7566c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\44fdad3a201128f8_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\21d60d8d92bf19bf_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\7e048a4ec5b9e1d4_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\3865648767564005_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\4c4800b635ae2098_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\577dbf0b91a4fd20_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\7a80e0d12aa14c6c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\375db0c2ac836167_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\cde968a267e2506f_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\92f3fbe0cc645cda_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\ac4be60b26fb5511_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\d57fe2c6b1537486_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\fdd89d27c13f85e5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\0db7075bc130b313_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\1ada7ade10cca105_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\db529ccd665da8b5_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\0dbec196046ed063_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e0679885439abda2_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\38720ab1369ba567_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\e31f7a7e623b4b27_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\6635a01024910e7c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\3dd738a47abc8dee_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\fc496558f77f6d37_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\fff368752d794b37_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\57f4047c559d519a_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\57f4047c559d519a_1
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\0a41c5226f4ea45c_0
- %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000013
- %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
- %LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
Удаляет файлы, которые сам же создал
- %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6aa98939-6cc.pma
- %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6aa9893c-11d8.pma
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
- %LOCALAPPDATA%\microsoft\edge\user data\default\blob_storage\20101b97-e7ec-48db-968b-1d3763a26a49\0
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index-dir\the-real-index
- %TEMP%\edge_bits_4568_820644830\dde93974-5cbc-4ecc-898f-436e62207c34
Перемещает следующие файлы
- %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\indexeddb\https_www.youtube.com_0.indexeddb.leveldb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b310bf2d-983c-4d98-b24b-0da1359539ad\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\database\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\index-dir\temp-index в %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\index-dir\the-real-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\videodecodestats\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
- %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
Изменяет следующие файлы
- %LOCALAPPDATA%\microsoft\edge\user data\last version
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
- %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\web data
- %LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
- %LOCALAPPDATA%\microsoft\edge\user data\default\visited links
- %LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
- %LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
- %LOCALAPPDATA%\microsoft\edge\user data\default\history
- %LOCALAPPDATA%\microsoft\edge\user data\default\favicons
- %TEMP%\.ses
Подменяет следующие файлы
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
- %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\scriptcache\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6fba32d5-d310-4779-a26a-8748b963dde2\index-dir\temp-index
- %LOCALAPPDATA%\microsoft\edge\user data\default\service worker\cachestorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f06d67d3-fc9b-4ccb-b0ea-db745ea10f9a\index-dir\temp-index
Сетевая активность
Подключается к
- 'gi##ub.com':443
- '18#.#3.75.72':80
- 'oc##.#ectigo.com':80
- 're#########ets.githubusercontent.com':443
- 'x1.#.lencr.org':80
- 'yr.#.lencr.org':80
- 'yr#.#.lencr.org':80
- 'co####.edge.skype.com':443
- 'yo##ube.com':443
- 'fo###.#oogleapis.com':443
- 'accounts.google.com':443
- 'i.##img.com':443
- 'fo###.gstatic.com':443
- 'go######s.g.doubleclick.net':443
- 'yt#.####leusercontent.com':443
- 'go##le.ru':443
- 'rr##########onuxaxjvh-axql.googlevideo.com':443
- 'st####.doubleclick.net':443
- 'rr##########onuxaxjvh-n8v6.googlevideo.com':443
TCP
Запросы HTTP GET
- http://oc##.#ectigo.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBS3DhJWomGbOJFU%2Fpy58BaOB6aMCwQUF5moBMFv5C1wqAoQPQPT6Rq4JmMCEQClnr21lnUdt%2FXAlQeWE5U8
- http://x1.#.lencr.org/
- http://yr.#.lencr.org/
- http://yr#.#.lencr.org/127.crl
Другие
- 'gi##ub.com':443
- 're#########ets.githubusercontent.com':443
- 'co####.edge.skype.com':443
- 'yo##ube.com':443
- 'fo###.#oogleapis.com':443
- 'accounts.google.com':443
- 'i.##img.com':443
- 'fo###.gstatic.com':443
- 'google.com':443
- 'gs##tic.com':443
- 'yt#.####leusercontent.com':443
- 'go######s.g.doubleclick.net':443
- 'go##le.ru':443
- 'rr##########onuxaxjvh-axql.googlevideo.com':443
- 'st####.doubleclick.net':443
- 'rr##########onuxaxjvh-n8v6.googlevideo.com':443
UDP
- DNS ASK gi##ub.com
- DNS ASK oc##.#ectigo.com
- DNS ASK re#########ets.githubusercontent.com
- DNS ASK x1.#.lencr.org
- DNS ASK yr.#.lencr.org
- DNS ASK yr#.#.lencr.org
- DNS ASK co####.edge.skype.com
- DNS ASK yo##ube.com
- DNS ASK i.##img.com
- DNS ASK fo###.#oogleapis.com
- DNS ASK accounts.google.com
- DNS ASK fo###.gstatic.com
- DNS ASK go######s.g.doubleclick.net
- DNS ASK google.com
- DNS ASK gs##tic.com
- DNS ASK yt#.####leusercontent.com
- DNS ASK go##le.ru
- DNS ASK rr##########onuxaxjvh-axql.googlevideo.com
- DNS ASK st####.doubleclick.net
- DNS ASK rr##########onuxaxjvh-n8v6.googlevideo.com
Другое
Ищет следующие окна
- ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Создает и запускает на исполнение
- 'C:\users\public\stiller.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Get-Process"
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://www.youtube.com/@TweekCSGO
- '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.youtube.com/@TweekCSGO (со скрытым окном)
- '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1828,12046388178021339299,18143739659290138859,131072 --lang=en-US --service-sandbox-type=none --mojo...
- 'C:\users\public\stiller.exe' (со скрытым окном)
