Technical Information
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\file_p_00000000_1371597592.docx
- %HOMEPATH%\desktop\nwfieldnotes1966.docx
- %HOMEPATH%\desktop\sdszfo.docx
- %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
- %HOMEPATH%\desktop\weeklysheet1215.doc
- %TEMP%\sensfiles.zip
- %TEMP%\out.zip
- %TEMP%\mrcdiwllq5yuyowdow32w60dg95maq\screen1.png
- %TEMP%\mrcdiwllq5yuyowdow32w60dg95maq\user_info.txt
- %TEMP%\etilqs_dphh3yynhualidx
- %TEMP%\etilqs_ycrfvgvyysrtbxg
- %TEMP%\etilqs_2sjxcmfbv83foog
- %TEMP%\dec5.tmp
- %TEMP%\etilqs_oeyjblv2vywkwsu
- %TEMP%\etilqs_u5dhbfroowwfhot
- %TEMP%\etilqs_tqa0fsheymeutin
- %TEMP%\etilqs_unkdzk6elvkkny6
- %TEMP%\etilqs_gtjcgac84fyviru
- %TEMP%\etilqs_wsmerilg2cubo5u
- %TEMP%\mrcdiwllq5yuyowdow32w60dg95maq\sensfiles.zip
- %TEMP%\etilqs_eup5aoh268rqvte
- %TEMP%\ded6.tmp
- %TEMP%\dec5.tmp
- %TEMP%\ded6.tmp
- 'ip##o.is':443
- 's.##mg.com':443
- 'ro###.ebay.com':443
- 'bo##ing.com':443
- 'tw##ter.com':443
- 'bo##ing.com':80
- 'tw##ter.com':80
- 'nl.##hoo.com':80
- 'ro###.ebay.com':80
- 'st####.xx.fbcdn.net':443
- 'sd#####es.operacdn.com':443
- 'ya###.opera.com':80
- 'fa###ook.com':443
- 'ap#.##legram.org':443
- 'do#####d3.operacdn.com':443
- 'fa###ook.com':80
- 're###.opera.com':80
- 'si#####ck2.opera.com':80
- 'en.###ipedia.org':443
- 'se####.yahoo.com':443
- 'am##on.com':443
- 'en.###ipedia.org':80
- 'bing.com':80
- 'am##on.com':80
- 'se####.yahoo.com':80
- 'du###uckgo.com':443
- 'google.com':80
- 'au######te.geo.opera.com':443
- 'au######te.geo.opera.com':80
- 'localhost':6949
- 'microsoft.com':80
- http://au######te.geo.opera.com/geolocation/
- http://ro###.ebay.com/rover/1/711-53200-19255-0/1?ic###########################################################################################################################
- http://www.op##a.com/follow?ut###############################################################################################
- http://www.tw##ter.com/?pa################
- http://nl.##hoo.com/?il#####
- http://re###.opera.com/speeddials/partner/wikipedia_org_us
- http://re###.opera.com/speeddials/partner/youtube
- http://re###.opera.com/speeddials/partner/product
- http://re###.opera.com/speeddials/partner/booking_com_us
- http://re###.opera.com/speeddials/partner/twitter_us
- http://re###.opera.com/speeddials/partner/yahoo
- http://re###.opera.com/speeddials/partner/ebay_us
- http://www.bo##ing.com/index.html?ai##########################################################################################
- http://re###.opera.com/speeddials/partner/amazon_us
- http://www.fa###ook.com/
- http://re###.opera.com/speeddials/partner/facebook
- http://12#.#.0.1:6949/
- http://si#####ck2.opera.com/?ho###############################################
- http://re###.opera.com/www.opera.com/firstrun/
- http://si#####ck2.opera.com/?ho###################################################
- http://en.###ipedia.org/favicon.ico
- http://www.bing.com/s/a/bing_p.ico
- http://www.am##on.com/favicon.ico
- http://se####.yahoo.com/favicon.ico
- http://www.google.com/favicon.ico
- http://ya###.opera.com/favicon.ico
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'ip##o.is':443
- 'bo##ing.com':443
- 'tw##ter.com':443
- 'ya##o.com':443
- 'st####.xx.fbcdn.net':443
- 'm.###ebook.com':443
- 'op##a.com':443
- 'sd#####es.operacdn.com':443
- 'ya###.opera.com':443
- 'fa###ook.com':443
- 'ap#.##legram.org':443
- 'en.###ipedia.org':443
- 'se####.yahoo.com':443
- 'am##on.com':443
- 'du###uckgo.com':443
- 'au######te.geo.opera.com':443
- 'ro###.ebay.com':443
- 'do#####d3.operacdn.com':443
- DNS ASK ip##o.is
- DNS ASK s.##mg.com
- DNS ASK ya##o.com
- DNS ASK bo##ing.com
- DNS ASK tw##ter.com
- DNS ASK ro###.ebay.com
- DNS ASK nl.##hoo.com
- DNS ASK st####.xx.fbcdn.net
- DNS ASK m.###ebook.com
- DNS ASK sd#####es.operacdn.com
- DNS ASK op##a.com
- DNS ASK ya###.opera.com
- DNS ASK ap#.##legram.org
- DNS ASK fa###ook.com
- DNS ASK re###.opera.com
- DNS ASK si#####ck2.opera.com
- DNS ASK en.###ipedia.org
- DNS ASK bi##.#ikimedia.org
- DNS ASK bing.com
- DNS ASK am##on.com
- DNS ASK du###uckgo.com
- DNS ASK se####.yahoo.com
- DNS ASK au######te.geo.opera.com
- DNS ASK google.com
- DNS ASK do#####d3.operacdn.com
- DNS ASK microsoft.com
- ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Opera Software\Opera Stable'
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden -Command "Set-MpPreference -ExclusionPath" C:\
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.16.1896238884\1932503654" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.15.713430562\431475081" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.12.927810026\873640563" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.11.476389675\1930356400" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.10.1051203679\38556474" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.9.1410807746\307669338" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.8.157783946\414087485" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.7.1929046452\1076998255" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.6.1683016801\855061009" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.17.1371598052\1407031914" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.5.1008213774\195530365" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.4.2040513104\1068687587" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --extension-process --enable-we...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --disable-client-side-phishing-...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=gpu-process --channel="1344.0.1463640676\2088717846" --enable-proprietary-media-types-playback --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x0000 --gp...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' -noautoupdate --ran-launcher -- http://127.0.0.1:6949/ /crash-reporter-parent-id=1344
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' -noautoupdate --ran-launcher -- http://127.0.0.1:6949/
- '%ProgramFiles(x86)%\opera\launcher.exe' -noautoupdate -- "http://127.0.0.1:6949/"
- '<SYSTEM32>\cmd.exe' /c start http://127.0.0.1:6949
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -NoProfile -NonInteractive -NoLogo -Command "Get-Culture | Select -ExpandProperty DisplayName"
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' --type=utility --channel="1344.4.2040513104\1068687587" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001 /crash-reporter-parent-id=1156
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="1344.18.2087139623\1624643235" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001