Technical Information
- '%ProgramFiles(x86)%\opera\launcher.exe' -noautoupdate -- "https://yagoaway.ru/gl/?cid=20112&oid=1925&v=8&utm_campaign=wiz-15&trash="
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.19.695323391\430108673" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.18.942032293\146186253" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.15.1327252476\2117680250" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.14.63257989\1000088793" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.13.472771053\594012475" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.12.389903710\751268769" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.11.32327439\1595421083" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.10.1941371196\1678094229" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.9.1718348833\601851009" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.20.1319131641\1510981414" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' --type=utility --channel="3956.4.1191599940\211710919" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001 /crash-reporter-parent-id=1848
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.7.1368859492\701591442" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.6.2020614322\1523132596" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.5.1477448092\1073529594" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.4.1191599940\211710919" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --extension-process --enable-we...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --disable-client-side-phishing-...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=gpu-process --channel="3956.0.1161262741\1053578259" --enable-proprietary-media-types-playback --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x0000 --gp...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' -noautoupdate --ran-launcher -- https://yagoaway.ru/gl/?cid=20112&oid=1925&v=8&utm_campaign=wiz-15&trash= /crash-reporter-parent-id=3956
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' -noautoupdate --ran-launcher -- https://yagoaway.ru/gl/?cid=20112&oid=1925&v=8&utm_campaign=wiz-15&trash=
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.8.2007740475\168882901" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="3956.21.1590977312\2130272251" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- %TEMP%\etilqs_u8oed5gidfmi6c6
- %TEMP%\etilqs_cxr6zxsn5betlva
- %TEMP%\etilqs_vreiama6t2yrcig
- %TEMP%\etilqs_3fg8f9fb4kytjff
- %TEMP%\etilqs_bebtow6wd4jy8qr
- %TEMP%\etilqs_y42pxcbfm0fat8z
- %TEMP%\etilqs_uo7frqsmckxc43d
- %TEMP%\etilqs_hemdxmdbaow8xx0
- %TEMP%\etilqs_dh3v8reeciokedg
- %TEMP%\etilqs_jswmla2kxgannmi
- %TEMP%\etilqs_yodqvbyddqw8hxh
- %TEMP%\4ab1.tmp
- %TEMP%\4ac1.tmp
- %TEMP%\4ab1.tmp
- %TEMP%\4ac1.tmp
- 'au######te.geo.opera.com':80
- 'x1.#.lencr.org':80
- 'oc##.#ectigo.com':80
- 's.##mg.com':443
- 'ro###.ebay.com':443
- 'bo##ing.com':443
- 'tw##ter.com':80
- 'bo##ing.com':80
- 'ro###.ebay.com':80
- 'sd#####es.operacdn.com':443
- 'st##r.com':443
- 'pk#.goog':80
- 'ya##away.ru':443
- 'fa###ook.com':80
- 're###.opera.com':80
- 'si#####ck2.opera.com':443
- 'en.###ipedia.org':443
- 'se####.yahoo.com':443
- 'am##on.com':443
- 'en.###ipedia.org':80
- 'bing.com':80
- 'am##on.com':80
- 'du###uckgo.com':443
- 'se####.yahoo.com':80
- 'google.com':80
- 'au######te.geo.opera.com':443
- 'r3.#.lencr.org':80
- 'do#####d3.operacdn.com':443
- http://au######te.geo.opera.com/geolocation/
- http://oc##.#ectigo.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQh80WaEMqmyEvaHjlisSfVM4p8SAQUF9nWJSdn%2BTHCSUPZMDZEjGypT%2BsCEQDRAn1SNLVYNd9QC4IX8jXk
- http://www.op##a.com/follow?ut###############################################################################################
- http://www.ya##o.com/?il#####
- http://ro###.ebay.com/rover/1/711-53200-19255-0/1?ic###########################################################################################################################
- http://www.bo##ing.com/index.html?ai##########################################################################################
- http://re###.opera.com/speeddials/partner/wikipedia_org_us
- http://re###.opera.com/speeddials/partner/youtube
- http://re###.opera.com/speeddials/partner/product
- http://re###.opera.com/speeddials/partner/booking_com_us
- http://re###.opera.com/speeddials/partner/twitter_us
- http://re###.opera.com/speeddials/partner/yahoo
- http://re###.opera.com/speeddials/partner/ebay_us
- http://re###.opera.com/speeddials/partner/amazon_us
- http://pk#.goog/gsr1/gsr1.crt
- http://re###.opera.com/www.opera.com/firstrun/
- http://re###.opera.com/favicon.ico
- http://www.fa###ook.com/campaign/landing.php?ca#########################
- http://re###.opera.com/speeddials/partner/facebook
- http://en.###ipedia.org/favicon.ico
- http://se####.yahoo.com/favicon.ico
- http://www.bing.com/s/a/bing_p.ico
- http://www.am##on.com/favicon.ico
- http://www.google.com/favicon.ico
- http://x1.#.lencr.org/
- http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgNU1GS6lJPnYQzkxixsQ4Uhpg%3D%3D
- 'au######te.geo.opera.com':443
- 'du###uckgo.com':443
- 'am##on.com':443
- 'se####.yahoo.com':443
- 'en.###ipedia.org':443
- 'si#####ck2.opera.com':443
- 'ya##away.ru':443
- 'st##r.com':443
- 'sd#####es.operacdn.com':443
- 'bo##ing.com':443
- 'ya##o.com':443
- 'ro###.ebay.com':443
- 's.##mg.com':443
- 'op##a.com':443
- 'eb##.com':443
- 'pa###.ebay.com':443
- DNS ASK google.com
- DNS ASK r3.#.lencr.org
- DNS ASK x1.#.lencr.org
- DNS ASK eb##.com
- DNS ASK oc##.#ectigo.com
- DNS ASK op##a.com
- DNS ASK s.##mg.com
- DNS ASK tw##ter.com
- DNS ASK ya##o.com
- DNS ASK bo##ing.com
- DNS ASK ro###.ebay.com
- DNS ASK sd#####es.operacdn.com
- DNS ASK pa###.ebay.com
- DNS ASK st##r.com
- DNS ASK ya##away.ru
- DNS ASK fa###ook.com
- DNS ASK re###.opera.com
- DNS ASK si#####ck2.opera.com
- DNS ASK en.###ipedia.org
- DNS ASK bi##.#ikimedia.org
- DNS ASK bing.com
- DNS ASK am##on.com
- DNS ASK du###uckgo.com
- DNS ASK se####.yahoo.com
- DNS ASK au######te.geo.opera.com
- DNS ASK pk#.goog
- DNS ASK do#####d3.operacdn.com
- ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Opera Software\Opera Stable'