Technical Information
- %TEMP%\is-o4fcp.tmp\is-48agk.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-ia914.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-nuudg.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-4juh7.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-5oj5d.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-627sm.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-2udod.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-v2600.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-8e65o.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-bmu2k.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-jm67o.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-iouqt.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-700uu.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-mlnkj.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-fmahj.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-ctje7.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-g4407.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-fidpf.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-12feb.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-c18g0.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-b8178.tmp
- %ProgramFiles(x86)%\nres\nres917.exe
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-uc26r.tmp
- %ProgramFiles(x86)%\nres\unins000.dat
- %ProgramFiles(x86)%\nres\is-t00el.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-tgqpb.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-op5dn.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-8gh8l.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-ovnq9.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-eafd2.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-sd7js.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-dp1a6.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-tkc6g.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-3ifh2.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-5b60f.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-n3tf7.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-7ercq.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-4v63i.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-ktkcp.tmp
- %ProgramFiles(x86)%\nres\tweaks\is-qkdr2.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-u7pm6.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-a1f6a.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-6ik61.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-rq0cq.tmp
- %ProgramFiles(x86)%\nres\themes\is-1rnk8.tmp
- %ProgramFiles(x86)%\nres\themes\is-dtegs.tmp
- %ProgramFiles(x86)%\nres\themes\is-1u82e.tmp
- %ProgramFiles(x86)%\nres\themes\is-sb0sq.tmp
- %ProgramFiles(x86)%\nres\is-0aor4.tmp
- %ProgramFiles(x86)%\nres\is-5tqmr.tmp
- %ProgramFiles(x86)%\nres\is-d5q5r.tmp
- %ProgramFiles(x86)%\nres\is-j8a6s.tmp
- %ProgramFiles(x86)%\nres\is-e6mnb.tmp
- %ProgramFiles(x86)%\nres\themes\is-if3k8.tmp
- %ProgramFiles(x86)%\nres\is-tggh3.tmp
- %ProgramFiles(x86)%\nres\is-a6svr.tmp
- %ProgramFiles(x86)%\nres\is-akm04.tmp
- %ProgramFiles(x86)%\nres\is-4hctr.tmp
- %TEMP%\is-p1fl7.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-p1fl7.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-p1fl7.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-p1fl7.tmp\_isetup\_setup64.tmp
- %TEMP%\is-p1fl7.tmp\_isetup\_regdll.tmp
- %ProgramFiles(x86)%\nres\is-v783m.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-d4k31.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-kksbi.tmp
- %ProgramFiles(x86)%\nres\themes\is-nq14t.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-grr31.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-1bhrv.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-1lho7.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-p8a2g.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\funny\is-ubah0.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-s2oov.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-afrij.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-a1f0c.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\nature\is-35agi.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-e7igc.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-8v661.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-bq96f.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-dqh1d.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-h0rde.tmp
- %ProgramFiles(x86)%\nres\themes\built-in\is-em7sm.tmp
- %ProgramFiles(x86)%\nres\themes\is-ga8a0.tmp
- %ProgramFiles(x86)%\nres\themes\is-0018a.tmp
- %ProgramFiles(x86)%\nres\themes\is-76ove.tmp
- %ProgramFiles(x86)%\nres\themes\is-omtdc.tmp
- %TEMP%\license.txt
- from %ProgramFiles(x86)%\nres\is-4hctr.tmp to %ProgramFiles(x86)%\nres\unins000.exe
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-nuudg.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sunshine.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-4juh7.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sunglasses.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-5oj5d.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sunflower.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-627sm.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sunbeach.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-2udod.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sun-smile.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-v2600.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\seadawn.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-8e65o.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\seabot.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-c18g0.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\rain.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-bmu2k.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\timothy.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-iouqt.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\niceday.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-700uu.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\mountains.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-mlnkj.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\midnight.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-fmahj.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\happynewyear.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-ctje7.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\firework.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-g4407.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\colorstars.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-jm67o.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\seaandsunglasses.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-afrij.tmp to %ProgramFiles(x86)%\nres\themes\built-in\square.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-a1f6a.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\tulips.themeb
- from %ProgramFiles(x86)%\nres\tweaks\is-op5dn.tmp to %ProgramFiles(x86)%\nres\tweaks\tweaksdb.json
- from %ProgramFiles(x86)%\nres\tweaks\is-8gh8l.tmp to %ProgramFiles(x86)%\nres\tweaks\tweaksdb.ini
- from %ProgramFiles(x86)%\nres\tweaks\is-ovnq9.tmp to %ProgramFiles(x86)%\nres\tweaks\nc010cortana.png
- from %ProgramFiles(x86)%\nres\tweaks\is-eafd2.tmp to %ProgramFiles(x86)%\nres\tweaks\nc009powertweaks.png
- from %ProgramFiles(x86)%\nres\tweaks\is-sd7js.tmp to %ProgramFiles(x86)%\nres\tweaks\nc008lockscreen.png
- from %ProgramFiles(x86)%\nres\tweaks\is-tkc6g.tmp to %ProgramFiles(x86)%\nres\tweaks\nc007misctweaks.png
- from %ProgramFiles(x86)%\nres\tweaks\is-b8178.tmp to %ProgramFiles(x86)%\nres\tweaks\nc006browsertweaks.png
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-fidpf.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\colorfire.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-ia914.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\sunup.themeb
- from %ProgramFiles(x86)%\nres\tweaks\is-n3tf7.tmp to %ProgramFiles(x86)%\nres\tweaks\nc004security.png
- from %ProgramFiles(x86)%\nres\tweaks\is-7ercq.tmp to %ProgramFiles(x86)%\nres\tweaks\nc003privacy.png
- from %ProgramFiles(x86)%\nres\tweaks\is-4v63i.tmp to %ProgramFiles(x86)%\nres\tweaks\nc002speedup.png
- from %ProgramFiles(x86)%\nres\tweaks\is-ktkcp.tmp to %ProgramFiles(x86)%\nres\tweaks\nc002adsclean.png
- from %ProgramFiles(x86)%\nres\tweaks\is-qkdr2.tmp to %ProgramFiles(x86)%\nres\tweaks\nc001winantispy.png
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-u7pm6.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\water.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-uc26r.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\vulkan.themeb
- from %ProgramFiles(x86)%\nres\tweaks\is-5b60f.tmp to %ProgramFiles(x86)%\nres\tweaks\nc005defender.png
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-6ik61.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\valley.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-12feb.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\clock.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-dp1a6.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\christmasdog.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-rq0cq.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\christmascandle.themeb
- from %ProgramFiles(x86)%\nres\is-5tqmr.tmp to %ProgramFiles(x86)%\nres\software.png
- from %ProgramFiles(x86)%\nres\themes\is-1rnk8.tmp to %ProgramFiles(x86)%\nres\themes\cirecle_flare.png
- from %ProgramFiles(x86)%\nres\themes\is-omtdc.tmp to %ProgramFiles(x86)%\nres\themes\circle_good_old.png
- from %ProgramFiles(x86)%\nres\themes\is-if3k8.tmp to %ProgramFiles(x86)%\nres\themes\circle_blick.png
- from %ProgramFiles(x86)%\nres\themes\is-dtegs.tmp to %ProgramFiles(x86)%\nres\themes\black_back.png
- from %ProgramFiles(x86)%\nres\themes\is-1u82e.tmp to %ProgramFiles(x86)%\nres\themes\black.themeb
- from %ProgramFiles(x86)%\nres\themes\is-sb0sq.tmp to %ProgramFiles(x86)%\nres\themes\back_good_to_go.png
- from %ProgramFiles(x86)%\nres\tweaks\is-tgqpb.tmp to %ProgramFiles(x86)%\nres\tweaks\tweaksdb.nat
- from %ProgramFiles(x86)%\nres\themes\is-76ove.tmp to %ProgramFiles(x86)%\nres\themes\cosmos.themeb
- from %ProgramFiles(x86)%\nres\is-d5q5r.tmp to %ProgramFiles(x86)%\nres\servman-log.txt
- from %ProgramFiles(x86)%\nres\is-j8a6s.tmp to %ProgramFiles(x86)%\nres\readme.txt
- from %ProgramFiles(x86)%\nres\is-e6mnb.tmp to %ProgramFiles(x86)%\nres\optimize.nat
- from %ProgramFiles(x86)%\nres\is-tggh3.tmp to %ProgramFiles(x86)%\nres\optimize.json
- from %ProgramFiles(x86)%\nres\is-v783m.tmp to %ProgramFiles(x86)%\nres\license.txt
- from %ProgramFiles(x86)%\nres\is-a6svr.tmp to %ProgramFiles(x86)%\nres\hyperv.png
- from %ProgramFiles(x86)%\nres\is-akm04.tmp to %ProgramFiles(x86)%\nres\filesystem.png
- from %ProgramFiles(x86)%\nres\is-0aor4.tmp to %ProgramFiles(x86)%\nres\unusedhardware.png
- from %ProgramFiles(x86)%\nres\tweaks\is-3ifh2.tmp to %ProgramFiles(x86)%\nres\tweaks\nc0060edgetweaks.png
- from %ProgramFiles(x86)%\nres\themes\is-0018a.tmp to %ProgramFiles(x86)%\nres\themes\glow.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-h0rde.tmp to %ProgramFiles(x86)%\nres\themes\built-in\bubble.themeb
- from %ProgramFiles(x86)%\nres\themes\is-ga8a0.tmp to %ProgramFiles(x86)%\nres\themes\rings.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-35agi.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\chamomile.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-kksbi.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\budapest.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-grr31.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\bokeyellow.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-1bhrv.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\bokered.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-1lho7.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\boke.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\nature\is-p8a2g.tmp to %ProgramFiles(x86)%\nres\themes\built-in\nature\bigmountains.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-em7sm.tmp to %ProgramFiles(x86)%\nres\themes\built-in\black.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\funny\is-ubah0.tmp to %ProgramFiles(x86)%\nres\themes\built-in\funny\penguine.themeb
- from %ProgramFiles(x86)%\nres\themes\is-nq14t.tmp to %ProgramFiles(x86)%\nres\themes\classic.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-a1f0c.tmp to %ProgramFiles(x86)%\nres\themes\built-in\spinner.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-e7igc.tmp to %ProgramFiles(x86)%\nres\themes\built-in\rings.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-d4k31.tmp to %ProgramFiles(x86)%\nres\themes\built-in\glow.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-8v661.tmp to %ProgramFiles(x86)%\nres\themes\built-in\daynight.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-bq96f.tmp to %ProgramFiles(x86)%\nres\themes\built-in\cosmos.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-dqh1d.tmp to %ProgramFiles(x86)%\nres\themes\built-in\classic.themeb
- from %ProgramFiles(x86)%\nres\themes\built-in\is-s2oov.tmp to %ProgramFiles(x86)%\nres\themes\built-in\water.themeb
- from %ProgramFiles(x86)%\nres\is-t00el.tmp to %ProgramFiles(x86)%\nres\nres917.exe
- 'mi####njobs.works':80
- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######
- http://mi####njobs.works/new/net_api
- DNS ASK mi####njobs.works
- ClassName: 'j23e49_nres917Class_j23e49' WindowName: ''
- '%TEMP%\is-o4fcp.tmp\is-48agk.tmp' /SL4 $9024E "<Full path to file>" 3937497 52224
- '%ProgramFiles(x86)%\nres\nres917.exe'
- '%ProgramFiles(x86)%\nres\nres917.exe' b3d3334c49f60e0d529c278726019290
- '%WINDIR%\syswow64\net.exe' helpmsg 17
- '%WINDIR%\syswow64\net1.exe' helpmsg 17
- '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "NRES-917"