%SYSTEMROOT%\Tasks\C__Users_asd_AppData_Local_Temp_Rar$EXa9348.13125_NordVPNSetup programindir.cafe.exe.job
new file created
%APPDATA%\NordVPN
new catalogue created
%APPDATA%\NordVPN\NordVPN
new catalogue created
%APPDATA%\NordVPN\NordVPN\prerequisites
new catalogue created
%APPDATA%\NordVPN\NordVPN\prerequisites\NordVPNTapSetup.exe
new file created
%SystemDrive%\Config.Msi\28ca0c4.rbs
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\bin
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\bin\amd64
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\bin\amd64\tapinstall.exe
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\bin\i386
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\bin\i386\tapinstall.exe
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\amd64
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\amd64\OemVista.inf
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\amd64\tapnordvpn.cat
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\amd64\tapnordvpn.sys
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\i386
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\i386\OemVista.inf
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\i386\tapnordvpn.cat
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\i386\tapnordvpn.sys
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\include
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\default\include\tap-windows.h
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\amd64
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\amd64\OemVista.inf
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\amd64\tapnordvpn.cat
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\amd64\tapnordvpn.sys
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\i386
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\i386\OemVista.inf
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\i386\tapnordvpn.cat
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\i386\tapnordvpn.sys
new file created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\include
new catalogue created
%PROGRAMFILES(X86)%\NordVPN network TAP\win10\include\tap-windows.h
new file created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NordVPN
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NordVPN\NordVPN network TAP
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NordVPN\NordVPN network TAP\\Version
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NordVPN\NordVPN network TAP\\Path
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon\Advanced Installer
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon\Advanced Installer\LZMA
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon\Advanced Installer\LZMA\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon\Advanced Installer\LZMA\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\1.0.1
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Caphyon\Advanced Installer\LZMA\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\1.0.1\\AI_ExePath
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\AuthorizedCDFPrefix
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Comments
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Contact
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\DisplayVersion
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\HelpLink
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\HelpTelephone
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\InstallDate
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\InstallLocation
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\InstallSource
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\ModifyPath
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\NoModify
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\NoRepair
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Publisher
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Readme
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Size
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\EstimatedSize
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\UninstallString
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\URLInfoAbout
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\URLUpdateInfo
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\VersionMajor
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\VersionMinor
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\WindowsInstaller
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Version
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\Language
new registry key parameter created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}\\DisplayName
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\InterbootContext
new registry key created
%SystemDrive%\Config.Msi\28ca0c7.rbs
new file created
%PROGRAMFILES(X86)%\NordVPN\NordVPN.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\liblzo2-2.dll
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\libpkcs11-helper-1.dll
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\openssl.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\openvpn-nordvpn.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\openvpnserv.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\liblzo2-2.dll
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\libpkcs11-helper-1.dll
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\openssl.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\openvpn-nordvpn.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\openvpnserv.exe
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\32bit\c_rehash
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Binaries\64bit\c_rehash
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\Addtrust_external_root.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\CloudVPN_internal_root.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\comodo root.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\comodo_ecc.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\GoDaddy_root.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\LetsEncrypt_dst_root.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\AddTrust_External_Root.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\DigiCert_Global_Root_CA.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\DigiCert_High_Assurance_EV_Root_CA.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\GeoTrust_Global_CA.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\GeoTrust_Primary_Certification_Authority_-_G3.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\Starfield_Class_2_CA.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\Resources\Certificates\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt.cer
new file created
%PROGRAMFILES(X86)%\NordVPN\x64\Liberation.Native.Firewall.dll
new file created
%PROGRAMFILES(X86)%\NordVPN\x86\Liberation.Native.Firewall.dll
new file created