API tools faq
paste
paladin316

Exes_6ec88ae449cd38ddddd6794767de05e8_exe.json

paladin316
Jun 20th, 2019
2,198
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 122.31 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_6ec88ae449cd38ddddd6794767de05e8.exe"
  7. [*] File Size: 9067642
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive"
  9. [*] SHA256: "c3cae4cd72a298b6b5be2931629e4d39a14f35a1a471845b1eccdc9f256da8a0"
  10. [*] MD5: "6ec88ae449cd38ddddd6794767de05e8"
  11. [*] SHA1: "ea1e9a37f17ed740fac8501e9a952135f842a4e8"
  12. [*] SHA512: "15b941fe4e038f438d8256fb68353092e7a9fed0e5723e8535fa321787b46af0d98b076400af054d9bced5e005e3c03f3a0842d4f9f998e73771fbe57fb7c2e5"
  13. [*] CRC32: "354C11B5"
  14. [*] SSDEEP: "196608:ROHoB7Z4C/Lyf28/A2ElwFMY7eu9U+8n3MsLQwsIMDvPjdB9FUIsP9V:ROH2+oY25GMY7z9UFrQwnMDnBBMIcL"
  15.  
  16. [*] Process Execution: [
  17. "Exes_6ec88ae449cd38ddddd6794767de05e8.exe"
  18. ]
  19.  
  20. [*] Signatures Detected: [
  21. {
  22. "Description": "Reads data out of its own binary image",
  23. "Details": [
  24. {
  25. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00000000, length: 0x00000007"
  26. },
  27. {
  28. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00000000, length: 0x00002000"
  29. },
  30. {
  31. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00000007, length: 0x0007fff0"
  32. },
  33. {
  34. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00001ff0, length: 0x00002000"
  35. },
  36. {
  37. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00003fe0, length: 0x00002000"
  38. },
  39. {
  40. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00005fd0, length: 0x00002000"
  41. },
  42. {
  43. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00007fc0, length: 0x00002000"
  44. },
  45. {
  46. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00009fb0, length: 0x00002000"
  47. },
  48. {
  49. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0000bfa0, length: 0x00002000"
  50. },
  51. {
  52. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0000df90, length: 0x00002000"
  53. },
  54. {
  55. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0000ff80, length: 0x00002000"
  56. },
  57. {
  58. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00011f70, length: 0x00002000"
  59. },
  60. {
  61. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00013f60, length: 0x00002000"
  62. },
  63. {
  64. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00015f50, length: 0x00002000"
  65. },
  66. {
  67. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00017f40, length: 0x00002000"
  68. },
  69. {
  70. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00018c00, length: 0x00000037"
  71. },
  72. {
  73. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00018c14, length: 0x00812a46"
  74. },
  75. {
  76. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0083365a, length: 0x000015b9"
  77. },
  78. {
  79. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0083cc13, length: 0x0000224b"
  80. },
  81. {
  82. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00846e5e, length: 0x00002b16"
  83. },
  84. {
  85. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00851974, length: 0x000037ec"
  86. },
  87. {
  88. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x0085d160, length: 0x00003067"
  89. },
  90. {
  91. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x008681c7, length: 0x000029e3"
  92. },
  93. {
  94. "self_read": "process: Exes_6ec88ae449cd38ddddd6794767de05e8.exe, pid: 1548, offset: 0x00872baa, length: 0x000330c9"
  95. }
  96. ]
  97. },
  98. {
  99. "Description": "Exhibits possible ransomware file modification behavior",
  100. "Details": [
  101. {
  102. "drops_unknown_mimetypes": "Drops 393 unknown file mime types which may be indicative of encrypted files being written back to disk"
  103. }
  104. ]
  105. },
  106. {
  107. "Description": "File has been identified by 24 Antiviruses on VirusTotal as malicious",
  108. "Details": [
  109. {
  110. "McAfee": "Artemis!6EC88AE449CD"
  111. },
  112. {
  113. "Cylance": "Unsafe"
  114. },
  115. {
  116. "Alibaba": "TrojanDropper:Win32/Agent.8b33056b"
  117. },
  118. {
  119. "K7GW": "Trojan ( 0001140e1 )"
  120. },
  121. {
  122. "K7AntiVirus": "Trojan ( 0001140e1 )"
  123. },
  124. {
  125. "Symantec": "W32.Mandaph"
  126. },
  127. {
  128. "Paloalto": "generic.ml"
  129. },
  130. {
  131. "Kaspersky": "Trojan-Dropper.Win32.Agent.bjtgdq"
  132. },
  133. {
  134. "AegisLab": "Trojan.Win32.Agent.4!c"
  135. },
  136. {
  137. "McAfee-GW-Edition": "BehavesLike.Win32.Dropper.rc"
  138. },
  139. {
  140. "Sophos": "Mal/Generic-S"
  141. },
  142. {
  143. "Ikarus": "Virus.Alman"
  144. },
  145. {
  146. "Avira": "TR/Drop.Agent.tqnqs"
  147. },
  148. {
  149. "Antiy-AVL": "Trojan/Win32.SGeneric"
  150. },
  151. {
  152. "Microsoft": "Program:Win32/Uwamson.A!ml"
  153. },
  154. {
  155. "ViRobot": "Trojan.Win32.Z.Agent.9067642"
  156. },
  157. {
  158. "ZoneAlarm": "Trojan-Dropper.Win32.Agent.bjtgdq"
  159. },
  160. {
  161. "VBA32": "Rootkit.Ressdt"
  162. },
  163. {
  164. "TrendMicro-HouseCall": "TROJ_GEN.R002H07F419"
  165. },
  166. {
  167. "Tencent": "Win32.Trojan-dropper.Agent.Wtoa"
  168. },
  169. {
  170. "Fortinet": "W32/Agent.BJTGDQ!tr"
  171. },
  172. {
  173. "AVG": "FileRepMetagen [Malware]"
  174. },
  175. {
  176. "Cybereason": "malicious.7f17ed"
  177. },
  178. {
  179. "CrowdStrike": "win/malicious_confidence_60% (W)"
  180. }
  181. ]
  182. }
  183. ]
  184.  
  185. [*] Started Service: []
  186.  
  187. [*] Executed Commands: [
  188. "AutoPatch.exe "
  189. ]
  190.  
  191. [*] Mutexes: [
  192. "CicLoadWinStaWinSta0",
  193. "Local\\MSCTF.CtfMonitorInstMutexDefault1"
  194. ]
  195.  
  196. [*] Modified Files: [
  197. "C:\\Users\\user\\AppData\\Local\\Temp\\__tmp_rar_sfx_access_check_27197578",
  198. "C:\\Users\\user\\AppData\\Local\\Temp\\ini\\3dmotion.ini",
  199. "C:\\Users\\user\\AppData\\Local\\Temp\\ini\\gui.ini",
  200. "C:\\Users\\user\\AppData\\Local\\Temp\\ini\\MountMotion.ini",
  201. "C:\\Users\\user\\AppData\\Local\\Temp\\ini\\track.ini",
  202. "C:\\Users\\user\\AppData\\Local\\Temp\\TQPTZS\\StartBox.exe",
  203. "C:\\Users\\user\\AppData\\Local\\Temp\\TQPTZS\\TQPTZS.EXE",
  204. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0350.C3",
  205. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4\\0350.C3",
  206. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0350.C3",
  207. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4\\0350.C3",
  208. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2\\0350.C3",
  209. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0350.C3",
  210. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2\\0350.C3",
  211. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\4\\0350.C3",
  212. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\4\\0350.C3",
  213. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\2\\0350.C3",
  214. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\2\\0350.C3",
  215. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0351.C3",
  216. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0351.C3",
  217. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\4\\0390.C3",
  218. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0390.C3",
  219. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0390.C3",
  220. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4\\0390.C3",
  221. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2\\0390.C3",
  222. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0390.C3",
  223. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0390.C3",
  224. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2\\0390.C3",
  225. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0390.C3",
  226. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4\\0390.C3",
  227. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\4\\0390.C3",
  228. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\2\\0390.C3",
  229. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\2\\0390.C3",
  230. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0400.C3",
  231. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0400.C3",
  232. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0400.C3",
  233. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0401.C3",
  234. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0401.C3",
  235. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0401.C3",
  236. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0408.C3",
  237. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0408.C3",
  238. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0408.C3",
  239. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0430.C3",
  240. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0430.C3",
  241. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0430.C3",
  242. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0430.C3",
  243. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0430.C3",
  244. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0431.C3",
  245. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0431.C3",
  246. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0431.C3",
  247. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0431.C3",
  248. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0431.C3",
  249. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0432.C3",
  250. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0432.C3",
  251. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0432.C3",
  252. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0432.C3",
  253. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0432.C3",
  254. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0433.C3",
  255. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0433.C3",
  256. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0433.C3",
  257. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0433.C3",
  258. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0433.C3",
  259. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0434.C3",
  260. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0434.C3",
  261. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0434.C3",
  262. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0434.C3",
  263. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0434.C3",
  264. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0435.C3",
  265. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0435.C3",
  266. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0435.C3",
  267. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0435.C3",
  268. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0435.C3",
  269. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0611.C3",
  270. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0611.C3",
  271. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0611.C3",
  272. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0612.C3",
  273. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0612.C3",
  274. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0612.C3",
  275. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0613.C3",
  276. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0613.C3",
  277. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0613.C3",
  278. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0614.C3",
  279. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0614.C3",
  280. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0614.C3",
  281. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0615.C3",
  282. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0615.C3",
  283. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0615.C3",
  284. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0616.C3",
  285. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0616.C3",
  286. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0616.C3",
  287. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0700.C3",
  288. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0700.C3",
  289. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0700.C3",
  290. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0700.C3",
  291. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0700.C3",
  292. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0710.C3",
  293. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0710.C3",
  294. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0710.C3",
  295. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0711.C3",
  296. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0711.C3",
  297. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0711.C3",
  298. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0712.C3",
  299. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0712.C3",
  300. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0712.C3",
  301. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0713.C3",
  302. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0713.C3",
  303. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0713.C3",
  304. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0714.C3",
  305. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0714.C3",
  306. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0714.C3",
  307. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0715.C3",
  308. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0715.C3",
  309. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0715.C3",
  310. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2\\0801.C3",
  311. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0801.C3",
  312. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0801.C3",
  313. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0801.C3",
  314. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4\\0801.C3",
  315. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0801.C3",
  316. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4\\0801.C3",
  317. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0801.C3",
  318. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2\\0801.C3",
  319. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0802.C3",
  320. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2\\0802.C3",
  321. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4\\0802.C3",
  322. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0802.C3",
  323. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0802.C3",
  324. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0802.C3",
  325. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0802.C3",
  326. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2\\0802.C3",
  327. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4\\0802.C3",
  328. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2\\0803.C3",
  329. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4\\0803.C3",
  330. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4\\0803.C3",
  331. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2\\0803.C3",
  332. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4\\0803.C3",
  333. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2\\0803.C3",
  334. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4\\0803.C3",
  335. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2\\0803.C3",
  336. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4\\0803.C3",
  337. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\4\\0823.C3",
  338. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\4\\0823.C3",
  339. "C:\\Users\\user\\AppData\\Local\\Temp\\TQPTZS\\ListTable.DAT",
  340. "C:\\Users\\user\\AppData\\Local\\Temp\\version.dat",
  341. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\beer\\beer-1.dds",
  342. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\beer\\beer-2.dds",
  343. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cattlefarm\\cattlefarm-1.dds",
  344. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cattlefarm\\cattlefarm-2.dds",
  345. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cornfield\\cornfield-1.dds",
  346. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cornfield\\cornfield-2.dds",
  347. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\garden\\garden-1.dds",
  348. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\garden\\garden-2.dds",
  349. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\grape\\grape-1.dds",
  350. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\grape\\grape-2.dds",
  351. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove01.dds",
  352. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove03.dds",
  353. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove04.dds",
  354. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove05.dds",
  355. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove06.dds",
  356. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove07.dds",
  357. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove08.dds",
  358. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove09.dds",
  359. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove10.dds",
  360. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house001\\house001-02.dds",
  361. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house002\\house002-02.dds",
  362. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house003\\house003-02.dds",
  363. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house004\\house004-02.dds",
  364. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house005\\house005-01.dds",
  365. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house006\\house006-02.dds",
  366. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house007\\house007-02.dds",
  367. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house008\\house008-02.dds",
  368. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house009\\house009-02.dds",
  369. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house010\\house010-02.dds",
  370. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house011\\house011-02.dds",
  371. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house012\\house012-02.dds",
  372. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house013\\house013-02.dds",
  373. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house014\\house014-02.dds",
  374. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house015\\house015-02.dds",
  375. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house016\\house016-02.dds",
  376. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house017\\house017-02.dds",
  377. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house018\\house018-02.dds",
  378. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house019\\house019-02.dds",
  379. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house020\\house020-02.dds",
  380. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house022\\house022-02.dds",
  381. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house023\\house023-02.dds",
  382. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house024\\house024-02.dds",
  383. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house025\\house025-02.dds",
  384. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house026\\house026-02.dds",
  385. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house027\\house027-02.dds",
  386. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house031\\house031-02.dds",
  387. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house032\\house032-02.dds",
  388. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house033\\house033-01.dds",
  389. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house034\\house034-01.dds",
  390. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house035\\house035-01.dds",
  391. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house036\\house036-02.dds",
  392. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house037\\house037-02.dds",
  393. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house038\\house038-02.dds",
  394. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house039\\house039-02.dds",
  395. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house040\\house040-02.dds",
  396. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house041\\house041-02.dds",
  397. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house042\\house042-02.dds",
  398. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house043\\house043-02.dds",
  399. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house044\\house044-02.dds",
  400. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house045\\house045-02.dds",
  401. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house046\\house046-02.dds",
  402. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house047\\house047-02.dds",
  403. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house048\\house048-02.dds",
  404. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house049\\house049-02.dds",
  405. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house050\\house050-02.dds",
  406. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house051\\house051-02.dds",
  407. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house052\\house052-02.dds",
  408. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house053\\house053-02.dds",
  409. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house054\\house054-02.dds",
  410. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house055\\house055-02.dds",
  411. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house056\\house056-02.dds",
  412. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house057\\house057-02.dds",
  413. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house058\\house058-02.dds",
  414. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house059\\house059-02.dds",
  415. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house060\\house060-02.dds",
  416. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house061\\house061-02.dds",
  417. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house062\\house062-02.dds",
  418. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house063\\house063-02.dds",
  419. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house064\\house064-02.dds",
  420. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house065\\house065-02.dds",
  421. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house066\\house066-02.dds",
  422. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house067\\house067-02.dds",
  423. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house068\\house068-02.dds",
  424. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house069\\house069-02.dds",
  425. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house070\\house070-02.dds",
  426. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house071\\house071-02.dds",
  427. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house072\\house072-02.dds",
  428. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house075\\house075-02.dds",
  429. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house076\\house076-02.dds",
  430. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house077\\house077-01.dds",
  431. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house078\\house078-02.dds",
  432. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house081\\house081-02.dds",
  433. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house082\\house082-02.dds",
  434. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house083\\house083-01.dds",
  435. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house083\\house083-02.dds",
  436. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house084\\house084-01.dds",
  437. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house084\\house084-02.dds",
  438. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house085\\house085-01.dds",
  439. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house085\\house085-02.dds",
  440. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house086\\house086-02.dds",
  441. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house087\\house087-02.dds",
  442. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house088\\house088-02.dds",
  443. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house089\\house089-02.dds",
  444. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house092\\house092-02.dds",
  445. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house093\\house093-02.dds",
  446. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house094\\house094-02.dds",
  447. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house095\\house095-02.dds",
  448. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house096\\house096-02.dds",
  449. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house097\\house097-02.dds",
  450. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house098\\house098-02A.dds",
  451. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house098\\house098-02B.dds",
  452. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house099\\house099-02.dds",
  453. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house100\\house100-02.dds",
  454. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house101\\house101-02.dds",
  455. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house102\\house102-02.dds",
  456. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\mindcompBG.dds",
  457. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\olive\\olive-1.dds",
  458. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\olive\\olive-2.dds",
  459. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\orchard\\orchard-1.dds",
  460. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\orchard\\orchard-2.dds",
  461. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\pound\\pound-1.dds",
  462. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\pound\\pound-2.dds",
  463. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\refer01.dds",
  464. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\refer02.dds",
  465. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\refer03.dds",
  466. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\search01.dds",
  467. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\search02.dds",
  468. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete\\search03.dds",
  469. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sheepwalk\\sheepwalk-1.dds",
  470. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sheepwalk\\sheepwalk-2.dds",
  471. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery1.dds",
  472. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery2.dds",
  473. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery3.dds",
  474. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery4.dds",
  475. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery5.dds",
  476. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sty\\sty-1.dds",
  477. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sty\\sty-2.dds",
  478. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement005\\tenement005-2.dds",
  479. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement006\\tenement006-2.dds",
  480. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement007\\tenement007-2.dds",
  481. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement008\\tenement008-2.dds",
  482. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis01.DMap",
  483. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis02.DMap",
  484. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis04.DMap",
  485. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis05.DMap",
  486. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis07.DMap",
  487. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis08.DMap",
  488. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map\\polis09.DMap",
  489. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\beer\\beer-1.MSK",
  490. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\beer\\beer-2.MSK",
  491. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cattlefarm\\cattlefarm-1.MSK",
  492. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cattlefarm\\cattlefarm-2.MSK",
  493. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cornfield\\cornfield-1.MSK",
  494. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cornfield\\cornfield-2.MSK",
  495. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\garden\\garden-1.MSK",
  496. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\garden\\garden-2.MSK",
  497. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\grape\\grape-1.MSK",
  498. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\grape\\grape-2.MSK",
  499. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove01.MSK",
  500. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove03.MSK",
  501. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove04.MSK",
  502. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove05.MSK",
  503. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove06.MSK",
  504. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove07.MSK",
  505. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove08.MSK",
  506. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove09.MSK",
  507. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\grove10.MSK",
  508. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house001\\house001-02.MSK",
  509. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house002\\house002-02.MSK",
  510. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house003\\house003-02.MSK",
  511. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house004\\house004-02.MSK",
  512. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house005\\house005-01.MSK",
  513. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house006\\house006-02.MSK",
  514. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house007\\house007-02.MSK",
  515. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house008\\house008-02.MSK",
  516. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house009\\house009-02.MSK",
  517. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house010\\house010-02.MSK",
  518. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house011\\house011-02.MSK",
  519. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house012\\house012-02.MSK",
  520. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house013\\house013-02.MSK",
  521. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house014\\house014-02.MSK",
  522. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house015\\house015-02.MSK",
  523. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house016\\house016-02.MSK",
  524. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house017\\house017-02.MSK",
  525. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house018\\house018-02.MSK",
  526. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house019\\house019-02.MSK",
  527. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house020\\house020-02.MSK",
  528. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house022\\house022-02.MSK",
  529. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house023\\house023-02.MSK",
  530. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house024\\house024-02.MSK",
  531. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house025\\house025-02.MSK",
  532. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house026\\house026-02.MSK",
  533. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house027\\house027-02.MSK",
  534. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house031\\house031-02.MSK",
  535. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house032\\house032-02.MSK",
  536. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house033\\house033-01.MSK",
  537. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house034\\house034-01.MSK",
  538. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house035\\house035-01.MSK",
  539. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house036\\house036-02.MSK",
  540. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house037\\house037-02.MSK",
  541. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house038\\house038-02.MSK",
  542. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house039\\house039-02.MSK",
  543. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house040\\house040-02.MSK",
  544. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house041\\house041-02.MSK",
  545. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house042\\house042-02.MSK",
  546. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house043\\house043-02.MSK",
  547. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house044\\house044-02.MSK",
  548. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house045\\house045-02.MSK",
  549. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house046\\house046-02.MSK",
  550. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house047\\house047-02.MSK",
  551. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house048\\house048-02.MSK",
  552. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house049\\house049-02.MSK",
  553. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house050\\house050-02.MSK",
  554. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house051\\house051-02.MSK",
  555. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house052\\house052-02.MSK",
  556. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house053\\house053-02.MSK",
  557. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house054\\house054-02.MSK",
  558. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house055\\house055-02.MSK",
  559. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house056\\house056-02.MSK",
  560. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house057\\house057-02.MSK",
  561. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house058\\house058-02.MSK",
  562. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house059\\house059-02.MSK",
  563. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house060\\house060-02.MSK",
  564. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house061\\house061-02.MSK",
  565. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house062\\house062-02.MSK",
  566. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house063\\house063-02.MSK",
  567. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house064\\house064-02.MSK",
  568. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house065\\house065-02.MSK",
  569. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house066\\house066-02.MSK",
  570. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house067\\house067-02.MSK",
  571. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house068\\house068-02.MSK",
  572. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house069\\house069-02.MSK",
  573. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house070\\house070-02.MSK",
  574. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house071\\house071-02.MSK",
  575. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house072\\house072-02.MSK",
  576. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house075\\house075-02.MSK",
  577. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house076\\house076-02.MSK",
  578. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house077\\house077-01.MSK",
  579. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house078\\house078-02.MSK",
  580. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house081\\house081-02.MSK",
  581. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house082\\house082-02.MSK",
  582. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house083\\house083-01.MSK",
  583. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house083\\house083-02.MSK",
  584. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house084\\house084-01.MSK",
  585. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house084\\house084-02.MSK",
  586. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house085\\house085-01.MSK",
  587. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house085\\house085-02.MSK",
  588. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house086\\house086-02.MSK",
  589. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house087\\house087-02.MSK",
  590. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house088\\house088-02.MSK",
  591. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house089\\house089-02.MSK",
  592. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house092\\house092-02.MSK",
  593. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house093\\house093-02.MSK",
  594. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house094\\house094-02.MSK",
  595. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house095\\house095-02.MSK",
  596. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house096\\house096-02.MSK",
  597. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house097\\house097-02.MSK",
  598. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house098\\house098-02A.MSK",
  599. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house098\\house098-02B.MSK",
  600. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house099\\house099-02.MSK",
  601. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house100\\house100-02.MSK",
  602. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house101\\house101-02.MSK",
  603. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house102\\house102-02.MSK",
  604. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\olive\\olive-1.MSK",
  605. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\olive\\olive-2.MSK",
  606. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\orchard\\orchard-1.MSK",
  607. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\orchard\\orchard-2.MSK",
  608. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\pound\\pound-1.MSK",
  609. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\pound\\pound-2.MSK",
  610. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sheepwalk\\sheepwalk-1.MSK",
  611. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sheepwalk\\sheepwalk-2.MSK",
  612. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery1.MSK",
  613. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery2.MSK",
  614. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery3.MSK",
  615. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery4.MSK",
  616. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree\\shrubbery5.MSK",
  617. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sty\\sty-1.MSK",
  618. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sty\\sty-2.MSK",
  619. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement005\\tenement005-2.MSK",
  620. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement006\\tenement006-2.MSK",
  621. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement007\\tenement007-2.MSK",
  622. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement008\\tenement008-2.MSK",
  623. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\puzzle\\polis01-bg03.pul",
  624. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\puzzle\\polis01-bg04.pul",
  625. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove01.scene",
  626. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove03.scene",
  627. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove04.scene",
  628. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove05.scene",
  629. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove06.scene",
  630. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove07.scene",
  631. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove08.scene",
  632. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove09.scene",
  633. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\grove10.scene",
  634. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house001-02.scene",
  635. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house002-02.scene",
  636. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house003-02.scene",
  637. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house004-02.scene",
  638. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house005-01.scene",
  639. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house006-02.scene",
  640. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house007-02.scene",
  641. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house008-02.scene",
  642. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house009-02.scene",
  643. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house010-02.scene",
  644. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house011-02.scene",
  645. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house012-02.scene",
  646. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house013-02.scene",
  647. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house014-02.scene",
  648. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house015-02.scene",
  649. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house016-02.scene",
  650. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house017-02.scene",
  651. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house018-02.scene",
  652. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house019-02.scene",
  653. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house020-02.scene",
  654. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house021-01.scene",
  655. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house022-02.scene",
  656. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house023-02.scene",
  657. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house024-02.scene",
  658. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house025-02.scene",
  659. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house026-02.scene",
  660. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house027-02.scene",
  661. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house028-02.scene",
  662. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house029-02.scene",
  663. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house030-02.scene",
  664. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house031-02.scene",
  665. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house032-02.scene",
  666. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house033-01.scene",
  667. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house034-01.scene",
  668. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house035-01.scene",
  669. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house036-02.scene",
  670. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house037-02.scene",
  671. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house038-02.scene",
  672. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house039-02.scene",
  673. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house040-02.scene",
  674. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house041-02.scene",
  675. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house042-02.scene",
  676. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house043-02.scene",
  677. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house044-02.scene",
  678. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house045-02.scene",
  679. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house046-02.scene",
  680. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house047-02.scene",
  681. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house048-02.scene",
  682. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house049-02.scene",
  683. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house050-02.scene",
  684. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house051-02.scene",
  685. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house052-02.scene",
  686. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house053-02.scene",
  687. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house054-02.scene",
  688. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house055-02.scene",
  689. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house056-02.scene",
  690. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house057-02.scene",
  691. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house058-02.scene",
  692. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house059-02.scene",
  693. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house060-02.scene",
  694. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house061-02.scene",
  695. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house062-02.scene",
  696. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house063-02.scene",
  697. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house064-02.scene",
  698. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house065-02.scene",
  699. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house066-02.scene",
  700. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house067-02.scene",
  701. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house068-02.scene",
  702. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house069-02.scene",
  703. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house070-02.scene",
  704. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house071-02.scene",
  705. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house072-02.scene",
  706. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house073-02.scene",
  707. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house074-02.scene",
  708. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house075-02.scene",
  709. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house076-02.scene",
  710. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house077-01.scene",
  711. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house078-02.scene",
  712. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house079-02.scene",
  713. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house080-02.scene",
  714. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house081-02.scene",
  715. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house082-02.scene",
  716. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house083-01.scene",
  717. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house083-02.scene",
  718. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house084-01.scene",
  719. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house084-02.scene",
  720. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house085-01.scene",
  721. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house085-02.scene",
  722. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house086-02.scene",
  723. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house087-02.scene",
  724. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house088-02.scene",
  725. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house089-02.scene",
  726. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house092-02.scene",
  727. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house093-02.scene",
  728. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house094-02.scene",
  729. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house095-02.scene",
  730. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house096-02.scene",
  731. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house097-02.scene",
  732. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house098-02A.scene",
  733. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house098-02B.scene",
  734. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house099-02.scene",
  735. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house100-02.scene",
  736. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house101-02.scene",
  737. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\house102-02.scene",
  738. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\tree256-1.scene",
  739. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\tree256-2.scene",
  740. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\tree512-1.scene",
  741. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene\\tree512-2.scene",
  742. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\beer",
  743. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cattlefarm",
  744. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\cornfield",
  745. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\garden",
  746. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\grape",
  747. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house001",
  748. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house002",
  749. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house003",
  750. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house004",
  751. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house005",
  752. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house006",
  753. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house007",
  754. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house008",
  755. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house009",
  756. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house010",
  757. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house011",
  758. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house012",
  759. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house013",
  760. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house014",
  761. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house015",
  762. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house016",
  763. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house017",
  764. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house018",
  765. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house019",
  766. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house020",
  767. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house022",
  768. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house023",
  769. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house024",
  770. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house025",
  771. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house026",
  772. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house027",
  773. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house031",
  774. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house032",
  775. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house033",
  776. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house034",
  777. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house035",
  778. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house036",
  779. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house037",
  780. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house038",
  781. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house039",
  782. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house040",
  783. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house041",
  784. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house042",
  785. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house043",
  786. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house044",
  787. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house045",
  788. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house046",
  789. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house047",
  790. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house048",
  791. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house049",
  792. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house050",
  793. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house051",
  794. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house052",
  795. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house053",
  796. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house054",
  797. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house055",
  798. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house056",
  799. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house057",
  800. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house058",
  801. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house059",
  802. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house060",
  803. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house061",
  804. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house062",
  805. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house063",
  806. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house064",
  807. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house065",
  808. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house066",
  809. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house067",
  810. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house068",
  811. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house069",
  812. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house070",
  813. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house071",
  814. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house072",
  815. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house075",
  816. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house076",
  817. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house077",
  818. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house078",
  819. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house081",
  820. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house082",
  821. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house083",
  822. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house084",
  823. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house085",
  824. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house086",
  825. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house087",
  826. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house088",
  827. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house089",
  828. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house092",
  829. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house093",
  830. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house094",
  831. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house095",
  832. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house096",
  833. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house097",
  834. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house098",
  835. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house099",
  836. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house100",
  837. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house101",
  838. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house\\house102",
  839. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\olive",
  840. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\orchard",
  841. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\pound",
  842. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sheepwalk",
  843. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis\\sty",
  844. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement005",
  845. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement006",
  846. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement007",
  847. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement\\tenement008",
  848. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\p-house",
  849. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\polis",
  850. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tenement",
  851. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle\\tree",
  852. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\2",
  853. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\2",
  854. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\2",
  855. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\2",
  856. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\2",
  857. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\2",
  858. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410\\4",
  859. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440\\4",
  860. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000\\4",
  861. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410\\4",
  862. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440\\4",
  863. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490\\4",
  864. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490\\4",
  865. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene\\castle",
  866. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01\\mindcompete",
  867. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\000",
  868. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\410",
  869. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\410",
  870. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001\\440",
  871. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002\\440",
  872. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001\\490",
  873. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002\\490",
  874. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map\\scene",
  875. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface\\Style01",
  876. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0001",
  877. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0001",
  878. "C:\\Users\\user\\AppData\\Local\\Temp\\c3\\0002",
  879. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1\\0002",
  880. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\interface",
  881. "C:\\Users\\user\\AppData\\Local\\Temp\\data\\map",
  882. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\map",
  883. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\puzzle",
  884. "C:\\Users\\user\\AppData\\Local\\Temp\\map\\scene",
  885. "C:\\Users\\user\\AppData\\Local\\Temp\\c3",
  886. "C:\\Users\\user\\AppData\\Local\\Temp\\data",
  887. "C:\\Users\\user\\AppData\\Local\\Temp\\ini",
  888. "C:\\Users\\user\\AppData\\Local\\Temp\\map",
  889. "C:\\Users\\user\\AppData\\Local\\Temp\\Paladin1",
  890. "C:\\Users\\user\\AppData\\Local\\Temp\\TQAT",
  891. "C:\\Users\\user\\AppData\\Local\\Temp\\TQPTZS"
  892. ]
  893.  
  894. [*] Deleted Files: [
  895. "C:\\Users\\user\\AppData\\Local\\Temp\\__tmp_rar_sfx_access_check_27197578"
  896. ]
  897.  
  898. [*] Modified Registry Keys: []
  899.  
  900. [*] Deleted Registry Keys: []
  901.  
  902. [*] DNS Communications: []
  903.  
  904. [*] Domains: []
  905.  
  906. [*] Network Communication - ICMP: []
  907.  
  908. [*] Network Communication - HTTP: []
  909.  
  910. [*] Network Communication - SMTP: []
  911.  
  912. [*] Network Communication - Hosts: []
  913.  
  914. [*] Network Communication - IRC: []
  915.  
  916. [*] Static Analysis: {
  917. "pe": {
  918. "peid_signatures": null,
  919. "imports": [
  920. {
  921. "imports": [
  922. {
  923. "name": "AdjustTokenPrivileges",
  924. "address": "0x41c0e0"
  925. },
  926. {
  927. "name": "LookupPrivilegeValueA",
  928. "address": "0x41c0e4"
  929. },
  930. {
  931. "name": "OpenProcessToken",
  932. "address": "0x41c0e8"
  933. },
  934. {
  935. "name": "RegCloseKey",
  936. "address": "0x41c0ec"
  937. },
  938. {
  939. "name": "RegCreateKeyExA",
  940. "address": "0x41c0f0"
  941. },
  942. {
  943. "name": "RegOpenKeyExA",
  944. "address": "0x41c0f4"
  945. },
  946. {
  947. "name": "RegQueryValueExA",
  948. "address": "0x41c0f8"
  949. },
  950. {
  951. "name": "RegSetValueExA",
  952. "address": "0x41c0fc"
  953. },
  954. {
  955. "name": "SetFileSecurityA",
  956. "address": "0x41c100"
  957. },
  958. {
  959. "name": "SetFileSecurityW",
  960. "address": "0x41c104"
  961. }
  962. ],
  963. "dll": "ADVAPI32.DLL"
  964. },
  965. {
  966. "imports": [
  967. {
  968. "name": "CloseHandle",
  969. "address": "0x41c21c"
  970. },
  971. {
  972. "name": "CompareStringA",
  973. "address": "0x41c220"
  974. },
  975. {
  976. "name": "CreateDirectoryA",
  977. "address": "0x41c224"
  978. },
  979. {
  980. "name": "CreateDirectoryW",
  981. "address": "0x41c228"
  982. },
  983. {
  984. "name": "CreateFileA",
  985. "address": "0x41c22c"
  986. },
  987. {
  988. "name": "CreateFileW",
  989. "address": "0x41c230"
  990. },
  991. {
  992. "name": "DeleteFileA",
  993. "address": "0x41c234"
  994. },
  995. {
  996. "name": "DeleteFileW",
  997. "address": "0x41c238"
  998. },
  999. {
  1000. "name": "DosDateTimeToFileTime",
  1001. "address": "0x41c23c"
  1002. },
  1003. {
  1004. "name": "ExitProcess",
  1005. "address": "0x41c240"
  1006. },
  1007. {
  1008. "name": "ExpandEnvironmentStringsA",
  1009. "address": "0x41c244"
  1010. },
  1011. {
  1012. "name": "FileTimeToLocalFileTime",
  1013. "address": "0x41c248"
  1014. },
  1015. {
  1016. "name": "FileTimeToSystemTime",
  1017. "address": "0x41c24c"
  1018. },
  1019. {
  1020. "name": "FindClose",
  1021. "address": "0x41c250"
  1022. },
  1023. {
  1024. "name": "FindFirstFileA",
  1025. "address": "0x41c254"
  1026. },
  1027. {
  1028. "name": "FindFirstFileW",
  1029. "address": "0x41c258"
  1030. },
  1031. {
  1032. "name": "FindNextFileA",
  1033. "address": "0x41c25c"
  1034. },
  1035. {
  1036. "name": "FindNextFileW",
  1037. "address": "0x41c260"
  1038. },
  1039. {
  1040. "name": "FindResourceA",
  1041. "address": "0x41c264"
  1042. },
  1043. {
  1044. "name": "FreeLibrary",
  1045. "address": "0x41c268"
  1046. },
  1047. {
  1048. "name": "GetCPInfo",
  1049. "address": "0x41c26c"
  1050. },
  1051. {
  1052. "name": "GetCommandLineA",
  1053. "address": "0x41c270"
  1054. },
  1055. {
  1056. "name": "GetCurrentDirectoryA",
  1057. "address": "0x41c274"
  1058. },
  1059. {
  1060. "name": "GetCurrentProcess",
  1061. "address": "0x41c278"
  1062. },
  1063. {
  1064. "name": "GetDateFormatA",
  1065. "address": "0x41c27c"
  1066. },
  1067. {
  1068. "name": "GetFileAttributesA",
  1069. "address": "0x41c280"
  1070. },
  1071. {
  1072. "name": "GetFileAttributesW",
  1073. "address": "0x41c284"
  1074. },
  1075. {
  1076. "name": "GetFileType",
  1077. "address": "0x41c288"
  1078. },
  1079. {
  1080. "name": "GetFullPathNameA",
  1081. "address": "0x41c28c"
  1082. },
  1083. {
  1084. "name": "GetLastError",
  1085. "address": "0x41c290"
  1086. },
  1087. {
  1088. "name": "GetLocaleInfoA",
  1089. "address": "0x41c294"
  1090. },
  1091. {
  1092. "name": "GetModuleFileNameA",
  1093. "address": "0x41c298"
  1094. },
  1095. {
  1096. "name": "GetModuleHandleA",
  1097. "address": "0x41c29c"
  1098. },
  1099. {
  1100. "name": "GetNumberFormatA",
  1101. "address": "0x41c2a0"
  1102. },
  1103. {
  1104. "name": "GetProcAddress",
  1105. "address": "0x41c2a4"
  1106. },
  1107. {
  1108. "name": "GetProcessHeap",
  1109. "address": "0x41c2a8"
  1110. },
  1111. {
  1112. "name": "GetStdHandle",
  1113. "address": "0x41c2ac"
  1114. },
  1115. {
  1116. "name": "GetTempPathA",
  1117. "address": "0x41c2b0"
  1118. },
  1119. {
  1120. "name": "GetTickCount",
  1121. "address": "0x41c2b4"
  1122. },
  1123. {
  1124. "name": "GetTimeFormatA",
  1125. "address": "0x41c2b8"
  1126. },
  1127. {
  1128. "name": "GetVersionExA",
  1129. "address": "0x41c2bc"
  1130. },
  1131. {
  1132. "name": "GlobalAlloc",
  1133. "address": "0x41c2c0"
  1134. },
  1135. {
  1136. "name": "HeapAlloc",
  1137. "address": "0x41c2c4"
  1138. },
  1139. {
  1140. "name": "HeapFree",
  1141. "address": "0x41c2c8"
  1142. },
  1143. {
  1144. "name": "HeapReAlloc",
  1145. "address": "0x41c2cc"
  1146. },
  1147. {
  1148. "name": "IsDBCSLeadByte",
  1149. "address": "0x41c2d0"
  1150. },
  1151. {
  1152. "name": "LoadLibraryA",
  1153. "address": "0x41c2d4"
  1154. },
  1155. {
  1156. "name": "LocalFileTimeToFileTime",
  1157. "address": "0x41c2d8"
  1158. },
  1159. {
  1160. "name": "MoveFileA",
  1161. "address": "0x41c2dc"
  1162. },
  1163. {
  1164. "name": "MoveFileExA",
  1165. "address": "0x41c2e0"
  1166. },
  1167. {
  1168. "name": "MultiByteToWideChar",
  1169. "address": "0x41c2e4"
  1170. },
  1171. {
  1172. "name": "ReadFile",
  1173. "address": "0x41c2e8"
  1174. },
  1175. {
  1176. "name": "SetCurrentDirectoryA",
  1177. "address": "0x41c2ec"
  1178. },
  1179. {
  1180. "name": "SetEndOfFile",
  1181. "address": "0x41c2f0"
  1182. },
  1183. {
  1184. "name": "SetEnvironmentVariableA",
  1185. "address": "0x41c2f4"
  1186. },
  1187. {
  1188. "name": "SetFileAttributesA",
  1189. "address": "0x41c2f8"
  1190. },
  1191. {
  1192. "name": "SetFileAttributesW",
  1193. "address": "0x41c2fc"
  1194. },
  1195. {
  1196. "name": "SetFilePointer",
  1197. "address": "0x41c300"
  1198. },
  1199. {
  1200. "name": "SetFileTime",
  1201. "address": "0x41c304"
  1202. },
  1203. {
  1204. "name": "SetLastError",
  1205. "address": "0x41c308"
  1206. },
  1207. {
  1208. "name": "Sleep",
  1209. "address": "0x41c30c"
  1210. },
  1211. {
  1212. "name": "SystemTimeToFileTime",
  1213. "address": "0x41c310"
  1214. },
  1215. {
  1216. "name": "WaitForSingleObject",
  1217. "address": "0x41c314"
  1218. },
  1219. {
  1220. "name": "WideCharToMultiByte",
  1221. "address": "0x41c318"
  1222. },
  1223. {
  1224. "name": "WriteFile",
  1225. "address": "0x41c31c"
  1226. },
  1227. {
  1228. "name": "lstrcmpiA",
  1229. "address": "0x41c320"
  1230. },
  1231. {
  1232. "name": "lstrlenA",
  1233. "address": "0x41c324"
  1234. }
  1235. ],
  1236. "dll": "KERNEL32.DLL"
  1237. },
  1238. {
  1239. "imports": [
  1240. {
  1241. "name": null,
  1242. "address": "0x41c334"
  1243. }
  1244. ],
  1245. "dll": "COMCTL32.DLL"
  1246. },
  1247. {
  1248. "imports": [
  1249. {
  1250. "name": "CommDlgExtendedError",
  1251. "address": "0x41c34c"
  1252. },
  1253. {
  1254. "name": "GetOpenFileNameA",
  1255. "address": "0x41c350"
  1256. },
  1257. {
  1258. "name": "GetSaveFileNameA",
  1259. "address": "0x41c354"
  1260. }
  1261. ],
  1262. "dll": "COMDLG32.DLL"
  1263. },
  1264. {
  1265. "imports": [
  1266. {
  1267. "name": "DeleteObject",
  1268. "address": "0x41c364"
  1269. }
  1270. ],
  1271. "dll": "GDI32.DLL"
  1272. },
  1273. {
  1274. "imports": [
  1275. {
  1276. "name": "SHBrowseForFolderA",
  1277. "address": "0x41c390"
  1278. },
  1279. {
  1280. "name": "SHChangeNotify",
  1281. "address": "0x41c394"
  1282. },
  1283. {
  1284. "name": "SHFileOperationA",
  1285. "address": "0x41c398"
  1286. },
  1287. {
  1288. "name": "SHGetFileInfoA",
  1289. "address": "0x41c39c"
  1290. },
  1291. {
  1292. "name": "SHGetMalloc",
  1293. "address": "0x41c3a0"
  1294. },
  1295. {
  1296. "name": "SHGetSpecialFolderLocation",
  1297. "address": "0x41c3a4"
  1298. },
  1299. {
  1300. "name": "ShellExecuteExA",
  1301. "address": "0x41c3a8"
  1302. },
  1303. {
  1304. "name": "SHGetPathFromIDListA",
  1305. "address": "0x41c3ac"
  1306. }
  1307. ],
  1308. "dll": "SHELL32.DLL"
  1309. },
  1310. {
  1311. "imports": [
  1312. {
  1313. "name": "CharToOemA",
  1314. "address": "0x41c488"
  1315. },
  1316. {
  1317. "name": "CharToOemBuffA",
  1318. "address": "0x41c48c"
  1319. },
  1320. {
  1321. "name": "CharUpperA",
  1322. "address": "0x41c490"
  1323. },
  1324. {
  1325. "name": "CopyRect",
  1326. "address": "0x41c494"
  1327. },
  1328. {
  1329. "name": "CreateWindowExA",
  1330. "address": "0x41c498"
  1331. },
  1332. {
  1333. "name": "DefWindowProcA",
  1334. "address": "0x41c49c"
  1335. },
  1336. {
  1337. "name": "DestroyIcon",
  1338. "address": "0x41c4a0"
  1339. },
  1340. {
  1341. "name": "DestroyWindow",
  1342. "address": "0x41c4a4"
  1343. },
  1344. {
  1345. "name": "DialogBoxParamA",
  1346. "address": "0x41c4a8"
  1347. },
  1348. {
  1349. "name": "DispatchMessageA",
  1350. "address": "0x41c4ac"
  1351. },
  1352. {
  1353. "name": "EnableWindow",
  1354. "address": "0x41c4b0"
  1355. },
  1356. {
  1357. "name": "EndDialog",
  1358. "address": "0x41c4b4"
  1359. },
  1360. {
  1361. "name": "FindWindowExA",
  1362. "address": "0x41c4b8"
  1363. },
  1364. {
  1365. "name": "GetClassNameA",
  1366. "address": "0x41c4bc"
  1367. },
  1368. {
  1369. "name": "GetClientRect",
  1370. "address": "0x41c4c0"
  1371. },
  1372. {
  1373. "name": "GetDlgItem",
  1374. "address": "0x41c4c4"
  1375. },
  1376. {
  1377. "name": "GetDlgItemTextA",
  1378. "address": "0x41c4c8"
  1379. },
  1380. {
  1381. "name": "GetMessageA",
  1382. "address": "0x41c4cc"
  1383. },
  1384. {
  1385. "name": "GetParent",
  1386. "address": "0x41c4d0"
  1387. },
  1388. {
  1389. "name": "GetSysColor",
  1390. "address": "0x41c4d4"
  1391. },
  1392. {
  1393. "name": "GetSystemMetrics",
  1394. "address": "0x41c4d8"
  1395. },
  1396. {
  1397. "name": "GetWindow",
  1398. "address": "0x41c4dc"
  1399. },
  1400. {
  1401. "name": "GetWindowLongA",
  1402. "address": "0x41c4e0"
  1403. },
  1404. {
  1405. "name": "GetWindowRect",
  1406. "address": "0x41c4e4"
  1407. },
  1408. {
  1409. "name": "GetWindowTextA",
  1410. "address": "0x41c4e8"
  1411. },
  1412. {
  1413. "name": "IsWindow",
  1414. "address": "0x41c4ec"
  1415. },
  1416. {
  1417. "name": "IsWindowVisible",
  1418. "address": "0x41c4f0"
  1419. },
  1420. {
  1421. "name": "LoadBitmapA",
  1422. "address": "0x41c4f4"
  1423. },
  1424. {
  1425. "name": "LoadCursorA",
  1426. "address": "0x41c4f8"
  1427. },
  1428. {
  1429. "name": "LoadIconA",
  1430. "address": "0x41c4fc"
  1431. },
  1432. {
  1433. "name": "LoadStringA",
  1434. "address": "0x41c500"
  1435. },
  1436. {
  1437. "name": "MapWindowPoints",
  1438. "address": "0x41c504"
  1439. },
  1440. {
  1441. "name": "MessageBoxA",
  1442. "address": "0x41c508"
  1443. },
  1444. {
  1445. "name": "OemToCharA",
  1446. "address": "0x41c50c"
  1447. },
  1448. {
  1449. "name": "OemToCharBuffA",
  1450. "address": "0x41c510"
  1451. },
  1452. {
  1453. "name": "PeekMessageA",
  1454. "address": "0x41c514"
  1455. },
  1456. {
  1457. "name": "PostMessageA",
  1458. "address": "0x41c518"
  1459. },
  1460. {
  1461. "name": "RegisterClassExA",
  1462. "address": "0x41c51c"
  1463. },
  1464. {
  1465. "name": "SendDlgItemMessageA",
  1466. "address": "0x41c520"
  1467. },
  1468. {
  1469. "name": "SendMessageA",
  1470. "address": "0x41c524"
  1471. },
  1472. {
  1473. "name": "SetDlgItemTextA",
  1474. "address": "0x41c528"
  1475. },
  1476. {
  1477. "name": "SetFocus",
  1478. "address": "0x41c52c"
  1479. },
  1480. {
  1481. "name": "SetMenu",
  1482. "address": "0x41c530"
  1483. },
  1484. {
  1485. "name": "SetWindowLongA",
  1486. "address": "0x41c534"
  1487. },
  1488. {
  1489. "name": "SetWindowPos",
  1490. "address": "0x41c538"
  1491. },
  1492. {
  1493. "name": "SetWindowTextA",
  1494. "address": "0x41c53c"
  1495. },
  1496. {
  1497. "name": "ShowWindow",
  1498. "address": "0x41c540"
  1499. },
  1500. {
  1501. "name": "TranslateMessage",
  1502. "address": "0x41c544"
  1503. },
  1504. {
  1505. "name": "UpdateWindow",
  1506. "address": "0x41c548"
  1507. },
  1508. {
  1509. "name": "WaitForInputIdle",
  1510. "address": "0x41c54c"
  1511. },
  1512. {
  1513. "name": "wsprintfA",
  1514. "address": "0x41c550"
  1515. },
  1516. {
  1517. "name": "wvsprintfA",
  1518. "address": "0x41c554"
  1519. }
  1520. ],
  1521. "dll": "USER32.DLL"
  1522. },
  1523. {
  1524. "imports": [
  1525. {
  1526. "name": "CLSIDFromString",
  1527. "address": "0x41c574"
  1528. },
  1529. {
  1530. "name": "CoCreateInstance",
  1531. "address": "0x41c578"
  1532. },
  1533. {
  1534. "name": "CreateStreamOnHGlobal",
  1535. "address": "0x41c57c"
  1536. },
  1537. {
  1538. "name": "OleInitialize",
  1539. "address": "0x41c580"
  1540. },
  1541. {
  1542. "name": "OleUninitialize",
  1543. "address": "0x41c584"
  1544. }
  1545. ],
  1546. "dll": "OLE32.DLL"
  1547. }
  1548. ],
  1549. "digital_signers": null,
  1550. "exported_dll_name": null,
  1551. "actual_checksum": "0x008aceb4",
  1552. "overlay": {
  1553. "size": "0x0088d07a",
  1554. "offset": "0x00018c00"
  1555. },
  1556. "imagebase": "0x00400000",
  1557. "reported_checksum": "0x00000000",
  1558. "icon_hash": null,
  1559. "entrypoint": "0x00401000",
  1560. "timestamp": "2007-09-20 12:34:46",
  1561. "osversion": "4.0",
  1562. "sections": [
  1563. {
  1564. "name": ".text",
  1565. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1566. "virtual_address": "0x00001000",
  1567. "size_of_data": "0x00013800",
  1568. "entropy": "6.47",
  1569. "raw_address": "0x00000600",
  1570. "virtual_size": "0x00014000",
  1571. "characteristics_raw": "0x60000020"
  1572. },
  1573. {
  1574. "name": ".data",
  1575. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  1576. "virtual_address": "0x00015000",
  1577. "size_of_data": "0x00000a00",
  1578. "entropy": "4.91",
  1579. "raw_address": "0x00013e00",
  1580. "virtual_size": "0x00007000",
  1581. "characteristics_raw": "0xc0000040"
  1582. },
  1583. {
  1584. "name": ".idata",
  1585. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1586. "virtual_address": "0x0001c000",
  1587. "size_of_data": "0x00001000",
  1588. "entropy": "5.12",
  1589. "raw_address": "0x00014800",
  1590. "virtual_size": "0x00001000",
  1591. "characteristics_raw": "0x40000040"
  1592. },
  1593. {
  1594. "name": ".rsrc",
  1595. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1596. "virtual_address": "0x0001d000",
  1597. "size_of_data": "0x00003400",
  1598. "entropy": "5.18",
  1599. "raw_address": "0x00015800",
  1600. "virtual_size": "0x00003347",
  1601. "characteristics_raw": "0x40000040"
  1602. }
  1603. ],
  1604. "resources": [],
  1605. "dirents": [
  1606. {
  1607. "virtual_address": "0x00000000",
  1608. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1609. "size": "0x00000000"
  1610. },
  1611. {
  1612. "virtual_address": "0x0001c000",
  1613. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1614. "size": "0x00000fd1"
  1615. },
  1616. {
  1617. "virtual_address": "0x0001d000",
  1618. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1619. "size": "0x00003347"
  1620. },
  1621. {
  1622. "virtual_address": "0x00000000",
  1623. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1624. "size": "0x00000000"
  1625. },
  1626. {
  1627. "virtual_address": "0x00000000",
  1628. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1629. "size": "0x00000000"
  1630. },
  1631. {
  1632. "virtual_address": "0x00000000",
  1633. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1634. "size": "0x00000000"
  1635. },
  1636. {
  1637. "virtual_address": "0x00000000",
  1638. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1639. "size": "0x00000000"
  1640. },
  1641. {
  1642. "virtual_address": "0x00000000",
  1643. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1644. "size": "0x00000000"
  1645. },
  1646. {
  1647. "virtual_address": "0x00000000",
  1648. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1649. "size": "0x00000000"
  1650. },
  1651. {
  1652. "virtual_address": "0x00000000",
  1653. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1654. "size": "0x00000000"
  1655. },
  1656. {
  1657. "virtual_address": "0x00000000",
  1658. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1659. "size": "0x00000000"
  1660. },
  1661. {
  1662. "virtual_address": "0x00000000",
  1663. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1664. "size": "0x00000000"
  1665. },
  1666. {
  1667. "virtual_address": "0x00000000",
  1668. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1669. "size": "0x00000000"
  1670. },
  1671. {
  1672. "virtual_address": "0x00000000",
  1673. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1674. "size": "0x00000000"
  1675. },
  1676. {
  1677. "virtual_address": "0x00000000",
  1678. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1679. "size": "0x00000000"
  1680. },
  1681. {
  1682. "virtual_address": "0x00000000",
  1683. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1684. "size": "0x00000000"
  1685. }
  1686. ],
  1687. "exports": [],
  1688. "guest_signers": {},
  1689. "imphash": "bc5ce990cf54f8d435a68eb97512f73e",
  1690. "icon_fuzzy": null,
  1691. "icon": null,
  1692. "pdbpath": null,
  1693. "imported_dll_count": 8,
  1694. "versioninfo": []
  1695. }
  1696. }
  1697.  
  1698. [*] Resolved APIs: [
  1699. "comctl32.dll.InitCommonControlsEx",
  1700. "ole32.dll.CoGetMalloc",
  1701. "uxtheme.dll.ThemeInitApiHook",
  1702. "user32.dll.IsProcessDPIAware",
  1703. "dwmapi.dll.DwmIsCompositionEnabled",
  1704. "comctl32.dll.RegisterClassNameW",
  1705. "uxtheme.dll.EnableThemeDialogTexture",
  1706. "uxtheme.dll.OpenThemeData",
  1707. "uxtheme.dll.IsThemePartDefined",
  1708. "uxtheme.dll.GetThemeMargins",
  1709. "uxtheme.dll.GetThemeBool",
  1710. "uxtheme.dll.GetThemeInt",
  1711. "comctl32.dll.HIMAGELIST_QueryInterface",
  1712. "comctl32.dll.DrawShadowText",
  1713. "comctl32.dll.DrawSizeBox",
  1714. "comctl32.dll.DrawScrollBar",
  1715. "comctl32.dll.SizeBoxHwnd",
  1716. "comctl32.dll.ScrollBar_MouseMove",
  1717. "comctl32.dll.ScrollBar_Menu",
  1718. "comctl32.dll.HandleScrollCmd",
  1719. "comctl32.dll.DetachScrollBars",
  1720. "comctl32.dll.AttachScrollBars",
  1721. "comctl32.dll.CCSetScrollInfo",
  1722. "comctl32.dll.CCGetScrollInfo",
  1723. "comctl32.dll.CCEnableScrollBar",
  1724. "comctl32.dll.QuerySystemGestureStatus",
  1725. "uxtheme.dll.#49",
  1726. "uxtheme.dll.CloseThemeData",
  1727. "uxtheme.dll.SetWindowTheme",
  1728. "uxtheme.dll.GetThemeFont",
  1729. "uxtheme.dll.GetThemeColor",
  1730. "imm32.dll.ImmIsIME",
  1731. "gdi32.dll.GetLayout",
  1732. "gdi32.dll.GdiRealizationInfo",
  1733. "gdi32.dll.FontIsLinked",
  1734. "advapi32.dll.RegOpenKeyExW",
  1735. "advapi32.dll.RegQueryInfoKeyW",
  1736. "gdi32.dll.GetTextFaceAliasW",
  1737. "advapi32.dll.RegEnumValueW",
  1738. "advapi32.dll.RegCloseKey",
  1739. "advapi32.dll.RegQueryValueExW",
  1740. "gdi32.dll.GetFontAssocStatus",
  1741. "advapi32.dll.RegQueryValueExA",
  1742. "advapi32.dll.RegEnumKeyExW",
  1743. "gdi32.dll.GdiIsMetaPrintDC",
  1744. "shlwapi.dll.SHAutoComplete",
  1745. "ole32.dll.CoCreateInstance",
  1746. "imm32.dll.ImmGetContext",
  1747. "imm32.dll.ImmReleaseContext",
  1748. "imm32.dll.ImmAssociateContext",
  1749. "ole32.dll.CoInitializeEx",
  1750. "ole32.dll.CoUninitialize",
  1751. "cryptbase.dll.SystemFunction036",
  1752. "ole32.dll.CoRegisterInitializeSpy",
  1753. "ole32.dll.CoRevokeInitializeSpy",
  1754. "gdi32.dll.GetTextExtentExPointWPri",
  1755. "uxtheme.dll.BufferedPaintInit",
  1756. "uxtheme.dll.BufferedPaintRenderAnimation",
  1757. "uxtheme.dll.BeginBufferedAnimation",
  1758. "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
  1759. "uxtheme.dll.DrawThemeParentBackgroundEx",
  1760. "uxtheme.dll.DrawThemeBackground",
  1761. "uxtheme.dll.EndBufferedAnimation",
  1762. "uxtheme.dll.BeginBufferedPaint",
  1763. "uxtheme.dll.EndBufferedPaint",
  1764. "uxtheme.dll.GetThemeTransitionDuration",
  1765. "uxtheme.dll.DrawThemeParentBackground",
  1766. "uxtheme.dll.GetThemeBackgroundContentRect",
  1767. "uxtheme.dll.DrawThemeText",
  1768. "uxtheme.dll.GetThemePartSize",
  1769. "duser.dll.InvalidateGadget",
  1770. "comctl32.dll.#388",
  1771. "oleaut32.dll.#500",
  1772. "advapi32.dll.UnregisterTraceGuids",
  1773. "comctl32.dll.#321"
  1774. ]
  1775.  
  1776. [*] Static Analysis: {
  1777. "pe": {
  1778. "peid_signatures": null,
  1779. "imports": [
  1780. {
  1781. "imports": [
  1782. {
  1783. "name": "AdjustTokenPrivileges",
  1784. "address": "0x41c0e0"
  1785. },
  1786. {
  1787. "name": "LookupPrivilegeValueA",
  1788. "address": "0x41c0e4"
  1789. },
  1790. {
  1791. "name": "OpenProcessToken",
  1792. "address": "0x41c0e8"
  1793. },
  1794. {
  1795. "name": "RegCloseKey",
  1796. "address": "0x41c0ec"
  1797. },
  1798. {
  1799. "name": "RegCreateKeyExA",
  1800. "address": "0x41c0f0"
  1801. },
  1802. {
  1803. "name": "RegOpenKeyExA",
  1804. "address": "0x41c0f4"
  1805. },
  1806. {
  1807. "name": "RegQueryValueExA",
  1808. "address": "0x41c0f8"
  1809. },
  1810. {
  1811. "name": "RegSetValueExA",
  1812. "address": "0x41c0fc"
  1813. },
  1814. {
  1815. "name": "SetFileSecurityA",
  1816. "address": "0x41c100"
  1817. },
  1818. {
  1819. "name": "SetFileSecurityW",
  1820. "address": "0x41c104"
  1821. }
  1822. ],
  1823. "dll": "ADVAPI32.DLL"
  1824. },
  1825. {
  1826. "imports": [
  1827. {
  1828. "name": "CloseHandle",
  1829. "address": "0x41c21c"
  1830. },
  1831. {
  1832. "name": "CompareStringA",
  1833. "address": "0x41c220"
  1834. },
  1835. {
  1836. "name": "CreateDirectoryA",
  1837. "address": "0x41c224"
  1838. },
  1839. {
  1840. "name": "CreateDirectoryW",
  1841. "address": "0x41c228"
  1842. },
  1843. {
  1844. "name": "CreateFileA",
  1845. "address": "0x41c22c"
  1846. },
  1847. {
  1848. "name": "CreateFileW",
  1849. "address": "0x41c230"
  1850. },
  1851. {
  1852. "name": "DeleteFileA",
  1853. "address": "0x41c234"
  1854. },
  1855. {
  1856. "name": "DeleteFileW",
  1857. "address": "0x41c238"
  1858. },
  1859. {
  1860. "name": "DosDateTimeToFileTime",
  1861. "address": "0x41c23c"
  1862. },
  1863. {
  1864. "name": "ExitProcess",
  1865. "address": "0x41c240"
  1866. },
  1867. {
  1868. "name": "ExpandEnvironmentStringsA",
  1869. "address": "0x41c244"
  1870. },
  1871. {
  1872. "name": "FileTimeToLocalFileTime",
  1873. "address": "0x41c248"
  1874. },
  1875. {
  1876. "name": "FileTimeToSystemTime",
  1877. "address": "0x41c24c"
  1878. },
  1879. {
  1880. "name": "FindClose",
  1881. "address": "0x41c250"
  1882. },
  1883. {
  1884. "name": "FindFirstFileA",
  1885. "address": "0x41c254"
  1886. },
  1887. {
  1888. "name": "FindFirstFileW",
  1889. "address": "0x41c258"
  1890. },
  1891. {
  1892. "name": "FindNextFileA",
  1893. "address": "0x41c25c"
  1894. },
  1895. {
  1896. "name": "FindNextFileW",
  1897. "address": "0x41c260"
  1898. },
  1899. {
  1900. "name": "FindResourceA",
  1901. "address": "0x41c264"
  1902. },
  1903. {
  1904. "name": "FreeLibrary",
  1905. "address": "0x41c268"
  1906. },
  1907. {
  1908. "name": "GetCPInfo",
  1909. "address": "0x41c26c"
  1910. },
  1911. {
  1912. "name": "GetCommandLineA",
  1913. "address": "0x41c270"
  1914. },
  1915. {
  1916. "name": "GetCurrentDirectoryA",
  1917. "address": "0x41c274"
  1918. },
  1919. {
  1920. "name": "GetCurrentProcess",
  1921. "address": "0x41c278"
  1922. },
  1923. {
  1924. "name": "GetDateFormatA",
  1925. "address": "0x41c27c"
  1926. },
  1927. {
  1928. "name": "GetFileAttributesA",
  1929. "address": "0x41c280"
  1930. },
  1931. {
  1932. "name": "GetFileAttributesW",
  1933. "address": "0x41c284"
  1934. },
  1935. {
  1936. "name": "GetFileType",
  1937. "address": "0x41c288"
  1938. },
  1939. {
  1940. "name": "GetFullPathNameA",
  1941. "address": "0x41c28c"
  1942. },
  1943. {
  1944. "name": "GetLastError",
  1945. "address": "0x41c290"
  1946. },
  1947. {
  1948. "name": "GetLocaleInfoA",
  1949. "address": "0x41c294"
  1950. },
  1951. {
  1952. "name": "GetModuleFileNameA",
  1953. "address": "0x41c298"
  1954. },
  1955. {
  1956. "name": "GetModuleHandleA",
  1957. "address": "0x41c29c"
  1958. },
  1959. {
  1960. "name": "GetNumberFormatA",
  1961. "address": "0x41c2a0"
  1962. },
  1963. {
  1964. "name": "GetProcAddress",
  1965. "address": "0x41c2a4"
  1966. },
  1967. {
  1968. "name": "GetProcessHeap",
  1969. "address": "0x41c2a8"
  1970. },
  1971. {
  1972. "name": "GetStdHandle",
  1973. "address": "0x41c2ac"
  1974. },
  1975. {
  1976. "name": "GetTempPathA",
  1977. "address": "0x41c2b0"
  1978. },
  1979. {
  1980. "name": "GetTickCount",
  1981. "address": "0x41c2b4"
  1982. },
  1983. {
  1984. "name": "GetTimeFormatA",
  1985. "address": "0x41c2b8"
  1986. },
  1987. {
  1988. "name": "GetVersionExA",
  1989. "address": "0x41c2bc"
  1990. },
  1991. {
  1992. "name": "GlobalAlloc",
  1993. "address": "0x41c2c0"
  1994. },
  1995. {
  1996. "name": "HeapAlloc",
  1997. "address": "0x41c2c4"
  1998. },
  1999. {
  2000. "name": "HeapFree",
  2001. "address": "0x41c2c8"
  2002. },
  2003. {
  2004. "name": "HeapReAlloc",
  2005. "address": "0x41c2cc"
  2006. },
  2007. {
  2008. "name": "IsDBCSLeadByte",
  2009. "address": "0x41c2d0"
  2010. },
  2011. {
  2012. "name": "LoadLibraryA",
  2013. "address": "0x41c2d4"
  2014. },
  2015. {
  2016. "name": "LocalFileTimeToFileTime",
  2017. "address": "0x41c2d8"
  2018. },
  2019. {
  2020. "name": "MoveFileA",
  2021. "address": "0x41c2dc"
  2022. },
  2023. {
  2024. "name": "MoveFileExA",
  2025. "address": "0x41c2e0"
  2026. },
  2027. {
  2028. "name": "MultiByteToWideChar",
  2029. "address": "0x41c2e4"
  2030. },
  2031. {
  2032. "name": "ReadFile",
  2033. "address": "0x41c2e8"
  2034. },
  2035. {
  2036. "name": "SetCurrentDirectoryA",
  2037. "address": "0x41c2ec"
  2038. },
  2039. {
  2040. "name": "SetEndOfFile",
  2041. "address": "0x41c2f0"
  2042. },
  2043. {
  2044. "name": "SetEnvironmentVariableA",
  2045. "address": "0x41c2f4"
  2046. },
  2047. {
  2048. "name": "SetFileAttributesA",
  2049. "address": "0x41c2f8"
  2050. },
  2051. {
  2052. "name": "SetFileAttributesW",
  2053. "address": "0x41c2fc"
  2054. },
  2055. {
  2056. "name": "SetFilePointer",
  2057. "address": "0x41c300"
  2058. },
  2059. {
  2060. "name": "SetFileTime",
  2061. "address": "0x41c304"
  2062. },
  2063. {
  2064. "name": "SetLastError",
  2065. "address": "0x41c308"
  2066. },
  2067. {
  2068. "name": "Sleep",
  2069. "address": "0x41c30c"
  2070. },
  2071. {
  2072. "name": "SystemTimeToFileTime",
  2073. "address": "0x41c310"
  2074. },
  2075. {
  2076. "name": "WaitForSingleObject",
  2077. "address": "0x41c314"
  2078. },
  2079. {
  2080. "name": "WideCharToMultiByte",
  2081. "address": "0x41c318"
  2082. },
  2083. {
  2084. "name": "WriteFile",
  2085. "address": "0x41c31c"
  2086. },
  2087. {
  2088. "name": "lstrcmpiA",
  2089. "address": "0x41c320"
  2090. },
  2091. {
  2092. "name": "lstrlenA",
  2093. "address": "0x41c324"
  2094. }
  2095. ],
  2096. "dll": "KERNEL32.DLL"
  2097. },
  2098. {
  2099. "imports": [
  2100. {
  2101. "name": null,
  2102. "address": "0x41c334"
  2103. }
  2104. ],
  2105. "dll": "COMCTL32.DLL"
  2106. },
  2107. {
  2108. "imports": [
  2109. {
  2110. "name": "CommDlgExtendedError",
  2111. "address": "0x41c34c"
  2112. },
  2113. {
  2114. "name": "GetOpenFileNameA",
  2115. "address": "0x41c350"
  2116. },
  2117. {
  2118. "name": "GetSaveFileNameA",
  2119. "address": "0x41c354"
  2120. }
  2121. ],
  2122. "dll": "COMDLG32.DLL"
  2123. },
  2124. {
  2125. "imports": [
  2126. {
  2127. "name": "DeleteObject",
  2128. "address": "0x41c364"
  2129. }
  2130. ],
  2131. "dll": "GDI32.DLL"
  2132. },
  2133. {
  2134. "imports": [
  2135. {
  2136. "name": "SHBrowseForFolderA",
  2137. "address": "0x41c390"
  2138. },
  2139. {
  2140. "name": "SHChangeNotify",
  2141. "address": "0x41c394"
  2142. },
  2143. {
  2144. "name": "SHFileOperationA",
  2145. "address": "0x41c398"
  2146. },
  2147. {
  2148. "name": "SHGetFileInfoA",
  2149. "address": "0x41c39c"
  2150. },
  2151. {
  2152. "name": "SHGetMalloc",
  2153. "address": "0x41c3a0"
  2154. },
  2155. {
  2156. "name": "SHGetSpecialFolderLocation",
  2157. "address": "0x41c3a4"
  2158. },
  2159. {
  2160. "name": "ShellExecuteExA",
  2161. "address": "0x41c3a8"
  2162. },
  2163. {
  2164. "name": "SHGetPathFromIDListA",
  2165. "address": "0x41c3ac"
  2166. }
  2167. ],
  2168. "dll": "SHELL32.DLL"
  2169. },
  2170. {
  2171. "imports": [
  2172. {
  2173. "name": "CharToOemA",
  2174. "address": "0x41c488"
  2175. },
  2176. {
  2177. "name": "CharToOemBuffA",
  2178. "address": "0x41c48c"
  2179. },
  2180. {
  2181. "name": "CharUpperA",
  2182. "address": "0x41c490"
  2183. },
  2184. {
  2185. "name": "CopyRect",
  2186. "address": "0x41c494"
  2187. },
  2188. {
  2189. "name": "CreateWindowExA",
  2190. "address": "0x41c498"
  2191. },
  2192. {
  2193. "name": "DefWindowProcA",
  2194. "address": "0x41c49c"
  2195. },
  2196. {
  2197. "name": "DestroyIcon",
  2198. "address": "0x41c4a0"
  2199. },
  2200. {
  2201. "name": "DestroyWindow",
  2202. "address": "0x41c4a4"
  2203. },
  2204. {
  2205. "name": "DialogBoxParamA",
  2206. "address": "0x41c4a8"
  2207. },
  2208. {
  2209. "name": "DispatchMessageA",
  2210. "address": "0x41c4ac"
  2211. },
  2212. {
  2213. "name": "EnableWindow",
  2214. "address": "0x41c4b0"
  2215. },
  2216. {
  2217. "name": "EndDialog",
  2218. "address": "0x41c4b4"
  2219. },
  2220. {
  2221. "name": "FindWindowExA",
  2222. "address": "0x41c4b8"
  2223. },
  2224. {
  2225. "name": "GetClassNameA",
  2226. "address": "0x41c4bc"
  2227. },
  2228. {
  2229. "name": "GetClientRect",
  2230. "address": "0x41c4c0"
  2231. },
  2232. {
  2233. "name": "GetDlgItem",
  2234. "address": "0x41c4c4"
  2235. },
  2236. {
  2237. "name": "GetDlgItemTextA",
  2238. "address": "0x41c4c8"
  2239. },
  2240. {
  2241. "name": "GetMessageA",
  2242. "address": "0x41c4cc"
  2243. },
  2244. {
  2245. "name": "GetParent",
  2246. "address": "0x41c4d0"
  2247. },
  2248. {
  2249. "name": "GetSysColor",
  2250. "address": "0x41c4d4"
  2251. },
  2252. {
  2253. "name": "GetSystemMetrics",
  2254. "address": "0x41c4d8"
  2255. },
  2256. {
  2257. "name": "GetWindow",
  2258. "address": "0x41c4dc"
  2259. },
  2260. {
  2261. "name": "GetWindowLongA",
  2262. "address": "0x41c4e0"
  2263. },
  2264. {
  2265. "name": "GetWindowRect",
  2266. "address": "0x41c4e4"
  2267. },
  2268. {
  2269. "name": "GetWindowTextA",
  2270. "address": "0x41c4e8"
  2271. },
  2272. {
  2273. "name": "IsWindow",
  2274. "address": "0x41c4ec"
  2275. },
  2276. {
  2277. "name": "IsWindowVisible",
  2278. "address": "0x41c4f0"
  2279. },
  2280. {
  2281. "name": "LoadBitmapA",
  2282. "address": "0x41c4f4"
  2283. },
  2284. {
  2285. "name": "LoadCursorA",
  2286. "address": "0x41c4f8"
  2287. },
  2288. {
  2289. "name": "LoadIconA",
  2290. "address": "0x41c4fc"
  2291. },
  2292. {
  2293. "name": "LoadStringA",
  2294. "address": "0x41c500"
  2295. },
  2296. {
  2297. "name": "MapWindowPoints",
  2298. "address": "0x41c504"
  2299. },
  2300. {
  2301. "name": "MessageBoxA",
  2302. "address": "0x41c508"
  2303. },
  2304. {
  2305. "name": "OemToCharA",
  2306. "address": "0x41c50c"
  2307. },
  2308. {
  2309. "name": "OemToCharBuffA",
  2310. "address": "0x41c510"
  2311. },
  2312. {
  2313. "name": "PeekMessageA",
  2314. "address": "0x41c514"
  2315. },
  2316. {
  2317. "name": "PostMessageA",
  2318. "address": "0x41c518"
  2319. },
  2320. {
  2321. "name": "RegisterClassExA",
  2322. "address": "0x41c51c"
  2323. },
  2324. {
  2325. "name": "SendDlgItemMessageA",
  2326. "address": "0x41c520"
  2327. },
  2328. {
  2329. "name": "SendMessageA",
  2330. "address": "0x41c524"
  2331. },
  2332. {
  2333. "name": "SetDlgItemTextA",
  2334. "address": "0x41c528"
  2335. },
  2336. {
  2337. "name": "SetFocus",
  2338. "address": "0x41c52c"
  2339. },
  2340. {
  2341. "name": "SetMenu",
  2342. "address": "0x41c530"
  2343. },
  2344. {
  2345. "name": "SetWindowLongA",
  2346. "address": "0x41c534"
  2347. },
  2348. {
  2349. "name": "SetWindowPos",
  2350. "address": "0x41c538"
  2351. },
  2352. {
  2353. "name": "SetWindowTextA",
  2354. "address": "0x41c53c"
  2355. },
  2356. {
  2357. "name": "ShowWindow",
  2358. "address": "0x41c540"
  2359. },
  2360. {
  2361. "name": "TranslateMessage",
  2362. "address": "0x41c544"
  2363. },
  2364. {
  2365. "name": "UpdateWindow",
  2366. "address": "0x41c548"
  2367. },
  2368. {
  2369. "name": "WaitForInputIdle",
  2370. "address": "0x41c54c"
  2371. },
  2372. {
  2373. "name": "wsprintfA",
  2374. "address": "0x41c550"
  2375. },
  2376. {
  2377. "name": "wvsprintfA",
  2378. "address": "0x41c554"
  2379. }
  2380. ],
  2381. "dll": "USER32.DLL"
  2382. },
  2383. {
  2384. "imports": [
  2385. {
  2386. "name": "CLSIDFromString",
  2387. "address": "0x41c574"
  2388. },
  2389. {
  2390. "name": "CoCreateInstance",
  2391. "address": "0x41c578"
  2392. },
  2393. {
  2394. "name": "CreateStreamOnHGlobal",
  2395. "address": "0x41c57c"
  2396. },
  2397. {
  2398. "name": "OleInitialize",
  2399. "address": "0x41c580"
  2400. },
  2401. {
  2402. "name": "OleUninitialize",
  2403. "address": "0x41c584"
  2404. }
  2405. ],
  2406. "dll": "OLE32.DLL"
  2407. }
  2408. ],
  2409. "digital_signers": null,
  2410. "exported_dll_name": null,
  2411. "actual_checksum": "0x008aceb4",
  2412. "overlay": {
  2413. "size": "0x0088d07a",
  2414. "offset": "0x00018c00"
  2415. },
  2416. "imagebase": "0x00400000",
  2417. "reported_checksum": "0x00000000",
  2418. "icon_hash": null,
  2419. "entrypoint": "0x00401000",
  2420. "timestamp": "2007-09-20 12:34:46",
  2421. "osversion": "4.0",
  2422. "sections": [
  2423. {
  2424. "name": ".text",
  2425. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  2426. "virtual_address": "0x00001000",
  2427. "size_of_data": "0x00013800",
  2428. "entropy": "6.47",
  2429. "raw_address": "0x00000600",
  2430. "virtual_size": "0x00014000",
  2431. "characteristics_raw": "0x60000020"
  2432. },
  2433. {
  2434. "name": ".data",
  2435. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  2436. "virtual_address": "0x00015000",
  2437. "size_of_data": "0x00000a00",
  2438. "entropy": "4.91",
  2439. "raw_address": "0x00013e00",
  2440. "virtual_size": "0x00007000",
  2441. "characteristics_raw": "0xc0000040"
  2442. },
  2443. {
  2444. "name": ".idata",
  2445. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2446. "virtual_address": "0x0001c000",
  2447. "size_of_data": "0x00001000",
  2448. "entropy": "5.12",
  2449. "raw_address": "0x00014800",
  2450. "virtual_size": "0x00001000",
  2451. "characteristics_raw": "0x40000040"
  2452. },
  2453. {
  2454. "name": ".rsrc",
  2455. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  2456. "virtual_address": "0x0001d000",
  2457. "size_of_data": "0x00003400",
  2458. "entropy": "5.18",
  2459. "raw_address": "0x00015800",
  2460. "virtual_size": "0x00003347",
  2461. "characteristics_raw": "0x40000040"
  2462. }
  2463. ],
  2464. "resources": [],
  2465. "dirents": [
  2466. {
  2467. "virtual_address": "0x00000000",
  2468. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  2469. "size": "0x00000000"
  2470. },
  2471. {
  2472. "virtual_address": "0x0001c000",
  2473. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  2474. "size": "0x00000fd1"
  2475. },
  2476. {
  2477. "virtual_address": "0x0001d000",
  2478. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  2479. "size": "0x00003347"
  2480. },
  2481. {
  2482. "virtual_address": "0x00000000",
  2483. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  2484. "size": "0x00000000"
  2485. },
  2486. {
  2487. "virtual_address": "0x00000000",
  2488. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  2489. "size": "0x00000000"
  2490. },
  2491. {
  2492. "virtual_address": "0x00000000",
  2493. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  2494. "size": "0x00000000"
  2495. },
  2496. {
  2497. "virtual_address": "0x00000000",
  2498. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  2499. "size": "0x00000000"
  2500. },
  2501. {
  2502. "virtual_address": "0x00000000",
  2503. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  2504. "size": "0x00000000"
  2505. },
  2506. {
  2507. "virtual_address": "0x00000000",
  2508. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  2509. "size": "0x00000000"
  2510. },
  2511. {
  2512. "virtual_address": "0x00000000",
  2513. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  2514. "size": "0x00000000"
  2515. },
  2516. {
  2517. "virtual_address": "0x00000000",
  2518. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  2519. "size": "0x00000000"
  2520. },
  2521. {
  2522. "virtual_address": "0x00000000",
  2523. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  2524. "size": "0x00000000"
  2525. },
  2526. {
  2527. "virtual_address": "0x00000000",
  2528. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  2529. "size": "0x00000000"
  2530. },
  2531. {
  2532. "virtual_address": "0x00000000",
  2533. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  2534. "size": "0x00000000"
  2535. },
  2536. {
  2537. "virtual_address": "0x00000000",
  2538. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  2539. "size": "0x00000000"
  2540. },
  2541. {
  2542. "virtual_address": "0x00000000",
  2543. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  2544. "size": "0x00000000"
  2545. }
  2546. ],
  2547. "exports": [],
  2548. "guest_signers": {},
  2549. "imphash": "bc5ce990cf54f8d435a68eb97512f73e",
  2550. "icon_fuzzy": null,
  2551. "icon": null,
  2552. "pdbpath": null,
  2553. "imported_dll_count": 8,
  2554. "versioninfo": []
  2555. }
  2556. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!