Filesystem and Registry Modifications
Hey everyone, I haven't posted in a while and I've been considering coming back, so I decided to start with a simple release. Below is listed all the filesystem and registry changes:
Installer:
FS:
Registry:
(Note: Class IDs are abbreviated as {#} for simplicity in reading, and that it may change)
First Run:
(Note: All the anti-cheat updaters ran, however HS was unable to initialize correctly, so this isn't a complete list)
FS:
Registry:
Tools used:
Sandboxie
SandboxieDiff
Installer:
FS:
Code:
> C:\Nexon\Combat Arms\bdcap32.dll > C:\Nexon\Combat Arms\binkw32.dll > C:\Nexon\Combat Arms\blSandBox.dll > C:\Nexon\Combat Arms\CAErrorReporter.cfg > C:\Nexon\Combat Arms\CAErrorReporter.exe > C:\Nexon\Combat Arms\CAV.exe > C:\Nexon\Combat Arms\CombatArms.exe > C:\Nexon\Combat Arms\CombatArms.US.aes > C:\Nexon\Combat Arms\d3dx9_35.dll > C:\Nexon\Combat Arms\DbgHelp.dll > C:\Nexon\Combat Arms\Engine.exe > C:\Nexon\Combat Arms\libsndfile-1.dll > C:\Nexon\Combat Arms\mss32.dll > C:\Nexon\Combat Arms\msvcr71d.dll > C:\Nexon\Combat Arms\nexon.dll > C:\Nexon\Combat Arms\nexon_api.dll > C:\Nexon\Combat Arms\NexonGuard.aes > C:\Nexon\Combat Arms\nmcogame.dll > C:\Nexon\Combat Arms\nmconew.dll > C:\Nexon\Combat Arms\NMService.exe > C:\Nexon\Combat Arms\ortp.dll > C:\Nexon\Combat Arms\steam_api.dll > C:\Nexon\Combat Arms\unicows.dll > C:\Nexon\Combat Arms\Uploader.exe > C:\Nexon\Combat Arms\vivoxoal.dll > C:\Nexon\Combat Arms\vivoxplatform.dll > C:\Nexon\Combat Arms\vivoxsdk.dll > C:\Nexon\Combat Arms\wrap_oal.dll > C:\Nexon\Combat Arms\zlib1.dll > C:\Nexon\Combat Arms\Game\ATTACH_M.rez > C:\Nexon\Combat Arms\Game\ATTACH_T.rez > C:\Nexon\Combat Arms\Game\ATTRIBUTES.rez > C:\Nexon\Combat Arms\Game\CHARS_M_BODY.rez > C:\Nexon\Combat Arms\Game\CHARS_M_FACE.rez > C:\Nexon\Combat Arms\Game\CHARS_M_HAND.rez > C:\Nexon\Combat Arms\Game\CHARS_M_HEAD.rez > C:\Nexon\Combat Arms\Game\CHARS_SND.rez > C:\Nexon\Combat Arms\Game\CHARS_T_BODY.rez > C:\Nexon\Combat Arms\Game\CHARS_T_FACE.rez > C:\Nexon\Combat Arms\Game\CHARS_T_HAND.rez > C:\Nexon\Combat Arms\Game\CHARS_T_HEAD.rez > C:\Nexon\Combat Arms\Game\ClanMark0.rez > C:\Nexon\Combat Arms\Game\CLASSICONS.rez > C:\Nexon\Combat Arms\Game\ClientFx.fxd > C:\Nexon\Combat Arms\Game\CLIENTFX.rez > C:\Nexon\Combat Arms\Game\CShell.dll > C:\Nexon\Combat Arms\Game\FONTS.rez > C:\Nexon\Combat Arms\Game\FX.rez > C:\Nexon\Combat Arms\Game\GMS.rez > C:\Nexon\Combat Arms\Game\GUNS_M_HH.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_AR.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_ETC.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_LAUNCHER.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_MELEE.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_MG.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_OPTION.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_Pistol.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_SG.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_SMG.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_SR.rez > C:\Nexon\Combat Arms\Game\GUNS_M_PV_Throwing.rez > C:\Nexon\Combat Arms\Game\GUNS_M_UI.rez > C:\Nexon\Combat Arms\Game\GUNS_PT.rez > C:\Nexon\Combat Arms\Game\GUNS_SC.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_AR.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_ETC.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_IMPACTS.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_LAUNCHER.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_MELEE.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_MG.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_OPTION.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_Pistol.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_SG.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_SHELLS.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_SMG.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_SR.rez > C:\Nexon\Combat Arms\Game\GUNS_SND_Throwing.rez > C:\Nexon\Combat Arms\Game\GUNS_T_HH.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_AR.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_ETC.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_HAND.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_LAUNCHER.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_MELEE.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_MG.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_OPTION.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_Pistol.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_SG.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_SMG.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_SR.rez > C:\Nexon\Combat Arms\Game\GUNS_T_PV_Throwing.rez > C:\Nexon\Combat Arms\Game\GUNSMITH_NPC.rez > C:\Nexon\Combat Arms\Game\LOGO.rez > C:\Nexon\Combat Arms\Game\MODELS.rez > C:\Nexon\Combat Arms\Game\Object.lto > C:\Nexon\Combat Arms\Game\Physics.rez > C:\Nexon\Combat Arms\Game\PREFABS.rez > C:\Nexon\Combat Arms\Game\PROPS.rez > C:\Nexon\Combat Arms\Game\PS.rez > C:\Nexon\Combat Arms\Game\RS.rez > C:\Nexon\Combat Arms\Game\SHADERS.rez > C:\Nexon\Combat Arms\Game\SND.rez > C:\Nexon\Combat Arms\Game\Sprites.rez > C:\Nexon\Combat Arms\Game\TEXFX.rez > C:\Nexon\Combat Arms\Game\TEXTUREEFFECTGROUPS.rez > C:\Nexon\Combat Arms\Game\TEXTURES.rez > C:\Nexon\Combat Arms\Game\TEXTURESCRIPTS.rez > C:\Nexon\Combat Arms\Game\ui_hud_character.rez > C:\Nexon\Combat Arms\Game\ui_hud_common.rez > C:\Nexon\Combat Arms\Game\ui_hud_indicator.rez > C:\Nexon\Combat Arms\Game\UI_HUD_KillCam.rez > C:\Nexon\Combat Arms\Game\ui_hud_map.rez > C:\Nexon\Combat Arms\Game\ui_hud_message.rez > C:\Nexon\Combat Arms\Game\UI_HUD_RadarMap.rez > C:\Nexon\Combat Arms\Game\UI_HUD_ScoreBoard.rez > C:\Nexon\Combat Arms\Game\UI_HUD_Weapon.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Clan.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Common.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Create.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Gameroom.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Gunsmith.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Inventory.rez > C:\Nexon\Combat Arms\Game\UI_SCR_ItemImage.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Loading.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Lobby.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Messenger.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Modification.rez > C:\Nexon\Combat Arms\Game\UI_SCR_PopUp.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Result.rez > C:\Nexon\Combat Arms\Game\UI_SCR_ServerList.rez > C:\Nexon\Combat Arms\Game\UI_SCR_Shop.rez > C:\Nexon\Combat Arms\Game\UI_SND.rez > C:\Nexon\Combat Arms\Game\WORLDS.rez > C:\Nexon\Combat Arms\Game\WORLDS2.rez > C:\Nexon\Combat Arms\Game\XML.rez > C:\Nexon\Combat Arms\Game\BGM\Ambient_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_03.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_05.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_06.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_07.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_08.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_09.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_10.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_11.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_Christmas.MP3 > C:\Nexon\Combat Arms\Game\BGM\BGM_Independence.mp3 > C:\Nexon\Combat Arms\Game\BGM\BGM_LOOP.mp3 > C:\Nexon\Combat Arms\Game\BGM\DesertFox_BGM01.mp3 > C:\Nexon\Combat Arms\Game\BGM\DesertFox_BGM02.mp3 > C:\Nexon\Combat Arms\Game\BGM\DesertFox_BGM03.mp3 > C:\Nexon\Combat Arms\Game\BGM\Halloween_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\HQM_count_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\Last_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\Map_Loading.mp3 > C:\Nexon\Combat Arms\Game\BGM\MineShaftLast_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\MineShaftStart_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisHQ_BGM01.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisHQ_BGM02.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisHQ_BGM03.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisLAB_BGM01.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisLAB_BGM02.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisLAB_BGM03.mp3 > C:\Nexon\Combat Arms\Game\BGM\NemexisLAB_BGMDEARD.mp3 > C:\Nexon\Combat Arms\Game\BGM\Null_60S.mp3 > C:\Nexon\Combat Arms\Game\BGM\QRT_Count_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\SH01_BGM01.mp3 > C:\Nexon\Combat Arms\Game\BGM\SH01_BGM02.mp3 > C:\Nexon\Combat Arms\Game\BGM\SH01_BGM03.mp3 > C:\Nexon\Combat Arms\Game\BGM\SH01_Intro.mp3 > C:\Nexon\Combat Arms\Game\BGM\Ship_Last.MP3 > C:\Nexon\Combat Arms\Game\BGM\Ship_Play.MP3 > C:\Nexon\Combat Arms\Game\BGM\Ship_Start.mp3 > C:\Nexon\Combat Arms\Game\BGM\Start_BGM.mp3 > C:\Nexon\Combat Arms\Game\BGM\UIBGM_LOOP.mp3 > C:\Nexon\Combat Arms\Game\BGM\WAITINGROOM_LOOP.mp3 > C:\Nexon\Combat Arms\Game\BGM\Zombie_Ambience.mp3 > C:\Nexon\Combat Arms\Game\BGM\Ability\EagleEye\Alignment.mp3 > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_female1.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_female2.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_female3.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_male1.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_male2.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\awake_male3.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\InnerFocus\Medikit.wav > C:\Nexon\Combat Arms\Game\BGM\Ability\WarCry\WarCry.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\Elimination.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\HiredGuns.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\Search&Destroy.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\SpyHunt.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\VIP_start.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\weaponrace_last.mp3 > C:\Nexon\Combat Arms\Game\BGM\ModeBGM\weaponrace_start.mp3 > C:\Nexon\Combat Arms\Game\BGM\perk\EagleEye\Alignment.mp3 > C:\Nexon\Combat Arms\Game\BGM\perk\WarCry\WarCry.mp3 > C:\Nexon\Combat Arms\Game\MOVIES\1_1move.bik > C:\Nexon\Combat Arms\Game\MOVIES\1_2Move.bik > C:\Nexon\Combat Arms\Game\MOVIES\2_move.bik > C:\Nexon\Combat Arms\Game\MOVIES\3_move.bik > C:\Nexon\Combat Arms\Game\MOVIES\CabinFever_Ending01.bik > C:\Nexon\Combat Arms\Game\MOVIES\CabinFever_Ending02.bik > C:\Nexon\Combat Arms\Game\MOVIES\CabinFever_Ending03.bik > C:\Nexon\Combat Arms\Game\MOVIES\calogo.bik > C:\Nexon\Combat Arms\Game\MOVIES\DesertFox_Ending.bik > C:\Nexon\Combat Arms\Game\MOVIES\DesertFox_Sector1.bik > C:\Nexon\Combat Arms\Game\MOVIES\DesertFox_Sector4.bik > C:\Nexon\Combat Arms\Game\MOVIES\Infected_Ship_bad.bik > C:\Nexon\Combat Arms\Game\MOVIES\Infected_Ship_good.bik > C:\Nexon\Combat Arms\Game\MOVIES\nalogo.bik > C:\Nexon\Combat Arms\Game\MOVIES\nelogo.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisHQ01.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisHQ02.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisHQ03.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisHQ04.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisLAB_BossWin.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisLAB_Fail.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisLAB_PlayerWin.bik > C:\Nexon\Combat Arms\Game\MOVIES\NemexisLAB_Sector2.bik > C:\Nexon\Combat Arms\Game\MOVIES\zeroinlogo.bik > C:\Nexon\Combat Arms\HShield\3N.mhe > C:\Nexon\Combat Arms\HShield\AhnRpt.exe > C:\Nexon\Combat Arms\HShield\ahnrpt.ini > C:\Nexon\Combat Arms\HShield\AhnUpCtl.dll > C:\Nexon\Combat Arms\HShield\AhnUpGS.dll > C:\Nexon\Combat Arms\HShield\asc_main.dll > C:\Nexon\Combat Arms\HShield\AspINet.dll > C:\Nexon\Combat Arms\HShield\BldInfo.ini > C:\Nexon\Combat Arms\HShield\Bz32Ex.dll > C:\Nexon\Combat Arms\HShield\EHSvc.dll > C:\Nexon\Combat Arms\HShield\hei.msd > C:\Nexon\Combat Arms\HShield\HShield.dat > C:\Nexon\Combat Arms\HShield\HSInst.dll > C:\Nexon\Combat Arms\HShield\HsLogMgr.exe > C:\Nexon\Combat Arms\HShield\HSUpdate.env > C:\Nexon\Combat Arms\HShield\HSUpdate.exe > C:\Nexon\Combat Arms\HShield\mspatcha.dll > C:\Nexon\Combat Arms\HShield\psapi.dll > C:\Nexon\Combat Arms\HShield\V3Hunt.dll > C:\Nexon\Combat Arms\HShield\V3Ine***.dll > C:\Nexon\Combat Arms\HShield\v3warpds.v3d > C:\Nexon\Combat Arms\HShield\v3warpns.v3d > C:\Nexon\Combat Arms\HShield\asc\0asc.scd > C:\Nexon\Combat Arms\HShield\asc\0sccure.scd > C:\Nexon\Combat Arms\HShield\asc\0sgame.scd > C:\Nexon\Combat Arms\HShield\asc\0spe3f.scd > C:\Nexon\Combat Arms\HShield\asc\asc_com.dll > C:\Nexon\Combat Arms\HShield\asc\asc_dh.dll > C:\Nexon\Combat Arms\HShield\asc\asc_fse.dll > C:\Nexon\Combat Arms\HShield\asc\asc_intg.dll > C:\Nexon\Combat Arms\HShield\asc\asc_mmgr.dll > C:\Nexon\Combat Arms\HShield\asc\asc_unp.dll > C:\Nexon\Combat Arms\HShield\asc\fse_base.dll > C:\Nexon\Combat Arms\HShield\asc\fse_fact.dll > C:\Nexon\Combat Arms\HShield\asc\fse_pe.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_base.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_fact.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_file.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_mem.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_os.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_proc.dll > C:\Nexon\Combat Arms\HShield\asc\gfs_util.dll > C:\Nexon\Combat Arms\HShield\asc\moduler.scd > C:\Nexon\Combat Arms\HShield\asc\option.scd > C:\Nexon\Combat Arms\mss\mssdolby.flt > C:\Nexon\Combat Arms\mss\mssds3d.flt > C:\Nexon\Combat Arms\mss\mssdsp.flt > C:\Nexon\Combat Arms\mss\msseax.flt > C:\Nexon\Combat Arms\mss\mssmp3.asi > C:\Nexon\Combat Arms\mss\msssrs.flt > C:\Nexon\Combat Arms\mss\mssvoice.asi > C:\Nexon\Combat Arms\Physics\NEMEXISLAB_CP.phy > C:\Nexon\Combat Arms\Profiles\High_Default.prf > C:\Nexon\Combat Arms\Profiles\Low_Default.prf > C:\Nexon\Combat Arms\Profiles\Mid_Default.prf > C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon\Combat Arms.lnk > C:\ProgramData\NexonUS\NGM\33563143.dat > C:\ProgramData\NexonUS\NGM\NGM.exe > C:\ProgramData\NexonUS\NGM\NGMDll.dll > C:\ProgramData\NexonUS\NGM\NGMResource.dll > C:\ProgramData\NexonUS\NGM\npNxGameUS.dll > C:\ProgramData\NexonUS\NGM\nxgameus.dll > C:\ProgramData\NexonUS\NGM\unicows.dll > C:\Users\Current\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT > C:\Users\Current\AppData\Local\Microsoft\Windows\WebCacheLock.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\IECompatCache\container.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\iecompatuaCache\container.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\counters.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\container.dat > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\bg_slow_wave_bar[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\bt_agree_not[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\bt_cfm_s[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\bt_change_folder[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\bt_close[2] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\global[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\round1_btm1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\round2_btm2[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\round2_btm4[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\round2_top4[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\Template_Setup[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\bg_wave_bar[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\bt_agree_stip[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\bt_cancel[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\ico_cancel[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\round1_top2[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\round1_top4[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\round2_btm1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\round3_btm1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\round3_top2[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\stipulation[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\Template_MessageS[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\Template_Stipulation[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\bg_title[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\bt_cancel_s[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\bul_arr_gr[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\bul_dot_gr[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\logo_nexon[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\round1_btm2[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\round1_btm4[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\round1_top1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\round2_top1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\round3_top1[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\bg_bar[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\bg_body[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\bt_act_s[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\bt_install[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\bul_circle_bl[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\ico_caution[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\img_default[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\ln_space[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\round2_top2[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\round3_btm2[2] > C:\Users\Current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\Template_Install[1] > C:\Users\Current\AppData\Local\Microsoft\Windows\WebCache\V01.chk > C:\Users\Current\AppData\Local\Microsoft\Windows\WebCache\V01.log > C:\Users\Current\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat > C:\Users\Current\AppData\Local\Temp\33563143.dat > C:\Users\Current\AppData\Local\Temp\NGM9A29.tmp > C:\Users\Current\AppData\Local\Temp\NGM9A2A.tmp > C:\Users\Current\AppData\Local\Temp\NGM9B06.tmp > C:\Users\Current\AppData\Local\Temp\NGM9B55.tmp > C:\Users\Current\AppData\Local\Temp\NGM9B75.tmp > C:\Users\Current\AppData\Local\Temp\NGM9B95.tmp > C:\Users\Current\AppData\Local\Temp\NGM9CBF.tmp > C:\Users\Current\AppData\Local\Temp\NGMDll.dll > C:\Users\Current\AppData\Local\Temp\NGMResource.dll > C:\Users\Current\AppData\Local\Temp\NGMSetup.exe > C:\Users\Current\AppData\Local\Temp\unicows.dll > C:\Users\Public\Desktop\Combat Arms.lnk
Code:
> HKEY_LOCAL_MACHINE\software\classes\Interface\{1} [1] = INxMachineControl
> HKEY_LOCAL_MACHINE\software\classes\Interface\{1}\ProxyStubClsid32 [1] = {2}
> HKEY_LOCAL_MACHINE\software\classes\Interface\{1}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Interface\{1}\TypeLib\Version [1] = 1.0
> HKEY_LOCAL_MACHINE\software\classes\Interface\{4} [1] = INxGameControl
> HKEY_LOCAL_MACHINE\software\classes\Interface\{4}\ProxyStubClsid32 [1] = {2}
> HKEY_LOCAL_MACHINE\software\classes\Interface\{4}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Interface\{4}\TypeLib\Version [1] = 1.0
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxGameControl.US.2 [1] = CNxGameControl Object
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxGameControl.US.2\CLSID [1] = {5}
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxGameControl.US.2\CurVer [1] = NXCOM.NxGameControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxMachineControl.US.2 [1] = CNxMachineControl Object
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxMachineControl.US.2\CLSID [1] = {6}
> HKEY_LOCAL_MACHINE\software\classes\NXCOM.NxMachineControl.US.2\CurVer [1] = NXCOM.NxMachineControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\TypeLib\{3}\1.0 [1] = NxGame 1.0 Type Library (USA)
> HKEY_LOCAL_MACHINE\software\classes\TypeLib\{3}\1.0\0\win32 [1] = C:\ProgramData\NexonUS\NGM\nxgameus.dll
> HKEY_LOCAL_MACHINE\software\classes\TypeLib\{3}\1.0\FLAGS [1] = 0
> HKEY_LOCAL_MACHINE\software\classes\TypeLib\{3}\1.0\HELPDIR [1] = C:\ProgramData\NexonUS\NGM\
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5} [1] = CNxGameControl Object
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5}\InprocServer32 [1] = C:\ProgramData\NexonUS\NGM\nxgameus.dll
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5}\InprocServer32\ThreadingModel [1] = apartment
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5}\ProgID [1] = NXCOM.NxGameControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{5}\VersionIndependentProgID [1] = NXCOM.NxGameControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6} [1] = CNxMachineControl Object
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6}\InprocServer32 [1] = C:\ProgramData\NexonUS\NGM\nxgameus.dll
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6}\InprocServer32\ThreadingModel [1] = apartment
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6}\ProgID [1] = NXCOM.NxMachineControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\CLSID\{6}\VersionIndependentProgID [1] = NXCOM.NxMachineControl.US.2
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{1} [1] = INxMachineControl
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{1}\ProxyStubClsid32 [1] = {2}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{1}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{1}\TypeLib\Version [1] = 1.0
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{4} [1] = INxGameControl
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{4}\ProxyStubClsid32 [1] = {2}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{4}\TypeLib [1] = {3}
> HKEY_LOCAL_MACHINE\software\classes\Wow6432Node\Interface\{4}\TypeLib\Version [1] = 1.0
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7}\AppName [1] = NGM.exe
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7}\AppPath [1] = C:\ProgramData\NexonUS\NGM
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7}\Policy [4] = 03000000
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Combat Arms\DisplayName [1] = Combat Arms
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Combat Arms\DisplayIcon [1] = C:\Nexon\Combat Arms\CombatArms.exe
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Combat Arms\InstallLocation [1] = C:\Nexon\Combat Arms
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Combat Arms\UninstallString [1] = "C:\ProgramData\NexonUS\NGM\NGM.exe" -mode:uninstall -game:33563143 -locale:US
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7}\DisplayName [1] = Nexon Game Manager
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7}\DisplayIcon [1] = C:\ProgramData\NexonUS\NGM\NGM.exe
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7}\InstallLocation [1] = C:\ProgramData\NexonUS\NGM
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7}\UninstallString [1] = "C:\ProgramData\NexonUS\NGM\NGM.exe" -mode:uninstall -dll:ngm.nexon.net/ngm/NGM/Bin/NGMDll.dll -game:0 -locale:US -load_from_local
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\Path [1] = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\ProductName [1] = Nexon Game Controller
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\Vendor [1] = Nexon
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\Description [1] = Nexon Game Controller
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\Version [1] = 1.0.1.2
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\MimeTypes\application/x-npnxgame-us\Description [1] = application/x-npnxgame-us
> HKEY_LOCAL_MACHINE\software\Wow6432Node\MozillaPlugins\@nexon.net/NxGame\MimeTypes\application/x-npnxminfo-us\Description [1] = application/x-npnxminfo-us
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\Combat Arms\Ver_US\RootPath [1] = C:\Nexon\Combat Arms
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\Combat Arms\Ver_US\Icon [1] = C:\Nexon\Combat Arms\CombatArms.exe,0
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\Combat Arms\Ver_US\IconDestPath0 [1] = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon\Combat Arms
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\Combat Arms\Ver_US\IconDestPath1 [1] = C:\Users\Public\Desktop\Combat Arms
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\Combat Arms\Ver_US\Executable [1] = C:\Nexon\Combat Arms\CombatArms.exe
> HKEY_LOCAL_MACHINE\software\Wow6432Node\NexonUS\Shared [1] = C:\ProgramData\NexonUS
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix [1] = Cookie:
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix [1] = Visited:
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings [3] = 46000000FFFFFFB8020000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass [4] = 01000000
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName [4] = 01000000
> HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet [4] = 01000000
> HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\user\current\AppData\Local\Temp\NGMSetup.exe.FriendlyAppName [1] = Nexon Game Manager
> HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\user\current\AppData\Local\Temp\NGMSetup.exe.ApplicationCompany [1] = Nexon
First Run:
(Note: All the anti-cheat updaters ran, however HS was unable to initialize correctly, so this isn't a complete list)
FS:
Code:
> C:\Nexon\Combat Arms\HShield\brinicle.dll > C:\Nexon\Combat Arms\HShield\hshield.log > C:\Nexon\Combat Arms\HShield\HSUpChk.log > C:\Nexon\Combat Arms\HShield\hsupdate.jpg > C:\Nexon\Combat Arms\HShield\splash.jpg > C:\Nexon\Combat Arms\HShield\supdate.log < C:\Nexon\Combat Arms\HShield\asc\0asc.scd < C:\Nexon\Combat Arms\HShield\asc\0sccure.scd < C:\Nexon\Combat Arms\HShield\asc\0sgame.scd < C:\Nexon\Combat Arms\HShield\asc\0spe3f.scd < C:\Nexon\Combat Arms\HShield\asc\asc_com.dll < C:\Nexon\Combat Arms\HShield\asc\asc_dh.dll < C:\Nexon\Combat Arms\HShield\asc\asc_fse.dll < C:\Nexon\Combat Arms\HShield\asc\asc_intg.dll < C:\Nexon\Combat Arms\HShield\asc\asc_mmgr.dll < C:\Nexon\Combat Arms\HShield\asc\asc_unp.dll < C:\Nexon\Combat Arms\HShield\asc\fse_base.dll < C:\Nexon\Combat Arms\HShield\asc\fse_fact.dll < C:\Nexon\Combat Arms\HShield\asc\fse_pe.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_base.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_fact.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_file.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_mem.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_os.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_proc.dll < C:\Nexon\Combat Arms\HShield\asc\gfs_util.dll < C:\Nexon\Combat Arms\HShield\asc\option.scd > C:\Nexon\Combat Arms\HShield\asc\modules.scd > C:\Nexon\Combat Arms\HShield\asc\temp.cfg > C:\Nexon\Combat Arms\HShield\asc\1\0asc.scd > C:\Nexon\Combat Arms\HShield\asc\1\0sccure.scd > C:\Nexon\Combat Arms\HShield\asc\1\0sgame.scd > C:\Nexon\Combat Arms\HShield\asc\1\0spe3f.scd > C:\Nexon\Combat Arms\HShield\asc\1\asc_com.dll > C:\Nexon\Combat Arms\HShield\asc\1\asc_dh.dll > C:\Nexon\Combat Arms\HShield\asc\1\asc_fse.dll > C:\Nexon\Combat Arms\HShield\asc\1\asc_intg.dll > C:\Nexon\Combat Arms\HShield\asc\1\asc_mmgr.dll > C:\Nexon\Combat Arms\HShield\asc\1\asc_unp.dll > C:\Nexon\Combat Arms\HShield\asc\1\fse_base.dll > C:\Nexon\Combat Arms\HShield\asc\1\fse_fact.dll > C:\Nexon\Combat Arms\HShield\asc\1\fse_pe.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_base.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_fact.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_file.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_mem.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_os.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_proc.dll > C:\Nexon\Combat Arms\HShield\asc\1\gfs_util.dll > C:\Nexon\Combat Arms\HShield\asc\1\option.scd > C:\Nexon\Combat Arms\HShield\Update\ahn.ui > C:\Nexon\Combat Arms\HShield\Update\ahni2.dll > C:\Nexon\Combat Arms\HShield\Update\ahnupctl.dll > C:\Nexon\Combat Arms\HShield\Update\autoup.exe > C:\Nexon\Combat Arms\HShield\Update\mass.dat > C:\Nexon\Combat Arms\HShield\Update\user.dat > C:\Nexon\Combat Arms\HShield\Update\v3bz32.dll > C:\Nexon\Combat Arms\HShield\Update\patch\39\ahn.ui > C:\Nexon\Combat Arms\HShield\Update\patch\39\asc_main_all\asc_main.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_all\ahnrpt.ex- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_all\brinicle.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_all\hslogmgr.ex- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_common\ahnrpt.in- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_nexon_dmo_all\ehsvc.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\hs_nexon_dmo_all\hshield.da- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\ahnupctl.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\ahnupgs.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\hsinst.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\hsupdate.ex- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\v3hunt.dl- > C:\Nexon\Combat Arms\HShield\Update\patch\39\update\v3ine***.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_com.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_dh.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_fse.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_intg.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_mmgr.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\asc_unp.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\fse_base.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\fse_fact.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\fse_pe.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_base.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_fact.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_file.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_mem.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_os.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_proc.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_echo_hs_all\gfs_util.dl- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\0asc.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\0sccure.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\0sgame.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\0spe3f.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\moduler.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\b\b_sign_all\option.sc- > C:\Nexon\Combat Arms\HShield\Update\win\e\hs_heuristic\3n.mh- > C:\Nexon\Combat Arms\HShield\Update\win\e\hs_heuristic\hei.ms- > C:\user\current\AppData\Local\Microsoft\Windows\AppCache\container.dat > C:\user\current\AppData\Local\Microsoft\Windows\AppCache\FVPUPOH0\container.dat > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\galib_nexon_net[1].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\1PT4Z7C0\launcher[1].css > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\conversion[1].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\DTOCFOVB\nr-361.min[1].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\98968a6792[1].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\__utmDBUVQYF4.gif > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\HTAV95V1\bg[1].jpg > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\default[1].htm > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\ga[1].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCache\IE\UWXAOZPV\ga[2].js > C:\user\current\AppData\Local\Microsoft\Windows\INetCookies\container.dat > C:\user\current\AppData\Local\Microsoft\Windows\INetCookies\UNOQ3K2N.txt > C:\user\current\AppData\Local\Temp\06a7e313f689.tmp > C:\user\current\AppData\Local\Temp\0e95ee66e348.tmp > C:\user\current\AppData\Local\Temp\ce0edd353400.tmp
Code:
> HKEY_LOCAL_MACHINE\software\Wow6432Node\Nexon\eTracer\CombatArms_US\VersionInfo [1] = prxtquuwtv > HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MediaResources\DirectSound\Speaker Configuration\Speaker Configuration [4] = 04000000 > HKEY_CURRENT_USER\software\AhnLab\Autoup\TemporarySettings\UpdateProduct [3] = 39 > HKEY_CURRENT_USER\software\AhnLab\Autoup\TemporarySettings\UpdateFileType [4] = 06000000 < HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings [3] = 46000000FFFFFFB8020000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings [3] = 46000000FFFFFFBE020000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Nexon\Combat Arms\HShield\HSUpdate.exe.FriendlyAppName [1] = HSUpdate > HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Nexon\Combat Arms\HShield\HSUpdate.exe.ApplicationCompany [1] = AhnLab, Inc.
Sandboxie
SandboxieDiff
