fd9295ceb9fac0b1a58ac518575996a1f414e3a2fe6d5ec4c33d2e738426c774

Analysis

max time kernel
300s
max time network
296s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
28/03/2024, 21:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
Size

94.7MB
MD5

9d307d81f2e79165588c12fcc6427d22
SHA1

44b60d8e012592e40cdc5785e2b28a110a05ea33
SHA256

fd9295ceb9fac0b1a58ac518575996a1f414e3a2fe6d5ec4c33d2e738426c774
SHA512

59abfcb2a7ce6d867c24e82cd630f95966f5ff54d59782bf4fa289be9f79c8043e3754870a6abe24125f5f960c6895a50ccfd7ba1245b23207663aaab7cee065
SSDEEP

1572864:oX15QuCdqq2dfOg0SCjQvaHL8udnWMfyENkJFzY8xNrBVdwwPX5netZWbGS3:oUuCsp0SvvmrdnWwLcY8f/dwqpnCWbGw

Score

7^/10

discovery evasion upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral2/files/0x000400000002a752-4.dat	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x000400000002a752-4.dat	upx

Modifies Windows Firewall 2 TTPs 20 IoCs

evasion

Windows Service

T1543.003

Disable or Modify System Firewall

T1562.004

pid	Process
2620	netsh.exe
3944	netsh.exe
380	netsh.exe
1196	netsh.exe
2800	netsh.exe
4948	netsh.exe
1936	netsh.exe
4404	netsh.exe
460	netsh.exe
3168	netsh.exe
404	netsh.exe
4600	netsh.exe
1832	netsh.exe
4324	netsh.exe
3328	netsh.exe
1704	netsh.exe
852	netsh.exe
2788	netsh.exe
640	netsh.exe
4992	netsh.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\v_ru.txt	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\地雷s.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\烟雾弹m.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\小鸡雷.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\HandyControl.xml	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-sysinfo-l1-1-0.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libsf_r24.so	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\locales\id.pak	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\止痛药.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\闪光弹.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\没有开镜.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\SCARL.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\driver\amd64\winusbcoinstaller2.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\背包.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\附近拾取.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\ACVAL.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\2倍压枪.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\av_mixer_resp.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\倍镜缩放展开.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\MIGUAN.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\tiaosan.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-profile-l1-1-0.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\shot\1shot.properties	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\license\c#\OpenCvSharp-BSD-LICENSE.txt	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\眩晕弹s.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwenc_r18.so	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\原皮手雷.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\地图.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\烟雾弹m.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹m.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\Microsoft.VisualStudio.Interop.xml	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\locales\vi.pak	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\烟雾弹s.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-util-l1-1-0.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\止痛药.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图缩放.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\医疗箱.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1113\手雷m.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.Core.xml	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\Esprima.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\ipChangeMonitor.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\tiaosan.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\手雷m.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1600\地雷s.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ms\control_1	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\止痛药.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\闪光弹s.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\CommonServiceLocator.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.Sinks.File.xml	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\YENIU.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\倍镜缩放展开.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\macroSmartKeys.json	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\MIGUAN.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\M249.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\全息压枪.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-crt-conio-l1-1-0.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\mobileserver	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\license\apk\JTransforms-BSD 2-Clause LICENSE.txt	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\html_international.cfg	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\libGLESv2.dll	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwenc.so	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\license\c#\CefSharp-BSD-LICENSE.txt	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
File created	C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\ACVAL.png	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe

Executes dropped EXE 13 IoCs

pid	Process
3500	TC Games.exe
416	SigmaCheckUpdate.exe
3004	adb-1-0-41-platform-29-0-6.exe
1040	CefSharp.BrowserSubprocess.exe
1144	CefSharp.BrowserSubprocess.exe
2220	SigmaCheckUpdate.exe
3564	adb-1-0-41-platform-29-0-6.exe
3632	adb-1-0-41-platform-29-0-6.exe
3868	adb-1-0-41-platform-29-0-6.exe
4880	adb-1-0-41-platform-29-0-6.exe
3396	CefSharp.BrowserSubprocess.exe
1892	CefSharp.BrowserSubprocess.exe
412	CefSharp.BrowserSubprocess.exe

Loads dropped DLL 64 IoCs

pid	Process
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	TC Games.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Driver	TC Games.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	TC Games.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Driver	TC Games.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe
3500	TC Games.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	3500	TC Games.exe
Token: SeDebugPrivilege	1144	CefSharp.BrowserSubprocess.exe
Token: SeDebugPrivilege	1040	CefSharp.BrowserSubprocess.exe
Token: SeDebugPrivilege	1892	CefSharp.BrowserSubprocess.exe
Token: SeDebugPrivilege	3396	CefSharp.BrowserSubprocess.exe
Token: SeDebugPrivilege	412	CefSharp.BrowserSubprocess.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
416	SigmaCheckUpdate.exe
3500	TC Games.exe
3004	adb-1-0-41-platform-29-0-6.exe
2220	SigmaCheckUpdate.exe
3564	adb-1-0-41-platform-29-0-6.exe
3632	adb-1-0-41-platform-29-0-6.exe
3868	adb-1-0-41-platform-29-0-6.exe
4880	adb-1-0-41-platform-29-0-6.exe
1936	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1940 wrote to memory of 3328	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	76
PID 1940 wrote to memory of 3328	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	76
PID 1940 wrote to memory of 3328	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	76
PID 1940 wrote to memory of 380	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	78
PID 1940 wrote to memory of 380	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	78
PID 1940 wrote to memory of 380	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	78
PID 1940 wrote to memory of 1196	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	80
PID 1940 wrote to memory of 1196	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	80
PID 1940 wrote to memory of 1196	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	80
PID 1940 wrote to memory of 3168	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	82
PID 1940 wrote to memory of 3168	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	82
PID 1940 wrote to memory of 3168	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	82
PID 1940 wrote to memory of 404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	84
PID 1940 wrote to memory of 404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	84
PID 1940 wrote to memory of 404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	84
PID 1940 wrote to memory of 4600	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	86
PID 1940 wrote to memory of 4600	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	86
PID 1940 wrote to memory of 4600	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	86
PID 1940 wrote to memory of 1832	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	88
PID 1940 wrote to memory of 1832	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	88
PID 1940 wrote to memory of 1832	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	88
PID 1940 wrote to memory of 2800	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	90
PID 1940 wrote to memory of 2800	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	90
PID 1940 wrote to memory of 2800	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	90
PID 1940 wrote to memory of 4948	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	92
PID 1940 wrote to memory of 4948	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	92
PID 1940 wrote to memory of 4948	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	92
PID 1940 wrote to memory of 1704	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	94
PID 1940 wrote to memory of 1704	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	94
PID 1940 wrote to memory of 1704	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	94
PID 1940 wrote to memory of 852	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	96
PID 1940 wrote to memory of 852	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	96
PID 1940 wrote to memory of 852	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	96
PID 1940 wrote to memory of 1936	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	98
PID 1940 wrote to memory of 1936	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	98
PID 1940 wrote to memory of 1936	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	98
PID 1940 wrote to memory of 2788	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	100
PID 1940 wrote to memory of 2788	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	100
PID 1940 wrote to memory of 2788	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	100
PID 1940 wrote to memory of 4324	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	102
PID 1940 wrote to memory of 4324	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	102
PID 1940 wrote to memory of 4324	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	102
PID 1940 wrote to memory of 640	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	104
PID 1940 wrote to memory of 640	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	104
PID 1940 wrote to memory of 640	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	104
PID 1940 wrote to memory of 2620	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	106
PID 1940 wrote to memory of 2620	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	106
PID 1940 wrote to memory of 2620	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	106
PID 1940 wrote to memory of 4992	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	108
PID 1940 wrote to memory of 4992	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	108
PID 1940 wrote to memory of 4992	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	108
PID 1940 wrote to memory of 4404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	110
PID 1940 wrote to memory of 4404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	110
PID 1940 wrote to memory of 4404	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	110
PID 1940 wrote to memory of 3944	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	112
PID 1940 wrote to memory of 3944	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	112
PID 1940 wrote to memory of 3944	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	112
PID 1940 wrote to memory of 460	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	114
PID 1940 wrote to memory of 460	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	114
PID 1940 wrote to memory of 460	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	114
PID 1940 wrote to memory of 956	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	116
PID 1940 wrote to memory of 956	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	116
PID 1940 wrote to memory of 956	1940	TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe	116
PID 3500 wrote to memory of 3196	3500	TC Games.exe	122

C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
"C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1940
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="adb-1-0-32-platform-23-0-1.exe"
  2⤵
  - Modifies Windows Firewall
  PID:3328
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="adb-1-0-32-platform-23-0-1.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe"
  2⤵
  - Modifies Windows Firewall
  PID:380
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="adb-1-0-40-platform-28-0-2.exe"
  2⤵
  - Modifies Windows Firewall
  PID:1196
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="adb-1-0-40-platform-28-0-2.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe"
  2⤵
  - Modifies Windows Firewall
  PID:3168
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="adb-1-0-41-platform-29-0-6.exe"
  2⤵
  - Modifies Windows Firewall
  PID:404
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="adb-1-0-41-platform-29-0-6.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe"
  2⤵
  - Modifies Windows Firewall
  PID:4600
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="appt.exe"
  2⤵
  - Modifies Windows Firewall
  PID:1832
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="appt.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe"
  2⤵
  - Modifies Windows Firewall
  PID:2800
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="SigmaCheckUpdate.exe"
  2⤵
  - Modifies Windows Firewall
  PID:4948
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="SigmaCheckUpdate.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe"
  2⤵
  - Modifies Windows Firewall
  PID:1704
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="SigmaCopyFilesHelper.exe"
  2⤵
  - Modifies Windows Firewall
  PID:852
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="SigmaCopyFilesHelper.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe"
  2⤵
  - Modifies Windows Firewall
  PID:1936
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="SigmaInstaller.exe"
  2⤵
  - Modifies Windows Firewall
  PID:2788
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="SigmaInstaller.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe"
  2⤵
  - Modifies Windows Firewall
  PID:4324
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="UsbSharedNetworkConfig.exe"
  2⤵
  - Modifies Windows Firewall
  PID:640
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="UsbSharedNetworkConfig.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe"
  2⤵
  - Modifies Windows Firewall
  PID:2620
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="CefSharp.BrowserSubprocess.exe"
  2⤵
  - Modifies Windows Firewall
  PID:4992
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="CefSharp.BrowserSubprocess.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe"
  2⤵
  - Modifies Windows Firewall
  PID:4404
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall show rule name="TC Games.exe"
  2⤵
  - Modifies Windows Firewall
  PID:3944
- C:\Windows\SysWOW64\netsh.exe
  netsh advfirewall firewall add rule name="TC Games.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe"
  2⤵
  - Modifies Windows Firewall
  PID:460
- C:\Windows\SysWOW64\REG.exe
  REG ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /V "C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" /T REG_SZ /D "~ HIGHDPIAWARE" /F
  2⤵
  PID:956

C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe
"C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" 0
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3500
- C:\Windows\SysWOW64\cmd.exe
  "cmd.exe"
  2⤵
  PID:3196
- - C:\Windows\SysWOW64\reg.exe
    reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable
    3⤵
    PID:2876
- C:\Windows\SysWOW64\cmd.exe
  "cmd.exe"
  2⤵
  PID:3012
- - C:\Windows\SysWOW64\reg.exe
    reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable
    3⤵
    PID:1876
- C:\Windows\SysWOW64\cmd.exe
  "cmd.exe"
  2⤵
  PID:2792
- - C:\Windows\SysWOW64\reg.exe
    reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer
    3⤵
    PID:2584
- C:\Windows\SysWOW64\cmd.exe
  "cmd.exe"
  2⤵
  PID:4700
- - C:\Windows\SysWOW64\reg.exe
    reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer
    3⤵
    PID:1552
- C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe
  "C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" -i resource\product_info_tg.txt -p 17 -c -a "C:\Program Files (x86)\Sigma-RT\TC Games"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:416
- - C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe
    SigmaCheckUpdate.exe -p 17 -a "C:\Program Files (x86)\Sigma-RT\TC Games" -i "resource\product_info_tg.txt"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:2220
- C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe
  "C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" kill-server
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3004
- C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe
  CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.0.1387999183\1976177932" /prefetch:1 --wcf-enabled
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1040
- C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe
  CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.1.225048369\1540292542" /prefetch:1 --wcf-enabled
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1144
- C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe
  "C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" start-server
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3564
- - C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe
    adb -L tcp:5037 fork-server server --reply-fd 628
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:3632
- C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe
  "C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3868
- C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe
  "C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4880
- C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe
  CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.2.2031127216\887576801" /prefetch:1 --wcf-enabled
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:3396
- C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe
  CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.3.722718344\2023577583" /prefetch:1 --wcf-enabled
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1892
- C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe
  CefSharp.BrowserSubprocess.exe --type=utility --channel="3500.4.1798131355\1453559432" --lang=en-US --no-sandbox --no-sandbox --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable /prefetch:8 --wcf-enabled
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:412

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.Core.dll

Filesize
1005KB

MD5
845c69ab0fd5343da1373f0da752e824

SHA1
36929d46712b130b1418cb37ee8c2d965986b66b

SHA256
9c8d48426578325c00eeee2c1c9b6d5bf31c21ead592252b5f5842d675f22a66

SHA512
7b0e0199b0f7144577729f190e695191045e80e6f1e5809b782081329c28a774bbc69508344d04e7c682b894c969c357ce7c87f6ed8855371c47b23711c0481a

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\D3DCOMPILER_47.dll

Filesize
3.5MB

MD5
02e034cd47aa9a633f6aaef348dbbba0

SHA1
424682cf2f3878c0195f0f4cd250856a0ef871b8

SHA256
ff86503cdb204570491a81bd45fd9812652ba20a1bbbaf2533b7203fc4469854

SHA512
0ffb5efaef0780be68633957a40e27c76625a6558a14d0671c85ac3cf8810f3c1e79f3281084dc05034b69447e999c420c1d248503001454c62d0eff320fd6e1

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\HandyControl.dll

Filesize
1.5MB

MD5
87f004b5d0f83e1fd2799b2a7479b581

SHA1
60394c3ded521a311bd10b99381f5c46816effe7

SHA256
a661b60f9b2fc0401b74452ab48970763735d28bd4e4145df00302d27884b849

SHA512
0869e6a92f4dbc018a28d1ef1fc78863254ef980a084cebe5779175c2fd0fe8f5afaa3b6dda2a364b7c50c9fb221962702e1ee931a02b9807725b62492060037

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\Log.dll

Filesize
109KB

MD5
4608946e266df13fa3b26471b1df4771

SHA1
82fffed60aa2045da3a5e6a2766e39e8ab78e665

SHA256
56b908b8fc74e9582eb403d8f6fc0ffee1541ec522e32fcbff3e8460dd2e2b6c

SHA512
6959164e096566241a0315542e6bf0c98d3b7d7ebe3b8fdcbf47053646a0d16fa4bdeaf4453b7fffe798e988842a9f9d3c1131d0a65631478e1426361ff34f80

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\Newtonsoft.Json.dll

Filesize
695KB

MD5
715a1fbee4665e99e859eda667fe8034

SHA1
e13c6e4210043c4976dcdc447ea2b32854f70cc6

SHA256
c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e

SHA512
bf9744ccb20f8205b2de39dbe79d34497b4d5c19b353d0f95e87ea7ef7fa1784aea87e10efcef11e4c90451eaa47a379204eb0533aa3018e378dd3511ce0e8ad

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.Sinks.File.dll

Filesize
32KB

MD5
c25357a7950dcfc7f85ee9d593cb1a24

SHA1
6a533712852465ab3c11b5c76004312d6482f07f

SHA256
5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9

SHA512
30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.dll

Filesize
133KB

MD5
35b1b9f1538cbdab039f4a79826041fe

SHA1
579e87e72fe76e62089631bf8a01dfbab2af5226

SHA256
5c2f34412502f6c5a5aa9226b71f4809aa73bf90f46c79faeb97172955178b26

SHA512
006bf743a27d7d0cb5038483fbc4c98f293f9815f58c92ff29dd4dcebb8931079c49c393de6f805041d8200af8791473cfa398bc603f3055bbf45c32a1eb48d0

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe

Filesize
16.4MB

MD5
974a35092d335205bc9edec565f048c7

SHA1
c33757dea3ca515a0c5044713b925f119d74d155

SHA256
f02f9442b30ca0ed870ed8c188f8c97fb2bc8cbe2c76a9f5e9f98ec97fc48af0

SHA512
c3152ee03a24fd828e7c019712633e45b647ffb418428cceb65c2597205dab5009be84aa087854a1f9d514bb1b7e4107a64a2b8709885a2e9482563ab7a886eb

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\audioenc.dll

Filesize
117KB

MD5
e8d15c33c9ac2665ede16d660e893694

SHA1
9e6f40f5d386c6c0ce9bbd37ec4846fcb19edd77

SHA256
26a2ccb3f9b98b8be7b11f2637fed46d2bb194e6dbf69359e312a20b1d790ae4

SHA512
82f159c577ff9e88c05a59d4fac6ff011e1205212a73ee63064d00dd6dd72ad4b1babcbf355a1456471b4e6fbfe963885d0ffc120e8c692d861597546b70f246

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll

Filesize
371KB

MD5
3dc504c6bbc2dc7a80027bece4e447d0

SHA1
b61ae8e190b6c6f5f568a5ad2110fab7b51984aa

SHA256
36203d5c57e4994014d343672f428aa466057e8eb103ca0b8861632c16750222

SHA512
a04d639303f021974d6ed24d95526a32be2e4efb7a8cc9fec461c2b43feb85ac9c568518b3b28c0a08ef0d731cae94804f717630fe1ba0603ec2439b22c987a7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\bin\MP4Recorder.exe

Filesize
174KB

MD5
a80cd22a8ee5b2834bc46684c09d74cf

SHA1
cfb9f0738d1f77a6b9bdfa4765c55f9bd24b9cfe

SHA256
5570ff24dd70a0bc3df34abe84b4ae375166ceaf2c716dd9b2a239a22558610d

SHA512
13295bd0ffbd516d71a752dfe64de9ede4a4d5db692b082090182360635e84ab4232e52edb3f61e205098ec949f04a25ef69199d80cd0a10f72b3d35e59119f6

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\en\HandyControl.resources.dll

Filesize
6KB

MD5
c1d0e0997828c9a8eea0011e2035dce4

SHA1
dcd271dacb785aaaf0f88581672f53357abd1c75

SHA256
7687d01a7945b54579a1579b6b329d847f5ccacbad1a8607d778f8a24366708b

SHA512
5cf64ac54eec736d0ae038ee41cac88705b5e9f1db45f7a7c3ab1cc93d35c9c4f9f7157fece0b24ffb78f5ab28ce22ddea0ef7d4ccd432de3dd2a379a06fcf4f

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\libmp4v2.dll

Filesize
798KB

MD5
7bf0f757a3949fbf8d1fd0131f5669e7

SHA1
7d5c4936c3c22134e859319e53bbfee611a5f76d

SHA256
a50a2b9d4494701bcdaef5de9d3ebcee09bad25fe02729bfc7d52767b2ffae9e

SHA512
33601e145f1e82fb73ee60298b8b1b842f010156fd5c6cedb50f4bc0cd9ef452ce154babe909ba8b263f1dcd7e50a62e2a5a0e98ebab5bacc3f5c6a42d1dc8e6

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\mftavcenc.dll

Filesize
133KB

MD5
ea2cc538a116d46335708917b2d14811

SHA1
5eb33d41d82a5f559c77321a10c881e84255762f

SHA256
f824bef7be2a2a9f372f169d662c4b17f4d404361939c131ada007c46cd121ff

SHA512
9648357c20117600c20b2180582a4a36a82ae21fb01aec8605ec7d063b4b039f78c5f47c9d5e95ef8c9854b0516ea799586159d13d481568bb36e5844dcdbaba

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\msvcp120.dll

Filesize
444KB

MD5
fd5cabbe52272bd76007b68186ebaf00

SHA1
efd1e306c1092c17f6944cc6bf9a1bfad4d14613

SHA256
87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608

SHA512
1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\AK.png

Filesize
1KB

MD5
52ef202920c67ff0b2f6d6dc305a9519

SHA1
9792f0bf1313a2e8334349067c77ffe8b8ec4400

SHA256
b5e4c48be78262eca23f9abf67ce2faa3b176124e8190184e7140568783b9e4b

SHA512
f206abf86db6c4bf07527922be8c7c8e691509b7729ec91d5ef2111c98f3630952025f63b6a0d5f087a9d68625755139bb4d5853aa09f7d9068274e247efcaad

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\倍镜缩放.png

Filesize
3KB

MD5
9d2524fef0804e38b120d80daab1a2f7

SHA1
e29e41b2b5fc9620e02731ca80d84e21256c9af1

SHA256
3abb8895531e3297aa5858d3ca0c43c5a8cd9a77e883f59dac2876ced51dd714

SHA512
76952223780b3500fbcaca4b8430127f2e9d398401de5b6bce9af0bc673efc54db1e8bbb32f2930592c2edb5264d2ed2503b844bf9c30e97cbceedefd4473cbf

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\2倍压枪.png

Filesize
1KB

MD5
60d18e9c3bb1828c85678e3484e20b12

SHA1
a60d17b5bfef79741d6acc1323eda532fa3fd4af

SHA256
1ee6c2ac69bc0e357878a439c3bcaf4f02da936558c9a1c4082d128e17864d0c

SHA512
b34cd0a3e833e54e2eea212df3943e7fb3c94122ee0ad704494a8958f45cc1b25c86996ac10f29e44e3e8e4190fa209d2c8ab86f44f2c0ccba6ddc27c3fbc01d

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\3倍压枪.png

Filesize
1KB

MD5
05e54d5da60fcc1dfa8d4e1a050b0e28

SHA1
c25fad4eebefb0d700870ee7e056c7b693a84686

SHA256
6a05be76773393649ad3593d37a27fa0c784316a1f1de43dbedf7ea31a5439ff

SHA512
75327a2ac40bb141585e403466ffc028f778e593d8e053015ff28ad9259ac37c670b2d59e7760a644ef879c385988491a76fe62eda4305d09c2600f2f1ba66db

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\4倍压枪.png

Filesize
1KB

MD5
8c2659ccd761207e1d6c9708f525c616

SHA1
1b581c60ba177511718a3849663098ca9da9e42d

SHA256
eee12a18083f77766ae53aae94ee31ac640f2788a65c12fc338757351a0c1389

SHA512
3591585405216c4853b43cb63295a5f5a33412b3547ea83c4f9fa82e4f82c42d16c6e1639a964ebd594252ba213ad785ae6065981d9d006b918f361ef2e38bc2

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6倍压枪.png

Filesize
1KB

MD5
472aa23694c86e229dff7df759ec2cb8

SHA1
9b089843db6db1aabb9d768e2f83ae888db9f935

SHA256
6a569d3ac2f1d1c206ab5a68cf6ce123fdc7d82973047ee6a12fc2cb04be6a5d

SHA512
7121296027bce41baefecf23d22294970ee81bfef601ebb1defccc8810e84c331f51462436e58e60cde90624a3c18c1ac5fd7c457d92c7b6b61ce9219f39c5b5

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6宫格.png

Filesize
935B

MD5
1e8e967df04f5564d3c8a691ef252c52

SHA1
3ac702742e80bc1e5e3447203108314809b6071e

SHA256
a036099e0c142b54fa3c24937c3aaca43a81186add236cd3794aa9f1fc08f6f8

SHA512
2f04e85d4b9b4c60756401d127133cb2431f73da62aab799e651ce3b7f44ac6ff6500b5e60b1f6d6c042477799e697ff302bfd724253712eda5ab67c04b68d31

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\9宫格.png

Filesize
1KB

MD5
879a133237f9d1f1ee21ab72ea6a0caa

SHA1
46d0dbd7f9b8f59b16d43c2dc61b34f095f7dc11

SHA256
046f3ee9284efc73857e6293f53e6bb78801d5c173b2603805b0f905fe958f3d

SHA512
49067cf9e8e1d303b3f898f7fb98338b9b2e9fa338fabd2b4db3a7538ed803c781340857d9264ed1090e4070c00ce91f83fe9bcb4a1ffa9ebaff275080daa24a

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\ACVAL.png

Filesize
8KB

MD5
3205ef7df426da65747f2497bf0030d9

SHA1
da2ee5d69a27a9f2b6d417a626d3fe4a4f6052da

SHA256
dc33925a430a78fb7d32246394049a3f63c94f5813072e4971fa07d913a8bbd3

SHA512
caa42d00edfb86693075d130a017592976b43b4b7b508c1c127575514fa2ba16cd4897cc7fab7d33a41fdb0971ef195af5844f2143a23b0cb3c0e6e0cab06535

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\AUG.png

Filesize
2KB

MD5
100c5dd1e0b424ef4ba09c915e3c3f3e

SHA1
7d361e89e4bcaa338c760a086cc4c6cf84699a5e

SHA256
956f5ea5f56eb5ee97bfa19868865f2ddc3e8f62bf3e16015134cb6d6aea93eb

SHA512
db94369be1a1b2b7d2852d16abf2e089a81dcdb77cbf2997f1ad7aa3acf84161abfb97d48b2849b13c05a5325cefcc596197ce705bb8a34b4070421bb4829ec6

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\DP28.png

Filesize
5KB

MD5
bec329b876be4dfa0b89debba20c1cd3

SHA1
77a00baf618d2609aae49702534d9f77395fbb0e

SHA256
9e98b0d8c3b9549c09c6b998d3dbe187b8a8d14620caa11dfe60464ebde0d009

SHA512
e475a70a50e01edbc11f6eb4a672c5aa19a91fc2b4448f175f1519e2e528287884544d8ae780b4ff5d9324f4a2c672856a73a3fcd3d347282119aec90307f096

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\G36C.png

Filesize
5KB

MD5
218335ea42cb76a8b180a093a44c3770

SHA1
a7c00937d9859d6ac7d7cf75afe9ec95142a4863

SHA256
e5fcbbaeac6fb9a5728263ae3626f6043be84ecf485177f999170d115feb6b48

SHA512
7f83966e9c8784da03a8549da2cfde539b75cb9b7da72f4365fa5512d89658b8f318c2e721c04836b41a8d81be1c02f8d70af7593c76da200aa4ad7c7e81dcdd

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GOZA.png

Filesize
2KB

MD5
213dd409d708706f7d4122ffd79a992a

SHA1
30d60a7f8acea422906a56e01b0338180fae1073

SHA256
8b334c14848b0e82817fc8c717d697ee1492b3745cadf2b09e6eecca32b78b53

SHA512
09cf3129c45c1cc4ee06c478c5061273130109830a2d667b019156eb661b2c7ac5d592677cf6ccf3932eed00262f7940d4e3f805fec58b19621ed857bd8203b7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GROZA.png

Filesize
4KB

MD5
5c6f2c81c78cdfc21b444db4c0bcad98

SHA1
57ca6502b781c54ff83885eeab24f17fbdc82232

SHA256
3b73b38b6a0019f592aa792c7f36ef97e236e99e1ba9bd6b79958daa259f7907

SHA512
3ddfdeb08c7089a54407bb47e67edd74d695b6778eca3f9b69c02e7f7e8cb6ff00229bd3e38ea43480eeb5685da381f12d2d769c76656c76a40f6da7c3ff1b38

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M249.png

Filesize
6KB

MD5
1ec9c89c1f04f320889bf1f965555742

SHA1
2029c7386f4d11b2516e4c08f1e6cb7ef0f2c280

SHA256
1b51a70d43564131eaf615d03fd284a83f119fdc8731d426fd19a5a9931ae0aa

SHA512
d4a4f79870c512a15ae78a2fa6f3bbe5e5912e92b97af2c4061901e91f22b500a2b727ef348096fcb1cb47ceac16191542b352d159cac56ded34a4def19d4b77

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M4.png

Filesize
4KB

MD5
b38435cf7a2608c12a82ee25ca7b4c9b

SHA1
3e9ac2db6e6a44f22e6f2e88dc845b88cc0079c3

SHA256
7125f9b67c9504c2bd3bdbaa32a146e7d4c8208091af6ef18c2164cf98fc85e2

SHA512
ee491dcecb849e957e5d76852ec935eb09d9c8b62c9e23aff81beae29609eb2f0e3cde71176b112e538b7d1006180e9e867ad85f9f26553deb2522cf9d2d4167

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M762.png

Filesize
7KB

MD5
f29cf31eb72ae02abcd7e8d31ec34be5

SHA1
66c327d391d9436e23c8a184a7cb8c9b84907cae

SHA256
eaefab7c0021780d344d620f0c8e1b87fe80a96622e108c64f14b86be0809b7a

SHA512
333a0a06fb1e35a7e65f4916c77cb1bf4a65fc5f90caeb74c83a92e47f688aa6ef124e2366d63adecdef2ed0a6bc0dd5f9de70a460e4bb35ed18a0fa8cbc5d47

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MG3.png

Filesize
5KB

MD5
ca6fffe08f640e7ffa79684cfd7a6dcf

SHA1
c858e5a8c908e430fee3ea7b068bc07702e317fc

SHA256
f0fb4e7e6393a20d6926b62a60ec46152d5b546f6dab74abcbe5987c27a661bc

SHA512
b7f76b18ba75e520672157be1830fe3540cb164b5000cc379e185c5620cc2b9417e50d624ea465a3787513987a1abed5d243262b88103768b013a5b5a7626ef4

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MIGUAN.png

Filesize
5KB

MD5
424a18778df3b70ebf0454ff35f3c2ce

SHA1
96a904b6d7b482e9f12be99770d801eb9ebb3bb0

SHA256
564d8c9842d932f99e03e877ba539da2dde8e4301a6801259716fdffa28bc4a4

SHA512
706bb2c2e7aab3a0c233263deb1273d83ae61850e6ac9d82bb808695be23df4adc5d9298078363034f3aab83fe2d009e3856e61ec2ffc30abf2359b422cffc22

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MP5K.png

Filesize
4KB

MD5
0d72c31adbfa39b69d7656df18c12e17

SHA1
76160c04283b271c87f4b38bb7cf5724f8b44a8a

SHA256
682551dd490451bbf44e4ba732d0b2a8a59397711cdbcfb6880874d0145de6b2

SHA512
75678ce27a35225e96dd53faf530566e51796c7805adc431de96478d12559583b3958ad2825560e7069d32dbd88efe7c029c3c79a02ac0b33c9012ab1e93a208

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\P90.png

Filesize
7KB

MD5
cd9411a883d59aaf442108c886d67340

SHA1
a5b437aba9c9b977a3121f28cc40a85014f3f5bc

SHA256
47751d9834685c4572d69cd2e2dc1108b85ae5951ab885014d3cc1c7bf580048

SHA512
b3ab260bfe2e82af195d6f6d4a91b91169baa47c3b62bc00b8b6ad2dd47ad2bb6fbfbf818e7ab288d790f5976c15a84aa716799c63de7d36ce579833218f6c36

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\QBZ.png

Filesize
6KB

MD5
9fd90f090a87a6b119b37bd903dbec9e

SHA1
f55641ca9cfe9bc7c87becc2df3cead95ad03de7

SHA256
5c4d3f95a2a40b6624a07cf2619b5eb3f12021aa7897c4089771f040e727f489

SHA512
06598cd4fb9c70e84dd48214f645c67a8c203b3499286ac8d5c1d3568350ec4ee196c314edf4dc0a326c8172728a2f4ea21d2be76554b0aa6c193167c9ef9011

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCAR.png

Filesize
2KB

MD5
e76b463d0ef5a3c000e7bba0ed423dac

SHA1
3057b74f2f7c465016a36afc041f4b81acfd367e

SHA256
260be03cb3c1191eaa9a5523b0cb8874096f87028b46b387404ae08074261ac3

SHA512
13f327451cb075cb393951d2d1204e392876289bcebce01f4d23b5137531de0f420a0b80acb21bfed6a5c4b3c736b0858288288e51e3913b4f3a457a7f28d96d

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCARL.png

Filesize
5KB

MD5
f517927e343738c1642e48f4a7832ea3

SHA1
d05f6de9c9496c75283f030805210ef4e2983b6e

SHA256
12271cecfce5befe49510e984301ff310fbeda4d7d00a88d8b923a0891f49cd3

SHA512
d1949bafcf41ef7304250c6a219d1dd00da8df10e3cad4e0b9edbd196523891e86d914f7467f187b308da7ef6406846afb4858b8c9f5e92c195492b03f258a21

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\TANGMUXUN.png

Filesize
5KB

MD5
0d7d9832dce43ba4a3857237ba24f009

SHA1
0d9d316f2ec65889c2bc5cbaa22638162fef39f5

SHA256
0a91774172bbd3838ce7af1503b72dfbea41baccc1b07c8522240be2d3e3f11f

SHA512
b14833a26f9e00faf2cf49e76d1dbf2b37e2d67db369428ec7b0614e2ac6194d613b5497d1fc61c226e9a885d42fca7d61c5e1745757a4fcc6042d00f9e459c5

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UMP45.png

Filesize
5KB

MD5
c1bca40413d95f3efcf667aaef2cb55a

SHA1
710b447938de1ccbd6c629f3e454ed89cea79bd1

SHA256
88ba06e1d73e956157664d4143ad7734e3eabca5ed70fd831eb50a2955aadb7f

SHA512
34be5e41f0413126c9fbb27dd83112810160308145868c08847835fa81fefbcb86717ea479fcf663367d9689574cace8c51f9293dc11217d0812a53cc077e3f5

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UZI.png

Filesize
3KB

MD5
142e8f477e57e8e7be65e79eb4506292

SHA1
d9fd13003a56c989b2c2639ffbc707ffbbec4376

SHA256
8504a4c746103b3c2165ee55c1f33ccbcb0571b619af72d4ebfe1779ef413ab3

SHA512
de924252e84528259355b41f5a62d3c466da8c51fc417394682419d34646d55e9a51b4b2403ab2d78195f6b4533298ad523a80fc54d245a2c1fde35b6a0bb1cc

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\VECTOR.png

Filesize
5KB

MD5
3bf50c676ceaf47c2b782534d4e6fadc

SHA1
ce46102f6159005143b9fe386db7c1e61d23f57d

SHA256
fa7b7d4bb770e793a6fa3b8925748a9bcbd4b4f1cf4adf0a75968235ea40499c

SHA512
e9465d14a9b7fe46151d3bb84c2802cc31c5f175b3466ec78f43f102d4cd55606b2ab6189f61532fa0e88b06ef264eeeb354ddd7c35a1b62b8662bb5c7f86fef

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\YENIU.png

Filesize
7KB

MD5
8bd64758396783959778eca47785069a

SHA1
ad07993f52e8074bb72e498f1592c8f8498a8c30

SHA256
ad2af2f8381018bf69570fdf64855c425e0165255f4fda36915ff8e20531d92d

SHA512
388a7f6fa305b351ee72037c6926ccd763f66f84523f4056a7300b4be1e59a609ad6b4ee15e69041934e29c6f4e2cd24a1d25140bcc0cd286f6c191205ab8847

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\macroSmartKeys.json

Filesize
9KB

MD5
145957fca4689c8627a2eca0ded0805d

SHA1
e4ee0a7a97a96284dc241d48dff8179fcb53d546

SHA256
fc6bf6c7aacd511598d1a05008b03227a945f29e602a0d9d5827a14321c8ce5c

SHA512
5af83dd03fbc392b8cb4e109287ff30444fa9b64c7184081c73c9a195533fe94d7b392518713bd1d7cc9556248f0ec4ec81b34c64f77849a194d66afa028271f

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\侧镜.png

Filesize
1KB

MD5
36e9fc1eeee6b2c36e0817412a0fe533

SHA1
ee3b48a5e5d05364ee9ad90041f1ad78af50e083

SHA256
7d0c1030f9e4837b1997170c9e37048ea3cdbb24dd505f73ab7ceffa419f37f8

SHA512
bbb560e25694886c92dea3cf24573222c7965e3f7f63c723b061fe3262ac3288e1f55573c36c20676c32d4ac749d2c8fa3ad4eeb71dc1d215adcc2333ebca1af

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\倍镜缩放展开.png

Filesize
1KB

MD5
d3cf125224d9b4f21b1774a93553b0a8

SHA1
a7cbba74c551db505bfc1bb5cff214883e256e44

SHA256
d3c84c8576d73d5caee9f79d01c3eb801a49bf9e003194df1797c4c5570ce59b

SHA512
30a48fb2fc5cee8e73b520c605422f63d9f0243932c0fcf668ccb01fa2d6f26ff37cb5407a614a48647129c899ce61832cea0f0f60aab3d8f17d159cf51879d7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\全息压枪.png

Filesize
887B

MD5
3359762ed6ae9f5732b999076ff6e61a

SHA1
5bfe7571fac1cde4cbbdf47d4f058f740bd03c01

SHA256
787bc36bb521d405ac555683d35f514b9f354cb013d5b2baf873801dba07b529

SHA512
11b360fb5d140b3ac0e558168fec9e9eb9a360cea55cc06c5489b7aea138dee2919b93548f7538986256b260fcc8ff562b73b282c63b61e185ee1c1e970cca58

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗包.png

Filesize
4KB

MD5
8b3b00023ed1d5fc7dca9af16e4ef0ff

SHA1
58394259b5b725d909c805f53e614c26b878e86e

SHA256
3e5256d8c94ed65e1c77bfb0c982dd252502a3cca17b8d750a8f536eea61c635

SHA512
fe557399f1fdff2331e23a4cee890a47242fbb7137e1119a215d9cae8185c89eda3d45192db6252bde89a77a963455c73697d29c6c5cf0e1ac655e3db2a9f70b

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗箱.png

Filesize
3KB

MD5
ec67437dac0bf325bdf34d2f03b70fd6

SHA1
77c04dc870c5bb10c99d319ea8b75183f2016f5c

SHA256
81af772e2b71cd81999d0912824f720259773ab824f25f8ddc98380fd40e7ae5

SHA512
6333c18b301363df48af12488206c6c114917ce0598cd016d0d0771da7a01b3ec1bf9860f12d0473e9b641f8bd1e390dce792b6ebc47bc428cdcbc380f370946

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\原皮手雷.png

Filesize
2KB

MD5
e289438678f1764f09616ab160c3f958

SHA1
7068ad83844d4e4cb7226937c222599e660ba66c

SHA256
9fef8861121a1b529628ea1b7d7c4627de6c7d5b6f6d39d3dcc503bcb26ae3d1

SHA512
8371a8f2d18db0f686c41801fcf90fca911eacd317f69a8ad3215b61e3a0a94d7a898ff66a66334acefd7b2bc063b36dd0d884ad407905b826d65863c784ceda

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图.png

Filesize
1KB

MD5
070fb2d00f3b52630fc617ba988f06f1

SHA1
fafd6c251b88bb703b0d7b1a73201bdd2ac915ec

SHA256
1f422f83e316ee4b7105896c3daa2220171a13dc22511ba0d9990bebc629950d

SHA512
cdb7bc43785ac562ee7d635f6c7039b1d0281733fc2bc7d7094f8502219cda4b1955e9e08493ee508e2c5996b36946e6676ee826f9dd2be5778f17bd26f7cfc2

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图背包标识.png

Filesize
1KB

MD5
dda527b4ea72e5b599331ad6328cc48a

SHA1
8a0a53befbd942f6e043d0be85009b52d2ef0894

SHA256
bc468b9905fd18ac96eb8a3ffceb98a91755a887a9d6632f4e5497a729a02c3b

SHA512
3e7080e7a0eac95a96e3b14605b99adfae31a074a7a2fe363fb5ccc4be2c19e64ad3be1a46e2f3b1a7a3b383041305a1c11f65bc837614d0feaa08cb88bccd2d

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\小鸡雷.png

Filesize
3KB

MD5
51fc5efb7c3212a736669314bb2aa45e

SHA1
875a5335672cfa8e08cfeb8d6b3d73fb5d6fef3a

SHA256
04602c3f80429337770c010b860fa52e29d321f33e65d676ff9bb473ebb78afd

SHA512
cd0caf533cc2bebf9953c0b32637b4866f58fe3f489b777aa2e3cc08071ee8cc2a6a0450e422056a93d9a3ee3d0bbe05cb615a904c83cda7388c283000dc2add

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\展开.png

Filesize
951B

MD5
130fd9a341bb90a407cc4015a593717c

SHA1
016b9c38845d614ed32afef52c2db8894cfca846

SHA256
cdee2bbba0df2caad71e9bfe6da1915731c8d5d2bee038931e156cf3832e0385

SHA512
0b12b45e9c7f5910607cfb87af57fea25d6ecce45582c0cc3cde364c7eaf4cb4aed773a08fc1de4104e36e242362cdc0671058c44c42571ade6a6b1f00fa64ee

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\平底锅.png

Filesize
2KB

MD5
723bc0f8a29aded1c3039860fd11605b

SHA1
05edfc46e9c917374ffea324e9b2a149b35c0974

SHA256
6258a2a10fca69fb4fb5eb357627252311c457002dd3a96528e1624b6bd092bc

SHA512
13467120455ff7b1f10132a7b47f389ee1b605867cad7d0cdab41e3724760fc8c64ccc48ef320ab65fb76404a006ab49d3ad887e3e2bb76ae7f1c1979c37cd55

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\拿枪.png

Filesize
2KB

MD5
a735ac9c18763b6227c0dc10a491cd73

SHA1
e781208c4de540adca891f8d211d35a207a84eab

SHA256
d02494716eeb81d4b380e38ae5c6f36f079a0423cd0296d785ff4d7460b233f4

SHA512
248960cf848f02ceff949200f803830b97db70e0fe0d3827f86640f18264313800f2428b01dc7b7bf9598fbcf6a40edc3becf86d0aa3dac7994ee123c855bca4

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\止痛药.png

Filesize
2KB

MD5
852e3613bc6a07dba18230cb8711e6ce

SHA1
a968b91a84654d30c999b039f4fe247eca023a6a

SHA256
da5a91565d380f2eeae06e9456a19d5d1b5882508f428e404f893fece24941bb

SHA512
7f723b946b74ff5d738f383c8ad70ff0968d348ae6ee973bc11ba317b222c816c4b5f9efe91a02e0364cce11cd4ce8e8997490530b4fff8637c6052e0280458d

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\没有开镜.png

Filesize
1KB

MD5
71aab0fbb8742b89b8644765a9cf6044

SHA1
c2795d26d1c8579d03ec2db91c526575d349f402

SHA256
a6fad1ab8bc52bf97166ccfd2016fe839b1aa88f5c02acb7dcdf689b7a59ea3a

SHA512
3c5d94f79381221874409465f210943277d191b329af4f037db0f038e15e02a0e4716b03b79508d3da36113ef8f16e80492a4e8890367ad42b2e236ce49cf0ed

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\烟雾弹.png

Filesize
1KB

MD5
ee47173719076f3af0067c1ee93efb80

SHA1
868ae269a9aeffcb57653a4b14c7f4037aeb5721

SHA256
0e74057b5ed99a1c85290c406b8f689c884e3c2bf5d28de6d0c57172f1a4ce0e

SHA512
759526c4bf1c25361b16c20316fe05d51bd78c4024c6015abfdd46fb05549dbca61505dd9f9a5cb7e41185e7f2c57b187c162988ec46286d2b9335d8a91e556d

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\燃烧瓶.png

Filesize
1KB

MD5
2fbfdc3d16287eecffc49d44fb6b3049

SHA1
e170fcc23940ea03a0ff5fd13b08770b66fd9f9b

SHA256
fe8d5f54a9f70bfc40680cfc08dc4917ce7d520ee35e95f5602d893dbb32fc4b

SHA512
34fb2686ac0b4813d5d103a5d246d50dcf42f7517ba23792545a52cdc1fbb1fa8e854f735bb1d4a628701210659c6c92b79b8b23786308ef2ce4f76ce2497a60

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\红点压枪.png

Filesize
791B

MD5
87ecded94dd0505e1d1b745423fc8a7a

SHA1
6dee167be63c76a0f526e246de7e2c9c46a851a9

SHA256
0e2fe73d10a62aa140203dda3b5377fdb708046641502ff5dc86ef5bb7bb71df

SHA512
6e0acc41907eaf6802f66d5ded35f2d4f3af12ae63f9eb5be20344145a022c638a0c03bb156b933e06ab813de8dc799b487020dc2cbcea26e48ac3ebcbc21b00

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\绷带.png

Filesize
3KB

MD5
e675a59468f2457167314b6ae008e7ad

SHA1
c0e7e838d5307d2e0ff53dfd24f8be0e0bdba648

SHA256
07e3cb530503ee0964656666d92b5b78de5dd61fb2f11c634ea90a087ca6d4f8

SHA512
14a19984d92a61331e09ec11820e5fcbee140842f37d71137a170a1fe6f929453ce9784e9f81e0346ae61d7cf17973fa75ccdc5e5d01df0f14981c592556490a

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\肾上腺素.png

Filesize
983B

MD5
0c1b3568b415bd803b5a88f3a921de04

SHA1
5276e9545080904bb18dd6f57415189dd017290d

SHA256
591760caeb7083c5de6a084177bcbb756d29d4d5556c6f0fe64455ea86937a1f

SHA512
5fd97211bb4cb250b319932807e465aca07d6af0fc3b2273a8af68f9c23cd046e9b811de68e27e38c95e14298f642ff4fa674d9d898855c193a58e4d18c5f3a6

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\背包.png

Filesize
2KB

MD5
fc0f9bd73ccea880c5c2a2232de67bde

SHA1
ac83446da2335c71c508fb0f053893b83e2769d1

SHA256
5f3035caa4b849656a3f332e5b000f0c9da8fdcb709e60296db39697ede442bd

SHA512
21c73ad1ac4c5350071fc35fdd751fbfdc94967ab696456bf8e55fbd299d9e5072339f1e8d0c3f16b08f2a63492f2fa0f96c1f8eed997a70e701f3161034d1dd

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\铝热弹.png

Filesize
4KB

MD5
bcef95445925dffa137fba4efa03d8c8

SHA1
b021f770db957d881d2571ee1db8b590e9199e2e

SHA256
8a65538a7a72a36dea10a517e510db67e9d49eaea3a4d864994506df104eec4f

SHA512
6fcd1567247eb7c0498768d8bb75a01797792a290073329b4edf7e4a8bc65cc18eb6085389c0fe551ae2988a646edc76fe597844e444b6cd69cb655c28b2056f

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\闪光弹.png

Filesize
1KB

MD5
42037d7f23ff401aa99aab09640cd600

SHA1
ebfdee982e715c9bee0f7e96ca42540c7864711c

SHA256
cdbf88220e1b418b48ae7ec9cae9b17f8f101e5d32d36eba10f9ef479e1419a3

SHA512
127703794236b8b556279aba69410daf80e48c49aa38e470badfa49f4589c267f2248b9cdd0f5da048868e36d4daf78fbc6562097cef5dd75017bb029921c394

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\附近拾取.png

Filesize
1KB

MD5
ac8bdf6ebc96cdc1f750e0bcd1c2791e

SHA1
0a4f8deb781cb31e8a5557ee85d040d64f590e4a

SHA256
38f7ba4ef35e4af8384e2b55cceb6fbefbe0a96cbd10adf81839f604a0a7fb4e

SHA512
2a13074572d2bafb014d08b3336eceafc206e364360615f1329287bb2bed0994ad0870bbf3229fc8c9525985a3aaf61e3c005c89a9f77bc055dfb2c1bd525c0c

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\饮料.png

Filesize
4KB

MD5
bf087289efee6e0eef3836c5182152d0

SHA1
3bbd844e8b82981a8441a7e1e02eb5d757a9d4ca

SHA256
3feaf3702e24ba916e45f6e88bf4052ad45bc68b247706bc490b627ce0087f8c

SHA512
7fc993f8d35a89228778b07fdad11682c71942f3c3d698122e7d58ddeae347d909e75e0c7e7bc266608f6afbdeebe97e65b809372955f3aba53e30acd45829c7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\bujixiang.png

Filesize
2KB

MD5
9612e6a6b64370530cfcbc13fe9d2ab7

SHA1
a906f413eeac9a0f2ce39c4da789792aa2d5b1a8

SHA256
4da50c7268509a8ec555f30b13c0658e79b849a58a85a6e292b730a8c7f68658

SHA512
532651fc3e8530feadf73c853a930efdefdf85aac4da191120a76278fe9af87daa178ef66703e56d01d49ec0d5f160192e015d3099b4c76914da6c59bb0ea1d7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\fujin.png

Filesize
5KB

MD5
4ba8e0a1881b8762325cd952dabc7c3a

SHA1
fb4e26f6036deb557ffcc1770c00ad33dffb3770

SHA256
a205bff0a8bc7d14af842f6ffc5dcdc408187ea1f0a5d823986efa2be86618ab

SHA512
f871a6801d352f2093fbc13ec4d613dcc03df132ac845deaf4ad87171aa22ec691e25530c310af03b41e183c554686be6f464bfe5160e9a6c78f5f8f0b3c0e0c

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\guanmen.png

Filesize
3KB

MD5
55c2290b87a38b8d3ea0ed75e1328c67

SHA1
6e9f5b41f269a5750ed91c33e4978ec349ecffa9

SHA256
879f1a40750c09efd21013393d5ad83c5aac11d89b098773311b97f280566d9d

SHA512
ad8337eabe66f6deb580ca653944f67131b19d963af503e0638622ea94c9d9665de9afa8111650c63501e1b5ba38768ffa685c236da433af76cbce84e7865d54

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaiche.png

Filesize
4KB

MD5
ae4aa419a16a2bc01b6a1fca61ca3706

SHA1
8b74d0d1f615128474ac7ba22bc4bef12a8970cc

SHA256
58e661bdb95de1ca173b379fa14e4842d852bbce0154ffbe22b353321134652c

SHA512
981ef32e67139025dbb99dbe971c7dd8422371860b4e58c6a548bea3068e559198c90f49b1aba3e1735bba2a6cdf8b9811663677a6bbd350f94d88e239fe94f2

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi.png

Filesize
4KB

MD5
a0602c514b4eb1e0558d9370dc167787

SHA1
f6bea5f6eca91f0a355c6aa7f563c9d335114554

SHA256
7f943979d98d9f996a9d98ff40c568e66715bdcf3a340297ce82f073bdeaae76

SHA512
5971e11a067bdbbd02e5066620c70c2734a007caf800c1468ea53e6f4e3c35e0a9a294e37c302d4ee08bd9ecba7e900bd616c66ca80290bb58d34e8d522f53b9

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi2.png

Filesize
3KB

MD5
b1763eaa311d36b33dc934a67795406b

SHA1
1061e36df108e5f6d5dcc7027a877d97f608ec07

SHA256
476e4ef68a52288693e17ab7bd21d1a9e1a5a692d929f2a6d3cc60f5a555b8cc

SHA512
7787062083f76c4847c11ff81a773f5e7ebd38d1390eb450e49c7046c6c713679f711350502c197f7886cb708267f4a0a0680b2f2ce66b44b2fa9797bff0d7de

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaimen.png

Filesize
3KB

MD5
a335c064ebcf8de2f8ed55fb173f204d

SHA1
0517a9cf117a10f0900ca1db20635bb8781e79e6

SHA256
f6a4b418046a3c9f48a65b5f4bc9830ab9fa1f2eea28b3f1b22bc3eb4d0ba72e

SHA512
7b2c5f014f66b0fe17fb87af5c3c141989b3f44cb6ccd711bbe2744f06da4a0e4a3c081019fac05e53ec736c1ac3a3621891555e4ba9e4426c8390388286c484

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\macroSmartKeys.json

Filesize
5KB

MD5
2e3f47d6eb624422c071abb8b5cbc40c

SHA1
6ea4100e28e2049f7c2a2ce229fdcd182becffc9

SHA256
6e6bdfcc04261796c68bf017fde7053cf2b28e8f96d2e78dcf03e80acb19c683

SHA512
238d3886e1476a36479f3676e6da6ea632c804894f1548889cfd1797cc469502afcb81016b0aec97793497aad989a4738948eb4c2ffc226ca7b49820cff473ff

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tanshou.png

Filesize
2KB

MD5
32bd715f3c531c21d6b31313e1f460b2

SHA1
dd47e86d98bfb5ce4e70387ec0bad554ca06d680

SHA256
fe96435887aa8ec15f1ce00a11094ab35293d07de953e0e1ecd4a222ed14ee5f

SHA512
c4ea112db423654ff5ad7e17ddab38e2d8f2ea93d7a0ae4dadfb16e1cdf49130fd5bbd5e675502499100bc5dbbb582ff38a9c2bca3341dfa2a1bf289b41ee760

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tiaosan.png

Filesize
5KB

MD5
902feee77aa255956002c52a19f32c82

SHA1
b0e922329fc89983236c1a1be860f837f14ac806

SHA256
2ffe82b04c4034a7e1e840c7efcb48fee65327193863f554062c46903d10056b

SHA512
61df4efbba584e2e9579845dcc4c454cbbd281cc64d99d4b7a372a5d8f7f061d6c0b47a71ef047ef5233336283a71315dbfa98b4c74cd852953546d3e353f84f

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷m.png

Filesize
3KB

MD5
012f41927dca05fc619e365ef5c9d6c6

SHA1
3c6ef1fe350d22c3ff16df7f481f5f1ddbc3aaa6

SHA256
89ae3b207d0eee984919ca9aad7c786539694ca391277ccc105c5c09e8b25e34

SHA512
dfe8e5d7b1eb29dd3b168504b0ad3bf076067df6b54787dd015cb1ec126f347e5bad8ccce62005856656a10b61f6627dc00eadcda0b4f9cc83bad3a8a1d0ac29

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷s.png

Filesize
2KB

MD5
77217e3439c756bc7a59eef3f473174a

SHA1
9f945ce9beffe0612c8b08ece40c58e3e5456399

SHA256
b7fd38ad75146a967c47a8e04ca42e6717ce78d19ff3952d4d080eb994d243ac

SHA512
505ae886d44fa148606e1a9731e1acefdf3370e8d5374c39886ae00c08ece397bdf92333425e37cb995242a9ea1d50c9e4151f97eb158d448dd887a0c855c796

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\展开.png

Filesize
663B

MD5
c5a86cbdcb964be4c3b31a84d12dd9b1

SHA1
7acc217574dc23c72e79cfc07d57ec16372ea7e6

SHA256
07d805838f320137fa460d368f26fde00b4137043bce61c9dce7e142088a61ff

SHA512
66f84b18811d589c13bd89532d901ea96bb05480f5b2839daf036782631ecd75250182d84a9f5b91081341a5348cd3ec6287138a686866954ef4888decd120b1

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷m.png

Filesize
3KB

MD5
37717c10429db1fc856fb8bf0cc8695e

SHA1
7b62200cb135445744e65c0d5640c348c17cef54

SHA256
206f5cbaa1ffb9fb96f3f22785b94fbbf2c5d0295dc40f6c158f315f7cc9f6cb

SHA512
83f7338cd42b8cc0f47cb4310d7100a9471356b0c9c3e15147099c77106612e0613d7d069d3afa7a44dab4b8c28b7dd46f58b15013822add50e49fa95c322b45

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷s.png

Filesize
3KB

MD5
5aab4c36f08f50e7b21cebd2b9db9ab7

SHA1
efd74a62c84e76d02950132e8b7a08188195fe21

SHA256
015d239c7913aa732f3534e9cde236a22065ea815849cf208aa0441e8d464deb

SHA512
b7f139679fc48a4c866348104dc5b2e757c16887ba0d1173577d2398319d86bdea1d2258b8875500e03266a17fe612288f4da4f5e4938692c3ba8b0d350a77de

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药m.png

Filesize
2KB

MD5
52a83b20afcaf2890b322fc0d2c88da0

SHA1
ea4ba1054a2d01b3641c447afe46398daed47a9a

SHA256
57174292c38578fafaf56916143232cbee0bb2d0713de32bfc44a4538eb3b653

SHA512
b6d9a8430d005d7aa32d7b89306bd51c1d3fc62a6d560402ee8eadb7dda2168464a4d8d7c5247c137d3b9e4af8a768d57dbd69da34fd50d3511b5fe05460342a

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药s.png

Filesize
2KB

MD5
425c41c98ada29bca70939d75672a71f

SHA1
c3b830e2a87f2205ad57a99974e313296c35a13e

SHA256
6f51cae51d8f5c36f3ad113ce635efea7b98184fddce56c95d04718df927ce7c

SHA512
e90041c2286a94bb8120578ef68110757285d17b294ea55010931e271e879483becd75e7f6143a744f8f9574923a4d1bc1476f21babc12feb9e8dd7c52649cb8

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹m.png

Filesize
2KB

MD5
d888d038fb2d6d66852d5b513303d02d

SHA1
f1f25159d56ba504c5895011105804b76c90a734

SHA256
83244abe460ec536910c4a68a29f7a1a480005e1dfba7d5d69c7c333061a9cb0

SHA512
b99b68d8cc2ef0186dc1841badeaa0caa3c5b24d2e8f44bde2f43593ccc30f98bb59aace80ebf13b04cca063a7548cfb782a341c0b19737e01ab6ec017cf63b7

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹s.png

Filesize
2KB

MD5
7187bf5d48adb6dee248158d6c64bede

SHA1
8a239377c39a2cf6e39d3fb06d9e124a6d24313f

SHA256
465bdb16afe50ab1accbdf3e61e37eb88887543343ececd84d216563a4f42cd8

SHA512
be1cc0de431b4863003d672395ef3036e6f418b41d5141c3269529ca2ffb9418f68e1d509d65d6107f4f593a9f3f13b5a2286fc6d3703a66e3384dcaba96d9fa

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹m.png

Filesize
2KB

MD5
524bd18b4bcc0d4e6708b5e304c93f80

SHA1
c988f80437c3f2ac8670ea1059321f1fc9aff878

SHA256
b9496349b894382d69fb7e0c9a9980e7d329e18bb8505569e8990896824bdf1a

SHA512
5c574350c7d6003139ba650461ad12d33dcb75aea6a21864ddd7a26b159d9c49b4584ffd95ebdad1318676438a668261368e8f75057d60cb419bcbe6c4352129

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹s.png

Filesize
2KB

MD5
b6d0de70fd4b69ef1fffb6b08cee2ef6

SHA1
104e197480a5175b61edd118dbb4b0782df8324d

SHA256
0802a6aa90de755aa8eea132057a4b2cd25680a81ac9fd3ea52b5a9ae0852c33

SHA512
ec51f2477ba550413560b700fdf4d23b11d2cc65d1b1d7cbaae82a593e976a147eb41a88469a9786e8e4f6a98d068692ee2a326bf944ecf933e5a4c61d93c2d1

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包m.png

Filesize
3KB

MD5
d4017e9082ba7fdb6c2ac89b49ff386d

SHA1
ce1c66ef71a0852a3e7b3bdf2eacd7666943c740

SHA256
db4defbf73c0b53d7f100a53acb1a2b89381a42618dd4f4bfb7217fb6d104b2e

SHA512
970b17566ff326c6a418028256117a41fc44b17ae2a76e52862388e9cd81120fd74bd657c5eede2b8c6198fd9d17570adffef63beb2c4381f18a7c256fdd47a3

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包s.png

Filesize
3KB

MD5
91c1a2786c85475994f501501264af55

SHA1
6847cfbe6fa94dc46efb81ea79b426ebfb1683b7

SHA256
f4375350bab5354d1e8af846c31004886c6eaa59db45d78be02cfb4890f14304

SHA512
5945c144b0c9fcb7d9e874cbdbb978e1bb96143c20ea553f25fb412f7cd52945bb98d8454a8efd3134be5a6dd3737db3af96e7baba8633ffd3addf32a395732b

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹m.png

Filesize
3KB

MD5
c16f8923478c7962fb8ec940caf101ac

SHA1
440c5c8675118e503312766f31a7a23e2442c87c

SHA256
fb1bda4536cdb9977a7571dc847e4a6e5e3e1c15f3ece691ad17b2f3872ef1fe

SHA512
0aa84f86bb99a52ab12e6bf2c097a47ec805b8ae83543cbe00bc8da232818b46669a322014db562c28c3b67402e31c22149ad0072fc6cf458fc8ea2be17c8462

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹s.png

Filesize
3KB

MD5
f6bc1f6ab993beaa4848ba820a65fa7d

SHA1
838e738d998bf0faa5b25dc032d2878196ce9b2c

SHA256
a0c6c7a61c5e5538e151dc03ed769ba29ed5312777741b0e13fab4ebe542a9e8

SHA512
fe9fb64cdf3828d86c4e1cf67a59793c47554d2a7ec830ef4153b56e15453e71ff76040fccbe57e3423b0ae97ac283327fc1754d44ec357f05b64f56671bc454

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹m.png

Filesize
2KB

MD5
7ecc76a60fd9b7ba5b6ccbd617cc8bfc

SHA1
1c7510c34be29326a017c6cdc85af52bd1f80c20

SHA256
5b6fd317955b61448866182ed2f6f2a0982d6869bb4861e0794f150a09b7fc38

SHA512
53420eb9dc75b4a6c04c06f415729f018b95c6a88e31c3bac6f9d9116014719773baaa183b6cda95b6a3c1b5d95dc6ad2afe8e6b924a0d6a68a893e1012388dc

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹s.png

Filesize
2KB

MD5
964ee2acfcd999404dae69a093043dae

SHA1
18c0ff09b764bc70fad07068b5cfc791fdf95ccd

SHA256
52ee1de81dc91fa90faca8c91daf8f05fa3520fad29fc5d278b6a096d8359e7e

SHA512
5f2b3925e256447ccd6844864593f530cd1365ef1f7237a06de602c3b9c99f8c002bb9bade99066a4f156b9a5adf997ef95cbe2e94ede9c84da596977c8a2323

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料m.png

Filesize
967B

MD5
0cb6fe3544d4ba076e68b2a6ebccd0e8

SHA1
8ca85aa7f1c47fa1da4a888f79f870aeaaacd764

SHA256
a4cfa1ccb0789c3b7e944a47bfe3fecec5772465641ccdb29a6ce2295e38f6a7

SHA512
acd48c83397070791d8f5ddb39b23d02d61e788452fa932ba97caf4b16e5c255b95170b434fcaf29a9092622b5ca0bc58a26ebbb4f9577bcdbdb577da7ba6133

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料s.png

Filesize
887B

MD5
c430e16eabe25e1b003daffebbbb7599

SHA1
6029587e85738ffe4b5adbb4b0c95e29e8ad9f97

SHA256
781fd58a3a2f9020482e2e89513f61c92c928e21f1a25440e342c70bea2a45d2

SHA512
bbab2fa55368af774670335345e4127c28967b80506ac67d844ef77ee0bce1abd3ac096618bae0879bebaba413534898c37a880c0470bf491b53a7a04e39069c

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹m.png

Filesize
1KB

MD5
e91fab4c5b6a05698462b41b90c30996

SHA1
6bff3b63298445f11fc8800815147e95cf077568

SHA256
1ec48dc50f70103bfcfab6bfea8b01b6bc49739acfd06afde7c21fd9c2aeb929

SHA512
1d53ccc6ec45643bb81611dc3db3ea27c4716f556ceb14294ed8113a9f4b462fde242566d154863ef57cc1a0bbaa52893bc007fd7b2dd040962bbb76e2502954

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹s.png

Filesize
1KB

MD5
18bdb787173105dd0539cef5f21d6160

SHA1
62718340625aa22759363d7a7d2f4786af20cb68

SHA256
2175edbb9d724dc5657eddf493c66d64c74e9d7bffef8730c419115d01b7a13c

SHA512
f1dd5174a2c02412291fc70cfbd34564e3407a4034a3c863651ca6f11b93feee7cb4c58977615fa2722d433fb8c9e69c11b25f199bce77f97d6bcf42d391cfe0

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影拾取.png

Filesize
1KB

MD5
ddc6d1fc43698d930ae6c934a63cfa21

SHA1
0401cf9a703bea313ea9fa5eb29327debd38ea3d

SHA256
3fea739b86f7a894ba22a273c73d60c7681bdf225e48ea760880058532346caa

SHA512
4ea6429a01e7c8fbd761ff2950a5e3d1b80c965838d2ae0bfced9764fc037002b24c0ac152b8d0a5cb7b9a81d1ec853a6e86663ede114a53d4d47142cd6d95ae

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影鼠标呼出状态.png

Filesize
1KB

MD5
4494db2039df7f4fcd37153e09f7d3ca

SHA1
68d13e756c1a75f9059e0b5a6e611896db97e2de

SHA256
e902212f8ec541ec7dc58ecef581a8ab22e74f147d3b6b309f4dd4568427aa64

SHA512
c4484d86584970242855223b0eac8b44065eb4d63473e4ed8dae3f28adc3ac791005b699d8943a93d7b82c60efd8c5eceeb602d4ddcbf5e22427e5f3ed7ddbe3

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\resource\settings.properties

Filesize
20B

MD5
35693532e8aa7a4e416e31ec3aa98206

SHA1
d5fc2dc19282b90256b31a6dca7a0da35e7219c8

SHA256
9da07cf112cfd1d20bd4baf7127dba47644520cdaa54d07e10c8b5f0dc894993

SHA512
54a4cfadce4fe8b71ce51d1ba2b3dd1c0d6fa66d18bd181d24658413e944105ae9d4ef3cc577d77aef0c8a3cb95ec0b8377e759328a04333734301577b9b39c2

Download Submit
C:\Program Files (x86)\Sigma-RT\TC Games\swscale-3.dll

Filesize
461KB

MD5
6468a341fd040eff5549156e00b1aedd

SHA1
d89822f46eb04454a10e5a668d9328bdc0021cc3

SHA256
fc8b75523e9c780746ad663e0c4219ecacf5ae5eabfa3ccc78bae646507f3314

SHA512
48612822ca3647aeba56f6b3bd665fecd21dd763c7f43d6ea8563f44023d3ea14ebf2af864f8887e5a723e0446c7ce02abab7b1b28ab7caec74e1abfe0511db4

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
10KB

MD5
53ad6fdc9b74ccef6b7d073207ad2ef8

SHA1
6d3727f2ff56862ff2960aceca13b7c71d38ec8e

SHA256
b140da58cc8a7f2cf792056123ec7673d4c46b76c9e0653a319d631a60b64381

SHA512
879d5775718620c79b07d77cf957fce6d0a3ab209eb9fdd9325af683c5e9b4af6720b19663afb0467d160d66119e6fe520a002f8eb5f690ec3fb20ff4691fb8f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\InstallOptions.dll

Filesize
15KB

MD5
89351a0a6a89519c86c5531e20dab9ea

SHA1
9e801aaaae9e70d8f7fc52f6f12cedc55e4c8a00

SHA256
f530069ef87a1c163c4fd63a3d5b053420ce3d7a98739c70211b4a99f90d6277

SHA512
13168fa828b581383e5f64d3b54be357e98d2eb9362b45685e7426ffc2f0696ab432cc8a3f374ce8abd03c096f1662d954877afa886fc4aa74709e6044b75c08

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\LangDLL.dll

Filesize
5KB

MD5
a1cd3f159ef78d9ace162f067b544fd9

SHA1
72671fdf4bfeeb99b392685bf01081b4a0b3ae66

SHA256
47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6

SHA512
ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ShellExecAsUser.dll

Filesize
43KB

MD5
552cba3c6c9987e01be178e1ee22d36b

SHA1
4c0ab0127453b0b53aeb27e407859bccb229ea1b

SHA256
1f17e4d5ffe7b2c9a396ee9932ac5198f0c050241e5f9ccd3a56e576613d8a29

SHA512
9bcf47b62ca8ffa578751008cae523d279cdb1699fd916754491899c31ace99f18007ed0e2cbe9902abf132d516259b5fb283379d2fead37c76b19e2e835e95a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\System.dll

Filesize
11KB

MD5
bf712f32249029466fa86756f5546950

SHA1
75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

SHA256
7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

SHA512
13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ioSpecial.ini

Filesize
1KB

MD5
642543c709c82bde046cb578a20dcfe7

SHA1
91c443105b9eefe2184098fdd52228e373138dc7

SHA256
564a35b965388e202be83348524405f28eacc17bcceef4b07ceecf53da60b407

SHA512
6d21f8465a1793300a8da1124adaffebb276ee18252c7753ca3a8283784139d05b12ef545f0fb17be83559b36f1e98b638090507a083dd8f9c4efa04c83346f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ioSpecial.ini

Filesize
1KB

MD5
cda7227efadf48d49c8555fa9de0b83a

SHA1
2093d0070c005ccb8627fe9ebd9f64e7fc512c58

SHA256
00fc6d759974c7787e3a3d544109c28c0ee1ddf82fdae310f99657f903d21552

SHA512
f55c29e9de1cbdec74e0a10b75c63b25a3a25f69df3721abd12f0131225d7450c1c983e933399f13d1476713407216b43056a096231ea92d306e2a8ba13d1857

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\modern-wizard.bmp

Filesize
139KB

MD5
1478164ead48ae2de1a24853f216902e

SHA1
25fed508260273397693b970614395e2468d9d4a

SHA256
2aa941ce5b647d31a2b7a40b04856fee8880eee38769ad0c00bb29c5bcd7fdcf

SHA512
c319ac27c1a357e54f5edf2b25a26d9c58d62861915f120e05952374f7f72888131e27b2857281020d94b1ec69e8a47d6a80ca9ce2c009c3652caf4d8c3e0df6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\nsDialogs.dll

Filesize
9KB

MD5
4ccc4a742d4423f2f0ed744fd9c81f63

SHA1
704f00a1acc327fd879cf75fc90d0b8f927c36bc

SHA256
416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6

SHA512
790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\nsExec.dll

Filesize
6KB

MD5
132e6153717a7f9710dcea4536f364cd

SHA1
e39bc82c7602e6dd0797115c2bd12e872a5fb2ab

SHA256
d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2

SHA512
9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\version.dll

Filesize
22KB

MD5
fbe588b15eb1bd86defade69f796b56f

SHA1
2f63cf44039addddb22c2c0497673b49e6b3ad7a

SHA256
31144e8b156fe87317073c48a09abcb033fda8dbdd96986c4abea8c00c00355f

SHA512
e1a9e29e4c62e77a2ec2c539344f0b5a8cd67ca3fd8dfefb0b0666a992eb2fabadb0034d439c4adbbdffd9c9439f23ee5757fac0ed669d3c9db48f50c677143d

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\flag\information.properties

Filesize
56B

MD5
f121a575f23c09a5089428e19c66fd9e

SHA1
2e0b533c6478ad28062b28ec5e7ede16504515b2

SHA256
d5c7b4d1fea722d87219f94cbab0c44b4b29dc6c96837e861e265093d2c4d801

SHA512
056361db0b3248aa66ca17f8091e25e8cff7492d5478485d8dbdf4fb9a24d3776a56c4eb1f7d81b6e0855dbadb628f80a21a137edaf32c65c2eb853cd51f1b54

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\help\html_international.cfg

Filesize
1KB

MD5
45fa5a4110cc3febd35b997a26346cb4

SHA1
c8e8f712acdb0f088f6b87d58c550dd331681cfb

SHA256
0c33a008e7b99b7e45c5d96c8b2ebb484ca372540ed9b896e47ca26881551eb5

SHA512
a4fe820b8ebebf6935ba04da0805b7453ed2ec63b01643381bcd3c3dd664ac48f92eaf4e7e152e7f63e33cb9c78756fe6abdc9c872f3e68306e1cee8ab32446b

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\DeviceManager.log

Filesize
5KB

MD5
48573adee64145b224ceafcca03aeea3

SHA1
a4e89058eb217efa8fa4f3972243e56512455db2

SHA256
239a3e5f1485c3c2e7f4297060c20ab35d6da80f7ee865be4f69417809862495

SHA512
7f615d5fd8996791513ca002507a4f3cf9ce0b4fededf44f9fc28e645d3f70e64011013eba29e84ceef0cbd80f93a589af8c6a7d15f7cb17d7cfbcfa23157fab

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\ip_monitor.log

Filesize
276B

MD5
94ca7f7d242faeaaf641f92736b609c3

SHA1
f7e66b774504e9b248e9d815098919d916d60518

SHA256
a438a02bd544059bc5dc3a84deb1accd88615695504d8a2ebb8ace81e3d42e82

SHA512
765124d93a9485be7abc0d7aabe34ea9aaaf268b7e7fa52685596f3df289284e5a27e3dff70e4c7627763e86a1a5f24e3753a68691df9bbfd3c94e759097dd40

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\tc_games.log

Filesize
5KB

MD5
d0084e931ed44f4ac5f95fba767564a0

SHA1
ee31031eefc1f438ade20367fb722d1f55bf0838

SHA256
62cd4686c167da68417ef404d5486a96217176a6e7dbb5d8c828d7dd23e4cc6a

SHA512
9780c908dd53726e2753b0affaf7af8da0b7783ecba88716894bf0a1f5ca8f04c08ff731a6791734a19462369a2943327a9f99a4adb66461a8efc3b45e5a40a5

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\cast_setting.ini

Filesize
195B

MD5
664474bb332eba0448f233b48868aaa6

SHA1
966a9ece2724937ae0f9f0719870898a55c3892c

SHA256
871c4d0f71d5c20d1c6c419db31a6ed6433222a8f53e26b6ef9a4382ac039c9b

SHA512
e0028cd563db7ebc4f864fa67dcbc970ac1ea29ca1a6ae947fff27e6aa57c5fbc294406d1d33e615c025401f7d7c62e0eb808ddb54adf7eec96d732c59d0838e

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

Filesize
126B

MD5
d72cdc236c4ccfc07cd2f062b3300f8e

SHA1
148c954524474489a90c1bae38f602ed91ab966c

SHA256
bb2fb6814a5a6cab8f57ecbfaf73b61c0b3310bc9845ae14147f5c24af651ee4

SHA512
925a27c86cc0c6b19a023155c22c59049e261dd4a48bd5ee7d938b38aec0b1f03d509aaa7f7856f5d132dc70a47a6319b5e2d3ce1a7c0309c99342eb364be6c2

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

Filesize
139B

MD5
5e714936a7137ee3aa0def4487ceb646

SHA1
2500318fa670d82f6712baf859e7bbe001a6d13a

SHA256
b567254c7ef8c09eb1f7703a3f487db3ed94e54186b6882710f332d345df0c86

SHA512
284f2fc80bde3ae0e2b95feb4582296a166b3414588372bf38c4c6f9b7ea6ebb836998d34163a74399c5c944f2824e340037ed59b293e9ef740d2893e5289980

Download Submit
C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\settings.properties

Filesize
86B

MD5
f5336f27434b72b4cd3a9f69aca11a76

SHA1
e0e835e1ff66fcb40c8504d13bbea38a74137d68

SHA256
53c8b7795e60a5715ba76c09e2adaaee77fd8da86167f0d55819407c34135ad6

SHA512
53730f046ae120a118bb51dfee4e308b7232f51cd0c0005b916468f6a001f59eb71c4b9db067b89f5088121c7ee332c115a357d1616cafb4e0b53565167f247b

Download Submit
memory/412-2064-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1040-2050-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1040-1927-0x00000000009B0000-0x00000000009B8000-memory.dmp

Filesize
32KB

Download
memory/1040-1938-0x0000000005450000-0x0000000005460000-memory.dmp

Filesize
64KB

Download
memory/1040-1934-0x0000000021000000-0x0000000021001000-memory.dmp

Filesize
4KB

Download
memory/1040-2052-0x0000000005450000-0x0000000005460000-memory.dmp

Filesize
64KB

Download
memory/1040-1928-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1144-1929-0x0000000004CE0000-0x0000000004D8C000-memory.dmp

Filesize
688KB

Download
memory/1144-2053-0x0000000004ED0000-0x0000000004EE0000-memory.dmp

Filesize
64KB

Download
memory/1144-1935-0x0000000036900000-0x0000000036901000-memory.dmp

Filesize
4KB

Download
memory/1144-2051-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1144-1937-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1144-1939-0x0000000004ED0000-0x0000000004EE0000-memory.dmp

Filesize
64KB

Download
memory/1892-2038-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/1892-2040-0x00000000052B0000-0x00000000052C0000-memory.dmp

Filesize
64KB

Download
memory/1892-2036-0x0000000034D00000-0x0000000034D01000-memory.dmp

Filesize
4KB

Download
memory/1940-170-0x0000000002530000-0x0000000002542000-memory.dmp

Filesize
72KB

Download
memory/1940-11-0x0000000002530000-0x0000000002542000-memory.dmp

Filesize
72KB

Download
memory/1940-1334-0x0000000003470000-0x0000000003482000-memory.dmp

Filesize
72KB

Download
memory/1940-1321-0x0000000003470000-0x0000000003482000-memory.dmp

Filesize
72KB

Download
memory/1940-1320-0x0000000003470000-0x0000000003482000-memory.dmp

Filesize
72KB

Download
memory/1940-171-0x0000000002530000-0x0000000002542000-memory.dmp

Filesize
72KB

Download
memory/1940-1333-0x0000000003470000-0x0000000003482000-memory.dmp

Filesize
72KB

Download
memory/1940-13-0x0000000002530000-0x0000000002542000-memory.dmp

Filesize
72KB

Download
memory/2220-2056-0x0000000003590000-0x00000000035A0000-memory.dmp

Filesize
64KB

Download
memory/2220-1940-0x0000000003590000-0x00000000035A0000-memory.dmp

Filesize
64KB

Download
memory/3396-2039-0x0000000004AD0000-0x0000000004AE0000-memory.dmp

Filesize
64KB

Download
memory/3396-2037-0x000000001B600000-0x000000001B601000-memory.dmp

Filesize
4KB

Download
memory/3396-2035-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/3500-1921-0x0000000010DA0000-0x0000000010DEC000-memory.dmp

Filesize
304KB

Download
memory/3500-1743-0x000000000EC70000-0x000000000EC7C000-memory.dmp

Filesize
48KB

Download
memory/3500-1441-0x000000000A8D0000-0x000000000A9D0000-memory.dmp

Filesize
1024KB

Download
memory/3500-1445-0x000000000A450000-0x000000000A47C000-memory.dmp

Filesize
176KB

Download
memory/3500-1816-0x0000000013CD0000-0x0000000013E2A000-memory.dmp

Filesize
1.4MB

Download
memory/3500-1448-0x000000000DA20000-0x000000000DADA000-memory.dmp

Filesize
744KB

Download
memory/3500-1432-0x000000000A220000-0x000000000A258000-memory.dmp

Filesize
224KB

Download
memory/3500-1839-0x0000000015320000-0x0000000015938000-memory.dmp

Filesize
6.1MB

Download
memory/3500-1433-0x000000000A1F0000-0x000000000A1FE000-memory.dmp

Filesize
56KB

Download
memory/3500-1919-0x00000000151F0000-0x0000000015202000-memory.dmp

Filesize
72KB

Download
memory/3500-1391-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download
memory/3500-1920-0x0000000015250000-0x000000001528C000-memory.dmp

Filesize
240KB

Download
memory/3500-1838-0x0000000014AC0000-0x0000000014B9A000-memory.dmp

Filesize
872KB

Download
memory/3500-1450-0x000000000DA10000-0x000000000DA1A000-memory.dmp

Filesize
40KB

Download
memory/3500-1924-0x000000000DCC0000-0x000000000DDCA000-memory.dmp

Filesize
1.0MB

Download
memory/3500-1751-0x000000000FC80000-0x000000000FC88000-memory.dmp

Filesize
32KB

Download
memory/3500-1431-0x00000000075B0000-0x0000000007616000-memory.dmp

Filesize
408KB

Download
memory/3500-1749-0x000000000FD10000-0x000000001023C000-memory.dmp

Filesize
5.2MB

Download
memory/3500-1412-0x00000000074F0000-0x00000000075A2000-memory.dmp

Filesize
712KB

Download
memory/3500-1413-0x0000000006E60000-0x0000000006E7C000-memory.dmp

Filesize
112KB

Download
memory/3500-1399-0x0000000006960000-0x000000000696E000-memory.dmp

Filesize
56KB

Download
memory/3500-1783-0x0000000010450000-0x0000000010520000-memory.dmp

Filesize
832KB

Download
memory/3500-1395-0x0000000006CD0000-0x0000000006CF8000-memory.dmp

Filesize
160KB

Download
memory/3500-1737-0x000000000E920000-0x000000000E944000-memory.dmp

Filesize
144KB

Download
memory/3500-2034-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/3500-1501-0x000000000E8B0000-0x000000000E8E4000-memory.dmp

Filesize
208KB

Download
memory/3500-1495-0x000000000E490000-0x000000000E7E7000-memory.dmp

Filesize
3.3MB

Download
memory/3500-1390-0x0000000006E80000-0x0000000007426000-memory.dmp

Filesize
5.6MB

Download
memory/3500-1389-0x0000000006830000-0x00000000068C2000-memory.dmp

Filesize
584KB

Download
memory/3500-1494-0x000000000E460000-0x000000000E482000-memory.dmp

Filesize
136KB

Download
memory/3500-1449-0x000000000D990000-0x000000000D9A0000-memory.dmp

Filesize
64KB

Download
memory/3500-2041-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download
memory/3500-2047-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download
memory/3500-2049-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download
memory/3500-1388-0x00000000062A0000-0x00000000062A8000-memory.dmp

Filesize
32KB

Download
memory/3500-1384-0x00000000062F0000-0x0000000006472000-memory.dmp

Filesize
1.5MB

Download
memory/3500-1380-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download
memory/3500-1379-0x00000000005F0000-0x0000000001654000-memory.dmp

Filesize
16.4MB

Download
memory/3500-1456-0x000000000E3F0000-0x000000000E3F8000-memory.dmp

Filesize
32KB

Download
memory/3500-1378-0x00000000740E0000-0x0000000074891000-memory.dmp

Filesize
7.7MB

Download
memory/3500-1451-0x0000000006150000-0x0000000006160000-memory.dmp

Filesize
64KB

Download