Malware Analysis Report

2024-10-18 22:20

Sample ID 240328-1jl9bahc4x
Target TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe
SHA256 fd9295ceb9fac0b1a58ac518575996a1f414e3a2fe6d5ec4c33d2e738426c774
Tags
qr link upx discovery evasion
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

fd9295ceb9fac0b1a58ac518575996a1f414e3a2fe6d5ec4c33d2e738426c774

Threat Level: Shows suspicious behavior

The file TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe was found to be: Shows suspicious behavior.

Malicious Activity Summary

qr link upx discovery evasion

UPX packed file

ACProtect 1.3x - 1.4x DLL software

Modifies Windows Firewall

Requests dangerous framework permissions

Declares services with permission to bind to the system

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Drops file in Program Files directory

Enumerates physical storage devices

Unsigned PE

One or more HTTP URLs in qr code identified

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Checks SCSI registry key(s)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-28 21:41

Signatures

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Declares services with permission to bind to the system

Description Indicator Process Target
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards). android.permission.BIND_INPUT_METHOD N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A

One or more HTTP URLs in qr code identified

qr link

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-28 21:40

Reported

2024-03-28 21:53

Platform

win10v2004-20240226-en

Max time kernel

300s

Max time network

268s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe"

Signatures

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Sigma-RT\TC Games\help\international\default-connect-help-ar.zip C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\P90.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗箱.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\bin\refresh_desktop.exe C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1440\SCARL.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1200\暗影拾取.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1600\黄色弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwencv2_r30.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\M4.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\UMP45.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\饮料.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\UMP45.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\黄色弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1176\kaiche.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\data_1 C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwenc_r30.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\YENIU.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwencv2_r28_z.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwencv2_r29_4.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1440\YENIU.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\3倍压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1113\眩晕弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1176\地雷m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1176\眩晕弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\平底锅.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\G36C.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\背包.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1176\手雷m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\license\c#\Newtonsoft-MIT-LICENSE.txt C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\倍镜缩放展开.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\usbscan.exe C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\Microsoft.Expression.Interactions.xml C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\driver\amd64\NOTICE C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\9宫格.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\红点压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\绷带.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1176\闪光弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\locales\hr.pak C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\黄色弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\全息压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\地图背包标识.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\绷带.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1440\背包.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\bin\aapt.exe C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\en\HandyControl.resources.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\地图缩放.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\附近拾取.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\平底锅.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\全息压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\闪光弹.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\driver\i386\WdfCoInstaller01009.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\ko-KR\HandyControl.resources.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\MP5K.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\烟雾弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Driver C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Driver C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5116 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5996 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5996 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5996 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4032 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4032 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4032 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3000 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3000 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3000 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2700 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2700 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2700 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4468 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4468 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4468 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5884 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5884 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5884 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4964 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4964 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4964 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4932 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4932 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 4932 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3024 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3024 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3024 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5188 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5188 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5188 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5576 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5576 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5576 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 1152 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 1152 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 1152 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 5404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2080 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2080 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2080 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3184 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3184 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3184 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2588 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2588 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 2588 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 5116 wrote to memory of 3640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 5116 wrote to memory of 3640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 5116 wrote to memory of 3640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 1612 wrote to memory of 1564 N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe C:\Windows\SysWOW64\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe

"C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-32-platform-23-0-1.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-32-platform-23-0-1.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-40-platform-28-0-2.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-40-platform-28-0-2.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-41-platform-29-0-6.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-41-platform-29-0-6.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="appt.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="appt.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaCheckUpdate.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaCheckUpdate.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaCopyFilesHelper.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaCopyFilesHelper.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaInstaller.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaInstaller.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="UsbSharedNetworkConfig.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="UsbSharedNetworkConfig.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="CefSharp.BrowserSubprocess.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="CefSharp.BrowserSubprocess.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="TC Games.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="TC Games.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe"

C:\Windows\SysWOW64\REG.exe

REG ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /V "C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" /T REG_SZ /D "~ HIGHDPIAWARE" /F

C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" 0

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe

"C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" -i resource\product_info_tg.txt -p 17 -c -a "C:\Program Files (x86)\Sigma-RT\TC Games"

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" kill-server

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe

SigmaCheckUpdate.exe -p 17 -a "C:\Program Files (x86)\Sigma-RT\TC Games" -i "resource\product_info_tg.txt"

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1612.0.1358945730\557867719" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1612.1.1362579100\770709553" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" start-server

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

adb -L tcp:5037 fork-server server --reply-fd 628

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1612.2.1118559617\522268494" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="1612.3.168039101\1146523539" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=utility --channel="1612.4.2017294991\1811258371" --lang=en-US --no-sandbox --no-sandbox --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable /prefetch:8 --wcf-enabled

Network

Country Destination Domain Proto
US 8.8.8.8:53 58.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 20.231.121.79:80 tcp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 98.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 59.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 202.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 global.tcgames.com.cn udp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 8.8.8.8:53 support.sigma-rt.com udp
US 8.8.8.8:53 download1.sigma-rt.com udp
US 8.8.8.8:53 download.sigma-rt.com.cn udp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
US 45.76.6.180:80 download1.sigma-rt.com tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
N/A 127.0.0.1:54519 tcp
N/A 127.0.0.1:5037 tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
CN 211.149.152.155:80 download.sigma-rt.com.cn tcp
CN 211.149.152.155:80 download.sigma-rt.com.cn tcp
US 8.8.8.8:53 3.18.88.54.in-addr.arpa udp
US 8.8.8.8:53 180.6.76.45.in-addr.arpa udp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
N/A 224.0.0.251:5353 udp
N/A 127.0.0.1:54562 tcp
N/A 127.0.0.1:5037 tcp
US 8.8.8.8:53 global.tcgames.com.cn udp
US 54.88.18.3:443 global.tcgames.com.cn tcp
N/A 127.0.0.1:54570 tcp
N/A 127.0.0.1:54572 tcp
N/A 127.0.0.1:5354 tcp
N/A 127.0.0.1:5555 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 8.8.8.8:53 232.212.58.216.in-addr.arpa udp
N/A 127.0.0.1:54586 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:54618 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5557 tcp
N/A 127.0.0.1:54645 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 142.251.173.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.com udp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 142.250.200.4:443 www.google.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.173.251.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 4.200.250.142.in-addr.arpa udp
N/A 127.0.0.1:5559 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
N/A 127.0.0.1:5561 tcp
N/A 127.0.0.1:5563 tcp
N/A 127.0.0.1:5565 tcp
N/A 127.0.0.1:5567 tcp
N/A 127.0.0.1:5569 tcp
N/A 127.0.0.1:5571 tcp
N/A 127.0.0.1:5573 tcp
N/A 127.0.0.1:5575 tcp
N/A 127.0.0.1:5577 tcp
N/A 127.0.0.1:5579 tcp
N/A 127.0.0.1:5581 tcp
N/A 127.0.0.1:5583 tcp
N/A 127.0.0.1:5585 tcp

Files

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\version.dll

MD5 fbe588b15eb1bd86defade69f796b56f
SHA1 2f63cf44039addddb22c2c0497673b49e6b3ad7a
SHA256 31144e8b156fe87317073c48a09abcb033fda8dbdd96986c4abea8c00c00355f
SHA512 e1a9e29e4c62e77a2ec2c539344f0b5a8cd67ca3fd8dfefb0b0666a992eb2fabadb0034d439c4adbbdffd9c9439f23ee5757fac0ed669d3c9db48f50c677143d

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\LangDLL.dll

MD5 a1cd3f159ef78d9ace162f067b544fd9
SHA1 72671fdf4bfeeb99b392685bf01081b4a0b3ae66
SHA256 47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6
SHA512 ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362

memory/5116-12-0x00000000031E0000-0x00000000031F2000-memory.dmp

memory/5116-13-0x00000000031E0000-0x00000000031F2000-memory.dmp

memory/5116-14-0x00000000031E0000-0x00000000031F2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\ioSpecial.ini

MD5 afafe23d2ec48574a1bf1a53e8fcf4d7
SHA1 50b7d799b882cb21f95c9853411d7f6419c29fa6
SHA256 c05afc7ea01f7ad3c0cee8b6d20b798026445b26651f89a24abf233f3b6c014c
SHA512 22ec102715b56479d10015678f4449edb9ae659779d8811b5aefe3964f4319692a93099fd8b2bead6d33bdcdb5fc7b05da5823fc7c80442243010d37be59e5ce

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\InstallOptions.dll

MD5 89351a0a6a89519c86c5531e20dab9ea
SHA1 9e801aaaae9e70d8f7fc52f6f12cedc55e4c8a00
SHA256 f530069ef87a1c163c4fd63a3d5b053420ce3d7a98739c70211b4a99f90d6277
SHA512 13168fa828b581383e5f64d3b54be357e98d2eb9362b45685e7426ffc2f0696ab432cc8a3f374ce8abd03c096f1662d954877afa886fc4aa74709e6044b75c08

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\AK.png

MD5 52ef202920c67ff0b2f6d6dc305a9519
SHA1 9792f0bf1313a2e8334349067c77ffe8b8ec4400
SHA256 b5e4c48be78262eca23f9abf67ce2faa3b176124e8190184e7140568783b9e4b
SHA512 f206abf86db6c4bf07527922be8c7c8e691509b7729ec91d5ef2111c98f3630952025f63b6a0d5f087a9d68625755139bb4d5853aa09f7d9068274e247efcaad

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\倍镜缩放.png

MD5 9d2524fef0804e38b120d80daab1a2f7
SHA1 e29e41b2b5fc9620e02731ca80d84e21256c9af1
SHA256 3abb8895531e3297aa5858d3ca0c43c5a8cd9a77e883f59dac2876ced51dd714
SHA512 76952223780b3500fbcaca4b8430127f2e9d398401de5b6bce9af0bc673efc54db1e8bbb32f2930592c2edb5264d2ed2503b844bf9c30e97cbceedefd4473cbf

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\2倍压枪.png

MD5 60d18e9c3bb1828c85678e3484e20b12
SHA1 a60d17b5bfef79741d6acc1323eda532fa3fd4af
SHA256 1ee6c2ac69bc0e357878a439c3bcaf4f02da936558c9a1c4082d128e17864d0c
SHA512 b34cd0a3e833e54e2eea212df3943e7fb3c94122ee0ad704494a8958f45cc1b25c86996ac10f29e44e3e8e4190fa209d2c8ab86f44f2c0ccba6ddc27c3fbc01d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\3倍压枪.png

MD5 05e54d5da60fcc1dfa8d4e1a050b0e28
SHA1 c25fad4eebefb0d700870ee7e056c7b693a84686
SHA256 6a05be76773393649ad3593d37a27fa0c784316a1f1de43dbedf7ea31a5439ff
SHA512 75327a2ac40bb141585e403466ffc028f778e593d8e053015ff28ad9259ac37c670b2d59e7760a644ef879c385988491a76fe62eda4305d09c2600f2f1ba66db

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\4倍压枪.png

MD5 8c2659ccd761207e1d6c9708f525c616
SHA1 1b581c60ba177511718a3849663098ca9da9e42d
SHA256 eee12a18083f77766ae53aae94ee31ac640f2788a65c12fc338757351a0c1389
SHA512 3591585405216c4853b43cb63295a5f5a33412b3547ea83c4f9fa82e4f82c42d16c6e1639a964ebd594252ba213ad785ae6065981d9d006b918f361ef2e38bc2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6倍压枪.png

MD5 472aa23694c86e229dff7df759ec2cb8
SHA1 9b089843db6db1aabb9d768e2f83ae888db9f935
SHA256 6a569d3ac2f1d1c206ab5a68cf6ce123fdc7d82973047ee6a12fc2cb04be6a5d
SHA512 7121296027bce41baefecf23d22294970ee81bfef601ebb1defccc8810e84c331f51462436e58e60cde90624a3c18c1ac5fd7c457d92c7b6b61ce9219f39c5b5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6宫格.png

MD5 1e8e967df04f5564d3c8a691ef252c52
SHA1 3ac702742e80bc1e5e3447203108314809b6071e
SHA256 a036099e0c142b54fa3c24937c3aaca43a81186add236cd3794aa9f1fc08f6f8
SHA512 2f04e85d4b9b4c60756401d127133cb2431f73da62aab799e651ce3b7f44ac6ff6500b5e60b1f6d6c042477799e697ff302bfd724253712eda5ab67c04b68d31

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\9宫格.png

MD5 879a133237f9d1f1ee21ab72ea6a0caa
SHA1 46d0dbd7f9b8f59b16d43c2dc61b34f095f7dc11
SHA256 046f3ee9284efc73857e6293f53e6bb78801d5c173b2603805b0f905fe958f3d
SHA512 49067cf9e8e1d303b3f898f7fb98338b9b2e9fa338fabd2b4db3a7538ed803c781340857d9264ed1090e4070c00ce91f83fe9bcb4a1ffa9ebaff275080daa24a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\ACVAL.png

MD5 3205ef7df426da65747f2497bf0030d9
SHA1 da2ee5d69a27a9f2b6d417a626d3fe4a4f6052da
SHA256 dc33925a430a78fb7d32246394049a3f63c94f5813072e4971fa07d913a8bbd3
SHA512 caa42d00edfb86693075d130a017592976b43b4b7b508c1c127575514fa2ba16cd4897cc7fab7d33a41fdb0971ef195af5844f2143a23b0cb3c0e6e0cab06535

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\AUG.png

MD5 100c5dd1e0b424ef4ba09c915e3c3f3e
SHA1 7d361e89e4bcaa338c760a086cc4c6cf84699a5e
SHA256 956f5ea5f56eb5ee97bfa19868865f2ddc3e8f62bf3e16015134cb6d6aea93eb
SHA512 db94369be1a1b2b7d2852d16abf2e089a81dcdb77cbf2997f1ad7aa3acf84161abfb97d48b2849b13c05a5325cefcc596197ce705bb8a34b4070421bb4829ec6

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\DP28.png

MD5 bec329b876be4dfa0b89debba20c1cd3
SHA1 77a00baf618d2609aae49702534d9f77395fbb0e
SHA256 9e98b0d8c3b9549c09c6b998d3dbe187b8a8d14620caa11dfe60464ebde0d009
SHA512 e475a70a50e01edbc11f6eb4a672c5aa19a91fc2b4448f175f1519e2e528287884544d8ae780b4ff5d9324f4a2c672856a73a3fcd3d347282119aec90307f096

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\G36C.png

MD5 218335ea42cb76a8b180a093a44c3770
SHA1 a7c00937d9859d6ac7d7cf75afe9ec95142a4863
SHA256 e5fcbbaeac6fb9a5728263ae3626f6043be84ecf485177f999170d115feb6b48
SHA512 7f83966e9c8784da03a8549da2cfde539b75cb9b7da72f4365fa5512d89658b8f318c2e721c04836b41a8d81be1c02f8d70af7593c76da200aa4ad7c7e81dcdd

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GOZA.png

MD5 213dd409d708706f7d4122ffd79a992a
SHA1 30d60a7f8acea422906a56e01b0338180fae1073
SHA256 8b334c14848b0e82817fc8c717d697ee1492b3745cadf2b09e6eecca32b78b53
SHA512 09cf3129c45c1cc4ee06c478c5061273130109830a2d667b019156eb661b2c7ac5d592677cf6ccf3932eed00262f7940d4e3f805fec58b19621ed857bd8203b7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GROZA.png

MD5 5c6f2c81c78cdfc21b444db4c0bcad98
SHA1 57ca6502b781c54ff83885eeab24f17fbdc82232
SHA256 3b73b38b6a0019f592aa792c7f36ef97e236e99e1ba9bd6b79958daa259f7907
SHA512 3ddfdeb08c7089a54407bb47e67edd74d695b6778eca3f9b69c02e7f7e8cb6ff00229bd3e38ea43480eeb5685da381f12d2d769c76656c76a40f6da7c3ff1b38

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M249.png

MD5 1ec9c89c1f04f320889bf1f965555742
SHA1 2029c7386f4d11b2516e4c08f1e6cb7ef0f2c280
SHA256 1b51a70d43564131eaf615d03fd284a83f119fdc8731d426fd19a5a9931ae0aa
SHA512 d4a4f79870c512a15ae78a2fa6f3bbe5e5912e92b97af2c4061901e91f22b500a2b727ef348096fcb1cb47ceac16191542b352d159cac56ded34a4def19d4b77

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M4.png

MD5 b38435cf7a2608c12a82ee25ca7b4c9b
SHA1 3e9ac2db6e6a44f22e6f2e88dc845b88cc0079c3
SHA256 7125f9b67c9504c2bd3bdbaa32a146e7d4c8208091af6ef18c2164cf98fc85e2
SHA512 ee491dcecb849e957e5d76852ec935eb09d9c8b62c9e23aff81beae29609eb2f0e3cde71176b112e538b7d1006180e9e867ad85f9f26553deb2522cf9d2d4167

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M762.png

MD5 f29cf31eb72ae02abcd7e8d31ec34be5
SHA1 66c327d391d9436e23c8a184a7cb8c9b84907cae
SHA256 eaefab7c0021780d344d620f0c8e1b87fe80a96622e108c64f14b86be0809b7a
SHA512 333a0a06fb1e35a7e65f4916c77cb1bf4a65fc5f90caeb74c83a92e47f688aa6ef124e2366d63adecdef2ed0a6bc0dd5f9de70a460e4bb35ed18a0fa8cbc5d47

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MG3.png

MD5 ca6fffe08f640e7ffa79684cfd7a6dcf
SHA1 c858e5a8c908e430fee3ea7b068bc07702e317fc
SHA256 f0fb4e7e6393a20d6926b62a60ec46152d5b546f6dab74abcbe5987c27a661bc
SHA512 b7f76b18ba75e520672157be1830fe3540cb164b5000cc379e185c5620cc2b9417e50d624ea465a3787513987a1abed5d243262b88103768b013a5b5a7626ef4

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MIGUAN.png

MD5 424a18778df3b70ebf0454ff35f3c2ce
SHA1 96a904b6d7b482e9f12be99770d801eb9ebb3bb0
SHA256 564d8c9842d932f99e03e877ba539da2dde8e4301a6801259716fdffa28bc4a4
SHA512 706bb2c2e7aab3a0c233263deb1273d83ae61850e6ac9d82bb808695be23df4adc5d9298078363034f3aab83fe2d009e3856e61ec2ffc30abf2359b422cffc22

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MP5K.png

MD5 0d72c31adbfa39b69d7656df18c12e17
SHA1 76160c04283b271c87f4b38bb7cf5724f8b44a8a
SHA256 682551dd490451bbf44e4ba732d0b2a8a59397711cdbcfb6880874d0145de6b2
SHA512 75678ce27a35225e96dd53faf530566e51796c7805adc431de96478d12559583b3958ad2825560e7069d32dbd88efe7c029c3c79a02ac0b33c9012ab1e93a208

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\P90.png

MD5 cd9411a883d59aaf442108c886d67340
SHA1 a5b437aba9c9b977a3121f28cc40a85014f3f5bc
SHA256 47751d9834685c4572d69cd2e2dc1108b85ae5951ab885014d3cc1c7bf580048
SHA512 b3ab260bfe2e82af195d6f6d4a91b91169baa47c3b62bc00b8b6ad2dd47ad2bb6fbfbf818e7ab288d790f5976c15a84aa716799c63de7d36ce579833218f6c36

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\QBZ.png

MD5 9fd90f090a87a6b119b37bd903dbec9e
SHA1 f55641ca9cfe9bc7c87becc2df3cead95ad03de7
SHA256 5c4d3f95a2a40b6624a07cf2619b5eb3f12021aa7897c4089771f040e727f489
SHA512 06598cd4fb9c70e84dd48214f645c67a8c203b3499286ac8d5c1d3568350ec4ee196c314edf4dc0a326c8172728a2f4ea21d2be76554b0aa6c193167c9ef9011

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCAR.png

MD5 e76b463d0ef5a3c000e7bba0ed423dac
SHA1 3057b74f2f7c465016a36afc041f4b81acfd367e
SHA256 260be03cb3c1191eaa9a5523b0cb8874096f87028b46b387404ae08074261ac3
SHA512 13f327451cb075cb393951d2d1204e392876289bcebce01f4d23b5137531de0f420a0b80acb21bfed6a5c4b3c736b0858288288e51e3913b4f3a457a7f28d96d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCARL.png

MD5 f517927e343738c1642e48f4a7832ea3
SHA1 d05f6de9c9496c75283f030805210ef4e2983b6e
SHA256 12271cecfce5befe49510e984301ff310fbeda4d7d00a88d8b923a0891f49cd3
SHA512 d1949bafcf41ef7304250c6a219d1dd00da8df10e3cad4e0b9edbd196523891e86d914f7467f187b308da7ef6406846afb4858b8c9f5e92c195492b03f258a21

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\TANGMUXUN.png

MD5 0d7d9832dce43ba4a3857237ba24f009
SHA1 0d9d316f2ec65889c2bc5cbaa22638162fef39f5
SHA256 0a91774172bbd3838ce7af1503b72dfbea41baccc1b07c8522240be2d3e3f11f
SHA512 b14833a26f9e00faf2cf49e76d1dbf2b37e2d67db369428ec7b0614e2ac6194d613b5497d1fc61c226e9a885d42fca7d61c5e1745757a4fcc6042d00f9e459c5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UMP45.png

MD5 c1bca40413d95f3efcf667aaef2cb55a
SHA1 710b447938de1ccbd6c629f3e454ed89cea79bd1
SHA256 88ba06e1d73e956157664d4143ad7734e3eabca5ed70fd831eb50a2955aadb7f
SHA512 34be5e41f0413126c9fbb27dd83112810160308145868c08847835fa81fefbcb86717ea479fcf663367d9689574cace8c51f9293dc11217d0812a53cc077e3f5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UZI.png

MD5 142e8f477e57e8e7be65e79eb4506292
SHA1 d9fd13003a56c989b2c2639ffbc707ffbbec4376
SHA256 8504a4c746103b3c2165ee55c1f33ccbcb0571b619af72d4ebfe1779ef413ab3
SHA512 de924252e84528259355b41f5a62d3c466da8c51fc417394682419d34646d55e9a51b4b2403ab2d78195f6b4533298ad523a80fc54d245a2c1fde35b6a0bb1cc

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\VECTOR.png

MD5 3bf50c676ceaf47c2b782534d4e6fadc
SHA1 ce46102f6159005143b9fe386db7c1e61d23f57d
SHA256 fa7b7d4bb770e793a6fa3b8925748a9bcbd4b4f1cf4adf0a75968235ea40499c
SHA512 e9465d14a9b7fe46151d3bb84c2802cc31c5f175b3466ec78f43f102d4cd55606b2ab6189f61532fa0e88b06ef264eeeb354ddd7c35a1b62b8662bb5c7f86fef

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\YENIU.png

MD5 8bd64758396783959778eca47785069a
SHA1 ad07993f52e8074bb72e498f1592c8f8498a8c30
SHA256 ad2af2f8381018bf69570fdf64855c425e0165255f4fda36915ff8e20531d92d
SHA512 388a7f6fa305b351ee72037c6926ccd763f66f84523f4056a7300b4be1e59a609ad6b4ee15e69041934e29c6f4e2cd24a1d25140bcc0cd286f6c191205ab8847

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\macroSmartKeys.json

MD5 145957fca4689c8627a2eca0ded0805d
SHA1 e4ee0a7a97a96284dc241d48dff8179fcb53d546
SHA256 fc6bf6c7aacd511598d1a05008b03227a945f29e602a0d9d5827a14321c8ce5c
SHA512 5af83dd03fbc392b8cb4e109287ff30444fa9b64c7184081c73c9a195533fe94d7b392518713bd1d7cc9556248f0ec4ec81b34c64f77849a194d66afa028271f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\侧镜.png

MD5 36e9fc1eeee6b2c36e0817412a0fe533
SHA1 ee3b48a5e5d05364ee9ad90041f1ad78af50e083
SHA256 7d0c1030f9e4837b1997170c9e37048ea3cdbb24dd505f73ab7ceffa419f37f8
SHA512 bbb560e25694886c92dea3cf24573222c7965e3f7f63c723b061fe3262ac3288e1f55573c36c20676c32d4ac749d2c8fa3ad4eeb71dc1d215adcc2333ebca1af

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\倍镜缩放展开.png

MD5 d3cf125224d9b4f21b1774a93553b0a8
SHA1 a7cbba74c551db505bfc1bb5cff214883e256e44
SHA256 d3c84c8576d73d5caee9f79d01c3eb801a49bf9e003194df1797c4c5570ce59b
SHA512 30a48fb2fc5cee8e73b520c605422f63d9f0243932c0fcf668ccb01fa2d6f26ff37cb5407a614a48647129c899ce61832cea0f0f60aab3d8f17d159cf51879d7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\全息压枪.png

MD5 3359762ed6ae9f5732b999076ff6e61a
SHA1 5bfe7571fac1cde4cbbdf47d4f058f740bd03c01
SHA256 787bc36bb521d405ac555683d35f514b9f354cb013d5b2baf873801dba07b529
SHA512 11b360fb5d140b3ac0e558168fec9e9eb9a360cea55cc06c5489b7aea138dee2919b93548f7538986256b260fcc8ff562b73b282c63b61e185ee1c1e970cca58

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗包.png

MD5 8b3b00023ed1d5fc7dca9af16e4ef0ff
SHA1 58394259b5b725d909c805f53e614c26b878e86e
SHA256 3e5256d8c94ed65e1c77bfb0c982dd252502a3cca17b8d750a8f536eea61c635
SHA512 fe557399f1fdff2331e23a4cee890a47242fbb7137e1119a215d9cae8185c89eda3d45192db6252bde89a77a963455c73697d29c6c5cf0e1ac655e3db2a9f70b

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗箱.png

MD5 ec67437dac0bf325bdf34d2f03b70fd6
SHA1 77c04dc870c5bb10c99d319ea8b75183f2016f5c
SHA256 81af772e2b71cd81999d0912824f720259773ab824f25f8ddc98380fd40e7ae5
SHA512 6333c18b301363df48af12488206c6c114917ce0598cd016d0d0771da7a01b3ec1bf9860f12d0473e9b641f8bd1e390dce792b6ebc47bc428cdcbc380f370946

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\原皮手雷.png

MD5 e289438678f1764f09616ab160c3f958
SHA1 7068ad83844d4e4cb7226937c222599e660ba66c
SHA256 9fef8861121a1b529628ea1b7d7c4627de6c7d5b6f6d39d3dcc503bcb26ae3d1
SHA512 8371a8f2d18db0f686c41801fcf90fca911eacd317f69a8ad3215b61e3a0a94d7a898ff66a66334acefd7b2bc063b36dd0d884ad407905b826d65863c784ceda

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图.png

MD5 070fb2d00f3b52630fc617ba988f06f1
SHA1 fafd6c251b88bb703b0d7b1a73201bdd2ac915ec
SHA256 1f422f83e316ee4b7105896c3daa2220171a13dc22511ba0d9990bebc629950d
SHA512 cdb7bc43785ac562ee7d635f6c7039b1d0281733fc2bc7d7094f8502219cda4b1955e9e08493ee508e2c5996b36946e6676ee826f9dd2be5778f17bd26f7cfc2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图背包标识.png

MD5 dda527b4ea72e5b599331ad6328cc48a
SHA1 8a0a53befbd942f6e043d0be85009b52d2ef0894
SHA256 bc468b9905fd18ac96eb8a3ffceb98a91755a887a9d6632f4e5497a729a02c3b
SHA512 3e7080e7a0eac95a96e3b14605b99adfae31a074a7a2fe363fb5ccc4be2c19e64ad3be1a46e2f3b1a7a3b383041305a1c11f65bc837614d0feaa08cb88bccd2d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\小鸡雷.png

MD5 51fc5efb7c3212a736669314bb2aa45e
SHA1 875a5335672cfa8e08cfeb8d6b3d73fb5d6fef3a
SHA256 04602c3f80429337770c010b860fa52e29d321f33e65d676ff9bb473ebb78afd
SHA512 cd0caf533cc2bebf9953c0b32637b4866f58fe3f489b777aa2e3cc08071ee8cc2a6a0450e422056a93d9a3ee3d0bbe05cb615a904c83cda7388c283000dc2add

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\展开.png

MD5 130fd9a341bb90a407cc4015a593717c
SHA1 016b9c38845d614ed32afef52c2db8894cfca846
SHA256 cdee2bbba0df2caad71e9bfe6da1915731c8d5d2bee038931e156cf3832e0385
SHA512 0b12b45e9c7f5910607cfb87af57fea25d6ecce45582c0cc3cde364c7eaf4cb4aed773a08fc1de4104e36e242362cdc0671058c44c42571ade6a6b1f00fa64ee

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\平底锅.png

MD5 723bc0f8a29aded1c3039860fd11605b
SHA1 05edfc46e9c917374ffea324e9b2a149b35c0974
SHA256 6258a2a10fca69fb4fb5eb357627252311c457002dd3a96528e1624b6bd092bc
SHA512 13467120455ff7b1f10132a7b47f389ee1b605867cad7d0cdab41e3724760fc8c64ccc48ef320ab65fb76404a006ab49d3ad887e3e2bb76ae7f1c1979c37cd55

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\拿枪.png

MD5 a735ac9c18763b6227c0dc10a491cd73
SHA1 e781208c4de540adca891f8d211d35a207a84eab
SHA256 d02494716eeb81d4b380e38ae5c6f36f079a0423cd0296d785ff4d7460b233f4
SHA512 248960cf848f02ceff949200f803830b97db70e0fe0d3827f86640f18264313800f2428b01dc7b7bf9598fbcf6a40edc3becf86d0aa3dac7994ee123c855bca4

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\止痛药.png

MD5 852e3613bc6a07dba18230cb8711e6ce
SHA1 a968b91a84654d30c999b039f4fe247eca023a6a
SHA256 da5a91565d380f2eeae06e9456a19d5d1b5882508f428e404f893fece24941bb
SHA512 7f723b946b74ff5d738f383c8ad70ff0968d348ae6ee973bc11ba317b222c816c4b5f9efe91a02e0364cce11cd4ce8e8997490530b4fff8637c6052e0280458d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\没有开镜.png

MD5 71aab0fbb8742b89b8644765a9cf6044
SHA1 c2795d26d1c8579d03ec2db91c526575d349f402
SHA256 a6fad1ab8bc52bf97166ccfd2016fe839b1aa88f5c02acb7dcdf689b7a59ea3a
SHA512 3c5d94f79381221874409465f210943277d191b329af4f037db0f038e15e02a0e4716b03b79508d3da36113ef8f16e80492a4e8890367ad42b2e236ce49cf0ed

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\烟雾弹.png

MD5 ee47173719076f3af0067c1ee93efb80
SHA1 868ae269a9aeffcb57653a4b14c7f4037aeb5721
SHA256 0e74057b5ed99a1c85290c406b8f689c884e3c2bf5d28de6d0c57172f1a4ce0e
SHA512 759526c4bf1c25361b16c20316fe05d51bd78c4024c6015abfdd46fb05549dbca61505dd9f9a5cb7e41185e7f2c57b187c162988ec46286d2b9335d8a91e556d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\燃烧瓶.png

MD5 2fbfdc3d16287eecffc49d44fb6b3049
SHA1 e170fcc23940ea03a0ff5fd13b08770b66fd9f9b
SHA256 fe8d5f54a9f70bfc40680cfc08dc4917ce7d520ee35e95f5602d893dbb32fc4b
SHA512 34fb2686ac0b4813d5d103a5d246d50dcf42f7517ba23792545a52cdc1fbb1fa8e854f735bb1d4a628701210659c6c92b79b8b23786308ef2ce4f76ce2497a60

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\红点压枪.png

MD5 87ecded94dd0505e1d1b745423fc8a7a
SHA1 6dee167be63c76a0f526e246de7e2c9c46a851a9
SHA256 0e2fe73d10a62aa140203dda3b5377fdb708046641502ff5dc86ef5bb7bb71df
SHA512 6e0acc41907eaf6802f66d5ded35f2d4f3af12ae63f9eb5be20344145a022c638a0c03bb156b933e06ab813de8dc799b487020dc2cbcea26e48ac3ebcbc21b00

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\绷带.png

MD5 e675a59468f2457167314b6ae008e7ad
SHA1 c0e7e838d5307d2e0ff53dfd24f8be0e0bdba648
SHA256 07e3cb530503ee0964656666d92b5b78de5dd61fb2f11c634ea90a087ca6d4f8
SHA512 14a19984d92a61331e09ec11820e5fcbee140842f37d71137a170a1fe6f929453ce9784e9f81e0346ae61d7cf17973fa75ccdc5e5d01df0f14981c592556490a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\肾上腺素.png

MD5 0c1b3568b415bd803b5a88f3a921de04
SHA1 5276e9545080904bb18dd6f57415189dd017290d
SHA256 591760caeb7083c5de6a084177bcbb756d29d4d5556c6f0fe64455ea86937a1f
SHA512 5fd97211bb4cb250b319932807e465aca07d6af0fc3b2273a8af68f9c23cd046e9b811de68e27e38c95e14298f642ff4fa674d9d898855c193a58e4d18c5f3a6

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\背包.png

MD5 fc0f9bd73ccea880c5c2a2232de67bde
SHA1 ac83446da2335c71c508fb0f053893b83e2769d1
SHA256 5f3035caa4b849656a3f332e5b000f0c9da8fdcb709e60296db39697ede442bd
SHA512 21c73ad1ac4c5350071fc35fdd751fbfdc94967ab696456bf8e55fbd299d9e5072339f1e8d0c3f16b08f2a63492f2fa0f96c1f8eed997a70e701f3161034d1dd

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\铝热弹.png

MD5 bcef95445925dffa137fba4efa03d8c8
SHA1 b021f770db957d881d2571ee1db8b590e9199e2e
SHA256 8a65538a7a72a36dea10a517e510db67e9d49eaea3a4d864994506df104eec4f
SHA512 6fcd1567247eb7c0498768d8bb75a01797792a290073329b4edf7e4a8bc65cc18eb6085389c0fe551ae2988a646edc76fe597844e444b6cd69cb655c28b2056f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\闪光弹.png

MD5 42037d7f23ff401aa99aab09640cd600
SHA1 ebfdee982e715c9bee0f7e96ca42540c7864711c
SHA256 cdbf88220e1b418b48ae7ec9cae9b17f8f101e5d32d36eba10f9ef479e1419a3
SHA512 127703794236b8b556279aba69410daf80e48c49aa38e470badfa49f4589c267f2248b9cdd0f5da048868e36d4daf78fbc6562097cef5dd75017bb029921c394

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\附近拾取.png

MD5 ac8bdf6ebc96cdc1f750e0bcd1c2791e
SHA1 0a4f8deb781cb31e8a5557ee85d040d64f590e4a
SHA256 38f7ba4ef35e4af8384e2b55cceb6fbefbe0a96cbd10adf81839f604a0a7fb4e
SHA512 2a13074572d2bafb014d08b3336eceafc206e364360615f1329287bb2bed0994ad0870bbf3229fc8c9525985a3aaf61e3c005c89a9f77bc055dfb2c1bd525c0c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\饮料.png

MD5 bf087289efee6e0eef3836c5182152d0
SHA1 3bbd844e8b82981a8441a7e1e02eb5d757a9d4ca
SHA256 3feaf3702e24ba916e45f6e88bf4052ad45bc68b247706bc490b627ce0087f8c
SHA512 7fc993f8d35a89228778b07fdad11682c71942f3c3d698122e7d58ddeae347d909e75e0c7e7bc266608f6afbdeebe97e65b809372955f3aba53e30acd45829c7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\bujixiang.png

MD5 9612e6a6b64370530cfcbc13fe9d2ab7
SHA1 a906f413eeac9a0f2ce39c4da789792aa2d5b1a8
SHA256 4da50c7268509a8ec555f30b13c0658e79b849a58a85a6e292b730a8c7f68658
SHA512 532651fc3e8530feadf73c853a930efdefdf85aac4da191120a76278fe9af87daa178ef66703e56d01d49ec0d5f160192e015d3099b4c76914da6c59bb0ea1d7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\fujin.png

MD5 4ba8e0a1881b8762325cd952dabc7c3a
SHA1 fb4e26f6036deb557ffcc1770c00ad33dffb3770
SHA256 a205bff0a8bc7d14af842f6ffc5dcdc408187ea1f0a5d823986efa2be86618ab
SHA512 f871a6801d352f2093fbc13ec4d613dcc03df132ac845deaf4ad87171aa22ec691e25530c310af03b41e183c554686be6f464bfe5160e9a6c78f5f8f0b3c0e0c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\guanmen.png

MD5 55c2290b87a38b8d3ea0ed75e1328c67
SHA1 6e9f5b41f269a5750ed91c33e4978ec349ecffa9
SHA256 879f1a40750c09efd21013393d5ad83c5aac11d89b098773311b97f280566d9d
SHA512 ad8337eabe66f6deb580ca653944f67131b19d963af503e0638622ea94c9d9665de9afa8111650c63501e1b5ba38768ffa685c236da433af76cbce84e7865d54

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaiche.png

MD5 ae4aa419a16a2bc01b6a1fca61ca3706
SHA1 8b74d0d1f615128474ac7ba22bc4bef12a8970cc
SHA256 58e661bdb95de1ca173b379fa14e4842d852bbce0154ffbe22b353321134652c
SHA512 981ef32e67139025dbb99dbe971c7dd8422371860b4e58c6a548bea3068e559198c90f49b1aba3e1735bba2a6cdf8b9811663677a6bbd350f94d88e239fe94f2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi.png

MD5 a0602c514b4eb1e0558d9370dc167787
SHA1 f6bea5f6eca91f0a355c6aa7f563c9d335114554
SHA256 7f943979d98d9f996a9d98ff40c568e66715bdcf3a340297ce82f073bdeaae76
SHA512 5971e11a067bdbbd02e5066620c70c2734a007caf800c1468ea53e6f4e3c35e0a9a294e37c302d4ee08bd9ecba7e900bd616c66ca80290bb58d34e8d522f53b9

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi2.png

MD5 b1763eaa311d36b33dc934a67795406b
SHA1 1061e36df108e5f6d5dcc7027a877d97f608ec07
SHA256 476e4ef68a52288693e17ab7bd21d1a9e1a5a692d929f2a6d3cc60f5a555b8cc
SHA512 7787062083f76c4847c11ff81a773f5e7ebd38d1390eb450e49c7046c6c713679f711350502c197f7886cb708267f4a0a0680b2f2ce66b44b2fa9797bff0d7de

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaimen.png

MD5 a335c064ebcf8de2f8ed55fb173f204d
SHA1 0517a9cf117a10f0900ca1db20635bb8781e79e6
SHA256 f6a4b418046a3c9f48a65b5f4bc9830ab9fa1f2eea28b3f1b22bc3eb4d0ba72e
SHA512 7b2c5f014f66b0fe17fb87af5c3c141989b3f44cb6ccd711bbe2744f06da4a0e4a3c081019fac05e53ec736c1ac3a3621891555e4ba9e4426c8390388286c484

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\macroSmartKeys.json

MD5 2e3f47d6eb624422c071abb8b5cbc40c
SHA1 6ea4100e28e2049f7c2a2ce229fdcd182becffc9
SHA256 6e6bdfcc04261796c68bf017fde7053cf2b28e8f96d2e78dcf03e80acb19c683
SHA512 238d3886e1476a36479f3676e6da6ea632c804894f1548889cfd1797cc469502afcb81016b0aec97793497aad989a4738948eb4c2ffc226ca7b49820cff473ff

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tanshou.png

MD5 32bd715f3c531c21d6b31313e1f460b2
SHA1 dd47e86d98bfb5ce4e70387ec0bad554ca06d680
SHA256 fe96435887aa8ec15f1ce00a11094ab35293d07de953e0e1ecd4a222ed14ee5f
SHA512 c4ea112db423654ff5ad7e17ddab38e2d8f2ea93d7a0ae4dadfb16e1cdf49130fd5bbd5e675502499100bc5dbbb582ff38a9c2bca3341dfa2a1bf289b41ee760

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tiaosan.png

MD5 902feee77aa255956002c52a19f32c82
SHA1 b0e922329fc89983236c1a1be860f837f14ac806
SHA256 2ffe82b04c4034a7e1e840c7efcb48fee65327193863f554062c46903d10056b
SHA512 61df4efbba584e2e9579845dcc4c454cbbd281cc64d99d4b7a372a5d8f7f061d6c0b47a71ef047ef5233336283a71315dbfa98b4c74cd852953546d3e353f84f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷m.png

MD5 012f41927dca05fc619e365ef5c9d6c6
SHA1 3c6ef1fe350d22c3ff16df7f481f5f1ddbc3aaa6
SHA256 89ae3b207d0eee984919ca9aad7c786539694ca391277ccc105c5c09e8b25e34
SHA512 dfe8e5d7b1eb29dd3b168504b0ad3bf076067df6b54787dd015cb1ec126f347e5bad8ccce62005856656a10b61f6627dc00eadcda0b4f9cc83bad3a8a1d0ac29

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷s.png

MD5 77217e3439c756bc7a59eef3f473174a
SHA1 9f945ce9beffe0612c8b08ece40c58e3e5456399
SHA256 b7fd38ad75146a967c47a8e04ca42e6717ce78d19ff3952d4d080eb994d243ac
SHA512 505ae886d44fa148606e1a9731e1acefdf3370e8d5374c39886ae00c08ece397bdf92333425e37cb995242a9ea1d50c9e4151f97eb158d448dd887a0c855c796

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\展开.png

MD5 c5a86cbdcb964be4c3b31a84d12dd9b1
SHA1 7acc217574dc23c72e79cfc07d57ec16372ea7e6
SHA256 07d805838f320137fa460d368f26fde00b4137043bce61c9dce7e142088a61ff
SHA512 66f84b18811d589c13bd89532d901ea96bb05480f5b2839daf036782631ecd75250182d84a9f5b91081341a5348cd3ec6287138a686866954ef4888decd120b1

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷m.png

MD5 37717c10429db1fc856fb8bf0cc8695e
SHA1 7b62200cb135445744e65c0d5640c348c17cef54
SHA256 206f5cbaa1ffb9fb96f3f22785b94fbbf2c5d0295dc40f6c158f315f7cc9f6cb
SHA512 83f7338cd42b8cc0f47cb4310d7100a9471356b0c9c3e15147099c77106612e0613d7d069d3afa7a44dab4b8c28b7dd46f58b15013822add50e49fa95c322b45

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷s.png

MD5 5aab4c36f08f50e7b21cebd2b9db9ab7
SHA1 efd74a62c84e76d02950132e8b7a08188195fe21
SHA256 015d239c7913aa732f3534e9cde236a22065ea815849cf208aa0441e8d464deb
SHA512 b7f139679fc48a4c866348104dc5b2e757c16887ba0d1173577d2398319d86bdea1d2258b8875500e03266a17fe612288f4da4f5e4938692c3ba8b0d350a77de

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药m.png

MD5 52a83b20afcaf2890b322fc0d2c88da0
SHA1 ea4ba1054a2d01b3641c447afe46398daed47a9a
SHA256 57174292c38578fafaf56916143232cbee0bb2d0713de32bfc44a4538eb3b653
SHA512 b6d9a8430d005d7aa32d7b89306bd51c1d3fc62a6d560402ee8eadb7dda2168464a4d8d7c5247c137d3b9e4af8a768d57dbd69da34fd50d3511b5fe05460342a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药s.png

MD5 425c41c98ada29bca70939d75672a71f
SHA1 c3b830e2a87f2205ad57a99974e313296c35a13e
SHA256 6f51cae51d8f5c36f3ad113ce635efea7b98184fddce56c95d04718df927ce7c
SHA512 e90041c2286a94bb8120578ef68110757285d17b294ea55010931e271e879483becd75e7f6143a744f8f9574923a4d1bc1476f21babc12feb9e8dd7c52649cb8

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹m.png

MD5 d888d038fb2d6d66852d5b513303d02d
SHA1 f1f25159d56ba504c5895011105804b76c90a734
SHA256 83244abe460ec536910c4a68a29f7a1a480005e1dfba7d5d69c7c333061a9cb0
SHA512 b99b68d8cc2ef0186dc1841badeaa0caa3c5b24d2e8f44bde2f43593ccc30f98bb59aace80ebf13b04cca063a7548cfb782a341c0b19737e01ab6ec017cf63b7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹s.png

MD5 7187bf5d48adb6dee248158d6c64bede
SHA1 8a239377c39a2cf6e39d3fb06d9e124a6d24313f
SHA256 465bdb16afe50ab1accbdf3e61e37eb88887543343ececd84d216563a4f42cd8
SHA512 be1cc0de431b4863003d672395ef3036e6f418b41d5141c3269529ca2ffb9418f68e1d509d65d6107f4f593a9f3f13b5a2286fc6d3703a66e3384dcaba96d9fa

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹m.png

MD5 524bd18b4bcc0d4e6708b5e304c93f80
SHA1 c988f80437c3f2ac8670ea1059321f1fc9aff878
SHA256 b9496349b894382d69fb7e0c9a9980e7d329e18bb8505569e8990896824bdf1a
SHA512 5c574350c7d6003139ba650461ad12d33dcb75aea6a21864ddd7a26b159d9c49b4584ffd95ebdad1318676438a668261368e8f75057d60cb419bcbe6c4352129

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹s.png

MD5 b6d0de70fd4b69ef1fffb6b08cee2ef6
SHA1 104e197480a5175b61edd118dbb4b0782df8324d
SHA256 0802a6aa90de755aa8eea132057a4b2cd25680a81ac9fd3ea52b5a9ae0852c33
SHA512 ec51f2477ba550413560b700fdf4d23b11d2cc65d1b1d7cbaae82a593e976a147eb41a88469a9786e8e4f6a98d068692ee2a326bf944ecf933e5a4c61d93c2d1

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包m.png

MD5 d4017e9082ba7fdb6c2ac89b49ff386d
SHA1 ce1c66ef71a0852a3e7b3bdf2eacd7666943c740
SHA256 db4defbf73c0b53d7f100a53acb1a2b89381a42618dd4f4bfb7217fb6d104b2e
SHA512 970b17566ff326c6a418028256117a41fc44b17ae2a76e52862388e9cd81120fd74bd657c5eede2b8c6198fd9d17570adffef63beb2c4381f18a7c256fdd47a3

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包s.png

MD5 91c1a2786c85475994f501501264af55
SHA1 6847cfbe6fa94dc46efb81ea79b426ebfb1683b7
SHA256 f4375350bab5354d1e8af846c31004886c6eaa59db45d78be02cfb4890f14304
SHA512 5945c144b0c9fcb7d9e874cbdbb978e1bb96143c20ea553f25fb412f7cd52945bb98d8454a8efd3134be5a6dd3737db3af96e7baba8633ffd3addf32a395732b

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹m.png

MD5 c16f8923478c7962fb8ec940caf101ac
SHA1 440c5c8675118e503312766f31a7a23e2442c87c
SHA256 fb1bda4536cdb9977a7571dc847e4a6e5e3e1c15f3ece691ad17b2f3872ef1fe
SHA512 0aa84f86bb99a52ab12e6bf2c097a47ec805b8ae83543cbe00bc8da232818b46669a322014db562c28c3b67402e31c22149ad0072fc6cf458fc8ea2be17c8462

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹s.png

MD5 f6bc1f6ab993beaa4848ba820a65fa7d
SHA1 838e738d998bf0faa5b25dc032d2878196ce9b2c
SHA256 a0c6c7a61c5e5538e151dc03ed769ba29ed5312777741b0e13fab4ebe542a9e8
SHA512 fe9fb64cdf3828d86c4e1cf67a59793c47554d2a7ec830ef4153b56e15453e71ff76040fccbe57e3423b0ae97ac283327fc1754d44ec357f05b64f56671bc454

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹m.png

MD5 7ecc76a60fd9b7ba5b6ccbd617cc8bfc
SHA1 1c7510c34be29326a017c6cdc85af52bd1f80c20
SHA256 5b6fd317955b61448866182ed2f6f2a0982d6869bb4861e0794f150a09b7fc38
SHA512 53420eb9dc75b4a6c04c06f415729f018b95c6a88e31c3bac6f9d9116014719773baaa183b6cda95b6a3c1b5d95dc6ad2afe8e6b924a0d6a68a893e1012388dc

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹s.png

MD5 964ee2acfcd999404dae69a093043dae
SHA1 18c0ff09b764bc70fad07068b5cfc791fdf95ccd
SHA256 52ee1de81dc91fa90faca8c91daf8f05fa3520fad29fc5d278b6a096d8359e7e
SHA512 5f2b3925e256447ccd6844864593f530cd1365ef1f7237a06de602c3b9c99f8c002bb9bade99066a4f156b9a5adf997ef95cbe2e94ede9c84da596977c8a2323

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料m.png

MD5 0cb6fe3544d4ba076e68b2a6ebccd0e8
SHA1 8ca85aa7f1c47fa1da4a888f79f870aeaaacd764
SHA256 a4cfa1ccb0789c3b7e944a47bfe3fecec5772465641ccdb29a6ce2295e38f6a7
SHA512 acd48c83397070791d8f5ddb39b23d02d61e788452fa932ba97caf4b16e5c255b95170b434fcaf29a9092622b5ca0bc58a26ebbb4f9577bcdbdb577da7ba6133

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料s.png

MD5 c430e16eabe25e1b003daffebbbb7599
SHA1 6029587e85738ffe4b5adbb4b0c95e29e8ad9f97
SHA256 781fd58a3a2f9020482e2e89513f61c92c928e21f1a25440e342c70bea2a45d2
SHA512 bbab2fa55368af774670335345e4127c28967b80506ac67d844ef77ee0bce1abd3ac096618bae0879bebaba413534898c37a880c0470bf491b53a7a04e39069c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹m.png

MD5 e91fab4c5b6a05698462b41b90c30996
SHA1 6bff3b63298445f11fc8800815147e95cf077568
SHA256 1ec48dc50f70103bfcfab6bfea8b01b6bc49739acfd06afde7c21fd9c2aeb929
SHA512 1d53ccc6ec45643bb81611dc3db3ea27c4716f556ceb14294ed8113a9f4b462fde242566d154863ef57cc1a0bbaa52893bc007fd7b2dd040962bbb76e2502954

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹s.png

MD5 18bdb787173105dd0539cef5f21d6160
SHA1 62718340625aa22759363d7a7d2f4786af20cb68
SHA256 2175edbb9d724dc5657eddf493c66d64c74e9d7bffef8730c419115d01b7a13c
SHA512 f1dd5174a2c02412291fc70cfbd34564e3407a4034a3c863651ca6f11b93feee7cb4c58977615fa2722d433fb8c9e69c11b25f199bce77f97d6bcf42d391cfe0

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影拾取.png

MD5 ddc6d1fc43698d930ae6c934a63cfa21
SHA1 0401cf9a703bea313ea9fa5eb29327debd38ea3d
SHA256 3fea739b86f7a894ba22a273c73d60c7681bdf225e48ea760880058532346caa
SHA512 4ea6429a01e7c8fbd761ff2950a5e3d1b80c965838d2ae0bfced9764fc037002b24c0ac152b8d0a5cb7b9a81d1ec853a6e86663ede114a53d4d47142cd6d95ae

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影鼠标呼出状态.png

MD5 4494db2039df7f4fcd37153e09f7d3ca
SHA1 68d13e756c1a75f9059e0b5a6e611896db97e2de
SHA256 e902212f8ec541ec7dc58ecef581a8ab22e74f147d3b6b309f4dd4568427aa64
SHA512 c4484d86584970242855223b0eac8b44065eb4d63473e4ed8dae3f28adc3ac791005b699d8943a93d7b82c60efd8c5eceeb602d4ddcbf5e22427e5f3ed7ddbe3

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\nsExec.dll

MD5 132e6153717a7f9710dcea4536f364cd
SHA1 e39bc82c7602e6dd0797115c2bd12e872a5fb2ab
SHA256 d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2
SHA512 9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1

memory/5116-1319-0x0000000000A60000-0x0000000000A72000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\nsDialogs.dll

MD5 4ccc4a742d4423f2f0ed744fd9c81f63
SHA1 704f00a1acc327fd879cf75fc90d0b8f927c36bc
SHA256 416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6
SHA512 790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\System.dll

MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

memory/5116-1331-0x0000000000A60000-0x0000000000A72000-memory.dmp

memory/5116-1332-0x0000000000A60000-0x0000000000A72000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\ShellExecAsUser.dll

MD5 552cba3c6c9987e01be178e1ee22d36b
SHA1 4c0ab0127453b0b53aeb27e407859bccb229ea1b
SHA256 1f17e4d5ffe7b2c9a396ee9932ac5198f0c050241e5f9ccd3a56e576613d8a29
SHA512 9bcf47b62ca8ffa578751008cae523d279cdb1699fd916754491899c31ace99f18007ed0e2cbe9902abf132d516259b5fb283379d2fead37c76b19e2e835e95a

C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe

MD5 974a35092d335205bc9edec565f048c7
SHA1 c33757dea3ca515a0c5044713b925f119d74d155
SHA256 f02f9442b30ca0ed870ed8c188f8c97fb2bc8cbe2c76a9f5e9f98ec97fc48af0
SHA512 c3152ee03a24fd828e7c019712633e45b647ffb418428cceb65c2597205dab5009be84aa087854a1f9d514bb1b7e4107a64a2b8709885a2e9482563ab7a886eb

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\modern-wizard.bmp

MD5 1478164ead48ae2de1a24853f216902e
SHA1 25fed508260273397693b970614395e2468d9d4a
SHA256 2aa941ce5b647d31a2b7a40b04856fee8880eee38769ad0c00bb29c5bcd7fdcf
SHA512 c319ac27c1a357e54f5edf2b25a26d9c58d62861915f120e05952374f7f72888131e27b2857281020d94b1ec69e8a47d6a80ca9ce2c009c3652caf4d8c3e0df6

C:\Users\Admin\AppData\Local\Temp\nsr3EA0.tmp\ioSpecial.ini

MD5 e4adb195f4fd4ef24bf4aacb0bd3d6ed
SHA1 2bbda14ad77a01473a088c4c9038ac678aff9934
SHA256 421b2532299c87d7b67307c1e9e5be569bac44cc64e60ccc722b90bc0c178540
SHA512 479e0d431c33d16f09938f76481c5565bb06eacbf04e3a73f42a35831dce455e67e969ea007eff6666e1c77065af37e85363e355f811898801c31bed17eeea5f

memory/1612-1376-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/1612-1377-0x00000000004F0000-0x0000000001554000-memory.dmp

memory/1612-1378-0x0000000006000000-0x0000000006010000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\HandyControl.dll

MD5 87f004b5d0f83e1fd2799b2a7479b581
SHA1 60394c3ded521a311bd10b99381f5c46816effe7
SHA256 a661b60f9b2fc0401b74452ab48970763735d28bd4e4145df00302d27884b849
SHA512 0869e6a92f4dbc018a28d1ef1fc78863254ef980a084cebe5779175c2fd0fe8f5afaa3b6dda2a364b7c50c9fb221962702e1ee931a02b9807725b62492060037

memory/1612-1382-0x00000000061A0000-0x0000000006322000-memory.dmp

memory/1612-1386-0x0000000005FC0000-0x0000000005FC8000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\en\HandyControl.resources.dll

MD5 c1d0e0997828c9a8eea0011e2035dce4
SHA1 dcd271dacb785aaaf0f88581672f53357abd1c75
SHA256 7687d01a7945b54579a1579b6b329d847f5ccacbad1a8607d778f8a24366708b
SHA512 5cf64ac54eec736d0ae038ee41cac88705b5e9f1db45f7a7c3ab1cc93d35c9c4f9f7157fece0b24ffb78f5ab28ce22ddea0ef7d4ccd432de3dd2a379a06fcf4f

memory/1612-1387-0x00000000066C0000-0x0000000006752000-memory.dmp

memory/1612-1388-0x0000000006D10000-0x00000000072B4000-memory.dmp

memory/1612-1392-0x0000000006B00000-0x0000000006B28000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.dll

MD5 35b1b9f1538cbdab039f4a79826041fe
SHA1 579e87e72fe76e62089631bf8a01dfbab2af5226
SHA256 5c2f34412502f6c5a5aa9226b71f4809aa73bf90f46c79faeb97172955178b26
SHA512 006bf743a27d7d0cb5038483fbc4c98f293f9815f58c92ff29dd4dcebb8931079c49c393de6f805041d8200af8791473cfa398bc603f3055bbf45c32a1eb48d0

memory/1612-1396-0x00000000066A0000-0x00000000066AE000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.Sinks.File.dll

MD5 c25357a7950dcfc7f85ee9d593cb1a24
SHA1 6a533712852465ab3c11b5c76004312d6482f07f
SHA256 5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
SHA512 30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6

C:\Program Files (x86)\Sigma-RT\TC Games\Log.dll

MD5 4608946e266df13fa3b26471b1df4771
SHA1 82fffed60aa2045da3a5e6a2766e39e8ab78e665
SHA256 56b908b8fc74e9582eb403d8f6fc0ffee1541ec522e32fcbff3e8460dd2e2b6c
SHA512 6959164e096566241a0315542e6bf0c98d3b7d7ebe3b8fdcbf47053646a0d16fa4bdeaf4453b7fffe798e988842a9f9d3c1131d0a65631478e1426361ff34f80

C:\Program Files (x86)\Sigma-RT\TC Games\resource\settings.properties

MD5 35693532e8aa7a4e416e31ec3aa98206
SHA1 d5fc2dc19282b90256b31a6dca7a0da35e7219c8
SHA256 9da07cf112cfd1d20bd4baf7127dba47644520cdaa54d07e10c8b5f0dc894993
SHA512 54a4cfadce4fe8b71ce51d1ba2b3dd1c0d6fa66d18bd181d24658413e944105ae9d4ef3cc577d77aef0c8a3cb95ec0b8377e759328a04333734301577b9b39c2

memory/1612-1405-0x0000000006C90000-0x0000000006CAC000-memory.dmp

memory/1612-1410-0x0000000007480000-0x0000000007532000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\Newtonsoft.Json.dll

MD5 715a1fbee4665e99e859eda667fe8034
SHA1 e13c6e4210043c4976dcdc447ea2b32854f70cc6
SHA256 c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e
SHA512 bf9744ccb20f8205b2de39dbe79d34497b4d5c19b353d0f95e87ea7ef7fa1784aea87e10efcef11e4c90451eaa47a379204eb0533aa3018e378dd3511ce0e8ad

C:\Program Files (x86)\Sigma-RT\TC Games\bin\MP4Recorder.exe

MD5 a80cd22a8ee5b2834bc46684c09d74cf
SHA1 cfb9f0738d1f77a6b9bdfa4765c55f9bd24b9cfe
SHA256 5570ff24dd70a0bc3df34abe84b4ae375166ceaf2c716dd9b2a239a22558610d
SHA512 13295bd0ffbd516d71a752dfe64de9ede4a4d5db692b082090182360635e84ab4232e52edb3f61e205098ec949f04a25ef69199d80cd0a10f72b3d35e59119f6

C:\Program Files (x86)\Sigma-RT\TC Games\mftavcenc.dll

MD5 ea2cc538a116d46335708917b2d14811
SHA1 5eb33d41d82a5f559c77321a10c881e84255762f
SHA256 f824bef7be2a2a9f372f169d662c4b17f4d404361939c131ada007c46cd121ff
SHA512 9648357c20117600c20b2180582a4a36a82ae21fb01aec8605ec7d063b4b039f78c5f47c9d5e95ef8c9854b0516ea799586159d13d481568bb36e5844dcdbaba

memory/1612-1428-0x0000000007640000-0x00000000076A6000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\audioenc.dll

MD5 e8d15c33c9ac2665ede16d660e893694
SHA1 9e6f40f5d386c6c0ce9bbd37ec4846fcb19edd77
SHA256 26a2ccb3f9b98b8be7b11f2637fed46d2bb194e6dbf69359e312a20b1d790ae4
SHA512 82f159c577ff9e88c05a59d4fac6ff011e1205212a73ee63064d00dd6dd72ad4b1babcbf355a1456471b4e6fbfe963885d0ffc120e8c692d861597546b70f246

C:\Program Files (x86)\Sigma-RT\TC Games\libmp4v2.dll

MD5 7bf0f757a3949fbf8d1fd0131f5669e7
SHA1 7d5c4936c3c22134e859319e53bbfee611a5f76d
SHA256 a50a2b9d4494701bcdaef5de9d3ebcee09bad25fe02729bfc7d52767b2ffae9e
SHA512 33601e145f1e82fb73ee60298b8b1b842f010156fd5c6cedb50f4bc0cd9ef452ce154babe909ba8b263f1dcd7e50a62e2a5a0e98ebab5bacc3f5c6a42d1dc8e6

C:\Program Files (x86)\Sigma-RT\TC Games\swscale-3.dll

MD5 6468a341fd040eff5549156e00b1aedd
SHA1 d89822f46eb04454a10e5a668d9328bdc0021cc3
SHA256 fc8b75523e9c780746ad663e0c4219ecacf5ae5eabfa3ccc78bae646507f3314
SHA512 48612822ca3647aeba56f6b3bd665fecd21dd763c7f43d6ea8563f44023d3ea14ebf2af864f8887e5a723e0446c7ce02abab7b1b28ab7caec74e1abfe0511db4

C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll

MD5 3dc504c6bbc2dc7a80027bece4e447d0
SHA1 b61ae8e190b6c6f5f568a5ad2110fab7b51984aa
SHA256 36203d5c57e4994014d343672f428aa466057e8eb103ca0b8861632c16750222
SHA512 a04d639303f021974d6ed24d95526a32be2e4efb7a8cc9fec461c2b43feb85ac9c568518b3b28c0a08ef0d731cae94804f717630fe1ba0603ec2439b22c987a7

memory/1612-1429-0x0000000006000000-0x0000000006010000-memory.dmp

memory/1612-1430-0x000000000A550000-0x000000000A588000-memory.dmp

memory/1612-1431-0x000000000A540000-0x000000000A54E000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\D3DCOMPILER_47.dll

MD5 02e034cd47aa9a633f6aaef348dbbba0
SHA1 424682cf2f3878c0195f0f4cd250856a0ef871b8
SHA256 ff86503cdb204570491a81bd45fd9812652ba20a1bbbaf2533b7203fc4469854
SHA512 0ffb5efaef0780be68633957a40e27c76625a6558a14d0671c85ac3cf8810f3c1e79f3281084dc05034b69447e999c420c1d248503001454c62d0eff320fd6e1

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.Core.dll

MD5 845c69ab0fd5343da1373f0da752e824
SHA1 36929d46712b130b1418cb37ee8c2d965986b66b
SHA256 9c8d48426578325c00eeee2c1c9b6d5bf31c21ead592252b5f5842d675f22a66
SHA512 7b0e0199b0f7144577729f190e695191045e80e6f1e5809b782081329c28a774bbc69508344d04e7c682b894c969c357ce7c87f6ed8855371c47b23711c0481a

memory/1612-1439-0x000000000A930000-0x000000000AA30000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\msvcp120.dll

MD5 fd5cabbe52272bd76007b68186ebaf00
SHA1 efd1e306c1092c17f6944cc6bf9a1bfad4d14613
SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
SHA512 1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5

memory/1612-1443-0x000000000AA60000-0x000000000AA8C000-memory.dmp

memory/1612-1446-0x000000000DE20000-0x000000000DEDA000-memory.dmp

memory/1612-1447-0x000000000DD80000-0x000000000DD90000-memory.dmp

memory/1612-1448-0x000000000DE00000-0x000000000DE0A000-memory.dmp

memory/1612-1449-0x0000000006000000-0x0000000006010000-memory.dmp

memory/1612-1454-0x000000000E7D0000-0x000000000E7D8000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\tc_games.log

MD5 75e4e3847b3debdd7072dd20b7d71fe6
SHA1 b0fce8d34e64adb58663e31b62b0cccd8c0f68db
SHA256 c7b71dc0db64d0c255f8ef48db4ad9d1489477093a38ff673302c548b43cb6d2
SHA512 3483d17c222e591a1b6246e3795e9cde01852c2358cd455bdb32e2f0b5f7ff783480bb87fa43a0eed963f50a0780f978ff6b89cc6ab3375e3d7ee3d7af6ec3f3

memory/1612-1492-0x000000000E840000-0x000000000E862000-memory.dmp

memory/1612-1493-0x000000000E8A0000-0x000000000EBF4000-memory.dmp

memory/1612-1499-0x000000000ECA0000-0x000000000ECD4000-memory.dmp

memory/1612-1735-0x000000000ED10000-0x000000000ED34000-memory.dmp

memory/1612-1741-0x000000000F460000-0x000000000F46C000-memory.dmp

memory/1612-1747-0x000000000FCC0000-0x00000000101EC000-memory.dmp

memory/1612-1749-0x000000000FC90000-0x000000000FC98000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\cast_setting.ini

MD5 664474bb332eba0448f233b48868aaa6
SHA1 966a9ece2724937ae0f9f0719870898a55c3892c
SHA256 871c4d0f71d5c20d1c6c419db31a6ed6433222a8f53e26b6ef9a4382ac039c9b
SHA512 e0028cd563db7ebc4f864fa67dcbc970ac1ea29ca1a6ae947fff27e6aa57c5fbc294406d1d33e615c025401f7d7c62e0eb808ddb54adf7eec96d732c59d0838e

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

MD5 d72cdc236c4ccfc07cd2f062b3300f8e
SHA1 148c954524474489a90c1bae38f602ed91ab966c
SHA256 bb2fb6814a5a6cab8f57ecbfaf73b61c0b3310bc9845ae14147f5c24af651ee4
SHA512 925a27c86cc0c6b19a023155c22c59049e261dd4a48bd5ee7d938b38aec0b1f03d509aaa7f7856f5d132dc70a47a6319b5e2d3ce1a7c0309c99342eb364be6c2

memory/1612-1781-0x0000000010430000-0x0000000010500000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\flag\information.properties

MD5 0552d4ed43f7f7245c26dab0032a4845
SHA1 f9696527094f91a324c9136e4fe980f84ce12d67
SHA256 5e9c1b725112194cffd05c5f931cb864308ead874f22b3ce45246c92b8508deb
SHA512 7cb61089743ff9682c0dd780dfa89f564b6e14f249f2d4c2f759da368ee893f5d57514c9ca771fbdb9ddfbd1b7e0002557b8dabeb85aa050ff0754a7ad2e270e

memory/1612-1814-0x0000000013460000-0x00000000135BA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\help\html_international.cfg

MD5 45fa5a4110cc3febd35b997a26346cb4
SHA1 c8e8f712acdb0f088f6b87d58c550dd331681cfb
SHA256 0c33a008e7b99b7e45c5d96c8b2ebb484ca372540ed9b896e47ca26881551eb5
SHA512 a4fe820b8ebebf6935ba04da0805b7453ed2ec63b01643381bcd3c3dd664ac48f92eaf4e7e152e7f63e33cb9c78756fe6abdc9c872f3e68306e1cee8ab32446b

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

MD5 5e714936a7137ee3aa0def4487ceb646
SHA1 2500318fa670d82f6712baf859e7bbe001a6d13a
SHA256 b567254c7ef8c09eb1f7703a3f487db3ed94e54186b6882710f332d345df0c86
SHA512 284f2fc80bde3ae0e2b95feb4582296a166b3414588372bf38c4c6f9b7ea6ebb836998d34163a74399c5c944f2824e340037ed59b293e9ef740d2893e5289980

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\DeviceManager.log

MD5 68308465dcc1b9855fee711ef78a8931
SHA1 281481a0694ea283e25b2c021db25ff145452cba
SHA256 ffa3e389a0048829c657d079e4cf45029eed4c917bf22222c2607d8d56164396
SHA512 bac130990a7796eff5c9d0589f5f71de1ea8a57b6dba916a4a407ad3d0aea02e0d256ee52ef6f3b416325b713e5bbd0388f40a9cd655e7c43c851e245c1c068c

memory/1612-1834-0x0000000015480000-0x0000000015A98000-memory.dmp

memory/1612-1833-0x0000000010240000-0x000000001031A000-memory.dmp

memory/1612-1892-0x00000000153C0000-0x00000000153D2000-memory.dmp

memory/1612-1915-0x00000000151F0000-0x000000001522C000-memory.dmp

memory/1612-1916-0x000000000E080000-0x000000000E0CC000-memory.dmp

memory/1612-1919-0x000000000E2B0000-0x000000000E3BA000-memory.dmp

memory/440-1924-0x0000000005670000-0x000000000571C000-memory.dmp

memory/4644-1925-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/4644-1923-0x0000000000130000-0x0000000000138000-memory.dmp

memory/440-1926-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/440-1928-0x000000001B100000-0x000000001B101000-memory.dmp

memory/4644-1927-0x0000000004AF0000-0x0000000004B00000-memory.dmp

memory/4644-1930-0x000000000FE00000-0x000000000FE01000-memory.dmp

memory/440-1931-0x0000000005900000-0x0000000005910000-memory.dmp

memory/2856-1929-0x0000000002E30000-0x0000000002E40000-memory.dmp

memory/944-2033-0x0000000038700000-0x0000000038701000-memory.dmp

memory/2552-2034-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/1612-2032-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/2552-2031-0x000000000EE00000-0x000000000EE01000-memory.dmp

memory/2552-2037-0x00000000052D0000-0x00000000052E0000-memory.dmp

memory/944-2036-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/1612-2038-0x0000000006000000-0x0000000006010000-memory.dmp

memory/1612-2043-0x0000000006000000-0x0000000006010000-memory.dmp

memory/1612-2045-0x0000000006000000-0x0000000006010000-memory.dmp

memory/440-2046-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/4644-2047-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/2856-2049-0x0000000002E30000-0x0000000002E40000-memory.dmp

memory/4644-2048-0x0000000004AF0000-0x0000000004B00000-memory.dmp

memory/440-2052-0x0000000005900000-0x0000000005910000-memory.dmp

memory/3416-2053-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/2552-2054-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/944-2055-0x0000000073740000-0x0000000073EF0000-memory.dmp

memory/2552-2056-0x00000000052D0000-0x00000000052E0000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-03-28 21:40

Reported

2024-03-28 21:53

Platform

win11-20240221-en

Max time kernel

300s

Max time network

296s

Command Line

"C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe"

Signatures

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\v_ru.txt C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\地雷s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\烟雾弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\小鸡雷.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\HandyControl.xml C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-sysinfo-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libsf_r24.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\locales\id.pak C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\止痛药.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1113\闪光弹.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\没有开镜.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\SCARL.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\driver\amd64\winusbcoinstaller2.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\背包.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\附近拾取.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\ACVAL.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\2倍压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\av_mixer_resp.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\倍镜缩放展开.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\MIGUAN.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\tiaosan.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-profile-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\shot\1shot.properties C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\license\c#\OpenCvSharp-BSD-LICENSE.txt C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1440\眩晕弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwenc_r18.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\原皮手雷.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\地图.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\烟雾弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\Microsoft.VisualStudio.Interop.xml C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\locales\vi.pak C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\烟雾弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-core-util-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\止痛药.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图缩放.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\医疗箱.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1113\手雷m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.Core.xml C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\Esprima.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\ipChangeMonitor.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1080\tiaosan.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\手雷m.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1600\地雷s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ms\control_1 C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\止痛药.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1200\闪光弹s.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\CommonServiceLocator.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.Sinks.File.xml C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1600\YENIU.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\倍镜缩放展开.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\macroSmartKeys.json C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\MIGUAN.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1200\M249.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1224\全息压枪.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\adb\api-ms-win-crt-conio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\mobileserver C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\license\apk\JTransforms-BSD 2-Clause LICENSE.txt C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\html_international.cfg C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\apk\assets\ma\arm\libhwenc.so C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\license\c#\CefSharp-BSD-LICENSE.txt C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
File created C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1080\ACVAL.png C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
N/A N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Driver C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000 C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Driver C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\MuiCache C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1940 wrote to memory of 3328 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3328 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3328 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 380 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 380 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 380 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1196 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1196 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1196 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3168 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3168 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3168 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4600 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4600 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4600 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1832 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1832 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1832 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2800 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2800 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2800 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4948 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4948 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4948 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1704 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1704 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1704 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 852 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 852 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 852 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1936 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1936 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 1936 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2788 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4324 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4324 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4324 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 640 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4992 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4992 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4992 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 4404 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3944 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3944 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 3944 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 460 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 460 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 460 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\netsh.exe
PID 1940 wrote to memory of 956 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 1940 wrote to memory of 956 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 1940 wrote to memory of 956 N/A C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe C:\Windows\SysWOW64\REG.exe
PID 3500 wrote to memory of 3196 N/A C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe C:\Windows\SysWOW64\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe

"C:\Users\Admin\AppData\Local\Temp\TC_Games_Global_3_0_Update_3111991_a4446e8706f52c490609c09e4d374a4a.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-32-platform-23-0-1.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-32-platform-23-0-1.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-32-platform-23-0-1.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-40-platform-28-0-2.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-40-platform-28-0-2.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-40-platform-28-0-2.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="adb-1-0-41-platform-29-0-6.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="adb-1-0-41-platform-29-0-6.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="appt.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="appt.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\appt.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaCheckUpdate.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaCheckUpdate.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaCopyFilesHelper.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaCopyFilesHelper.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaCopyFilesHelper.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="SigmaInstaller.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="SigmaInstaller.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\SigmaInstaller.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="UsbSharedNetworkConfig.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="UsbSharedNetworkConfig.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\bin\UsbSharedNetworkConfig.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="CefSharp.BrowserSubprocess.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="CefSharp.BrowserSubprocess.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall show rule name="TC Games.exe"

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall firewall add rule name="TC Games.exe" dir=in action=allow program="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" description="C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe"

C:\Windows\SysWOW64\REG.exe

REG ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /V "C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" /T REG_SZ /D "~ HIGHDPIAWARE" /F

C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe" 0

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer

C:\Windows\SysWOW64\cmd.exe

"cmd.exe"

C:\Windows\SysWOW64\reg.exe

reg QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe

"C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe" -i resource\product_info_tg.txt -p 17 -c -a "C:\Program Files (x86)\Sigma-RT\TC Games"

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" kill-server

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.0.1387999183\1976177932" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.1.225048369\1540292542" /prefetch:1 --wcf-enabled

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\bin\SigmaCheckUpdate.exe

SigmaCheckUpdate.exe -p 17 -a "C:\Program Files (x86)\Sigma-RT\TC Games" -i "resource\product_info_tg.txt"

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" start-server

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

adb -L tcp:5037 fork-server server --reply-fd 628

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices

C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe

"C:\Program Files (x86)\Sigma-RT\TC Games\adb\adb-1-0-41-platform-29-0-6.exe" devices

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.2.2031127216\887576801" /prefetch:1 --wcf-enabled

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable --enable-system-flash=1 --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="3500.3.722718344\2023577583" /prefetch:1 --wcf-enabled

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.BrowserSubprocess.exe

CefSharp.BrowserSubprocess.exe --type=utility --channel="3500.4.1798131355\1453559432" --lang=en-US --no-sandbox --no-sandbox --lang=en-US --log-file="C:\Program Files (x86)\Sigma-RT\TC Games\debug.log" --log-severity=disable /prefetch:8 --wcf-enabled

Network

Country Destination Domain Proto
US 52.111.229.48:443 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 8.8.8.8:53 download1.sigma-rt.com udp
US 45.76.6.180:80 download1.sigma-rt.com tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
CN 211.149.152.155:80 download.sigma-rt.com.cn tcp
CN 211.149.152.155:80 download.sigma-rt.com.cn tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
US 45.76.6.180:1030 download1.sigma-rt.com tcp
N/A 224.0.0.251:5353 udp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
N/A 127.0.0.1:51657 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:51706 tcp
N/A 127.0.0.1:5037 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
N/A 127.0.0.1:51722 tcp
N/A 127.0.0.1:51724 tcp
N/A 127.0.0.1:5354 tcp
N/A 127.0.0.1:5555 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
BE 142.251.173.156:443 stats.g.doubleclick.net tcp
GB 142.250.200.4:443 www.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 156.173.251.142.in-addr.arpa udp
N/A 127.0.0.1:51760 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:51794 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5037 tcp
N/A 127.0.0.1:5557 tcp
US 54.88.18.3:443 global.tcgames.com.cn tcp
N/A 127.0.0.1:5559 tcp
N/A 127.0.0.1:5561 tcp
N/A 127.0.0.1:5563 tcp
N/A 127.0.0.1:5565 tcp
N/A 127.0.0.1:5567 tcp
N/A 127.0.0.1:5569 tcp
N/A 127.0.0.1:5571 tcp
N/A 127.0.0.1:5573 tcp
N/A 127.0.0.1:5575 tcp
N/A 127.0.0.1:5577 tcp
N/A 127.0.0.1:5579 tcp
N/A 127.0.0.1:5581 tcp
N/A 127.0.0.1:5583 tcp
N/A 127.0.0.1:5585 tcp

Files

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\version.dll

MD5 fbe588b15eb1bd86defade69f796b56f
SHA1 2f63cf44039addddb22c2c0497673b49e6b3ad7a
SHA256 31144e8b156fe87317073c48a09abcb033fda8dbdd96986c4abea8c00c00355f
SHA512 e1a9e29e4c62e77a2ec2c539344f0b5a8cd67ca3fd8dfefb0b0666a992eb2fabadb0034d439c4adbbdffd9c9439f23ee5757fac0ed669d3c9db48f50c677143d

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\LangDLL.dll

MD5 a1cd3f159ef78d9ace162f067b544fd9
SHA1 72671fdf4bfeeb99b392685bf01081b4a0b3ae66
SHA256 47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6
SHA512 ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362

memory/1940-11-0x0000000002530000-0x0000000002542000-memory.dmp

memory/1940-13-0x0000000002530000-0x0000000002542000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ioSpecial.ini

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\InstallOptions.dll

MD5 89351a0a6a89519c86c5531e20dab9ea
SHA1 9e801aaaae9e70d8f7fc52f6f12cedc55e4c8a00
SHA256 f530069ef87a1c163c4fd63a3d5b053420ce3d7a98739c70211b4a99f90d6277
SHA512 13168fa828b581383e5f64d3b54be357e98d2eb9362b45685e7426ffc2f0696ab432cc8a3f374ce8abd03c096f1662d954877afa886fc4aa74709e6044b75c08

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ioSpecial.ini

MD5 cda7227efadf48d49c8555fa9de0b83a
SHA1 2093d0070c005ccb8627fe9ebd9f64e7fc512c58
SHA256 00fc6d759974c7787e3a3d544109c28c0ee1ddf82fdae310f99657f903d21552
SHA512 f55c29e9de1cbdec74e0a10b75c63b25a3a25f69df3721abd12f0131225d7450c1c983e933399f13d1476713407216b43056a096231ea92d306e2a8ba13d1857

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ioSpecial.ini

MD5 642543c709c82bde046cb578a20dcfe7
SHA1 91c443105b9eefe2184098fdd52228e373138dc7
SHA256 564a35b965388e202be83348524405f28eacc17bcceef4b07ceecf53da60b407
SHA512 6d21f8465a1793300a8da1124adaffebb276ee18252c7753ca3a8283784139d05b12ef545f0fb17be83559b36f1e98b638090507a083dd8f9c4efa04c83346f8

memory/1940-170-0x0000000002530000-0x0000000002542000-memory.dmp

memory/1940-171-0x0000000002530000-0x0000000002542000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\AK.png

MD5 52ef202920c67ff0b2f6d6dc305a9519
SHA1 9792f0bf1313a2e8334349067c77ffe8b8ec4400
SHA256 b5e4c48be78262eca23f9abf67ce2faa3b176124e8190184e7140568783b9e4b
SHA512 f206abf86db6c4bf07527922be8c7c8e691509b7729ec91d5ef2111c98f3630952025f63b6a0d5f087a9d68625755139bb4d5853aa09f7d9068274e247efcaad

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1176\倍镜缩放.png

MD5 9d2524fef0804e38b120d80daab1a2f7
SHA1 e29e41b2b5fc9620e02731ca80d84e21256c9af1
SHA256 3abb8895531e3297aa5858d3ca0c43c5a8cd9a77e883f59dac2876ced51dd714
SHA512 76952223780b3500fbcaca4b8430127f2e9d398401de5b6bce9af0bc673efc54db1e8bbb32f2930592c2edb5264d2ed2503b844bf9c30e97cbceedefd4473cbf

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\2倍压枪.png

MD5 60d18e9c3bb1828c85678e3484e20b12
SHA1 a60d17b5bfef79741d6acc1323eda532fa3fd4af
SHA256 1ee6c2ac69bc0e357878a439c3bcaf4f02da936558c9a1c4082d128e17864d0c
SHA512 b34cd0a3e833e54e2eea212df3943e7fb3c94122ee0ad704494a8958f45cc1b25c86996ac10f29e44e3e8e4190fa209d2c8ab86f44f2c0ccba6ddc27c3fbc01d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\3倍压枪.png

MD5 05e54d5da60fcc1dfa8d4e1a050b0e28
SHA1 c25fad4eebefb0d700870ee7e056c7b693a84686
SHA256 6a05be76773393649ad3593d37a27fa0c784316a1f1de43dbedf7ea31a5439ff
SHA512 75327a2ac40bb141585e403466ffc028f778e593d8e053015ff28ad9259ac37c670b2d59e7760a644ef879c385988491a76fe62eda4305d09c2600f2f1ba66db

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\4倍压枪.png

MD5 8c2659ccd761207e1d6c9708f525c616
SHA1 1b581c60ba177511718a3849663098ca9da9e42d
SHA256 eee12a18083f77766ae53aae94ee31ac640f2788a65c12fc338757351a0c1389
SHA512 3591585405216c4853b43cb63295a5f5a33412b3547ea83c4f9fa82e4f82c42d16c6e1639a964ebd594252ba213ad785ae6065981d9d006b918f361ef2e38bc2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6倍压枪.png

MD5 472aa23694c86e229dff7df759ec2cb8
SHA1 9b089843db6db1aabb9d768e2f83ae888db9f935
SHA256 6a569d3ac2f1d1c206ab5a68cf6ce123fdc7d82973047ee6a12fc2cb04be6a5d
SHA512 7121296027bce41baefecf23d22294970ee81bfef601ebb1defccc8810e84c331f51462436e58e60cde90624a3c18c1ac5fd7c457d92c7b6b61ce9219f39c5b5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\6宫格.png

MD5 1e8e967df04f5564d3c8a691ef252c52
SHA1 3ac702742e80bc1e5e3447203108314809b6071e
SHA256 a036099e0c142b54fa3c24937c3aaca43a81186add236cd3794aa9f1fc08f6f8
SHA512 2f04e85d4b9b4c60756401d127133cb2431f73da62aab799e651ce3b7f44ac6ff6500b5e60b1f6d6c042477799e697ff302bfd724253712eda5ab67c04b68d31

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\9宫格.png

MD5 879a133237f9d1f1ee21ab72ea6a0caa
SHA1 46d0dbd7f9b8f59b16d43c2dc61b34f095f7dc11
SHA256 046f3ee9284efc73857e6293f53e6bb78801d5c173b2603805b0f905fe958f3d
SHA512 49067cf9e8e1d303b3f898f7fb98338b9b2e9fa338fabd2b4db3a7538ed803c781340857d9264ed1090e4070c00ce91f83fe9bcb4a1ffa9ebaff275080daa24a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\ACVAL.png

MD5 3205ef7df426da65747f2497bf0030d9
SHA1 da2ee5d69a27a9f2b6d417a626d3fe4a4f6052da
SHA256 dc33925a430a78fb7d32246394049a3f63c94f5813072e4971fa07d913a8bbd3
SHA512 caa42d00edfb86693075d130a017592976b43b4b7b508c1c127575514fa2ba16cd4897cc7fab7d33a41fdb0971ef195af5844f2143a23b0cb3c0e6e0cab06535

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\AUG.png

MD5 100c5dd1e0b424ef4ba09c915e3c3f3e
SHA1 7d361e89e4bcaa338c760a086cc4c6cf84699a5e
SHA256 956f5ea5f56eb5ee97bfa19868865f2ddc3e8f62bf3e16015134cb6d6aea93eb
SHA512 db94369be1a1b2b7d2852d16abf2e089a81dcdb77cbf2997f1ad7aa3acf84161abfb97d48b2849b13c05a5325cefcc596197ce705bb8a34b4070421bb4829ec6

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\DP28.png

MD5 bec329b876be4dfa0b89debba20c1cd3
SHA1 77a00baf618d2609aae49702534d9f77395fbb0e
SHA256 9e98b0d8c3b9549c09c6b998d3dbe187b8a8d14620caa11dfe60464ebde0d009
SHA512 e475a70a50e01edbc11f6eb4a672c5aa19a91fc2b4448f175f1519e2e528287884544d8ae780b4ff5d9324f4a2c672856a73a3fcd3d347282119aec90307f096

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\G36C.png

MD5 218335ea42cb76a8b180a093a44c3770
SHA1 a7c00937d9859d6ac7d7cf75afe9ec95142a4863
SHA256 e5fcbbaeac6fb9a5728263ae3626f6043be84ecf485177f999170d115feb6b48
SHA512 7f83966e9c8784da03a8549da2cfde539b75cb9b7da72f4365fa5512d89658b8f318c2e721c04836b41a8d81be1c02f8d70af7593c76da200aa4ad7c7e81dcdd

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GOZA.png

MD5 213dd409d708706f7d4122ffd79a992a
SHA1 30d60a7f8acea422906a56e01b0338180fae1073
SHA256 8b334c14848b0e82817fc8c717d697ee1492b3745cadf2b09e6eecca32b78b53
SHA512 09cf3129c45c1cc4ee06c478c5061273130109830a2d667b019156eb661b2c7ac5d592677cf6ccf3932eed00262f7940d4e3f805fec58b19621ed857bd8203b7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\GROZA.png

MD5 5c6f2c81c78cdfc21b444db4c0bcad98
SHA1 57ca6502b781c54ff83885eeab24f17fbdc82232
SHA256 3b73b38b6a0019f592aa792c7f36ef97e236e99e1ba9bd6b79958daa259f7907
SHA512 3ddfdeb08c7089a54407bb47e67edd74d695b6778eca3f9b69c02e7f7e8cb6ff00229bd3e38ea43480eeb5685da381f12d2d769c76656c76a40f6da7c3ff1b38

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M249.png

MD5 1ec9c89c1f04f320889bf1f965555742
SHA1 2029c7386f4d11b2516e4c08f1e6cb7ef0f2c280
SHA256 1b51a70d43564131eaf615d03fd284a83f119fdc8731d426fd19a5a9931ae0aa
SHA512 d4a4f79870c512a15ae78a2fa6f3bbe5e5912e92b97af2c4061901e91f22b500a2b727ef348096fcb1cb47ceac16191542b352d159cac56ded34a4def19d4b77

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M4.png

MD5 b38435cf7a2608c12a82ee25ca7b4c9b
SHA1 3e9ac2db6e6a44f22e6f2e88dc845b88cc0079c3
SHA256 7125f9b67c9504c2bd3bdbaa32a146e7d4c8208091af6ef18c2164cf98fc85e2
SHA512 ee491dcecb849e957e5d76852ec935eb09d9c8b62c9e23aff81beae29609eb2f0e3cde71176b112e538b7d1006180e9e867ad85f9f26553deb2522cf9d2d4167

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\M762.png

MD5 f29cf31eb72ae02abcd7e8d31ec34be5
SHA1 66c327d391d9436e23c8a184a7cb8c9b84907cae
SHA256 eaefab7c0021780d344d620f0c8e1b87fe80a96622e108c64f14b86be0809b7a
SHA512 333a0a06fb1e35a7e65f4916c77cb1bf4a65fc5f90caeb74c83a92e47f688aa6ef124e2366d63adecdef2ed0a6bc0dd5f9de70a460e4bb35ed18a0fa8cbc5d47

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MG3.png

MD5 ca6fffe08f640e7ffa79684cfd7a6dcf
SHA1 c858e5a8c908e430fee3ea7b068bc07702e317fc
SHA256 f0fb4e7e6393a20d6926b62a60ec46152d5b546f6dab74abcbe5987c27a661bc
SHA512 b7f76b18ba75e520672157be1830fe3540cb164b5000cc379e185c5620cc2b9417e50d624ea465a3787513987a1abed5d243262b88103768b013a5b5a7626ef4

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MIGUAN.png

MD5 424a18778df3b70ebf0454ff35f3c2ce
SHA1 96a904b6d7b482e9f12be99770d801eb9ebb3bb0
SHA256 564d8c9842d932f99e03e877ba539da2dde8e4301a6801259716fdffa28bc4a4
SHA512 706bb2c2e7aab3a0c233263deb1273d83ae61850e6ac9d82bb808695be23df4adc5d9298078363034f3aab83fe2d009e3856e61ec2ffc30abf2359b422cffc22

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\MP5K.png

MD5 0d72c31adbfa39b69d7656df18c12e17
SHA1 76160c04283b271c87f4b38bb7cf5724f8b44a8a
SHA256 682551dd490451bbf44e4ba732d0b2a8a59397711cdbcfb6880874d0145de6b2
SHA512 75678ce27a35225e96dd53faf530566e51796c7805adc431de96478d12559583b3958ad2825560e7069d32dbd88efe7c029c3c79a02ac0b33c9012ab1e93a208

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\P90.png

MD5 cd9411a883d59aaf442108c886d67340
SHA1 a5b437aba9c9b977a3121f28cc40a85014f3f5bc
SHA256 47751d9834685c4572d69cd2e2dc1108b85ae5951ab885014d3cc1c7bf580048
SHA512 b3ab260bfe2e82af195d6f6d4a91b91169baa47c3b62bc00b8b6ad2dd47ad2bb6fbfbf818e7ab288d790f5976c15a84aa716799c63de7d36ce579833218f6c36

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\QBZ.png

MD5 9fd90f090a87a6b119b37bd903dbec9e
SHA1 f55641ca9cfe9bc7c87becc2df3cead95ad03de7
SHA256 5c4d3f95a2a40b6624a07cf2619b5eb3f12021aa7897c4089771f040e727f489
SHA512 06598cd4fb9c70e84dd48214f645c67a8c203b3499286ac8d5c1d3568350ec4ee196c314edf4dc0a326c8172728a2f4ea21d2be76554b0aa6c193167c9ef9011

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCAR.png

MD5 e76b463d0ef5a3c000e7bba0ed423dac
SHA1 3057b74f2f7c465016a36afc041f4b81acfd367e
SHA256 260be03cb3c1191eaa9a5523b0cb8874096f87028b46b387404ae08074261ac3
SHA512 13f327451cb075cb393951d2d1204e392876289bcebce01f4d23b5137531de0f420a0b80acb21bfed6a5c4b3c736b0858288288e51e3913b4f3a457a7f28d96d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\SCARL.png

MD5 f517927e343738c1642e48f4a7832ea3
SHA1 d05f6de9c9496c75283f030805210ef4e2983b6e
SHA256 12271cecfce5befe49510e984301ff310fbeda4d7d00a88d8b923a0891f49cd3
SHA512 d1949bafcf41ef7304250c6a219d1dd00da8df10e3cad4e0b9edbd196523891e86d914f7467f187b308da7ef6406846afb4858b8c9f5e92c195492b03f258a21

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\TANGMUXUN.png

MD5 0d7d9832dce43ba4a3857237ba24f009
SHA1 0d9d316f2ec65889c2bc5cbaa22638162fef39f5
SHA256 0a91774172bbd3838ce7af1503b72dfbea41baccc1b07c8522240be2d3e3f11f
SHA512 b14833a26f9e00faf2cf49e76d1dbf2b37e2d67db369428ec7b0614e2ac6194d613b5497d1fc61c226e9a885d42fca7d61c5e1745757a4fcc6042d00f9e459c5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UMP45.png

MD5 c1bca40413d95f3efcf667aaef2cb55a
SHA1 710b447938de1ccbd6c629f3e454ed89cea79bd1
SHA256 88ba06e1d73e956157664d4143ad7734e3eabca5ed70fd831eb50a2955aadb7f
SHA512 34be5e41f0413126c9fbb27dd83112810160308145868c08847835fa81fefbcb86717ea479fcf663367d9689574cace8c51f9293dc11217d0812a53cc077e3f5

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\UZI.png

MD5 142e8f477e57e8e7be65e79eb4506292
SHA1 d9fd13003a56c989b2c2639ffbc707ffbbec4376
SHA256 8504a4c746103b3c2165ee55c1f33ccbcb0571b619af72d4ebfe1779ef413ab3
SHA512 de924252e84528259355b41f5a62d3c466da8c51fc417394682419d34646d55e9a51b4b2403ab2d78195f6b4533298ad523a80fc54d245a2c1fde35b6a0bb1cc

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\VECTOR.png

MD5 3bf50c676ceaf47c2b782534d4e6fadc
SHA1 ce46102f6159005143b9fe386db7c1e61d23f57d
SHA256 fa7b7d4bb770e793a6fa3b8925748a9bcbd4b4f1cf4adf0a75968235ea40499c
SHA512 e9465d14a9b7fe46151d3bb84c2802cc31c5f175b3466ec78f43f102d4cd55606b2ab6189f61532fa0e88b06ef264eeeb354ddd7c35a1b62b8662bb5c7f86fef

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\YENIU.png

MD5 8bd64758396783959778eca47785069a
SHA1 ad07993f52e8074bb72e498f1592c8f8498a8c30
SHA256 ad2af2f8381018bf69570fdf64855c425e0165255f4fda36915ff8e20531d92d
SHA512 388a7f6fa305b351ee72037c6926ccd763f66f84523f4056a7300b4be1e59a609ad6b4ee15e69041934e29c6f4e2cd24a1d25140bcc0cd286f6c191205ab8847

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\macroSmartKeys.json

MD5 145957fca4689c8627a2eca0ded0805d
SHA1 e4ee0a7a97a96284dc241d48dff8179fcb53d546
SHA256 fc6bf6c7aacd511598d1a05008b03227a945f29e602a0d9d5827a14321c8ce5c
SHA512 5af83dd03fbc392b8cb4e109287ff30444fa9b64c7184081c73c9a195533fe94d7b392518713bd1d7cc9556248f0ec4ec81b34c64f77849a194d66afa028271f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\侧镜.png

MD5 36e9fc1eeee6b2c36e0817412a0fe533
SHA1 ee3b48a5e5d05364ee9ad90041f1ad78af50e083
SHA256 7d0c1030f9e4837b1997170c9e37048ea3cdbb24dd505f73ab7ceffa419f37f8
SHA512 bbb560e25694886c92dea3cf24573222c7965e3f7f63c723b061fe3262ac3288e1f55573c36c20676c32d4ac749d2c8fa3ad4eeb71dc1d215adcc2333ebca1af

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\倍镜缩放展开.png

MD5 d3cf125224d9b4f21b1774a93553b0a8
SHA1 a7cbba74c551db505bfc1bb5cff214883e256e44
SHA256 d3c84c8576d73d5caee9f79d01c3eb801a49bf9e003194df1797c4c5570ce59b
SHA512 30a48fb2fc5cee8e73b520c605422f63d9f0243932c0fcf668ccb01fa2d6f26ff37cb5407a614a48647129c899ce61832cea0f0f60aab3d8f17d159cf51879d7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\全息压枪.png

MD5 3359762ed6ae9f5732b999076ff6e61a
SHA1 5bfe7571fac1cde4cbbdf47d4f058f740bd03c01
SHA256 787bc36bb521d405ac555683d35f514b9f354cb013d5b2baf873801dba07b529
SHA512 11b360fb5d140b3ac0e558168fec9e9eb9a360cea55cc06c5489b7aea138dee2919b93548f7538986256b260fcc8ff562b73b282c63b61e185ee1c1e970cca58

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗包.png

MD5 8b3b00023ed1d5fc7dca9af16e4ef0ff
SHA1 58394259b5b725d909c805f53e614c26b878e86e
SHA256 3e5256d8c94ed65e1c77bfb0c982dd252502a3cca17b8d750a8f536eea61c635
SHA512 fe557399f1fdff2331e23a4cee890a47242fbb7137e1119a215d9cae8185c89eda3d45192db6252bde89a77a963455c73697d29c6c5cf0e1ac655e3db2a9f70b

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\医疗箱.png

MD5 ec67437dac0bf325bdf34d2f03b70fd6
SHA1 77c04dc870c5bb10c99d319ea8b75183f2016f5c
SHA256 81af772e2b71cd81999d0912824f720259773ab824f25f8ddc98380fd40e7ae5
SHA512 6333c18b301363df48af12488206c6c114917ce0598cd016d0d0771da7a01b3ec1bf9860f12d0473e9b641f8bd1e390dce792b6ebc47bc428cdcbc380f370946

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\原皮手雷.png

MD5 e289438678f1764f09616ab160c3f958
SHA1 7068ad83844d4e4cb7226937c222599e660ba66c
SHA256 9fef8861121a1b529628ea1b7d7c4627de6c7d5b6f6d39d3dcc503bcb26ae3d1
SHA512 8371a8f2d18db0f686c41801fcf90fca911eacd317f69a8ad3215b61e3a0a94d7a898ff66a66334acefd7b2bc063b36dd0d884ad407905b826d65863c784ceda

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图.png

MD5 070fb2d00f3b52630fc617ba988f06f1
SHA1 fafd6c251b88bb703b0d7b1a73201bdd2ac915ec
SHA256 1f422f83e316ee4b7105896c3daa2220171a13dc22511ba0d9990bebc629950d
SHA512 cdb7bc43785ac562ee7d635f6c7039b1d0281733fc2bc7d7094f8502219cda4b1955e9e08493ee508e2c5996b36946e6676ee826f9dd2be5778f17bd26f7cfc2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\地图背包标识.png

MD5 dda527b4ea72e5b599331ad6328cc48a
SHA1 8a0a53befbd942f6e043d0be85009b52d2ef0894
SHA256 bc468b9905fd18ac96eb8a3ffceb98a91755a887a9d6632f4e5497a729a02c3b
SHA512 3e7080e7a0eac95a96e3b14605b99adfae31a074a7a2fe363fb5ccc4be2c19e64ad3be1a46e2f3b1a7a3b383041305a1c11f65bc837614d0feaa08cb88bccd2d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\小鸡雷.png

MD5 51fc5efb7c3212a736669314bb2aa45e
SHA1 875a5335672cfa8e08cfeb8d6b3d73fb5d6fef3a
SHA256 04602c3f80429337770c010b860fa52e29d321f33e65d676ff9bb473ebb78afd
SHA512 cd0caf533cc2bebf9953c0b32637b4866f58fe3f489b777aa2e3cc08071ee8cc2a6a0450e422056a93d9a3ee3d0bbe05cb615a904c83cda7388c283000dc2add

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\展开.png

MD5 130fd9a341bb90a407cc4015a593717c
SHA1 016b9c38845d614ed32afef52c2db8894cfca846
SHA256 cdee2bbba0df2caad71e9bfe6da1915731c8d5d2bee038931e156cf3832e0385
SHA512 0b12b45e9c7f5910607cfb87af57fea25d6ecce45582c0cc3cde364c7eaf4cb4aed773a08fc1de4104e36e242362cdc0671058c44c42571ade6a6b1f00fa64ee

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\平底锅.png

MD5 723bc0f8a29aded1c3039860fd11605b
SHA1 05edfc46e9c917374ffea324e9b2a149b35c0974
SHA256 6258a2a10fca69fb4fb5eb357627252311c457002dd3a96528e1624b6bd092bc
SHA512 13467120455ff7b1f10132a7b47f389ee1b605867cad7d0cdab41e3724760fc8c64ccc48ef320ab65fb76404a006ab49d3ad887e3e2bb76ae7f1c1979c37cd55

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\拿枪.png

MD5 a735ac9c18763b6227c0dc10a491cd73
SHA1 e781208c4de540adca891f8d211d35a207a84eab
SHA256 d02494716eeb81d4b380e38ae5c6f36f079a0423cd0296d785ff4d7460b233f4
SHA512 248960cf848f02ceff949200f803830b97db70e0fe0d3827f86640f18264313800f2428b01dc7b7bf9598fbcf6a40edc3becf86d0aa3dac7994ee123c855bca4

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\止痛药.png

MD5 852e3613bc6a07dba18230cb8711e6ce
SHA1 a968b91a84654d30c999b039f4fe247eca023a6a
SHA256 da5a91565d380f2eeae06e9456a19d5d1b5882508f428e404f893fece24941bb
SHA512 7f723b946b74ff5d738f383c8ad70ff0968d348ae6ee973bc11ba317b222c816c4b5f9efe91a02e0364cce11cd4ce8e8997490530b4fff8637c6052e0280458d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\没有开镜.png

MD5 71aab0fbb8742b89b8644765a9cf6044
SHA1 c2795d26d1c8579d03ec2db91c526575d349f402
SHA256 a6fad1ab8bc52bf97166ccfd2016fe839b1aa88f5c02acb7dcdf689b7a59ea3a
SHA512 3c5d94f79381221874409465f210943277d191b329af4f037db0f038e15e02a0e4716b03b79508d3da36113ef8f16e80492a4e8890367ad42b2e236ce49cf0ed

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\烟雾弹.png

MD5 ee47173719076f3af0067c1ee93efb80
SHA1 868ae269a9aeffcb57653a4b14c7f4037aeb5721
SHA256 0e74057b5ed99a1c85290c406b8f689c884e3c2bf5d28de6d0c57172f1a4ce0e
SHA512 759526c4bf1c25361b16c20316fe05d51bd78c4024c6015abfdd46fb05549dbca61505dd9f9a5cb7e41185e7f2c57b187c162988ec46286d2b9335d8a91e556d

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\燃烧瓶.png

MD5 2fbfdc3d16287eecffc49d44fb6b3049
SHA1 e170fcc23940ea03a0ff5fd13b08770b66fd9f9b
SHA256 fe8d5f54a9f70bfc40680cfc08dc4917ce7d520ee35e95f5602d893dbb32fc4b
SHA512 34fb2686ac0b4813d5d103a5d246d50dcf42f7517ba23792545a52cdc1fbb1fa8e854f735bb1d4a628701210659c6c92b79b8b23786308ef2ce4f76ce2497a60

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\红点压枪.png

MD5 87ecded94dd0505e1d1b745423fc8a7a
SHA1 6dee167be63c76a0f526e246de7e2c9c46a851a9
SHA256 0e2fe73d10a62aa140203dda3b5377fdb708046641502ff5dc86ef5bb7bb71df
SHA512 6e0acc41907eaf6802f66d5ded35f2d4f3af12ae63f9eb5be20344145a022c638a0c03bb156b933e06ab813de8dc799b487020dc2cbcea26e48ac3ebcbc21b00

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\绷带.png

MD5 e675a59468f2457167314b6ae008e7ad
SHA1 c0e7e838d5307d2e0ff53dfd24f8be0e0bdba648
SHA256 07e3cb530503ee0964656666d92b5b78de5dd61fb2f11c634ea90a087ca6d4f8
SHA512 14a19984d92a61331e09ec11820e5fcbee140842f37d71137a170a1fe6f929453ce9784e9f81e0346ae61d7cf17973fa75ccdc5e5d01df0f14981c592556490a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\肾上腺素.png

MD5 0c1b3568b415bd803b5a88f3a921de04
SHA1 5276e9545080904bb18dd6f57415189dd017290d
SHA256 591760caeb7083c5de6a084177bcbb756d29d4d5556c6f0fe64455ea86937a1f
SHA512 5fd97211bb4cb250b319932807e465aca07d6af0fc3b2273a8af68f9c23cd046e9b811de68e27e38c95e14298f642ff4fa674d9d898855c193a58e4d18c5f3a6

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\背包.png

MD5 fc0f9bd73ccea880c5c2a2232de67bde
SHA1 ac83446da2335c71c508fb0f053893b83e2769d1
SHA256 5f3035caa4b849656a3f332e5b000f0c9da8fdcb709e60296db39697ede442bd
SHA512 21c73ad1ac4c5350071fc35fdd751fbfdc94967ab696456bf8e55fbd299d9e5072339f1e8d0c3f16b08f2a63492f2fa0f96c1f8eed997a70e701f3161034d1dd

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\铝热弹.png

MD5 bcef95445925dffa137fba4efa03d8c8
SHA1 b021f770db957d881d2571ee1db8b590e9199e2e
SHA256 8a65538a7a72a36dea10a517e510db67e9d49eaea3a4d864994506df104eec4f
SHA512 6fcd1567247eb7c0498768d8bb75a01797792a290073329b4edf7e4a8bc65cc18eb6085389c0fe551ae2988a646edc76fe597844e444b6cd69cb655c28b2056f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\闪光弹.png

MD5 42037d7f23ff401aa99aab09640cd600
SHA1 ebfdee982e715c9bee0f7e96ca42540c7864711c
SHA256 cdbf88220e1b418b48ae7ec9cae9b17f8f101e5d32d36eba10f9ef479e1419a3
SHA512 127703794236b8b556279aba69410daf80e48c49aa38e470badfa49f4589c267f2248b9cdd0f5da048868e36d4daf78fbc6562097cef5dd75017bb029921c394

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\附近拾取.png

MD5 ac8bdf6ebc96cdc1f750e0bcd1c2791e
SHA1 0a4f8deb781cb31e8a5557ee85d040d64f590e4a
SHA256 38f7ba4ef35e4af8384e2b55cceb6fbefbe0a96cbd10adf81839f604a0a7fb4e
SHA512 2a13074572d2bafb014d08b3336eceafc206e364360615f1329287bb2bed0994ad0870bbf3229fc8c9525985a3aaf61e3c005c89a9f77bc055dfb2c1bd525c0c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\1shotvip\1220\饮料.png

MD5 bf087289efee6e0eef3836c5182152d0
SHA1 3bbd844e8b82981a8441a7e1e02eb5d757a9d4ca
SHA256 3feaf3702e24ba916e45f6e88bf4052ad45bc68b247706bc490b627ce0087f8c
SHA512 7fc993f8d35a89228778b07fdad11682c71942f3c3d698122e7d58ddeae347d909e75e0c7e7bc266608f6afbdeebe97e65b809372955f3aba53e30acd45829c7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\bujixiang.png

MD5 9612e6a6b64370530cfcbc13fe9d2ab7
SHA1 a906f413eeac9a0f2ce39c4da789792aa2d5b1a8
SHA256 4da50c7268509a8ec555f30b13c0658e79b849a58a85a6e292b730a8c7f68658
SHA512 532651fc3e8530feadf73c853a930efdefdf85aac4da191120a76278fe9af87daa178ef66703e56d01d49ec0d5f160192e015d3099b4c76914da6c59bb0ea1d7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\fujin.png

MD5 4ba8e0a1881b8762325cd952dabc7c3a
SHA1 fb4e26f6036deb557ffcc1770c00ad33dffb3770
SHA256 a205bff0a8bc7d14af842f6ffc5dcdc408187ea1f0a5d823986efa2be86618ab
SHA512 f871a6801d352f2093fbc13ec4d613dcc03df132ac845deaf4ad87171aa22ec691e25530c310af03b41e183c554686be6f464bfe5160e9a6c78f5f8f0b3c0e0c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\guanmen.png

MD5 55c2290b87a38b8d3ea0ed75e1328c67
SHA1 6e9f5b41f269a5750ed91c33e4978ec349ecffa9
SHA256 879f1a40750c09efd21013393d5ad83c5aac11d89b098773311b97f280566d9d
SHA512 ad8337eabe66f6deb580ca653944f67131b19d963af503e0638622ea94c9d9665de9afa8111650c63501e1b5ba38768ffa685c236da433af76cbce84e7865d54

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaiche.png

MD5 ae4aa419a16a2bc01b6a1fca61ca3706
SHA1 8b74d0d1f615128474ac7ba22bc4bef12a8970cc
SHA256 58e661bdb95de1ca173b379fa14e4842d852bbce0154ffbe22b353321134652c
SHA512 981ef32e67139025dbb99dbe971c7dd8422371860b4e58c6a548bea3068e559198c90f49b1aba3e1735bba2a6cdf8b9811663677a6bbd350f94d88e239fe94f2

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi.png

MD5 a0602c514b4eb1e0558d9370dc167787
SHA1 f6bea5f6eca91f0a355c6aa7f563c9d335114554
SHA256 7f943979d98d9f996a9d98ff40c568e66715bdcf3a340297ce82f073bdeaae76
SHA512 5971e11a067bdbbd02e5066620c70c2734a007caf800c1468ea53e6f4e3c35e0a9a294e37c302d4ee08bd9ecba7e900bd616c66ca80290bb58d34e8d522f53b9

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaihezi2.png

MD5 b1763eaa311d36b33dc934a67795406b
SHA1 1061e36df108e5f6d5dcc7027a877d97f608ec07
SHA256 476e4ef68a52288693e17ab7bd21d1a9e1a5a692d929f2a6d3cc60f5a555b8cc
SHA512 7787062083f76c4847c11ff81a773f5e7ebd38d1390eb450e49c7046c6c713679f711350502c197f7886cb708267f4a0a0680b2f2ce66b44b2fa9797bff0d7de

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\kaimen.png

MD5 a335c064ebcf8de2f8ed55fb173f204d
SHA1 0517a9cf117a10f0900ca1db20635bb8781e79e6
SHA256 f6a4b418046a3c9f48a65b5f4bc9830ab9fa1f2eea28b3f1b22bc3eb4d0ba72e
SHA512 7b2c5f014f66b0fe17fb87af5c3c141989b3f44cb6ccd711bbe2744f06da4a0e4a3c081019fac05e53ec736c1ac3a3621891555e4ba9e4426c8390388286c484

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\macroSmartKeys.json

MD5 2e3f47d6eb624422c071abb8b5cbc40c
SHA1 6ea4100e28e2049f7c2a2ce229fdcd182becffc9
SHA256 6e6bdfcc04261796c68bf017fde7053cf2b28e8f96d2e78dcf03e80acb19c683
SHA512 238d3886e1476a36479f3676e6da6ea632c804894f1548889cfd1797cc469502afcb81016b0aec97793497aad989a4738948eb4c2ffc226ca7b49820cff473ff

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tanshou.png

MD5 32bd715f3c531c21d6b31313e1f460b2
SHA1 dd47e86d98bfb5ce4e70387ec0bad554ca06d680
SHA256 fe96435887aa8ec15f1ce00a11094ab35293d07de953e0e1ecd4a222ed14ee5f
SHA512 c4ea112db423654ff5ad7e17ddab38e2d8f2ea93d7a0ae4dadfb16e1cdf49130fd5bbd5e675502499100bc5dbbb582ff38a9c2bca3341dfa2a1bf289b41ee760

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\tiaosan.png

MD5 902feee77aa255956002c52a19f32c82
SHA1 b0e922329fc89983236c1a1be860f837f14ac806
SHA256 2ffe82b04c4034a7e1e840c7efcb48fee65327193863f554062c46903d10056b
SHA512 61df4efbba584e2e9579845dcc4c454cbbd281cc64d99d4b7a372a5d8f7f061d6c0b47a71ef047ef5233336283a71315dbfa98b4c74cd852953546d3e353f84f

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷m.png

MD5 012f41927dca05fc619e365ef5c9d6c6
SHA1 3c6ef1fe350d22c3ff16df7f481f5f1ddbc3aaa6
SHA256 89ae3b207d0eee984919ca9aad7c786539694ca391277ccc105c5c09e8b25e34
SHA512 dfe8e5d7b1eb29dd3b168504b0ad3bf076067df6b54787dd015cb1ec126f347e5bad8ccce62005856656a10b61f6627dc00eadcda0b4f9cc83bad3a8a1d0ac29

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\地雷s.png

MD5 77217e3439c756bc7a59eef3f473174a
SHA1 9f945ce9beffe0612c8b08ece40c58e3e5456399
SHA256 b7fd38ad75146a967c47a8e04ca42e6717ce78d19ff3952d4d080eb994d243ac
SHA512 505ae886d44fa148606e1a9731e1acefdf3370e8d5374c39886ae00c08ece397bdf92333425e37cb995242a9ea1d50c9e4151f97eb158d448dd887a0c855c796

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\展开.png

MD5 c5a86cbdcb964be4c3b31a84d12dd9b1
SHA1 7acc217574dc23c72e79cfc07d57ec16372ea7e6
SHA256 07d805838f320137fa460d368f26fde00b4137043bce61c9dce7e142088a61ff
SHA512 66f84b18811d589c13bd89532d901ea96bb05480f5b2839daf036782631ecd75250182d84a9f5b91081341a5348cd3ec6287138a686866954ef4888decd120b1

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷m.png

MD5 37717c10429db1fc856fb8bf0cc8695e
SHA1 7b62200cb135445744e65c0d5640c348c17cef54
SHA256 206f5cbaa1ffb9fb96f3f22785b94fbbf2c5d0295dc40f6c158f315f7cc9f6cb
SHA512 83f7338cd42b8cc0f47cb4310d7100a9471356b0c9c3e15147099c77106612e0613d7d069d3afa7a44dab4b8c28b7dd46f58b15013822add50e49fa95c322b45

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\手雷s.png

MD5 5aab4c36f08f50e7b21cebd2b9db9ab7
SHA1 efd74a62c84e76d02950132e8b7a08188195fe21
SHA256 015d239c7913aa732f3534e9cde236a22065ea815849cf208aa0441e8d464deb
SHA512 b7f139679fc48a4c866348104dc5b2e757c16887ba0d1173577d2398319d86bdea1d2258b8875500e03266a17fe612288f4da4f5e4938692c3ba8b0d350a77de

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药m.png

MD5 52a83b20afcaf2890b322fc0d2c88da0
SHA1 ea4ba1054a2d01b3641c447afe46398daed47a9a
SHA256 57174292c38578fafaf56916143232cbee0bb2d0713de32bfc44a4538eb3b653
SHA512 b6d9a8430d005d7aa32d7b89306bd51c1d3fc62a6d560402ee8eadb7dda2168464a4d8d7c5247c137d3b9e4af8a768d57dbd69da34fd50d3511b5fe05460342a

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\止痛药s.png

MD5 425c41c98ada29bca70939d75672a71f
SHA1 c3b830e2a87f2205ad57a99974e313296c35a13e
SHA256 6f51cae51d8f5c36f3ad113ce635efea7b98184fddce56c95d04718df927ce7c
SHA512 e90041c2286a94bb8120578ef68110757285d17b294ea55010931e271e879483becd75e7f6143a744f8f9574923a4d1bc1476f21babc12feb9e8dd7c52649cb8

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹m.png

MD5 d888d038fb2d6d66852d5b513303d02d
SHA1 f1f25159d56ba504c5895011105804b76c90a734
SHA256 83244abe460ec536910c4a68a29f7a1a480005e1dfba7d5d69c7c333061a9cb0
SHA512 b99b68d8cc2ef0186dc1841badeaa0caa3c5b24d2e8f44bde2f43593ccc30f98bb59aace80ebf13b04cca063a7548cfb782a341c0b19737e01ab6ec017cf63b7

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\烟雾弹s.png

MD5 7187bf5d48adb6dee248158d6c64bede
SHA1 8a239377c39a2cf6e39d3fb06d9e124a6d24313f
SHA256 465bdb16afe50ab1accbdf3e61e37eb88887543343ececd84d216563a4f42cd8
SHA512 be1cc0de431b4863003d672395ef3036e6f418b41d5141c3269529ca2ffb9418f68e1d509d65d6107f4f593a9f3f13b5a2286fc6d3703a66e3384dcaba96d9fa

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹m.png

MD5 524bd18b4bcc0d4e6708b5e304c93f80
SHA1 c988f80437c3f2ac8670ea1059321f1fc9aff878
SHA256 b9496349b894382d69fb7e0c9a9980e7d329e18bb8505569e8990896824bdf1a
SHA512 5c574350c7d6003139ba650461ad12d33dcb75aea6a21864ddd7a26b159d9c49b4584ffd95ebdad1318676438a668261368e8f75057d60cb419bcbe6c4352129

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\眩晕弹s.png

MD5 b6d0de70fd4b69ef1fffb6b08cee2ef6
SHA1 104e197480a5175b61edd118dbb4b0782df8324d
SHA256 0802a6aa90de755aa8eea132057a4b2cd25680a81ac9fd3ea52b5a9ae0852c33
SHA512 ec51f2477ba550413560b700fdf4d23b11d2cc65d1b1d7cbaae82a593e976a147eb41a88469a9786e8e4f6a98d068692ee2a326bf944ecf933e5a4c61d93c2d1

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包m.png

MD5 d4017e9082ba7fdb6c2ac89b49ff386d
SHA1 ce1c66ef71a0852a3e7b3bdf2eacd7666943c740
SHA256 db4defbf73c0b53d7f100a53acb1a2b89381a42618dd4f4bfb7217fb6d104b2e
SHA512 970b17566ff326c6a418028256117a41fc44b17ae2a76e52862388e9cd81120fd74bd657c5eede2b8c6198fd9d17570adffef63beb2c4381f18a7c256fdd47a3

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\药包s.png

MD5 91c1a2786c85475994f501501264af55
SHA1 6847cfbe6fa94dc46efb81ea79b426ebfb1683b7
SHA256 f4375350bab5354d1e8af846c31004886c6eaa59db45d78be02cfb4890f14304
SHA512 5945c144b0c9fcb7d9e874cbdbb978e1bb96143c20ea553f25fb412f7cd52945bb98d8454a8efd3134be5a6dd3737db3af96e7baba8633ffd3addf32a395732b

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹m.png

MD5 c16f8923478c7962fb8ec940caf101ac
SHA1 440c5c8675118e503312766f31a7a23e2442c87c
SHA256 fb1bda4536cdb9977a7571dc847e4a6e5e3e1c15f3ece691ad17b2f3872ef1fe
SHA512 0aa84f86bb99a52ab12e6bf2c097a47ec805b8ae83543cbe00bc8da232818b46669a322014db562c28c3b67402e31c22149ad0072fc6cf458fc8ea2be17c8462

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\闪光弹s.png

MD5 f6bc1f6ab993beaa4848ba820a65fa7d
SHA1 838e738d998bf0faa5b25dc032d2878196ce9b2c
SHA256 a0c6c7a61c5e5538e151dc03ed769ba29ed5312777741b0e13fab4ebe542a9e8
SHA512 fe9fb64cdf3828d86c4e1cf67a59793c47554d2a7ec830ef4153b56e15453e71ff76040fccbe57e3423b0ae97ac283327fc1754d44ec357f05b64f56671bc454

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹m.png

MD5 7ecc76a60fd9b7ba5b6ccbd617cc8bfc
SHA1 1c7510c34be29326a017c6cdc85af52bd1f80c20
SHA256 5b6fd317955b61448866182ed2f6f2a0982d6869bb4861e0794f150a09b7fc38
SHA512 53420eb9dc75b4a6c04c06f415729f018b95c6a88e31c3bac6f9d9116014719773baaa183b6cda95b6a3c1b5d95dc6ad2afe8e6b924a0d6a68a893e1012388dc

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\震爆弹s.png

MD5 964ee2acfcd999404dae69a093043dae
SHA1 18c0ff09b764bc70fad07068b5cfc791fdf95ccd
SHA256 52ee1de81dc91fa90faca8c91daf8f05fa3520fad29fc5d278b6a096d8359e7e
SHA512 5f2b3925e256447ccd6844864593f530cd1365ef1f7237a06de602c3b9c99f8c002bb9bade99066a4f156b9a5adf997ef95cbe2e94ede9c84da596977c8a2323

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料m.png

MD5 0cb6fe3544d4ba076e68b2a6ebccd0e8
SHA1 8ca85aa7f1c47fa1da4a888f79f870aeaaacd764
SHA256 a4cfa1ccb0789c3b7e944a47bfe3fecec5772465641ccdb29a6ce2295e38f6a7
SHA512 acd48c83397070791d8f5ddb39b23d02d61e788452fa932ba97caf4b16e5c255b95170b434fcaf29a9092622b5ca0bc58a26ebbb4f9577bcdbdb577da7ba6133

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\饮料s.png

MD5 c430e16eabe25e1b003daffebbbb7599
SHA1 6029587e85738ffe4b5adbb4b0c95e29e8ad9f97
SHA256 781fd58a3a2f9020482e2e89513f61c92c928e21f1a25440e342c70bea2a45d2
SHA512 bbab2fa55368af774670335345e4127c28967b80506ac67d844ef77ee0bce1abd3ac096618bae0879bebaba413534898c37a880c0470bf491b53a7a04e39069c

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹m.png

MD5 e91fab4c5b6a05698462b41b90c30996
SHA1 6bff3b63298445f11fc8800815147e95cf077568
SHA256 1ec48dc50f70103bfcfab6bfea8b01b6bc49739acfd06afde7c21fd9c2aeb929
SHA512 1d53ccc6ec45643bb81611dc3db3ea27c4716f556ceb14294ed8113a9f4b462fde242566d154863ef57cc1a0bbaa52893bc007fd7b2dd040962bbb76e2502954

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\3shotvip\1224\黄色弹s.png

MD5 18bdb787173105dd0539cef5f21d6160
SHA1 62718340625aa22759363d7a7d2f4786af20cb68
SHA256 2175edbb9d724dc5657eddf493c66d64c74e9d7bffef8730c419115d01b7a13c
SHA512 f1dd5174a2c02412291fc70cfbd34564e3407a4034a3c863651ca6f11b93feee7cb4c58977615fa2722d433fb8c9e69c11b25f199bce77f97d6bcf42d391cfe0

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影拾取.png

MD5 ddc6d1fc43698d930ae6c934a63cfa21
SHA1 0401cf9a703bea313ea9fa5eb29327debd38ea3d
SHA256 3fea739b86f7a894ba22a273c73d60c7681bdf225e48ea760880058532346caa
SHA512 4ea6429a01e7c8fbd761ff2950a5e3d1b80c965838d2ae0bfced9764fc037002b24c0ac152b8d0a5cb7b9a81d1ec853a6e86663ede114a53d4d47142cd6d95ae

C:\Program Files (x86)\Sigma-RT\TC Games\resource\key\material\6shotvip\1224\暗影鼠标呼出状态.png

MD5 4494db2039df7f4fcd37153e09f7d3ca
SHA1 68d13e756c1a75f9059e0b5a6e611896db97e2de
SHA256 e902212f8ec541ec7dc58ecef581a8ab22e74f147d3b6b309f4dd4568427aa64
SHA512 c4484d86584970242855223b0eac8b44065eb4d63473e4ed8dae3f28adc3ac791005b699d8943a93d7b82c60efd8c5eceeb602d4ddcbf5e22427e5f3ed7ddbe3

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\nsExec.dll

MD5 132e6153717a7f9710dcea4536f364cd
SHA1 e39bc82c7602e6dd0797115c2bd12e872a5fb2ab
SHA256 d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2
SHA512 9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1

memory/1940-1320-0x0000000003470000-0x0000000003482000-memory.dmp

memory/1940-1321-0x0000000003470000-0x0000000003482000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\nsDialogs.dll

MD5 4ccc4a742d4423f2f0ed744fd9c81f63
SHA1 704f00a1acc327fd879cf75fc90d0b8f927c36bc
SHA256 416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6
SHA512 790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\System.dll

MD5 bf712f32249029466fa86756f5546950
SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

memory/1940-1333-0x0000000003470000-0x0000000003482000-memory.dmp

memory/1940-1334-0x0000000003470000-0x0000000003482000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\ShellExecAsUser.dll

MD5 552cba3c6c9987e01be178e1ee22d36b
SHA1 4c0ab0127453b0b53aeb27e407859bccb229ea1b
SHA256 1f17e4d5ffe7b2c9a396ee9932ac5198f0c050241e5f9ccd3a56e576613d8a29
SHA512 9bcf47b62ca8ffa578751008cae523d279cdb1699fd916754491899c31ace99f18007ed0e2cbe9902abf132d516259b5fb283379d2fead37c76b19e2e835e95a

C:\Program Files (x86)\Sigma-RT\TC Games\TC Games.exe

MD5 974a35092d335205bc9edec565f048c7
SHA1 c33757dea3ca515a0c5044713b925f119d74d155
SHA256 f02f9442b30ca0ed870ed8c188f8c97fb2bc8cbe2c76a9f5e9f98ec97fc48af0
SHA512 c3152ee03a24fd828e7c019712633e45b647ffb418428cceb65c2597205dab5009be84aa087854a1f9d514bb1b7e4107a64a2b8709885a2e9482563ab7a886eb

C:\Users\Admin\AppData\Local\Temp\nsl56AC.tmp\modern-wizard.bmp

MD5 1478164ead48ae2de1a24853f216902e
SHA1 25fed508260273397693b970614395e2468d9d4a
SHA256 2aa941ce5b647d31a2b7a40b04856fee8880eee38769ad0c00bb29c5bcd7fdcf
SHA512 c319ac27c1a357e54f5edf2b25a26d9c58d62861915f120e05952374f7f72888131e27b2857281020d94b1ec69e8a47d6a80ca9ce2c009c3652caf4d8c3e0df6

memory/3500-1378-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/3500-1379-0x00000000005F0000-0x0000000001654000-memory.dmp

memory/3500-1380-0x0000000006150000-0x0000000006160000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\HandyControl.dll

MD5 87f004b5d0f83e1fd2799b2a7479b581
SHA1 60394c3ded521a311bd10b99381f5c46816effe7
SHA256 a661b60f9b2fc0401b74452ab48970763735d28bd4e4145df00302d27884b849
SHA512 0869e6a92f4dbc018a28d1ef1fc78863254ef980a084cebe5779175c2fd0fe8f5afaa3b6dda2a364b7c50c9fb221962702e1ee931a02b9807725b62492060037

memory/3500-1384-0x00000000062F0000-0x0000000006472000-memory.dmp

memory/3500-1388-0x00000000062A0000-0x00000000062A8000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\en\HandyControl.resources.dll

MD5 c1d0e0997828c9a8eea0011e2035dce4
SHA1 dcd271dacb785aaaf0f88581672f53357abd1c75
SHA256 7687d01a7945b54579a1579b6b329d847f5ccacbad1a8607d778f8a24366708b
SHA512 5cf64ac54eec736d0ae038ee41cac88705b5e9f1db45f7a7c3ab1cc93d35c9c4f9f7157fece0b24ffb78f5ab28ce22ddea0ef7d4ccd432de3dd2a379a06fcf4f

memory/3500-1389-0x0000000006830000-0x00000000068C2000-memory.dmp

memory/3500-1390-0x0000000006E80000-0x0000000007426000-memory.dmp

memory/3500-1395-0x0000000006CD0000-0x0000000006CF8000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.dll

MD5 35b1b9f1538cbdab039f4a79826041fe
SHA1 579e87e72fe76e62089631bf8a01dfbab2af5226
SHA256 5c2f34412502f6c5a5aa9226b71f4809aa73bf90f46c79faeb97172955178b26
SHA512 006bf743a27d7d0cb5038483fbc4c98f293f9815f58c92ff29dd4dcebb8931079c49c393de6f805041d8200af8791473cfa398bc603f3055bbf45c32a1eb48d0

memory/3500-1399-0x0000000006960000-0x000000000696E000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\Serilog.Sinks.File.dll

MD5 c25357a7950dcfc7f85ee9d593cb1a24
SHA1 6a533712852465ab3c11b5c76004312d6482f07f
SHA256 5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
SHA512 30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6

C:\Program Files (x86)\Sigma-RT\TC Games\Newtonsoft.Json.dll

MD5 715a1fbee4665e99e859eda667fe8034
SHA1 e13c6e4210043c4976dcdc447ea2b32854f70cc6
SHA256 c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e
SHA512 bf9744ccb20f8205b2de39dbe79d34497b4d5c19b353d0f95e87ea7ef7fa1784aea87e10efcef11e4c90451eaa47a379204eb0533aa3018e378dd3511ce0e8ad

memory/3500-1413-0x0000000006E60000-0x0000000006E7C000-memory.dmp

memory/3500-1412-0x00000000074F0000-0x00000000075A2000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\avutil-54.dll

MD5 3dc504c6bbc2dc7a80027bece4e447d0
SHA1 b61ae8e190b6c6f5f568a5ad2110fab7b51984aa
SHA256 36203d5c57e4994014d343672f428aa466057e8eb103ca0b8861632c16750222
SHA512 a04d639303f021974d6ed24d95526a32be2e4efb7a8cc9fec461c2b43feb85ac9c568518b3b28c0a08ef0d731cae94804f717630fe1ba0603ec2439b22c987a7

memory/3500-1431-0x00000000075B0000-0x0000000007616000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\bin\MP4Recorder.exe

MD5 a80cd22a8ee5b2834bc46684c09d74cf
SHA1 cfb9f0738d1f77a6b9bdfa4765c55f9bd24b9cfe
SHA256 5570ff24dd70a0bc3df34abe84b4ae375166ceaf2c716dd9b2a239a22558610d
SHA512 13295bd0ffbd516d71a752dfe64de9ede4a4d5db692b082090182360635e84ab4232e52edb3f61e205098ec949f04a25ef69199d80cd0a10f72b3d35e59119f6

C:\Program Files (x86)\Sigma-RT\TC Games\mftavcenc.dll

MD5 ea2cc538a116d46335708917b2d14811
SHA1 5eb33d41d82a5f559c77321a10c881e84255762f
SHA256 f824bef7be2a2a9f372f169d662c4b17f4d404361939c131ada007c46cd121ff
SHA512 9648357c20117600c20b2180582a4a36a82ae21fb01aec8605ec7d063b4b039f78c5f47c9d5e95ef8c9854b0516ea799586159d13d481568bb36e5844dcdbaba

C:\Program Files (x86)\Sigma-RT\TC Games\audioenc.dll

MD5 e8d15c33c9ac2665ede16d660e893694
SHA1 9e6f40f5d386c6c0ce9bbd37ec4846fcb19edd77
SHA256 26a2ccb3f9b98b8be7b11f2637fed46d2bb194e6dbf69359e312a20b1d790ae4
SHA512 82f159c577ff9e88c05a59d4fac6ff011e1205212a73ee63064d00dd6dd72ad4b1babcbf355a1456471b4e6fbfe963885d0ffc120e8c692d861597546b70f246

C:\Program Files (x86)\Sigma-RT\TC Games\libmp4v2.dll

MD5 7bf0f757a3949fbf8d1fd0131f5669e7
SHA1 7d5c4936c3c22134e859319e53bbfee611a5f76d
SHA256 a50a2b9d4494701bcdaef5de9d3ebcee09bad25fe02729bfc7d52767b2ffae9e
SHA512 33601e145f1e82fb73ee60298b8b1b842f010156fd5c6cedb50f4bc0cd9ef452ce154babe909ba8b263f1dcd7e50a62e2a5a0e98ebab5bacc3f5c6a42d1dc8e6

C:\Program Files (x86)\Sigma-RT\TC Games\swscale-3.dll

MD5 6468a341fd040eff5549156e00b1aedd
SHA1 d89822f46eb04454a10e5a668d9328bdc0021cc3
SHA256 fc8b75523e9c780746ad663e0c4219ecacf5ae5eabfa3ccc78bae646507f3314
SHA512 48612822ca3647aeba56f6b3bd665fecd21dd763c7f43d6ea8563f44023d3ea14ebf2af864f8887e5a723e0446c7ce02abab7b1b28ab7caec74e1abfe0511db4

C:\Program Files (x86)\Sigma-RT\TC Games\resource\settings.properties

MD5 35693532e8aa7a4e416e31ec3aa98206
SHA1 d5fc2dc19282b90256b31a6dca7a0da35e7219c8
SHA256 9da07cf112cfd1d20bd4baf7127dba47644520cdaa54d07e10c8b5f0dc894993
SHA512 54a4cfadce4fe8b71ce51d1ba2b3dd1c0d6fa66d18bd181d24658413e944105ae9d4ef3cc577d77aef0c8a3cb95ec0b8377e759328a04333734301577b9b39c2

C:\Program Files (x86)\Sigma-RT\TC Games\Log.dll

MD5 4608946e266df13fa3b26471b1df4771
SHA1 82fffed60aa2045da3a5e6a2766e39e8ab78e665
SHA256 56b908b8fc74e9582eb403d8f6fc0ffee1541ec522e32fcbff3e8460dd2e2b6c
SHA512 6959164e096566241a0315542e6bf0c98d3b7d7ebe3b8fdcbf47053646a0d16fa4bdeaf4453b7fffe798e988842a9f9d3c1131d0a65631478e1426361ff34f80

memory/3500-1391-0x0000000006150000-0x0000000006160000-memory.dmp

memory/3500-1433-0x000000000A1F0000-0x000000000A1FE000-memory.dmp

memory/3500-1432-0x000000000A220000-0x000000000A258000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\D3DCOMPILER_47.dll

MD5 02e034cd47aa9a633f6aaef348dbbba0
SHA1 424682cf2f3878c0195f0f4cd250856a0ef871b8
SHA256 ff86503cdb204570491a81bd45fd9812652ba20a1bbbaf2533b7203fc4469854
SHA512 0ffb5efaef0780be68633957a40e27c76625a6558a14d0671c85ac3cf8810f3c1e79f3281084dc05034b69447e999c420c1d248503001454c62d0eff320fd6e1

C:\Program Files (x86)\Sigma-RT\TC Games\CefSharp.Core.dll

MD5 845c69ab0fd5343da1373f0da752e824
SHA1 36929d46712b130b1418cb37ee8c2d965986b66b
SHA256 9c8d48426578325c00eeee2c1c9b6d5bf31c21ead592252b5f5842d675f22a66
SHA512 7b0e0199b0f7144577729f190e695191045e80e6f1e5809b782081329c28a774bbc69508344d04e7c682b894c969c357ce7c87f6ed8855371c47b23711c0481a

memory/3500-1441-0x000000000A8D0000-0x000000000A9D0000-memory.dmp

C:\Program Files (x86)\Sigma-RT\TC Games\msvcp120.dll

MD5 fd5cabbe52272bd76007b68186ebaf00
SHA1 efd1e306c1092c17f6944cc6bf9a1bfad4d14613
SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
SHA512 1563c8257d85274267089cd4aeac0884a2a300ff17f84bdb64d567300543aa9cd57101d8408d0077b01a600ddf2e804f7890902c2590af103d2c53ff03d9e4a5

memory/3500-1445-0x000000000A450000-0x000000000A47C000-memory.dmp

memory/3500-1448-0x000000000DA20000-0x000000000DADA000-memory.dmp

memory/3500-1449-0x000000000D990000-0x000000000D9A0000-memory.dmp

memory/3500-1450-0x000000000DA10000-0x000000000DA1A000-memory.dmp

memory/3500-1451-0x0000000006150000-0x0000000006160000-memory.dmp

memory/3500-1456-0x000000000E3F0000-0x000000000E3F8000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\tc_games.log

MD5 d0084e931ed44f4ac5f95fba767564a0
SHA1 ee31031eefc1f438ade20367fb722d1f55bf0838
SHA256 62cd4686c167da68417ef404d5486a96217176a6e7dbb5d8c828d7dd23e4cc6a
SHA512 9780c908dd53726e2753b0affaf7af8da0b7783ecba88716894bf0a1f5ca8f04c08ff731a6791734a19462369a2943327a9f99a4adb66461a8efc3b45e5a40a5

memory/3500-1494-0x000000000E460000-0x000000000E482000-memory.dmp

memory/3500-1495-0x000000000E490000-0x000000000E7E7000-memory.dmp

memory/3500-1501-0x000000000E8B0000-0x000000000E8E4000-memory.dmp

memory/3500-1737-0x000000000E920000-0x000000000E944000-memory.dmp

memory/3500-1743-0x000000000EC70000-0x000000000EC7C000-memory.dmp

memory/3500-1749-0x000000000FD10000-0x000000001023C000-memory.dmp

memory/3500-1751-0x000000000FC80000-0x000000000FC88000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\cast_setting.ini

MD5 664474bb332eba0448f233b48868aaa6
SHA1 966a9ece2724937ae0f9f0719870898a55c3892c
SHA256 871c4d0f71d5c20d1c6c419db31a6ed6433222a8f53e26b6ef9a4382ac039c9b
SHA512 e0028cd563db7ebc4f864fa67dcbc970ac1ea29ca1a6ae947fff27e6aa57c5fbc294406d1d33e615c025401f7d7c62e0eb808ddb54adf7eec96d732c59d0838e

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

MD5 d72cdc236c4ccfc07cd2f062b3300f8e
SHA1 148c954524474489a90c1bae38f602ed91ab966c
SHA256 bb2fb6814a5a6cab8f57ecbfaf73b61c0b3310bc9845ae14147f5c24af651ee4
SHA512 925a27c86cc0c6b19a023155c22c59049e261dd4a48bd5ee7d938b38aec0b1f03d509aaa7f7856f5d132dc70a47a6319b5e2d3ce1a7c0309c99342eb364be6c2

memory/3500-1783-0x0000000010450000-0x0000000010520000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\flag\information.properties

MD5 f121a575f23c09a5089428e19c66fd9e
SHA1 2e0b533c6478ad28062b28ec5e7ede16504515b2
SHA256 d5c7b4d1fea722d87219f94cbab0c44b4b29dc6c96837e861e265093d2c4d801
SHA512 056361db0b3248aa66ca17f8091e25e8cff7492d5478485d8dbdf4fb9a24d3776a56c4eb1f7d81b6e0855dbadb628f80a21a137edaf32c65c2eb853cd51f1b54

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\ip_monitor.log

MD5 94ca7f7d242faeaaf641f92736b609c3
SHA1 f7e66b774504e9b248e9d815098919d916d60518
SHA256 a438a02bd544059bc5dc3a84deb1accd88615695504d8a2ebb8ace81e3d42e82
SHA512 765124d93a9485be7abc0d7aabe34ea9aaaf268b7e7fa52685596f3df289284e5a27e3dff70e4c7627763e86a1a5f24e3753a68691df9bbfd3c94e759097dd40

memory/3500-1816-0x0000000013CD0000-0x0000000013E2A000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\help\html_international.cfg

MD5 45fa5a4110cc3febd35b997a26346cb4
SHA1 c8e8f712acdb0f088f6b87d58c550dd331681cfb
SHA256 0c33a008e7b99b7e45c5d96c8b2ebb484ca372540ed9b896e47ca26881551eb5
SHA512 a4fe820b8ebebf6935ba04da0805b7453ed2ec63b01643381bcd3c3dd664ac48f92eaf4e7e152e7f63e33cb9c78756fe6abdc9c872f3e68306e1cee8ab32446b

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\settings.properties

MD5 f5336f27434b72b4cd3a9f69aca11a76
SHA1 e0e835e1ff66fcb40c8504d13bbea38a74137d68
SHA256 53c8b7795e60a5715ba76c09e2adaaee77fd8da86167f0d55819407c34135ad6
SHA512 53730f046ae120a118bb51dfee4e308b7232f51cd0c0005b916468f6a001f59eb71c4b9db067b89f5088121c7ee332c115a357d1616cafb4e0b53565167f247b

memory/3500-1839-0x0000000015320000-0x0000000015938000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\resource\config\client_setting.ini

MD5 5e714936a7137ee3aa0def4487ceb646
SHA1 2500318fa670d82f6712baf859e7bbe001a6d13a
SHA256 b567254c7ef8c09eb1f7703a3f487db3ed94e54186b6882710f332d345df0c86
SHA512 284f2fc80bde3ae0e2b95feb4582296a166b3414588372bf38c4c6f9b7ea6ebb836998d34163a74399c5c944f2824e340037ed59b293e9ef740d2893e5289980

memory/3500-1919-0x00000000151F0000-0x0000000015202000-memory.dmp

C:\Users\Admin\AppData\Roaming\Sigma-RT\TC Games\log\DeviceManager.log

MD5 48573adee64145b224ceafcca03aeea3
SHA1 a4e89058eb217efa8fa4f3972243e56512455db2
SHA256 239a3e5f1485c3c2e7f4297060c20ab35d6da80f7ee865be4f69417809862495
SHA512 7f615d5fd8996791513ca002507a4f3cf9ce0b4fededf44f9fc28e645d3f70e64011013eba29e84ceef0cbd80f93a589af8c6a7d15f7cb17d7cfbcfa23157fab

memory/3500-1920-0x0000000015250000-0x000000001528C000-memory.dmp

memory/3500-1838-0x0000000014AC0000-0x0000000014B9A000-memory.dmp

memory/3500-1921-0x0000000010DA0000-0x0000000010DEC000-memory.dmp

memory/3500-1924-0x000000000DCC0000-0x000000000DDCA000-memory.dmp

memory/1040-1927-0x00000000009B0000-0x00000000009B8000-memory.dmp

memory/1144-1929-0x0000000004CE0000-0x0000000004D8C000-memory.dmp

memory/1040-1928-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/1144-1935-0x0000000036900000-0x0000000036901000-memory.dmp

memory/1040-1934-0x0000000021000000-0x0000000021001000-memory.dmp

memory/1144-1937-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/1040-1938-0x0000000005450000-0x0000000005460000-memory.dmp

memory/1144-1939-0x0000000004ED0000-0x0000000004EE0000-memory.dmp

memory/2220-1940-0x0000000003590000-0x00000000035A0000-memory.dmp

memory/3500-2034-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/3396-2035-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/3396-2037-0x000000001B600000-0x000000001B601000-memory.dmp

memory/1892-2036-0x0000000034D00000-0x0000000034D01000-memory.dmp

memory/1892-2038-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/3396-2039-0x0000000004AD0000-0x0000000004AE0000-memory.dmp

memory/1892-2040-0x00000000052B0000-0x00000000052C0000-memory.dmp

memory/3500-2041-0x0000000006150000-0x0000000006160000-memory.dmp

memory/3500-2047-0x0000000006150000-0x0000000006160000-memory.dmp

memory/3500-2049-0x0000000006150000-0x0000000006160000-memory.dmp

memory/1040-2050-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/1144-2051-0x00000000740E0000-0x0000000074891000-memory.dmp

memory/1040-2052-0x0000000005450000-0x0000000005460000-memory.dmp

memory/1144-2053-0x0000000004ED0000-0x0000000004EE0000-memory.dmp

memory/2220-2056-0x0000000003590000-0x00000000035A0000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 53ad6fdc9b74ccef6b7d073207ad2ef8
SHA1 6d3727f2ff56862ff2960aceca13b7c71d38ec8e
SHA256 b140da58cc8a7f2cf792056123ec7673d4c46b76c9e0653a319d631a60b64381
SHA512 879d5775718620c79b07d77cf957fce6d0a3ab209eb9fdd9325af683c5e9b4af6720b19663afb0467d160d66119e6fe520a002f8eb5f690ec3fb20ff4691fb8f

memory/412-2064-0x00000000740E0000-0x0000000074891000-memory.dmp