Malware Analysis Report

2025-01-19 04:34

Sample ID 240812-rnv8cavcql
Target https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe
Tags
defense_evasion discovery
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Legitimate hosting services abused for malware hosting/C2

Drops file in System32 directory

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

NTFS ADS

Checks processor information in registry

Suspicious behavior: EnumeratesProcesses

Uses Task Scheduler COM API

Modifies registry class

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-12 14:20

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-12 14:20

Reported

2024-08-12 14:40

Platform

win11-20240802-en

Max time kernel

1014s

Max time network

983s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe"

Signatures

Downloads MZ/PE file

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2984 wrote to memory of 4000 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 4400 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4000 wrote to memory of 2552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1996 -parentBuildID 20240401114208 -prefsHandle 1920 -prefMapHandle 1912 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {da7cf7ff-549c-4fa6-ad41-017e9eed965a} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20240401114208 -prefsHandle 2328 -prefMapHandle 2336 -prefsLen 24598 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c21b0629-8c2a-474d-b2d2-1bda965101a8} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2820 -childID 1 -isForBrowser -prefsHandle 3216 -prefMapHandle 2736 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1340 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3c33fb1d-e472-4251-bcac-15b80eeba695} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2768 -childID 2 -isForBrowser -prefsHandle 3644 -prefMapHandle 3640 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 1340 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54754471-dcd9-481c-bfb2-725693b5aaca} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4868 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4804 -prefMapHandle 4800 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53937d6d-70a9-4373-9834-e29f2da61a3f} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5428 -childID 3 -isForBrowser -prefsHandle 5424 -prefMapHandle 5420 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 1340 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0bbf1027-5995-4749-b105-0f45cdeed2e7} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5648 -childID 4 -isForBrowser -prefsHandle 5568 -prefMapHandle 5572 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 1340 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0e4597d6-f946-4c2e-b199-8cf250543793} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5776 -childID 5 -isForBrowser -prefsHandle 5852 -prefMapHandle 5848 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 1340 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {15504002-bf45-4d08-aa5d-c38624d3ab99} 4000 "\\.\pipe\gecko-crash-server-pipe.4000" tab

C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe

"C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe"

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1812,i,16900582612729507702,14800942350732262284,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --mojo-platform-channel-handle=2240 --field-trial-handle=1812,i,16900582612729507702,14800942350732262284,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --app-user-model-id=com.rattleshyper.trafficermc --app-path="C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2336 --field-trial-handle=1812,i,16900582612729507702,14800942350732262284,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2952 --field-trial-handle=1812,i,16900582612729507702,14800942350732262284,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe

"C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe"

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1820 --field-trial-handle=1816,i,15698900415389450359,975806307270726947,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --mojo-platform-channel-handle=2256 --field-trial-handle=1816,i,15698900415389450359,975806307270726947,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --app-user-model-id=com.rattleshyper.trafficermc --app-path="C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2320 --field-trial-handle=1816,i,15698900415389450359,975806307270726947,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2396 --field-trial-handle=1816,i,15698900415389450359,975806307270726947,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe

"C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe"

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1748,i,17339681863776180946,18113523402187567447,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --mojo-platform-channel-handle=2332 --field-trial-handle=1748,i,17339681863776180946,18113523402187567447,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --app-user-model-id=com.rattleshyper.trafficermc --app-path="C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2352 --field-trial-handle=1748,i,17339681863776180946,18113523402187567447,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe

"C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\TrafficerMC.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\trafficermc" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2972 --field-trial-handle=1748,i,17339681863776180946,18113523402187567447,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8

Network

Country Destination Domain Proto
N/A 127.0.0.1:49783 tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
N/A 127.0.0.1:49792 tcp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
GB 88.221.134.209:80 a19.dscg10.akamai.net tcp
GB 88.221.134.209:80 a19.dscg10.akamai.net tcp
NL 142.250.179.174:443 redirector.gvt1.com tcp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
NL 142.250.179.174:443 redirector.gvt1.com udp
NL 172.217.132.201:443 r4.sn-5hnednss.gvt1.com tcp
NL 172.217.132.201:443 r4.sn-5hnednss.gvt1.com tcp
NL 172.217.132.201:443 r4.sn-5hnednss.gvt1.com udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
US 8.8.8.8:53 mcminev.aternos.me udp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
DE 185.107.193.96:60181 mcminev.aternos.me tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\pending_pings\35fa3721-4ed5-403b-bb9d-3913e484f0a4

MD5 aab2b306128fbdd51e4da45ff47d9055
SHA1 819acf2c7a9f2b438439ed46544208914ecaea18
SHA256 87990faeb34c6958119eea3a8565a19041d0a716a05c79ca2a956d107f42eb60
SHA512 db16d97a2517d4d205b3b683ce7f6d3671d734e9cc99ba758295e9f644c5c6e4380d1f49246d80e89707ea6d483e17ed87311ddac7dbd7b188678295e1352046

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\db\data.safe.tmp

MD5 9788ab631a5c92c3e8c48d7522be0854
SHA1 50afa9abe49baa8fb8800139fd452782e0b06435
SHA256 7cc4937036c3207b1258a3ed7f8eb6c3701019db4e8a437420711e7ea3b8f2c5
SHA512 6d3715d8b4ac46083734e6e1fb54531ed3dff297ea17a20bd031f7d146d48c765e674bd9dc5fb5c4f6319d33c372842f74f58a5d705731576e119a6be36f214f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\db\data.safe.tmp

MD5 7c15ab5e3ae4c33f4724d9cc62d6e4c3
SHA1 eacec413060cd627f47d103b596dd08dd31f5fc1
SHA256 0d2d8f9dc0bafde977c63aa99ac7ace6470ec50a1fde30ff04e88a031d442f5c
SHA512 135e43a04da0f642523d9a5c61c6d37dae5cd9560578e272726abe24b0ce7ec108f91502d4f7ef286f94843e00ae47adc00b73b1bad28b7958111561e6800286

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\pending_pings\f547c3ba-6269-4039-8731-b7c2cbc08e1f

MD5 6ae145422e85df5aade509858b8b4f5e
SHA1 1f0e344c5746d9c6bcaac0d6553a0ce55fe2e92b
SHA256 b241e27c9d5f268d5b2aeb61f5a478365ab9443c97819b3e8751930b6cec8e28
SHA512 2bab5e8b764392765640b585c4e8ccdc2a02f71e12e25020271fd06ed5821f9939a228509228056565d6532eba5d7afdcc1e0e977608511e960061e176cc0b84

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\pending_pings\dab0d200-148c-4359-8708-36f054d09666

MD5 a166230976158de9e21acf1b39831e51
SHA1 7418f916f049ff79aa84e8480af669897afee969
SHA256 50c88e300bdb169a8f96ec8c12b211d6b48a0146670720475f1a33736a30185a
SHA512 f8806d20396feae181e9b960ee1b918b31bdc9f72cd49d585e66c99b18b2471331e3fe6dc391f4c8aff3f04c16a36616578b9ebe3ae730d71c87797321169073

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\pzaexue0.default-release\activity-stream.discovery_stream.json

MD5 5973c8202b3293c8c93f94e884baf00e
SHA1 fc2c7345582cbb8bdd87dae36079f3d704a46179
SHA256 891afcbcc76596dfd984aaf9852797447f0085c22d20f2c17b31c17a1d36c41f
SHA512 ff96e6328d114dda3291592d0023bfba9914c03d9e6a39d36474a6c67c38212534c8b6cd5a89a669b5e9feabb32e6ae9d6f667adc670bb1b914c47bf89e8477e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\prefs-1.js

MD5 03c0921af840833efd1052d2dd015ab5
SHA1 834365735711abb605efc57d97b9e770dc305078
SHA256 44ae5c603382885c618d8a532e28c4012363d390861c4a9aa38f85e8f16236a6
SHA512 fd6e1940ecda43ec3b9d13f82f05674ade5c4e67c0382735043657e300f592fa833fae87940fb3b0e22de4332fe57091e5a6fe8609590bfff5d1327a27525c0f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\db\data.safe.tmp

MD5 d9886195c5450e5179eec162e082c474
SHA1 2525685cd4a8a8c1da9995ba50204ad4b0b16a2f
SHA256 a6cadeef10089a7037f17af037c29054019c9f4ac7d1fb5b6d2ddfd5919d81fb
SHA512 eeed03ba84d11ec3e746fd1eea544778e3f6e740b522517ccf0d77e85e2a3e2ed5a8b3231ef2f38ed5cd2491d8afd2ddd7fe355d893b67994e7c4958c7e175b5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\prefs-1.js

MD5 f893d1935a6096ce9549e737b32fc45e
SHA1 9d6b6a8c91b2a6c3009f85aed3c3a5b3b68b1bc6
SHA256 fe4c4d33756be80bfa0b6c3c9c00b3d32ed460855490b1a772b6c8a08e051202
SHA512 56e2def5784eb8b257a4d54699fe31296f444811cff0b2d1b3f1b38b3e5e96fd7826a48e96b70054d27a4699605f34ae09994a4c5664e0f59c661a7340bfdabd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\pzaexue0.default-release\cache2\entries\E449899591A9BC91DFBA673EC0589B51E541A88B

MD5 61a2110c1e55fdd12cb05e4b7df909c0
SHA1 b3e90f15bf16da22163d5c6c6d06d96d0f006436
SHA256 04c86a404ce005b2e2debdc92cbfade58db25222261e9a1b9fa36bd947dfd0f1
SHA512 638e7e78073aa52448ec681cfe80aff6c5bac374183478bd8e18120e3cc0a3cb6adc1836fccd748a81f62709a869ddc712f5a886d62f674b9a063b48efc32230

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\AlternateServices.bin

MD5 bc7a7dd864e1ca3c55c0a9f33c9a189f
SHA1 c348a03d441b1fcd4b8b29a95d23990bb579c93c
SHA256 a9612768fdf3914a7668275c409f8346e3cb7f672df517577098a81bffa34b9f
SHA512 eb7c747ff2298d4b820575c2f27f4c02b3203dbc23c4bfe9d291fc0cc10ee7f26a1b95b5ec5156ffceea3d1341c41eedd56a2b481639a6f763d86b1aec375bf7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 c925a48b72c5342e1d37ce97a92e974f
SHA1 b95d75bdcc5a1f14b6e8ab0f33f5d2324a0f4f2b
SHA256 69c87b1cc9fcd36e70f38cf82e3fd588590d3b0cedd9130192c64cb9ae16487a
SHA512 0495e3521150d4b2ebaf82b15df4c039af82bf503c50efa5e6114439a6b3489e3f2dcf5bc4e817f3605bf890bc32e6717a0124e390422ea4e3ddd1e5e1236a40

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 0b3ef07ff6ba6101e68f09c352ae053f
SHA1 fff47ee069a3b870847d78075fe9ff45f4548de3
SHA256 eccb29553df9f808d5dd840db091888cc8f91ef891ce8a47bda47250d06102d4
SHA512 30220ebcf2a7f9adef8ae7b5c3dee325aefcabd64749721036f954a8734d0f2474055172897d1a9d1acc92c32507918174b80569d8fa798cc543f51f0be3165f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 013fae7d263a1ecab38289f46413ec31
SHA1 ce754000f3a8543774ba130efe099ca3b3bbd38f
SHA256 417147d32be3e1aca87dad1476c7f951c9cedd90eec3b15a1be99f2e0940466a
SHA512 56ff2d2ea45617076c64b88604b96b210c25c280909be634b050b22779d8a7e4c4b41e321261784d6bac26d2641c21dace6941f098e11443888d63a8ad8db309

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\pzaexue0.default-release\cache2\entries\3A53EA1C2F6CA773218F4FC05FB3BB3B6E79806A

MD5 a9c7946dc33a864a907b6ec71dca356c
SHA1 9fa1e2cbb8aa7468f4b183f34365e83e621bfb5e
SHA256 933cf89722a39c2adee90d8b9a056a548b5fd8d8e0235f75edf06f01e9a87677
SHA512 996f7f9b48a8dada9932352aa1c0983c59f27ad12e743eb328236d21a53e538460d65504756219596bea73eb6d64d50b06f5ea3f827387a537a15bb15737f447

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-widevinecdm\4.10.2710.0\LICENSE.txt.tmp

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll.lib.tmp

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll.sig.tmp

MD5 36e5ee071a6f2f03c5d3889de80b0f0d
SHA1 cf6e8ddb87660ef1ef84ae36f97548a2351ac604
SHA256 6be809d16e0944386e45cf605eae0cd2cf46f111d1a6fe999fec813d2c378683
SHA512 99b61896659e558a79f0e9be95286ebf01d31d13b71df6db4923406e88b3ba72584ef2b62e073b2f5e06901af2c7d1b92d3d12187fe5b4b29c9dd2678444f34e

C:\Users\Admin\Downloads\TrafficerMC-3.1-windows-x64.exe:Zone.Identifier

MD5 7d025736cb52d859da16e7aa3fd3d1aa
SHA1 4b9dff0e5a74850299a233cb0b99be7102006645
SHA256 bcb85da526af19fd968d95e47e999596696b34a907469ef3284cd1d864b03fe2
SHA512 0bdde72cdef059cb574be256bf9118e7e98c99c086aa7d90fadb8805f74fa052948ee1b3b0eb51f972be28bcb35d24f87e1618b1ac64d9b68c60c0fefe8e6ba0

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Users\Admin\AppData\Local\Temp\2ippFodBfUEKs1Mexhf5rV5XTud\chrome_100_percent.pak

MD5 4fc6564b727baa5fecf6bf3f6116cc64
SHA1 6ced7b16dc1abe862820dfe25f4fe7ead1d3f518
SHA256 b7805392bfce11118165e3a4e747ac0ca515e4e0ceadab356d685575f6aa45fb
SHA512 fa7eab7c9b67208bd076b2cbda575b5cc16a81f59cc9bba9512a0e85af97e2f3adebc543d0d847d348d513b9c7e8bef375ab2fef662387d87c82b296d76dffa2

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\chrome_200_percent.pak

MD5 47668ac5038e68a565e0a9243df3c9e5
SHA1 38408f73501162d96757a72c63e41e78541c8e8e
SHA256 fac820a98b746a04ce14ec40c7268d6a58819133972b538f9720a5363c862e32
SHA512 5412041c923057ff320aba09674b309b7fd71ede7e467f47df54f92b7c124e3040914d6b8083272ef9f985eef1626eaf4606b17a3cae97cfe507fb74bc6f0f89

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\d3dcompiler_47.dll

MD5 2191e768cc2e19009dad20dc999135a3
SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\snapshot_blob.bin

MD5 d20922aefcad14dc658a3c6fd5ff6529
SHA1 75ce20814bdbe71cfa6fab03556c1711e78ca706
SHA256 b6bea91727efb8c88e7c059856553d3a47abd883e60dd60efc01b04dc6eec621
SHA512 dbd63a9f01feb3c389c11b55d720b5d689558626041fb1dd27ded2be602e5e2a8d210f785fde025d7b9959f81de3df7fef06981269b58be564df05aec190dd1c

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\resources.pak

MD5 0e69910860463d5045ec257234bd8dd4
SHA1 33c923c33129d1dccf0bb2dcbe8af983a7000444
SHA256 1d241f5d4403a6e802e898c61e4753f8508ae4dda8fcb7750558ec1ecade52c6
SHA512 f6bb7c7b51bb202877739801498522095637caf8a03e2e1f2c6319fede3d3ca656f552061e171ec5e35e176c267fe278c326805d760add1371590bed58e12375

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\LICENSES.chromium.html

MD5 1ca87d8ee3ce9e9682547c4d9c9cb581
SHA1 d25b5b82c0b225719cc4ee318f776169b7f9af7a
SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
SHA512 ec07b958b4122f0776a6bded741df43f87ba0503b6a3b9cc9cbe6188756dcde740122314e0578175123aaa61381809b382e7e676815c20c3e671a098f0f39810

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\LICENSE.electron.txt

MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\libGLESv2.dll

MD5 57c23aa2c39f11528e56a48ea1824036
SHA1 d4fbf180266eb210f8d83360cbbd3804249c60b8
SHA256 ee039e42a4948e9f26ece8515f3c699014fa7803ae597cd3427fa1548962f9af
SHA512 77487060b824cc70b30b30b144b8f174fd08ca6a298fd8c8f45d8417b90b7914a0d135edab39d6a5b2b883d49e9386da382a9ce5c52dc07ecd147f49118efa63

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\libEGL.dll

MD5 5db499ae909083620e47eeea1623b2af
SHA1 bc23303d6885b8f5c3fb84b3fecdf1a678e94a25
SHA256 7bee4e33d89e5a4f2b3bc74d632f7c773ae9a399b6b2ba6d29b1192e25695a8b
SHA512 d656bfa6d59c495d85eee872b372f7fba24f89101c38de1de904ece0d9ffa6eb93de81fdf674efa5ef724ea73188b908b8ad32cfee03c656accb835683929311

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\icudtl.dat

MD5 e0f1ad85c0933ecce2e003a2c59ae726
SHA1 a8539fc5a233558edfa264a34f7af6187c3f0d4f
SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
SHA512 714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\vk_swiftshader.dll

MD5 583b1d71cd7b847ba02d734c508cd92f
SHA1 d63966aeafa951d51967620c606e9b97399699c4
SHA256 680ea3717671c896d516517ff322976ab708f18862135be4216a27ad57353dcc
SHA512 cbb0659ccac9344ed9bb151443a30c106711fa1b15234e6f1225ef28a679c6b3f0a24a6ca1d9baff46155c39ff4e08e3ac96e1da32d665be9a5728956012f193

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\vulkan-1.dll

MD5 47af18d68dc7cf271f0a92707f783f64
SHA1 64594e92a1cd7042cf6367b1843abed210db3d78
SHA256 d5df2f59cc8b32abd6178250e7d1370a7f37270cc727449e21778080b5e29cd2
SHA512 2e8fefeccc25e5fcb448fd874f99b8d1466a8148ffe80e1f6ac2105d18bb93e529681ff0ba38e515f52ed4df9ac091fee0782afe5e093fd83c3045a60409fc10

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ar.pak

MD5 2b2dfafb0d258c1d2b58e51ae1ee9ab5
SHA1 2a538491ff4023d29bdf2a053447c6016138d9f2
SHA256 ea49bc2ceb6b185030eaa0ee0155feca90e632390417299113b02fbe365ff731
SHA512 6b629ed83edfea1b1ff3c379009332e413c420de651a24160fae859e1e0948fbebab99c9da714df6dfad3b9e472dece7bee95815ceca428183f4ac0bd6d42ff3

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\kn.pak

MD5 59e6642f09ce97cfa4a4173413a1b036
SHA1 777a96a4aefbe138f26c8697e66633452285eb2c
SHA256 58d16195170f76e40e18ee0ac2e10e1b73bcfd083821158927a7d67a51bcbc42
SHA512 66deb67a4ce1914f5f27bb6423e5be62e05d0a36320accbe653572a437ce033ed5d26858a62d8c57476b34e1718d580f34ab44a3886d8d22d17f642d70f0138e

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ro.pak

MD5 938e62fca60d7b54e9c54cdd1f745f06
SHA1 5a61a1ef3ae855ff436c5d7f45b6ec271a5228aa
SHA256 82e69f505222125ea62f8e90d8030d82a1bd49871192cb4274a8fd9d0e03d577
SHA512 d3f43881fc951c961cfb34babaa6eba2aa9175865dc07542dc529ab1c11d15703c03a7e8193c004b004d13f0a0672bccb2fcdd1cd88f32add159c337281d6d5f

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\sw.pak

MD5 9808a9df2da0844b1ce1a2a4213c48d0
SHA1 541f24f006ddb3361ff1e5015f097ab799120fc4
SHA256 1949953d638f266ce74d84c020174c074780166b880e7c2ec38bc6047bbb8ecc
SHA512 66b256e02ce11ea0273cc5bfa78e56faf8b250208d1e868bf4af77cbefd1c891708573d63873a5d02436f884544a6550176afcd3a8220cd35d64b88987e94404

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\zh-TW.pak

MD5 1eb532e97b84db33a50055bbd7d36200
SHA1 7aaf0560a16a9754059871a000d237964f3ab0c8
SHA256 6a43c8fac5a0ce7c7a21b30ac7bc2167488e17c81c76c00f0b92b49e9e46e469
SHA512 c946d82bd6ced6e61b35acaf7ace1a61f226c4891caaeeeec9ce4a3ab45e6f43c35dbb388d6d5fa925ed020d7d10f951fa2048269d0585ad3b723f5ad8f4eabc

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\zh-CN.pak

MD5 d1145f2dcb13c5ba797df5a0792553c8
SHA1 e8d9604300d6413fc896d252a0261be2dfdebfbd
SHA256 6a9a1f5b7674da36f20cb76af7e3e75e9e56873539e8a3b32895ebba439af83a
SHA512 f54adffc7d40866fd53dbb238687116d46354f79580877b5d4d93840494e604deaeaeb7e825f6a00d020f3c58d1fb9df8af667feb64c86f243ecab57765623e9

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\vi.pak

MD5 e088be14dded779f50feabc4906d5ae7
SHA1 0eeca2c7ea82a03b6373c84adf1a890f29e18b05
SHA256 25aeee59775ae38b21a091107022312fc228f96dbea906042bf3626b7cf86b98
SHA512 af9d1e415a6d06c28df9abaae1f337bf4dd3e323dfd5560df5fb35d01c6801b9145072ee85ab4c524c489fb6cdea956ce327b8c4f6820197d76fc2f33171ca3d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ur.pak

MD5 29403f3d5c8f6ae2a768de2fbe8b368e
SHA1 da83015565980ea1a24f5493be6311f06427269e
SHA256 2520ba8471c840aa075075524c4ad2bde10f43fa7a1b623aa14555180ecd30ef
SHA512 a0709280adec39633ca19daf9f8bac6c17a999101246778a63cd9e172dbea2f281b20ce197290c4af6c7601ee7956da42f17e31461a1bd8b8a4bce3c36dc87b7

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\uk.pak

MD5 83e5f0092b6d72403b60fe0e1e228331
SHA1 989ed480b7ef55dfc9ccfbef1a5b9b0e104693d8
SHA256 29d68d90512ee9952635c7e074d5ab210531d93ae24c11a8f91bca20b685e9a2
SHA512 9895928ee516db7d4395b2788135a814031b9ba45e3a837e633bc253b08d6f380e4078d4d3fd51ae37502a39ff45a0166969fb62365e890f4960a51040b20941

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\tr.pak

MD5 193f0c0a8218f05657e2590ea4ee6004
SHA1 dd3ffd7f67f72de879903a231271c20aee56f695
SHA256 676d46d19d1673eeff4f5e908aec3b53a6273c440e69e7d655ced6c70531cb9a
SHA512 28606d710d44c9a82c2849fa5ef989bac1afab53cdea99a825f80aa41dbd38a9ad6f0f44935f45439922ca2bdddc89c61f8ffcb999aa13fa45558551d5216e1d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\th.pak

MD5 a4d1594635d26330ace7054bc025b76d
SHA1 bc4874a6a3b1d1886f05858ef2f653ab3520451c
SHA256 f06a45f0395c3e42e42c46de2c19a2a104661b47be6f9ee97f8c68b05706ef1e
SHA512 731485b139ba0ed80dac5e582ec36f53a805a867ad33551741b805e851a9d2356fb1894232395d4fdb200defc988bcf6d51e58834b542c398c1012e389953a3d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\te.pak

MD5 d262c33a8c2b4949dff36cc1980e5f05
SHA1 e1ad725c388c4a1a386b4ab6170601863c943c29
SHA256 09ab1ac2b69f868539d4f2e59dfea8c3c2f418a5455777e4c91d13c5ee55ab4c
SHA512 0202f6ac32878926422d542ea96b0bcf8b168f8ec6b928121c368711856fd5f4781a24b15851cdb5892246b355d0dd37504d4599b24e9fe8a723b8dfbfeed29b

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ta.pak

MD5 d50aa6815b63aff8c443622cb8bfd849
SHA1 fd247855e6e428109e7bf2e0018580cc6e0663c8
SHA256 6348cc2d385b9808fdf1b815914dbfb26f552da4d10f85b2613a5e6e9f95b8fa
SHA512 620e2f9ab9998c68d667e32ad9bbfa2569f7a60fbc2a67d7492c6c215af2a1037708e38b4ed7932074d29a140581fe0ffedddb362133a941966044b98eaa50db

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\sv.pak

MD5 a813b566c9e630910e6ca946defb7202
SHA1 2e25d2479715a572c096ce19b8dfd7a6da5339eb
SHA256 48a71912e4843b03358fede7176b2e57ced83d3a1344a92b989886374dbded62
SHA512 b348404135e147cef93c246c826107f9df170b294e9d0cbf576d2812d0ff3d2b7794ab5aba55cf729fcf7135a495d2ff591db62fa61e2998290ff02538a0e48c

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\resources\elevate.exe

MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\sr.pak

MD5 5d70a218b7dcccab0406fa9239ef800b
SHA1 cd231758f84a0d56545d0a234a58757a18a58d0c
SHA256 a2bc6b064ff1f7b15707f61bd76ddd9d889bd982c4182e9e74272d39c6235c85
SHA512 ef6f71e0d9782b5ed6706d9226c1a7fb5a4323b8dc8de25737c7dcca87d04c16b545372127670de312079be993823f565de1aaaf5ad833bec5baa0856c19b0f3

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\sl.pak

MD5 ff14d5f9484350396780bea7f3bc64ec
SHA1 de097f12b70b552824de69141d6ee1969275eca4
SHA256 b174c4c49654f7d65d223568c700bfaace74238447ae63171787236ce2aab00e
SHA512 011bcc3980d21e0900d1da334a28b72623b22b527a4fc3d96a8f78fb055dc87cd1433a63d8b4414a0a86cf2ded5833a395214910b17433a0545e04d1ce4875b8

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\sk.pak

MD5 fd001b1b02597bbf16baf3f0baf3c6e4
SHA1 e4c703fc115e02833fe08caab1e62775b5812473
SHA256 f9cd222838721a618c23c8f6493bc9699c795c0063998f1a8d506b4b7a297cdc
SHA512 0ee991da6b8ba1bcc3cc27abc645af43bb93edddbf182496aafeeb401d71ae10716335ee0197f1987c21b3abb441aaac968b9a76e75ae77fcba4cc48847f5b1d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ru.pak

MD5 9ef6fd52dec5613f9e80204a84c7f2ba
SHA1 fbb8c9db815126fca3c62c810432a71b6965f2aa
SHA256 d0068b9ddf8a9e6a5b1186bd0e00ed9f09224ed56ba7e653e2d54158d938c6f2
SHA512 0fb442ef86f75ca2cf58a677bd25ffb7c420f98250fac7f5f25e2272d4e7dc505a5f3eb3665b62bec189496154b05a1462b6f17a0e9aeafc1517b71e2d813953

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\pt-PT.pak

MD5 4816d83e54beaa2f94c671d56361c04e
SHA1 5cae66c0b7079d778ac87ad48777afd85b172d2f
SHA256 a903ca2a8e52f987e23d040de7403b58d925a6c39668d3bc0822fb2aadd34cb1
SHA512 0d3a39e1205ce9366818cb51d38db035b80448dc1e2d2d6bbd7d5df693641582043b45b4a78bbf2334159616187dc85a51e623bb6878b1498d9bc7acd2a6ffab

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\pt-BR.pak

MD5 8dabbceb430a6bc190ee344541fa8e2b
SHA1 44c7da04bac8c9ee67c8d6a0eeb491cf7ffd2479
SHA256 6d54f87f6c8b5e01bd0da9a961236344e95e85c3dc55fc92a34542777d6f6275
SHA512 4d36d527f1769501d1fce208738028d5ba142716a6243798212d5a2403dc5c950dcb3399e571cf3a11b1f35d845a6ba6798c38074d0ed66c894b1c18ab800159

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\pl.pak

MD5 7b5d41611b92b24ec8b36b66feb11f9a
SHA1 3d6c36f404c29d59a24970585931860453f5c88a
SHA256 69e16e41f5fe7fa18557b938874f20cda6879f3cc616ead9a815c1381fe94158
SHA512 16ba52cc799132e4525d220ed595d3969d4cecf163ccea6b62fe2211003b0cc44090c4d384e9cc4e32800181b7f7e0810da5a0d2c908f4625ff8382cfa3c177e

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\nl.pak

MD5 b525894276852be4ab42ab7044fa164f
SHA1 d3d035522265718def8125f5c4a1d3e74832dc2a
SHA256 c7a18764ca908ec7f66c48cae2be06fef95213d7a5580b45f9bacee474456167
SHA512 36b11f1df92df27b007fd640b589c6b7b30cd889bc297635bdaa40bfcb4332ff20911edfd23ce74c1c8963dd658f77bf4b9af50d3c281717f58eb23a598783bc

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\nb.pak

MD5 bf9bfdfab1479bb52254329d7aa229ff
SHA1 cd9ff35321731b839ea6e5f31f5de0bfb475666b
SHA256 96747543d9b2dbfb4482d4c24d7818d366545b2476633ad4fec8cc958ab760d3
SHA512 ba8e62d0a87c532ff46f2129724dd2f1bfdebd99c2606e0b9608cd07841776faeca15d04ec6241020c232d4c07809d718f40cf4ad9231d6a8996d55973486629

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ms.pak

MD5 d22cfc1b78320157685839f14253fa1d
SHA1 0cfcb5c176d708e26bbca2427be611ce6609eb93
SHA256 c7b56e9ca2f75b4414c13144ff4deee1459c2a7cde79730d863ab234cd4c2f8b
SHA512 2eed40c50a63e362dfe2f172d16e4545f5b19c673e71db674bb004e4e6a4cf793ed4a44ee80d86b05aaa6cc4356c207476afdedc2b35017421ea9b9fa6ebc81d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\mr.pak

MD5 f26bc5673e02a93212220d71cf1bbac2
SHA1 8d0ab40fc2b35b75f99538951acfbf6a348c73a3
SHA256 0877f2e75e0b9f5e709f0a0bf7cc793a02ff5bbb28bd6a8b6b6012760c1bbff3
SHA512 9f3a629dfa116cd92892d120f0fdecc5f57043dad232311bdc8c218ae9317f49e655b8b8dc8399639231f2321013190a667d22b6b2735bbcbc375c438dce9aaf

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ml.pak

MD5 b690b0f01954735e1bcea9c2fb2ac4e4
SHA1 8d98860e202b15a712822322058e80a06c471bb8
SHA256 83d187cd70048f4129fa65ba148c74a04a47ee1f14218e7c85b36fe83e87b5e3
SHA512 786f08019a0917d0b3f29aa2d1885db6a6f995990fd8faaf41a9630f8347b4d210a844cc6690a41b4af37d60e11f41fd2675df1a01bab5915e20cd9bc69b4541

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\lv.pak

MD5 393c296fabe0c4c64a7d6b576d7d2cf7
SHA1 16c0605e5829cde9738e1cd3344a59b74fa1f819
SHA256 91642c04de64f88a5c49b4eeaf5d627554e60d56fc40e7cd58cd2601b0d3dbf2
SHA512 067cccb059d4526c104880a26ebf04c7e2498c49c5641abdc91785e859bc0be1475ec58cae9ad1eb076f26fb9215ac246155e123baa13c06a05e4f22a002c2ad

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\lt.pak

MD5 edb2c872a4fec5367cbe68035ef0ecc7
SHA1 b4d42bcc83c98dda1ea2ef962d097f6fb3d25c71
SHA256 1bd385b780f3d13d41f8cf782a322e37be889aee273ffde3d8959e0ebcaabd0b
SHA512 dd801a1aac2242e3f532e968b4c9639a2c8bf3eccc17470d9aa8bd6730ae4be3e7276fb782c7908bb6f87d3ade20a40c644b9db5d2201d96d91fd95ebdf429c9

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ko.pak

MD5 cd2310448ba6689cc73d0b2e6dd2791f
SHA1 7827179d3fb98a5abc2ad38e20d942b83b397235
SHA256 cba6b7633cce796407821264e176a6266f80c1799ade16bf16893d68144236c6
SHA512 c3069bab640ae43856330bb8b3a0e0a4ca058a68a0fc03b8efc0ce1dc2b517f11380fbc641221e29b4a527d685ece72107fb83cdb9b539390eaf6a30c21bf36d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ja.pak

MD5 dfd5ab27c326a1e1f87943a3079a2af2
SHA1 3aaa73a6668e1249e4d51c8fa8e0c6868fde9da6
SHA256 8260f4c9500b64d541386a8515fd0c9ddef82e3f044951b7b51a33ad81c1128f
SHA512 d701674fb6e19bcdf297b19a9fe3b81c7f446019a8c2fd3e90e19294765b1e8ad4f0e40e4bac65b2db313a4f83eb050b5871ee4d74f9ea372208b7abd76c524f

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\it.pak

MD5 e0e5580e8882f0eae4b5b21e6c7828d4
SHA1 51e32e51458b5839112ed9dcaf500403c45ac1cd
SHA256 a7f555e7e797e1de1a66cfca8c7b709b0e542ca62e7de96e034701fcef316d0c
SHA512 1a2a4948a5538158e6dab7ca7b3b780ec7a66a0aadb889fd451e07b32336ea08b88b5d57759e335fa967f3b4bb1282e952b97e496d798758159c70eed2e5acb2

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\id.pak

MD5 6a406a9adb5c25e35c6838828ef30c17
SHA1 2a1ea1dcb75217ace04254644845cd038df6a980
SHA256 af63384cf7d1d39e57decd823dff7538ab2b1e7e36e9ac61238477f7889d1d46
SHA512 ac7afa288b768a730027db0780b0f7c9f42ef990e4e22751ef1dc85e4841579a6e252293fb04d61b0cb591ccaa5c74d37bbd380afa15308c80ea32070019a361

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\hu.pak

MD5 0b62fc2b60b8a92dc506550339766139
SHA1 abf0b1ae99ae40d87f86ee04bdba467674fc1039
SHA256 6ca150d0fc35492bafb411bbc520f3b34da6399969fa9685ae74201623882560
SHA512 aab6058e2f41282ac5a9394cdcd503efdeb6b9eb8b9a64cc1215e31a806e60a34966b6823f91a97bfb81656d91ccfef3a226165811e6f4208fa436e1d04c1242

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\hr.pak

MD5 d80178f9df2b72a24a7dc58b5aa13229
SHA1 cda864bbfc6935cb4e3e30a6eaeabbab5264d01d
SHA256 e442d083c32d752d1ef2225d84a4f1a91efab768e86fc63a7ed22c10fbf7e520
SHA512 c08380fc0c415a529a035e6e9c0eebc719766c656a3d9e3a782f21b4fef320688e1d11de8c3a5d0e59a102c9fbadcc960478a17c534500e137f4cb0e697ec9b9

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\hi.pak

MD5 18bdd1d8d1d5c6a5fb2678abaa1ef6a9
SHA1 e40602e86e758a518ec70bb6a9cfa23107955301
SHA256 1f49622ec6682c90e03fc42c319074565cf9d3532a2a4e3798e2f6cc159b2e8a
SHA512 c859118e7c1be0642ba9bb1112a98a8fa7114a00711f578971a55aab7254b1ee9bb3899c852b79a002596f29e02f487267aca7033e38cbfd14c90b2989b9595e

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\he.pak

MD5 ec16b50e6575cd6863df282847cac3b0
SHA1 a59e089951c3a5dcfac165774c68651055b829e0
SHA256 c3955c97b6998f1806f8871fd3137f6f504bdd091f8bd1ff5ab8cd089474ae8e
SHA512 3c640430e3391be156aab26f6057e966348dff50ea946a02db947e2316d3a915c29f329faa26725a90af4d06ead7c7fc28cfa7573033b2b9546fd8e4d2bb7ab1

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\gu.pak

MD5 a9e6d8e291ffec28551fccf4d1b06896
SHA1 adc9784433fbf2ee89bcfe05baea21beb1820570
SHA256 716ea0433e19edb5113dc8a25ae67c2587bc17c7fb63a93ac473bdcef8f72d34
SHA512 3a60002dc6a9008cac78bbc050fc36d1053bfbd21ecf4d0579b2780985d4e7a7aec94483d8b0b8dd7a899b8435d54a27bba68917a23945431183eda021722697

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\fr.pak

MD5 59e1e573153a209c56ae3bcb390b898f
SHA1 45f8a5469651c032c453b14bd68c85cdd6c75fc2
SHA256 976622fb851378f57f81423e5625e40d0753d7a5e34caed2c39e4b130a3427b8
SHA512 91f1b88ffb9f3362fbab7d607a68c4ca65e6b89fef7de0c986067ef7fd013c0ce35bce328ff3546cb7aafc296993e46a908ac506bb6a141088cfbc5ead948ba4

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\fil.pak

MD5 cbb431da002cc8b3be6e9fe546cd9543
SHA1 19fbf2715098fc9f8faba1ac3b805e6680bbcca4
SHA256 ab107369d45e105a4cb4f2f6bc8da2a8c1b6c65d5e94a7ab3e703e619c083dae
SHA512 3cabbfd021e5814587dad266c4f5c9f624e9d9278f22658dafd65ff2ad2bdc5f6df8a8672614b296cea826819211e12f8e77f183007c0a79075e2f0980b99911

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\fi.pak

MD5 a9fc339d49ea069bd81380ae1fa0ef11
SHA1 5f376072f38e94e252d72c5660d8120a41d73469
SHA256 e6454458dfbe150112c37f8b02f8c72c593af22e8be16980ebc854ad113fb763
SHA512 3bee6723485a9eae4aa9bfd4e7fb490ce7a0aa12cbe41443b8bd28a26fe552cd31f4a1487bd98c6bc7774df1ea16b1de94ed0f52af59baf9e17b3db815404c4d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\fa.pak

MD5 e2bee9eeeac231de237100fae0aa77c7
SHA1 5e5eeb59656e2f8f4f62bc618966d38cc06a385b
SHA256 7a856070430e3cfad15b96b153b1cb483cca9a1b9a43453df3707b09c748a3f2
SHA512 5593c4a48e679f0f6283c3bca69838f581b6f928cc7170737778458393b6b85fab0e6ca390bc5da840f4b79de9e638015bf341c1a95e8f99770886f5354ecff6

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\et.pak

MD5 e7ea23d6304d5d600d884f4e3b3cb2d7
SHA1 99fbef7eb1bde7df398cce9faf6c7c357769334a
SHA256 292eb18ec61502b0e952b447f73a66143c56dd95f170981945e5aab53a6b32b3
SHA512 23dfa1161d11faf440241b1f48f2ddbc8ec086a8e18da351734656551f0f54fe4c94b490c0d3ecc378a3de7f7713a1626a7a6c21da2500b9597b44fd08197d50

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\es.pak

MD5 d584992a0670c5771147c01266d17362
SHA1 d6e70e43585564d520e4b1777fac0b1e7bc6ed37
SHA256 f6a01c26bc18dcf701e1d4b6ff76602f14c4bb9adf9dd176c9107d5aedb4503f
SHA512 39db436a05955a3ad3b54ace4f2f0e8a313797d3ae8eda9cf1cab6f2ea1edba0a82c30f3b589b8c5399ed06e9fcf4ce9059d3d5a07472f05ab1f0819e42d5b73

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\es-419.pak

MD5 088de6d12071ea5cf8d4a618ed45e7d5
SHA1 f12a76d18b84b17906f5f8cfc78cbb370b026b09
SHA256 d1019c780e836e0c30fe01928d23ecdd0ca04ed8ee886adb3428e3683e4ed6ea
SHA512 8da7326cf99cce53d7ccbec0c177ff9cf6dc0009431d6c89b3e8f0475bbcd0dac4c888460b535c1070ced62f1bf1c614bb0fbe9c5583e66c42f30d6e025ed7d6

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\en-US.pak

MD5 809b600d2ee9e32b0b9b586a74683e39
SHA1 99d670c66d1f4d17a636f6d4edc54ad82f551e53
SHA256 0db4f65e527553b9e7bee395f774cc9447971bf0b86d1728856b6c15b88207bb
SHA512 9dfbe9fe0cfa3fcb5ce215ad8ab98e042760f4c1ff6247a6a32b18dd12617fc033a3bbf0a4667321a46a372fc26090e4d67581eaab615bf73cc96cb90e194431

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\en-GB.pak

MD5 a1aa885be976f3c27a413389ea88f05f
SHA1 4c7940540d81bee00e68883f0e141c1473020297
SHA256 4e4d71f24f5eea6892b961fcda014fc74914c1340366f9c62f0535e9b94ae846
SHA512 8b6d67e09fbe7a2152a71532a82c1e301d56cdde34b83a9f17d9f471e258b255d5b2d4a0c39f38581da3a31cec24fb403156a8e493560d7206e1ec3db7e68b72

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\el.pak

MD5 16bcd10bc81dd8a5b3ad76c90cfb9614
SHA1 240395860971fb9205d28602d4d4995007ee5c75
SHA256 6a06d1d6b566214f7c3b693052beec488f7aae5ceeca26781a5d66fade39388b
SHA512 353a26b21848f4dd30b3aa1f4196b23571e177893ec6912db4570493664ed987e688fd66c04e509ecc58233476ebe59453260bc3569136f275fcd681ae54a174

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\de.pak

MD5 141045fc1f94f93e82db06db4f7321c8
SHA1 d63d226c531a710359cb65f4e6aa190f593b4d54
SHA256 47253e2fcf0e4691f29b3ebbe8f888a97b28d6aeaf73ab000857a6b8d0907ff3
SHA512 85c27fdc9a2cb9310bfbb05d0bcd668eb2156a37765d8fb59496739f6f1eae12afcbaadf5eea8f2db2ad8c8a0602f83500bff9cb71a429174a80bee16ec10118

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\da.pak

MD5 0e4207e2cf5741a8968617df9174a681
SHA1 bf9b7558141ad30bbc921992e48d48cd6d6ab475
SHA256 438d2b1fd396c2108ca3902f69eeb372219edd5d95fe70970d8ee9e64556c9a4
SHA512 4ed8368013912c408f7e5f7b4f6f1748834e5506307b92f4b669c557efd27363a55b4e2918eb7707e798878c9492b765f24ab9c90e843f54e8641c4646bc72da

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\cs.pak

MD5 70f320d38d249b48091786bd81343afc
SHA1 367decdcdad33369250af741b45bdc2ca3b41ab3
SHA256 1c9448ea3aefce1a7e1491e73af91af772d8b22d538676a2beab690558e668fa
SHA512 02b08ed9261fd021e367995551defaf4b4f54c357409a362f4d2470423644913375cac444f62153ec2963a84880a30a36f827dbfacdd76a6222838c276cf5082

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\ca.pak

MD5 d193a3ac614f64f4754c9df5cf00e880
SHA1 0da0f7c1a4048074f6fe9d70704aa93ff75e42f9
SHA256 4ecfa3785ab52564e0bd7dda04d59a30163561588a04f3bd1b1b71de051d2c53
SHA512 e85d18951f9a1a86514d577f9b19a4b3727523c15b4ccdd17217f6fdf69a0e774a36874108a05de1be3dcee1720b0cb19eced2d3283f57f41f5f9c5e233e1c68

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\bn.pak

MD5 c8173f0cc63ca9e02c07abec94892b53
SHA1 2688b199cc40bb2082247fa451eac1304608e48b
SHA256 e6adcfb4f3b3bccd4a27edadc168b503c36551cd6b27fb24043efeb21f691ce5
SHA512 3d2317430722dc15c5d938fa55235af1caa03dcff7a574b44d37d89e7cf2c94dd2e84518b3eeca4a5a8dbec1b99d94aed97429aaf55c63998002d50ce9cb5019

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\bg.pak

MD5 0e8005b17ac49f50fb60f116f822840d
SHA1 f2486da277de22e5741356f8e73e60b7a7492510
SHA256 50e4f6b9c387adf4baba3377c61d99326cc3987928d8d60b88d1ac29352820ea
SHA512 5df18bbeabd56e70d4c5a80dee5b7ce48259000665941634937e556e3b3a1c6403aa45c410f6f755607549c9dd35d722987b447c50efca51228ffeca4628756d

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\am.pak

MD5 4eaa15771058480f5c574730c6bf4090
SHA1 2b0322aae5a0927935062ea89bd8bd129fa77961
SHA256 b05dcb8136751aee5eced680a5bad935e386bfce657dd283d3ec00ee722fd740
SHA512 b67e7dd24eadc91d4cd920f8864cfb23a9c67b2cecd54ec97e01705636604ce504dc417d6af1c53f374b58eddf71a12bb82248bd8fd68307161d4833342681a9

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\locales\af.pak

MD5 862a2262d0e36414abbae1d9df0c7335
SHA1 605438a96645b9771a6550a649cddbb216a3a5b1
SHA256 57670eae6d1871e648ad6148125ee82d08575bec5b323459fc14c3831570774a
SHA512 a789a4cad72106a5c64d27709b129c4ae6284076f147b7c3fcb808b557a3468b4efe3ede28033f981335d5eab986532c0497ddd6ed24b76189fe49366692ee73

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\vk_swiftshader_icd.json

MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\v8_context_snapshot.bin

MD5 1e4da0bc6404552f9a80ccde89fdef2b
SHA1 838481b9e4f1d694c948c0082e9697a5ed443ee2
SHA256 2db4a98abe705ef9bc18e69d17f91bc3f4c0f5703f9f57b41acb877100718918
SHA512 054917652829af01977e278cd0201c715b3a1280d7e43035507e4fa61c1c00c4cd7ed521c762aebd2ea2388d33c3d4d4b16cee5072d41e960021b6f38745a417

C:\Users\Admin\AppData\Local\Temp\nso6331.tmp\7z-out\ffmpeg.dll

MD5 fa145097e0274da929aacd68c31338ab
SHA1 a999806ef0c15593100e21bc8632d7b1806bac47
SHA256 c8476ee68088d72b9fab25703093df19237d14387016b77f472e10c99c9415ed
SHA512 d4898eed2ea09cb9b1810d783558ee7bf284701734437fbd9e1035138216e1ddbddd77d588a0b722adc5c5fd4a245871537bfb9b168910fc2bffbd6cb78c3c9f

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282295482283a

MD5 b09351e4aa8492d42ddd40d17434ad59
SHA1 2b2986e5619f02036c8de0f0e0e2995055fd9ed5
SHA256 c147b717d5704750611f9579b52a30aa2897a107159f160171f3cd636f4ba9bb
SHA512 cbf036e9d2cbb05c973685a76c1f0d2e7bf7325546296371bebca575535f2b69e2b93388c9a836862f12deccf9850e5d1731a93e63011ccc7cef77ce458752f6

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728249773f5685

MD5 ca3bcd95f74a324c9259dda810d897e4
SHA1 588da2e8ba2882c2582cde2673531f335431d465
SHA256 e7acf5c281f0507e235a20eba6e369b6fdd4e32e740714c52e29d902c9c54f61
SHA512 211b12026645b364aaa5e4673773c6e599edc1f2995eb5b7b248cc6f4d4d2c86c8f75c7278ab8f3b7b7ba099a91d82ea24895ac08f1371beb637fce0cbae38cc

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282738173da39

MD5 367b65449b8ae63b5dad9df5788dc345
SHA1 8dbdd885c01d6fb8bb776821a8739ec2597fc517
SHA256 41797bff32e9fc5e478c1ed3ba671f24aea91528b6b7f970dbea61378d055c83
SHA512 9f790a6de1bdbffd8542bd979cb258d7b3e6ee86cc73a19d38cbbf7e6a07875e3573b39617c0715983c832d88352944993574ef7a413154312eb9aae3b6515c0

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282904637b2f3

MD5 680ba8a7f6642b41f95069aae4f9c93b
SHA1 cf3000fc3d3c6b5e7870e3a8e427dcc4cc6fe155
SHA256 bf734417a84f2ef22e021753fbd2e2dbf0f2bf92ea70e72720cc3db4fa06627a
SHA512 3cdff97a61c5842752be535817513fb656dd0ce85756bd784b5b922165b8a3c559c39b69479f3695d58b1e2583a82ce9ec7107380b3230be00b63468b951a876

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472829917eb5d95

MD5 fe3d805a0255e729526e2108cbe66e04
SHA1 e1b4fc0f49354266b31efbc981662fb6c63c66b4
SHA256 40dcbd875440335aa64ddf418d67850ad9a6fcc6a159f54971b9955aab7b62f3
SHA512 6921f664ee118dff9678caac1010f9cf002426f23c9aa0b2149377260f4c2e8c5f189b47b97bdf3a79e909ae7eff627728a0fed8cd55bb736e8e0eb060cfffed

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347283034525bcd8

MD5 ef43513e192869be687e78b2273d7fc4
SHA1 3e979a9b5f9227c2dfba88e793f24c0be4aad8f7
SHA256 4b2f8854c503e41dfd626fbe081055706b3a0cf4ba887fe8320102f3074f7318
SHA512 ccb27c4a9f6d46b86d88d8fefbbcb236829cce50066384218e29face15dd15d734994e0e337d6e98d78fb7976b96d5541b147c3252b2c0756cf9ef62c0a1dc8c

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728294882ffcaf

MD5 cdc97b713ea3e6e1049b68342dab9c6e
SHA1 d5169f48e1876854d76e7a6a7afc164212fb4047
SHA256 ce9194165538e77f600757bcc470a5b18ca7b0e095ebc22713ae0c1b9cec7daf
SHA512 928b95bdee2ce1a8e5cedcbf86ca6382e00941411a171efaccea8681c5304330e8cc21b6512ca1e91c06b5dabf5ac34607d41ccbc0441ed7c7ba2403acbb1722

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472829811597636

MD5 2c96413a60ed1d527d835608ce29e51d
SHA1 f2587655ffc05b088c562c3e54aa501006da4f51
SHA256 d03e8ebc5fc66e88ea4c296593b9c73a720c23514ec82a6d127a5ef874babc6c
SHA512 4322798cf80fa1b0e51030e786e6c188060bc905c8c1b6566854f24aa64b91abd49946c181d2e78c17f790af1161f0290c8131e5ea04c7e3ef8cf61ca7eec52e

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472830453ef5f03

MD5 40a9b31c86a2cb46dfbc283246bc7d18
SHA1 03cd30b890afc245caa8444fa97f64837a7e5379
SHA256 df91649efdc816b10d2882a20ba8c1081280facc8b84e8fb0215045d76c8b915
SHA512 b9074450b76fbe035a62e9a0999773f889618735b2ae453b3b6fa18dc5a1a703326147d3d4f93822e6c52383a8c7e0045059f5842a155fa85262f269fa34c918

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472828410e5cb52

MD5 1082f70779d4e726b94c649374d4d694
SHA1 dffaf1a18ebb0cdb530dae0a534fb5405077535e
SHA256 ffe070e6c8d006e17ae0a874fdb481c0e9a55f85956d63e06eaf6112829a830e
SHA512 9cc21a58482695b7ed42646543cca26c14224c8404f9df92da45791ad0cb3d6bcbc4a540209fc2e8472e49c1ad1a8c62713fb5a8463f858dce07f040574c2142

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472829700966b46

MD5 54e627189243a685b30b6cb3f478b8e5
SHA1 8bf7a6db263099b103002c244ddf2eb1f20d387a
SHA256 0e0d70b07dfefffebd9cd12c1840a308ffcf27c9d8053ef4308eb8a9b13cdd27
SHA512 7ab7cbed8354fc463f2f9f733b4e89ac4fb04b3245193aba64aac7011ab5edbbfefaefcd4b1d91859ead3a7118d90ad20acf514f8a95b3138013527d2c31088b

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472829597e096bd

MD5 f1be2168d373fdfe77c23c41793fde88
SHA1 1e8dc28544a42b9d237ffce8ad822d104ea3eeec
SHA256 41924568051b46bb32bcd5f10d968b8dccc8be388c8a84d84e85679e2f3c5ebd
SHA512 9b28ec2f1b9cd25decca04a59b17e18a2d3ca12fb42b6b86620a273a38fe2914168161b053555a3ce26ff01f8a2bd0b434765bc618a039328bd463a4bbd93f61

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728288281049e1

MD5 4b324bfa6c82fb25d0357649714cb676
SHA1 b9ff859f26524ef06a30c8724aa7e6afd2ba9ea5
SHA256 c26c7a885f449319a2192eb0364cc4f0953d85b2ab57bfb682f0d5cae89c6f48
SHA512 23efb45a175aa4634e8f754a845719e29a7ee25031d0c4f3d1b193913c1b57e8b2fb9b5a7a55b22f94b5fd2b14763efc11f65cc17eee65c1efa1c4cbed9e373c

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472828726f8b574

MD5 e3202f8a7596210448a8206676d1ad8a
SHA1 fb3cc38c115f3e0d0c2a942622ff4bd759c56d08
SHA256 275408126bf09b4db7884613f232048b44ca000a7f0ab24389b8900b6bed6614
SHA512 fdb967a042d7e7ecbf20bbf77c53447bf39c118027185b06aa3e68f4e671e9ece86d80e7819a17f98e21d9a8b84e6d43ff69d7a20cd87d2b0d0b864905f5fe89

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472828619efdb7c

MD5 5a549530a792fd73da9f6d1980758dc6
SHA1 1184c7aac0ccaf00d7315a576c9cd61a30b96a8f
SHA256 38395d8604c96caa193cd6948be2576753c76845245a8208a2a653402f850aed
SHA512 cc0139c2e9923e4b21005915c62275040bce2223e7cae4c7764a6f55d8123717b9b83fda851d27dff17bbc45baa89a7e6c37339c1f0a25b7085cb7cb0ffe1aaf

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472828513ddd35a

MD5 55ed6aa4c71132998683eb57c4bc3495
SHA1 caed4a6d4bec080829938ccfdf539295073be5b8
SHA256 1bd062ee1aeeae6373fa93b241e5a350ca3e8f0aecd5fe2475a4f5149020f6f2
SHA512 89831e01b9109ba7796ebdd98e80f1aadf9719b451d2855cbbe912fab8c02c06d42d78c82ddcdced6203cddce96eb34af9cc2319931521a93e3573993c324c31

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728283098a6e8e

MD5 c5d617569e50df889a10b2ecfb42dd85
SHA1 a82f68beea05918a69d9de31f9d32e494c5be1de
SHA256 3d9a7c95ea218d87261137b0e4c646885ef36aa6271d13ee627a0e0e6a68d163
SHA512 9ec96ff0ea21468e205affd7cce33d5c8f448c634e190c6bc2f1b15acd2a45b1592b306b99b0a597ae481ed61cdfa38db8dafa799d5bf5e3733f980a20781b0c

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472828208dad30a

MD5 b3d40f674c535a8ad6c4f4aa47a4328c
SHA1 139c29cd660867938c73fd49ae62cb397a689b88
SHA256 65490accda741d0f0fe2db38f202b48764839f19e828f466075d7eeb851a79dd
SHA512 958cca2815bb6f7f72e07a04a8174c206db3a1343555e6050bbaa1e7cd14a0e57873e06dc9b7e705f514e592fcb0b7d1dd180380fa133b2b3d31686ebd49ae4e

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728281071554c5

MD5 a37b081d482f095a5a64198b9e796487
SHA1 76b62b2160389d9f083ab9e85bf8a1aed2836f35
SHA256 d55347c8f544490cd690296791ae3bfd4a3a9ddaa759ed6480543bf7291782f8
SHA512 de92d8e5b09881eab710a382fc87bf746054ce1d96227bc9b3763cf7bdffad4794522c61604f1e4a98dcec1a01489505b5c9778476133b41fc7c5e3c77c74afb

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282800762ecd6

MD5 71c97d2381ad0443e19848d2901c9f78
SHA1 3c246de791ee50dff5431382d8b9987fc066d46d
SHA256 5ed94e36c0472593678d2715df4e7af2cd17334cd37fa9b5f2bd25acf49bfd96
SHA512 18777fdc302a660d8e452f3a7fcfd87e8a8332ba0592a241bf060c920c12572b31994a6e9939f853c15fbe017b2ed49cdf9249edec39fbd6e7b82bc941d15aa3

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472827890d0d017

MD5 268aa92c524988538ae9a8ba7d7d3a34
SHA1 0735eeeaca8f319639f5eb73fc7365c10a1c0abf
SHA256 82a6b50d0f548717b76fe7788ccb6ebc597c8b6014ec2deddc38eb8a004fc400
SHA512 5b6afa825707c6250e6d9d1ba63f4b5b5a0fe4073c8e14b761781ee942c21092dce89bf4136c1a4c83703631e1b1e29d8c5438ca87fceb9f79709170e6274379

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472827688fdcb48

MD5 f2c213a1d10dbc0b9c813049d85ba57f
SHA1 cf0b540348c7356f83ce4a0ce55039af97dcef36
SHA256 f43971e494025133dbfaf1ec2069febc3cf9cc01fafb2a8a06d68249126f7f13
SHA512 da1eab3f82a20f4b4f68f42a2dd001921df93e6cdc657c3d40804331466c0d107d4500498dcac71cd4258710ffddb896928db1ff5d5902843e5f133a293e0069

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728275868ab300

MD5 bb93af9f4b9789daf6a5261f8723f7fc
SHA1 1d1f064b4631f8fa6843887e0191d1770d2ca3d5
SHA256 44af8d7245c6daccf9d82dc8577a8a0501dc4720c712a9b2ef53d4a720813589
SHA512 bea1e02133f23eab7a4b90070bd932747443e45b8f3da84c817606e76ad978f4f8013d0ef2f2ea16b72e1198107f45c33514cb642ea5184925f434e4f91721bd

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472827482807dad

MD5 b4df214c55339cf8dc53c9d20c18cee6
SHA1 80b28fd6ea6ee944894b24e290d95ec072a0bf67
SHA256 7a303d69bb6a43c004100365a05b622319345e4d0cfea8925ed24242d894bed3
SHA512 4f2bf2680dcc0fb16ea1ab0336d95ce864b8670a6290d3e1fb1114deec0cb282bdea539a44c8288faaeb8fde2348eebb574c1b5be1af43f76817e3bc0b34ff99

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472827275384fd4

MD5 256350f8ab2ab19132f2b72677c0804e
SHA1 c54ce2247c72605772d41be9307e5070052ca654
SHA256 31c22cfdfd9defad00953f0307dc8bf785c76039960629586bda1fa250a01a93
SHA512 94732cea620cad6485c6337e18cec06b072f81cfb5eb1adb5658a41b529fe01a9f41c1b76df491f31a0db44a0b29735f8331064ceaace022c0af3848206a62d6

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728266399a4946

MD5 0e7b3dce12440cd783e0c18a297feed0
SHA1 f7248d8fc881cd8388f03251796e0a50b4e773d1
SHA256 d4b6cad0fba03e2ac764db3b71b629aba3196896f04a94797778ecac5bf030f6
SHA512 d012225d5da8a87344f7b574867f5e79bd37717dc46ee15ea00b3f6baf02be3432755a43bb9866925da3045a457f88b84b11979979055f815991701e56d01dcd

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728262088c26a1

MD5 9911509c47cef2395a4508a926608cfe
SHA1 b3e771d4d9723499c28d226fa9cffa5934945de0
SHA256 b7e810e0414ec2096625db6690051a2c7d7585728443b22393cefbd5793cb623
SHA512 c3135ce89f280ad8ee7a548db66bc51e2ad073598b802a2d1c47559fc2f4d67c79fdd3bd9fee30e95b9d23d374111376adcc1e30c942f86cb9ee08ab96dd41fc

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472825587fed3ab

MD5 d0ea0ca53384c182ef0543e4b2f4ca37
SHA1 4f35ca5efcbd8f101a3a1b37db6246098a3cec11
SHA256 09910d56e01890b853a7093c143a6d1faa634e45b27afb8b6ff01f2466f5e100
SHA512 b3bdbb39f5180ca3c2b35071e3cf86a4b1a23b74e34185d9a780cd0994de35f507ff3f3dfa279e9528a6ee77c8e130e47dafc7fb667998c56d0eb0261eb8eeb3

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472825485262b1f

MD5 aeacbbeeaee94dfb6f12568ee387141a
SHA1 b0fc2158317793afd82405e2ec0eb708aca37899
SHA256 2e16710cca147c4a756438156b95754675dabaafb0f005ec00b720ec5a31de61
SHA512 72aef31b4bbe2c5b60731e78a86f8d9a8a45b3a0cc0a92d906e9b536cae7aa38a1d1796a1b3744949b8cebb4ea1c0438a00c7206ad3d3895445ae7cb4af30a74

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472825384bcea54

MD5 715623bd09d17883b6485a48914e980f
SHA1 0ae0e51656350f4c91720bcc22fc5d3582ffa31c
SHA256 15adccb4ba9985d4837924dbb5318b472a382e2b60b9962c3fca9c62d3d7b8c7
SHA512 a56240ceb0da618b35042e6ed4c188ae2075e5883d799e61359119364d9f1363dd14fd5a8b3d70a3240ec263a6330dd33c78d33bf23abc446a90f01800f11f35

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282528051b314

MD5 15d95139117aa28fb0438ab070a94601
SHA1 3a05dc4d13d27a3951bed2914aca32aed47d1e6f
SHA256 5e16c9666483baa4ebe951743c44a23ab778e338e2217b593a4f761fcd3e4e95
SHA512 fbd71c764acf61732c4544994ae903db606a4db19c6ed30a7e650a6e935a4e746f8a4e02d632bc92f11c19171d7401ad49f035d1b270c5ff31dbf5d16132ed78

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728251795c14ff

MD5 3986f64b17c1057b0906b741d973e6c1
SHA1 3f529001b6c4156081d16de39762f4e329a5b199
SHA256 0315548728d4fdb96c8694c37e5d3d3db9a9d0ac2f52481d8490e74a514bbb7c
SHA512 2cde6889637aca919ce0fc76e87cbb30d71ad117d58de9073fc62563af3fe2e5f47691e2da3cc8fbcdee56dfaa34d4a459895fc68b0d86d9c4b4c3a476b5673f

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472825078772f20

MD5 7c27f341ac9a07ea1419f492621af828
SHA1 3729a56d2bb22a5c513c84f29a8891d943048aa5
SHA256 868ddecf9eb43686aec4c176bcc58aae1dfa3d97b1fc28e0fd8a839980687929
SHA512 1decbbd3904259bbdf2d9c2959c04ae4cc3a4de057c0895728f03e3f89bc23520f2adb1c95ff5ec705ab5dc9110dbf4a8b68dca6915d9ae622163672190062e8

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472824869cdbcb6

MD5 dc44e6ba97f7223cbc36f4682855e435
SHA1 cfcc618f0781c3b4d19b0a6576b5d875db7b28bb
SHA256 497c121a544b7e40bb9c8392a621e3042a3a81143f2b32d4af5ef4250298965d
SHA512 2df5dd35ee898e366997c9ad6838d6d68663470ade1bafa896ce1838b58d2667290adb906512c8fd6bb6c36a11924a9d7b58d86d8dabc4453d603f998e3f6f10

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472824767fb7269

MD5 4bfa1c545d7897e5d0417b7918d3636f
SHA1 8b8e2585fb355c116696660da8a55b12bb90a01e
SHA256 f4ab8a40704b32a2c970976bc4468350de46f6668aa80c46fff57ea409d188b0
SHA512 a2f4ed5bf5bb7ad5cb61ca8faecfdcb1713c0e6a1b3c53f8a8ef7c1745cf11bea4adb466d475c2e5aab5d6ed75f6a5bb8852456bee7cc4a242bf6f5b6dd60bbf

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728246578a6557

MD5 e0795cb3fe55b49a325b4555a0e4530a
SHA1 ab8abd336528097f1b55d9a5dd386d5a11de5480
SHA256 bae2928bfd12c376e53480131a957333571485b84b1f6af794b462911a296b50
SHA512 0b8a3af7abf91b9acfa761aec175c798e95829da13b87f3aa06055dc5748ab7a3e3522e17ad8c1e295af52b13850d696de34130ccc96e6693a4e93f1987d74da

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728245564da02f

MD5 995dd2039ddf3a50345220b9ef8d6a7c
SHA1 e68f6f98c36be72cf74f06b0ee6769528d0a14c9
SHA256 8614ec7201cda174abe2acc15c24673d47888056a636ce2e754316656343c1e4
SHA512 1511dea1f2b7c77476a12ff3a65244af1c29c3ef2182c34e747df29290f632e08f557a909f70f15acf36d3b070239d0d32a4eb041dae7438f2d9aa103dfde478

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472824447c0808e

MD5 57155fd5744f682cce63c2a441a02b6f
SHA1 fbe9653a84c591cd85a76a64d354c3edaa843b75
SHA256 e217d3e805a23ee08edbbcbbd79608612d84a2616ba0818f1cc869c3708c1f9b
SHA512 9ae0a18956747bf9d84f77b5223dea4433504eae378e27505e03a12d7ba60c1693f00eaeed4090978cc23692bb1398108d7bfb6a88d46b4f8952a99cc82c193d

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728243325989de

MD5 2a1a0ce6fd32188483c610ebea2abcbb
SHA1 97278c71faefef5ff3afc4aeb8438278edc8b64c
SHA256 b1e19be8a2e5520453b5a1fabd3bb754f513e372096f4a1e1bc8eb3c88e9d10f
SHA512 ebc0e8993f13bb49fd83815a74a29a365f7d5450529e3479934aadbafeef99818f2803eddfd356bf85afd9e3b46c1c40d6f64bade34648f269e89532da9d43bf

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282423029d632

MD5 2e530dd715f56b5251b726ac4cc4eef6
SHA1 f9a0639d632c6fc11698a165c8bef9ba1b49a920
SHA256 ba86b51146dab999571079feb67b7db10217990738f32d88e312851fb7287fa8
SHA512 98172eecd7dbfadf216fe662850afe2a1c65878be950c18f765fdef1c44d86076273a98a4554c2fc72907f5d5a3ddfba9ed0e9a8cc81b58812821ab2bc9e81e8

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728241271a35cd

MD5 567ac7cae28c8dba3511f1ec6753f75f
SHA1 e335abaeb17986a5e9b71920d83c318596ebe0d1
SHA256 e3fb50c1764e8a1300843647a3212d47109c668626d63a0e06648d4980d20267
SHA512 cb7850535ec04b42b5fd874432fae4cf13667401d269a67da857433cc1e48fe5a75a6829001f861ca222e341c8d1a360028b55c7e49c08542c121c91a6ca4a3a

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472824026070d48

MD5 a06494ce498acb1cacdcc503705621f3
SHA1 8f0f0f4ee1c26a92b17667b0288de33de79f966d
SHA256 1a7b2656c5446a4dfea7628f50e7d4c134f4a4ce9949ff9c6847c892517fa2c3
SHA512 466a5596bcd4dbbad18b5663f11be6557d8e7b669c4110f225601406c7c8e7cf204122a2b9af17820b261534027274af6bfd6439d0efbd48708954b3dd372859

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823911d63cab

MD5 1a9be198c0fdbad40019d5abe74ada4d
SHA1 4a8be2490e350b25da920fad093158a06b2cd3dd
SHA256 e63559b08bca2856c26f3367bd558e6fabef8bdcc67697016a2e2e11df4f78ad
SHA512 bb7993c12a1671d394c72a8cbf06e03bfd1afa0c7789aa7f3016440dc0069e0a11c29547f60780d85e81acf937e37689dca40f2963da2d29836b193ce4b67382

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728237948408a5

MD5 1b1515a414f68cfa38f45c85b4e224b9
SHA1 387abb14d20bbd9454f99b7dc8e745803f255d9d
SHA256 a8ecd67aafa1324e8c4845d68858aaebccf157018b5cac3df6db9e0fb8564cc8
SHA512 2dff3ea8055450473ead754b8beca951626d9b259a40650d853dadee609857726b3046b4e751af3e1f77d0d0aa2f46fe84ab836d42bcc992365de9c3bfec11c1

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823692a38de8

MD5 52d3eaf7cd70805f12cc93716c16c90e
SHA1 627ea3e2c67f92d176a56e53d04faa9e9feb0423
SHA256 f2c553e44dc7dd1c44b78b30d09887895fbf52ff93d015b0f39eb24a96787590
SHA512 4a4efee5ede1e4eea6aae1a9bcd161b20ddc88fd7ec218dc9b187aab917eb3de1a7242b5ebe301a96c75f4ce273b3782af0eff318d5cf98d52d1fb7bd0679ca9

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823590df4533

MD5 f89a40fc984723566bf5cba82865a4f6
SHA1 f2d14263a93b7fa3ed65c98de2750665104fafda
SHA256 bef23d68e06f87207dc059c55a7e6d739b7d07cb885edd4a99778383f6e477a7
SHA512 51e2880057e7a6f5ce04a470023d7a85feae944e5c930a20c43f71d02fee6d75782f30bb1ba2614bd5e073ce186586a22bed170236707955fc0574835f52d561

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823482e6b82d

MD5 e84a5e6fde08408e2f5b253fb00f5d2e
SHA1 f7d0127781daaa47772d10c2356e28205a4dcbd4
SHA256 ab7d819472c5bed59c75e1d7571214baa487f5bdc1492b53ba69f04ce048ce9f
SHA512 7745d3177abe6dc6d94da1155f16e040cfa70032f0aa95983384b402c2b8fe25580cb160deaf8ec030805ab2e7ec077a11548b649e892425211cb60e3d66412c

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823369c798f7

MD5 969bdb5584b333d37a8acd8dbb262e88
SHA1 508f2ee18c5bb9fbc26719a6c3cb373a01692172
SHA256 74a5e3729778f9dfbd430fdcfffc2166f6ce7617c23051704adb7d8de2bf99c7
SHA512 be1ace17ff50c4f5dee2556799c615c557017031580038c6c6c1b439b6794b037c12d1198a30bb786226830b7505e48de4bda34e59aa192c93aafd69842bb9fb

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728232687f5a13

MD5 35141c27974a6ba646f4ecb79dc86601
SHA1 7e52400a60e6615ec2dc2aa08cde2aa662108b08
SHA256 217b9973cfea2e8dafd16224f4f5473201283ce76ef5177ee6170a9ce2b742c5
SHA512 3c91c1e52065d241d6f162b71c3976fac335901d0dfed358e693b2e68c55a548e7b0d856667ca8c70a2e242cf86ec62f2d8cfb1d467c736adb504daf816bf85d

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472823167ac4fa3

MD5 a73dece86591f3f0850332f571ac5d18
SHA1 71e143c24728273415a02bf8e3df26ed8a27fe80
SHA256 d6a6840ff9eb71fc66d0d202087ab2bdce9f82d3f690048a3c1a7ca1d38aeb9e
SHA512 d4074b8bbee39e3ffd95d19e2f9178b4d2eff1212e4f80d8ed452878781279f6055c2cf9ed9173dc7123e8800d8582e455556dc527741e2ffa87b542c7ce953d

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728230561d29b5

MD5 35d9e6150dfbcc75b0b57047806bfbfd
SHA1 ca3b170827d080cdcd4c28d63bcbe2b60308aa92
SHA256 0155f4ad0614a73d5bcd69726bf823a8a75347d1d7048141e4bbd52b5abd1c79
SHA512 76b34f3dc0071bc0ae89e9f369efd5beb510ecf142cca5143d61eb1c081a26f55daa1772b576c7ac82486f28fc343918e3cfff023f1d7ca43bd150164b2c1f31

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347282285298e9f6

MD5 f15a213c00d7690b8290264544d1300e
SHA1 1829709d274d7d7e2c9d48f2c91b6272f22fdc81
SHA256 982c94d8dfeaa93486a3cac5520137c35a06686fbbfb55ce8036e53a677fe959
SHA512 7796fb778a7febdcc9fc3a492b3478824b98987338a012368b6e8a0a88d20084ffc13f63f5402c2eee59c8d1cd5004321eb9cc78c9ebe852061f772d8e4f21dd

C:\Users\Admin\AppData\Roaming\trafficermc\config.json

MD5 427a9811a50ad51c811a8438a1e94ab0
SHA1 8ab36937f70b37896a48472ed5f78ea97969341b
SHA256 7e3395815ea8a6128c659eeb63c5593e592fc3e8822f828f4f796048df8c7141
SHA512 2f2550258c737d44d299ef34e6616278a2e0a45e11a26577508082719b4510bcfc0ca7bdb98b0134e44920532ea4d2b741adc43bbcd8d36652121f81e5eec2af

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472858773734e21

MD5 3fa183b19e403b9373e19fe61ed6bc5b
SHA1 e3947219b3c940451fc5b3331c86abcde591d249
SHA256 3cbe32e10b7ea102cf6ccf25491490f5235842fcd3bbc8920a19580f3bc369c9
SHA512 d0c12797a6e3a3502e11cd5b6c7ddc3c5fd4309970a94d642e988d5396e6616927ec01a9ba65de1d2c46dd547da618b57359071631cc110e00109113a0db2d00

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\W5K8VQCCD82IYP01VT99.temp

MD5 5c002495200b6a738edcbcd3679c8f0a
SHA1 8f6d6f7a4a7cd42938f986c30c524bfe5df70a3c
SHA256 399960a08f5570a9685e05e08f29665364253e2a2cfa56169207b4c9d47cc533
SHA512 602c8ecb8221a3775bc4f4971f61cfff1872807490fa9417600e8bf6ae6e7e4097572f5048973de1a28fa2972b9547480ecd57d99bfde0df21b1ae64d7be6177

C:\Users\Admin\AppData\Roaming\trafficermc\config.json

MD5 e93320437ae5bbe69703a1f96aba9cfb
SHA1 9d787d50abb6a15085056ace0ca2689c7b07af6d
SHA256 72c90329b434d1359b41fdf88d804c35fcd2c06d0d0ec3dbdec53fcdc037c1d2
SHA512 5762fa994bc9c02415af631d950ecefb3246feee3c6d3dc452b140c19fbdb0116d5fe54d1556ed783d4f214a9651c581300a5193f583e143abb4e64bfb1dff4b

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-347287087243533a

MD5 2028374ecb5dc14833b3fbee990c3601
SHA1 c20fd1aca82c1b9f273ef5768c402ca98b09c61c
SHA256 38c06a0ded103f2c6b879aa4eeec94de5ef8fd71060af5cd4515156fbd885cf1
SHA512 da24982e542f806014216e1c239e9e008c437189d34cfb8a47ecf8b5f5a845d57f44440371facaea77dc03b16ed164ef3a712dc0c8d7059e2c4a602459073aa6

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472872838654cd4

MD5 eb984584621fbb4a1df8b6071eaa373c
SHA1 5a75b3345689019f2fc5e6c42854eae2de4b833a
SHA256 e46ed50d83a3f234feb100a76d1dea923cd13e6a1d4629075a14a86d8bd597a6
SHA512 93d49a86d9146afeddff0ab19c7d7d179ad14f7cca739299f7611b7fab285b0298b8ba9103ea3138d20b6d2edce669896a31fc0b4c49f318f910daf54615cc11

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34728743512ed083

MD5 3b2e9225226240068a6e46203546e130
SHA1 c46c9b116cab760a15487f62e9fd5bc07b532332
SHA256 2292f55bcb0eb643395d8e8679a68f181fdd50d378521d38172e9c35b6993941
SHA512 b908653664c509767b0779e6baa95f013316b26660df41efcbee044862477186ba7eb211c85e5387dfb76351f56f04a673b3c1a9f2e9b22528e4c1070daef1ed

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472877410a0a503

MD5 c474ebac58e900a6c0d70560ba415188
SHA1 299d30770d500cc7589629d00a97c3a4974248c0
SHA256 83098738d9a2a203b07c84203424b5ab2e88ce93acebbd74091f73f007d2d961
SHA512 81c2a5f68dab1733be3ba08bb8067028fdb605bede5f3478f2031a82cbfcd132a52f86036984527e37d38354d7912eb7bce24b98813294efa563686e2245602f

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3472879655b15259

MD5 3547bc7a255f3c95b0855d6e49e66440
SHA1 45e9ab16a1146eba06adf2d9b99658484f6ad54f
SHA256 f201fd0ec6aba8d2200e76e26da373c007f82e39bb8408fa67d128f20d9b6b11
SHA512 1915d5e97033d6d26a6964bbd3b3218fb48eda8d2d06c1cb566bb104536b4d21d05ff8d741f7620dce07f108cf4d172c6f54bf0a74cd7c0e4cc90b731e729870

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

MD5 3230c5ee8e5eeaa0f299347ef4493630
SHA1 9632e2b41ad353014aab4f8c49fcbeb571a2ae1c
SHA256 2bde58e92bcb78c90f45b19059d2ce43ce71a4fbd9b590307aff44b44610b815
SHA512 292fd34c5b15d23fd7d902f2daffa678caedcf614fea858280873a956a742bdcfb34501cc99020862fc577dfc1d32221c4a75288e601212e08f6d5d67f775f34

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State~RFe5bf0b5.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\datareporting\glean\db\data.safe.tmp

MD5 72c9c3b13ad75c516aebcff1d4522d57
SHA1 0106365f1ed616c45ca8aa6e2786d10eb5e2b147
SHA256 937e84efbcbc39afcda3cebb5bec70a16037cda43b9abcc940911165b3cd89a8
SHA512 6215c8e7ab779dcae471084d24e47aaf82a2ba89faf8046f1fe332bde531e10bbac34ab21121f29335a69c81dbc9240d68862645d27a9b2571a11573b1d10f90

memory/106344-50222-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50232-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50231-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50230-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50229-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50228-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50227-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50226-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50221-0x000001FA40450000-0x000001FA40451000-memory.dmp

memory/106344-50220-0x000001FA40450000-0x000001FA40451000-memory.dmp

C:\Users\Admin\AppData\Local\D3DSCache\e36c718840167bb2\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\e36c718840167bb2\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 9a69c41f2d16eca0e555f6b87cae232d
SHA1 67c15bec6cec678e46160fad429bdebb773b3cba
SHA256 086f8625e035a2f6817c506c30d9e27f17b43e883cd7abc62e0aaab584e7b1b2
SHA512 2afb42e57b97e3394778f6e260c4ca7f8606da3c61504358554c37fd213dd6cfcb2c4352e811d72622ad701be889feb44941be7548987f3641528cf971375a4a

C:\Users\Admin\AppData\Local\D3DSCache\e36c718840167bb2\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 60e02488575bdedcb4b08a536d5824c0
SHA1 25f7638a53291e1b75c0c84e4f421293925b0713
SHA256 ea256a8655d2b766ae3a5c3038abed6e0e7203b342bedceebd1819e79a68c65d
SHA512 8747887e2dcdf975cc62c3dc437d19e938d990530db671d78a7eb7a064de891fd6ab7a52cc6f31fbd1c9c5a12e2681a50a58d5641fe6025814f022e1b4573f34

C:\Users\Admin\AppData\Roaming\trafficermc\DawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\trafficermc\Session Storage\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Roaming\trafficermc\DawnCache\data_1

MD5 b66c609e56dae001054919e7d7f9adbb
SHA1 c4d68e4b621800b9814087d038b564839236c2a5
SHA256 d611a9dafc5def17b227ebf3f70ab103f3956c0dbb54947a571cf61c5be7271f
SHA512 7494417a133b4ff24b55080332899c3b5e299ad4842b434725dde064c3713f586c729fbcb2177a9589229755c38325a41e17ed08895fb820b28170ef10bb57c3

C:\Users\Admin\AppData\Roaming\trafficermc\DawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\trafficermc\DawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Roaming\trafficermc\Session Storage\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Roaming\trafficermc\Local State

MD5 8375304bf18114990898014ee9db57c6
SHA1 9646e33ef88cf0a58125e5e47f658072002976eb
SHA256 f1b3c9898dc49c6b371ab930bf580ff48b1d085dbcc7336e4d7270c4cdcc5561
SHA512 43249e7b3bae7f609d42dd285c3b684a3cfebd362452cba02ce13ed661decff56919f1d7a5cdd8aa5e3ac44d260b9fa91bb6a2728f6431d3a4192bdadf72a868

C:\Users\Admin\AppData\Roaming\trafficermc\Network\TransportSecurity

MD5 2e0b4652c051cc63b2e504b5d65b2f35
SHA1 1db0e9179bc9c2b82491c099d83052599611f1a4
SHA256 02c5ae9f5da3e6b7deacb9fcd3fa2aaa187d4c242ff16625c9f37d7698fe31b2
SHA512 559e38f15f586d2556aae1081499d5535fbc73266d5c8b63b3a6686ba622802b033f71c955be2264b29dcd682e75ccb80084f06f9ea66a8d52f5d5af4981b9cf

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Cookies

MD5 f2056b5af2e9a931c2d6db1fe03b9927
SHA1 9498e91920d43ba62891e30cc679afd7712839b6
SHA256 38c391bcca1020f619adb7ddf0a452a9679fad168b37455005cfae165d85dc2d
SHA512 222af12c8858437c0df5333fd3e2566a1bac6f87cb5f1fe40b3a4d31284ed31fe2394623286d0103d9468315a277b90ea5ccbebd7d178f74b130282a2ed2ccd6

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Cookies-journal

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Roaming\trafficermc\Shared Dictionary\db

MD5 4d4863ce15ec9c7dfdc50c288a2d2d1a
SHA1 4494a5c4eab04af1efc9a2d7e1d996064d489512
SHA256 2ef9ab8ec9e6b879a77d1d9dbe7d18a2171f50ff37e803bbd0243af1b87dcb15
SHA512 d34f62eac5f9f0540ed0c6f3c6fcf6713c4546a5625eedc43ecb2cead6af30b387764703637fdaa4ae69d0b6cd31b2e47d6639c41b841d46327886c7a5741247

C:\Users\Admin\AppData\Roaming\trafficermc\Shared Dictionary\cache\index-dir\the-real-index

MD5 942ee7fb6a2255758da8a59616fc03fe
SHA1 5891720ff172d957f3ee2a18910e57e068dc98f4
SHA256 ef5488551ceeefbfe21047f1254000f4aefc1d623ada8a4c2abb412258041449
SHA512 7e98ff78664cb79bb4dca494756ba7b5d19d5246bf65a60cb298e35b35ef0567cecfcc51efaabd9e607a670c9ba8455034d83e845469f639c2c1eb20428e2c7f

C:\Users\Admin\AppData\Roaming\trafficermc\Cache\Cache_Data\index

MD5 25f2b3c0038b37ea53d008a3ca26d7c9
SHA1 4173138dc4bb8a33c9f8f1dbd2f07e00d1e43161
SHA256 448e15dd27f1490c0e211096a1f7d2ff971fdf6de759f50c37723f850ca7dffc
SHA512 31bbdd4e0bdebb7c14fe99eaf36a78ac461d1b144c84b9b25ae80b757ecc03da8bfc0e394bbcecaef57add9c5253291a4497f5aa23033fe5adf60c578ea2c788

C:\Users\Admin\AppData\Roaming\trafficermc\Shared Dictionary\cache\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Roaming\trafficermc\Cache\Cache_Data\data_3

MD5 e707084642e5140ad3f6e2c4fbc56e2b
SHA1 efac276857733bd7e08d69a161e7e5f54a7147d2
SHA256 1fee8265ba19b61beb0af5ae17006f7e5093c0176fe0dd56c3e8b4b3d2ab4fcc
SHA512 d2e37fb27bf3c5fde10371844ce7717af88a1d872f567560be110844c7a7f5163631e0b3a61af8a8265dc8b066ed53d752b0c46073d18ce5f02941ea4ecf9ff7

C:\Users\Admin\AppData\Roaming\trafficermc\Cache\Cache_Data\data_1

MD5 2566411822d6e393b65c03e47c160dd8
SHA1 6898bb18800ffbbc2e4a13d235404e1d3101e743
SHA256 c4513c44da66b181bb862efc297b8766bf244be475eac677fdf0ce3ba4d60af4
SHA512 24848930ced6132b9e78ef85c13539f2cfe58c27f75968d928f10ce139c9014703ea6a6230e247d2db12ecd9c6833492f738ebb15b3c7f2d01d6bff6b14251d8

C:\Users\Admin\AppData\Roaming\trafficermc\Cache\Cache_Data\data_0

MD5 0969dcfbe580dbd1e856d4f660d4cbcb
SHA1 94da8a95c6ea1a5ae20ccac1acd47ccbc2a5f8cf
SHA256 1ca3e771cbf5c916339a21da76c8e15c3ac31f8cad80d0039307f021dab1fd50
SHA512 745d62499874d5d028ac41a8e2979e893400734280dab7c859925a5bff272323f5129548305e107c6790ddf954a863d725bdaabb88e3ea5bde1685314af9f2a0

C:\Users\Admin\AppData\Roaming\trafficermc\Local Storage\leveldb\LOG

MD5 b25731bf8723db5a0cf013d49386cdc0
SHA1 e18744e9f0cd7dcb934dbaf57e80cd6aa250bc08
SHA256 101ff7650566abe489217543a36e9fc3bf09d44a7f02100c834fd4d90e264e5d
SHA512 cc4e3d5e6bb444f8722da9175e880c21a929b7010ce26798d6ec5a66abe60d9716fcd2ed7589ab3cc86eca5897d5a5e6e0d4beb284f8b0abb07a945f1d5d93f0

C:\Users\Admin\AppData\Roaming\trafficermc\Preferences

MD5 d11dedf80b85d8d9be3fec6bb292f64b
SHA1 aab8783454819cd66ddf7871e887abdba138aef3
SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
SHA512 6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pzaexue0.default-release\prefs-1.js

MD5 982e7aca1d686b712f85aa0a1e97bf1f
SHA1 1803b38730bd0d5eabb6f7a456d3bdfd52e03e33
SHA256 c353128e44e26756551787ae39828ac36be9755bb91689f0130f02a4c20f2827
SHA512 1de80f179325c79017e3f52696cd8ef2533b4079a12d588a1172b67fc1f0c8193801f7445b27e7f1e43f0ffff4db55f9ec55cd9aeab995d5e29164dec1bc92d4

C:\Users\Admin\AppData\Roaming\trafficermc\Network\TransportSecurity

MD5 28c4d340a9f9a59a8c6415ad66e15ea9
SHA1 b9b74c3a9257af49d0aa2594afd7db92f4b7b6cb
SHA256 0f572de95bdb7224cc01d528acac4607465bb5d8a0fbf538c425ef4b85cf5beb
SHA512 7662aeb325d387ef50f383fa03417a53c9812c6a0980b9feaff109b2acf6b26ffa659d909c5d7b065bbcbda9d0e589977068d27ec4e5bf3d67a6160c517fb3a4

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

MD5 7faea1b3aa6f9c5ad54c27f9ec328c7a
SHA1 c58e393962fb7288d417363b452b494bbe88967f
SHA256 88c45d214b07adaad5a7114f0076ccd9c8a3d9b987351fc4e8da1a225c0a9ff7
SHA512 cc028478ebc44ab6c08afcfcdd40e0f480faafa0c88cc2e762f08bec2edff1a4d2acbd15698bacba0f2f5ffb8526e0718981b725d35c10dacf535b2ba9375ce6

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

MD5 58449aca522723b3b4882a73aee2f80f
SHA1 0333d603ec64ff60bf953c955fef68dbdc540f39
SHA256 0be5440620b894990ae53862857f57321c8cc99049cfcb3cfe4fa16fbfbffef8
SHA512 b88b1788121101f0f0e392c0f6aa58d503ce38fe040fd9493bd39455e7d4a13ce7610c645429d197218562ac8baf2164253d1252eafcd8c92f6473cc3563770a

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34732360180735bd

MD5 a9df986b68beb71a13cd34b1afe568a6
SHA1 669bbd932f62d825b33897b327b9e26c6dbffdf7
SHA256 ef6fd97aa73e51a40bf38188e7fbd5fbac0e4caac3d3bc0283edafe0d15dba8d
SHA512 005ba6f66f61e58c482cd4f53fe4c746979f9b61e8af375adb33b3e947808c5405715c1da82d4c08a07041f039188fc52383a3e8d92a68ba1874c54304db31f0

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34732387120c6d74

MD5 bb8dc2ac9cef8499d377b37ccc5584e6
SHA1 0070e65eac63dca2d92192125f49a2f81641170f
SHA256 da40a78b695d889b0dac29283bfff318fb2d2d539e0add8d72ecad08354611af
SHA512 ee182e81526258b3bc998f1b10461f97e9a3c4547bf9aeae69780643ca039ab4707685b3d931ce36ef06f258c67e01d568a4c8905aa18de2cd3c064bd5304e76

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3473242228b94ca2

MD5 442fb2abd9c7853ec95cd506d94ad678
SHA1 6ea7caf7de3e035536494748a3306a34c407565f
SHA256 7e3c42aafa5d1d661408a86285d1ec07c460b3e1448048a1a130f5fdcc0cba78
SHA512 d321ddc888b6139bfe8fc6ace44441280322efa94f2ed10ee43279c4064195ffa14b2b41969921546961ff394b0935db7f860a3fb668ad42436fce00f2d53128

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3473244060afb3df

MD5 ac42a9eaf2a03cdb5d3ad30845f32ae4
SHA1 ce8d8c0f3fd6f7aa5e55d1ad6ce602d56ad368d7
SHA256 c1d144d9bcb6279994ee4ab9ab88f15a678acd55f85a24866d5099b2fc679ad2
SHA512 096d44f2fced4991c3384256b069f2ad554633188f6e34ccb5e88ac248f01e9445d0ca91aba6304ec7972aaf1e9f52c879d5222c5a74b01866019b0fd1418508

C:\Users\Admin\AppData\Roaming\trafficermc\config.json

MD5 d7e4ffc4a3b8b91f1d84fba98044e84d
SHA1 99e18dc58dc52a571321502bbaf260d4f72983cd
SHA256 4fa3aab8e328392b71888ac048f8fbca41ac5149403d7be7a0b37e77bf2a411e
SHA512 bfe4b3989c9e77fdc6eeb6461150a8e39cc1c3763e08c547fbc9df95ea8eb46967baee9fb0a0481ce79a401a8d9c9f51c3b00b16f114293a7a8303f92a9f69f7

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3473350191a6d9a8

MD5 32ab9356d4e9cd4255526ed369c1cbd4
SHA1 b22da699d802e83a654590256608226b7df75866
SHA256 b4c27cfe3bba24ceb57cf877e12c9b5c01b765bd02121be502b5ec33e9de1e50
SHA512 dca0dcea63e17abd5665279e6e0d1be4ba53b66b4b8961df6be4aa341da44924045134f91c89521e240446f0fe0d9b92d63b3f95c992670c79a2cac19054fca8

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-3473355702cb168e

MD5 ec92480b6972d9653e88fae293879b02
SHA1 f59b1e54285238bd83e7ca5bf756433722aafa67
SHA256 ae8471a8208a70dbb5e07d67b0778d54627888fa26e6cedcf38cafcad7a12f27
SHA512 bed0210eccaba08efd4bf1460f48594e92a0d4cc284a7c9dc0d873cb2f61ac3517c12545c49c34140afd5957f61063acfe3f55106df4b544977a7da00bdc1638

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34733580266c529d

MD5 41005c00a6a1a0ae97231df0d5e8eeea
SHA1 826568a76caf2bfabb10a8e00eb1f7b2c98d2b6e
SHA256 ec8cc4089a961f209f845b30358cce1afbc05400c2017ac65886dc767777a636
SHA512 fc336464863d4c88e70ca1ce867eaeb7de9faf252117191c66334ef02c4dd8f7eb24f361e068772973739ba99d2f31add8ba2420427308d74b4be0ab73f47e4c

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34733687783bb0e7

MD5 04e15a575451c14eae4d2c4860544b97
SHA1 9f50f7ea3f2b76e00c6f254f9368df060bbd23b7
SHA256 387d82b69ffedc198f6a8fa7706c520799cdc7e04076217ba05b92ab7d16dbbf
SHA512 7189d67f3679774384e2bbc3bf11f7d02646f7b37da96231acee3c7fcdc1d140b41055660bae7b221701f47f9970249668b3965f59d8e4df108ebaed526c3c54

C:\Users\Admin\AppData\Roaming\trafficermc\config.json.tmp-34733931353ca1e3

MD5 95e29cb8568ab92fa137487110078118
SHA1 beb4eeb2a2160305b9eb517bc6c22711f661ac24
SHA256 f27b8047b1dc3be0121c4f8615e03ee658f93567cade2ade87458ef8f62f7c31
SHA512 b8fd9f10376b05ced0d6c6a4acb55965b8ad4883d0e0dfb3fcc03c22eeb3198775f59d69ed54e0c2dfcf48b0b4baeb32b19f261102f92058a7ca31f72251c3c8

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

MD5 1d42826cd9aba130dc47d5e420cf0754
SHA1 c20f14e8133f2c51bd505e780f832d2e7d2e211a
SHA256 7eae5e5169ac20c0cbea3268d52a93fb7181135a8cc9eb45af8ac65ac6b4aee5
SHA512 708e68dbce14b734f0fa11a3c738e05bd30ab40604205d2b57b69ece27d57e57574268da0277f3582d3bd72285909d2da2bbbedbf4e1c9f47048db89c5233844

C:\Users\Admin\AppData\Roaming\trafficermc\Network\TransportSecurity

MD5 7457b649405d861e91dd8607dd9ca805
SHA1 4b32bad9759949bdec4b21193395b31499727f4e
SHA256 855d0365f4c1724cb608ced7fb8fa9ecf526f85312c39bc3706130c798a304f3
SHA512 24e97da689d23afd80081c705d0c755f9f3898e5184ccd8f2f6b5418e5087f489bdb5f64eefa038e2fac41b0331412c28504b58c578c20f174a015afcf860fd9

C:\Users\Admin\AppData\Roaming\trafficermc\Network\Network Persistent State

MD5 6411d37cdc4b260272e62ea56599ad54
SHA1 f4065f9a25c25f38f5ad25344b951ba7e0134a8c
SHA256 d58c094063223cc5661a14b76a582657e2811c268a1fdedd537bca158c6d878a
SHA512 4d82a165f71045b906878205373c7c6a3faad09d3703fe14a73e7a7e7c89002bc1e60e2a39ff7b567df9d9282d632461593683a315b60a11479e06d02211fbc6