Malware Analysis Report

2025-01-19 04:34

Sample ID 240812-jt29vasbmj
Target https://github.com/TKazer/CS2_External
Tags
microsoft defense_evasion discovery persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://github.com/TKazer/CS2_External was found to be: Likely malicious.

Malicious Activity Summary

microsoft defense_evasion discovery persistence phishing privilege_escalation

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

Modifies system executable filetype association

Checks installed software on the system

Drops desktop.ini file(s)

Enumerates connected drives

Adds Run key to start application

Legitimate hosting services abused for malware hosting/C2

Checks system information in the registry

Detected potential entity reuse from brand microsoft.

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

System Network Configuration Discovery: Internet Connection Discovery

System Location Discovery: System Language Discovery

Browser Information Discovery

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Modifies registry class

Uses Task Scheduler COM API

Opens file in notepad (likely ransom note)

Modifies Internet Explorer settings

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies data under HKEY_USERS

Modifies system certificate store

Suspicious use of AdjustPrivilegeToken

NTFS ADS

Suspicious behavior: AddClipboardFormatListener

Suspicious use of FindShellTrayWindow

Checks processor information in registry

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-12 07:58

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-12 07:58

Reported

2024-08-12 08:10

Platform

win10v2004-20240802-en

Max time kernel

734s

Max time network

738s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://github.com/TKazer/CS2_External"

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\VisualStudioSetup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A

Modifies system executable filetype association

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\ = "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\ = "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx\ = "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\6EA26FFDFC3C3CADAF6C = "\"C:\\Program Files (x86)\\Microsoft Visual Studio\\Installer\\setup.exe\" resume --installPath \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\" --runOnce --installSessionId 598f6820-6c18-4281-a254-44e0459fa054" C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Delete Cached Update Binary = "C:\\Windows\\system32\\cmd.exe /q /c del /q \"C:\\Users\\Admin\\AppData\\Local\\Microsoft\\OneDrive\\Update\\OneDriveSetup.exe\"" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Delete Cached Standalone Update Binary = "C:\\Windows\\system32\\cmd.exe /q /c del /q \"C:\\Users\\Admin\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe\"" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A

Detected potential entity reuse from brand microsoft.

phishing microsoft

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00002.jrs C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jcp C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00001.jrs C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\System32\@WindowsHelloFaceToastIcon.png C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\wbem\AutoRecover\4E9BED298E4A2447DA493DE14F1E57F4.mof C:\Windows\system32\wbem\mofcomp.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jtx C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSStmp.log C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat C:\Windows\System32\svchost.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\es\Microsoft.VisualStudio.TeamFoundation.SharePointReporting.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\ko\Microsoft.VisualStudio.TeamFoundation.VersionControl.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\fr\Microsoft.Build.Utilities.Core.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.WindowsDesktop.App\8.0.7\fr\UIAutomationProvider.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\VB\Snippets\1033\windowsforms\Forms\ConvertMouseCoordinatestoScreenCoordinates.snippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Configs\detectors\configs\storage\storage.appSettings.everywhere.json C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Configs\components\projectProperty.json C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Configs\detectors\contexts\functionAppApiEligibleProject.json C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\etc\bash.bashrc C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\it\NuGet.LibraryModel.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\VB\Snippets\1033\windowsforms\Drawing\DrawOutlinedEllipse.snippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Packages\dirprj.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\cs\Microsoft.CodeAnalysis.CSharp.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Client\ru\Microsoft.VisualStudio.Imaging.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\cpp\Snippets\Typedef.tmSnippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.AspNetCore.App\8.0.7\Microsoft.AspNetCore.Authentication.Core.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.AspNetCore.App\8.0.7\Microsoft.Extensions.Http.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x86\api-ms-win-core-rtlsupport-l1-1-0.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\mingw64\bin\gcmcore.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\html\Snippets\HTML — 4.0 Transitional (doctype).plist C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\perl\Syntaxes\Perl 6.tmLanguage C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\xml\Syntaxes\XML.plist C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\pt-BR\Microsoft.ServiceHub.Resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\api-ms-win-crt-environment-l1-1-0.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.exe C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VC\VC_Pkg_Core_Registration.pkgdef C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\VsGraphics\Assets\Scripts\callbacks\undoableelementname.js C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\Core\Microsoft.VisualStudio.CoreUtility.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Client\zh-Hans\Microsoft.ServiceHub.Resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\ServiceHub\IdentityService\MessagePack.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.NETCore.App\8.0.7\clrgc.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Setup.Download.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\ru\Microsoft.VisualStudio.Language.CallHierarchy.Implementation.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\ruby\Snippets\randomize (ran).plist C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\pt-BR\NuGet.Packaging.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\pt-BR\Microsoft.TeamFoundation.Git.HostingProvider.GitHub.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.WindowsDesktop.App\8.0.7\ko\WindowsBase.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\VCProject.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\ja\Microsoft.VisualStudio.Setup.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Packages\Debugger\Visualizers\atlmfc.natvis C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pl\StreamJsonRpc.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\OpenFolder\it\Microsoft.VisualStudio.Workspace.Implementation.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\Microsoft.VisualStudio.VSHelp.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Xml\Schemas\PackageManifestSchema.Metadata.xsd C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\VB\Snippets\1033\fundamentals\collections and arrays\IteratingThroughACollection.snippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Tools\Llvm\x64\bin\api-ms-win-core-debug-l1-1-0.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Automation\clientbuildmgr.tlb.manifest C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\Core\it\Microsoft.CodeAnalysis.Workspaces.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ko\StreamJsonRpc.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\cpfecl.x64.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Microsoft.VisualStudio.Debugger.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\ko\Microsoft.TeamFoundation.OfficeIntegration.Common.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Tools\Llvm\x64\bin\api-ms-win-core-synch-l1-1-0.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\Snippets\1033\Visual C++\forr.snippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\Snippets\1033\Visual C++\struct.snippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Platform\Debugger\WebViews\Controls\css\dataGrid.css C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TextMate\Starterkit\Extensions\php\Snippets\require( ).tmSnippet C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\vsdevcmd\ext\netfxsdk.bat C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\ko\Microsoft.VisualStudio.Threading.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\Microsoft.VisualStudio.CoreUtility.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\zh-Hans\Microsoft.VisualStudio.TeamFoundation.VersionControl.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Platform\Guide\Content\Images\GitHub\ghtutorial10.png C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File created C:\Program Files\Microsoft Visual Studio\2022\Community\Msbuild\Microsoft\VC\v170\1033\usermacros.xml C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
File opened for modification C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\NuGet\ru\Microsoft.Web.XmlTransform.resources.dll C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Installer\e5bba4c.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba60.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI3A21.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{D56DC014-C4C1-4330-B32B-D9785DAE7BCB} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Fonts\CascadiaCode.ttf C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba5a.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{E37D72E2-6E06-4F6E-96C5-95C8F0B51E6E} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba60.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI182A.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba65.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe N/A
File opened for modification C:\Windows\Installer\e5bba6f.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba6a.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{26768860-CBEB-408D-9F30-87E0DBE11A6E} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba38.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba46.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba47.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba56.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba65.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba34.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.10.4.2421802,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe N/A
File created C:\Windows\Installer\e5bba6e.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBAA2.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba3d.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba51.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba5b.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba4b.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{6E7D95E1-DA2A-4DED-A8C6-3FBA1714DB62} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba3d.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba42.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI38D5.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba69.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe N/A
File opened for modification C:\Windows\Installer\e5bba4c.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba50.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba55.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba56.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba5b.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba5f.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI1925.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5bba47.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI80FF.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba38.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba42.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI173E.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba6f.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.log C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe N/A
File created C:\Windows\Installer\SourceHash{66DCCE57-13F7-43AC-B16E-48EA5C89806D} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI39A1.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF0C8.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI1634.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{236C270A-E9DE-4DBE-901E-8FA4FF6BC6D3} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba64.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba34.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{7E323F7D-3983-41D9-9D7F-F961D53EB7B8} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5bba73.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenservicelock.dat C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe N/A
File created C:\Windows\Installer\SourceHash{D1C55BC2-6D4A-4324-A55C-CA49A8824307} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{4653288F-EBB6-4AAB-9BD6-E34741F0B5D0} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\GACLock.dat C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.10.4.2421802,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe N/A
File created C:\Windows\Fonts\CascadiaMono.ttf C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{7239EFF3-63C4-474B-874B-5A7364E243EE} C:\Windows\system32\msiexec.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\VisualStudioSetup.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\winhlp32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\getmac.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\iexplore.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\VisualStudioSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.19041.546\"hypervisor=\"No Hypervisor (No SLAT)\"" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31124622" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OneDrive.exe = "11000" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0f2dca68eecda01 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\Total\ = "25" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime\url2 = 0000000000000000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000068fd66d6220e584abe447a4e1268eb5100000000020000000000106600000001000020000000878e56ab0787c07a4679b1a7a8a9f52b1f92b172a2cec2c385f5ae04dcb62290000000000e8000000002000020000000f03ff7e5ea641c9bb9363e4533ff78b9814e4baaf2f0c4744a7319268065ac7320000000cfb8590cffec72a16c4978dc7ed5a94531bd10cb504dd98f16e2bda878b23b8240000000a91daeb047816fc8366a7f57fda39ba64c7bb4fa22eed95e247863e9a0e7e466b7a470e6e21ecbc7cdeaaefde15ee4bdcc357f750874e59be8e8aa7471127852 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OneDrive.exe = "11000" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000068fd66d6220e584abe447a4e1268eb51000000000200000000001066000000010000200000008df1bc00d04fcc9f8fa7e94a81a007ee9cb84cdec52803aded4388a5cf316c7b000000000e8000000002000020000000abe37f2adf303d40e40ba7c096e19903968570fa8780aa967fed020ab9258a162000000001d928b37b392f528aa0ee6286b96fb895a7079865c3815514c84e5cc3a5e0cf40000000bd248b5c21859dbf21cb5a77dd4c186ade80f5e0fa0e8a784317b9902bf5c33f3b803c3c245f6f6fdfa9af89350cc25a4824242647cbf6fb13996d42194ef48f C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\MINIE C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\OneDrive.exe = "11000" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLs\url6 = "https://twitter.com/" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLs\url2 = "https://www.facebook.com/" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\IESettingSync C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "21" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLs\url1 = "http://google.com/" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLs\url5 = "https://login.live.com/" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{D8087B9A-5881-11EF-B1C5-D20DFB866B4D} = "0" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime\url6 = 0000000000000000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "6" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateLowDateTime = "2892444978" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLLowDateTime = "1251635200" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLs\url3 = "https://login.aliexpress.com/" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\TypedURLsTime C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "2892444978" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "25" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime\url4 = 0000000000000000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "6" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\VersionManager C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLHighDateTime = "50" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "0" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\TypedURLs C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime\url3 = 0000000000000000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime\url5 = 0000000000000000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\IESettingSync C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2e C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2F C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2C C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2D C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\30 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\31 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\30 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\32 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2B\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\31 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\32\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2c C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2d C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2f C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\33 C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\Interface\{c1439245-96b4-47fc-b391-679386c5d40f}\ = "IFileUploader" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\Interface\{0299ECA9-80B6-43C8-A79A-FB1C5F19E7D8}\TypeLib C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{82D71DF5-6597-48C4-B5D5-B8B697FA36B5} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C1C74DB7-A3A7-40A2-A279-A63BA756B8B0}\NumMethods C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F6F94D20-78C2-11D2-8FFE-00C04FA38314}\NumMethods\ = "14" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.hsh.0f6f8ff4\shell C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\Interface\{0f872661-c863-47a4-863f-c065c182858a} C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{5D5DD08F-A10E-4FEF-BCA7-E73E666FC66C}\TypeLib\ = "{909A6CCD-6810-46C4-89DF-05BE7EB61E6C}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\TypeLib\{BAE13F6C-0E2A-4DEB-AA46-B8F55319347C}\1.0\FLAGS\ = "0" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F6F94D22-78C2-11D2-8FFE-00C04FA38314}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5C18A5FE-7150-4E66-8246-27BFB0E7BFD9} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{93A28A93-52B8-41C9-B1E3-6B5FDF5252AC} C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{C2FE84F5-E036-4A07-950C-9BFD3EAB983A} C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.ruleset\OpenWithProgids\VisualStudio.ruleset.0f6f8ff4 C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D288564A-EDB2-4214-8690-FF9A82870379}\NumMethods\ = "5" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{1b7aed4f-fcaf-4da4-8795-c03e635d8edc}\ProxyStubClsid32 C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{411F3E08-E6B1-4789-AB29-755C52E52AC4}\ProxyStubClsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{51973C2E-CB0C-11D0-B5C9-00A0244A0E7A}\NumMethods C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0CA03998-3952-4EE0-86FA-FDD7E732AFFE}\ProxyStubClsid32\ = "{C5621364-87CC-4731-8947-929CAE75323E}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{ACDB5DB0-C9D5-461C-BAAA-5DCE0B980E40}\ = "ILaunchUXInterface" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7473FD0-7F75-478D-8D85-A485204E7A2D}\NumMethods\ = "6" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.git-client.0f6f8ff4 C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.asm.0f6f8ff4\AlwaysShowExt = "1" C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.dshader.0f6f8ff4\shell\Open\ddeexec C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0BFCC060-8C1D-11D0-ACCD-00AA0060275C}\ProgID\ = "Smart.DebugHelper.1" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.Launcher.vcxitems.0f6f8ff4\shell\Open\Command\ = "\"C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\VSLauncher.exe\" \"%1\"" C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{8D3F8F15-1DE1-4662-BF93-762EABE988B2} C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\TypeLib C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{390AF5A7-1390-4255-9BC9-935BFCFA5D57}\TypeLib\ = "{BAE13F6C-0E2A-4DEB-AA46-B8F55319347C}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{a7126d4c-f492-4eb9-8a2a-f673dbdd3334}\TypeLib\ = "{BAE13F6C-0E2A-4DEB-AA46-B8F55319347C}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{51973C41-CB0C-11D0-B5C9-00A0244A0E7A}\NumMethods\ = "4" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7031886B-61D2-4CB5-B909-00386090733B}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\VSFileHandler.VsShellExtHandler\CurVer C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{51973C13-CB0C-11D0-B5C9-00A0244A0E7A} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6015FD18-8257-4DF3-AC42-F074DEDD4CBD}\NumMethods\ = "5" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64B6BF8D-4913-478B-B646-6E3D2F4A19A5}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{82545B58-F203-4835-ACD6-6D0997AA6F25} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.idl.0f6f8ff4\shell\Open\ddeexec\ = "Open(\"%1\")" C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{49A0995B-8AC2-43A8-A91C-37DADDFB3BFA}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDDE0EEE-3B8D-4C82-B529-33F16B42832E}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{51973C23-CB0C-11D0-B5C9-00A0244A0E7A}\ProxyStubClsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F7473FD0-7F75-478D-8D85-A485204E7A2D} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{56B4E703-21A1-11D2-8FD6-00C04FA30000}\ = "IDebugJIT2_V7" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4C4A2835-682E-4CE1-AEBC-1E6B3A165B44}\ = "IEnumDebugModules2" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\LocalServer32 C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B69D88F9-BC5A-4EB3-A43C-9AF3155F0632}\ProxyStubClsid32\ = "{C5621364-87CC-4731-8947-929CAE75323E}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.Launcher._vcsxsln80\NoOpen C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\Interface\{50487D09-FFA9-45E1-8DF5-D457F646CD83}\TypeLib\Version = "1.0" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{EA23A664-A558-4548-A8FE-A6B94D37C3CF}\ = "ISyncEngine" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{012B5ACA-2C43-4950-84E5-DFF74D2603C3}\ProxyStubClsid32\ = "{C5621364-87CC-4731-8947-929CAE75323E}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Interface\{da82e55e-fa2f-45b3-aec3-e7294106ef52} C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F6F94D0E-78C2-11D2-8FFE-00C04FA38314}\ProxyStubClsid32 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.natvis.0f6f8ff4\shell\Open\ddeexec\Application\ = "VisualStudio.17.0" C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\InitPropertyBag\TargetKnownFolder = "{a52bba46-e9e1-435f-b3d9-28daa648c0f6}" C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ADE2EEB9-FC85-4F5B-B5D9-D431B4AAC31A}\ProxyStubClsid32\ = "{C5621364-87CC-4731-8947-929CAE75323E}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B90282FC-2D44-4050-A7B2-BF3BCFF8BAF1}\ = "IDebugModOpt" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{12E08858-3A80-45E1-A331-AAEE61E6E27F}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\VisualStudio.sitemap.0f6f8ff4\shell\Open\ddeexec\Application C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{78A51822-51F4-11D0-8F20-00805F2CD064}\InprocServer32\ThreadingModel = "Both" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B56106F-BD51-11D2-9238-00A02448799A}\NumMethods C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8155E4CA-1607-4E69-81F4-24201A1C70B1}\NumMethods C:\Windows\system32\msiexec.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\8BFE3107712B3C886B1C96AAEC89984914DC9B6B C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\8BFE3107712B3C886B1C96AAEC89984914DC9B6B\Blob = 0300000001000000140000008bfe3107712b3c886b1c96aaec89984914dc9b6b140000000100000014000000e6fc5f7bbb220058e4724eb5f421742332e6efac040000000100000010000000b7a7b4605e33389f48b33d17cae730060f0000000100000020000000121af4b922a74247ea49df50de37609cc1451a1fe06b2cb7e1e079b492bd819519000000010000001000000016fc4494124fb22d1dd143d205bdc30d5c0000000100000004000000000800001800000001000000100000003c70faea25600ce3b2cc5f0b222ed6292000000001000000740600003082067030820458a003020102020a610c524c000000000003300d06092a864886f70d01010b0500308188310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e31323030060355040313294d6963726f736f667420526f6f7420436572746966696361746520417574686f726974792032303130301e170d3130303730363230343031375a170d3235303730363230353031375a307e310b3009060355040613025553311330110603550408130a57617368696e67746f6e3110300e060355040713075265646d6f6e64311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e312830260603550403131f4d6963726f736f667420436f6465205369676e696e6720504341203230313030820122300d06092a864886f70d01010105000382010f003082010a0282010100e90e64507967b5c4e3fd09004c9e94acf75668ea44d8cfc5584fa9a5767c6d45bad33992b4a41ef9f96582e417d28ffd449c08e86593ce2c5584bf7d08e32e2ba8412b18b7a24b6e494c6b1507ded1d2c2891e7194cdb57f4bb4af08d8cc88d66b17943a93ce263fece6fe349857d51d5d49f6b22a2ed585bb593ff890b42b8374ca2bb33b46e3f04649c1176654c91cbd1dc455625772f867b9252034de5da6a5955eab2880cdd5b29ee503b563d3b214c8c1c88a260a597f07ecff0eed8012354c12a6be525bf5a6dae08b0b4877d68547d510b9c6e8aaee8b6a2d055c60c6b42a5b9c231c5f45e31a141e6f37cb1933806a894da36a66637893d530cf951f0203010001a38201e3308201df301006092b06010401823715010403020100301d0603551d0e04160414e6fc5f7bbb220058e4724eb5f421742332e6efac301906092b0601040182371402040c1e0a00530075006200430041300b0603551d0f040403020186300f0603551d130101ff040530030101ff301f0603551d23041830168014d5f656cb8fe8a25c6268d13d94905bd7ce9a18c430560603551d1f044f304d304ba049a0478645687474703a2f2f63726c2e6d6963726f736f66742e636f6d2f706b692f63726c2f70726f64756374732f4d6963526f6f4365724175745f323031302d30362d32332e63726c305a06082b06010505070101044e304c304a06082b06010505073002863e687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b692f63657274732f4d6963526f6f4365724175745f323031302d30362d32332e63727430819d0603551d2004819530819230818f06092b0601040182372e03308181303d06082b060105050702011631687474703a2f2f7777772e6d6963726f736f66742e636f6d2f504b492f646f63732f4350532f64656661756c742e68746d304006082b0601050507020230341e32201d004c006500670061006c005f0050006f006c006900630079005f00530074006100740065006d0065006e0074002e201d300d06092a864886f70d01010b050003820201001a74ef574f297bc4168578b850d322fc099dac8297f834ff2a2c979512e5e4bfcfbf93c8e334a9db81b8dc1e00bed2356fafe57f799577e502d4f1ebd8cd4e1e1b61a2c25a231af08ca86251456708e33f3c1e93f8308517c83940a6d70eb32129e5a5a1698c2293cc7498e7a14743f253acc00f30697ffed225206d6f61d3df07d5d972002c6986763d51dba63948c937616d07dd5319cba7d661c2bfe283ab0fe06b9b95d67d2851b0894a51a49a6cc8b71f4a1a0e69a9d7dcc17ed14970aab6adbb72476317faa6d6a2a686eca810449b63b6b2698906c746867a183fe8c51d21d57bf902232dc541cbbf1d4cc816efb19c7ffc224b498a6e15e3a67f765bd1537991859dd5d2db3d7335f33cae54b252476ac0aa1395d28e11da99675e328cfb3785d1dc75859c87c65a5785c2bfdd0d8f8c9b2debb4eecf27d3b55e69faa4160401a7246773cf4d4fb6de0556977af7e9524df477054f85c6d80bf18eed4209d10d76e3235678222636becab18c6eaa1de485da4733628fa4c991335f711e40af9865c922e84221258a1c2d60d9378941892a160fd7613c94686052efd64799a08040ee1581773e9ce053181a501d38959b1e663313273917788736ce4ec35fb2f53d4753b6e0e5db0b613d2ad7922cce375a3e404231a41f1008c2569cbf245d51029d6a79d217d3dac1948e077b257144ab066ae6d4c6df239a9675c5 C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\VisualStudioSetup.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\CS2_External-master.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe N/A
N/A N/A C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeTcbPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSystemtimePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeAuditPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeUndockPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeManageVolumePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeImpersonatePrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=17.10.34803.213\VSInitializer.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeTcbPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Windows\helppane.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Windows\helppane.exe N/A
N/A N/A C:\Windows\helppane.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 2372 wrote to memory of 852 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 2392 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 852 wrote to memory of 3020 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://github.com/TKazer/CS2_External"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://github.com/TKazer/CS2_External

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2024 -parentBuildID 20240401114208 -prefsHandle 1952 -prefMapHandle 1944 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {791f0505-7e1f-4230-86eb-d8eac9e76143} 852 "\\.\pipe\gecko-crash-server-pipe.852" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2464 -parentBuildID 20240401114208 -prefsHandle 2452 -prefMapHandle 2448 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {117d5fcb-906e-4a92-8fe1-b97c5a3a192e} 852 "\\.\pipe\gecko-crash-server-pipe.852" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2852 -childID 1 -isForBrowser -prefsHandle 2860 -prefMapHandle 2848 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8314f8d5-6edd-4af7-9613-db80ad5e215b} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3648 -childID 2 -isForBrowser -prefsHandle 3412 -prefMapHandle 2816 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f2db15ab-9a09-4f7d-b0a3-4685692dd16f} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4388 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4708 -prefMapHandle 4704 -prefsLen 29090 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {679d7e28-eb31-4209-87b7-79ced2ce494a} 852 "\\.\pipe\gecko-crash-server-pipe.852" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5388 -childID 3 -isForBrowser -prefsHandle 5352 -prefMapHandle 5372 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b456b5a-2477-46d5-8851-8f1112b686f4} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5548 -childID 4 -isForBrowser -prefsHandle 5468 -prefMapHandle 5472 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f6672dc9-0ffe-4214-888c-8823b1b5466c} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5664 -childID 5 -isForBrowser -prefsHandle 5744 -prefMapHandle 5740 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a8b4377-8956-4a2b-8783-802ea2d501ea} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6200 -childID 6 -isForBrowser -prefsHandle 3912 -prefMapHandle 3796 -prefsLen 29357 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e153a8d-55ec-4ff3-8ffa-51710c985be0} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6360 -childID 7 -isForBrowser -prefsHandle 4332 -prefMapHandle 4328 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f6bf9a0-a464-429d-9326-55ed3e9a69db} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5924 -childID 8 -isForBrowser -prefsHandle 6608 -prefMapHandle 6604 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7bdf1dcc-c950-4bce-8192-ccef5a2ab902} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3900 -childID 9 -isForBrowser -prefsHandle 3804 -prefMapHandle 1500 -prefsLen 27998 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {304c3f3f-1021-4c4b-bb1e-c7d095add445} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5272 -parentBuildID 20240401114208 -prefsHandle 6920 -prefMapHandle 6924 -prefsLen 30532 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a1460c4-f89c-4b0b-9d9b-383493260ebb} 852 "\\.\pipe\gecko-crash-server-pipe.852" rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6836 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 6928 -prefMapHandle 6916 -prefsLen 30532 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fcb52a4a-ec6d-4c05-b9db-151ce9b2ea09} 852 "\\.\pipe\gecko-crash-server-pipe.852" utility

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultc0e57351h0db4h4b0ehaeabh530ea12fd06c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fffe7f146f8,0x7fffe7f14708,0x7fffe7f14718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,2956834345300086918,14261097520656160956,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,2956834345300086918,14261097520656160956,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,2956834345300086918,14261097520656160956,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultb7e52562h1eafh4c73h89deh2f590ff2b613

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fffe7f146f8,0x7fffe7f14708,0x7fffe7f14718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,2895870166862276820,15169475615343394637,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,2895870166862276820,15169475615343394637,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,2895870166862276820,15169475615343394637,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Users\Admin\Downloads\VisualStudioSetup.exe

"C:\Users\Admin\Downloads\VisualStudioSetup.exe"

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe" --env "_SFX_CAB_EXE_PACKAGE:C:\Users\Admin\Downloads\VisualStudioSetup.exe _SFX_CAB_EXE_ORIGINALWORKINGDIR:C:\Users\Admin\Downloads"

C:\Windows\SysWOW64\getmac.exe

"getmac"

C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe

"C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe" /finalizeInstall install --in "C:\ProgramData\Microsoft\VisualStudio\Packages\_bootstrapper\vs_setup_bootstrapper_202408120801555252.json" --locale en-US --activityId "d5b2bdd2-d1de-4a92-8010-5f036fd869d3" --campaign "2030:f8a77d40b4f246008c3f504a1368adcf" --pipe "1b652bce-53fe-4f29-b3b2-37f9ee6911d9"

C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exe

"C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exe" /finalizeinstall 6F320B93-EE3C-4826-85E0-ADF79F8D4C61 "Visual Studio Installer" "Microsoft Visual Studio Installer" 3.10.2157.28521 0 "C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe"

C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe

"C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe" elevate --activityId d5b2bdd2-d1de-4a92-8010-5f036fd869d3 --campaign 2030:f8a77d40b4f246008c3f504a1368adcf --handle 459406 --locale en-US --pid 224 --pipeName 1bdf04059ca44a4fb0dbc89ea7d2935d --serializedSession "{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Default\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1000,\"UserId\":\"e5ae94c7-825f-4347-a58e-5a6617d0bd8a\",\"Id\":\"b0abf139-3ff4-4048-aa26-060aa69dd194\",\"ProcessStartTime\":638590465505836602,\"SkuName\":null,\"VSExeVersion\":null,\"BucketFiltersToEnableWatsonForFaults\":[{\"AdditionalProperties\":[],\"Id\":\"a02930d9-c607-41c3-8698-0fd9196735a5\",\"WatsonEventType\":\"VisualStudioNonFatalErrors2\",\"BucketParameterFilters\":[null,null,\"(?i)vs\\.setup.*\",null,null,null,null,null,null,null]},{\"AdditionalProperties\":[],\"Id\":\"64a13603-6d89-42e4-a299-13f77e5ad306\",\"WatsonEventType\":\"VisualStudioNonFatalErrors2\",\"BucketParameterFilters\":[null,null,\"(?i)vs\\.willow.*\",null,null,null,null,null,null,null]}],\"BucketFiltersToAddDumpsToFaults\":[]}"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x2ec 0x2f4

C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" queue pause

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe

"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" queue pause

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7636 -childID 10 -isForBrowser -prefsHandle 3312 -prefMapHandle 7152 -prefsLen 28338 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a182fb84-6372-4136-b57c-cc6f76c1fae4} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7808 -childID 11 -isForBrowser -prefsHandle 7912 -prefMapHandle 7900 -prefsLen 28338 -prefMapSize 244658 -jsInitHandle 892 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {26b965ed-29b2-48a2-83e2-44102d3bf4de} 852 "\\.\pipe\gecko-crash-server-pipe.852" tab

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=17.10.34803.213\VSInitializer.exe

"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=17.10.34803.213\VSInitializer.exe" -Operation Install -InstallationID 0f6f8ff4 -InstallationName VisualStudio/17.10.5+35122.118 -InstallationVersion 17.10.35122.118 -InstallationWorkloads Microsoft.VisualStudio.Workload.CoreEditor,Microsoft.VisualStudio.Workload.NativeDesktop -InstallationPackages Microsoft.VisualStudio.Component.CoreEditor,Microsoft.VisualStudio.Component.TypeScript.TSServer,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions,Microsoft.VisualStudio.Component.JavaScript.TypeScript,Microsoft.VisualStudio.Component.Roslyn.Compiler,Microsoft.Component.MSBuild,Microsoft.VisualStudio.Component.Roslyn.LanguageServices,Microsoft.VisualStudio.Component.TextTemplating,Microsoft.VisualStudio.Component.NuGet,Microsoft.VisualStudio.Component.Debugger.JustInTime,Component.Microsoft.VisualStudio.LiveShare.2022,Microsoft.VisualStudio.Component.IntelliCode,Component.VisualStudio.GitHub.Copilot,Microsoft.VisualStudio.Component.VC.CoreIde,Microsoft.VisualStudio.Component.VC.Tools.x86.x64,Microsoft.VisualStudio.Component.Graphics.Tools,Microsoft.VisualStudio.Component.VC.DiagnosticTools,Microsoft.VisualStudio.Component.Windows11SDK.22621,Microsoft.VisualStudio.Component.VC.ATL,Microsoft.VisualStudio.Component.SecurityIssueAnalysis,Microsoft.VisualStudio.Component.VC.Redist.14.Latest,Microsoft.VisualStudio.ComponentGroup.NativeDesktop.Core,Microsoft.VisualStudio.Component.Windows11Sdk.WindowsPerformanceToolkit,Microsoft.VisualStudio.Component.CppBuildInsights,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions.CMake,Microsoft.VisualStudio.Component.VC.CMake.Project,Microsoft.VisualStudio.Component.VC.TestAdapterForBoostTest,Microsoft.VisualStudio.Component.VC.TestAdapterForGoogleTest,Microsoft.VisualStudio.Component.VC.ASAN,Microsoft.VisualStudio.Component.Vcpkg -InstallationPath """C:\Program Files\Microsoft Visual Studio\2022\Community""" -ComponentId Microsoft.VisualStudio.Product.Community -ChannelsPath """https://aka.ms/vs/17/release/channel""" -SetupEngineFilePath """C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe""" -Log """C:\Users\Admin\AppData\Local\Temp\dd_setup_20240812080314_016_Microsoft.VisualStudio.Initializer.log"""

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding D52F267ECB2FC0F1F665ECB9D4B7B8C2

C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe

"C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe" -autorecover "C:\ProgramData\Microsoft\VisualStudio\SetupWMI\Microsoft.VisualStudio.Setup.Management.mof"

C:\Windows\system32\wbem\mofcomp.exe

"C:\Windows\system32\wbem\mofcomp" -autorecover C:\ProgramData\Microsoft\VisualStudio\SetupWMI\Microsoft.VisualStudio.Setup.Management.mof

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\CS2_External-master\CS2_External-master\CS2_External\Game.cpp

C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe" "C:\Users\Admin\Downloads\PingNew.ps1"

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\RedoEdit.txt

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe

"C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe"

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

"C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe

"C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe"

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe

/updateInstalled /background

C:\Program Files (x86)\Internet Explorer\iexplore.exe

"C:\Program Files (x86)\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\IEXPLORE.EXE

"C:\Program Files\Internet Explorer\IEXPLORE.EXE"

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5068 CREDAT:17410 /prefetch:2

C:\Windows\winhlp32.exe

"C:\Windows\winhlp32.exe"

C:\Windows\helppane.exe

C:\Windows\helppane.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=528881

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffe7f146f8,0x7fffe7f14708,0x7fffe7f14718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4236 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4236 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4462322456648981274,11591402254871680453,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6508 /prefetch:1

C:\Windows\system32\mspaint.exe

"C:\Windows\system32\mspaint.exe" "C:\Windows\System32\@WindowsHelloFaceToastIcon.png" /ForceBootstrapPaint3D

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.10.4.2421802,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe

"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.10.4.2421802,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe"

Network

Country Destination Domain Proto
N/A 127.0.0.1:61801 tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 205.86.155.35.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
N/A 127.0.0.1:61810 tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com tcp
NL 142.250.179.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 196.179.250.142.in-addr.arpa udp
NL 142.250.179.196:443 www.google.com udp
US 8.8.8.8:53 131.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 duckduckgo.com udp
IE 52.142.124.215:80 duckduckgo.com tcp
IE 52.142.124.215:80 duckduckgo.com tcp
US 8.8.8.8:53 duckduckgo.com udp
US 8.8.8.8:53 duckduckgo.com udp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 215.124.142.52.in-addr.arpa udp
US 8.8.8.8:53 improving.duckduckgo.com udp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 88.221.134.209:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
NL 142.250.179.174:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
NL 142.250.179.174:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-5hne6nsk.gvt1.com udp
US 8.8.8.8:53 174.179.250.142.in-addr.arpa udp
NL 172.217.132.38:443 r1---sn-5hne6nsk.gvt1.com tcp
US 8.8.8.8:53 r1.sn-5hne6nsk.gvt1.com udp
US 8.8.8.8:53 r1.sn-5hne6nsk.gvt1.com udp
NL 172.217.132.38:443 r1.sn-5hne6nsk.gvt1.com udp
US 8.8.8.8:53 38.132.217.172.in-addr.arpa udp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
IE 52.142.124.215:443 improving.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 links.duckduckgo.com udp
IE 20.223.54.233:443 links.duckduckgo.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 233.54.223.20.in-addr.arpa udp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 links.duckduckgo.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
IE 52.142.125.222:443 external-content.duckduckgo.com tcp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 external-content.duckduckgo.com udp
US 8.8.8.8:53 222.125.142.52.in-addr.arpa udp
US 8.8.8.8:53 visualstudio.microsoft.com udp
GB 23.211.97.83:443 visualstudio.microsoft.com tcp
GB 23.211.97.83:443 visualstudio.microsoft.com tcp
US 8.8.8.8:53 e19210.b.akamaiedge.net udp
GB 23.211.97.83:443 e19210.b.akamaiedge.net tcp
US 8.8.8.8:53 83.97.211.23.in-addr.arpa udp
US 8.8.8.8:53 e19210.b.akamaiedge.net udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
JP 40.74.98.194:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 onedscolprdjpw02.japanwest.cloudapp.azure.com udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 a1449.dscg2.akamai.net udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 e13678.dscb.akamaiedge.net udp
US 8.8.8.8:53 s-part-0036.t-0009.fb-t-msedge.net udp
GB 95.100.245.144:443 e13678.dscb.akamaiedge.net tcp
US 13.107.253.64:443 s-part-0036.t-0009.fb-t-msedge.net tcp
GB 95.100.245.144:443 e13678.dscb.akamaiedge.net tcp
US 8.8.8.8:53 onedscolprdjpw02.japanwest.cloudapp.azure.com udp
US 8.8.8.8:53 www.clarity.ms udp
GB 95.100.245.144:443 e13678.dscb.akamaiedge.net tcp
US 13.107.253.64:443 www.clarity.ms tcp
GB 95.100.245.144:443 e13678.dscb.akamaiedge.net tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 194.98.74.40.in-addr.arpa udp
US 8.8.8.8:53 144.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 a1449.dscg2.akamai.net udp
US 13.107.246.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 s-part-0036.t-0009.fb-t-msedge.net udp
US 8.8.8.8:53 e13678.dscb.akamaiedge.net udp
US 13.107.253.64:443 www.clarity.ms tcp
US 8.8.8.8:53 19.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 marketplace.visualstudio.com udp
US 13.107.42.18:443 marketplace.visualstudio.com tcp
US 13.107.42.18:443 marketplace.visualstudio.com tcp
US 8.8.8.8:53 marketplace.visualstudio.com udp
US 8.8.8.8:53 marketplace.visualstudio.com udp
US 8.8.8.8:53 h.clarity.ms udp
JP 40.74.98.194:443 onedscolprdjpw02.japanwest.cloudapp.azure.com tcp
US 8.8.8.8:53 18.42.107.13.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 h.clarity.ms udp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 onedscolprdjpw02.japanwest.cloudapp.azure.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 app.vssps.visualstudio.com udp
US 13.107.42.18:443 app.vssps.visualstudio.com tcp
US 8.8.8.8:53 l-0009.l-msedge.net udp
US 8.8.8.8:53 l-0009.l-msedge.net udp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.253.64:443 www.clarity.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 img.youtube.com udp
NL 142.250.179.142:443 img.youtube.com tcp
NL 142.250.179.142:443 img.youtube.com tcp
NL 142.250.179.142:443 img.youtube.com tcp
NL 142.250.179.142:443 img.youtube.com tcp
NL 142.250.179.142:443 img.youtube.com tcp
NL 142.250.179.142:443 img.youtube.com tcp
US 8.8.8.8:53 ytimg.l.google.com udp
US 8.8.8.8:53 ytimg.l.google.com udp
NL 142.250.179.142:443 ytimg.l.google.com udp
US 8.8.8.8:53 142.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 c2rsetup.officeapps.live.com udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
IE 52.111.236.68:443 c2rsetup.officeapps.live.com tcp
US 8.8.8.8:53 prod.c2rsetup.microsoft.com.akadns.net udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 prod.c2rsetup.microsoft.com.akadns.net udp
US 8.8.8.8:53 68.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 onedscolprdaue02.australiaeast.cloudapp.azure.com udp
US 8.8.8.8:53 onedscolprdaue02.australiaeast.cloudapp.azure.com udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 visualstudio.microsoft.com udp
US 8.8.8.8:53 e19210.b.akamaiedge.net udp
US 8.8.8.8:53 e19210.b.akamaiedge.net udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 vmss-clarity-ingest-eus-c.eastus.cloudapp.azure.com udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 cxcs.microsoft.net udp
GB 2.23.127.118:443 cxcs.microsoft.net tcp
GB 184.28.176.96:443 www.bing.com tcp
US 8.8.8.8:53 96.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 118.127.23.2.in-addr.arpa udp
US 8.8.8.8:53 41.173.79.40.in-addr.arpa udp
US 8.8.8.8:53 az667904.vo.msecnd.net udp
US 8.8.8.8:53 az700632.vo.msecnd.net udp
US 8.8.8.8:53 targetednotifications-tm.trafficmanager.net udp
US 13.85.16.224:443 targetednotifications-tm.trafficmanager.net tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 57.110.18.2.in-addr.arpa udp
US 8.8.8.8:53 224.16.85.13.in-addr.arpa udp
US 8.8.8.8:53 aka.ms udp
GB 2.16.234.57:443 aka.ms tcp
US 8.8.8.8:53 download.visualstudio.microsoft.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
GB 2.16.234.57:443 aka.ms tcp
US 8.8.8.8:53 57.234.16.2.in-addr.arpa udp
US 8.8.8.8:53 200.34.232.68.in-addr.arpa udp
GB 2.16.234.57:443 aka.ms tcp
US 8.8.8.8:53 visualstudio-devdiv-c2s.msedge.net udp
US 13.107.5.88:443 visualstudio-devdiv-c2s.msedge.net tcp
US 8.8.8.8:53 88.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 sendvsfeedback2.azurewebsites.net udp
US 40.112.143.140:443 sendvsfeedback2.azurewebsites.net tcp
US 13.107.5.88:443 visualstudio-devdiv-c2s.msedge.net tcp
US 8.8.8.8:53 140.143.112.40.in-addr.arpa udp
US 8.8.8.8:53 targetednotifications-tm.trafficmanager.net udp
US 20.42.128.98:443 targetednotifications-tm.trafficmanager.net tcp
US 8.8.8.8:53 aka.ms udp
SG 23.195.154.8:443 aka.ms tcp
US 8.8.8.8:53 98.128.42.20.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 mobile.events.data.microsoft.com udp
US 20.189.173.24:443 mobile.events.data.microsoft.com tcp
US 8.8.8.8:53 8.154.195.23.in-addr.arpa udp
US 8.8.8.8:53 download.visualstudio.microsoft.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
US 8.8.8.8:53 24.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 vsstartpagenewsfeed.azureedge.net udp
SG 23.195.154.8:443 aka.ms tcp
SG 23.195.154.8:443 aka.ms tcp
SG 23.195.154.8:443 aka.ms tcp
SG 23.195.154.8:443 aka.ms tcp
SG 23.195.154.8:443 aka.ms tcp
US 8.8.8.8:53 mobile.events.data.microsoft.com udp
US 52.182.143.209:443 mobile.events.data.microsoft.com tcp
US 8.8.8.8:53 209.143.182.52.in-addr.arpa udp
US 13.107.5.88:443 visualstudio-devdiv-c2s.msedge.net tcp
US 8.8.8.8:53 targetednotifications-tm.trafficmanager.net udp
US 20.42.128.98:443 targetednotifications-tm.trafficmanager.net tcp
US 8.8.8.8:53 download.visualstudio.microsoft.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.110.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.22:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 22.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 vortex.data.microsoft.com udp
US 20.42.65.85:443 vortex.data.microsoft.com tcp
US 8.8.8.8:53 85.65.42.20.in-addr.arpa udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 www.microsoft.com udp
GB 95.100.245.144:80 www.microsoft.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 92.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 23.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 download.visualstudio.microsoft.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp
US 8.8.8.8:53 132.194.113.52.in-addr.arpa udp
US 8.8.8.8:53 71.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 api.bing.com udp
US 13.107.5.80:443 api.bing.com tcp
US 13.107.5.80:443 api.bing.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
NL 172.217.23.206:80 google.com tcp
NL 172.217.23.206:80 google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 206.23.217.172.in-addr.arpa udp
NL 142.250.179.196:80 www.google.com tcp
NL 142.250.179.196:80 www.google.com tcp
NL 142.250.179.196:443 www.google.com tcp
US 8.8.8.8:53 c.pki.goog udp
NL 142.250.179.131:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
NL 142.250.179.131:80 o.pki.goog tcp
US 8.8.8.8:53 3.36.251.142.in-addr.arpa udp
GB 92.123.142.107:443 www.bing.com tcp
GB 92.123.142.107:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 107.142.123.92.in-addr.arpa udp
GB 92.123.142.83:443 th.bing.com tcp
GB 92.123.142.83:443 th.bing.com tcp
GB 92.123.142.185:443 r.bing.com tcp
GB 92.123.142.185:443 r.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.14:443 login.microsoftonline.com tcp
NL 20.190.160.14:443 login.microsoftonline.com tcp
US 8.8.8.8:53 83.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 185.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 duckduckgo.com udp
IE 52.142.124.215:443 duckduckgo.com tcp
IE 52.142.124.215:443 duckduckgo.com tcp
US 8.8.8.8:53 html.duckduckgo.com udp
IE 52.142.124.215:443 html.duckduckgo.com tcp
IE 52.142.124.215:443 html.duckduckgo.com tcp
US 8.8.8.8:53 support.microsoft.com udp
GB 95.100.244.112:443 support.microsoft.com tcp
US 8.8.8.8:53 support.content.office.net udp
US 8.8.8.8:53 www.microsoft.com udp
GB 95.100.245.144:443 www.microsoft.com tcp
GB 95.100.245.144:443 www.microsoft.com tcp
US 8.8.8.8:53 aadcdn.msftauth.net udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
GB 23.214.145.253:443 support.content.office.net tcp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 mem.gfx.ms udp
GB 2.18.109.131:443 c.s-microsoft.com tcp
US 13.107.253.64:443 mem.gfx.ms tcp
US 152.199.21.175:443 aadcdn.msftauth.net tcp
US 13.107.253.64:443 mem.gfx.ms tcp
US 20.189.173.1:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 112.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 253.145.214.23.in-addr.arpa udp
US 13.107.253.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.14:443 login.microsoftonline.com tcp
US 13.107.253.64:443 mem.gfx.ms tcp
US 152.199.21.175:443 aadcdn.msftauth.net tcp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 8.8.8.8:53 131.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 8.8.8.8:53 67.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 1.173.189.20.in-addr.arpa udp
US 20.189.173.1:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 13.107.253.64:443 acctcdn.msauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
GB 23.214.145.253:443 support.content.office.net tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 download.visualstudio.microsoft.com udp
FR 68.232.34.200:443 download.visualstudio.microsoft.com tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\pending_pings\fa4f2068-e766-40fb-9559-8496c16ff96f

MD5 c4a4d190ec40c3d87812c330dd81f743
SHA1 8a1659ddc2943f4cbe1c0781c3f68274101bcaaf
SHA256 5126a3174a2d586a3364904f7608a4a419f2dc3eebfbc2b3196f92f74392c81a
SHA512 2fa5373c252f81fc510ef015b170d17e485f1c9a13c45a78953311f6742934bc38e739934187eb68b9ea39dc4902e726ed7b923c3624834e4618b56a72769288

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\pending_pings\08eb72eb-a22b-4241-b6fa-609fdafc250f

MD5 0159389b43657b3b0a2fef1d286a5b1a
SHA1 28ca50327fbbbe26facdbf15b2c4ba4a1719d4aa
SHA256 d7220db38995674f738d48cdfbe6f0006aac522174773fa926f818d1d521245c
SHA512 5fe5ace063c093ad1615b44cce1256a9cb9ee03675195c25449e16b211b5833ecc9c8abed076682398cbcfaaa2ca2ac515700fea690c05b6692b62539083a7c4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\pending_pings\50ea501f-d7db-4eb6-a075-cfa656f9f56c

MD5 f7aaf25e8cc55feefffcd3b7f845b870
SHA1 7bb33dbf061fa143042dec42802ec6322d9d3b9d
SHA256 fe1c73e479ddeee86b096f195aadd1ab32d1df019c53728a42765d6c6ed49b6a
SHA512 a3944e94fdb872efe2c9ce06f1228934d4592c9caf33e87535cdd67954a911cd2b910a941d259156b7e184d090b22f2b97baefada6a6928b66455ff8b6fa4ed8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\db\data.safe.tmp

MD5 ff217051ae64630a87453faf0ef46e2a
SHA1 9b48707464fad005f6f052c6fabeddf9387c99c1
SHA256 5c892294345c852ab026c167825ae2c9d2571a4f4ce716ec691a34e430c8ae18
SHA512 45d6165c4297e241541cab316db84adf7d1ec89b812aa85e40b3b87d1230e8147cf5c20190b7ae580d6a772ee50929906f8aa17349b520e7255ef91c620641aa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\prefs.js

MD5 5227490da3c0cb9aeee82eadefad2106
SHA1 2ca17d36a9884d4d924b5cfa54fb537acaad114f
SHA256 d57744bda80e80d9255d0ba7d57a83905aa125dfd8e8221e0ce7c8e361d49ab6
SHA512 9bdf45f03486e3f0915db76a5c242e6353a91016b91856395c3753730a0717e5775f859e3518f01fca2dfec3d9f80e3077bc2598360e824ca0e3fa70bc4886b5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\prefs-1.js

MD5 155855e67196808c1701d5c7d77fa7d7
SHA1 92cd9ef2d50cad5fa81dd034c7338bcb98994128
SHA256 188cc3637226f376d1e868119511e0d3ac0e7b26563f3b45c52235355b9460bc
SHA512 363c84d3dde23a1e33a21c1f019e8e9772908a985aa5332ec4a64af58b482f44189975235794ebc49bfd8e8c76ecbe02a49dd5e51f2469c1f79aaa0e04f44a19

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\AlternateServices.bin

MD5 0c75bc24699a1347d074e9349a182da6
SHA1 b832cffa6f1cb50471a906087105008d992cfe8d
SHA256 a9a3fa9b6e5ee859addd6572a8c976a95733efcc6ee381d96110159013724aa5
SHA512 5e7e18c41277fff637f42878538e0e7096ab2003d639339240c4eb956137cf97a9eda150c18fa98f5d7df25a7569361f32d6e833407328e4847c9296c782537f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\CE00178163AEF2A5DEECF6E5460EF45535E2AB99

MD5 3b845bd56eb90c359cc7d23962a3fc82
SHA1 8566c2a04cce0f625ab62da6ca569cbd81e7a247
SHA256 b480e31b888d53585fa525d551c95407732fd7659ef015b6ee0c92da941b7649
SHA512 5ecff51d338ba2454e83fef7cc1e711840021f6ab241649a577b10ff7198ceb76ed3a7867af17db9d352558c71c778a98f5b760c2680cf1b264cfabaad8b736e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 e7da64ddf1037ec888d046cfcf2a50f4
SHA1 866d0e59b76a5daee6c8b704af73d496c7ea0321
SHA256 37bf0bf1574f30b489907ebc94d0784467ce326fec538713a318f32dbb9ccc03
SHA512 f5137b2968bfbb39cc065a8e62d7d96528b545266522d92ec7b8b8767f4b18bede16221726b7c930b1540207f388421078ff480f6d528180c3cda2d81c7754a4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\db\data.safe.tmp

MD5 b2f57b1538bdfe469dc76856655d1359
SHA1 bf9bbcec215344315c8707cfb5ef6bf8bcf56cc2
SHA256 23e2e1044966eb8e91f65f3555a2ff2a516b0434f81b14f7a3d84d2c1acfc5c9
SHA512 f6647dbb8a0d8e20ae5bf8e8269d9d8153acb8659d4fb4b3a7f3a3628da7906e82eaa6224c346a267680d09fe1cc2097d9a5c3a5d597640acbe4b48b7225896e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\prefs-1.js

MD5 404eaf1754c455057090706deeaa5cef
SHA1 edcd55a6339af2185a738cca2eb999b40bbc4bef
SHA256 ff6ce2e577ce824f39885e3b035fb5f0035c935c65de0c3a0d6a19537ed109a1
SHA512 8df063c7f2def9119308ddee40ea6e17eac1cf2f99191c923b6828c49abf8346e5487d3d8b30d39c2359852b748d7b77fb9b60a89fe08b853065add54f36e09d

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\AlternateServices.bin

MD5 c74983c701b677e9a80168479147b2f2
SHA1 fd60904d220f3b4f0dfdfe79af340294f1200660
SHA256 14d3d620ae8e67dbaf2bd28de11c7fa28ff017c55c538bbd0dffa236b64f6133
SHA512 7296bff8f8c4bda3f8806289896a9e7bb1fd7bfce48753932e0182c9bc3d5699a2b40711253cd31ddfd4254b129fdc9d4bfde3de18828df55ce90f158890ba2a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 847581e3b8728b17df4ac831e1988af9
SHA1 d056546b27d2fcbd4167cbc127b42826f61168b3
SHA256 06e7f61d8c87ff95778dbf0bccdfe80951bed332e9c1fc6468f6f2b47b32ff1a
SHA512 0b0ccfdb9016b2a29346fb416f6e68aedbd3826bd6cdd22f3ced63595e875be2c5137652dec016cd646456d382eef0da9993265ac787a749c116b4331e892496

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 eec429430a098cf02eaf6df02bf085ff
SHA1 1e3fe68847ababe6d138a6a9a5f636fd8bde4130
SHA256 abb8f58b34ee0876970d4517439439d3aef1bd47e42fe5739e3ef26962e601a1
SHA512 b0b447eac33789fae7fb4a51de4b72e72505954113628c05610c5d053cb62f9428525ef102ea0ba09ee5e366e746b866761bbb1c8fb16984b1623278d5682845

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\857A7443278A73849A835CED72352753558659A5

MD5 28811032b121e3c6e2da50b32adc8c7a
SHA1 f1dafdc5e6760f9809eeea101600e553fcfb2483
SHA256 a750eacc6f73f317225cea86973e5949fc74f443747775734f13b25fa3ddb98e
SHA512 59a3ce2c127fb3ec9d8ad3a68d3408b165714120af5c9db693eed69b36e8a9fe275b4ae36c92021f9d8050b329b13c26f053ba78669a8dda6151af723ba87d8c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 09602292814fe1c213716ffd88845376
SHA1 c366cdc1776e6805c1aa793bd8a40340cf30de93
SHA256 22658806ce5cfa86ee54a417d5780cf0b80a48649193c4bb6ad599345306495b
SHA512 72a56d7ff78170b78ef640e8af501341366246a6244e284b0bfc61bbf07b6352a5c8cf9f908c428145268ff850d82847d44788a53ce8bdf48e74851c37129b66

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 de9367800ab43df2a7788e8b45bd881f
SHA1 f17cbd396c2153da8344fbe304607389ca757151
SHA256 82608d52a4900a53c40eb8be338f5dd5a9487403758cc87ee04d9d05fdd58490
SHA512 96cfc6b5f5b231b8d3f9629287aad5056e3e0f3133ac22c22544ceb229a57537d49873b2fc2339d70a016349194df9bbe001783e439f8c23f600072c3e258b67

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 070da420e243111113f66a9196b45a13
SHA1 9eb27b0639283f79c2641932d52aaa7fb0b9fe1a
SHA256 4c0b4502b6d97ea43935ac1ecbcf5b5e1db98d5907cb94a0f7950d7f2e6d0f7e
SHA512 dbe07feab2177aa1890fbe2d86e083a3b1c9ec4d05fe8e3741f988b00d910c3d2cdd40b693124b1d209f9bdc1c7a2235dca8c5a67f6ef60feeb440eb84695aa0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 2dc1a9f2f3f8c3cfe51bb29b078166c5
SHA1 eaf3c3dad3c8dc6f18dc3e055b415da78b704402
SHA256 dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa
SHA512 682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

\??\pipe\LOCAL\crashpad_2404_HWZADKZJHUSMZLYP

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\93a17444-1568-4cfb-abfa-2989537f5a6d.tmp

MD5 7018c73d2d0e6312ba1208f89061fb8a
SHA1 1f6a701331d2d6af8c943bee8fa09e13cb52804f
SHA256 0f2508b62b4713e388a6552ac91b136dda49e6c9d0fb8f908674ebc3a63e0445
SHA512 36172f0f542e73d144655915aaa9331d4104f93458b559105734081f737502af6b078b6cb2105e1bc8ce493f3c5d85d8031c471413fb3f0a7ce4b19e036eb3df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95ed323c-7270-4581-955f-cdfe853ac2f6.tmp

MD5 133017556c8602a0b117546e3ff1ccf5
SHA1 a8c28f789706656be1859dec9421b7b3e5d6e6a7
SHA256 b0c103c6a6c5aa3de1d0c947c560c4d5f41231a08ff33778c02006ad20387d12
SHA512 c69f083df6730c568c9c666f03b4b93b86ff4e89fb81614695aa4bedb64d4c962f33f35f63069728ecb2b303f8bea3cd41a4069b4c0f5ff27437cfa54f2a6790

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e4f80e7950cbd3bb11257d2000cb885e
SHA1 10ac643904d539042d8f7aa4a312b13ec2106035
SHA256 1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124
SHA512 2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

MD5 838a7b32aefb618130392bc7d006aa2e
SHA1 5159e0f18c9e68f0e75e2239875aa994847b8290
SHA256 ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa
SHA512 9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

MD5 eae63277d5a0f4e121bfb80c1e364a44
SHA1 4cf136b9efd107599456ed698174015f75cb78f9
SHA256 1815f3b841a8c563ffeb46f7ba146ebc7060071d2bf7059dd4604171117bf43a
SHA512 12d5dc6bdb1e05236c89d160266cdb6bf5bc97de257ce9a28826836a8e86c1a5a92771bb876978622037455a7ae63afdd88294d3e4ccd12e43dfa5bad874fa65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

MD5 194e158eb17c006c6528442d3b85f86a
SHA1 699e18e81211fff4051f756a0947cbbeaf9a912e
SHA256 fcc97399fe8bf6658134ec557f096476fff98a5a3282a7cccbd85decbc531811
SHA512 3e3a77ecbe3be82983f44f3aa2612e54fd2c987d2e8f69b97f18730aef9706abd9561573987487b1121e2a056b31620699a31c7006ba54ef3dfb4c3371642a7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a

C:\Users\Admin\Downloads\VisualStudioSetup.LYEbtMmK.exe.part

MD5 c8336d2d11a7c4edfd2631afa84a5c97
SHA1 cb4b4e34f1ad1276ff8b24f48a5907f4dbc16aa1
SHA256 e43042c3dbf89ca71bf9b6b81da800ac5c2d94c2f34fcad3520b74b85a373daf
SHA512 bee313fffa3ad66f2022e14b6f67c465adfd449e458916ab6e4061e7b047b33144dd9d99005ef21fe815709e0dc43656c2a679fc00dfb3a7f22c7b69e5c3ff59

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe

MD5 c9bcdd344d7619bd194f559d33ff9dce
SHA1 a97c28648109c440c9e7f8289189b12b110199b2
SHA256 a3100e29573504e179461b12ac0b3122e12fe244d97f25eb8ed71e78179280de
SHA512 baa6b4bcf7333d8b1589bf4dc528cf5764fe69ffdefd7ea65b3367a020c53a6158648adccc08eb84445e4aca5caad5e03429081448c43ed5b8c3e56f7d74f575

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.exe.config

MD5 c301859aef3bf4c0914914e5807f6a5b
SHA1 908827ce12d093d2aa3d1e8baa8caf8bfe204fbd
SHA256 781ec48ae412ba18c2cea1b67f5bc4a33245fd5f96dbb0e58b218c98ee03785d
SHA512 0b9eeb0288b01ddfde11404b15378694145978bdd664b68befe5f776f65f950d35f54b7f29662a64ff91feb4dc0e9bd537864e46a1f3f252e8113ddf95f32f0b

memory/5912-1450-0x00000000002D0000-0x0000000000338000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.Setup.dll

MD5 4bf660df669ffd605cfa0c2fc0d2cfd3
SHA1 0b89648313563d53b81ae1f209b3c305185b0d9c
SHA256 e5759760d0ae313afa811bf24959bc75d1ac9d39378e1d4e6ea71dc9d4d74cbf
SHA512 9b8f1ad98223122a74de0776cc22439f42b0edd5a96cf4b7022a225496df1a2131beb75745ecfd2ec1bfd5067fe3a7e5df439da91eafe952e2212cedb5c37c3b

memory/5912-1454-0x0000000004E20000-0x0000000004F86000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.Setup.Common.dll

MD5 28894d59f2ae8d7ea988af83aaca262e
SHA1 bce81c5ce800fa724a512865af0cac5012e2b551
SHA256 c2a64fe382d045d9585f24b1a74a6a20099fe578dd2cdacbdf90c1fdcf5547a0
SHA512 3442dff3971891dee722db3908c6ea9b697c0bd1e11706c2cb63aab11863f73ab722b9eaa7f2d4ab201532ee6b9b92fffbf825aa4f86573223c22768f4d6a5a6

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.Telemetry.dll

MD5 bbcc8244db84ad2031ac010633abf798
SHA1 de0cb65ee877663da272b4162a55a64ab8669f74
SHA256 8fe17ff9da7932dc01a39ed27559d5cdfa9b97ba14cbaa9f719087a241c8b82d
SHA512 d5682ea1aa9d50e9a491f8dc25c82907cde24ead2842ea392242e8cdedf49f68f3035042442738e147b5aa29d6328ced68007732298f62466c78fd10b276b06f

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.Setup.Download.dll

MD5 8f18880359e6341ce72fc91a6c4b7762
SHA1 49300bf16cd67b5fd1d7382d6f4171e6acc338c5
SHA256 965f76628e26b81e74cb15abffd01515eeace8caeae71cbd1927d263ffc8866b
SHA512 f76ab6e05c62cd051cf6b5ce573bff23abd6f2a6727dc91357bfe3729b141c54d31c937eda0e43b3acc819c082487403e5ea15583156ebc71ae40b1dd246a406

memory/5912-1470-0x00000000051E0000-0x0000000005230000-memory.dmp

memory/5912-1466-0x0000000004E00000-0x0000000004E08000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.C2RSignatureReader.Interop.dll

MD5 c3aa65379798016352caa4694fff630b
SHA1 0a79477dc01ba8cd000f314c8b788a92ea2cc702
SHA256 46476d4ee964f2e2b7c686774db5bf7c24b3b0b9879e43a946f40048de3a5758
SHA512 b8439f9b9c154fd8f8975e4be568efb8a964f2ff5c28ad508bd77ec5f845346433ad6ee2c37b74c9d4726ee2240f31d7a8a17cf8ddee784724bf7cf32ce9aac3

memory/5912-1462-0x00000000053D0000-0x00000000054CC000-memory.dmp

memory/5912-1458-0x0000000005230000-0x00000000052C4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Newtonsoft.Json.dll

MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

memory/5912-1474-0x0000000005960000-0x0000000005A12000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.Utilities.Internal.dll

MD5 2dc1dc66b267a3470add7fab88b78069
SHA1 dbe80047475b503791038ed7e47389c062c15c72
SHA256 b044863f98af8d28f4f2f5e2dccb945c57439e1575afb37110e1eec306a6c89c
SHA512 44ef73aab50dcc13ccd94c0353c366818afb27ce73772d722755b04add0c4f294c7814c84da6069d9aa6136f2a48683c25062dcddd1664e8d32fed1b38ceca21

memory/5912-1478-0x0000000005650000-0x0000000005662000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\System.Memory.dll

MD5 f09441a1ee47fb3e6571a3a448e05baf
SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\System.Runtime.CompilerServices.Unsafe.dll

MD5 c610e828b54001574d86dd2ed730e392
SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396

memory/5912-1486-0x00000000053B0000-0x00000000053B8000-memory.dmp

memory/5912-1482-0x00000000058A0000-0x00000000058C6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.VisualStudio.RemoteControl.dll

MD5 355c1a112bc0f859b374a4b1c811c1e7
SHA1 b9a58bb26f334d517ab777b6226fef86a67eb4dd
SHA256 cc52e19735d6152702672feb5911c8ba77f60fdc73df5ed0d601b37415f3a7ed
SHA512 f1e858f97dabeb8e9648d1eb753d6fcd9e2bab378259c02b3e031652e87c29fbabfc48d209983f7074dfc256afd42fa1d8184805534037771a71db517fe16c8b

memory/5912-1490-0x0000000005C40000-0x0000000005C50000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.C2RSignatureReader.Native.dll

MD5 ea3b357b6eff9d689243d02088a5c964
SHA1 daae152d12c60fee727c83d75bca3f97ba21460c
SHA256 d7eb59207a18d48f3064f2a727d252ffd201edcdaa89eab76ef43625783be1c3
SHA512 e9ce2c1af0719a0d549423b041a56e4f48affb7b91e63a4385ed09294479ac97c34e2f90a34849bc2c9a228e1015194d708a961c0dbab251ef27486d6f14e175

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.config

MD5 a098e5a3605e2e865e1715f52460552d
SHA1 b103bfbce0ad6e4d238edd0401046d74c91b96d2
SHA256 6ab0859c04bf95204798feeef4c74e0e19a8795b619fcfc99fe3d1f32dcb4233
SHA512 4f95334065bc4440593e51d922ee6f7bc47bcb03017c46ab952acfc8cde0b8083acc78ff775b0adaa9c9146ba8af919285ba8d521adaf9cc2cfff518c7d24c03

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\vs_setup_bootstrapper.json

MD5 ad891c3b02a02419dc60db8c273a8315
SHA1 141a08ca0e25d56bdb35fc71e1c767667079114a
SHA256 186c4b16ee009564819730b358dbdbb0792fc27e602698c5f0a16e20104647c7
SHA512 64cdaf1d6d1b4072e24f3926f91103abf946ff044cda34a9070586c2d2927bcdfc53381c955e447a38965ee426373259759025f97b715158afc429080956196f

memory/5912-1498-0x0000000005D20000-0x0000000005D42000-memory.dmp

memory/5912-1499-0x0000000005E70000-0x00000000061C4000-memory.dmp

memory/5912-1500-0x0000000006A90000-0x0000000006AF6000-memory.dmp

memory/5912-1501-0x0000000006CF0000-0x0000000006D82000-memory.dmp

memory/5912-1502-0x0000000007340000-0x00000000078E4000-memory.dmp

memory/5912-1504-0x0000000007BF0000-0x0000000007CAA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\detection.json

MD5 782f4beae90d11351db508f38271eb26
SHA1 f1e92aea9e2cd005c2fb6d4face0258d4f1d8b6c
SHA256 c828a2e5b4045ce36ecf5b49d33d6404c9d6f865df9b3c9623787c2332df07d9
SHA512 0a02beeca5c4e64044692b665507378e6f8b38e519a17c3ceccca1e87f85e1e2e7b3598e598fc84c962d3a5c723b28b52ee0351faaec82a846f0313f3c21e0e4

memory/5912-1507-0x0000000009D80000-0x0000000009D88000-memory.dmp

memory/5912-1508-0x0000000009D70000-0x0000000009D78000-memory.dmp

memory/5912-1509-0x000000000A6E0000-0x000000000A718000-memory.dmp

memory/5912-1510-0x0000000009E20000-0x0000000009E2E000-memory.dmp

memory/5912-1511-0x000000000A4C0000-0x000000000A4C8000-memory.dmp

memory/5912-1513-0x000000000BCA0000-0x000000000BCF0000-memory.dmp

memory/5912-1514-0x000000000B660000-0x000000000B672000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\wxycds5c.json

MD5 21136455f3b664a5e5ba40177866e49a
SHA1 649a4256ec8b3f0a9696d9b7170feefe18a09456
SHA256 71668fe53be0281975a7c9e914338d45ac2a433ed9425b776544b78df3f2c220
SHA512 e45d7d503a444d54f35ad30aac18ef344ef9da40103d866829418398d538b326c55c17d90f1d01093285fa3a052a6bf247af673ebb65529ca57c97bd92212f6a

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\VSInstallerElevationService.Contracts.dll

MD5 ea151205640cf90e190be2f0ed4ac885
SHA1 91f46a70aa2db3e1f63ebb7d30bdd4a6317beaf2
SHA256 0a8305095ded5e5dc832e5473e5e0b7c3f4dc02fe949d8271a99548e2e204af9
SHA512 b29347f25b2f74eb70fa5f38d4964189ec4ad421a0ac8be15d01bc0e18fc7214e44a3c1031cc7963df7ecd3f173d624a0a77e7e73a16eaa59d21dbd6dd759eeb

memory/5912-1538-0x00000000065C0000-0x00000000065CA000-memory.dmp

memory/5912-1539-0x000000000B530000-0x000000000B552000-memory.dmp

C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\runtimes\win-x86\native\msalruntime_x86.dll

MD5 94ab867ef06d046b6f65adbcb0994638
SHA1 30768967ad3b95aaeb8ec671f96e176a6d5dd1fa
SHA256 e9501bd3899c05167ab3d6cde455e7c81bc4bd138314207f3cdfe910b21358ae
SHA512 81e20e97829bd2102e552bf78f1da4a6986ceca475c6514c7de9a40adeafdd7b15c15dd10af293df5b4c21e4b1c431c92591d19559c9c71ba5916d14d750c090

C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe

MD5 4b693cefeb8c3ef5c9bc6a9708337ee6
SHA1 faaef5031524807e6c36667107d900cfb68eb212
SHA256 5018a4f40f945cd8e6b3e81a38ab95e3b913494c741a3479935e24b8fadd3d2d
SHA512 5e92d3bf2633f2f423feb2608e3dc6491d7b166033962c5836be2de169adaa01077fd46db1ad0cea79728ce3cbdb1019b1c1d0ec876dba7d9463686e582bd7ec

C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe.config

MD5 f8df32d94954f7e4d7f2d90587c5a3f8
SHA1 234d25ebe3baaebaa38786230a21141343283d82
SHA256 c40841ffe3af0286f4eb849f5d179133cda83fbbb1bad1fe436aef1c7e43f07b
SHA512 9603d7897ff11c929ae55a733898a1331e3165ad3a23a1be03713677929db2bb18f5a33d28fb22ef408d2b25cff1c05e13649d7a3a830f5c11abeea8d7305112

memory/224-2018-0x00000249968E0000-0x0000024996BD4000-memory.dmp

memory/224-2020-0x00000249B1240000-0x00000249B13A6000-memory.dmp

memory/224-2022-0x0000024998920000-0x00000249989B4000-memory.dmp

C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\Newtonsoft.Json.dll

MD5 3c22c66a92569df2146490b6822232ec
SHA1 f15e8b3c5e08bd0811d91b74249e2426e514a2a2
SHA256 4c0d234622dd00208ec3445403fd43592b9a2dc8e475d7efd0d190de32080429
SHA512 876606072fe85ba8fedcd45ca57d9088d6df919c61587bbba63253ad766c3b8957a66950e2b733667285debea18671e8b2d011078e6f772a8807fa67ab81cf85

memory/224-2025-0x00000249B1470000-0x00000249B1522000-memory.dmp

memory/224-2027-0x00000249B1190000-0x00000249B11BA000-memory.dmp

memory/224-2026-0x00000249B11D0000-0x00000249B120C000-memory.dmp

memory/224-2028-0x00000249B13B0000-0x00000249B13D2000-memory.dmp

C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.version.json

MD5 ebbc55d323174bbeffadf9eeccd479af
SHA1 ad0cc4b3b99ca1d44ca9ea496ec9efc3a780af5d
SHA256 d02ef72952a3d32154e88a0eee44a7a270086cbec7896ba7216aebba611c27f9
SHA512 fb084ed7d9f1bc4e384423b782b5ee83f7dbe657a19b9d89d0a323916c38f1d7e3c2f43b7d73e789416bcdf16f5b11091bc436eaf269efa51033e39edf29e74e

memory/224-2030-0x00000249B15F0000-0x00000249B16A6000-memory.dmp

memory/224-2031-0x0000024997010000-0x000002499701C000-memory.dmp

memory/224-2032-0x00000249B1210000-0x00000249B122A000-memory.dmp

memory/224-2033-0x00000249B17B0000-0x00000249B18AC000-memory.dmp

memory/224-2034-0x00000249B13E0000-0x00000249B13F2000-memory.dmp

memory/224-2037-0x0000024997030000-0x000002499703A000-memory.dmp

memory/224-2036-0x0000024997050000-0x0000024997058000-memory.dmp

memory/224-2035-0x00000249B1400000-0x00000249B1426000-memory.dmp

memory/224-2038-0x00000249B1430000-0x00000249B1440000-memory.dmp

memory/224-2039-0x00000249B1570000-0x00000249B1578000-memory.dmp

memory/224-2040-0x00000249B1C00000-0x00000249B1C0E000-memory.dmp

memory/224-2041-0x00000249B1CC0000-0x00000249B1D4A000-memory.dmp

memory/224-2042-0x00000249B1E90000-0x00000249B1FC4000-memory.dmp

memory/224-2043-0x00000249B1FD0000-0x00000249B208A000-memory.dmp

memory/224-2044-0x00000249B17A0000-0x00000249B17AC000-memory.dmp

memory/224-2045-0x00000249B2090000-0x00000249B20C8000-memory.dmp

memory/224-2046-0x00000249B1BF0000-0x00000249B1BFE000-memory.dmp

memory/224-2048-0x00000249B4E40000-0x00000249B4E82000-memory.dmp

memory/224-2049-0x00000249B4E00000-0x00000249B4E08000-memory.dmp

memory/224-2050-0x00000249B4F10000-0x00000249B4F60000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\dyntelconfig[1].cache

MD5 6d0fca79faea45342ac7d8c5ca14a3a8
SHA1 c0644691358a5fecb088d953b39492083e046daf
SHA256 32353d84410361ebf591781f5d5e0ba180a0fc3d1dbcf7e2f0000720248d3e43
SHA512 fec2d4af958badd190c6f36e3dc44a22fa8be4f65bbdf01adfabbcc645c0b19ea9f8158386cafaeab8f651baff5515582bbe1b20f1b635442960f80cab8b33af

memory/224-2052-0x00000249B5010000-0x00000249B50BA000-memory.dmp

memory/224-2053-0x00000249B50C0000-0x00000249B511E000-memory.dmp

memory/224-2055-0x00000249B4F90000-0x00000249B4FE0000-memory.dmp

memory/224-2054-0x00000249B4F60000-0x00000249B4F82000-memory.dmp

memory/224-2057-0x00000249B4EE0000-0x00000249B4EFC000-memory.dmp

memory/224-2056-0x00000249B4EC0000-0x00000249B4EDE000-memory.dmp

memory/224-2058-0x00000249B5220000-0x00000249B531C000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\VSApplicationInsights\vstelf3e86b4023cc43f0be495508d51f588a\20240812080226_8a63f5ff7ae9414dad4ddf8a5e207dc1.trn

MD5 205ce30ffa5cc74d3cb679b6e5b0158d
SHA1 9d34c0fe15f13a6f6d3ea69b20cee9222ccd2f84
SHA256 ae2a27afa75ad1834f2a398c34122449b6f466e9d0b4c207f4cb873f7c12075d
SHA512 541c1e78991d59260b0f4010001afc9ff4c10ecd3b972b6e6821820e585a509fab1298114122e0939563677e32856ffb82fe1a322cb3de9487af943a8af0d9d4

memory/224-2072-0x00000249B4FE0000-0x00000249B4FF2000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YHPFUKA8NMZIJK0W2LM0.temp

MD5 467eaccdfadfa21d0181f2a3c90dcadc
SHA1 67bcf85ae5ccff4569c773b74572c1da7be9a181
SHA256 ff8b63f0d132d6a82143402535a5dffbe21d4f5734871ac986fb11ae8ad8d75f
SHA512 252cd954cfcadeb479836d39f998b82d18e413b26512a109afe3838f93531c8384f6ecbef2d3fbeef0ae2535dc069c09a00b5741ee36561cfb210ddf37a84a3a

C:\Users\Admin\AppData\Local\Temp\trwk3wx0.w0g\js1k3vqn.json

MD5 9eab0d84d4fb76637fcb2616c7afd387
SHA1 82aa1d22fdd1dca25185832427f72920116790c0
SHA256 3fdb396966883a10b0c22cb72add4a1b962e3ff9e6c5b9e48be26689d815dcd5
SHA512 7f4593f97627c26ccac24b90966e6c7fbb5d386b0eadc7614f01f7db1aec0536e1748a077cfdffe5c63f4e500c1a6613a5c86dc3931638fc8b42646632e314fc

C:\Users\Admin\AppData\Local\Microsoft\VisualStudio\Packages\_Channels\b5279597\channelManifest.json

MD5 711aa71a654cdb7dc15c271d5ca9d74d
SHA1 13d860b0221a04a5e3d8d556f2973bd2fefa4e0b
SHA256 23cce471d2cce62cf5fa1f8b355e125573a3ab2873020c445c6e284fcd7c8290
SHA512 0b689b93bdd395587af4f0106ba20bbf42558d31db35a944e2d1e857233f1913d7929683a25e1ab1b57e3e0d63ca73f899ca51f64f30f581a47ecc239481e852

memory/7060-2115-0x000001A6962E0000-0x000001A6962EC000-memory.dmp

memory/224-2131-0x00000249B0AA0000-0x00000249B0B70000-memory.dmp

memory/224-2136-0x00000249B09F0000-0x00000249B09F8000-memory.dmp

memory/224-2137-0x00000249B0BC0000-0x00000249B0BC8000-memory.dmp

memory/224-2141-0x00000249B0A10000-0x00000249B0A18000-memory.dmp

memory/224-2143-0x00000249B0A40000-0x00000249B0A4E000-memory.dmp

memory/224-2142-0x00000249B0A50000-0x00000249B0A68000-memory.dmp

memory/224-2144-0x00000249B0B70000-0x00000249B0B82000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\VSApplicationInsights\vstelf3e86b4023cc43f0be495508d51f588a\20240812080250_1718e71c7dfe416d904881f5bc5237bc.trn

MD5 775d135cc80fef0675409e57b4426a95
SHA1 7914a40a89535825bda05540f763a94778bdf68e
SHA256 816fd4f522dd28a2ef9b02e09ebebafd672aeeea838da505385fd7b4950553ba
SHA512 f4dab4fc8beecbffaef89d5e9a3fbace59688adbc22d1c7a07d8334696152e0178d7a368e83a579e10eb95840935810585d008634f1d87b12613e21bf6519265

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\Microsoft.IdentityModel.Abstractions.dll

MD5 dc6d5f059a711616234b383d8a3cd5f2
SHA1 b53df8e875bedf924a32eebea2abb2018f06e5e1
SHA256 d461864929e446edbc6513421f4db8c6465899d9067ea3c33e2131227799b525
SHA512 54cafa9ce950c0b4a2cfe6f115717cf113b45f6ef21c701207e37151fb8b01e0d370c56d950ab2c0bdd0d813d65462ed19eab4c9de320f8434cfb0b30589deca

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\runtimes\win-arm64\native\msalruntime_arm64.dll

MD5 a2f41908d5dc93b30daa584ea84d2092
SHA1 858e185e27c19177d3bd8682cea53bcdc27a598e
SHA256 88a6f127eee41da978181df5de12d65d2337d4427ef66b6be1df51bc29e93f8b
SHA512 ee5934249b2540b2eb8f9ea3f344f00d6e512a8f2f86df4ea674dd9e35a91154cd77c62053882e187cf1a629c369ad3be9667f59607676bdc780280de5dfbeed

C:\Users\Admin\AppData\Local\Temp\6378a34f9cfa9310bf4b06e9\vs_bootstrapper_d15\runtimes\win-x64\native\msalruntime.dll

MD5 6d226a7b33583555fe71310e610e7fc6
SHA1 92bb8ce4cb4e215348c6e22ffc3bf57ec031883a
SHA256 613be496ad434ceef6ed29dbba64f27a2612795078977a8b07b229ebba9e9953
SHA512 5697f07f95c723de50f65b23d5ce4853e716425abccae187d00ed3ab1812fb0e04af47b5ed241370773522fa3c463c351c9dfc58b10c7962bd2e8c83710a3d46

C:\Users\Admin\AppData\Local\Microsoft\VisualStudio\Packages\_ChannelFeeds\F4D08EA8\channels.json

MD5 b347a56193f4209640841e6162cce71a
SHA1 3a831759c9e295eb46241e5d01ee10a6531d66fb
SHA256 55614bab4c8acef2145a902a582bdf572b7d7aff9fca6e477c8151293224b259
SHA512 662b6c2e76837e2e0e49d6b5f5cf1ff7db9891154dd9722058a94ef96335dab3175815e42a87a3cdf5996c8d44317813e7bb5f28c03a1686bc57d55f11dbf84b

C:\Users\Admin\AppData\Local\Temp\zhmkkk2y.bwj\4mjwtbej.json

MD5 76585f2ada629e32f3366ccaf49f2be0
SHA1 96a837ceeba51d57e404826ac1ecd39752094474
SHA256 d95312d7ac14613965895eea0cf4cd350d4ccc197bd1d69d3f855d837d64cfb7
SHA512 2ada2f3846e098296eefaa567b23d8615992c1c9d1941bdc5495f5534ce69fbf2bec3f6de8c981c04a6da742a242a04e37d6636de856c189a38656abaa995346

C:\Users\Admin\AppData\Local\Microsoft\VSApplicationInsights\vstelf3e86b4023cc43f0be495508d51f588a\20240812080304_5467e553ebf34fdb8642d920f5416087.trn

MD5 f36daca5745ddcaabef48bb667d4fc6d
SHA1 a812cfc626e20a22ebe4e65bf5254305f483c289
SHA256 1d7b373c29aa56ae08fe5446f49c79af33c6612a05e064b7d0f66cf9d8e56e9d
SHA512 ce7cc51cbd20b104b55223395650a8658ae9b099217414870ad249a3cfb0b55f0ebc3371742bc6650ccc8867e7f421e8280d1f8565621cbb68d436c00d88f469

memory/224-2298-0x00000249B7BB0000-0x00000249B7BBA000-memory.dmp

memory/224-2302-0x00000249B7D40000-0x00000249B7D68000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\VisualStudio\Packages\_ChannelFeeds\F4D08EA8\.updateUri

MD5 e3c9f3c009c49e91b372ce3be05da610
SHA1 df98879fb7402b9b08bdc18fc2f3d4d5ccec12cc
SHA256 f4d08ea820b816e2822bdd3351613ed185e4e36503ccc348f4a8a7957fadfd6f
SHA512 444aa325d744a7fbcdc5a48cd7b51814e3cca5caf58b0e16316e015f898773a5d3476059399a704a9b4dc6350d06430ba42a78058f2cd8c03669147b346f22ca

memory/6560-2303-0x0000021656E00000-0x0000021656E3C000-memory.dmp

memory/224-2305-0x00000249B7D10000-0x00000249B7D18000-memory.dmp

memory/224-2308-0x00000249B7D90000-0x00000249B7DA8000-memory.dmp

memory/224-2307-0x00000249B7DB0000-0x00000249B7DEC000-memory.dmp

memory/224-2309-0x00000249B7D20000-0x00000249B7D2A000-memory.dmp

memory/224-2306-0x00000249B7D30000-0x00000249B7D3A000-memory.dmp

memory/6560-2312-0x0000021657050000-0x0000021657058000-memory.dmp

memory/6560-2311-0x0000021656E90000-0x0000021656E98000-memory.dmp

memory/224-2310-0x00000249B7E90000-0x00000249B7F22000-memory.dmp

memory/6560-2313-0x0000021657110000-0x000002165713A000-memory.dmp

memory/6560-2318-0x00000216577F0000-0x00000216577FA000-memory.dmp

memory/6560-2319-0x0000021657800000-0x0000021657808000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\jjayrtdg.2ff

MD5 3f3deef82238d3c4859c57b7ace478ac
SHA1 0f73a97815afa34461f947957ca6c093235277ac
SHA256 aa952b6633a05014fc5bffb2f1745467301e502f65b8464e14c070b56c7480ba
SHA512 1cc0d1b5b771d81b2db94787ec75a3c5b3ae084e162d493ab1bdbb0cdad0785bfdde37482ca70e0f514faf08f63300b32a0aaaa7a70426a011631a899c086862

C:\Config.Msi\e5bba37.rbs

MD5 41a9016f83669ed4d00ef26f56b6f770
SHA1 e633b336781ac770fcbdeaf0eb5355acd4823e6a
SHA256 f2cd40b4e6addf9cff50fb9d2e5f525b8632ad93e8d941a11e8cd9fdac93497d
SHA512 8f449ab8eaf4378d801b7bf7bcbc28501a962ce6bbfdc071fe80b53ac26831c51d24ab5139792b691c68a049f0882a3912d5cc2fd7037d0b10147918244b819d

memory/224-2340-0x00000249B8010000-0x00000249B80E4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Auto.Resources.EF59951749EA7487399F\Microsoft.VisualStudio.MinShell.Auto.vsix

MD5 fd21cf0b4734ecdd7b37b42700fe4a9e
SHA1 2c5e5196c4bd4e255d7b2ba45932699ef6736ef6
SHA256 64e1d162fbb9079cedcf205ae60606149cdabe880ac672fbdd75f643b4e66560
SHA512 67175cc8e80b1e59b8f9e300b81d2549e46182ce173b56188556ccc04be219f259e7d9af2ce8827bb971210ddb9d8b826c3f4624de628ae9d508614dfcdf0e24

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.UIInternal.Resources.537CEC696450B3C84AF3\Microsoft.VisualStudio.UIInternal.vsix

MD5 e784146b035b244dcacae46548add656
SHA1 69bf4faa6d19fb355515608c30cedf718f58280c
SHA256 bf8859274bca7f2c158cfb9d17ff1b420d849031adc64e96a26b8e1a0caaa1aa
SHA512 254792012d5639669af39e49870c16f3089cb6651409a129ec4a39d3a3fea566a1dbf221dcf24b8a5377621689be24faff82d2cba31ba3d3b9a951d65061d1fe

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.CoreDotNet.C4249CCD1904C15E7D05\Microsoft.VisualStudio.CoreDotNet.vsix

MD5 d009a89058d316eb5e7ba9f631102465
SHA1 6586cbc29650209fd0433aee565abd76ef9ef749
SHA256 500587317bec477a8e38eeaf72ec59b96c9f4d7a9c5abeccf92fe3296de733da
SHA512 8fea409937c5fdd22e6d3cdc1ab56dcbb9003d5ef4d979bf549003ca0a122d4abfa7f5a43d89270a583afc66aa2491f9c4a0ae416b00a7f1ef2b72f2d77bcdfa

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Devenv.Config.604DC2242D035A98315C\payload.vsix

MD5 52d6a1e55d0deee47f3e641f748f47d0
SHA1 0da94988bb8dbe524f6d736ce5406fa4b39b57a3
SHA256 9bb6a62509e5958e357bd61484a815f610e93abe54a35c9988f3a28322f94174
SHA512 3e049a3c18a72b9bffc4de553dd38b5749f66b40ee8cb73d1f3055ce729884adbf1bd5179a428ec754a3ffc89c7eb21ab0e997146a65ce24cf4fd4801508b08e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.NativeImageSupport.0D1F2D24C826D02AAD54\payload.vsix

MD5 4a14a177646b682340a5a5eac849d7e0
SHA1 42dd9b261e1aca52a6d4ae3e139e5ab78dd67297
SHA256 b59ba08af09a6e9bc264aeff679ce16d3723a2e6c9898d1778f787c0229ec062
SHA512 eacde39cdf708843079850a20b09ccecaac3e127e6cd54abdf7b32c3fef6a1eaad286e1c18ee837dcb567cf2ac89c08fc72405a3fc393e960bdb5a1869319e2e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Resources.x64.A97357E59FEB0C321153\payload.vsix

MD5 52dc64fbe4dec5e147953af02473ba5f
SHA1 71c7cf36bae869d833dbe52c76f95016ba6fe98e
SHA256 33d5d77585da9ae6ad251a189500f2a8c3a39e4212905b10253d8c161aac8487
SHA512 caac082d724c47cf2f3c5abd55e00bc1b46217aa1f26059942897c1c198930c619f60b083cfea30d358830597fb121fc40ec0e92323f87d1b8e8db8be1bee98e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ExtensionManager.Auto.4AC1D0F5381FD965B476\Microsoft.VisualStudio.ExtensionManager.Auto.vsix

MD5 01a7c4e4f1bf25011dd1dde8f70d0c41
SHA1 ef552aeb72db8a55462c0ece8e8ef59470e9c8a1
SHA256 ecde5329645016ffb3a77290d70178563d25784127795bf73961fdbad7e4d6a7
SHA512 89ae57792bec0c5220b84b80c8527799a0377a9a483d9bcf1636e6828973e54e5b12fa83756edd93fd11531737c3a736777fc176dd216cda4e122c73e9f57e1b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Branding.Community.D336466DA46A5B8E5355\payload.vsix

MD5 2e809466a8b4c643c20f42d81175959d
SHA1 8f4681d52e3016e398f2be55b61f97ceac5f58c6
SHA256 275bf3c26a2dc3d4b3ca3aaba5171b6504f16947cdedbcba6ffb29dedaf1a26e
SHA512 74e4ca65d818ca284df7bada47da7a012cf36f58fcda4a1b012d7167020723a56f52e665bf0ef050c0f6bf22133709a4fde646f5c558513f9980c214409c118f

C:\ProgramData\Microsoft\VisualStudio\Packages\_Instances\0f6f8ff4\state.json

MD5 c1da1b6db5abecbce5f0ad540798d874
SHA1 432c06f27148ff9390328504422061595ac3246b
SHA256 75ac4e0728dcfca5e1e97406ec83426d4ce5b75226c77405a12002f607a5a8b9
SHA512 0485cb2f1f33313e455ea2c02a56511ec9b52e5f3846d425c7d6afc7f7b9807dca454904d24a1647ff09f0faa9dcfd20e9966e0240cba268316b6d7bbc249312

C:\Users\Admin\AppData\Local\Microsoft\VisualStudio\Packages\_Instances\0f6f8ff4\state.json

MD5 14c4c1e0766ad557f2efa4679fc65e67
SHA1 3c4144bbd06cf9d65cf97f2bc4bea11432791c41
SHA256 c67ace4c82f6c8780d4f65da4b0da4298689f2ba074f0837f5c5ea73fde0e108
SHA512 f62f1a1fc641692e42cd0ea0ea0a9f19f8a07e09673b07bdc1a799efdf3accf9163e19ce5b1ad9289f10d30597173adecf8efe973b1ffeb5f72fa705b8fd8053

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ExtensionManager.x64.3DEEB8C44B39254FC754\Microsoft.VisualStudio.ExtensionManager.x64.vsix

MD5 bdde4a6505fa645d61203e8f4a2340a1
SHA1 85fda5868c0221fd344be3a59dea59e26c0c43ae
SHA256 b342c13b5d63d152b5c860f07a4d2be0207261e0d4768dfe7c56bff405831652
SHA512 504e6e5efce3adb701f559b62137290e6e2000369eef48eed4738b88ab00a7be5f2f730b39a30f7b1a6859a6bd4caa217e25f10d64d3c13fc8774ee1f42d627c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Auto.0E123F08A089A2120DC9\Microsoft.VisualStudio.MinShell.Auto.vsix

MD5 73ef6c5a2f1dbca1125353143e549f68
SHA1 42389de7c9bf30bed1dde031ab6b36e0f0219ad1
SHA256 824039ee48c65c68bf2bbbe8dbfb6e22cca591192facbf3da9c56b9c3f13d8cb
SHA512 099486e43d82860e02f8484c0fc025278900c4e1b68a0618f60b8802b1b967b534b94053bc31911c15596dafc08a9f6e31b6f5bd7c9efb3f32e43c25d8412d7f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Initializer.D28041DB2C41DD138762\VSInitializer.exe

MD5 4225c7698b3b7a4d489fdbb871e2e4a9
SHA1 cf5f6173f646ee56c95d4c736223d024cb8aaa47
SHA256 f8048e9f416c5af50e46d20b1ca9d7543afdd1cb29b7afde6c30a7c90ca81619
SHA512 9a9eef6496ed0903368cfdfc8b7433ccc8883faf01cd49c2597c8b6036128c320d59e7536cd487fd95045b6d5d325e066f6276263fdbcd3fecfc5feac2afa565

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.MefHosting,version=17.10.199.48095\payload.vsix

MD5 221a724ba655d955643cb9bf5f771e7b
SHA1 563cc558dc79ce7e73f0f334a7c25e7e16db38a0
SHA256 9fc5fd3fec3c9d5df26a6cc9224c2b8e189d6349a3562bb6b38a1acc5619bc75
SHA512 7ec0cb79166eb7bac316052087f946c371ebcac04b0a0518311dcd7ba50155e467ae97c97d706d4ff7a18a88afbbb4b8fcebc8317e0458ceaab8662735e1f980

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.UIInternal.Guide.9F486DDAAC924E7508B3\Microsoft.VisualStudio.UIInternal.Guide.vsix

MD5 3497294227754a5634cb053389852cd9
SHA1 56240d4c5a4f2c5b57e0d1681893be1d1b105fbf
SHA256 06e2f1221b86a11c8282dfd0c83feb49f6f99c4bf23ad4c50cf53af66a9ab692
SHA512 cd281771571c1c911f7dc9b0155e3ebae91e23107186db69a4450a6e287d538ebcf789f98b22bda7856941189e2e5752c10c59c3084bd415033bd0973f1ff30c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\db\data.safe.tmp

MD5 a6e1f54da876ee05e5c08d6f10e91317
SHA1 0a2bb39fb0067408802ae7e42c9d25140929de54
SHA256 667dbb7bd362f558e38cfae2e7edfdd7031dba913de142b335eea52622726717
SHA512 f9b847038a4be526b049b679e40c14e02e570c59f4c86ecd3d66ff5ad7fb1f6ee52f6cdc27bb9d150d2f2b8bc5f6c790ad0f5b3b78caefced359d1a37e16bb3c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\prefs-1.js

MD5 2d1bc25a1d52cd07ef4426d25297fb3f
SHA1 f3f0df4e588b94204b264810684d2e180361d05f
SHA256 810a7a1ab4437813f304976a2bf333547126a7ecc54769665b2560196a52a86e
SHA512 ef3b55a38298c650ccffbb60af3a2929aba052769857afa5f1e30e8e03c1ede1ee122bfed9c27c68743c1ca31da7fceb9c9fa56dc2677ce4da10b6904d1dd668

C:\Users\Admin\AppData\Local\Microsoft\VSApplicationInsights\vstelf3e86b4023cc43f0be495508d51f588a\20240812080334_6ff86b3349cf47abbba0005ee699069c.trn

MD5 cafe76bd9e915ca74e9fd00e8bd10872
SHA1 b05d48154580498d83f1d49b334e30f208650739
SHA256 46f3cf794a83126ed828559f011f579868fe2108a12a3d92cdb7c5a2401292c9
SHA512 7aac03f622a12a125909658326a6e9c13d382c959cecd784effbbf99136a996139b1cb184b12de42b21a8d5c18622aa1fceb397d22b9604d80ab43d336ae3059

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.LanguageServer.47DF17C35C680BDEF19D\Microsoft.VisualStudio.LanguageServer.vsix

MD5 285db75f63a4f0316f0c7276cd11bc48
SHA1 5aeafcadbb29de0c01edeff72a0375253a1c3f75
SHA256 85e4574c08dc2a7d708d7fc5fb139c05c19fcf3640f8457b4d488d244657347d
SHA512 a59e1e48da5e19cd00febf2c9ad8323580f594fd9f237521a579df3c7f7bf27a72801558f7ea491f4ba09f942330e6add75ec311d7d3ab2022dba0f011861f4b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Extensibility.Container.F0447824BD6950FDB9B8\Microsoft.VisualStudio.Extensibility.Container.vsix

MD5 ab280d64654d096abb929b79ba28fcf7
SHA1 86bd2f651bf9f877ee17d0e6342106346a201d8b
SHA256 aa075d9f3059823e76433eb45e35c5429865b9b9eb9d70512e0a1782a04de236
SHA512 19d00cd3f104d1a7b561f1725697f6e7c4d5fc40737b4eaca4809996eb33aa5f90bad03956629d3bd5064da65fd3e11df9990bc0ed71afa8627f06aae07fc981

C:\Users\Admin\AppData\Local\Microsoft\VSApplicationInsights\vstelAIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\20240812080344_6909f78bf326479c9dd41ce07780d5e8.trn

MD5 b1642c16e8991d3d1e2b8dafbcb94915
SHA1 f1d951744b4a803b1b456b1bebf0adea475d9b9d
SHA256 8438fe2924c459c99f337d1b7548d912ec473b5a5b7b2f010f8f95498947135a
SHA512 b37fe1a9ea654e4f1a34ad2abf54dcd80b0948c8ba56dcff05abc8f23e0c3eb40b623129393f1b8ff83cdcd700a0db8b7f8842616814c888a7947b20cd6033cc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 91c90434b6f93a55041867dea877def8
SHA1 0971de22425e5b8912b7c09f846374754ea359f1
SHA256 8ac34cc150275c1ca50e3a5348fa70c18c5dbf68838634f4e51fb032cabea6ff
SHA512 f5eb8082271b1e953045d9343e4fedcb97b5eedbbc04fa38cabdb05c172bad465b29b17073d98c29dd7c680bdfcf4afbd3b46d5409f15ded2ecbfe50ab1d0437

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Setup.Configuration.Interop.9799449B91AA3DE97938\payload.vsix

MD5 2c7ef91bfa9a306cfbdd3b54889da189
SHA1 e7c31d0711990da77f76db5802b149251f49b33e
SHA256 03d06939c0fbd7ae6bde9e8d4a640b8fcf6c99c1fad5d6348c6b7e372689ecd2
SHA512 81b58fbdf8736df950b26fd6b088b9142db8a42f69268473d24b93f1858b5799b522268ca2ddbcf7954ad87e1cd25562b344b75bcd13a2fefa6bd116af3fb541

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\doomed\5503

MD5 21a2f7b0990eb61c6b862e9377d31164
SHA1 3cc0b339d01bc1c2c9114c253cd1f78adb9809ac
SHA256 e830bfe517dc5bdd2fe2b513193ef25e8a1c9493c1333dab52a63d5aaeb2646e
SHA512 9e2484637152e68fe0bcd0841efe0b132d59f1ec1ce0d220bf1fa233fb4fdadf48d1cb6bcd819ca153e8d548481abfd3739f3cb0da17244f93f4c77e5b912c22

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\705EEC7711E1081A5A4278AA905A36700F726042

MD5 fd0bf9b4d0b42e202ad267c4f8136912
SHA1 16386c0b7e90cda7c279cec7d19c3ebe99a92581
SHA256 8a87e85cbee432475c4395ac2aed6772ec19e146ddec02b6bf2c85ba9f5d37d9
SHA512 d2b4c0d137867e0caea527feeed26fcb173cb4f270a70a402f79b1d647c41ab2af5821f16a0b9b5b2b66200dde64bae58ad6dbed729501661c91d1a5ed1e7ac3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\E6C22A3DFCD18E3C6145370266896FF76AE3F7EC

MD5 0ca816763ca74abd264083c0d27454c6
SHA1 c4cf296a002b717c159c86e634242b47ad1dd882
SHA256 17419e94f361211e988884eaf1d48af3aeafa8f4a4397c25de76756984da65cf
SHA512 6880a88a9160aefdd2afab341a70e6071e9000bd59dbeaa9c01e7776b1ce55aec27f46868ef1b019ba43557e3e1928fd452272c4f7b9f91ab8563d801225c295

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\B6112E34CEA1F7F53B6C52D3C5799C6C2B45B8BF

MD5 c6b0a76df5a4f5bf50b0b08e49d31f0b
SHA1 adfcecfea8b774a7431668cd10514ef23df156ca
SHA256 08a0f5b3b527f8f1ccc2ab5f869a847152363e7099a1419e3db232331a8f7218
SHA512 7a94d5868edf784fa580a9a8f4e031a01e3a6c6f606e95c147bc90028082f916091aebba50d5764afc75d55617747664f6e1a81af256b11e96eb5b22ecf3b813

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Platform.Editor.1062C086F4313402240D\Microsoft.VisualStudio.Platform.Editor.vsix

MD5 49054325cbb847b4b5337487e24954a3
SHA1 aeba97201158179d4615a605fa3588832b0961eb
SHA256 d31e07e30aefe0d37e5fcc836060f9085c8ca9b6befe16aa80fdc1386db81374
SHA512 c935d5aa0186239e8729c28fd526b633d7a6e58e701222fdfa6d1b5407f94e17a8445a127ed75225037caf60d17d9968d2117a25984332db828975477bcbeb28

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ExtensionManager.4060CD5D4AA49FA294E5\Microsoft.VisualStudio.ExtensionManager.vsix

MD5 857609ef567a83f35be22ea68faa00bc
SHA1 de2991cffea4113a5d618bf351a2399550f75623
SHA256 4c27257c5ef2afeb578293508d96a3bbfbc2a7f6fd634a1ca51e73f7209b5423
SHA512 46665dbcdb37c20c9e178a69e3b981ee798373f9c2aa199dc5e42884d8e71854cf6c601583e583137c1114fed90b1e1f2599c2e77bc0cef78cafc15ac2817845

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VsWebProtocolSelector.Msi.29638BF0100773D5DDBE\cab1.cab

MD5 0144b765538b57b2e54e7e9bc71ba867
SHA1 ec102d2a7e07cc546a0f1d46ac64e7ed12951714
SHA256 08b2ae9867b069dc9d9e502c8b14c479702cdabbc7088baf195fdb87d38608b9
SHA512 3e2761b44b5103033d1ae315a0b0835d7b59fdb37cef45da27f978544f44ff4772fe5c3fab82f32f80b7ae35cc87f75d942cfae9043c8cb9af49ca802b44d6d6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.GitHubProtocolHandler.Msi.C5FAA8935F46F72E87D6\cab1.cab

MD5 ff6c4ec978ccc8241dddbfbc722d5164
SHA1 4f2fa1a331be4ecd6e8d19671e3cda04121960a3
SHA256 5f34a239a4eeb18101dc0ca970d4ce2c726257aaad094825a9c4a9ae6bbb39b5
SHA512 e856f1795c2bd5331871434cbe5e71eb1f1bd12840fe66e8041ab3668dd27a66db09f2328c62eb8253f1a9f7d6d3a8bcfe78a35b083b0f073186f9a2ead80b1a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Platform.Terminal.9502B5B087D46FCBE35D\Microsoft.VisualStudio.Platform.Terminal.x64.vsix

MD5 7c946b7372893f975727cfadf5c439e4
SHA1 aa34dd048b04383f44552bfaac4813db06f5b8da
SHA256 3f253bf20d4401108ad50f3795d40306a0a53f00c61396eaf9d2611a0decb63a
SHA512 e5e57f04120ec0b80be1c2303d566a9d4617115e8bc4363a4c1a13ddcca628c980a8256891de9d5657e9e8c73876785367979dede7f4519bdc2cde9b34ab6a9a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 7fdb86b804fbfff9d015bfb44a882dc6
SHA1 784833161f31fa8ef63405dfe0c9196f3e6ce5cd
SHA256 8b2fd7b8b12f28784bb1dea4a8a84ca421202c6149644a40d1b0625bddd96025
SHA512 57619b70f7fc6b519e72ac0936da40ac7646ab3b9a27aeb2105529fbb17f278de444ec99325750eb5939d6b26380278a949e6ccd200f0817c70e99d163892e6f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Licensing.285E0B27E034E91D010A\payload.vsix

MD5 706fe970751cf83cdaf5aaa4d6e163e6
SHA1 4b33f81d10cca62a03fe9f8c18d2377e712ac01f
SHA256 a34b64db73e3e5b55311a432b463897c6ddd83dc6af10cd35cf92f3262b249ff
SHA512 f078c6638b4b34e03861617523e9d7c1717e722495d6caee6aa3d86bcebd83eb5a7f12cf5cb037f971dabdef20d8015639da9cb3419a5746db2f4cda10918a2b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\AF6E7B7DB9908D7B867517AC33D094ABD56E38F7

MD5 8b4a26f6f269eea9e67816f94c53ae36
SHA1 97d740cf82903791f9672d75a42991506ab4cd07
SHA256 3e012a5e60128a1af6329b660dacdcbe81d7400aab3fa01a25b376161a838c8a
SHA512 0b0c0f2abf89416021010f6207dca1684928d9f55bafc3f520af2f5faf4f611997d173f5f1b2a10f9b6c18c75c2752ec1634f3f983f74d9d3fac1fc2ceb520a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\4E1FA8895859AE255C87F68D64DE589F84DC3626

MD5 fd0ab4592b463e3985091535c41313b5
SHA1 3c9acbd03ad9bae2a5f3d6b753e213262d50e784
SHA256 6c6b9fe0836908de97b44613c6df64e286430f07e10c70b9682117902cf5bce6
SHA512 b6e50ce0b2d77103a07e7b8da39ef61033942d11d1ad2959ad05cd316f7f43123a316018e5a890ef9b3bb7156c0bc8ecee0320384a02af478d6610c8ea83112e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\4BCF7D608B2663D7D1515223C0F13E5D72484770

MD5 a8ff4e7cc0a2705ae0bdfb06e33e5f0c
SHA1 ce55a6f6df75916edfdda973971a5739cadaf08b
SHA256 beec858fcb70975305d2e1cdecb67c293b4a7f2ca46c53ef8a34356ec8e21fd5
SHA512 49af6fdc1c2b83362b73ffcf118894d86afa64434d50a05ce0c587f2f3a2c0dc9a0b9b63398fdc3c30834b17096cc7ec7080612bad64373fa392cbd99f0a19e1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\ECE281212C7D34C2D33214DAB8505B450499A76C

MD5 5c669e40629d84eb867d8050efd775b9
SHA1 24abd2741be2de5ebc65983cb854572af746f4d6
SHA256 e34726c99ce33ce54da765b7bb8d98d1a3eb601763cd0805de98d86f483d3b1d
SHA512 dc2e44d3d33426171f7826a3da423426ceee5be8f7e7cdb1a1e7148085d2e0fccd228ecec5905f04acafd320dd30c7fd0d3196582dc1e3a957005536cbb8f8f1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\03C5414C101F2F03E0251F68E14AC8998D89E1D8

MD5 b5e5cb6d8bbccdca99f8c6a53df87a14
SHA1 043694b8c5fa6774476fd74b972a0f68c7e8c7c9
SHA256 0b7a618340025ef5b242016dd73d639d8835d4a0f75e91897287fb420dc1ff04
SHA512 5e226f8d2ca3cbe06d0c240cf22a24a6db948fa59df56e397327aa1a237ee03205176330b4bb516cd62307c0eeaffa0fa29cacdd612a7505677682cf6c2c258f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\BF0923D6C9AC3F4148AB74C98E937ACD57DCEAD3

MD5 aa136d25e2d7d230c15e64d3ae935a3f
SHA1 037159c5e6f6f5b922cfbab04e01448e33491454
SHA256 55d528d95fd45de8eb336b500680d52f103d4649f158624a21b9a49f308c8378
SHA512 47db6a5fbcc94f2e0f57ba8b58efcd539da7800e6d21dd5f581a71f213545825b96674c958c313f2f112a410d1c9cf1be2cab63a001aba0dd2e3919f7f38ca2c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\F5A1FBDEF4E6F115791D6C8EF1598942067B8080

MD5 87cadec6baf5cafa155e2f86c28dc9eb
SHA1 3da9bced9331232889128582e90f4df65edb6050
SHA256 f69e58aa7d0fc06a007567a704c1f8f027e2046545053ad662e5b9af239d0edf
SHA512 698126eaabd6fcf1404f2dffb4209ba41a5d4d8ef02a82fb6abac9c6307ee17a41f90085ac9fc3fae28a7b654553f52a95bd3c86007be9c82a9973bab655d9b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\F9E08E893200B96E510F048C397A0CAA5DCCB312

MD5 63137c75222a9a4317458fc5976e483c
SHA1 7423f67321f7a673a10aaea6b3d16cd200924cc6
SHA256 3654d5e030561245328959896a95c40cc2132acad8f7cb98ac410db155fddd13
SHA512 027d934f1b5e13b11fefd954a6f4678f21da724a83f6b84187d17a1f8b8b6210287a0e61c38255a53fb15c7a21e5305e8b7299e85370f9d7658252fdeec7ed65

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\067740F68252BECC354D15C656C6286D001C3D12

MD5 537ec05592da62684be2f1d475f4fadf
SHA1 effb521d6794e9455b7835a447f249d14a0b4b48
SHA256 b28a9d415be4f9984bfc8d222be20a6792aa17db9b606064844865974098cb3d
SHA512 4a7a51311d409bf914b2c291080289061647a23ca0b2afe4057f3f6a0f5f12ff345508c76b5c1210a58b2deb1eb7ad7b9c887cf581bf8d9f20d18818a7924cbe

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\8B2EF5E7C200034B9D66055C0C2B57587E121BA6

MD5 4465bb2bf182d6eb96fa377f7ac66946
SHA1 9c79cf4c401f2293f902032375e837838f5d43ee
SHA256 bb54f9abd3edd9b20d9f93e76a7e937d19e6645207423aebcd689e1debe2f835
SHA512 125c79ba0fd37505b9886b925521c4e5a4812584b0be6c4b8d7e5c688049371c45f95a426a145d96e650d2b9d4e9ebc6bca2bcdc08983db2269530903631eb6c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\BFEF5B7F3B00F0A81ED1F7E43EA7F8DE07A9D010

MD5 86150bc87fda465a56625de7a767ebb9
SHA1 9064f4fa72656df9aae848d4155d620c7a8b1e49
SHA256 38b47bdcb0e67374899892eb90d6b8cea0dbad29dba76bd138efa63dd845653e
SHA512 07f2a5bab17363e00dfb6b4a9f7cafb693019f29931f1f71510464f7a8dcfd0eb7f504211784f3b895d088642a2d3800dbdaab924b530934cf1c3dbabc04dd8b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\5525EE441B366A3C02F463D77DE1E3C20C75154F

MD5 edd4e36fee05d40f2d3beed40ccbadeb
SHA1 58cd472559e9e939c2ec67c6072d2f8a733bb70f
SHA256 63ea21921bc53011b7732d35b6f3f6c54eb54c25ad20a70d7707afb89be71cce
SHA512 cb60d6e32a2735e510debc587ee0a96bfa6e955956e67d1cbce1d5398345ef72f38b2e60f3f61ccd5206213b5e18ed866ad844ce62cd67fb9852f1b7d402c137

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\14CC450048B26323976C3F9913B909D1CF763966

MD5 6a41e9d84de1b237c5c01c7086cd063b
SHA1 d0362615ad7ffc2be5ee40bebb10f46b7df89887
SHA256 5bd7531dc366db646a50752978c9416162f4fb594add390c4bdda37c6a44f2f3
SHA512 b449bae64d5ca413b08b466ba9325aa30099d62cf9fee5cbad5ef7a1d50019d626666386139f5307f1f1346975f69a9412d92dd4ba68e6e337a1c902380e1a23

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\5BB66A8F6778DEB9D595D468945EFF9C7D66B934

MD5 adebf4519cd760a2dcb5e03fbf16fc68
SHA1 4882a38ebea1b717f57136f827c7d4617afe3b14
SHA256 ece88995bf726d247d697d769725c30554a23d93e9a4ae5f09de53266278f859
SHA512 6cb9d4e9d462396ebb895fe65e5d0c0cc55773f7d37c1738d8c20edecf8edc194035ee0ee2bf4c3003cb8ae77ef6f2b7679b1d2b75c9ea95bbcd3c16a92138ad

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\C88FE6FE8ED0018995E76FB6B4CAEB37655B5835

MD5 edf5b5bdc2bc6e05e0539c8a455c9b33
SHA1 b9eddb5c5c9d8f9bdfa0d0d7b27378be412474ec
SHA256 97d2ac5c9f2f3d13da8ef357615fc9bc6f1f963feb7ba2b5b0f82c57fef00415
SHA512 a6e60b0d007548b703b1d322473fc099c390ba80819d0759a24cff921926bd1eec556046f9075f77c97c9b697408eca45f2c10a6d403fa7553b550ed7716a3ef

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\2492994A253B970917AF5CDF605580B1C2DC16A0

MD5 cf7f26fb582ba9a8b4e7012dbb7a9080
SHA1 dc3a3bcc1b4702e788bc5bb6d16e6d3ee626942e
SHA256 efa06d3654a46067df17a03121e2dc15a84fd865278d4eb8e6304cf165d1e43e
SHA512 ff399bdfcf526a8e7dfcc0dd0b403114a93fc838ef3ece02c1d975e421d5aef49245dc01c8ff2dd72889d351bbc45be40facc6919d4f47e8f68edc0abb52f31c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\cache2\entries\D207CA89781848E7ECA4C658F22D4AEF1B168DD3

MD5 f1f38cedabfeff3f7a98393e18800112
SHA1 a50911c20c3c8b0cd984e51aff75418cfd904ac4
SHA256 175ea2b0cde7a80dea74cfd2c4701c7882bbc748fbc57f1ab66a3ccfa59d1517
SHA512 421a6471c5ac3c7ab9d84cbd51470165b8747b27aca1cc9f3d67a4e2d5b0aa1ec0d24dd1a90cb43eba404927997564f51e447e68220474b3b7c3e4c06ec48ba4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.IdentityDependencies.5B6DF4898591F2A648BE\payload.vsix

MD5 c09f7da85e7c3f2c7cd481638687f11d
SHA1 328d199bf8315f1760ea9b24e0f283e5b3c7cba5
SHA256 7b36fb0b2516427d09ff0893b761edeecb26fb8325832d62b48567870866f296
SHA512 08d388d093a1309c31a4fa8f47c08cdb46ea044223841bc550d480ff0cc08427bbd9dfd3ab75814e3931212dfdbfd5125417b5811aa5ec69aeaae2b003b84e73

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 5c0d9a8c81cc6be752d1fc1ee964fafc
SHA1 444f270f77d62b1a849d5294d9ea4fb6107978e0
SHA256 1625ae809110420dc36751e41a889a82b2e27d4192ce9bd58c1d914d6ab4adf9
SHA512 ca248dc179745721c20389c5172a1d96ad675aa7f4ab9d81d9d0a91afdacc44961e64da178cf89c60ebc088a56eb727a2fabc2ac929d1e9f96be9cd450ea782c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.Neutral.BD85F94F999BF19730E6\payload.vsix

MD5 c2f2db0525658fef3bae09d3e8e24479
SHA1 61584e0aaf22a97e39040e00be8acc33427310d3
SHA256 808d549a724480e4d0d4b60625a1469645449afca258161cc1b5b1e097253b65
SHA512 300e18480170e85dd5b063f9172048c58b5a02c97f70e5a54e15bef6acd036374c0a977aae5d17aac71c7d686fd6275b083bceb5e38284e2ceca2c2060d44820

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Platform.CallHierarchy.EC374475274D5A61082E\Microsoft.VisualStudio.Platform.CallHierarchy.vsix

MD5 5910cf7da04393e00cf853a93936bc83
SHA1 c9fa542cee14b31a4e60a834b3a2ad50aceee619
SHA256 cca5ff960157944750cf3efc58fb73919a1456e4cfb08559e58537660ba28f00
SHA512 d36928677bc84125ca81ef76d298efe241758e4a02f7a00a04f2236a12cee5f0d90f5c8fe4d1ee35c9ad4fdbf98a84304a8f15cd3593ec6e94a73196658b83bb

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.047B9B711ACA34F5DBC9\payload.vsix

MD5 ebcf84b9aac70cc7d950e7c38af5ded8
SHA1 dbdd5e619fe211cf7a1ea8f1914dd82775e02e34
SHA256 e2417be06c1f78f5c630524b315e5d300ec7bdfc7085e93c12faca04ed5b4cb2
SHA512 7a07053fb5f4ab046b4c65a1e57105cd06731b43cd5affeddaec6e7f9a6cec5c7707031082811145436dd7f4e2a2e378c610a19482ff28212a4a0e07e34b2ae3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Diagnostics.AspNetHelper.Standard.50A88FC53F79CCBB7389\payload.vsix

MD5 7890c1f3d26fbcd23ac561bb437bd95b
SHA1 0c239255636601fd0ac7c0c502bd25cbf2eb9db7
SHA256 cb49cc0817bde6dad0b083bfcd5b7fbd896df1da672f3970f225a8d3a2b75dff
SHA512 03b4771d563a57bb736f85cb47d95b4d61dbd137f0765599a96988fd95e8fcf2bf8f61a3978eafdd5e4e8cde239906a0703b5e2b86a0612027d1dd85bbe58d76

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Diagnostics.AspNetHelper.CD92B076EFF288B821F1\payload.vsix

MD5 43523bc60819374e047648bd0e2721bc
SHA1 8d676534cf21993b79596df44e57202d88e47797
SHA256 f84312f51c25ac54907a362a9aff4a350310ac78cbca7efd6b5be8e878ca6f04
SHA512 a83bc371bca6df3cef3264ce18c75e3e920168c6258208053c2501d8995bf1935aec539590a88d18cd20f8c30e4152be44b07585dfe468fc3cda3cc96af43494

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebSiteProject.DTE.0F18ECD963FE40CD2657\payload.vsix

MD5 da2456e8a57c2a5e41587baf21f23be0
SHA1 a8e2d6c971f4919157027111331f7b58f6677ca0
SHA256 403fffc98bcc6f22f7b7cb3cba3b922960fae8dc1f4eb1aa3e1517fd1d796ef3
SHA512 ebe0d39351903576f1147c99a6d1050d1f3bd5090028976780f877c4f0ea28248efc45830cc6abb73d911f28726d93311979740a586292c759fa0eec9360aac0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.MSHtml.35F172F4C07FE73F0A72\payload.vsix

MD5 2551c81a65468231f226f4a9349faaff
SHA1 cfad8bd0f5103e14e190da447a55bf4dbf8b811f
SHA256 bbe90dd5a817cb2e6a0ab687c719f6bfefd8054b2ea106161d64068d3557c333
SHA512 aebc33a36485079947832f4eefad8a87f92471f096be6ea0ec8fece4377f09b70435a2d43cec29b30bdc8f98aa46161ff31ec5f84753ab9f6e77b51cd1be009a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.Resources.Neutral.39C82339BA74BA90EDDE\payload.vsix

MD5 7764b923716d8d7fb60e50505a4aaf66
SHA1 78fd678bc5ebd36f0771c451d8f6b85ccf4e997e
SHA256 4a623807b9caa67c321bc99d3016026475747ba13e9753a25d2c7f3a92874d93
SHA512 884edd8daa78790ed62362ac6f90be3a953d1391e38ab5c5f580ccf4bf33d3b4649b13ce382e4d39b9a448ae814479cbd62f976c71f1fa02f2eb456e65e06ba7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Net.Eula.Resources.B1C09BCD7792BA110F7E\payload.vsix

MD5 38a6d61bd6850d5a67988a916c74a4b9
SHA1 b3650e8c277841e77a611e02256dea0e2e0b5c4b
SHA256 6fb50681d909c9a5e3988b9642eec1320dc91b08a3a0b79965d433816f0b9647
SHA512 284d72e634f5cb4a1ec9004d00bdc3a0acf36c3fac3c3d567ffe4a8853d718c32c780cd3414f06471940f78fe3491834ce8e3e1e855b7146fff59bed262537fa

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.Resources.NeutralExtra.9071D9605BFB72F48E36\payload.vsix

MD5 41cc40ff9eb7c01101bbb4704a4035d3
SHA1 265a5a3a3fd6f45abece99b8eb1486e851d2d794
SHA256 bf0efdf417a27d482bdcb5271eac7284d95b292f3a9ca1ca5cdc7a5dec8837e6
SHA512 8e63286027fce9bc709a0a9f6e8aaa5de8bc082483920fb988e0685e8536d2506224745d110215d18f2d7f6b29fb93ef9f74b2fc2b67d59c68b47b6912363e39

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.CSharp.Resources.Neutral.62515390960B730CEAFE\payload.vsix

MD5 f4cb8154d6c2737a96e1667145a5b463
SHA1 784c60fca6f71a693487adfd230a957a134a40c6
SHA256 1055a9ac2aab59e47169f47c5fc53add0933f92756aa29be92f771389e1f6323
SHA512 85a5fbeb8883b1b53e863b780fcf6a8b0a353dc421c8b474dfa29a7fe9bc9afd2444eba2c20d1153b595595b65318edb2994377560c4d8586f06dc704f6755ad

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.CSharp.Resources.Targeted.C7EC9C20680B4F03C211\payload.vsix

MD5 f3f473a0c5e7a4092e6da6e9eea28eac
SHA1 6ab8bf0e0fa64a3911626fd5f702fe1a65f86394
SHA256 aaabfeca7c376bdef003841b07b98c645673de535f205bfdd1bf33abc9bbe5ef
SHA512 08827ba38af46bf88eb918bcf96b91d148f35197673af7535ae5c93ccd135b587c3e6bf504d66dc8a75fff0a8d02a8d8757e5e73bb6ded2493ce182447ddc7cc

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.Resources.Targeted.62F4CEEEC54C622847F7\payload.vsix

MD5 c3879bddf50800a43b96fb410b4e0703
SHA1 05322ddb0515a87ac2608b6d81298249f99bcc1e
SHA256 31f2a2bb99b751f58f8f44ca55b784391958a43da69eb1cded08a1d212925e02
SHA512 b0387b6c8d954f8887341a6973e9aec89f666cec48fb42c6be68b977127e493e6ab40c632217cf63d78ef26c92c1e9803a8a66fac5f5ae954f55f6feaae82da3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.Resources.Targeted.FC2254CFA10F7DD3EEA9\payload.vsix

MD5 2344b51f4c9db4430a6db054eb9cc44a
SHA1 a133170d58394e3a98c26d8918d9138ee18eb94a
SHA256 6e12a57019f86615e818e498877dc7c13192a1d4d0e6becbf5d4e4a157cddefd
SHA512 1187349cd64fb78a08e13269355c1d37cc3d182e71783239f8b6d92ff35f701b4f278f9b2b01e8955ba8f02559e9518302d3ccb812b5064d2dd98b4227a5644c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.Resources.Neutral.47FCCD3B355CC8F0B744\payload.vsix

MD5 49b671e42b5d288bb55e4f7bf55636ad
SHA1 928c70f45c2784b744a9ff5024c283fd077c52aa
SHA256 6f332d675ff6a7c34f7d5217047ee8fcb2167f5ffb92e822c294212750a101e1
SHA512 4ad87f9d1d3122c260b984c34dcc567aff418ebfd259c3e2631eb2c2859ce9b0f8f9cc34dfbdaeaf464e412b157d7629be58d55fb348c9fceb230f434fe5252e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiaSymReader.PortablePdb.1EB9230F9EE90197F47B\payload.vsix

MD5 df5dc6ea40d305fda1afc8d3d12d7e6b
SHA1 0828475cb5f4ca572dd23f729e767f02e7794301
SHA256 2b9fdf7e525e3b20c321655d4aac014133c27affdff40e166699217db7739715
SHA512 0ddcdc7136e35161747e5fe5a3ee33dc7b5640621d12d3f78f1bef2893a776aa4c0c10addf0576241c377623e1f1e9c4db1cf5a53937fd884b13c9c855be49cc

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.NeutralExtra.CDD812B07E1107ACA119\payload.vsix

MD5 dede6aa2a5f96b0753150ceb19396851
SHA1 fd99b5861673c0ac4a4049671168601576ad27f7
SHA256 c1ae7f6cebf3c92e74b1c8b9f42ac76bc1f70ca17654d3f63c0cb3e0c4d3f9d6
SHA512 0e81bc638b094b6c18fc40c7a90e136605d6ef2ccf0b2ef81e232d0ae881bf6b9e9047a747e01d1369e14ed7812deccaa535df3f8868d752df31f14745ffe296

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 092d140ff434321d991b08bd3ef07d01
SHA1 671cc7d2b4311164007faf48d59a2bd7f5f6744f
SHA256 e8bbe65d3eb23caf4e4540a780d3e7eb6adf31f9a9a3a462fc5dcb559a585d98
SHA512 9ee63fc825caa21a49e50a07685e23488fec03424549dd2fb62da69ccadd74d8911573b567c704e5e860d016d7010a9ea4d040ac3de23c08777908a57650f393

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\jumpListCache\LJ+J1586K15Q32_AMlfyCg2shQ5tB1RLF_2SGMzpNY4=.ico

MD5 6b120367fa9e50d6f91f30601ee58bb3
SHA1 9a32726e2496f78ef54f91954836b31b9a0faa50
SHA256 92c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0
SHA512 c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.IntelliTrace.CollectorCab.4226B367B64D4F69B773\payload.vsix

MD5 2ef4f0eb79c8495a8450ef66cb267b8e
SHA1 eebe27d5297e08bd982115d2fcefa504c10eca60
SHA256 f8a0f7340e61358367d3adcafd9651978ece2431144fec5bde847e0aef441208
SHA512 3c8be24d698f01203223094f6d2c218b769047dd52223a19d2080d9ab34db58befc9b6ea53c3e17125921986928dfcfb234860dfe4d2b517134b442a1edb2086

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.TargetedExtra.5795A9D15FAEF4387321\payload.vsix

MD5 b3e54d9c6fce37e106e9ca3cac9def11
SHA1 6879e100e009601e03db2df158b116406549acf2
SHA256 a6c3ffea7fda4b6c33127b88e6d1bad71914c92d1a93d7c43207272521262322
SHA512 6a809ba9539448f0180e59b90534f9d365fef1821099d96e652d82f926fedb97163a19ca7a2cf13be93a38ad57af1e56d36b8e20a321ba0a78a38a6ccff2850d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.CSharp.Neutral.746A441E912B5D14F0AA\payload.vsix

MD5 c353a0e9ac7546137241978906a90fa0
SHA1 7bd51c355c72c70ae18e95426e77eed239f152f8
SHA256 b42dbe3cde459debb0893001c721b5e8ae7e7ad25a3205f29624cc11eb6eb276
SHA512 71c22e06da4d8e2b171756900769da6440bffa331bf1c8fba9378bbff20c6c05da0e0392e8dd647a2c355b2ac98b757a4522d0c7b68d45617f913113d8472007

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Targeted.4A6F466A38B83B5859F5\Microsoft.VisualStudio.MinShell.x64.vsix

MD5 f9adae37e6921421cbc3d1383a196d19
SHA1 4581d470f35c0e61013669db93cb84d14cedeec0
SHA256 372b15747ab28d5512d019320c0b3cb6e7dc598caea4de209693b20f10f99d60
SHA512 98d9b65cd590233f7501de10bf7f0dd286af92e05338933cc87bc1d54b27841fe4c225e9d4f3db8dfba530b049a3cadcdd51c542c876d9b10bb622d846f34e60

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.Neutral.26B42FBB58002AC35CC1\payload.vsix

MD5 0098dec1489297419f3eaa63d31d7e90
SHA1 7a56a0bd10f575c49567c0687a8b8caefdd74454
SHA256 7a414626a9b1c6080d42f9dacbcd31ef336debc30debdc0b96cf3d31f6ea0acb
SHA512 aa177c65637254e1bdc806ba347d3b6d0738fd60d5f40c6fbef8c64a21344051f23feb48b0e81228efe0c73c40066e6ce3db3e29d55ed3afe8596a14720177fd

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.CSharp.Targeted.B063871E302B5981DB2C\payload.vsix

MD5 953f9489a61c3e560e5946c6f9a8a611
SHA1 362790070b2cacdd30ec1339a93f1515d7a5c86e
SHA256 778621a96c28778351f97a89b8d7848b8e02aca4591cdbd877233ba5541c5fd1
SHA512 0282f0a59e7deaae493d5bdcb08ec7c41a748304e93fab1ac20dd9bc1405ee1fb71ecf3482fd2eee8e356d563c03d600d4eeeb8fc3936393dc9997dcfa9087ff

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.GraphProvider.C8DBBE2926CE81EFB0FD\payload.vsix

MD5 89ec56d3d11a3926827b9845ebf9c2a4
SHA1 44161708dee307812bbc87b5a5540d7396381012
SHA256 1857f711da42c8f5d7fe9081b3f4cd84584fd17560a344f0ee7eb005da1e565b
SHA512 c058554e768371694d26cbe34aa81e82da21e5c143e1c672993eb865f3fddd1b25c7eac0eef6176c3afd8324dee8f41c52a893a5139db1ec51ac27d21d6bf1a9

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.GraphModel.A8A180A63F0B80A4D503\payload.vsix

MD5 dd4a8374068eb7b4a8bfe26b3ea1b7b8
SHA1 d59af81c12085e8243aa59e880c6d08f22df408e
SHA256 7cdde1255433c87a68591271f3837ce2679859c09b26e16cf6b9612b5dcb188d
SHA512 4cd94fce1c754c3fea31b2ca20b220a89b2fbb84e459faea67e01c0a3894d5aebb6989f6cafc569c5b9f2a3daa7cebf00969973ea2ff62307bdf6c0dc1ea9aac

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.PerformanceProvider.C9FFFBAD99FCE909A149\payload.vsix

MD5 91f3341d184e9da3eb559021e7b9ec3f
SHA1 ef387e8787511eabad7f06098c4cc6de2a4de857
SHA256 441117d913411a845a97dade269327b2d409c95fc42aebd9ea19633268100551
SHA512 73388d0448497fc496882eb0aff7da0f2b1eda3348f5600f68e4019e2f4c5645b03fe7371b8ca0aff763e0b9f7264fa0f1c1ce07cecfe79aa52a52c307d57364

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VirtualTree.83C148BC5D113D00138F\payload.vsix

MD5 1a027683f5d17bf8e5d73b7f72652145
SHA1 cd9fa98445e8dd3615093be968024e36f5a360eb
SHA256 c450c20f5d2d67761f3abeb3c58268cc9f5c2af8b19ab75319a7b78fa979dfa8
SHA512 155462e7ace1f57f63e8ab68a5f70d7681a9fa99992a9887396e427caf438161a48adbf46023d94f51e3573f26b66e88a6bdc9e6b050a327f37c51d04ffe1b3c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 92ddaab55e1c15b4cdda0828397651d1
SHA1 29853b7a528045ef3f14afe21ec2c156ffc39a0d
SHA256 bec341b0a081e39ca67d80939a9e2a12943c21b7b451d794d94fe6ea63fae3a4
SHA512 8854ee4671a435a864197fcffae434790f02209a16628385b043974357f0045e87d6faf35ed6e53691d78bf5cba13e147c78365950c51e02e1c77abc7ae5e0b1

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Tools.Common.Utils.Resources.7D77678AE41E49F6B273\Microsoft.VisualCpp.Tools.Common.Utils.Resources.enu.vsix

MD5 ebd2d93460ebab7ce3634c58bbca9bd0
SHA1 12cf595628c93e7540f5fd12153b8fa42bd07da1
SHA256 da7fde566fefbea26a548ee8d9a084c1dff1647000a57414072e4c41e1e87df6
SHA512 c1c684903d8b170fad9b62c72df207c7f57315f7ab4f24775521e95cebb199125d034394dfa9f2089e8fbd09cdca4115e5ce785d38615cb6c70c30292eb41cc8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Tools.Common.Utils.A68556B73D1A2BF54DD2\Microsoft.VisualCpp.Tools.Common.Utils.vsix

MD5 f6536536a51dcb33ecc33bd94b622d12
SHA1 aa7a49b8ba82e4b60476e698c13f34c105b77841
SHA256 bdde470d5d713086644ab6b3466109a5f06ac5263a1d5e003587d297030e4cae
SHA512 5f44d468b702049cac5abbddf54d424f81e89b0936ec8559c0c19b093537b42e81117d2b4f993b61a1605ff22c9773383d02484b369c2e6b5c3879c02da11451

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Base.Resources.42746B94B653AAD4F996\payload.vsix

MD5 7d21a3d8fd2acf1b79d799c6d55e626a
SHA1 b75b77c2858f0e9fd5a8f38eb92a7c2a6fb20f8f
SHA256 4acc4e39ef72db95044b3a85b10effab0d9f817ec6d22d184e2aa9e8c0baab8c
SHA512 826954a1db359ad7b377919f10d757b85158786ed430a05d34e487652da5b90f47cac9ddf15f1b3824b157e1d6822e988692812a55ce6e730a3cb2ecea080f19

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.UIInternal.9E8215AB9F4CC060F54F\Microsoft.VisualStudio.UIInternal.vsix

MD5 b368d572f1c6a50c8a56e9103f622549
SHA1 aaf25b49488cef4c9fc27be1b970ddb259d0ce83
SHA256 94b8be859df748900adcb0299882272ad16f4586e338dbc195bc9ec963cb19e9
SHA512 218811525adcdec026b62b2cfe6637642aaf450848840262baaead5d41896da69b9639bc884b2c9f877d3004456816afff10a6ce1eff0ed547a38fb6b4eebfb2

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Platform\Guide\Content\Images\Editor\congrats_tutorial.png

MD5 8efdaffbf407c5ae11914ecc954f6e8c
SHA1 e28e6746b22cb56526d207c4c314d2762dda506a
SHA256 c6033d0f8a531e212ff65b4558b652f25afa309b39eec8d5ad99b0e5fee63507
SHA512 f1da670c1149043873c0bfc0098c33f974ff1131e4ca502b360f6908863fd4717ebc944b9ddcb87f719858c90b4b59226c924526b47e628bfc4ced6560166cea

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Platform\Guide\Content\Images\Welcome.Python\Welcome.Python.Run.png

MD5 527539837e09fd6e8f3461b5a5356aae
SHA1 4e795a202c5196093f6ebe8ff57ce266faad3f03
SHA256 822ca512a32744427d3d0d307a0eff7fa3b1e27c8f84b9af5c4a00865ee53a51
SHA512 e3a2363fb0c80bf66f65c7aa9c37009f0fe8218bece77d9736bd62d72af87d67aff53d8d4b7c39d228839082a3eeb74b34195d4b6f98aeb43cf7bc8fe709ac0e

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Platform\Guide\Content\Images\Welcome.Python\Welcome.Python.Run.StopDebugging.png

MD5 99d44b5a0fd8c60bb3c4ea826042034b
SHA1 762eef5c36b386004f520236e09a76b0f2042583
SHA256 d0e80bce5156459548b965dcc651515d247e5ff3ef6590c3e2ece7853947b5d8
SHA512 08cd7bac9e35a783582d8e46963809357aa6f32deccbc53cec5b4a930be036881f6cd2e631c9ef75c8580c76b073069b1216ae3aacfc38112a6d5c394a0edf31

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.DataWarehouseHost.servicehub.host.json

MD5 2257a9c6c927cfc9c7e2a45415fed6f1
SHA1 d928fde93a93772981df2f1f4b1d90e9196ec28a
SHA256 8bcff37d88ae726caa0ee0f981e5a6a1846a5e90b1330d1fd0e5776018252d82
SHA512 c71ccacc4fd1b0d8c29859f9d4dd5ac88df79160c1f1d3336f0772886fd95eef3762ba6cdc511b8fceaa65503a639f2453909dc0a54e4fa9fad7226b19bb75d1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.IdentityHost.servicehub.host.json

MD5 29fae385c57c8b8adb10c820eb092b96
SHA1 26cc5579045969ba24b559584f1ddfa9d9c647ab
SHA256 04458aa0aacc1226264335aadaec9c3dabc0a3892762fa265901b668b69e7241
SHA512 269f0ff0151adc6b176020c2d126462db6edd47dd5168152d0a6f48f68347022e063811312b844f86437b97f0a17b8c984085e699665e8293b69522fca1542a3

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.IndexingService.servicehub.host.json

MD5 b9efb384e400a26e1d83584fcb2331cc
SHA1 7dc046fb374efc0418cc36108b843d28161f95d1
SHA256 a37224422447c10a65823596385904bb23e0a6c7f7f4e302c749cf4bff16b98f
SHA512 9d5491e375be256515016a571faedcdfe168d2050907d37fb988e62771d1c678545ed6483de86d81ea09bc4190de19ca3f48b64e8950870e64a76a3c34c7fb7a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.LiveUnitTesting.RemoteSyncManager.servicehub.host.json

MD5 156e048be9c5b83de2b1739b298e2bd5
SHA1 fbf3a85fac51de6aa4bf6d47081fc393991c8aa4
SHA256 ec7c98517b92f0f8506280b1977f60c928e3b3e6049cdeccb25080e714214320
SHA512 c953927a31c08b46cf63cd856c5a17a7938cbd3138a94edc53a540f784fc06967273011858dfa3621f805c00739c6b4b0175b7e37a5c569abdd4fd5d33de2a90

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.VSDetouredHost.servicehub.host.json

MD5 fb7e24f8da51c1a56050d6987468f0c4
SHA1 8b69c04f6f0646bc2a287b0df936709d8b73d3dc
SHA256 5a32b493fa3a1e96b0b2b428724bc3906559d37341c7c9c3527ecded8c06deab
SHA512 af03a15a12d5239530002753d043adcc98abc9cfcbeff7ed3b8f0ee4fc5232e34247e3663df2b778c3a6187791d3174279eea7ae5bc64ca193181f106e15a34d

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.ThreadedWaitDialog.servicehub.host.json

MD5 06674920bf64a600888a1417eec48900
SHA1 e0aaf0bbfac83e3560256634532100d9ac7b0680
SHA256 90bf3e509e3cb334471215efebe65bf65b584b7fcee3ef60449f240e6196cec7
SHA512 7fc5ddf354c85033d52896f44aeeb6bd5348554fea933fcd2773532f078713ca43040de8f04ff950ae03b549458a13569938c386a517c7236e98204a304d5aaa

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.servicehub.host.json

MD5 a03119e7a8cbb09ad134e36b850b7626
SHA1 77002d088bff1a5031fdd3e69c0a88102875a640
SHA256 2985a91ca358ba814a159ca7d3e551ae2acfd7fe15d81df8f9f58ae63e4377b4
SHA512 2343b4259ba793e6bb24e11cdeebeeeb3e240878c51e00adcb78d2120cde0b2a591ade2168a7c71f0ba4f8716fa3d98eb370eda944354415e3a3d6358e6d9461

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.RoslynCodeAnalysisServiceS.servicehub.host.json

MD5 9632653443fb47c70ed7c731b2e93059
SHA1 94870bcf07ebb8777242eb7cb2501474e95901a1
SHA256 aa568397d5afc848ec42b6413ef1fe706c3f322631ce732ac0a2ef0a7b93ee5d
SHA512 4b898e01c412583a1e13f72b52f0a379f86e7e986566c8b4ab31567e7ed922cea881c40c0587747a734e9c0919c8c0b26ac5ede264f23012c26c9f1e2df30062

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\dotnet.x64.RoslynCodeAnalysisService.servicehub.host.json

MD5 6adacf94917eaa2411265d3365494607
SHA1 256d5622b10c78bbbecf4b52c3fa295e1d407eff
SHA256 5207382bb7521800ee6fc4ee654b78e57628f43ada57fe5475d016422ff9432b
SHA512 be1b835cc9a8594f437d248ac1f0796ec4654d996dab54cf81943dd6cfa9d80ca53fe0fdff7bd022795feedeb3c7d98799fae49329a2309331c72e555f8912b7

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.LiveUnitTesting.RemoteSyncManager.runtimeconfig.json

MD5 47329322d261d17635756dbd1d3e02a8
SHA1 dd2ec4b8b24e96cab1982d086ebd10ad9c60b139
SHA256 cd4b73111d22896893e6e79272118b53f635f8634c8b6076019b5a1c16d4f331
SHA512 98d6b48e4d3b28a9adeac9b63952d5183594dcab5ac507136179500bf9bbdfd291e5ce3111908c34e6792cac0d9985a58c173193b64e82a7b73a10f073beac11

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.RoslynCodeAnalysisServiceS.runtimeconfig.json

MD5 a97f4472863cc9c780e71f1970fcd576
SHA1 15b87e9093e996da710b96bf662f1d36f71801c6
SHA256 8c339aa59287616c804e03db32e946e19c2068fbc2af420b2f30d10b2c67d91b
SHA512 4016da49cf41f64e6555cde370da0733b3d34338c89513925ffefd54c4ef5409e9e17d8c9942ebf65bd7d3e727add43c3d45b7a8609a3320e544cf62b6106652

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.ExtensionEngineContract.dll

MD5 d994ea43477516cd1cf4e9322ea4f0bd
SHA1 edd4642380c82a8bd28ca1ad2a035c4e56d04386
SHA256 0b002276d0308970efe2efd81859bfed9872902a1b47e05dbbc379e206ff7bdd
SHA512 09762734ce289a03bfca53c62272f8bb413abdb3b505484fa0418e53c24fb46ba895d098912f2c8ec43de8ec80569986f33a1d70a246c3ad270b5f0f6fbdaef7

memory/3716-5046-0x00000279E3E50000-0x00000279E3E68000-memory.dmp

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Terminal\Microsoft.IO.Redist.dll

MD5 dea7ab4b024cff3e29c08da915324586
SHA1 30f4ed0eb4e1a2e4900e4f133ed7c09958d91498
SHA256 6c94ee150cacf59561c1c38bf20e0d9799de5da6ce80d964c83c3879d84100e9
SHA512 47673e2b02ba6496899a3125a3992d37ef70fececcb00d1ab475732bfcc014ae803dc0e7c857fe0a3fa40c4f04b6cd2bea2d20885aef8f2a1888728bde50812a

C:\Config.Msi\e5bba3b.rbs

MD5 ee7f0dc2aac8c9ef77dfba1571081ab8
SHA1 01100655545ef115b67240f050b359a0eb700964
SHA256 1489e55fbfccc1f03765ad1cf49acad121c9a62c66d826d682d891cfc40904e2
SHA512 daee06c87067b1647a29fac45b81d5764ee59bb94e490fede17610e5f3262952c20942d3022caa3f7776564d21e3cc44d57ed94f0da1fbbe5c786e80014d64b5

memory/5520-5410-0x000001B3A14E0000-0x000001B3A14EA000-memory.dmp

memory/5520-5411-0x000001B3BBAE0000-0x000001B3BBC42000-memory.dmp

memory/5520-5412-0x000001B3A31F0000-0x000001B3A3284000-memory.dmp

C:\Config.Msi\e5bba40.rbs

MD5 822914496e8669aed641886163f1f2b1
SHA1 31c15eb17d5c1cfcdaf715f4a718ff8506d75f44
SHA256 5d2cb8547a907453e4ebfbd8f327d7c480ad52137c849234b36f72a2875590d5
SHA512 2b560fe6fda85ac9e902ae6cbfa64585bac17e351cfddcec5d6cc71d99c52d3c9caf7a70933608c704fa8a46ba0af999c7f9c06a79a6dd48f56261a3d7acc195

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.ProductArch.Targeted.2E9D8FB3F4748EB6CC0C\payload.vsix

MD5 af5daa6e3bfbc24236291d859a6e7a0e
SHA1 2921b259172a58c64605d9fed3b520c021942876
SHA256 3f716745fe038279110fbc979b05bf01852bfe8e7f5984fc4334612d0aa3e4e8
SHA512 7321ad40ab35ecba8e81601c06af6f63c1a248ba35a57b6c89952870cd63c033b5b60c17debb39c95af5c744858f015c046ee7171b57b90403030e77103de163

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Core.VCProjectEngine.Resources.AB69ADDC9DA9A017D61C\payload.vsix

MD5 62489ea63717dbd1233fe8ecdba8842d
SHA1 3bb1413c43fe17bc3b8da7be7e0eaedcfaa01916
SHA256 9393268e9fe497a23d0a226f409379e0b4146c34da329645bf1713af67d62cd9
SHA512 df0313c313ff77cb4b0ca254cf535af453fd560216106300844d160cbc06b2be8943c86211488e1267ca920a9abd6369d5a662d80db2686ffeaf931f81429e05

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Core.VCProjectEngine.9C539B52CC99E4099B25\payload.vsix

MD5 276ad11a74dfae9d2c2e5eb4c19d589d
SHA1 bd86433a94746dee2669e522a15100dbe469fe90
SHA256 681d536be854260f6009096b809e1e09022d672604d83475fe91dc9b1a878aa3
SHA512 45bd0c084a2723b40549c7c5b872039bd744f1c8754b3e6b5ba11c03d805ba4c5cf92ca6b1e0749cf31c18e5d8271bc1277451342b71b2bd317efef2dc594828

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.ProjectSystem.Resources.FAC884E638A1B0448810\payload.vsix

MD5 f6766e75a81e023c9277c43080148189
SHA1 2fe482f7b5a85a790ee36fef7cbdf8ce13aec5e2
SHA256 14983a280291469e102ee3b66449ea6f70931719a9e787a45e654d0130676f06
SHA512 e27e19e9b84317f5def348e8b5f32410af8d70473e5358ad6d12da3ab57acd170f14989799a4e7d13406d7754aab92909fc6c1cd77e289a82f11766809f0aed9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 1e9132e090c10c4b215556bd8ae16341
SHA1 382f5c4e13e612d1bc5f90e7aab771f5b38cd34e
SHA256 c11972c58fc72caa18de09847138d2b55c199e32063a77bf2a0b13160d78ca2e
SHA512 1fd810ea0fb6c0495cff98320d82a71c8021ca438cf76abda443af3b43bea6f5324f18d8eac02f6dd202683b9a82161a898cb04d4c5bb15aaa0c77f8cb0759d8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.ProjectSystem.FF99A061F1D0D41DC737\payload.vsix

MD5 c06d930569eeb9ee5b96a6331467337d
SHA1 e589c8938d92bc002cc3cb8a0f1fdea7e346fb5f
SHA256 341129d4676281a687e267c3773becc4b55bcc891913a31ce7edda0746edbd00
SHA512 5558688ae2fc5b8a7b3794d689e45dfe879964b87779045c858395f77a173d351481351f7364a3469e4bc2bfe01e2a89f48f6a6eb12546df755979cb0037ce0c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VisualC.Utilities.Resources.C1C92128725BD07C72ED\payload.vsix

MD5 a1599b068f650e73e835bc5d3b868ef6
SHA1 9ab57af2c4df1f27429ab99d7fbf04fca71a1924
SHA256 4c0588b34369d00d66d132c0772857379a6aa78378c21485842dfea2aa710ccd
SHA512 52ab679c8ecb51b9ffcefc7bce140c9b80b58c95897b20eb066cb65f7041c0f3df13d93e69a74c86d932b4267138904644b4fa37884170ecf924442c87bd6832

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.Targeted.5EE7806A01FB3ECCAE6E\payload.vsix

MD5 4c5d68ce49456b7f2f98bca8dc3bc076
SHA1 a67632956dccdd3f72ed79b3298ba51f151a675e
SHA256 12ecf1d1da630b7e818587e75deb53b7b6f115cd3d161714861317083dec5452
SHA512 6fb9f366bbab5e8b8979785ba57d449dc3d9055365b109a92c0662944be9bfaa789ec05dce4cc96332aa3a3637e6e3feaa24d4a61fc1d72aa3e1e4333c0ababf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VisualC.Utilities.4AAFED7F86165D42896E\payload.vsix

MD5 ad7cedc67234f0fb854ce3e0547c9489
SHA1 24feaa11895efa3645a564edd0a5fdf398d922be
SHA256 4ac33322ccff33a05c6d8ba73113e123cb5e204dfd77d48b57cee8708148a1d9
SHA512 5a75dcdf48b604906a5e8c521dd8f0a380070435e98f2548de9150392deaeeb779fda1ad024a400426a378df886ba738c2431e4b235949d16e55307b2c53db57

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.LanguageService.Dependencies.7DA911458E5F0CC79332\Microsoft.VisualStudio.VC.Ide.LanguageService.Dependencies.vsix

MD5 56049eaa1ad07dee4db3e3bf2d298f7d
SHA1 f35f942f9e5ced5d1b49012ec796823a4afabb42
SHA256 3169589e9b4164d9734c81a4037f562da4f984c0670c4dab13016ddda85ff893
SHA512 f0080f8ad9818f3e7c76c21853350097d4fa0b4deb37379edceac96e3224f883dad1aa1b537a9bd2ce14bcbdbd90904f94eb46e09d53ed42f315c71672d40ca3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Core.C00733F0489ECD4FBC52\payload.vsix

MD5 56e61e607547bc5f7b8d04fd5a272621
SHA1 35d0511305f47bff7b5db84c478cd6da4bc0e778
SHA256 95b9a80ed4463e650b769fdfdc62253f4b9256b00fcea8da23ff7b21df713268
SHA512 39dcd62e8ac1f38a47282fdb532053cee7121ea5a4867cd3c64f12708e439277934557930244cd8fcbdcc933389f307a2fea7abdfc2421ff73c497d8f5007405

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.ResourceEditor.Resources.43BC8FBAE016276FED3B\payload.vsix

MD5 30a321b0000c462b335301e186363ba7
SHA1 2b6a52871b7d6c5fd337072de0f1b9490d956344
SHA256 de16bc576a707256e383e7eeb2bd29603aa5a98745c835d343c61f0d7cb6de97
SHA512 ae3d7eca04fc9ac721eea438bb2a4c90ba2f00e212313ae9b6370ac442b114f9bed027261370e7282582fa7be1363c705a19ad4ebd00c307c149e13ac1c782db

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.VCPkgDatabase.74F46E81D6785191ABEE\payload.vsix

MD5 0f3002767414b83b127f2508b492f856
SHA1 20f5db38c7b9b910352ef2f851201c7393189d9a
SHA256 8a616c5dc9d399b8e35639454fa03206bbf01720eef6a0988cc1bd6558a15a44
SHA512 e80431934736c4af4a2b8701831d23a89b1cf60630f4fccccf83202a83f3fe6930979927326eea5912c5be8f4e9202c059e7ac572b83f00f1e0113a88b70e1e4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Copilot.Setup.43EAD0FE39355AD059A9\Microsoft.VisualStudio.VC.Copilot.Setup.vsix

MD5 186e72e66a0bc81d022cfd5809703915
SHA1 4a2cca62a069ce67cde127b7ee313d140658df03
SHA256 02bd10dd34b26dc3352fdef5ddc965e39ad8f289cf1bc4009bb559f7643beb07
SHA512 90e412594c1e5592d2b7e0897191fdde39fe292032e480a3d1d741326a9b186802a9e9e502dd2ad5f40159ba032981a8d15db7b2c70302f2d75aec27996d51fb

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.ResourceEditor.726890BC8448F3D613B9\payload.vsix

MD5 f6f1b2d883974ab42ec08cc9403fd8d7
SHA1 c9a51b2b212ee1f0cce774e67acc26924a995e35
SHA256 2aa54e3991da05dd6b8a12618c5544ba4f75a006a1560328bbb59d0838032f41
SHA512 30ea01ac388cde6537d9b93e5fd3106c837c2148e4df591c10e40619fe0c6713fcb02016ea92558165587caa755f96e2ac4c26a87dc5761a19b1630a691b947d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.LanguageService.Resources.9DCCD621A3F25B5F6A1D\payload.vsix

MD5 f51de28eccd1e2e782af6508411139b5
SHA1 0f0b6beec8e8c44bce57c890455240bb8cfe4d29
SHA256 503354bd469c62f6735f5d3eb881253889e62dd8a85367a17e25f3c5652860e5
SHA512 496d03c4e89ba7b24f076c487b121da186a37680511e7ae5df58124385b9ed76365b8d22d02e6a0851cab9439447ffe744241afcebe36c7dec65dc9ec93dae88

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Base.F885132B86FE808BB1F3\payload.vsix

MD5 72725421b37943da75e0c6ab2a476822
SHA1 fec2fb044cf8268090148c8c03625187d090edac
SHA256 5b1f6f10075a55b05649d30649ef5599142e8cd1f947ffed4a2f2b5cc5986f87
SHA512 19be56072c6044c4361fb773ffad11836cfd418b3503a463dd1045500202cf3193f9dbad7f9f31f2e1dc5e8d25b6532c409aca74fd851245bffed9d8a94c8bb3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Common.Resources.25EF3087DC7553D53A15\payload.vsix

MD5 aca0818726a00acaa9c70925ace5c41e
SHA1 506ba9fc10c5beb9fda939c75e1cf8ba4ac63c5a
SHA256 1eecc81e8113bd29d1a3e27e9fa95e0a266575f16e8be79f86d22c2749ef7627
SHA512 ffdfac0fafe2547becea4b6fe6f80efca59853ee82e8fa9f71b8f63ef92c18913842b6c8d2574943f6aec2b94e99d50bc5ba8cf774ed72b0ab3701bd5dbf9313

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSVCDis.2E07DB07AA43CCFD0109\payload.vsix

MD5 0c03d3ab96b36e3d0dc81a027eb8f2bd
SHA1 f0bed918984dc90165043bd390113952cf785ba3
SHA256 28333d2396fe6a47eef2c7e6d853de0eb6e977fc80956c2416bb4839cc98b2f6
SHA512 fd12eb05c751f1f3754d07a89a085d208e0170e41d8d7b060d9da684b771dd187eb64204085bac9b6c5a5ba820a124e380f0e1d485bc3fbe3c89e2682b8fbb8c

C:\Users\Admin\Downloads\CS2_External-master.Vr8ojTKx.zip.part

MD5 3101688ecbc4ccdecadd9b335aa6a31e
SHA1 281a6af9448a601be3672ac58c55914b3cf75804
SHA256 b3903a6a57d58e2916dcaad8c3e9f439b5b12081319c4b8831a94bfb255ccdf2
SHA512 1eb862731736ca8a16709c7645c0d9eb3cd1c7573b805c65d6e08c64b7928c76b0781067f0371626f1115200ecd43c6dcd0dbcf0d6b4cbde4a07c83490240b75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 fd29640d7816c848efc62b08bb056f29
SHA1 b3c239dd2d925353736c2440fd4142b0ccd5c7fa
SHA256 8bdf43a2162be93fcd0092adeedda04bb9886bb6ffcc1cb7be17e265c020e838
SHA512 3987c2e3c69270229af4aadd44f90af0ff8baba4c577e169e5ddb1ef1cb4528d3eeab3443d75d752793cd0a3c00a92f920e225256a1390073fbbb3af2a91d98b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Common.4A106A16323815A20730\payload.vsix

MD5 4ba141022450494b73cf31847915398f
SHA1 59f54b06eb8c4b13aaf1ef223a12ff1fa205fec7
SHA256 d68ac73c774f5845a0a3182ab314f41f5314519957625d4de4642a7b0eed61da
SHA512 03f4da4b24ac1430953b1fca274511c56d102879cf15db91ecd838f596350666ebc237d8010e42839c660655d37cb81af81899baf19d37e9a874126515fafd11

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Debugger.Resources.B545577303E657E9E835\payload.vsix

MD5 cc1b49f707aaaf879b4873419a5b9208
SHA1 4c96d95cac32972281197549ff148d04f70f4c30
SHA256 09a573d6cd97e6f933e0c10c58da8637d14bad24809e07ff85c6dfff499e8b17
SHA512 0f94be4f19d9423ab7a040590f4c16ecaa1bcd5b8c337a37cfa3eb04074d829bd871da3b490665d22eb3d23429292938a8ec2e5e8036fdd9cdc9e694a53521da

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Debugger.Concord.Resources.66A31B40EB686871BE58\payload.vsix

MD5 dc4f24c064e94b7026f651962d5c89cf
SHA1 ad9c4ce4928d517ef45b91abba312f51794f1b40
SHA256 fdc4406ea4e0144a3df9ea0ef8f771a83d513ab308cfee694403125f33e55f88
SHA512 4d8698f89169627779ea5b6a5b3e9a10d3fda2bf0663093093c42f79428534edd4d612b1960c68990767206ee60b27b6adbcf522c669f62d29c5b35f51f87f20

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Debugger.Concord.B1A020BD3D0AD16DDE7F\payload.vsix

MD5 bf381069b64dcb8e4fda2f0e8413bf92
SHA1 55a549a0a8f087e218c7181e8d8692ecec338dc0
SHA256 1a0d50d68d0ff827daf9fec400aeb4c62bf2d5a2c8e64cee6700cb4103c7b6f3
SHA512 181f130ae5055e14c93dacb2701e08c529d7025493011a2ffb0589d62cbbe4e2279c93323a4339ebcebd243365bbcbaa41bdb0051fc112fd6dcf4993203e7122

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Net.8.0.WindowsDesktop.Runtime.8DE8DC668479421E15D8\windowsdesktop-runtime-x64.zip

MD5 1c5169c819b5dd1f37bd2f9fc3e30168
SHA1 820344fe94051a2cbe052a17a17bae4258cd2b2e
SHA256 df9a23bad0e3d86355cdc1f1e7f0bf27f8d7ae46b9511bfde5cf7ae79a9b948c
SHA512 d26210d317cd108ec08d075fd646d0b6412aa666d53674fe76f988bfe669e1a7cfd6e3332948aa5d0dbd1edfce643713ddfc841bbdc76b3fed72e8393960cfce

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Dskx.Resources.A1579DE301A3CA5A837B\payload.vsix

MD5 43d1821542a6d55f78bb4243e7c8313b
SHA1 9597265a908b77abf28590dbfcfd2601fd9d704d
SHA256 8dd3c6295588146136304b6d0980a6ebd82800f06c18c3c16bf168ca567be092
SHA512 b458aed75562d8c0c0ba30263dc9ab5c00fc96c3cd12517b2d1e014d9a3b4faa40458f2ed862c22de10c3cac470899adf336d0d2f3b470d481dee01718d83fdb

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Dskx.0CC10669744D86B9FB18\payload.vsix

MD5 37392829e2ed93226fcd3aec33d37c75
SHA1 02120a672c2a1d15bb51b97a1219ae218bbeacca
SHA256 9030f5f0777fcbcc83cfd0aa00f456bc26c84932a27a3650e24e0894840e2648
SHA512 f7199774b80e4d88da324683f9b6904846477bad636753b1fd12803968afd681ab398352320cf3cbd39f49084b09004a3a558ee96736ff2fcb6dcaeb64e8be37

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.WinXPlus.5EDDD935C7FB417DFCB4\payload.vsix

MD5 0fd43f0a6aa81bbf4508ed4b2ab2b8e0
SHA1 084a7dc53195a4cfa736bd185e5e6a80e4d9fef8
SHA256 2504f20f46989ce859df0d50d50254ac98e4f0390eccfe97c38fb75d983be816
SHA512 63f804dd89300db5dcc9e44366b2f0e16b4e37f63a9c104498e176ce448784ca6d49c7fd8336e8e9a02b28ada0db842cd8ebf4fef16581226c3927506aa5a33e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.Base.Resources.E0A7E1410FA76AB3615C\payload.vsix

MD5 7e6998ea15033e31a0a6b07e4763e3be
SHA1 4b5ef578d1ef506514e1157082271dd36aacc770
SHA256 67e09429077fd328e4930d33f4b7ffcd03b0e8ad0b54c68a2905a62fb4637405
SHA512 195d6d558d304023c2f94fc80f264f50dfcb40ee59ad4a0b36222efbe2cb2dcf378b5426617b6b92675d94db72b364c69d90a4f526b85f207635b41da654581d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.Base.6993D007D0F247DA5FF7\payload.vsix

MD5 b1fb4a8bfb37c40da436826a6cd2def9
SHA1 f406698eb76736883895d52374a410c34e4c06f2
SHA256 068d302043a495b4ecc49b9904c9fe1a53fccf7035c78e3511a5dd30c7898353
SHA512 cb1739cf3df49bad5f004539b8883c84959a59489ec4caf0566fc6765a8bc164650654bd03a6d33e3bad7503f9704c8d9fe16526c8d32184e2508541c8e3a287

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.X86.23DE0B443215831A3256\payload.vsix

MD5 3e95b6f1145b122f306cb15007144ce6
SHA1 b2a2e0ca981a1a7032dff9f3a7fbe625aacafec8
SHA256 d6710ab44c4c1744562a9bbc8debdf1bfc8aa724ceb2e28d739a66d69ac9b3da
SHA512 7bbf09f0a703e484dbea6dd5edf07763b978b64b3b935a828f7790fb52399c016aae66568828b1c877ed3aed27cfb5335983a0124d2dc9bfad7cf1f9fe2a752d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.x86.v143.8127292A196FC4272387\payload.vsix

MD5 4756f35ff1122a032d73dc148b027a98
SHA1 1f7ab6a75c1f22fac4e6402040d16b152109fba0
SHA256 485ce842aa1f46e25a66816a5e4fcb8d8ef1debfe51134d25c8e1a358d36014a
SHA512 3eb02c8325770ea4ed1c27ad7ae515f6cd8e5c695c460ae80473b9aac1d54c4c5a5d8444e175deb36aef3140fb313da7787f19929a5aff15bc3d2b6167593d44

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.VC.MSBuild.v170.ARM,version=17.10.34804.30,productarch=neutral\payload.vsix

MD5 df4352b3d59cb8b5900a9d36b85dcf92
SHA1 6cb36c81b74d0709b4d8586f6238966f4fffae43
SHA256 8cd7b4ccdc5a73179734f87aaa227b09119240ab91494bec39f35572463033ed
SHA512 e5a32faff174c86c6440ba55fd09ea166a1c5bdbe5eb0a167b5f42ab5d9564d4637a32e30819ac980669780eef66ac4c8068ac80815b5c9e7bd54e1f134c7d94

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.ARM.v143.78DC12099C35934EF6BF\payload.vsix

MD5 9a1c3c67cd0d8df3687dc9150c3b2c51
SHA1 4f81bc0d2e4e84a23681a617190de15762a9df03
SHA256 131cf4d198a9f2bf63c317eea3255d2b97f50865fd251c460fbc5d2e9dcc4eca
SHA512 0dda595adbee8648c72cc69d7d5f623a7d530380bd51b224286392792e02077aeecc54f4d66c3b0e94b241560daa4574ee1c82c43b0728cfd0d48fe486d6877e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Debugger.AEA593FA70A47A8E1E86\payload.vsix

MD5 5461186c865b7113f07d91d5f09dc5f6
SHA1 a9de48254b702610504b44bd4eccaffd3df12a7e
SHA256 54b470368315a2a0aacb91228213e91412c3094f16ab505d7bb4a247ac68e706
SHA512 f6e6934af3af4d8545159f187638e4a99719e1f67b9da49f09b65de26d57e215e9f94e5dc4a79ede2488fed8edc1fe4633da3a3713edfd0dc04a3870ee43b8df

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.X64.v143.A6D0E9E188FB4042758F\payload.vsix

MD5 4822d00a4c6251d18f091d1d7dd2f326
SHA1 9447f243ee2897f9ba576fe60be055e53a8b985d
SHA256 e3717b7ce841d4fb8fe98f6f20eb47a4bb03e12c5908ae850f57557ad644dee2
SHA512 89829a84c6b3382db4b251e9769cba16856d3459e4501d01f4c8963a23114b4770d68c77771e093fd5f0223b089ddf2f7b508c48984373fd4e88c9cd35dc6e0f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.MSBuild.v170.X64.2EC272F6CE0A9CA52892\payload.vsix

MD5 a01d56ac898c9db1a81ff79b8c21d765
SHA1 e58f46ffd65c511cdc0fe3bd2b8d6ea66240b5f7
SHA256 ef2e8fc6bfb55f4d7456b112ee8659145dfb6fe13d2af5af293deffdf139dfd2
SHA512 c9c31b53cb16654273ed23ac4f94c6b343b9ff5099699bb7c8ba991d7baf5218315baff0c48771866b910ab4c01ad90e20e7a67a66cdb68029f13b022e2a4fd3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.DiagnosticsHub.Client.2EA53DE75F759E05D0EE\payload.vsix

MD5 1f13b1d67ccd101ba47b6f60ec21774a
SHA1 09541af829456e0ee30f1e8c30384c9ccf36aa73
SHA256 da27d0403742c78422da1c0ec6e6b06137b4462c28e7ff7a527f57c562a5c12b
SHA512 3a4e1c7bea0687be5db2352a3bfcd3b027e0e7c27d62487a4d30a0229067c4929f90621c79c77d4abb9a164ca7c80c225c6d263eccae850889fbca8fb48d8db9

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.DiagnosticsHub.Client.109F7F7DF629A0BC3E18\payload.vsix

MD5 3e44be2708c363946791071c9dd836ea
SHA1 bf15ca671e0519c53b5d77e7f6027f8bea91a9ca
SHA256 ad09cd4e92009539cdf42e0c5404989e152360c275ec0c6e1d9991d1f54cbf70
SHA512 011ae02ae8a760a5415c1721d14429e6cd5430d0beaf4229d617447255fced9a606f705c0c82ce2caa271c9360b229db1a338c13821380df3f57ea4e3cbbda6c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Package.DiagHub.Client.AEA8BCCCDD8224F5DF5E\payload.vsix

MD5 fa2c53e0a6725033a6134c31c59451af
SHA1 d4677107dfb3fbe39504c95f133a4725387b0b39
SHA256 333c15eff98216bdec7e9893d5e7861b9852a0c6bd742e91055113ec317fcda3
SHA512 fc712dca2c4f1fc075c63603ec466bf495b0aa025a89c82849a9cb0eb19a64ca9a6aabe23b0cc98cc928c5a5b337e90b7cf329eb7f56c715d9474feff525f6d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\sessionstore-backups\recovery.baklz4

MD5 b4dd39879e5ac232b8faa3beb506667c
SHA1 20d6725a4367c61f1d1981c96c8a331de74068e9
SHA256 32089d23a1cb9f6847c93321e3651333e84c139233e7dc3e5ccb1f9c526be055
SHA512 cac35843fa16f30eff4f5478393afdf4d7782bef81a5280876ee2cd5c235eb583a0df6cea0ed699de3ee3e68a3d6155c25d011a5b574c47433e7e369cb63196d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Resources.7E07D0469C64EBF90B9D\payload.vsix

MD5 077a68f77afa7e25b1ef0f88ad78d20f
SHA1 7dde5f1629e3cc55d31117e6e043fece2a7af409
SHA256 58351a0e7304319a72e1312d2edb6cd3b38806b0bd761c9c2a7d2d933431cba9
SHA512 2682915e82d70921a8ade6a5a59c747c09f55464ff94cb574a7615f7bd8b4047b0d273f76c69ceeaa9c8f4565cd58888e2c2682ca07fa251a6e97f6e58874075

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Resources.A92E255B3EA9008493E6\payload.vsix

MD5 6a89ba8148e2ad0832bf6d22eb7035fa
SHA1 8dad681b5a9eb73da6809ade2ea5c9f83bdd5fdc
SHA256 49721361c888b24bec46ba86629ffb64f9b9f6c6b8655b88fc0982a62a480416
SHA512 7ea871f8922d861e934c4d690ce620c173a51d5f2ba69dee0ba85379ed3daf5c43bf4517dabaccdca2e747a3e36429a17c90720d34842c6055faee08d34231e6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Cache.Service.9AD52F32C1132A2A6BB2\Microsoft.VisualStudio.Cache.Service.vsix

MD5 6b426a5eee0e24da735060562f443f50
SHA1 f2cf964dc5db46f5383012a07fc05cb4c42e87a1
SHA256 1cda52f375d5b803c47f0f57d832b580fa14a484bd6b735cc1349b0be707f58f
SHA512 d5d5728c9b290d0d3a8423a6845823f40b19a0498760778848a910bd9d6a16fb6c8d1e67865e17bc872064a98c697d02debc6b9df07a1ffdb5103e8c767a5b98

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.IntelliTrace.DiagnosticsHub.2A4C39C6CD5CA778FD0E\payload.vsix

MD5 4000dad7e15d2baaed1ad923726fc38d
SHA1 38f1c2821c714362dab5f9315e7f02985d88db04
SHA256 2d7203758bea27380ffed259925a69c514b25717e4defba25c1c4aa248b92819
SHA512 c2ea95058067662907bf0eb7458bcc9eb03598c93032aefb3e4b386ed3f04d55d3916a7ed8df2835063d2b75b50a4d600cdf7d76f3b6d93da34f90b5130ea5a8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.PerfLib.390F7C6191348812007A\payload.vsix

MD5 2512250e1b079971820bb681bbf033e3
SHA1 c0abc7825a48f89614f9acd1156407cdfd7a8f5f
SHA256 ee3e0bc89ae539bdb43cfc266d34a408e0dae6836af2f5f12d3721c663d9f9f1
SHA512 2c0cba1ac56aa0c81f03a1cad2a8778649aa5615df7c97fe94bc228ef7900a5babe8a87807004549afa140385ad51094c908c861a1e144a03584fbda763e17b8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.AzureSDK.DDAD30A76B327DFBB761\payload.vsix

MD5 1e80da18ed1a6c327bfe5d4614a57708
SHA1 10a962587159f5bf21ca3057095354bc167f3f0a
SHA256 5f19530b66e1a43769b1dec0c8448a3f656304c559d9ea8741a5772f8a4ab678
SHA512 1bb1531f23f1759e969997605de9089191061562f742660b66ddd9c9051619b3c8b3a24756da3c544f8ae887cfaf201c996030955948a3342241e320cd12e789

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.2E0DE1CFE8F59471FB52\payload.vsix

MD5 dc7810dc1c8ddf81f9fcfc383ab5243c
SHA1 5472a70d1c4e4322c54d4d478c311d83ab73c3a6
SHA256 42c3f1997d4a65a9edc048c3b04c5497cabb33a18d0798e038ea9a5f72868352
SHA512 3beca1398311da23bfe57292b1ffa0436434d3ac1744e90875dd42b568110dd019a692e99c337414caa58a2d1e25910cc2def49d14f60fd3328779ef9619feee

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.Resources.18A4B03DFFD67CF59930\payload.vsix

MD5 37c1c57fc993d33e0dbbd676d38d0df2
SHA1 4ffbf1ef58bb8b8388691fe9415bc0ddedeb078d
SHA256 08b6f1a9e9e7560768565e1acaa2d799d45e3522833991e5f8cf59ab3ae1b1b1
SHA512 b3df14d438b6d1a6074a8ac8f9c1bf51c5bf1ae5d5d569ab92d56deff1fd8c1b14235252d621458ba5669f43c6aec81ae29042b0255b125ed3fe422fc088504f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.Resources.A5AA736128AABB7789FC\payload.vsix

MD5 b23d565ae8bc0db08cd787d8c21bd8ec
SHA1 cdf7df5a0158fb8a92282bc1a9f44dd61dff34a3
SHA256 11b7463d650db9d3b8a903576f98bd2c2833ad67f196e57ddbf01e10fc6af15d
SHA512 fb214ebb08b3076b1ea446cc473bf16481d1c48c3d97c552c6e0888ee79a1f592ad3af0f0a5ae2e3d6ccbb529ae04b3ec038147200cbac1761a42e1146d69ca6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Remote.Resources.C424DA54BD4438712CBA\payload.vsix

MD5 1b6d052b2068b65ee88211a94bd8d711
SHA1 dae4812146718648622a6c2e061a0cf9fc202cbc
SHA256 c2489bfa694dd73572506589c920a682f9c653b01dcb39ac52f8aa2adff0e922
SHA512 8207bbb4a26251bb71a73dca5fc86efe54ba0c0fc07c060e002acafa896d8cb2c8ff8abe37ced70b2bcfb2300a99db20bccb99643bdbab1459f99526c12071a5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Editors.C9B164B092E6069C4B2B\VisualStudioEditorsSetup.vsix

MD5 5c903ae392f30f7eda3daf250ca1e40a
SHA1 2aac061bb981a4a08849117a32135aab60c204d2
SHA256 265c94d60fd65f6b7ea19c2a43a04c9978c86f6300e8ff3f4ced55f5db0ef77e
SHA512 33bbef764ce66ddd24e0060aa3e7949ef019c55969c328266a07aa708442ba863461d3d383d6a7187f092cb19bf78b56c36cb8f626a30135c5f9258507826fda

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Net.8.0.Runtime.AE499B557A2AA4D47B69\aspnetcore-runtime-x64.zip

MD5 8b3643cb81abf0b33ded10eb60e2639c
SHA1 9436241b6bdf09135a66c41bfbe0210057f1f3e2
SHA256 a99a40e426c8b036b788b666b08f77b5631d9c0658abe9cd01fe8e35a94e6465
SHA512 e745cd0eb11ff4f5dbfcea2966542dbfec57cb0d6025e1fd0a8f0d500c1246d9636f780b72586a55a3c8bac657a07443e4073eb9503b9f4eefa7aab336b6000c

memory/6560-5892-0x0000021657B20000-0x0000021657B32000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Remote.Resources.063D60006C9CA921710F\payload.vsix

MD5 dc74d26ce5fb96244262d375ca4b97b4
SHA1 8d7056b46251f71039dd1bac1644132a01308bcf
SHA256 c2ae014d7030bf79668b771aca5a9c7dc488e180973c90804679ee9c8dcf1188
SHA512 b95f449eef1f1c3fbfe5d09d2515fd9e712534882e4c8ff6db98d2dfde200b7824af6dce99463abd85edb5009f1d5a8214983d9d0bfba3620e16d83e9d00e853

C:\Program Files\Microsoft Visual Studio\2022\Community\dotnet\net8.0\runtime\shared\Microsoft.NETCore.App\8.0.7\mscordaccore_amd64_amd64_8.0.724.31311.dll

MD5 55e26b8425298445dc90243c9856ea83
SHA1 c41e324a5a196a212670faaa7ae446d0159d0bac
SHA256 f2be0d8160a3967d5b9c6934289999d666069c2265c2ce28889497cd75ee8c7d
SHA512 a9a0abf1fbc32574a8504aae8f7ec792c7519e52dc0ceba4ef320b0632f3074178474054fcc5b0c987a83dc926e99ede0ea41c155f71b9c71348367d780f22ca

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Remote.B7D5F4603E7F0E54BDA5\payload.vsix

MD5 089fc57eb1edee101e56ff86f3eefddb
SHA1 d53842a4c102d6f060737fc6df63f3d6f9f5e1b0
SHA256 2f480c230243da8c7b2824fa23405f0f65be6c71d01210f6fa6247b221424b3e
SHA512 388454d8c57511c61dfb8e717bb95bbe121907a86911d16b2255db7cadec580b75025db1590e5f2b90171f776afde32fabafc40c96ecc1180c36b137b795d822

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.7D43AB4F0C1FB0C6EA8A\payload.vsix

MD5 4938ca6fd827c9948fd4b29962440b3c
SHA1 3e530b29729284f3ea156aeaa02b2c3afce48eac
SHA256 8a01cf5a84c94aa5c3de9328988373f27470a7b193c2759c889897b052b60ba6
SHA512 8101afa3b94dc786d543d0af42a14d0c3885e60d2708d89ee246b7c9469018efbb62d168521ddb2aa4b19ef418a09baf075bbf71d0027b3b357d67e7f454b904

C:\Config.Msi\e5bba45.rbs

MD5 da5d17d4cce873ca916553497d85aad3
SHA1 5eb47e9b65df2cc3ff6cd2325dbbe432d89a181c
SHA256 48acb18c7b98d4cda32e01c10f439ed297cd6ae5e30b8d271d1d1c3a701c698c
SHA512 ee968d5dae7b127afc0725fe55ad72488b2e8adaca8add996dde24168fbbb7b894d9e5e6293eb895a3e5cb15fa63ec37b22d8c9f5bd07cfa21ee70a42357a7a3

C:\Config.Msi\e5bba4a.rbs

MD5 79887bc12b7561e094c03ab8e304d510
SHA1 24191146582d4e1e8385a11ccbc67c8458b11ca1
SHA256 1c6028a4919154f4ec3407289c31db2439e8439cc88ec66d3b0bb07fae357263
SHA512 afaa6bb7229cdcf42b9e1f279e931b5638880575521fe6ae44315ebe22a4eae8b412c960b38d1f865ab179eef3e90485bbdd7cdb7e8d6bdf68e3d0ac6ae34bf9

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.Identity.Client.Extensions.Msal.dll

MD5 352ee196cd65c98b729065aaf6f5c9e3
SHA1 5da4c568740c6c91e02ef0e9e1dac38c52ae33c1
SHA256 6ceaa8b598e7985d5637ab1659566dff9c1fda37edf0f044759b56444f739018
SHA512 db12aec8d7e230994e240c7b7fedc5420d3415ff199cc6279b8ae684e81681e139d562d9de39e4eaee1879fbe7a83eef5204e7e17ad475257853519292e107b4

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Debugger.TargetComposition.Remote,version=17.10.34824.239,chip=x86,productarch=neutral\payload.vsix

MD5 94a045ba236151b8b356bb52f9a9d082
SHA1 bb64ffeb0732df75ceb7c9cf4515e33bf8f1a600
SHA256 806e16bda2701cedc56a1b261c4bc4213edaba9b6e7161f4862f69c027f69d60
SHA512 f4fa5cfe19bd5fe458ab16d54bc70eb744108db2f735b00ec9582e7883d83b6257703d53347687434e0c10dd9e041ed4140d334a82583ea8daaf07f9d663236c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\microsoft.visualstudio.setup.nuget.config

MD5 0e10866130c2714c060fddd932362b24
SHA1 0907cc203e315969d5173681623915ec80a5e4a2
SHA256 699f9b31b81270d2432f04eaaf72e1e3c2b68b8dd55fb463391f177925ca958b
SHA512 9c62e9a5714afb139a07e916a0b967b281e71b91662b66edecf0f287f9f7ae71157077305c5048332651f920c4eb63863794c6a9f656baa60c3f44c4ddfeb8a9

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\NuGet.Packaging.Extraction.dll

MD5 f3b8b469ed25f0655c8e2fd074a6cf83
SHA1 1e36331e383c2fecb896649aa867fe93301ee6a1
SHA256 1751c9875931e6b9092c75da7e2daf15c9f8f96b1bdab9b8292b57702797aedb
SHA512 9b29f8b1c3b9edeefb39552a9699270de76167aa5b5d38c2e116bf624e1f9fa12c0767cd44f20a083d91e172084c4dcc1e1d818b475e4b475207acd26b881223

C:\Program Files\Microsoft Visual Studio\2022\Community\Xml\Schemas\DotNetConfig471.xsd

MD5 05dc64fb0f4ba4ba5bba0937d455324f
SHA1 871a6db8758fe00764bed77a906f31221dd74949
SHA256 15020da358a146c10dc2c420a3277648e27bae9b8398ebc9c910c8d24aaa4601
SHA512 932bd9a0d02a28f58cfba3372b71b4110b3c646e8425f7af94c2681af6b0aae91b9019e53870aa510261d3cbdc8c363b1ff89ec2a708c995e3eb2b3735c4196f

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\CertificateInformation.dat

MD5 28c3b82727a5ea653224ea32dc895587
SHA1 22472322931c5aa6c42eb9ef3b058e4c4c156a2c
SHA256 60586cb008247dd45e7cee57eb9515beb54c68308386cd1410f1834350ea0621
SHA512 9c95bd0b766f3764b102d44cc1a7bfda0cf9ada39560038f132e3fbfd45054a0b4ed9df0ff3f55c0a4fed80fe15bbf2b5a477f87e0d8affa8053ce8f20dec2a1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\CallHierarchy\System.Text.Encodings.Web.dll

MD5 fa9d0d182c63c49a4c567f7c1652b6e6
SHA1 55ddfbe80762c02f9a9c65809f9ec3ef8f7f2ccc
SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
SHA512 58f468c982ab66930ff37efb5a941db116e8c1aed66ebc23720a7b18f71bebe1e929bea76680294edb25f430c23d520b8a87e3a22064c5993d0396819a21cbe7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.TargetComposition.Remote.BF49B3F68724973B69BC\payload.vsix

MD5 5352f69cafdc9b7fea5f4c6a39d2b109
SHA1 a23fd5401962bf5975c0e9abee5d4002bfba02f7
SHA256 15934f49e2b03a525d5ed525969ddb60b24936f0de3e8e45cf704507070a649d
SHA512 0f3aad5d4eed14d2f0f1c65cab51f206232521dcd7b45602935d632fb1517ac1fc976e542764d8e03a84fe55b6d3ceb2dfb073a178030026ce7843daa9197273

C:\ProgramData\Microsoft\VisualStudio\Packages\_Instances\0f6f8ff4\state.packages.json.temp

MD5 20381bf4b0fd1b2408f1cb7a15445801
SHA1 915f2112d12d247b5b0de6ba8edfdaf6315bbef2
SHA256 4acc57cea643999f10e7cece7c2442a5215e25ec37780873d3376c479931dccd
SHA512 9ce0ac2bb59ff3f85d49a4e8471c3942c502b880a438892d1417a24b2797907abac3b5de9cfb29c854ab1105507d8443787d87ac0a154f0f058a16044173d5f5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.TargetComposition.7C3E029E3787BED67E05\payload.vsix

MD5 326d485371993d10392dc77709de64f2
SHA1 af64ead439d947f9674223434b264812a0c1b50d
SHA256 ac86eecfcb0e6c1d140fd8039ce9d3e43ed1b5db2bf17bff39ff966f913ad003
SHA512 47c75a87add165052abec2584f138ff436195e4219dd78fd7e1bc6f2ff4d1c15b7d7b55bf666cb73fa2e689d8f10c6468b400b08fd3f10b281064556607d7e70

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Managed.Resources.A3E9976C315095935015\payload.vsix

MD5 a5024376747e47d9600cf6254fae13a5
SHA1 6c2db49d7a889af29e202c7749f533aa37817f1a
SHA256 c2855b63e6042e943ab1caff652c3d031d1fe79882de1c4c15777e3648665508
SHA512 a01e508a43973e9ae5ca4035b36888603125241831cfe28af9a8fa6fe5c9180a538055ffb8d57ebafdd3070427acab3efda3269f4aff0b2063b0d428b5c92e66

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Managed.Resources.2AB730C20CABA2061309\payload.vsix

MD5 750d5987198141ee856a1c8755fa2542
SHA1 d258f2898008445d4f7c64dfc548ac28aaf9334c
SHA256 079701c3135d1ec1d459de5c580cd83aaa1dbb29154512494a9651ccf5dc5dab
SHA512 6919e28adb409b63844d6119a1e71f1868a3ee03d39c5c6927f4dda8274509446102e606d57395e8467c19ca01ca75232b70917108a6b8e5eae68a1c0026d422

memory/4336-10129-0x000001FDD1A50000-0x000001FDD1A88000-memory.dmp

memory/4336-10130-0x000001FDEDB10000-0x000001FDEDB5A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Managed.76CB632AC619DF286DC9\payload.vsix

MD5 85f5459d8df4112137b65686299cd11e
SHA1 6a217d58995605b85c002cbfa1cb4636c1daa8f3
SHA256 14e7e28463fb6d2ba3680157a8f1bab83eb64529e9c5338f5b65d99959a7dfa3
SHA512 be8df8e561e879505c4dccb318033f511b332aee5b35c7b9696bc879541954b77c49a1bf47cd31402b57ced0cd42f5a73c35e9f9bf85af3be4f2fc6fbbd5ab5c

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ewzuac34.fmn.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.4EA39A5F560A3D202443\payload.vsix

MD5 9011deeb5ca12fceeadd0a6452b56188
SHA1 170c012ba5d1328062f79f060d0dd4d1e755ee2c
SHA256 68d4c92637a52daf21192acf02bcba21cbc78b6b4d4b780b306bb729f8603b62
SHA512 180ff8bc6c823af774a99748911a55689cce3fa1f68729e799a0699466dca6c0ab50d1f0e8d43ed870abb5687941a4940f34a7cd83f8eb14b2c2d6cbff0d1791

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Concord.Remote.B52F501171E6272F1DAE\payload.vsix

MD5 4c1c2d6e25bf119995dfe2a85049f59a
SHA1 c6d16732965700e3a15f541d2d8306c878394976
SHA256 c3489e8670a9d28a879f5771871f8153695f137727062bf852e8d6575e0db7b8
SHA512 4990f1e2f1baa5d7ea7f925502371c2fbf653c7bf2dc46a599a903827277f79a5d24ebf7cd726df5619e78bfbbfdb1372ae41051c35474212c93cc3bd99c32e0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Roslyn.VisualStudio.Setup.ServiceHub.Desktop.Config.1AF43F7A743E93C6025D\Roslyn.VisualStudio.Setup.ServiceHub.Desktop.Config.vsix

MD5 248aee97d11362db5f7e17d089f08eb9
SHA1 7bcd1c519a2c84326f179cc1c4a34bef4f721e41
SHA256 7f61aaae8af35ac17bde565440686be4dbdfe7f726a8c7ea7bac62f71c445a36
SHA512 0d0cbf11c699676bf8bc4e6bd87199723d5e5c5c7f68e04ff92be0eea1a89401b44cd77057085ebf57e8054eae5ff0f69675e42bb8445f43abb02a19fae3c1f5

memory/4336-10167-0x000001FDEDCE0000-0x000001FDEDD06000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.CodeAnalysis.ExpressionEvaluator.409A21FA4E02D70068D4\ExpressionEvaluatorPackage.vsix

MD5 6ebb588e6e6738fdd95a42e251121f6a
SHA1 13234c301d89c55db323ada1a2d0b5caa5f3a4aa
SHA256 9a62e05446904fc630edff8abc3bf38d258b03f85eb1e6225f6478190032c628
SHA512 a56a523f429c70964d6bb20e8c99b613cfab721dd71dc872ed59f0d1bb68dc1db3a2076f5b186187ea97a00c6cbb573f762ddfbfdb39d30f0986c000aadb7e2b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiaSymReader.F152882D2E87F8981C03\payload.vsix

MD5 e9da6ae83871495cec51f77c714cf392
SHA1 4791a34b467d98daf88ef9f832b4b62f26567474
SHA256 7574bc4ae2f95c2512ad8f255ae517387e038a0aaba9c5bdf830152552081513
SHA512 9a11f6386376fb7b036ea98f67c0c8e428a214d5661590ba2a369002552b85ceb9d2a698cda37ca2e6c6d56719d125db539aa5248f866a680ba82bc41d4a93f2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Managed.73CD8E2BCA011D9F03AC\payload.vsix

MD5 2162f62a9a10bca1130d06ebba379015
SHA1 f80eb4247c4c51c87e12e4d78c1e99d18e16c507
SHA256 54c8764baf995da29085ae9e335cb6343b7529affeff710b956f486242a3e1c3
SHA512 971aa4096ff43c9ca73455c4d5aefd3d12d91fb9aaf42dc14655465acd36eb4ceb26162c6c9f57efb2e337323eecf8e86cd284df5aec3c741073882bb5936fab

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Parallel.Resources.79E8560CB0D0DFB3654E\payload.vsix

MD5 678cfd25046f3006c9499322c1a094fa
SHA1 4e659e04336328ff6909449d8cc6d198f25e72a6
SHA256 03fb97f75bc12b2380acf962bffadfde6da7ad9eeedfa067c9339b6925e8473c
SHA512 26ede666459048de6c057efc72481870364401b18af279e7e59c01f84a0989d60973a74f7dde9de36a1436f48d7670e241aad66701c0c4c60ad2b0b2c06e591b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Parallel.E0602C12088A6C5A5970\payload.vsix

MD5 40b722bee59f4884d4f64f57a4e2fd66
SHA1 1bb374593fa6da118568b25e7c3b8d42115ed8a3
SHA256 246f436da6d6698e0790a00f57bcca18cfdbf320a3c9239d94ad13e5f4049e21
SHA512 3ec2682b5c9d8fb19289363ccc734eeb8f6090493aca1b5566f83c6fa972fe04576e59c0dc45e68f763f83079f7edd63bb782d1ed6f8955c8b3f939762bd52e2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.CollectionAgents.767B17A0D676D31B47D4\payload.vsix

MD5 e82f2da6a5d6987cb72586b505c8317a
SHA1 f8df6b59b9b3d613b47ce999478afd7f711c472b
SHA256 5ebb80f1653cc6707705e3b1f54e2546ea4c1608bda739697ff4fe4eae0cad9d
SHA512 d0b201289717dde02e90d9d426a5d105b8c2a2516365867813f65f5f5c24cc2fdfc956009bf57cf4014de8a5fb7d59d41c0a63eb3b74c1fb9a24af40b474b6b5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.WebTools.DotNet.Core.ItemTemplates.17DED7B1826952B957EA\Microsoft.WebTools.DotNet.Core.ItemTemplates.vsix

MD5 360b3d058459de30ef5ec4b111de9975
SHA1 2a379cc84a3d58d42c74041254a0c4a70583e75f
SHA256 f1c305ce01de2b9e9ee3d3cc1b81a219b1e4dafaf74f6f13b4edcfafbda6655b
SHA512 555c45cace35bdfab41518e4441d65475b090d21ca5a7b271f00806159fe7698eebc8742220a41615cff013e2ba6b4cb97d3aa24f987560ebc8ddb61d7e99f04

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Remote.EBAE7E23F8FB3B93299F\payload.vsix

MD5 7ab31fee5edf4cf610076562bf3c55e4
SHA1 322b37d870c6cc151464f28f01c3c442e49056ba
SHA256 82b0b065ad91d71bdc35ecf0429a7645e9eb64cbcef9b0d60cf8e816bb9f3e60
SHA512 31105273afc0450d2f7f9be194962e0413cb8402a1e93f4ce06834b86953480a68d722346b49a40bffeb15064c297f144f9abfdf64a4a1d8ec0441af396b91d7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.WebTools.Shared.01E70423C3681213846A\Microsoft.WebTools.Shared.vsix

MD5 4c2efc6ff7e7ee76ff00cc4b9239cf19
SHA1 fbd922785f1ad7b259c838ca0bf5098067e2adf1
SHA256 d42e9ec2515aea08112563e880020ab3901701f5205d14f2799aa4526e4b689f
SHA512 70529f597e6a8b06cf36f5317ee305982b7112e5e37b8a5a270273798ee292c7bb73649938e644f35ff7168e19e1289e5508b340a9376f7f7a14ffc4c98dbdff

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.AzureAttach.5FB35AA9BDAEF67C857A\payload.vsix

MD5 1de062cbf31c4ec73035ed7ef66e8376
SHA1 3dcfb8bd64ae750ae2133930a47a25fe0f94f61a
SHA256 4881d36a2bfd420c110f5e9da1c175ba3c8c920b10c484d7e3b550dcc02f9573
SHA512 6a7464fa0ccbad5d51b4b3d7a21c016573fa2f05481197d592d8ad37251446900238921f17bd4714a0cfc668f49f00cf1fb9e5a4bb0e6e8fdd8834d41fe8d4c5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.227D0796B1A0A6C6F485\Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.vsix

MD5 95816b640ca7bd4ed2ad8a634bf15112
SHA1 fe2815e851abde59017bfb5167bac01eb302f1df
SHA256 c01339b9057fcf061d72ebb9fe1459af716632c8a2c2fe4cd2be0aef382f6a29
SHA512 d7d64a01c5cb5c03479a8c896264a99b27cab7b4533ec059b7ceebddbbb231a5a9a56df18751c8ea1f76f8b26093ceefd085050b2bc9052a730e8f16f3c1e4cd

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Web.Azure.Common.D3DBA18C047E73E71DD8\Microsoft.VisualStudio.Web.Azure.Common.vsix

MD5 03c8ddaa62c023a631283761bc5df1f1
SHA1 7efed7e304ff9f5c9c073e3748318f9e73a2258c
SHA256 d18f4b016617ef93576d67d9fd7973173ceab23fbef6f75645e35a07a9d17fad
SHA512 13941c6fd09ef9e63647b69eda4f8eb3e64765eeeaf61e5c3e945a51c8454c66b628f50fa8e59211e7b482193d27ab013727759a2f1209bfaddd6a66abbacfed

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.BrokeredServices.CC42C58875715988F900\Microsoft.VisualStudio.Debugger.BrokeredServices.vsix

MD5 96bf844078c0c2916780681c4fe475d7
SHA1 a3588b0ff3784079216e8b59c06ec3f3dea6ad1d
SHA256 75f2e2407131c07fe77e8c03f25b7d34fbd883245dde5bf6f11d70d6c4166031
SHA512 28386800a5e481dd0928e67fbc01ca0c4cbfcf0989ff8e986c2656a233761047fbec661d37a87292effa16f1b583eaaea1dd9caf6c1fa94bf62a9ccd477eec42

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.Remote.Resources.6A95E50DF331E83AFE2D\payload.vsix

MD5 e233ef85da8b4784982fba495dbac184
SHA1 5c4d57fbb458bbc4a1d38775386f4511b0afb52b
SHA256 395daae3c90a41929ef64de6b3efc287061988cf00c520968557c6a3f93fcf13
SHA512 d35447d1d1869f84bf82abbd26c36ab42e57b008c693f241d922c94d7bb7cbf873e7056141ebb54e7b2726164e7c07148c84ffcfc1c6951b0e4ba2387be72984

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.Remote.Resources.FB99D839EBC2C3647D25\payload.vsix

MD5 9d977900424968bb4e3fa0d651488e27
SHA1 88382e66d67da464280062d186bce1b66d77b89a
SHA256 07991ee2fbcb4c91aac4958f4c2cc3004b0813f39eec54eaee2452048ad8a702
SHA512 65d3b78bc96fcf98f346784e2fc9df016b5f892c96552a2b2eb50cb1c7e12bc5d6a1f9aa3b6e0edae480ce016a980cf2677bbf033f87e026cd758220cc7e9a8a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.Remote.8BA8CD3F922318187479\payload.vsix

MD5 9e0dac6aa53876f1a2b06b16548d6f73
SHA1 bb5feab5fb8eabdae64927adcd3df706e2470934
SHA256 68373db32965893d5f7fb24489c864648a774b2c6f4b42f08b75f888bf8b74c0
SHA512 f91d764ab772f4b2b2e8401da0f8b05967e2b70849e44a9020d8b08976390ac2816122dedefe462c1479724137e34653847df4774d90ca425c4d8e55256c6878

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.Remote.408A12E10A528CBCE2C3\payload.vsix

MD5 3418907a6c7255141dd438d6182c85a3
SHA1 43e8187603b9edb53f988590d58df8bfcf14df18
SHA256 567b3ce33fad5a0c46d89314b71964b9121266ab310806b1277f278aa1735aad
SHA512 5156435a5127db6eb8806cef7ff897749f3ac59ffacb243c1889803794adde65c56016e1d66e0e3737859c8403d5aff97f5d7d6efa59d7b222a9c5fa68b929c5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.Resources.E4DFD865D7ADF985CF0A\payload.vsix

MD5 23c623a1755c46ab6b7b7afd2338ad2c
SHA1 fb6d0a6e7a0fa9d28caffe57d1758fa87475f23c
SHA256 29378b6a8719835ad99f511ec5b693525254449fa5c0fde49712d81ca7039cca
SHA512 1be052def87b47153f96f1b691a2ae71bacf4a47910d046deb2c06b1e136069feba4cd0a07d2028ff0632c6c0912eedc6ecd550c8f6b85e27ffc76ef86f6521d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Debugger.Script.2905A233E0FDFBA796F0\payload.vsix

MD5 5cffd5dcc6e6c61c5a6b7e915fe8ffa3
SHA1 806c9f0a93f42a988a365c2d177bf2d2ff138fa8
SHA256 8834453f955ab8123370eda29a533453109dfb44ef2baac04c33f32354159570
SHA512 bae2fe423140db974e80d46ea0576b77037cdb39d08e393aaa6cda97148be9f2ee0742f606779a8e8dca90b0d2c36c93c38c0bd35e95bafc432835ab7671839a

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VS.VC.vcvars.x64.Shortcuts,version=17.10.34803.215,language=en-US,productarch=neutral\payload.vsix

MD5 dbb407a8f3f8612cfe49eb26defb20d0
SHA1 b2ff6988335883c73d593b9e14f8e9dbd147238e
SHA256 fa42c6a54f8f796b504acfbde08024b9a28a63124eaf8acf38a26fd53421ff46
SHA512 25e13b2df356f2fc49faf310d4b1ec3c126ce22b0bcdcda111364686bb548547b0b2ffbae97b22b7a9de34d9b3b1a43a74fa8b1866b74989334a68890302c694

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VS.VC.vcvars.x86.Shortcuts.E47ACA2AA6CEF2FB050D\payload.vsix

MD5 66596cefc3135122d0b83f791c595275
SHA1 365601e2fd1568e3754acefadab8d3612201216a
SHA256 add7b9fd7364e3a552464f06990f68386394688bdf8e565778f8d72085a38e17
SHA512 5209c35ab67be15f02ac7356e3877dee47dea857691d4cb92b1733d4ac05c85210a7c09feee001c03f0819c9fb8991f39029b4b4f4ae0ff3fabf01cd16a227fe

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.vcvars.462BCC7D9C94AAF3684F\payload.vsix

MD5 b8adce1e6f61936b68c971b7b602020a
SHA1 a59cd13dc788dabb0d5c019759ef1742ec9b36ed
SHA256 ab73c8fc863637d69460a0a2ed226ec333a73c3ec7d1e641d57885152a7ed090
SHA512 0cff033fe5bec7783bd69cec950d53908c0d40fdce930729dce3db092399c9051a25333170c66fe8b6622e8f078ba28b6f0fa5c0240191c756f52cc82c87891a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.x64.6DE8147DA3D9E7D63056\payload.vsix

MD5 e2344b77cb35aa5d044565a1b1191f37
SHA1 8aab7be82ca81ef2c1e61ebbbe67fc0627ca5905
SHA256 f9720f36bba0c418744948e8ff266fc3b0adcbb39aca6c278d935de869c57442
SHA512 4fd493a0d8b0b945338d86c1f314a41871fbabc47461601f0291e6267330b261d0b34861a5e3b88a9e02dfa821cf64626ea6de6f3b74620d9ae6b8ce3a1ec5a7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Connected.Resources.3D234B8E181DD6A1C9A3\payload.vsix

MD5 d4d9e0664337f304ecc30300ba38ff02
SHA1 dcc833ea2fb0ea8a28d448db407245c31bffeed5
SHA256 89ac0c7695ec3249d94afb2b6bd050f196200e5752a5b3152520f6263801c8ad
SHA512 f71f6f58f4fffe0e8c12e57fb75e01fd66192c3579283e767f7b8e79160a7c335e06ff121bf2911187ddadb937675a8d3dee73d20cf6e158f7307d14bbf10796

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Connected.Auto.Resources.FF49FFFE60E27C4AA2BE\Microsoft.VisualStudio.Connected.Auto.vsix

MD5 a5319603ca520433f830d14551c497cd
SHA1 4d085b78b3ac1dde846e1edaed1bcedd3a7ac3cf
SHA256 9096f5509632995838474ece1ccb3f71cd3a2ab6c61f8d6b8910124b34b2c809
SHA512 92323f52a2c8f2f9c4139ee32787ac4703ffd4c170da6f697e7d52d44942cee846902a00e3fc95f75eb5ed457c1fab5e0c84c5e5b03fdbfedecf50b553f824c0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Connected.Auto.6C001A108DED4D9F73CA\Microsoft.VisualStudio.Connected.Auto.vsix

MD5 db8b2cbc2cd148eef6fbcd3b4637e546
SHA1 96da5d4929cd5ea84d927773b612538f49fff9c0
SHA256 e12d49625b89f56589b8640341449a78825f6c52faf46bcd002d46e343b3e145
SHA512 88011e1d2c5811cf0f5635efe295916a4e51a1bb5c05ccf4c2ba5564affd9b614c2be72a07819322dad68213bd9ca0c3f2bb9a6d2961f4be73ac1aca3c2df5e6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\SQLitePCLRaw.0708305919F74D6B74D5\payload.vsix

MD5 ea90d422907ed2c5d09ae377aa5abb7c
SHA1 3a9e9271482f4da94ecab51f1390e34d3fd4321a
SHA256 2617fdb709f65fa5cbd83e4fa43d8d99d8155be02c5619fa774bb79a146317bc
SHA512 1b44e7e6f0fbf44ecef5e57ed7556f3ed99b26ef3dc29ccf278bc674e06aee22d28f15a8c3d2ec0720c9bc0a3601a583f86990b41251af844a896bb26ea56062

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Developer.IdentityServiceGS.4339CF00D2B9EFEC6163\Microsoft.Developer.IdentityServiceGS.vsix

MD5 5b0f242c7d938d4b94801a81ab55437e
SHA1 8b51a0402a3b77656e264ad16f2fb0b80af0e1f2
SHA256 b7a4f747e8e3903b31c8aa749dd37d5e45c5d262adcd1cdde7c262af6d95f4c0
SHA512 abbea04510a9f3bf108636d9ac9c345e79219d5def255a59516cee0462ec76a8981bc7e37d920954c3b3b859713d6c327ee8aaedcb09fd24c9cba17e98497ecf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.LanguageService.AFC4A3D3C4877318B9BA\payload.vsix

MD5 dc0e0133e7336140489cb36f76691a80
SHA1 0926ec0a0b1989792619075042ac12165922aff5
SHA256 79a416cd0d4b6e59d969161a7dd000b107f1d6a09c440b87fb9c0a7d1dfc0a7e
SHA512 5daf91315b2a3e2ea56498ace9d34aa4d024f26e03704e6b89a6a813100a01d2325d089e039492c8235fa4af985f1fbd308b0fed7f75dba36f483ad9c921287a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\SQLitePCLRaw.Targeted.E4FF9B9F064832143308\SQLitePCLRaw.x64.vsix

MD5 28f0c14c11c646d09e2c1c0c91703de3
SHA1 a6a74ea6356f3a3f802015cedf2156852f5d0ea1
SHA256 e7be12c375ed9139a372c83a5b97283e6aa959196914e58d24d8ac2498fa9135
SHA512 9eba11ec048fd2024a68a50e5c0bb2c2c5ceb67e94e81c33e3bfa93a529c11114249b71cac2aaef0ab01719019f84aadd1816a2aff2e03adc10e75467c25f7ee

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Platform.NavigateTo.4E3386F8CA13D974BA6D\Microsoft.VisualStudio.Platform.NavigateTo.vsix

MD5 d85513039082dbbe0d1d0219db09beef
SHA1 0d6865ec90beabae28b15293ac2d61da2422e27d
SHA256 c1045269f94f10f37812cfb64f2c1ecf98bc26a23369c2e7281d0fed77cb0776
SHA512 ea51f4fd1c8406729e98183563e3f9b4b62f2e7ea2fdd0b62bf743ea2e66513aef24f133116ce9144e67605a204189dd0d2d3b8a76edbec0df6a9a544ab5568c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.CoreEditor.4E93409BE088C3F1CF73\payload.vsix

MD5 71ca348232f05ee57b08b00ba3886acd
SHA1 dd9e6da045099c560c6c29fc138b19b8a2b64c79
SHA256 282deb2168fec5b50c58f1e3662d6a0c81132a1883cf086ea24a9e342d9a2f9e
SHA512 907f15711055395e59875e200047a4ee8b7e9a1d3fab231337cc38ba502fb1b3806b90f63c86152d5773b8063a77cca213354167b8baaf28ce528b7cc4b3d87d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Devenv.Resources.C76963B94C62D319D1D6\payload.vsix

MD5 69c593c5f221f467634d5968a29b3fb0
SHA1 73ae0df89138b1bde9b524ff1a20d598ce6c0030
SHA256 7b82c51311ece0792d0f2b292547e777032f1015b182b5855178c907eb4eb846
SHA512 7547ee4103a18bfe5d5bc242266102a175d9cc00475a31fcc573185a0e939bf1bc5ed06a45b2267c03b58edfd84feea44b1367b11a0086e2b11096a50cb77cf4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Devenv.3252F98E44B45FD7E3AB\payload.vsix

MD5 bb2b3b8b5d6d3644a96b1101ffb548c7
SHA1 d6f118f4d2fc7562604102f3a97c272d748a3ff3
SHA256 f9a207532293cc48174ef18851e9043f6c7ca233b44d18e68e1de6f65d792bb8
SHA512 cb9fe513571316f00fe04e84f3e27ccda7f8a1a5b323e52f77a325c9c2b72b02bbd202a65a4b2bf628ed05d7d8e4375f713e6ad8ab922c46d3ea74775fcb4a15

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json

MD5 e516a60bc980095e8d156b1a99ab5eee
SHA1 238e243ffc12d4e012fd020c9822703109b987f6
SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
SHA512 9b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\3HDB1LPD\update100[1].xml

MD5 53244e542ddf6d280a2b03e28f0646b7
SHA1 d9925f810a95880c92974549deead18d56f19c37
SHA256 36a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d
SHA512 4aa71d92ea2c46df86565d97aac75395371d3e17877ab252a297b84dca2ab251d50aaffc62eab9961f0df48de6f12be04a1f4a2cbde75b9ae7bcce6eb5450c62

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Finalizer.38E7A758772B956A69AD\Microsoft.VisualStudio.Finalizer.vsix

MD5 fdeb2ea9aaa64a39f3f91fce27b7e608
SHA1 8d9b1b4ed0d73c15ef7608b4a74f0e3994c7edc1
SHA256 a6bf40614edee75069a23da8a2145e6b85463f21a3d4bb76ad2a4c047e5da7c7
SHA512 0d09454ed642bacd631c6418a0f6b97ef014ca0fd3d61151f86e76ed993cf2020a94e3866388d8c02376482b4d3e811217faaa06cd2f4014b7ab7f45f5c2bd5c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Log.Resources.93234FE64F2FF5BA5C08\payload.vsix

MD5 96a9b69b0845137b99aaccbe17ebe8e1
SHA1 e1bcaa76be38ece95b0701171b9fdf47f566e19d
SHA256 2880f688806719f2be83b8e5c2d4f1071a7b946f1bb96c44f1cea85a111e05f4
SHA512 25891c813162234417a7d1960c81d694b6113722570fe033bf83507740fc441393105a8f63b4bdb320da7560fcccdc916fd3c81a6d08f6efab40c24f07f3552b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Log.Targeted.9E78910036068B4881DF\payload.vsix

MD5 c3760633e579e091849796ff219c618f
SHA1 c4a14b8871321151aafe2b456187eaa835ab5d4e
SHA256 8927ad8d20544e2f730dffffb4fef3db4d4fbdd13481406728440a0d5a5278a9
SHA512 64ad5070888d84d22118032cd355059e8fa5ece60f0146459bd896edc27dd85ce22e15f6e9655a14c051d42eb4d5969eaab279cf0070d77109e89e1cd5fa18eb

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Log.1953C474321E1040D45A\payload.vsix

MD5 4516205dd8d2c8109e24e65b2554603f
SHA1 b3814f474b1183e9864caf5123d7baf9a462c33d
SHA256 8bb84f7fb230bac8e8737a6aa2194f0aade970ffefc6334b64094503fd96726b
SHA512 60b1b2303353e47fc8ba1427ef8782e22dcad4b4c5978618f3f8e893154fe4e7591d27b7740c3c7f42d34fac73f1cb04a396e8390c49fc8f4ceffcadabadc538

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\CoreEditorFonts.310177BC7B20B281443E\cab1.cab

MD5 0205522e4a80ed920bec57dd81b930d8
SHA1 4ef79b10f276b117b84b306bbddc47ca0a642e4b
SHA256 2f062ee1e7b90ef9a8e560d81da73ec979de56ae27433f94a86e4acdbbbed58f
SHA512 26604af10fa121a9850a8f75b45125b101494ad0364eb6426483763cef52bf315546fc1155502d40c7ed74e384ce9c5154c041e04a259ea188397c2e115b48d6

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

MD5 fb4aa59c92c9b3263eb07e07b91568b5
SHA1 6071a3e3c4338b90d892a8416b6a92fbfe25bb67
SHA256 e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
SHA512 60aabbe2fd24c04c33e7892eab64f24f8c335a0dd9822eb01adc5459e850769fc200078c5ccee96c1f2013173bc41f5a2023def3f5fe36e380963db034924ace

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Interop.9596154DCF406BFD876B\payload.vsix

MD5 8d32b33d7532472e949d0c7f14677e4d
SHA1 280b0a55c598bc3eccc8126fffdb7bae83fd3581
SHA256 719cc4b340f3ee0b628a5677aace37d2f81914819b1d08c3c48c3052837ea0cd
SHA512 c553cc787e994909499bf5f92ff7b1e972cb983dae0170904b0165975acd88edbd7e240a6ff8a7b71c61714a1d372f70a6b63e90bd9db87c300f6a17e4ccae66

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Msi.Resources.67E206DD247E34686674\cab1.cab

MD5 4b218568790b771ff5622e5fe533d9b3
SHA1 db0b6f626ee1683b048dda8237dad09dbfb212ff
SHA256 2180eff2ecfbed70f5292ce05747f7f48f2ff6e31aa639c093f7a168010e2d05
SHA512 12b37992f45a47b9dcf56d6c9527c8a0c54dfc56418d4ec4da766a3deb9a50625ae11e18ad112d01bbaa4e613f73b7a6af9fe0825124c06012690c2be65c2c90

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Shared.Msi.505AF3402AA676E37183\cab1.cab

MD5 e9c452c8a2002f33788930cb13be26d5
SHA1 98ab25ca836a9ae521af75c6086114631139713e
SHA256 d247ee8a57fe5c746e44f8b40453916b8a0722179f092c4f5fc61696aca0868c
SHA512 ba19cb0ff4fa006d17c20eaae4925901deb1ebb82dd66a8b42ac9d857500600aec2cd577b9bed0310b0130226636025677ce5bc128996e2d3026c746e492894c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Msi.0FFF32925E019267AE70\cab1.cab

MD5 abf9aeb06bb1c651d038e229c0741d2e
SHA1 571031f337e9e0f6e2c60104cd85d08c369be841
SHA256 7719d5f28e7de10d014fbb8cab61deb41ae67210343c34f6f8bf3374e59a8329
SHA512 3255297b5103dee9e4bc6a217fb37c81ea49fed3fd3caffc23dba2dda30d201aa4896caf1e76fa52b3d84110f0c308b5b4c03ace64fdbd551d74f0f3a5dcea42

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini

MD5 9481d9a27b025e55740cf15667a8982e
SHA1 2ec8fd87331bddfc7dcb784b3998f3cb7c79fcd8
SHA256 a20e30337950eda2ca4e655a50a7ae5cb26a954257a7d3d4bafc04270ef5f66b
SHA512 cae186f4558fd9ffda3f437a86f49ff6fba3102e4817ea5d41b94ceb9635aab33d2677a4c81a9efa4f5d85fd4b40d8522c6b670c27e17d06083b17ae4f9be607

C:\Users\Admin\AppData\Local\Temp\tmpDBC7.tmp

MD5 5b16ef80abd2b4ace517c4e98f4ff551
SHA1 438806a0256e075239aa8bbec9ba3d3fb634af55
SHA256 bbc70091b3834af5413b9658b07269badd4cae8d96724bf1f7919f6aab595009
SHA512 69a22b063ab92ca7e941b826400c62be41ae0317143387c8aa8c727b5c9ee3528ddd4014de22a2a2e2cbae801cb041fe477d68d2684353cdf6c83d7ee97c43d4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.FileHandler.Msi.706888729D2B09A429DA\cab1.cab

MD5 169768acc62dcaeed7cb6d46ec9a0e01
SHA1 6ace737305569c28260b076f04b064216ab44f68
SHA256 381fd53d0b8c6d9009fe4cc8b3100d238d17eba19d9ef4f510474f1c6f846c10
SHA512 47a77ab94996dfccd548560ffbf7f68e718817e5192f939f10baf2bb7595b628796f54e054a7a3e3ab090667c57e6f4c7439f39baa4be50c8e4854fa6938fa9a

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini

MD5 cc04d6015cd4395c9b980b280254156e
SHA1 87b176f1330dc08d4ffabe3f7e77da4121c8e749
SHA256 884d272d16605590e511ae50c88842a8ce203a864f56061a3c554f8f8265866e
SHA512 d3cb7853b69649c673814d5738247b5fbaaae5bb7b84e4c7b3ff5c4f1b1a85fc7261a35f0282d79076a9c862e5e1021d31a318d8b2e5a74b80500cb222642940

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Connected.C443F55DAC284E04F607\payload.vsix

MD5 4974cabcbe18a7cbf2748186db3f8e54
SHA1 653b6daa4d3eaee75ac7d42247bb12dc21697011
SHA256 4a0f709fa0e3f378b1c195bcf5d6274ad4298d8ccb72a96b1e0843dcea697614
SHA512 6c205dad41052db642d2709017789d33e6156b9f573be5202d5134387bd99cdb75fde23e4c54c59344831dc5869ee1060d858f1bbea585f848e5375da28669f0

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.exe

MD5 c2938eb5ff932c2540a1514cc82c197c
SHA1 2d7da1c3bfa4755ba0efec5317260d239cbb51c3
SHA256 5d8273bf98397e4c5053f8f154e5f838c7e8a798b125fcad33cab16e2515b665
SHA512 5deb54462615e39cf7871418871856094031a383e9ad82d5a5993f1e67b7ade7c2217055b657c0d127189792c3bcf6c1fcfbd3c5606f6134adfafcccfa176441

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-400.png

MD5 e01cdbbd97eebc41c63a280f65db28e9
SHA1 1c2657880dd1ea10caf86bd08312cd832a967be1
SHA256 5cb8fd670585de8a7fc0ceede164847522d287ef17cd48806831ea18a0ceac1f
SHA512 ffd928e289dc0e36fa406f0416fb07c2eb0f3725a9cdbb27225439d75b8582d68705ec508e3c4af1fc4982d06d70ef868cafbfc73a637724dee7f34828d14850

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png

MD5 2c7a9e323a69409f4b13b1c3244074c4
SHA1 3c77c1b013691fa3bdff5677c3a31b355d3e2205
SHA256 8efeacefb92d64dfb1c4df2568165df6436777f176accfd24f4f7970605d16c2
SHA512 087c12e225c1d791d7ad0bf7d3544b4bed8c4fb0daaa02aee0e379badae8954fe6120d61fdf1a11007cbcdb238b5a02c54f429b6cc692a145aa8fbd220c0cb2d

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png

MD5 3c29933ab3beda6803c4b704fba48c53
SHA1 056fe7770a2ba171a54bd60b3c29c4fbb6d42f0c
SHA256 3a7ef7c0bda402fdaff19a479d6c18577c436a5f4e188da4c058a42ef09a7633
SHA512 09408a000a6fa8046649c61ccef36afa1046869506f019f739f67f5c1c05d2e313b95a60bd43d9be882688df1610ad7979dd9d1f16a2170959b526ebd89b8ef7

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.VisualElementsManifest.xml

MD5 5ae2d05d894d1a55d9a1e4f593c68969
SHA1 a983584f58d68552e639601538af960a34fa1da7
SHA256 d21077ad0c29a4c939b8c25f1186e2b542d054bb787b1d3210e9cab48ec3080c
SHA512 152949f5b661980f33608a0804dd8c43d70e056ae0336e409006e764664496fef6e60daa09fecb8d74523d3e7928c0dbd5d8272d8be1cf276852d88370954adc

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDriveStandaloneUpdater.exe

MD5 9cdabfbf75fd35e615c9f85fedafce8a
SHA1 57b7fc9bf59cf09a9c19ad0ce0a159746554d682
SHA256 969fbb03015dd9f33baf45f2750e36b77003a7e18c3954fab890cddc94046673
SHA512 348923f497e615a5cd0ed428eb1e30a792dea310585645b721235d48f3f890398ad51d8955c1e483df0a712ba2c0a18ad99b977be64f5ee6768f955b12a4a236

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Resources.pri

MD5 7473be9c7899f2a2da99d09c596b2d6d
SHA1 0f76063651fe45bbc0b5c0532ad87d7dc7dc53ac
SHA256 e1252527bc066da6838344d49660e4c6ff2d1ddfda036c5ec19b07fdfb90c8c3
SHA512 a4a5c97856e314eedbad38411f250d139a668c2256d917788697c8a009d5408d559772e0836713853704e6a3755601ae7ee433e07a34bd0e7f130a3e28729c45

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-400.png

MD5 096d0e769212718b8de5237b3427aacc
SHA1 4b912a0f2192f44824057832d9bb08c1a2c76e72
SHA256 9a0b901e97abe02036c782eb6a2471e18160b89fd5141a5a9909f0baab67b1ef
SHA512 99eb3d67e1a05ffa440e70b7e053b7d32e84326671b0b9d2fcfcea2633b8566155477b2a226521bf860b471c5926f8e1f8e3a52676cacb41b40e2b97cb3c1173

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-200.png

MD5 d9d00ecb4bb933cdbb0cd1b5d511dcf5
SHA1 4e41b1eda56c4ebe5534eb49e826289ebff99dd9
SHA256 85823f7a5a4ebf8274f790a88b981e92ede57bde0ba804f00b03416ee4feda89
SHA512 8b53dec59bba8b4033e5c6b2ff77f9ba6b929c412000184928978f13b475cd691a854fee7d55026e48eab8ac84cf34fc7cb38e3766bbf743cf07c4d59afb98f4

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-150.png

MD5 ed306d8b1c42995188866a80d6b761de
SHA1 eadc119bec9fad65019909e8229584cd6b7e0a2b
SHA256 7e3f35d5eb05435be8d104a2eacf5bace8301853104a4ea4768601c607ddf301
SHA512 972a42f7677d57fcb8c8cb0720b21a6ffe9303ea58dde276cfe2f26ee68fe4cc8ae6d29f3a21a400253de7c0a212edf29981e9e2bca49750b79dd439461c8335

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-125.png

MD5 09f3f8485e79f57f0a34abd5a67898ca
SHA1 e68ae5685d5442c1b7acc567dc0b1939cad5f41a
SHA256 69e432d1eec44bed4aad35f72a912e1f0036a4b501a50aec401c9fa260a523e3
SHA512 0eafeaf735cedc322719049db6325ccbf5e92de229cace927b78a08317e842261b7adbda03ec192f71ee36e35eb9bf9624589de01beaec2c5597a605fc224130

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-100.png

MD5 1f156044d43913efd88cad6aa6474d73
SHA1 1f6bd3e15a4bdb052746cf9840bdc13e7e8eda26
SHA256 4e11167708801727891e8dd9257152b7391fc483d46688d61f44b96360f76816
SHA512 df791d7c1e7a580e589613b5a56ba529005162d3564fffd4c8514e6afaa5eccea9cea9e1ac43bd9d74ee3971b2e94d985b103176db592e3c775d5feec7aac6d1

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png

MD5 22e17842b11cd1cb17b24aa743a74e67
SHA1 f230cb9e5a6cb027e6561fabf11a909aa3ba0207
SHA256 9833b80def72b73fca150af17d4b98c8cd484401f0e2d44320ecd75b5bb57c42
SHA512 8332fc72cd411f9d9fd65950d58bf6440563dc4bd5ce3622775306575802e20c967f0ee6bab2092769a11e2a4ea228dab91a02534beeb8afde8239dd2b90f23a

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png

MD5 552b0304f2e25a1283709ad56c4b1a85
SHA1 92a9d0d795852ec45beae1d08f8327d02de8994e
SHA256 262b9a30bb8db4fc59b5bc348aa3813c75e113066a087135d0946ad916f72535
SHA512 9559895b66ef533486f43274f7346ad3059c15f735c9ce5351adf1403c95c2b787372153d4827b03b6eb530f75efcf9ae89db1e9c69189e86d6383138ab9c839

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png

MD5 f4e9f958ed6436aef6d16ee6868fa657
SHA1 b14bc7aaca388f29570825010ebc17ca577b292f
SHA256 292cac291af7b45f12404f968759afc7145b2189e778b14d681449132b14f06b
SHA512 cd5d78317e82127e9a62366fd33d5420a6f25d0a6e55552335e64dc39932238abd707fe75d4f62472bc28a388d32b70ff08b6aa366c092a7ace3367896a2bd98

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-400.png

MD5 e593676ee86a6183082112df974a4706
SHA1 c4e91440312dea1f89777c2856cb11e45d95fe55
SHA256 deb0ec0ee8f1c4f7ea4de2c28ff85087ee5ff8c7e3036c3b0a66d84bae32b6bb
SHA512 11d7ed45f461f44fa566449bb50bcfce35f73fc775744c2d45ea80aeb364fe40a68a731a2152f10edc059dea16b8bab9c9a47da0c9ffe3d954f57da0ff714681

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-200.png

MD5 13e6baac125114e87f50c21017b9e010
SHA1 561c84f767537d71c901a23a061213cf03b27a58
SHA256 3384357b6110f418b175e2f0910cffe588c847c8e55f2fe3572d82999a62c18e
SHA512 673c3bec7c2cd99c07ebfca0f4ab14cd6341086c8702fe9e8b5028aed0174398d7c8a94583da40c32cd0934d784062ad6db71f49391f64122459f8bb00222e08

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-150.png

MD5 a23c55ae34e1b8d81aa34514ea792540
SHA1 3b539dfb299d00b93525144fd2afd7dd9ba4ccbf
SHA256 3df4590386671e0d6fee7108e457eb805370a189f5fdfeaf2f2c32d5adc76abd
SHA512 1423a2534ae71174f34ee527fe3a0db38480a869cac50b08b60a2140b5587b3944967a95016f0b00e3ca9ced1f1452c613bb76c34d7ebd386290667084bce77d

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-125.png

MD5 d03b7edafe4cb7889418f28af439c9c1
SHA1 16822a2ab6a15dda520f28472f6eeddb27f81178
SHA256 a5294e3c7cd855815f8d916849d87bd2357f5165eb4372f248fdf8b988601665
SHA512 59d99f0b9a7813b28bae3ea1ae5bdbbf0d87d32ff621ff20cbe1b900c52bb480c722dd428578dea5d5351cc36f1fa56b2c1712f2724344f026fe534232812962

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-100.png

MD5 57a6876000151c4303f99e9a05ab4265
SHA1 1a63d3dd2b8bdc0061660d4add5a5b9af0ff0794
SHA256 8acbdd41252595b7410ca2ed438d6d8ede10bd17fe3a18705eedc65f46e4c1c4
SHA512 c6a2a9124bc6bcf70d2977aaca7e3060380a4d9428a624cc6e5624c75ebb6d6993c6186651d4e54edf32f3491d413714ef97a4cdc42bae94045cd804f0ad7cba

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-400.png

MD5 adbbeb01272c8d8b14977481108400d6
SHA1 1cc6868eec36764b249de193f0ce44787ba9dd45
SHA256 9250ef25efc2a9765cf1126524256fdfc963c8687edfdc4a2ecde50d748ada85
SHA512 c15951cf2dc076ed508665cd7dac2251c8966c1550b78549b926e98c01899ad825535001bd65eeb2f8680cd6753cd47e95606ecf453919f5827ed12bca062887

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe

MD5 57bd9bd545af2b0f2ce14a33ca57ece9
SHA1 15b4b5afff9abba2de64cbd4f0989f1b2fbc4bf1
SHA256 a3a4b648e4dcf3a4e5f7d13cc3d21b0353e496da75f83246cc8a15fada463bdf
SHA512 d134f9881312ddbd0d61f39fd62af5443a4947d3de010fef3b0f6ebf17829bd4c2f13f6299d2a7aad35c868bb451ef6991c5093c2809e6be791f05f137324b39

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-200.png

MD5 f1c75409c9a1b823e846cc746903e12c
SHA1 f0e1f0cf35369544d88d8a2785570f55f6024779
SHA256 fba9104432cbb8ebbd45c18ef1ba46a45dd374773e5aa37d411bb023ded8efd6
SHA512 ed72eb547e0c03776f32e07191ce7022d08d4bcc66e7abca4772cdd8c22d8e7a423577805a4925c5e804ed6c15395f3df8aac7af62f1129e4982685d7e46bd85

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-150.png

MD5 de5ba8348a73164c66750f70f4b59663
SHA1 1d7a04b74bd36ecac2f5dae6921465fc27812fec
SHA256 a0bbe33b798c3adac36396e877908874cffaadb240244095c68dff840dcbbf73
SHA512 85197e0b13a1ae48f51660525557cceaeed7d893dd081939f62e6e8921bb036c6501d3bb41250649048a286ff6bac6c9c1a426d2f58f3e3b41521db26ef6a17c

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-125.png

MD5 8347d6f79f819fcf91e0c9d3791d6861
SHA1 5591cf408f0adaa3b86a5a30b0112863ec3d6d28
SHA256 e8b30bfcee8041f1a70e61ca46764416fd1df2e6086ba4c280bfa2220c226750
SHA512 9f658bc77131f4ac4f730ed56a44a406e09a3ceec215b7a0b2ed42d019d8b13d89ab117affb547a5107b5a84feb330329dc15e14644f2b52122acb063f2ba550

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-100.png

MD5 19876b66df75a2c358c37be528f76991
SHA1 181cab3db89f416f343bae9699bf868920240c8b
SHA256 a024fc5dbe0973fd9267229da4ebfd8fc41d73ca27a2055715aafe0efb4f3425
SHA512 78610a040bbbb026a165a5a50dfbaf4208ebef7407660eea1a20e95c30d0d42ef1d13f647802a2f0638443ae2253c49945ebe018c3499ddbf00cfdb1db42ced1

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-200.png

MD5 09773d7bb374aeec469367708fcfe442
SHA1 2bfb6905321c0c1fd35e1b1161d2a7663e5203d6
SHA256 67d1bb54fcb19c174de1936d08b5dbdb31b98cfdd280bcc5122fb0693675e4f2
SHA512 f500ea4a87a24437b60b0dc3ec69fcc5edbc39c2967743ddb41093b824d0845ffddd2df420a12e17e4594df39f63adad5abb69a29f8456fed03045a6b42388bc

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-150.png

MD5 771bc7583fe704745a763cd3f46d75d2
SHA1 e38f9d7466eefc6d3d2aaa327f1bd42c5a5c7752
SHA256 36a6aad9a9947ab3f6ac6af900192f5a55870d798bca70c46770ccf2108fd62d
SHA512 959ea603abec708895b7f4ef0639c3f2d270cfdd38d77ac9bab8289918cbd4dbac3c36c11bb52c6f01b0adae597b647bb784bba513d77875979270f4962b7884

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-125.png

MD5 b83ac69831fd735d5f3811cc214c7c43
SHA1 5b549067fdd64dcb425b88fabe1b1ca46a9a8124
SHA256 cbdcf248f8a0fcd583b475562a7cdcb58f8d01236c7d06e4cdbfe28e08b2a185
SHA512 4b2ee6b3987c048ab7cc827879b38fb3c216dab8e794239d189d1ba71122a74fdaa90336e2ea33abd06ba04f37ded967eb98fd742a02463b6eb68ab917155600

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-100.png

MD5 72747c27b2f2a08700ece584c576af89
SHA1 5301ca4813cd5ff2f8457635bc3c8944c1fb9f33
SHA256 6f028542f6faeaaf1f564eab2605bedb20a2ee72cdd9930bde1a3539344d721b
SHA512 3e7f84d3483a25a52a036bf7fd87aac74ac5af327bb8e4695e39dada60c4d6607d1c04e7769a808be260db2af6e91b789008d276ccc6b7e13c80eb97e2818aba

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.FileHandler.Msi,version=17.10.34804.30,chip=x64\cab1.cab

MD5 937a4d6472cccf08c36e9c21d3e95faf
SHA1 3c6b2b69c235f5c46e8858daea70fd0238ee62cf
SHA256 ee96b56403cfb70c62cac04836aa0812e1b90356a3489b615ee0faff33f17c8e
SHA512 91d7edfb21f75b75e7e60affd3e6aeb82aae3dd4fcc1f629e51f5e8b8019ba571bcc8048d85f529ea997b0e8fd09ca0f26b2f826c014bb9b60c9494a9e553169

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProjectServices.BF64CA389F669FF5F7E2\Microsoft.VisualStudio.ProjectServices.vsix

MD5 c2de59fc3460da7caaa07221d94dc1eb
SHA1 dde1a0fe9dfc0664782bb11f596aafc36b49981a
SHA256 9d81346d8877f3f0706443164737e4d8eb780e6498cfdfa00fffdacc8c8f68ea
SHA512 4bc05009316347a1d8f0739ebf21fa4321036fe48ecd331b1e96e7a2e102cc6c6ecd4e17d62327225a733b3c8b6f884ee0cbf4bd93ab3ec15fde10626d37423f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.OpenFolder.VSIX.70731B735431125C98EB\Microsoft.VisualStudio.OpenFolder.vsix

MD5 6baae34ec14f949b2d82c1482cec8199
SHA1 eb549753b6c1767fa697dbf661f504b04f429a94
SHA256 0937671f6c76a48a6f35fe1ab7ac60075d4422ca5611a50cf09e3d4a3c6d5772
SHA512 d10139db2d674ca0fa2ea87ca95bcdf220f7dbbbc106b113e9c058505388fd4466b66deb4ba4175593f5105a18127ed3ea99c6c0c3275da1d039d6ddf3aa8525

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.ServiceHub.Controller.amd64.7EA33B7634E6F071FB08\Microsoft.ServiceHub.Controller.amd64.vsix

MD5 2160c0b4d2b1e4a43ddaa6394983a8aa
SHA1 07cc6ffd028863e412dca7419b45101bf433b535
SHA256 0bfbe519d42de773a0f7082eca4cf0fceddf824d72e77dc29111dcfdce00c901
SHA512 b9a1d8f6bbe0d159ba9c439af657e977e5025087d1e469faea44cbe8a2b8aa6be7617f7cb0845b5067f56b0dcb3f009f01bf9bf2a775671e7c0e4a8c469f738a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.ServiceHub.ExtensibilityHost.amd64.40BDE0D3834A69431AEC\Microsoft.ServiceHub.ExtensibilityHost.amd64.vsix

MD5 ef563a35c7e19b4514e1232f66b7c2d1
SHA1 3830588cd615feedb81ed26aa79830b645f6925a
SHA256 b89174a8dcfdb05c3384f895b05d5372d3b90786effebb1f8cdf3817fc52b0a9
SHA512 96d7cf5fd0eaf28602d322736882b2961615637b245f4fe542544abb2ce6fedc65f7b71c54bb2ff3d8ec20ecb3d0f4b8f6656205ba751fc89ea66e8318708027

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini

MD5 56d8ebd659ed8831cb53cf0fe7eb42de
SHA1 ca94c5279f08a9f717b6edba904439e987e04847
SHA256 4b094cc9552b79ac03f7c90dae14a3dca354b2059027eee92045f36ff0009b36
SHA512 b61f3c85d8f0e52262621eabc664c649740d1a65c575d5dc12e9b243f7d87de45987920ec6307050988053a02a65d9365dd8861f8797078a2a802ae68849cff5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.ServiceHub.Managed.5AD5B460C07D16E5D967\Microsoft.ServiceHub.Managed.vsix

MD5 ea369017be71c1a056369e1e0abf4efc
SHA1 9fb8385e15d66bf7675918b9824b6966d5858c37
SHA256 437eac9da7425c6a62d935c84c03cfcbe4b390a3889a3ca8c6bcb2e19e2364c1
SHA512 0c8fd0ea002ee072e20d88a6fb184f27529a85e1d34dd339df605b112e53780533b50299551feda31ed29cb0972d77c208186a186e43e56ca7ca6fcd5935373d

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\qsml[1].xml

MD5 1c3d47f039ff51de68ac475afce0827a
SHA1 3f1966892880012d83bc5e0b96516f5c11157bb7
SHA256 bc5dd5c5dd0d8165b525e36240920f997b761ae2075c59050b7e910be1213cdc
SHA512 0ab800b70866c1ea8a824985b3996f98c781bdee4369d9e067a0cb492de7667e08acc104d5c3ccaf7feeae7778a2dec08a3f36f98248875b9074745519b9fa46

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\3HDB1LPD\qsml[1].xml

MD5 437a47878aaf386145289ca37a9448aa
SHA1 7bbe4c8e6fc6ee8b3bcb4cbc256f322676f2936b
SHA256 2b075928c929cd5870359f251cdf27f6ba2d8c0c68428702a3bfef2c08335490
SHA512 7d2a3cd90a31f811e71ccf227abbc4ba72d9e27e35dac96bbfec7eba99bac10553ce3486a67e2f5b2a4efe7862ce43753c4123b061d33233a34930eb04c03f39

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\Microsoft.Win32.Registry.dll

MD5 59c48aacb1c413c108161afe13fdbed9
SHA1 31ace4b26d8a069c84aad6001e06c2a5483806f3
SHA256 e9a9d281c1a708aaae366f82fd6a1742f65da2918cc4fa5eaaaada0be24277d9
SHA512 8252abe64c67863d9e4c70e820f0c69c517b8678a4b4c13a436118bc276e5f21e84522b93566c0bc009effcb251ed67bdbc60e4907abea2f33b6be3764e28d1d

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\System.Buffers.dll

MD5 ecdfe8ede869d2ccc6bf99981ea96400
SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\System.Net.Http.Formatting.dll

MD5 b676d5e9828d6010339743f236f54ec4
SHA1 0dff461be2e04ebf6da5f4f2d3eb639cc2e0a8b5
SHA256 7b58adc6e23b24cd6615b35e848a002bda053a26d48f9ddafacfc8098e97c49c
SHA512 cca0ed47b391b12f44716db1921314e7dcbf2a9f6b0916c78642b4aa814825c570569b103a7f5e298e9c02dbae22e7cb905f08f80f94ad6dcb69fe09085cd8a8

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\System.Security.AccessControl.dll

MD5 527595c86ad17045a101d567d7d3279f
SHA1 83014e2a98f7597b9a26e424a0759e5a3d2ecff1
SHA256 ff14c5f628b9a6798d173aefbba0a43d61e66f715108e2576ac0d3dfab9071d0
SHA512 9ebaaca1623bc8e2fc8df158f338b5e415670fa53e212bb38771e7e25af9688301cc4aee055c5b64e33f8aa24729ed896e0be8e2dbce54386583c660476c5dda

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\d5txmlcd.sek\System.Security.Principal.Windows.dll

MD5 be2962225b441cc23575456f32a9cf6a
SHA1 9a5be1fcf410fe5934d720329d36a2377e83747e
SHA256 b4d8e15adc235d0e858e39b5133e5d00a4baa8c94f4f39e3b5e791b0f9c0c806
SHA512 3f7692e94419bffe3465d54c0e25c207330cd1368fcdfad71dbeed1ee842474b5abcb03dba5bc124bd10033263f22dc9f462f12c20f866aebc5c91eb151af2e6

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\5JGBC19U\qsml[1].xml

MD5 36f817fc7c9a9e4a6775d1175e5a016d
SHA1 2addb4ce5dd6461a1e020f743491a250af7e0d7c
SHA256 d7994a98864f36233a1359a245058b15478907230cb60ab0cd675739da26e1d3
SHA512 3f4f587491166b7210150f0edd8dc9177096b634fcd4b30d9a1d2ae521c025a5aff9be1cba1a4a605d265e65a3aa424ed27b9c89c346715fa15fdd065a376842

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\VsGraphics\Assets\Effects\Brighten.dgsl

MD5 b160497cd80519b9253f9239088be202
SHA1 b4480bfe862ce6fa1c2489af528e34597817a622
SHA256 ce01ad943484f34aeb87bad14931d2bea24e33074331aaad9f02f41c2d3079d2
SHA512 f8a96d0c3eebc2030a1123765c91e86c7f3b9f790cfa200d3c8bbc6c7adb1170df977af77643eabdde21c8bcb0f3c2607286461b999af82edc8db8481fe1900e

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\3HDB1LPD\qsml[2].xml

MD5 31488f14d6f7cab6710b025bcce7b694
SHA1 21da009b796edd4d303eb7e52ca01844842b9e27
SHA256 e9517614d1aa62d7be587ab6e568551d0e61b82ebb924efc6eedaa7a97616bd7
SHA512 f4f7550e1e00c3c12525832e7678cc56c79016aa09f05af7291cca57f8ea25da55dd2d334fb103e942acdb9a9c35dbc8ae65e513a8d8dc3638cda6af2f0bd835

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VC\Debugger\x64\tbbmalloc.dll

MD5 1ce359834b5712938ad4633c67aaf856
SHA1 69cf6df80228a006f7bbcd715a85a9eae051dce1
SHA256 3a38c4ca997792180b207c95c08f5abb9211e5e13b113261f63cee9ca901ee6a
SHA512 e54cbfada13d871fbe7aa06016d319cc328e5dff7b0207451074f72f464fbf6d3acb1264dc72883f00934546d312c0cfd77923699f8e936f0655f6129b57712c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Packages\Debugger\msdia140.dll

MD5 368b7a68ddc03aaaaabc46d47b3acbb6
SHA1 30068a15615e3ba15aaf8233a3f288ae925e9c94
SHA256 1377aa6111c0e93373775712ca2f99f6811b8c426ffafef9e766a37524dd776a
SHA512 63d293c8eb45a41d18640882d3e9a78e2e9afe47edbe7c01d7536748d987a0dd8474c88d30730007408d5457547a40827caa800772350d3387434da07f2e7036

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\favicon[1].ico

MD5 f3418a443e7d841097c714d69ec4bcb8
SHA1 49263695f6b0cdd72f45cf1b775e660fdc36c606
SHA256 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
SHA512 82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x86\msvsmon.html

MD5 f7770b8d28f0a464327f073cefb74d70
SHA1 a72501d5cf6ae7efaf9a63e0c9f03f896deeea2b
SHA256 31f2c14df0df1e47f0340dbc385dcd994d631962c60054260092f7728d2346dc
SHA512 e5801eb4f9913a31911aca0c397c1b18ce1bbbddb0b08e70e51eacbf6d8424fa758b83e95b5f7275396a2b6931c2db4a076aac06aeca4dd1f751ee3b6d01692d

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LNHEOAK4\recaptcha__en[1].js

MD5 774dab3a2fa5d7af589bb9d159f86e73
SHA1 98eb3d1d1e59a1f92288b59003b9f459690b264c
SHA256 0579319097e8c725b3a3dcc597ec62fad86a379ea3c8c41c290deb379d3e6ee0
SHA512 c0b15929cf38d0b0fc07cf39299b23cad61af927939f8f676ac345b92b3f6c968b426208cfe4b629d9a8aa802ae1aa1462124c71f640519c0e68dd25ca8133af

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\iisresolver.dll

MD5 926cc1a56e055c16fcd6b97c49f49677
SHA1 6a871317cd0d59531d22e18bcb94fc1616f0875e
SHA256 36fc9c4d692ba855e027af05395e1e6f003cdcf9da01f417268a764d2f8d5b30
SHA512 7d9a722c9fba22e968fc320936b04eceaf7e522daaba56b08eb7a59f7ad9d6ba7a74ec5c3edccd01e1f316fb6dd40317839c24174b10eeaca214cbeeef933693

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\vsdebugeng.manimpl.45.dll

MD5 856dc92e39433e4df325adb17c7ae86b
SHA1 5d8bd9f651e2b67c770ad29a0ea5c3fda12e091a
SHA256 dc1dee113da722bb9a95b57a1736f72a78115d827782a34a03802501bae05436
SHA512 60c03ed7834a1293b7ec52eb2ba6e07e0ac9c87902100797ced2e59d1054ca2cc0e8da0cbbdb8e55b5b13b9b70491b1b04e26fca3f33e6f8a1a8dac7dc52f549

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.Diagnostics.FastSerialization.dll

MD5 d122ac4cdc4d85d8d0b98938c20e9099
SHA1 188887f3973480fcf7176128db4d8995b462de23
SHA256 e71fbedce64331678399550a14483ff4b0d12a20632dc3ad6162566063f30850
SHA512 64e8c577d063481e8e8581c531d27105dcd53253a3a5d84c9bb4ca126d5f1384ae34bfe7d71bd40124784e6a69022227fc51a3f680a827a5d575cb3f73b6c330

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.Diagnostics.MemoryGraph.dll

MD5 b716b096dec16e4b285a226ba13ed7f5
SHA1 5bcbb20e51803536b30048eef2ce2aa689581383
SHA256 160e54afa1c48bd6989d0f80a1f2cde6d70c64ca5be47bbaae98caacfc1b2b84
SHA512 78fbbb1b0ac0fa04abfc6b916dc26dca725f6e03fa07772cae26bc9989c97a239420cdddd4616c2e5c354ca51905b7a11b9c616afce34984e1b1889c1260ee8a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.Diagnostics.Utilities.dll

MD5 e9515cf08ff2257e3e22f8def296461a
SHA1 5db8f75599296f64c877fa5a8ff3aee8aa58514c
SHA256 9f46f10a49a779789abb12fc89eb886a255ab5ffd980b5b4a1e906a3665b2543
SHA512 67a3fa4b92e91f3cbc3a34b53701e63374a215ea73a349bd4d5a294d6bd49cae460fc833455eebecfaf14f31148766fca3469d9ebaa0fefddd6f484a174e1992

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.Interop.11.0.dll

MD5 105f5647d43d5c8567b80b2d7656846d
SHA1 d4bc5283b3b38a1169435a08f7f8db248845966d
SHA256 89e7e0e29cf281d95defe638766b9f67d6025101fb7d14d218ed6a53b2900148
SHA512 429c0213d9265684127b91258862474dc3514231561360bb5264d979a3d5034169b064c2d1f6089f0c3a8c2050e48aedf8616eb180a927597f1edce126083799

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.Interop.15.0.dll

MD5 513dccdaa90ace47b80cbda18024f393
SHA1 e32afd241f5c20e55824de22a45beb77a8b31867
SHA256 4bf2eb44beabf8900471282a62c15cfe71f64c18ff1a9d8104391260e2b846ac
SHA512 e4e03294278ac1713e7332aa394f9910a46af9a9ec2d6091493399c65c175dd3ad166d198fb05e154a328ec53612e3c7280475de1fa3636755c4c10282ea3ab4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.InteropA.dll

MD5 b6757ec5d9e84fb2da2457c02676695b
SHA1 db12bdafcbcc43d30492a54e499685edd041acd4
SHA256 b2b5bc30ff2bae2491e4cce45011d58fc4c15af79f6945b808f08be96d2f2d29
SHA512 9bd8c6bf87a4fd1e086ee8ae669eacf8f58d92032d7f23ce1aa075b548993b6b99f9a61fba00946d1407e4afb53695afe93b66d16944e0eea7fa84530f815ddc

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.Interop.14.0.dll

MD5 3ebd624720f628eb2e941bf49b939ef5
SHA1 89ec8250b7bfa456e0a4f8d3be053f803ad02ef3
SHA256 edbb9acdd32d383d6571fd52466a717f9d72898087d0b51f9e755d7956d45934
SHA512 d74c4ccf4bd8b087ede813a5632d1229b9020f4854d14093a44a618dca671bc4455504087301e31f239ad9d063fa951a6a90ad6091febe747233b68da116197f

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.Interop.12.0.dll

MD5 a11a698e5f1c8b02ab225a2952aa90e0
SHA1 f31ffb1647593b7dbd0058934b6279a7bb1ddc83
SHA256 090d418caa62109ad7c1b316df6d6f773bf673ff1c1789b4af32e14542ed2867
SHA512 6683679b329bd021bfbc77a6ad6e549bfe7ba2c8195dd1e4e4d9fffd96a53e9257c23261cc2f7426c933ceb3d23b5d41b3ba7012e8a0bf8346df233c7ee58a43

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.VisualStudio.Debugger.Interop.10.0.dll

MD5 96b127d2ffb6c525876fa5d25c0218c0
SHA1 110b36369fdc40574c71895cdee45cc8b385c578
SHA256 1f34284d40b5e63b57a9c1eae593f15bd69b352303e6807530d9cec97017ab95
SHA512 cba3300575367e350ac54f058490e1b71e72c6b2a45ebdae3ca97ca8b814f09f07e26d611565470b637d4afced12f80a190471dc8c3601fa83388c7ada09d29b

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\Microsoft.DiaSymReader.PortablePdb.dll

MD5 c449a58b91e0deaf92b4503b8f20e26e
SHA1 efdf2ebd504b1316adfc1d499a7af85a6c2c78e1
SHA256 2df7545659037537facd68f8d343e790152e4ef2ba832af4751a5ce095dee96a
SHA512 39f972dcb30c37f62f364faef49e5ab0a90f4bccbdf3603f2fd3975a27f93f5e711b870a2f183426ec3f170b6d9f7c7781c5b67f58b15a591b3a2a81b85de8b3

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\msvcp140_atomic_wait.dll

MD5 ee3d087b18fbe5996543cc6f5e311f88
SHA1 ef8abc4ffd00e9b59dbdd60282f1fafac73d5449
SHA256 76b1da00f555f03537ee49731a24708aa103b88243b46d785b0352406e625201
SHA512 a68c9d0ff012dda735a58105e94a00285586a6fd6c67cf0cf947fb71ef9d21ad38569a4efb606b817b477c6b4ba9588d4cb7f8b596c362645bde18210274b4de

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\System.Runtime.CompilerServices.Unsafe.dll

MD5 93ae20e877512f420abb5b2d8ebe1446
SHA1 802bce64836f3efd2f74ebd0e767ce341cb021a8
SHA256 01748200f2400c742aa689f1f5101bd6298efdfd92c00c18f4fa473847235ba9
SHA512 2c8b7cdad056d03b51356ad3361b431600c8674e49a182274fdc481ba817042e7a3be85e6a23c7f2052561f22c81e91f33f992a31c5e48e1e31029132f3efbe1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\vcruntime140.dll

MD5 e4a0f1de931a42b1b6b861b7cb084310
SHA1 07b04f06b8cfd957a1021048cb83fdcaa0791338
SHA256 ec7235d0258b5a6649dfd9d8fb258fbf8d31eeab800795fa07464f7f5b7ef4d8
SHA512 6758c2cc75b7a581d563eb1172da39e9be79ecf6caba8eb9416312b956e7d00eb5a5257b0f455f9d5172cb53a016ae1ad7d47bde9d756b5332d97811ebdf72ea

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\System.Reflection.Metadata.dll

MD5 ef623851cd4f317816b1a574dbb81808
SHA1 a2f46bf4c3d91c2dec4a1ec674114a45e6e9e41c
SHA256 55ef768ffa305de58e38e15420669258b16f420618eb1f702bddb30e5c797961
SHA512 77c9dfb607afa9443bb47973db5e72ef06a0767925138c53a10907690f4af0a6f7a50af77726ac241ae1a3734f724c5c0f2108885f2e649e33f60c09428b1538

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\System.Numerics.Vectors.dll

MD5 387c4d07c0e7c45b6d73c61b5936a102
SHA1 81580d6788f5ccf418e89f8a5fd7f720d60bd811
SHA256 17924e5dc87e0d6229d2dd0bcfc1fdfabd820901b13a68baa89fcb80c4d1a67f
SHA512 c7bd03dbb2daadf43ba281287ac92e3922cddba64702c524083537b9af920cd64b8555a5d1b10dff12bf8b896518fa0ad0de5b598398f6469c9293cfa529bf91

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Remote Debugger\x64\symsrv.yes

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Debugger.Metadata.dll

MD5 75bdb04e56bd9206b98ab517f0cb9046
SHA1 171ca27eb607c170593ededc53c52243c833f865
SHA256 8536fbc43d583c2c3a0c5d7c50364e17900678650ee1649b6ef6322d60cfb6aa
SHA512 312cbb3d76f60219ce46662ea5791d5bdf002772e3497db11744f309796c1e1b75f685d724c54b19a649472c4d74b790dde399533cf222a12a5585c8e411f1b9

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.vil.dll

MD5 940e355f2b9cad82c3a41da31150c7c1
SHA1 ed53c89d7a33f28df4b8a65266024a95666951c2
SHA256 28d6b636626a908b53344d07f6a940ce23218dec0dd587e9dc953ff1c99e8428
SHA512 5df5b7731a8110e6aab7ad3091b93664ae1801a2da4c105ed0f86c77aad8924ba9b36c9fa094046045965567f626646817b7a8359f1e7a06e4990c7342876ef4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Runtime\Microsoft.VisualStudio.Debugger.Runtime.NetCoreApp.dll

MD5 c39cb78335982ee2bfdb22154bba0245
SHA1 0475a910d96e2526709fa6dd3214e88a94af9fbc
SHA256 9b2ce9961dc95d9d9219062eaaf98d04b3c76d0eca4223a88e6e843f4143c41a
SHA512 f7310f5db169283b2f03d8db713203e86a17e5a217d98ff4078eebb5f2e533198097418a4b4f5fe0a370929c4176d042b53766e98fbb5dbb62f58a1dc6cc3b95

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Runtime\Microsoft.VisualStudio.Debugger.Runtime.Desktop.dll

MD5 b9a20974da48cd885685c3c6ffce4eb8
SHA1 225d65a8f9a526b1ab6bf4c68b3f1b5367d311da
SHA256 a09096719f4d928f7ef1e5d8ed9214fb4f47e005a4ed93998e35a51416f68f86
SHA512 7de2d301085dbbf8dfed652ab979cf4c35c9700bbd91bc1cfed5ec3ea41d94310bcec251f62af5accd0978f8b9e15f78c03390c63d63aaf741cc4fea17804fdb

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.vil.host.dll

MD5 46c400aab4fde27261a8e28c7f6f118f
SHA1 60da49cefc30f484df2a866024ac86bba3781240
SHA256 d20ef5b7be442aa342fe811a88db37e1db18353ad7ea0b49bd2d915aa19ac29e
SHA512 87bd928f29f4e2feb37d08bbf8ebebad1744188b9ff28938e2789b1cedf01d56d2ddb9d98abced5918f08f42274b193571338012e76b9470ecfc6efdaab348d2

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LNHEOAK4\qsml[1].xml

MD5 64cf81186c724b151e8ca7fa8f9487e4
SHA1 61952aa061990f031bdb16044011115c615774b4
SHA256 45c2fbaa7fdfaa3358c0f92c3a46025f74a0dbfaae6ac5c7a9afa552e950ed3f
SHA512 8c0673a4fe8ca2c054a127a553ba9ae28e1c874fc19380f566035bf66c02d11a45b8b71a653f33b50e501c16f2969914991f0d45d641a94cf5b89e0a076895b2

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\qsml[2].xml

MD5 52670d3a8ee0e20cd42360763e849a30
SHA1 322c363235c1bc529f094a85a1a18ca56b3f38c3
SHA256 cdef72070683d3e147f7cf7a0d635f55eddb9c1af35a950d8abee2b8986bfb11
SHA512 a2aa88b88641c81b40909f47118c57ac01f0b28895ac5cb88b57fdd35bf1e644e9ab4187931658cf5a5bbe5a789ccfebd2ad61931c8cc60089e2643cef3edd67

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\qsml[3].xml

MD5 ef4a021471420fa921045ee68feb70b4
SHA1 27b005049ea606ec1bcb7c3d2cd3f3eef3b776e9
SHA256 8913bd4cf2e267e3634c3a1c897b2caef00a07c4f7540136c457e47afc1e3480
SHA512 565ebfcdb1c37762de49710d384cc33a2323258ba1dd52c060c15940bcbd0fad6de243b68daa4226980366699f5550c824392f8986f6fad05459a272fde32d6d

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\3HDB1LPD\qsml[3].xml

MD5 7509f602496972deca85e3a35ae0646f
SHA1 899f05bca136d613300527e20716cb9ac57fd5c5
SHA256 db4a126e2150f9d3c2d5d8ba1f3849ea3190e8e0fdc08484ff6361089e069529
SHA512 2727a86772577cce6cd5d65dc9976ec5f19253962863a2c0c37cc92dd1c5907eb83baea32545bae88f1b60fff5eb29127c110eff9da8ef55280992e04458beed

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.ServiceHub.amd64.702C735B5AFFF4F55970\Microsoft.ServiceHub.amd64.vsix

MD5 1e8cbc6d6cb13333be2ca14de91d4fae
SHA1 16a8fe4389da061f531cf3e4027931fa31be176a
SHA256 e93621aecd6646704d98da9dda4f8ce9f889f55c56759c3ce3ee8d54c5084a0e
SHA512 341b41d7e360ac7c68d5b3b1388d2a583e48484f8563dc00633e0e241e6a1aab417d8bc59745bb2b4d3792bd9d9d3f618f13d4828f2aa0d71c45f23bfe03fa9e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Platform.Markdown.C2378A30125EA38F8A46\Microsoft.VisualStudio.Platform.Markdown.vsix

MD5 ed79480cdafc936eb701c26ae880ff58
SHA1 5d2a028c968fe61d5ea5d35218b261db41f9fd59
SHA256 09b53ff25331345e1693421def90be80bc0076c54aa89a818a6aa000b9924db8
SHA512 445ecf22beb241146d0c43d3b342427ed0013ebdf63a78387d81791c722dd6e9fec2bc62d81db391cea13176fc4cd6cbb414357e68f3129766d8c2d2ab7e164d

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\3HDB1LPD\favicon-trans-bg-blue-mg[1].ico

MD5 30967b1b52cb6df18a8af8fcc04f83c9
SHA1 aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
SHA256 439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
SHA512 7cb3c09a81fbd301741e7cf5296c406baf1c76685d354c54457c87f6471867390a1aeed9f95701eb9361d7dfacce31afd1d240841037fc1de4a120c66c1b088c

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\IFM58U6K\qdKQU5KW6r6LE1Gd9a6Uki97VZM.gz[1].css

MD5 3116a5ec82518e57f535b4a6555a17c0
SHA1 b1541be3ae51d4769e1b7eaea413e609f9a22b9a
SHA256 c857954354946e635d866468d64003d4067471fb56cc41fefb9618c1562f6bc6
SHA512 8a7f7d59d36fa0111ee85b7ce43448505538e60373646acb993543cd6f7e123e01fea2aa55f090001c11259fb1d9b6c6c1eb6b9ec6110eeb4f1f354167bc31ec

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\5JGBC19U\favicon[1].ico

MD5 0a362a1a0cf4cc6bc56d65db8049dd6f
SHA1 ebfd1b824377525e1588719e935bf4b06349cddf
SHA256 d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd
SHA512 9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ia2xzjv\imagestore.dat

MD5 8b92cf5b356206dde4a0d6c480ab8540
SHA1 8ac3e827cae246c7b4e070ae3b260aba6e72eb69
SHA256 d4d654fa5289c0c8f1d329f0389b33f7caa70b18dc76f1e8697f281d3d6e74a6
SHA512 3a3f947a3da935a26ee6fc7c601b75c872f17fb0636b5305ba889e91fe6fce01bebd6e28f27bcb46d090f8519c6c955ad7fe0d179541364917b76c6c0337a99e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TextMateGrammars.EFC5395A2BA25EFDECC6\Microsoft.VisualStudio.TextMateGrammars.vsix

MD5 41c5f1831040f76ba4bdc4697036795c
SHA1 17d86e5d61df1c3a41e3f7cec4b7c0703d505aaa
SHA256 16834c0805a79d85ed9b79476565ab0642d2e1001b86f3553ce1b85994a158ed
SHA512 a2bbb38fbaff6d56a6deb65273b4e184532bdcaefe687f477c858328d88c1b79644fd3af3cacfe20f77a0fce30be8f8d362d578932438a626c55677ac6626493

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Build.UnGAC.DA04D174AD161A9E763C\Microsoft.Build.UnGAC.exe

MD5 671e15c28e3286a23add0d2abea36ca9
SHA1 85cfdd760cf8e194b72dc12318c289ae4ddc5a1b
SHA256 c93f193b1616d8d3ebcd8ffaf8770d7f401a986c9e1a20cdf0d8775074bad933
SHA512 62bdce0c4955f4776081690965d59e5c721b7d4330cf35c882700ed10131fff930d87a81cbe5a4d8965b257043d5f3efadb1186614f512d7bbc60262f485c996

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.ServiceHub.Node.06D1FC5DCFCEE7E49FC6\Microsoft.ServiceHub.Node.vsix

MD5 840211949da94f52cb42806bdea98de6
SHA1 47db72df30f209a89eb5da395e5eb702655e0eb4
SHA256 f576cfc9d8e82076f17b48b4c04ee582df265484fae509b5ecf4203abad8a7d9
SHA512 fa8f8f574d5d6a5018650eb5c3bfffa153bfa9f68899d3f725910847a3061b11b34c3f081db0bed9ec162032845c07bcba73b3cd1eb9e1c23bcefa1e94b70b4c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DataAI.NuGetRecommender.0CF7656F7D5DD9A2501B\Microsoft.DataAI.NuGetRecommender.vsix

MD5 247c52c1906ec9227469764b5466942a
SHA1 b988c0f3c694d96a2743b5b8c7f43eaff6bf1ddd
SHA256 edb9faa4169259775e72872e19eab855b379731f3427a3ff0de1175a10fee2fe
SHA512 2876948d5052692ecc30a51ff439e004d3bce30bca7b87d0dae9f1b2133d6d16e100b9ad3655c7f7ee4a2575f988e8dacb3b0d4d506b8d73baddffc3b3589f6a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.NuGet.Core.5B5C0DF92DAFAB3937F1\NuGet.Tools.vsix

MD5 b64b94f6d33ea6c1499cba4f0a3de41d
SHA1 32583abd5dc535dbbb0c3edac9d364c92a9fbd58
SHA256 59a9b59067ccc86a4448b1730f55c567484cb47081cfe1ba280d9f0db12f7356
SHA512 588f6fcf44641c0ce53baeda907d026ce213dff40ffb13047d460a9859b511264a6d31c8315d6ad442c0131981cf4ad5ba464a4f22ab130b039837b4c68750f3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Build.FileTracker.Msi.D9C1DD803F2B42900705\cab1.cab

MD5 3093e3624fe1e6c748e1232ca38cd758
SHA1 7804c9765021dfe93c9358b6e9dc2cff9054ff5f
SHA256 e4a1e03ba6d3b909838e967701b5567adfb92945bf71c4db7d93906007b545f4
SHA512 2485f75d063bd22c13df573fe74995117d1ca8f3c568f9c52a342909fc8c17dd60097ce970f126164086b3930357d3e8fd9baaec04cf9e0269616cd4ba15f5ab

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Identity.88221615DD7E9552272C\Microsoft.VisualStudio.Identity.vsix

MD5 c7a42c62c770f0afa898a129b72e027a
SHA1 0f1240ce85d01db705e024d1162c4a42fb137421
SHA256 e168ede7d5c715a0683b9fb2a249efb6803e76e3361b64e4007d8af5961095bd
SHA512 827f4d01262c3eae25ae353ed2e852da0bf2cd36fbb663440141393616b69c2a35061ec1d28ced6a003e9dd1853d34cb82a84e860e92cb54e71ff6b7cb8e75c5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.DevCmd.Resources.F6BE59975C685ECD28C6\payload.vsix

MD5 af334240814739b4ad78ceca2d0cd17e
SHA1 d31bc6611287727cf65af37a1ed07083b50e495c
SHA256 06977c8734f66d9c1dd6bead91c7ba7294ab9ec28ee4b548e502391a4c789591
SHA512 300a103a733f2c9ba58af8f7b159c215883b598f531dce700e71b0dccd52360d6f452adae4a05ad15e784e3166989b889b38d3c8e4ed0163729c304a715342b3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VsDevCmd.Core.DotNet.3E122207DE271D2BA508\payload.vsix

MD5 80420814cc5870329134a825e357736c
SHA1 e248130ed71316ca097aaae27ae2e03e63377fc7
SHA256 f2bb0a5537b5533bd646d72bcfecd41c02a882bfdc7eb405373625e32824515d
SHA512 f3802e203ccf9db0125a54939b1d1cfb57b6919a5951d9501675014f52b14bc725d3663bc1a689380f4fd0584b1c352bb62b303bc39d3b85ed9b75886cac69cf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VsDevCmd.Core.WinSdk.880ED5C40A987E46E713\payload.vsix

MD5 80399f5131d0cb4d9f494b8ac6e9e1b3
SHA1 fbe99c09ba8f88966fd5a8d16bbe6b93decd7794
SHA256 5c63d8b9dd5d59ac8369f054a2a6cdd907f8d19c65ae2aa8ef1a791c29013efa
SHA512 9c3b5bc3d73072ce0e3bbfdb3f09567a4df881006da54c3069d0047cdb8fb66f28099eab71f5ba815545d18cbe8386ca4cf5f93cba07c5410ae54a457bb37dd0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VsDevCmd.Ext.NetFxSdk.021BD68DAFB6DEABDBFB\payload.vsix

MD5 8b28fe557344be3c1d750877bcf08c0d
SHA1 6b8206b51d1e994f4d1aa32a2a2db9522efb429d
SHA256 fea624f20ab29e143ce59ca3767f1bc1a1757044afb63e93cedeade34630dbe9
SHA512 148ce7bca2be850f97f7d1abc9cff4e14c2ebf387be39e48f9eba48cbd5c3d000f03bc3444747ceba677b28f1ca67c18c933cc3e69b2853abc6824a08c5cfd68

C:\Users\Admin\AppData\Local\Temp\~DF86083B5A15866380.TMP

MD5 449f34ae19173fae6011ef9876c5e150
SHA1 66f3302542b3c37b604bf4d474b7ee865e99166c
SHA256 d006d494fd47df8ab986619acfe1fabcf51978b4bf1af50ab3374d1f23d3d567
SHA512 3b9140cc44f8171aa2bfda58f15be4fd08cdaf9205c4fe6d5ca089966b6cb14d4b46232343bd9189d34e53378eb1900b46940aa9ada02fffce92e92c057349e7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.DevCmd.581A22C82C9FCBD20CB9\payload.vsix

MD5 ecb89268aec849ccddcc28ba16f7b585
SHA1 3dde7d48a3902e425e8306b580e3b1b9dae65eae
SHA256 54143c02b7ad95a3a4e35bddeabb921578c57b9792672918fbf46abab8f3c9b3
SHA512 a4deb4d7ed186ebadde47304cea75cf9a7a2b4f25814492f4164f36ba873675c89e2d263479293ac8f4d7b71501584b6f71aa56658a2b145ef2580bcb3032a33

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ScriptedHost.Targeted.040EBC79FAD0DD3AEF68\Microsoft.VisualStudio.ScriptedHost.x64.vsix

MD5 b10274364fd5894496a9c7fad8fcdee0
SHA1 4132d77073791c9f5d5d56753fd095991f964f8a
SHA256 f63a6149d1a4e0331f0cdbdba90d4debbea3399de59cdf1d8f3cacaad014fb0f
SHA512 52475a7e27c8095a4954711975e34ec2aaf8e930ad75e438c7995d2fe5a0abeed9a87002a111b2d400aed04b3a8ab179fb111010c695ee0677c68646b6ae8341

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Build.Dependencies.EDBF30B044118826B4A6\payload.vsix

MD5 17e2f956238d8ed50f8ddc8636d6404b
SHA1 80fc8a6b5f5d2ab17934044fa16123490a7fdb99
SHA256 59ade7182f10221028e718c91faf122c164c335a1a69d78073aa0ae94a9cdefb
SHA512 090c8cf0d9c46bd8c40d0f3c2aee66a35c626e3d0283ae1d1d7599662dbe0fde7b7aa94cbdf0d0abd5b6d0ecf8f2b05df9347552de1fdf8e18fcf435163b5a01

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ScriptedHost.1927B549147C50B9FABF\Microsoft.VisualStudio.ScriptedHost.vsix

MD5 84c4f4a0f7e1746886076a51be7cc445
SHA1 f49b3aacf2ba1ed7b990dd34a0eac2332f650494
SHA256 4f506372894db1589eefdffe28124168921ac377e9f346dea217a2ca932b6049
SHA512 3b6a1739b26ed63e76ea3ec17b293caa0dbe80632d7b08ac9cbfac978f106635a42dd042a07185f286d738c3f57f4995349c4231353b66df49f77a8cde468db4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Interop.Shared.Msi.88E44B053E49FD7E8CEC\cab1.cab

MD5 ad77c6d0215673443ebc57477a745718
SHA1 60b8c7847f6b5da12e59e3f54de5762d0ec4e6c3
SHA256 861876cbe22dca1ceb69861ba9abd25336b5b1333724bc806a6489c5b205bb6c
SHA512 3d79aded9185f6d9485caaf30ad601dbf0110d8493660941814c32886c4124bb48523072774cce5cb2f5605cf0e949abb09157f8abcc78b4596e56facd3338db

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Tools.Common.UtilsPrereq.5E1E70D70011E93C6437\payload.vsix

MD5 be8c3be48e3048f83e7208aade9da557
SHA1 3b88e91d1131416ab23c8a6f8cf48771b31b7dee
SHA256 3692432a0075351da66ffe3de3a83a64cc6a79b37fe132ed3b1b95539071d38d
SHA512 85c4c434f25fc0c341dd8bff5567a5636b3d41f29f17337f9e14789fff42452a806d2085afd22819d7b5f6efd731e2f750d7d49f1d9217182ed0748ad934aaa6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.MinShell.Interop.Msi.B7F47497C23703B0D1A8\cab1.cab

MD5 a3c4d225cd35927ca47bb673db650f31
SHA1 8bf67d25f0babda3dd90e1e9b3a076d7996c8b5c
SHA256 bb8c1eef9345c16f821c0b6ce81eb76168a99e4616070400a019e76c5f458272
SHA512 e9b72ab3f54a8ec8ca5754697e7f7316d25196a46900651d1ffdf738a066320db3adfa08411309c41cc1bdf1cae4138386224aa616afb6d463ebd7c2bfe745cc

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.Msi.75A4BEEB2A3CB50AB0DC\cab1.cab

MD5 436ee5e09daa2b0f711fe19710ced993
SHA1 fd354550e04dd0f7c2da5fe38b685b324426968e
SHA256 eeabe75a72eeff2d2d548aeeedfff31ec15c57e09b92228035a9f0b58e110165
SHA512 a9420ec0aa08b4db5d4746ce57b12a1ebe791464acff556052409835931a1307774da3bd10425703b7bfc18e7490d6c7bc930fdcc80209ea8c77f8fe668e346b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.Msi.Resources.566282D5BFC7EA28BD3C\cab1.cab

MD5 b78d93cc966801962de96912c991e753
SHA1 391ee2e97cdc45db8b90dfc2ad28fc0ef281a711
SHA256 68981b3d221604072733c28ff7661c3eb84cfeadd056cd947463d67bada1e282
SHA512 6baa4eb58e4c16a17212b99b78b111dc2287195c31440bc62f0f45c914e0a438aa660f493ce182223e0bd3a00b30a7f780eef9938235f9932a268212a773edf2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.x64.CF0C91F0F86F4FF548A4\payload.vsix

MD5 2f7a880c0629c87ad1d61acebbb9b725
SHA1 c4e31fc678e9fad46f6ae6af6944c0d962712f7e
SHA256 8ed2032535ff121375871adcf60753c3ec08640c8692a3b8c708f8862d6bb27d
SHA512 e68637931fa972af8b356dd89676890a64d9262e2d009db7d6fc67bd7a56def8fbaa17fa2e8f01179fb9ecf8a703674aa600229847fdd099e170dbd6ad2b00b1

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.x86.07C85FBC93848D59E4DC\payload.vsix

MD5 d94507bede85666493f6ce573f4520be
SHA1 3890cfcf229b860cbc1890bc3a5b95081f2c6e7d
SHA256 891bd3e342cf14c46b84385c6d11c323ad870ac8c615a85dbd5d7cd601dc5cf8
SHA512 9b9e1bad1042681735610a7b14d57561e7509772efbb4ac10310a9549dc28c16296ea0113550bdbaf733911564e665fd4e9eacd67b55f47526fbb2fcff4ef93a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProjectSystem.Query.DAAD799BDEEFB4BC1ECD\Microsoft.VisualStudio.ProjectSystem.Query.Vsix

MD5 f3353df523b5ffca6977c36d67080923
SHA1 b07d884701952f492eba2e3ae4556d55d17013d8
SHA256 ea5015edf28c23464051b545ef25aea99a2ea34e5c7792bed4333df97011cbe3
SHA512 903133a0675f5cc31d135392118a596a51d855819b0043c1b85933cf77f648f2086020739cf8808f1f14258cff0ac5521b73bfca75f0f954f4f9d56035e21d26

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.LiveShareApi.2A5DF6739986859936BA\payload.vsix

MD5 4b84cbb077c09320031f983b9ba386d3
SHA1 4de423f7cfc4d2a5f776232f851e6fd6521de3f1
SHA256 6ee567539296a1363e081441e52db38762f3b7ff84d9884704080aa577f5a651
SHA512 ef19e8d56f5a11b9789da676013de0e6b0f5590fa1aa9139396441e0bd42cba97753b19312a07e125d0d49bf1803dd67c8d6629d723bfde35a228e36ed34fd82

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\Core\Microsoft.DiaSymReader.dll

MD5 8b70fc0ba4b1b92aa0f6816cd4ed1bbc
SHA1 65691ebf1db1d1512cb7e5b7ce7dafa08b22258c
SHA256 7f3e7543321ff4c2675b94e56a4a32c935c11c82fcc60d4f6cb611cb0a8daadc
SHA512 97ce2326e24ebf7d62481a84577b038c8a721314b1ef35f6c2b446a3759e7b38a35074be2d4d2ee677cd47518a915536b62886fcbaf37d7c75bd388e4ce9d0a1

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProjectSystem.Full.2364369FB5F681D06338\Microsoft.VisualStudio.ProjectSystem.Full.vsix

MD5 41cd1f5f19709d01c957a93137c7e58e
SHA1 b062f1658883de264ee2208a1e494b9f012a1f97
SHA256 be7e839c2585e4311c0c98dbd112f1665bec9bd3177d7b3248fb51d5611313d3
SHA512 e1228d872ff986cdf2663570cc73403793e53b3677cb853ece32f5a491eb2c68afd7a56dc6c5490a820877751a990a4238f2c16db54585c27d47b3f3ef5bf51d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ClientDiagnostics.Resources.B0BC373BD99664BA2846\payload.vsix

MD5 dabb83e791a0fd49d7d8f09c4f2ae640
SHA1 c8d96a6f3c18aa0bc111b93072e520ea8d5c3869
SHA256 a8550517e2c4bc895bfb6f9a3025e599327b7712b2896889bdd215abdd148e6a
SHA512 e9001e95616c0588f209fdacb6ed33ba537d1d14b2db5961e4e6316daf127d4ea7b476bc203a8d752870f62e53ffc2ab28a50649953affc03896a3cb976dca07

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\cs\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 89262a861e4e071c43ae6f5a9cdeb93d
SHA1 104783eb5992b5c1070c1af1cb57193b772e5d90
SHA256 ddfd15a902631d3c5dce982203bc07246b52ee86dcfe837e5df2d13525fae783
SHA512 4ba5719d8bebfbb9ec7972f3624ec049bf480f170587dc9fffa164caf4e4301e5bcf64fe2c73851b7dd06967f4d0ab726ffeee4d05ededc3e4b5d3b1c9553f1b

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\de\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 cb34b0a4a640b5c84527dadfde32b8d3
SHA1 fd7d3ee5884f35ec1ccd20e805ffa6e486e2c03f
SHA256 d9f43c3a615e8f78110c639fc2452464d5568d67b80f1e82d8bfe2f7caf6206e
SHA512 25b898e6d3f29b25886758e3030954a9fe33d2cb3763ca38068db08b4615e6008a62007a864e11b7c3b77b88c2503438e758e793ef8c7a0f7d2dc4fe54b1520f

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\es\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 43145f6a4e7a38bad3c9670c16c3bda8
SHA1 77e91e83645d1696f95a6897bd37795f726db304
SHA256 945a2f79127702aff16da7ad20086c83f073c058b3c12eb0655e38e9ae85f450
SHA512 41d51e5f622ceea6ca1e659e99b65e7c0c8896f89fc12645fb0061f35e889f56134c3893a1bd47e40eb83c5b30249bc573bdd52170f68c00e9123ac1e16d0111

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\fr\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 867e20cdde425c10e2f9fbd32d301685
SHA1 b265171e5114dca7b1d26d907dff26cddc8aa152
SHA256 3e088f619095dc412394099feb76d05ce4d60609b82ff4bdd3c5029aa15cc2f1
SHA512 436ebe48f28ee0d5c6f91cbdb132151b41c020125d4298aa9ed240ff780535a18a67f01dd50a61449b3f01b23592413616968538d86e1b18eafa0f140a4924ae

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\it\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 8548c03f8097985242d245feaf8a26b2
SHA1 7a12f72199752718902104d4c2bc536d97a66911
SHA256 bfe07c2eb84024c345da79d24fa169076d7d178f49956461aa50c69b2b9295fb
SHA512 d1d54cefccfef0f41306c5bf37618a163415a59fa529778924106922b7b9d3039f16a15f2f93b9d6584e47d957455094bcd6af509087e80a062cf41fa8e3ea26

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\ja\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 72ceb46483ddcf6ea71123bf3bdbc6bf
SHA1 50d182e4c3aecc40aa277d75f83777316246ee2b
SHA256 b97094aa0b77fa392b372c965511b14e55da03c8cb23cb712f9c23b4df450c65
SHA512 fd1c2adba0013fd02327e5e727349882762253dc7d98d9b8da7363467befa4f125575f4114169e318d427b10fae1d7094023f89039a33a489d8c5c04dc864b2a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\ko\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 5d0e885b36a46edb4622261b9b54d322
SHA1 a498fb4ea6f2ab8c4c0b393b3fa4b2c08889de4d
SHA256 4f3e285815a89b406d8494f801e9ee2949496804534594bab2240fa797a12bc9
SHA512 cec5cf6e0adbc4af2761c0e31cfeeaeac2a2a95a0b4487f628293703b2819035b94dc911da1dfcab7c01831cb791766a38baaea49c7c01e049c6aa3cbe9440ba

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\Microsoft.VisualStudio.Threading.dll

MD5 972d81a9ecddc12f552b0fd6587a66b2
SHA1 6e5e90d1773bb9864113c37ece1285d5cb8d3d7b
SHA256 b9a18f8297719b8bf17d540dc08d51fc882fa226ca902954dc3b0957140b5925
SHA512 9a8791aa96a6cf47c692081ac4d8d444e40eeefaaa824c9c9e0e933e1716005c6c5d19caaa97aea1bca975c76328b2c13f4a9b99c327185dd4fada87bb346787

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\Microsoft.VisualStudio.Validation.dll

MD5 55ce53f1e140d12cabbf2b227d14b666
SHA1 097dfd15d81ad308b02d272c41aca9388625ddad
SHA256 3882be8f796d77c645d62d7a4dd3b29fe497ce1e0a1da41a9ea26ddf9ee69da2
SHA512 514eb1d48601e1cfb77814ff10966de184694f2cbfd4eacdb18f947b38d9a196b49a4d485cf3aed6770a86e57690966365edeca244b3b8b8783c808477c6199e

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\pl\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 f7bf22ca5f827bc2293ccd64916f12e6
SHA1 ff27f511e091b181e8a4dbfebadc28173db14437
SHA256 c8fed766721ac219b347622ac2f1707e4e589ac107a310991eb2d2d1c0e19cbd
SHA512 4792af93b05561b80df5f23290dc3af8104f510d1bd811e6487044abfb9aeb24115e24f67e8a29ba46e47c2986a4b745b533517064d01d677deb29b82e2bebac

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\pt-BR\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 f15da71c9c0bed018ac4c1e4acb2cf94
SHA1 95cfb5bd029f4b5d7c940fbc6fcbba0bc8a0f413
SHA256 c3daa98a20ccf6ffb7d7f56184baaf0398c7618774e8c5d1789a371055ff039b
SHA512 eb9cdf0f78262c3a6c748d7dc82f0d77d20ac6117b3119e4594c061ed602eda9a281a8cb2f4c9a912db2b1185784428180c8946eae47121638a752acd35db2cc

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\ru\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 85bf0d88d86a97763f1e14346c05e970
SHA1 69e0151590179f296f91e3b4a5cc3fa02cf041d8
SHA256 65591f6f7fa0d2d7a08042a881f580b01082ba96712d0bda279f7febbf790c8c
SHA512 822145b9f5ed1c559aed896ae19499d7700878a3107159dbc08a46bc718f8a7eeeaf498898a305c7027b6af9145528ab93f968ef7d0aa6f7d13f0a34af6dac11

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\System.Numerics.Vectors.dll

MD5 aaa2cbf14e06e9d3586d8a4ed455db33
SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\System.Collections.Immutable.dll

MD5 af7880a90c02c0115cd169c7182ab378
SHA1 6e3ccf50bb1d30805dce58ab6bdd63e0196669e6
SHA256 d5ec0837bb176abf13dcd52c658c4e84c5264f67065b9c19679b6643f7d21564
SHA512 5377f83cfb8b9892727ed22ba0b9b1a75b2d4750caa6da04f4eeb0f6f9c0f75949226b2ca00876ad1f4c9de02f8ffb1cbcdb3048fbe6d26a6119148282e818a1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\System.ValueTuple.dll

MD5 23ee4302e85013a1eb4324c414d561d5
SHA1 d1664731719e85aad7a2273685d77feb0204ec98
SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\tr\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 2beae4f2bcae0a23dbf2ec2cf32315de
SHA1 3874d8bf86a212170f452b6035e2d0f81a4207ff
SHA256 08ac20cb5c259709afa90ab56a63ac8e45fe307ab3e83631895861472af350b5
SHA512 4a488079df2f75e1a3e1cdd84180799eb8912eef931531aee558f9b924e9413294ccada869a7f7bf32a0a660338ac5eb9323a727d4c8fbc07699cf8b72bac4fe

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\System.Threading.Tasks.Extensions.dll

MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\zh-Hans\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 994ff34df82322de54aa43c8885abeec
SHA1 0850e8ba34b921c5e12a7a8a371512b3f8ba1185
SHA256 db62b35b1a2b03588a205dd7944642cf9e7ffc9529c7db577c9c50399d57280d
SHA512 adde4e374288665340975b500904b218906fea2edc98dd06f5ccde1ea59023b0636b50469d0b1af8f544c6f01cd64b352bcc393582d7edf87ef9d499e594e0a1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\System.Text.Json.dll

MD5 63f1d0b53ce47b0ac3216281c8bcaf24
SHA1 090cb7392ed07a94d237b5aa2175689faaf49b7b
SHA256 de069c408673e62b098d6e37e64fc2308f02f3f16cb45e051c08b52fe2d104fb
SHA512 386294e2602642204ec02ff514d3064ddb7ccc6f56e955176b09b23bece87fbf29c12a532e13b77a918842b05b171fde6b4d48c7f6567928d9337a3883fef521

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\LanguageServices\InteractiveHost\Desktop\zh-Hant\Microsoft.CodeAnalysis.InteractiveHost.resources.dll

MD5 baeb62f9fac6cf1cd12744090ff192dd
SHA1 1b44da1135adc562443201d487c3fc97dee3eccc
SHA256 905954dcd6cb7c4588b28f9e47c6a737009b12b331775f93307146a81597903c
SHA512 34392edc8ce9648c699593fa23da5f6dc9de78afc20f5f8a070889523837682e6ab00594aaf40571f4115ea9c05d18d411978f1402075e2f3ff68c7010a3d75f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ClientDiagnostics.Targeted.58CD26343193DDA27500\payload.vsix

MD5 a5f31c68f3e06f427745fdd7a969aeda
SHA1 c4c3e55ae18c5d1e245878e573b6fd41ccc3e495
SHA256 3c124d3d7d5c27485a37f9960f26f5ac313a44dffe37bd74bae64500bd558e57
SHA512 062297d0dac0b9ffe25e1822358a51f176b3104ac0a9d24f56025560b844dbb8a2d07517ea5e7c86bfe0b0ffface93f33bd79b67e949a929321ba83dcaff8ac5

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\EULA.rtf

MD5 3a6dc553ac8b8c4f5f90b32e4aedf209
SHA1 6aae1b45d6e37290fb9a40c69f3e19aaf7728132
SHA256 95a7284a9efc3d10cba1de3e6467f9f751d0a960e10ffffdf5daea80d17f9768
SHA512 64d518b56a8c7dd11d6185606bc94117732f5deb7591915199da6a87fc0044d3620e43e87a53cd6416a49fab674f9eae1fd64f75749ee92efb020c894b06359e

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.ResultProvider.dll

MD5 d396fc119f7ae4a090976e2ddb78f41d
SHA1 29ee495b938571b256e257b48017274da873808f
SHA256 4ce69e96ad78ef132fd153b32231881f8ed5689374b0b2b56014b1f56a6f412d
SHA512 a52f8cb7c1349ff3974d39f95294f62cd8b3f6ec9135cbd89da3c8042044a077c99e0c2cd68916c125a85b85be2d28e11fee7e74fb5e7856bdf4866a691623bf

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\Microsoft.CodeAnalysis.ExpressionEvaluator.FunctionResolver.dll

MD5 272afed536280b15d1611b39550ced60
SHA1 33baaaf3888c864ba44e3026b92e77cfbb9528b2
SHA256 1f657ef2d7f29113ba51cdd87fc374b594ca697511bb6c2292c2609d0d5315ad
SHA512 a844d82ce4d3ce5be8f4bd27991ef1e7ba05eb2435d3c6e1c306c807fa8068e20e69ec3b7b92c8f07b652b1a1661c173d6b9cb15345366b33fd6fd3303b1574c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\Microsoft.CodeAnalysis.ExpressionEvaluator.ResultProvider.dll

MD5 c193e27f21c8ee94d2a2f02fd05a89ce
SHA1 0e218a5705022cca45d5971c97d2ebbd42d46cb8
SHA256 01c7eab67c499cddea05dfb8a400c06ab8167fa577f05012651f313d3c4e70b1
SHA512 c4c1bce819d849bb5966c208a65a84c5f731aea8a3c4a55de782e32792e3e2df9684e07249b8692c6c1a9c8cf5ffe4f541b0a1594cf9e317ad8d6b769ac84e4c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.ResultProvider.dll

MD5 090660d0175ddeb22ab1d6351c8a3135
SHA1 3a983f44153f0ba869f10d2882368ecdeab32c3a
SHA256 4930bc4392168f513fadf14fe306b57ad3ce85fc7c375545f09e96fbd6d59e2d
SHA512 8e48a6c236d51f467a5a0be2186d8ece8907c8540baee99115c14ffa6e0c0f46a9036b4df3a12333b6605feb24694e6befda3be696cf85d2dcae5503603c1748

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\VBCSharp\ExpressionEvaluators\ThirdPartyNotices.rtf

MD5 07105598d59c2c5aca62ef242918dc97
SHA1 c12675efe3e1eabdcffa40f71c6c9a3091470698
SHA256 e1c29d9133e709040d7d27f94ae1bac1085208933e19fef986aaa222eea79525
SHA512 fe19a030e0d27a8d1b0382c1f97a0ca9a3bed14c43a9a2a97c5eca5640d53181ce1503a384fa12013fc22113ee5141320dd6a24a1cd6265fed507650c4298522

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Packages\Debugger\MCppEE.dll

MD5 8d28f74ddb733094ff144eeb93971cba
SHA1 16d5ccaeb3beba5c0a173332aad3fdd7c57dd618
SHA256 f018201164e0c6ea93f9504febb8077e21a074032aa58b939425b13bf56f3766
SHA512 28ff4c513162dce369797024860a58e8e6e7ea0bab05476c27db168e851e7139a507c5c9d7057ce19efabe0af46cc68bc319cf515589fe021973aa1dfe73ee17

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.Shared.Msi.DB2C2D1F34F667A9032D\Microsoft.VisualStudio.Community.Shared.Msi.msi

MD5 8120bd5eb6a650d8b83470c92e675aeb
SHA1 1cf0bd33510eab98406aaf26ff2a31eff1da27b3
SHA256 fdd219944cb0fe9894d9dfbfa29ae6da0ed6bc88ddf3ac7a63e49baa01a32942
SHA512 9e7a1df40db282ac03f89767f40c61dc5a9f2e021846693c3ee56e01688f66bbda3d19652ef536bc962e37499de8a5260a267423d715207d4325e27211ccc466

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Community.Shared.Msi,version=17.10.34804.30\cab1.cab

MD5 c9865d74b1b2991e3546c7f6dedce10f
SHA1 baa6da03f0e4b70b802b1e49559375ced19316d9
SHA256 7c2bc2f1adf41b9fa8735bf245137ea090d98a674b0b0a35ba2f277ac20779cf
SHA512 581f68a624d6d6ec2f5ca10786eadb51d299303de21178039ccc24488dc91fab5efa00b6b5ab00960ff7d49e6121dd41802f0e735efe8fb238c865be68467af5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.AppResponsiveness.Resources.D191A8707CE689C201A6\payload.vsix

MD5 7c36238c746d42b272b5182a914a8f61
SHA1 c0526c6f7eba2a5ccca8c2837ebcf485f5afeadc
SHA256 fe6f768adeea20675bcd6e611ce0009d598e89a69ea441509732e8032fae2e1d
SHA512 d6e59c3d81e83cf512c80d27bf7bfc9086c3156724ffaf1785bd22abc68389d5151aa2738b1dd3595fe22ac5182bd02e1e24110d48980db6aecc5dc981062aef

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\Microsoft\Web Tools Shared\Configs\features\configs\rabbitmq\rabbitmq.json

MD5 0844c58d51a5e9a27705e3d1fb607efe
SHA1 c955aaa3a57d538fb353b08c3cec7c9680af45bc
SHA256 76f921f98c200e33ed96b1a515b5a7f52c1482c12475efff008473f2ba1a17f7
SHA512 905113df012ca74b1ef5415bcb6f857e031fad8ebc44f75275bb635894f60aefeeae090114c9c820f5e1dd9ef6da6996bf5a30c621c3f008427d6c935844a839

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.AppResponsiveness.Targeted.7661DF84CDE883C533B2\payload.vsix

MD5 baf782e59c272e5270f056b665ede2c4
SHA1 09cf3c971efcaf3cb57bde897fcbdc3d9ffb626b
SHA256 fa95148a84dab52617ab592d021e3470a050fe4bc7eabb48b6b7323fb9858774
SHA512 bbd8a19976a9dda734c14405f2a86514e3342299d30585228ceca2416e0a6a299c1288aa4b67c1fc61835f60aa0b347aabf7eff9c6480bac8ef59304ab26c0a3

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ClientDiagnostics.DCBAC897131DD5BF7907\payload.vsix

MD5 6349618d61c7dccffe4bed8d3c5b2068
SHA1 510bda330cefda71c34928da7022d8f10d97beb8
SHA256 64570c687f43bf29a45e506ea834a2d696d4abf45cf6dd9d34fb2913c1282476
SHA512 cc6bd06fd8d10b3bb66bd46015a8981b1c9dbba1bbaf98231ac1791acbde15e9f1f3a09bfff05c98f58a4267993927b63455ac3f5d5cae85615f8e6e5c69ea74

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.AppResponsiveness.F5C4CF3413351E9B22CD\payload.vsix

MD5 ee09a3bede28a5c5c2e0cc034ce61e47
SHA1 0b0d49967c7620005f73e9a751a825688f95b984
SHA256 a9fb3edfce958e9955340b2386ccc70ca469e091634ba06afa23a010c77f02ce
SHA512 3d18c06aed4cef4db2ad9ee127bc68dd79db4e4e6a9e3bdf900e3d3be73e036efaedb531f18c48aea20945563ca31a25e4cce44ef50fd1363e47385161339be1

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.CodeSense.Community.3A815A59DC4F60CC041E\payload.vsix

MD5 29ad26ef22267bf2904aa216652fa1ba
SHA1 aa231e459c969efaf47192161e6f08377a8e7974
SHA256 5b5604d849953c559cd1e0b374890fc4f50f51430075c48728876594456f97fc
SHA512 09712fb8a11ff49676cef1b6518793ea5c5b79c48f9fac1f14eb5b94ff3c8f613840c2b5b35a81c119c423d659da82aeb58f4806ac90b07011a77ebaaca431d5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProjectSystem.466AAAFA399292CF7A5F\Microsoft.VisualStudio.ProjectSystem.Vsix

MD5 8517ad9afa7e7c71b4422d95a259ab77
SHA1 7325af9aea79ee5f456c81b9da318c0c729391b7
SHA256 819e21216844eb3550b97b830efdddf2e8c5676a84950c38fb4b2029875752cb
SHA512 0eccb7bf8caef2c6e8b1021ef9a6088c73c3fc82a0fbf20130ea2eaab4c25f239879adba8e401a26e5491bf94e2805aa4386b9869257dc55df2d42e88c3a4a4a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.MDD.E19C7F9A8EE6B8F02899\payload.vsix

MD5 3897b4ebb2b98968962b13bb6056bc7b
SHA1 d823018aeb6b120f0767c9932ed78d260155a29d
SHA256 622e424a3bfe8485395beb6024c356f7f2fe567e4fda17443355d95d936c5b0b
SHA512 ce8b3e020854d7a2c94e0acd0f6072130cb061bf1e19e34b4881e85f670e3223e592df35ad975f54dd62210542b22cee8ef2d5ffc9f3efa47c210bd857502e4e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.x64.A1494794522C90F22C11\payload.vsix

MD5 f4c55ad1f75284ac5e8e1a853a489aa7
SHA1 50ad0d24cb5873bd8bf3f7b5d6dbbd83169691b5
SHA256 40b8ec8c613464d8a8119898e801f6ddf3ae89f1cb72983bcdaaf7a369f486e7
SHA512 79b633036b0723b9e85161e22790e23ebacddb4b87037e0fa3daeca38ad1533b1a30398876c0a1824c499569e85ae6f82e11a3bfd7a644867547b7c97296e99c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Net.4.8.KB5003304.FD26DB882CEDF8F47D7D\Windows10.0-KB5003304-x64-NDP48.msu

MD5 4b87d0ad27c77de3861043c6f5295bfe
SHA1 081abadf4c08655bd7fb5ef398c7e1cc6d6a303f
SHA256 188325e83c5c9489209f70c05729ea2f0694a57d80ca70bd1484ccd8b00f9e79
SHA512 c65df3953b8264dcb0297f265125df33d000ab1d8440d1c882fdfaae3dc9d2918d805f876d6f5414db130e171158f979bfa0be4ed3f3621b43bfa7c40d028744

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Community.VB.x86.9909F1F75044802297EC\payload.vsix

MD5 38516049e36e66bd3f18c0a70cb34e2a
SHA1 5f5950f5bf735b3852ab7c02e62170b708b935ba
SHA256 9d3876613c9cd5a5bc1534994445e35c7934a5ba8b387abdac50efcdc0fae890
SHA512 59e30400db7aa6c78655572c417a5646a6ddcb7193ed25511909e48247a62e0d7987f90a0082b5297f2fb7bac87c7d0c2cc740a23952dc40dfc2154a49c507f4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\TypeScript.Tools.B30EEA03FDF0957E7E39\TypeScript.Tools.vsix

MD5 f7e06adda35d23ba1655ad10d043c9aa
SHA1 33bacaafe96c0f984bbcc884d77c5de393c79381
SHA256 346b90f858a211ff1684f2626405f3fde0d0492c3333e14382c087fe17d741e7
SHA512 7425ff025ca9cc5f2968bf77f920a38a36fa74d4b4294a168e748d129388993d8a445785aa5ababdc8558d87c7013d3e45f83f6e866d57a077ed0590f20d6ceb

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\TypeScript.Build.2BE024D7116D6FE090F4\TypeScript.Build.vsix

MD5 e68950cc47335905143d386828e6be65
SHA1 e6ce9c4cdc2d6638862a5348c70d5a682637a975
SHA256 be9db7a1c00e2936d61cf4bed33d45ba0ebaaaf2695694e80709331e2facfac0
SHA512 d6eaf2e74262e28b292f92db26b1b4383fc5ab17341a6cfcd15859afc6540923e5ed195b7d63ee7f05825e92ec51d2322e4bc08d4bde0138ae2489455d667be6

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\TypeScript.LanguageService.BFA713766BCF0DAD35F4\TypeScript.LanguageService.vsix

MD5 cba616a64b047dfcfc611e38d065c0ab
SHA1 8e85d487d5ede4fa462b4798ed731463f7eecc7f
SHA256 9e100d781688b680b075a607dd7ca60d2f9bbc3af3d6d2caae654f95880bf32e
SHA512 961669735c11ed5f4c625ddf31ee8340ff740177813a5a57208aae97144c063c2224efa1f263d2ca94b2f47d84d1e84ad8fc75cbc6521b10f37990ffc115b23e

C:\Config.Msi\e5bba4f.rbs

MD5 b2a6dde37cc7975f0246842a98ea8fe0
SHA1 2421305b87964efe2ed56c44d74a2e0384e61776
SHA256 9e734b8885bf29a7d5b38767bef5668eda253d54f2078ecefad666cff69cbc84
SHA512 f3246eed8568921a8b713a4c808a3787c048fa7057027d7184de0a674700786193583a3a0a428a2a8cfee08ba53e42b10048f1b859e4d8655113b0934bf6fbde

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.Build.7A6690EADA6671048E65\Microsoft.Build.vsix

MD5 fb8a714c0b93365bdb64b3e4503bd767
SHA1 d9eb13c31079da0dac86cda1c2d4d0522b276672
SHA256 b254298e48fc334ec72600bab1d8734bfa083b72ccf36d066ef33137534df0c3
SHA512 c72659e6e8d4f776a518f5a128862bc32c3fa3260e5fe31ccc6b677df42fc464b033e4db6dcbf291ae1d54ac29752436843082e5cabf2ff88c71e8769d14dba9

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebTools.WSP.FSA.Resources.1CC0A4735EABD0BE13CE\payload.vsix

MD5 c2b8353bb2c85b54a67e6faf4a4067ec
SHA1 9de51e9f41513d6e1ccb975ab20154e14b06d4ec
SHA256 77f810319e71439d4ae38b32178b5a4cabdcc67dc601050be59ddf93e18ff490
SHA512 5deda4a5a5c15720c00761cf59131463d5290d28ad1d086445392b0addf2f5aab84f2101d71b03138b63ce71e54f90d7c84af28ef5003a6d3d4cbd6fdd89de89

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebTools.WSP.FSA.9E14AA12E737EFB87F82\payload.vsix

MD5 50385b7734bad4f6ce3105f42664272d
SHA1 79db3d034898e1bf60fa8426cd81f67b3e0afb97
SHA256 057d7a8e25a8b912f9af348906e8b4f4322d3bc34a9082a592dfeabda9ef4d19
SHA512 5f564d3f0e5950f6f67a469384db01a0f395b12cb19d0fe297db9bb4a0814e86f801f424b6bc3e81b24f0c3bb3813a6ea1db16efdb40b1e74946d6c33775dee3

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Client\runtimes\win-x64\native\msalruntime.dll

MD5 6bf1d412f82b6282142899a9e4bbbcd5
SHA1 21583e22b3c7650b57d50261f636083960cd9bba
SHA256 060fb56757da195e86eb7363c0e9d38291dfd1876bf847c71ef4d0bc49cc1d2e
SHA512 e7ceccc890536f8d6294175cc437ac681f0824bcebf98e86e086792d825201b7ee60292ecf94c025d912b850f6d0338a356434ec62dea2918eab94384cad2ee2

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\cs\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 6df424bc48f41fa2f94efb1850b2ddb2
SHA1 8ef47fed67e2833003fccc5d0db10300b327a892
SHA256 8cfcf65b801087615324fba53bf41092d6c284bab0700fb8b6cd2de842cb7a64
SHA512 a6522c99f2b3671bb4d4ab2c53802c357bc205b25271d06cf3ae468e18b39910c0a61f8544cbb00ab40d6a8925e01a7894a417ad3b18fa502cce7f1944862289

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\cs\Microsoft.VisualStudio.Validation.resources.dll

MD5 5817faf9908b7bdfdb0a9002007616c2
SHA1 3acae4e2ce7a61d0cdc5f59c1fb72ed1fcd0ed09
SHA256 0e52c3a1cad8ff1b8336cfeb0f615f9a486b2801ebc3e6a952cbbabd0aa532bf
SHA512 ae04a1610da16ea09f74dbf83d4f63a98c824233ada536e154c2e225a74dd6d21d2a858b3b8ef47dbc4be29385b4c71b7e7483190d8ce22f171c15b8a31a5c16

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\de\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 09c598d5f1c98c45e721e747c92a4d93
SHA1 af1666fbb443db43f60cb1a49222362c5d71aecf
SHA256 1bc733a4f1c10ee54d707e0f82404df46d46ed95254c3ee87dff9496a540f0f4
SHA512 10e28ee40c991c3d003e9c140e16eba0fc7cebb983dc3e8bb4a1adbf89374daf350f6684bc2d98bb13e4c1eb91b98216962b8dfc75b5dd8e81b1dbfa9f35d3d5

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\cs\Microsoft.VisualStudio.Threading.resources.dll

MD5 7b28858d652e00f2a056632cb638720d
SHA1 8164360b04311533a20cae912c64d037ab9415eb
SHA256 d727b9b3d17e51ad9162316dcad9d95bb3799b25f3389d62ec2756e989473409
SHA512 80b3d9108a9ae53291887fc06b9434df65f634cd678dc079abbd10bda143f48a816a4584a333b65b6e2dfc2269a5df801f5a9e6aedc6667c249ed193feffa923

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\de\Microsoft.VisualStudio.Validation.resources.dll

MD5 1b3049fdb2c48d56c12d9d2f28808db4
SHA1 7539cfb2589b36be7fb677ea4f10d276e07fe459
SHA256 d12e592e707cf304c073efe502cab2f458b4fa8d75a5a3c950650512d598c9be
SHA512 8ad467f31850f01c787d958e4039b624eee02cf5fced6ce7ef01cc88b5763192d92b704c4187d5c28c5a9b02d565ad9f9726845b852db03fafe240e84877c1d5

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\de\Microsoft.VisualStudio.Threading.resources.dll

MD5 132430714b469ff5bc7cc05639c52e98
SHA1 5b6157df22cdfbca21f2fbb81e86d1b873b43721
SHA256 e53f32e3a57198a42b719d6d17f0a66fefc9749a77f41796ed4eeb4d01495d88
SHA512 97bf45e6be98b24f8f8f342f20315e9f76fbf0441e64fcb8c3e37a335ba0083b6feb852d0da9272bfc3e2bc078786f1ddafd787695d029ea12ae2ba06a3c09fc

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\es\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 5a1db18f90100d81166f75f096e2f4ab
SHA1 90bdb6ef4a39ccbdb6c7dfa14aa2bc51061362a5
SHA256 00cf3368ea561601d1d8acff83b589215d6ebc5c7c50f400f622536a0e77027c
SHA512 a281f02bdbbcc3b885c1d442e151b5d1cbcbc976ca31acd30ea48ff660b023884cc429560236fb7f3405d9e61853855b88e60218fbdb90e81626a93cc58209ce

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\es\Microsoft.VisualStudio.Validation.resources.dll

MD5 9d9845d80ec7cf8aa85b9ab9439fc6a1
SHA1 ee749fb754914a02dfb2ea9f823ba4f729d6ada5
SHA256 9e14c688356c7f3169c054e4040fe5ca0137a0a9cd4aee9ed94538336cec954b
SHA512 d8b91fe36c23a95a456838e8b9c87b8aa3868a93969400685e2f0ba78ea613b28dcb7c19f68e91014a566489744fb2aa59323f0aff0075ed0823890d8419b98b

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\fr\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 0ff1c23809446198de161c0fe8637717
SHA1 ee81e68bd241d2f8fa9307cd8f30a5dcf4b5cc93
SHA256 3eb06462fae5b23621f0d13eaba3e5bda69dda8529a32d9b5f8063fe38424103
SHA512 8501d9546a56c6d7f8f45df30e866b25e5a5a944f2dc1eea0439908b240fea0db6641a94725075162e487f35d805d6bbe127163e41f2a35354e9c3463cc6a85c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\es\Microsoft.VisualStudio.Threading.resources.dll

MD5 760d58900c039d286ed85e8f51d58262
SHA1 a0cdc248fc72b3e8050a621a70b7ddba912cca75
SHA256 e992aa1e60c3e0907c7160032a128ccf4b72982e69b6fbd7ff8e7e2c5f2455a2
SHA512 7002bbd3ea769c2d020a98108be26f828e868c7ea62e9d108bc13a7065ebd0120ab799689768114ced560089506d616b468fd298b6f6caf5b3c9727328f66d07

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\it\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 da0ea24a27347ac4fdc2cac731300684
SHA1 e4af6a6cdd38e083be784d67efa6cc32c52dd9c8
SHA256 7ca92f69c60006bed569cc563ea068276b5ebd16efc852396705efebae257d7d
SHA512 562c83c4c9897b0d6993656c75f8dce033f04bf646be382c229f1c6237625480ca53b1acef23c6cefa4ed448b022b24bc23dbd658f6fb46bac1396cb5a1ae893

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\fr\Microsoft.VisualStudio.Validation.resources.dll

MD5 450266986b784cb56b4570607ad7d751
SHA1 a49fc96f0f76c3ed66d2771c6b5f0dfedb5d6ec2
SHA256 0342d492f8aac5183e159e7a857442831a970dd827e4c278ae471ef767f6099d
SHA512 10c474d82a17f8171f3ae11816c92e779aa99db1e0f5f86b2db964c0259e514141823a03e77cdf5fc89c061ea28a71e4b6d53940d53ff925e0976a44b6b96fe4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ja\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 9649909deccaccff34005d2b9b12c62f
SHA1 7a58cabc5f9e41c18dfdf8ec4f6315138aec8715
SHA256 54ed6b36474917d2cecc5c4f2c8e1fce415ee242180c60aa8f509ddd4d9727b4
SHA512 242e122dee06ddcfbaf3bb8d008d7ac4287c420c597f25d957d0fcd318071238e5220374cdcd4c5649d7be8d03e47675f2458d48b5d963a4fd85c346a60fbf46

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\it\Microsoft.VisualStudio.Validation.resources.dll

MD5 1f5f286b0a1a1dc62179a3e98c9744f9
SHA1 5800e709ca9face0de0d5a5b7517dc461e7d6b5d
SHA256 8d8e5235ece95631be39d3800a29d1faf71eea85ba437578ef5fd70ebe449055
SHA512 e01a77ccc681c53b033ac0e442a9220ae58a8000483f9c145800394caaa11d205cf959abf8bc68ea46c53da6ab60437d5319746d3816b11261f413e015e70854

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ko\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 74bb2375714cde6ab4eefe885a0f6c0b
SHA1 16da18d75ab09f3a4dbf4f609171da49f6d85efe
SHA256 46143cceaa4213480d25504c9999473514ae7d195baf44f2a94700679c72fa16
SHA512 9ea13a1574da8b837aa52a7cbc35f643baa7b2153c53bf654b1d39a969c2b2ad380cf48997b8296ea3a43896404df7040e29cb9c0d2bd49d0e75dc790e3fa6da

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ja\Microsoft.VisualStudio.Validation.resources.dll

MD5 6de31997e0463d4537349fd8ef47fc4c
SHA1 d18e8bb3d0407adbc1096c01b74e7938a827795f
SHA256 6b5c15e7ea3c8f5ea666eed98054df40a6cb90054d421ca219959bccec24d144
SHA512 86eeea366abbcab2dede83485733b60eb3444a435f47472c1ae7b34432344496275198c6c84dfcd535cf8e5a862019101e08b49d9b37b307859576ca2a0e3d9c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ja\Microsoft.VisualStudio.Threading.resources.dll

MD5 7342bbd0b3d8478e84ff6d199874e8f1
SHA1 46ddb70ea1ab0d389df6c3118dddfc36ef002fc5
SHA256 14a8b7e7e5291a187d6d8b33477d77abadfdba524c02bb6049f5ae37c05fe45a
SHA512 54e4f819b1eea8e853e5058f0828559f789c963b83135a3ca7c9987d165d6b517c8a3ea5590cafa06beeb4cb22ab7181a433431cdee272985a1141d99e3cc2cf

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pl\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 347502d058ff9b3d17db74f28636eaa1
SHA1 1a5e513666186d2fa5eeb7dcfcb0e0fc682b6069
SHA256 e0a32bc05ff0c33992c884e393db916a9b1fdadada285bbfb7461879544077ff
SHA512 deb350758383bea03aa5d0db04935a7a77a68f570a2fae43588f1704ea7a36a5568bd502a1dda75cad792d54188e2b99174bf13ac8a0c5ce526ac0e59bcfbeb6

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ko\Microsoft.VisualStudio.Validation.resources.dll

MD5 bf65dc4b2dba7b64c3be49376109fffd
SHA1 07442a26510087e1ddda35e82b38123559a76dd6
SHA256 28c4bd46f053eedb391771f8517c416664d728411a2dc4667cf41c296c81e884
SHA512 36d62c2b6cda8f1aa1d2add0c898af199671f6cad0391927f8d70475d758af5fe6761622b2ffe5aee7cdc66000580e2d434a988c458110ea2e15997bb9beed74

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ko\Microsoft.VisualStudio.Threading.resources.dll

MD5 226ae4b5d0a3a8aba5fd4a6f653134e2
SHA1 13f95de031388c4ea8943c27945a6d3ade374c27
SHA256 d8ac9a38f0ce9b2a382b0659e3f2fd841adca39a896938338c231e1cc7c6653e
SHA512 78183816339d30bea77e215c48f9d51738ade73a9e676ab10d5a471ccc4562bac214ada44aea09624283c651e59c721eb09000d718730d0e7836ccb6a204f169

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pt-BR\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 758346b48ce3002236870510f6716e9c
SHA1 810e4f9ac118a4d7efbe826f71f521848cedd44c
SHA256 5744dcee99690c8196456b76df5db7892c9c93047cebcb1f3e8ec184b6ef1698
SHA512 17670fee96ad13322f33869e6336998390b8a16f4bf49c001c65bb564aa13d604bc9b73825b74f245b4c3a4bceaf0e3b67c500688285674a03b780869af04c60

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pl\Microsoft.VisualStudio.Validation.resources.dll

MD5 f6197a66909c446254eec274b9a2a327
SHA1 10a3bbdc1d9c437e6604095d6dd0ca491b20ffd2
SHA256 80a6a237aafae9ee638bf376851d7a9741cd9860fb259f199f34abc5f4b90a5d
SHA512 894d052413900a3390e43643ba484913fc7d8e427cc27467eb477175bbbffbfd4584644ff104cd24796110f8fef5defcac073cda37118f7787f83f490c43184a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pt-BR\Microsoft.VisualStudio.Validation.resources.dll

MD5 29df3d65f7f5c7cdd7f27c17029be134
SHA1 1d195c37f92df5961947a4023a12ddd971d5f1c3
SHA256 f4219a59575064605bdc997b2a3017bb6989f185ab3e760912e6029822b41e80
SHA512 638d5edbae2c5193b7eee076a777c09d64047babca5b0601a77fbfae4ea58d210d321d7b233989ab43043b1318b9f2fd784f69129547aa33e219bfe0a46c1734

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ru\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 8e6a8143ada421b00da3a728aeef6ae6
SHA1 34111b4d93341058d80c9aabb2d076ed84544340
SHA256 85dc35408e0f7fa0f3b1be4a9e4bc654450af7635c8b9493e6598f465e693b3c
SHA512 0d7cd2809db45bbd413fcceaa73d1d72b2037292de80adffe210387456505e7435ecd50c18740aa4f42da27eafa9ed89fd7a9aaaa665494c61cad82d9e34424a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pt-BR\Microsoft.VisualStudio.Threading.resources.dll

MD5 10e6d2d791cc8fb93e9b149c52c31a78
SHA1 505ed8ed5ccfdf8a6f81a4ad7b37e461c6295d7b
SHA256 a3ab7c8d131baca0b2610e309f4d4cb4416157a5f1cedc3fe3c5d0ae34a3b873
SHA512 a1495d5769a9bea7c43b29c660c38dfd97e97653dbe874edfa1098ab9a39c6105f183ba6a0dfb31030b783f871ede715048acb193934791b98805b3b3bee1b81

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\pl\Microsoft.VisualStudio.Threading.resources.dll

MD5 f1228c31613502d3c3d00aafe1016864
SHA1 a3b783bb813013e03ea07a711468ac5ae5544cd8
SHA256 11f4878b62744601c92ea2a7d3d2c1a7fcde09ab74aa3ad08125df34539567a0
SHA512 132b3685e166fc6d1f77682924207f982c3156e84781a367219237ae84b4c84508ef076a89a4dad7c17e0e38383f356666bfbb0ada49681e09f52c1c557eccca

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ru\Microsoft.VisualStudio.Threading.resources.dll

MD5 39ff7d92bfe03a38a642a1a171d9f4a8
SHA1 e093252af326c6b0df6e60151bcdd7be424f3047
SHA256 f1718f42ab80c2cfe1b609900a7d83e9f1db3b1a0a915ee184b41454ede930c4
SHA512 d675006794c9fe179df7bfce3da1d64914a463a0b51805fd58c99bbfe7d8ae898b130e37877ab5e6b2e2a3dceab0a1b5bf62f2d05bda495dae8d88b05883d6d2

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\ru\Microsoft.VisualStudio.Validation.resources.dll

MD5 de83ea990a0aa1f26227d2137201bb7c
SHA1 49b550a46cb044cf3cfd2ac737f3fb1ca4b73ce0
SHA256 377155d810dbacddb7e8d6a4695a2361013ef5fd7dca29d5843084e8a63b5514
SHA512 2c615938cb8400581dec240866c1add329ffd41b8385db3949f32f73cf11d9b5fb0ab05871d7b842262d657c85e18e610ca9486000fdfc6f05b5ef047ca15f51

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\it\Microsoft.VisualStudio.Threading.resources.dll

MD5 1924e01e130b0a15b12064531102d84f
SHA1 bca3d5e2da31db1351d404ca6d05fc2e443afa0d
SHA256 501dc1638f2c99325d4a36c516d0f2045fbc27ffc6e5554de343547c7ba9783b
SHA512 1602ce1ade4568177898e182f290cdd86b45f5eea4539b042ef1834faf9d7203345e6a5ad0a2b8c133bc67552dcdd9d7cb25e312cba096537a67b063eef7d0cf

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\fr\Microsoft.VisualStudio.Threading.resources.dll

MD5 f6da517f2d6ce38228107ea99d18c239
SHA1 8f727e4440bd389c7d32a949efe5c1df84a07e04
SHA256 fb14d18e011fb54e510bda2c6d23f438dae9e86b2197406289e36b804b6caf6a
SHA512 decbb8e678afcbd3f45fc0da806b1667e81d3c1d25ccdeb457d4d86c018c6acce8245f3eeb5a7c997615f60bfcfb8d151875113a7ffc41c96d6eb28a670370f2

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\runtimes\win-arm64\native\msalruntime_arm64.dll

MD5 77e00bc4babd16defec4ae7ba25fbe00
SHA1 f4e2aaa62e5d681fd6860579f23af4b1e05536b4
SHA256 9187b23577ed4789d1cb6383e837f577687cfb1a9c7d34c2fa3ef6b6636b70ae
SHA512 ada8e5b7a5d1d381e30796aa2bfba50716c54f1a30d124e71aef2dd35e9cd0436e29f941baad5c937f9e55e474482e15152cca585514ca95c3f09ed946ae0269

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\tr\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 a6727fdb2ff24ed4d58fcfcd79c90d05
SHA1 4cbe69317e0d47d9e312bf46626abd3cf30605b1
SHA256 9906e106cec66987188e5729acd2c2b9817ba06e7a10a61ec22339c258f061d8
SHA512 d79711c6326c163c4b4c637e36798a5703e83ac323ca3ec9348593f5d319560bda6be6cbe60e100ff344231004c969ef59af0bd3fb848ce76a88bc41c4067baf

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hans\Microsoft.VisualStudio.Validation.resources.dll

MD5 a96cc1cba6af7ebd209ff68c48e54514
SHA1 8e838e60d5c90dd22be5363778460a0365c38c83
SHA256 ec986dc663bd6cfed8079b414be37e74e9a7e19f713045fa77a29fa2e4d7af0f
SHA512 6fa44ec7d022fcb298e99c2158e1ed5239f43e09428e0addc400cc77b16f2684ed564641fdbd455b4e8ceecbaae0b12e2a2beed3a310017490c4acbd0dce56dd

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hant\Microsoft.VisualStudio.Validation.resources.dll

MD5 a3121478a955a5238898f257b192c151
SHA1 b821f016316ba567f3bb9432dcfa0200f3e11642
SHA256 57a654b873f1ffca2d6dd46747d4cc83e06432f2f0660fca81e940219f32d665
SHA512 7ce2d50ec2872af20e6992b1f968729deb5ed2aebe6c8a1fbe71c6fe58688df00a46f7677e27e6ade29434e4512bd6d19e566a3c4f863bd9544efa771cebed6a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hant\Microsoft.VisualStudio.Threading.resources.dll

MD5 8aef8057c794b1e53616376d1fa38e58
SHA1 3f33f9796d6efd72434334caa267e90dd170ceef
SHA256 09f5e7721c070f69091c84bdf35b425e01cb021ab742bb1e620b2b599e8d738a
SHA512 766ce025adbc7e486898b03d651a9901aaa6fffd156c0f9fb00fc18ac8dc24db8e5bf3ddcbacf3247505c491f8a2afdb86d37d9b4fa7dd327ebefbc603e4b5b0

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hant\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 ded54548c8f8a2de0b80b5e846b11447
SHA1 a993aa8a7c673be77c2c8a79e8a328f3d6ed4296
SHA256 ec06693b9ccedc1c7fb01eb5cea324d15358995fa5240dcc1fcfd555d699db76
SHA512 f34879eb5681dc46fa6f74bfaa126fc686d949287734439ab691cea83002e095e019f6611f3a116c3ddef85476152c62a5abee3e9ce318417ce65dfe3e94a464

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hans\Microsoft.VisualStudio.Threading.resources.dll

MD5 63fc5e4ec6ab7407c5879ed11a0cd63f
SHA1 51212daa833695520e4494cb7e77e1937e57bf00
SHA256 ae85bdf24a462a47bed32921b711b548444a931e187d76a6da33a698cd7c20c0
SHA512 f9af613540bfdc9e98896e98ccfe100d48a16dad905e823a4c7cfa2042405285e63e313833b6819fe6117879dd047b4e3fccffb6b2d271541e085912287f09a8

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\zh-Hans\Microsoft.IdentityService.Clients.ActiveDirectory.resources.dll

MD5 0c0a5962ddd24b6fbb76a7d970558987
SHA1 b85e48244a918a90ba2174ef8292297a3135a1fe
SHA256 ccf4f39afb6108bc8b3101293c7b46e27c9d109f1bcf2fb048e8b01c0e788ea9
SHA512 761bdc5b4857ab356aebc31c53edb59d1414f4c430a1d7903143f44522bf242c4fced4511213d87e899ec66f2cf94f819642b864549b3e021136aeebdccb0918

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\tr\Microsoft.VisualStudio.Validation.resources.dll

MD5 93a4209038780c3b549494e35ca05e52
SHA1 1424aa23d5b0c07131e44842caf313d9a218607c
SHA256 0d120ee9ebdc30a37ce2bbe9dd6e75304764eeb14434a199195bc8cd3d047740
SHA512 c8449ee28d44a04ba4bbb0a9c4de5b1a19b636c1e3f31dee4e00518eda22dd7416cdb0654954137da5da65a3074efdf8d289feef3738f5ad875b1347bb656842

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\tr\Microsoft.VisualStudio.Threading.resources.dll

MD5 62d0f5d39436a60a67537336f8e03cf9
SHA1 b89f69cbe75a95a5d8040032a2eae33ced7e390d
SHA256 8dbaa428b14090c076768520a1c2eb9fb85cb2ed864feb0fa225a15f30d6e684
SHA512 ae321fdbffe899319cf4d8b8f96cb3b13c4febcbe29832568dd8cf691d61886e42f2d9e18ca60d19c9d817aefa4bfa3df1e5401b6761ef77ccc4a1c2c926bdac

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\Identity\Licensing\runtimes\win-x86\native\msalruntime_x86.dll

MD5 d228627a3f7a95b9a57db553a686284d
SHA1 b9d520cf69fd41037756982e1f14ba4beb53e5e4
SHA256 d68ba651eda3e9d7e1465ce507ab88c9547a6429039b01324ddd78fdb66fd922
SHA512 45b5fa5c5d29f581b81920aff7861be3b847978b68732641df4d0880fd9cd0f7c369cb7fa0a8fe0ba135e1eff310b161893de5692ea2c0f306e61996bba6df36

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebTools.Resources.F66C2201829CD845D3DB\payload.vsix

MD5 e5a1d2c1cc300b29775bee45c2df832f
SHA1 4e08bd73c5f6e24985e9a6d3917dbcba6d0fd397
SHA256 4c240ebcddf20fbacafe37b0d48b7c571c9f363a4d58498e17c50d00f7b45d60
SHA512 e91cc1f76ce3a1c127faf1f4923a95b15287984382df5a15bbcedba651464f3ad26388a575273b86f7bab50c13072ced8b085dc8e7878583fe27909ec5287ec1

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebToolsExtensions.MSBuild.AAFC6F429095E2AB8986\Microsoft.VisualStudio.WebToolsExtensions.MSBuild.vsix

MD5 03e427c39a2678fc84d5339ca9c315bf
SHA1 83c3e9bcd6c07801edad6257aaef70739c68da2e
SHA256 66a9402d06e93d9484440011fa6fd8e4d9115ca27650c2174670c77b83f77db5
SHA512 493c36710ce1e24bfa7b0e3c858c42efee93b62866cb2fc097c4d8c394e654653e007e6fd39f08d8833c3270710bf1911fc277c796d61ec08eaefea64a378ad2

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\Microsoft.Developer.IdentityService\Old\Microsoft.Bcl.AsyncInterfaces.dll

MD5 ff34978b62d5e0be84a895d9c30f99ae
SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\Microsoft.Developer.IdentityService\Old\Microsoft.IdentityService.Clients.ActiveDirectory.dll

MD5 8f3f539a76f3dd2a02601c67379228c5
SHA1 baf5ff455256f42a7db969e041ea641c769a9ab4
SHA256 4c939c75c0bc5bca69abaacf999fc0a4f13cb29431066d7b57b7b62003fdfcc3
SHA512 1dca319f151cfbe49131da0ec48b2bf1a939d6ef8121ceb9fd038a8eb908f6017601e81e190a5e3015685ad9057bf77367d96bb9f7a4c8ee59aa6c0997c4671b

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\Microsoft.Developer.IdentityService\Old\System.Diagnostics.DiagnosticSource.dll

MD5 faef01b70b8e775a92d4b9e2383f2749
SHA1 a35b2fb5fb243319ac4c9b776dad416d76d3aeea
SHA256 c8a5ca93d8e40dafd48759226f70f90af8ccbc3a8df45d4e6fd5dc5626b05ab9
SHA512 c4b482e1249555f9dabbee97b030792617a250362aef175dfd9877a875808a9e91278ff6d3cfac04730a8e919095f01a4c27254a94191433704dbbd6d7a78ab8

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\Microsoft.Developer.IdentityService\Old\System.IO.Pipelines.dll

MD5 a780fc912dccb6e10b7dd6d67f149bd6
SHA1 6b99d7b94681397fb2282ce7e6a72fe3285081c2
SHA256 07a57b9c555a278c359267674aa139aba352b464fea3cc4714a664ad999faf42
SHA512 af47bd92707f0f22f5bbee5e6f4a68901ca606b0bb70e7cc7d3ffc3e04f04079dc42806d8e30aa93dbd51dec099f317a4ba024d2cc615abc6bb47b0659586164

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\Microsoft.Developer.IdentityService\Old\System.Threading.Tasks.Dataflow.dll

MD5 523945fefb54ca3877b2bb684f0a459f
SHA1 bd027bc503b5c68b87eed0c899f513195afc36ae
SHA256 25dac8fceb82e51e33f2d74d2076f4ec0fb67edd92e02402c9ce6be11da39fdd
SHA512 faa683c306a3df55d97cc4b5098758097da0cdfc8a84689bd64518d68552b7f710b88fefdb8fe984b94905283dade10333c1fa6cf85cde3bd29ec8e4cf60eece

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\NavigateTo\Microsoft.NET.StringTools.dll

MD5 86ccf43de2b37e5f47c47eb02602e419
SHA1 4054567cb1c6e132718ed7033c8f76b478865187
SHA256 5daee3ce65e89af5324d2fb25653707caecc86a9e5597bb814678bb66f3ebdb0
SHA512 467b78f629e32ec02249bbfd2d578c6f04d60a376b57365d66ce3316a90b3ebb41f58ed08e61b9e1f3b96f53e3720540d7b6bb0c797b2d69eadb640ba8919483

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Profiles\General.vssettings

MD5 1060c5469b4092c99e70fcb63bcb380d
SHA1 c4bac4623f25a207422bfbca0e96adb73c9bdd11
SHA256 ba7d0f83a887bce8c5b7be3451cdaf004c399250c01aa6f37f9344cd87f82491
SHA512 f527b029ee375041303b7b4f68c0fd78816e5e10a3b349632a53eb372581234f8703d7b92e51785c7dda7d498b20a31785e9ebece0f5f286821ac53e7633b769

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TeamFoundationClient.58F4AC7E7310DCD1C6A7\payload.vsix

MD5 2bbdc48d1ffa2d8c15c52729f99cbaff
SHA1 d5a5101dd68b390463b1ff8543faaa06bf99e806
SHA256 0f1d3dd17ad4cc9a33e02ac791b6e7d01d9c8994a1bcbd686b995f4795462b19
SHA512 2c7f16a9805564ef7876e7a281f97b1511a3214c7f2194750a39c987e99b705bbaaf9bdaeda940da349d0748bd14944fd0c95686045a673b686edfd93cbdeb8b

C:\Config.Msi\e5bba54.rbs

MD5 bc81636265f04afe261122ba29879338
SHA1 596107e0ef90a7f123ac6dcd1dcdda1dd1458899
SHA256 542ab5939b76bb329eadab92cb8d5e3589a2aeed5ebd3b1a6e883d25bd243ac4
SHA512 d67e1ba360c9886431fa2515cb19dabe63fa1fcb01a6d0700cc9567ec7c7f0d7de3f01233a3749fb7a6baec00847e1e7e923e9e86711d16d2567d8cff18c05ca

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll

MD5 b340a021abaa327244b5f02542bd1def
SHA1 c4471b8c3bf60ed300ebce0bd843f017d205ad5c
SHA256 21e9388960143eab0323b9b56443b6c47439973b1682653c37e0e50217e3bb08
SHA512 1970ebe87910d0b7759cae3139bdb78b73e04b3c5a8a22ede42b772e1dc73bffa05d82a5684aba1b90fa265e30e510806bc5e782117ddd620612625c0a6b2d64

C:\Config.Msi\e5bba59.rbs

MD5 1c2a83235ac329225c05070261cdc3c8
SHA1 c9273db1be19ac9ade3f9bcd68184dee269794f3
SHA256 f3c667597a96cede91dbce3af39d0fdfb9e3998bbe0d31d096b2a86815635ba6
SHA512 6e2627a00e6ae2cf38e9df93dbc4cdb849aa5060701e3bd4f75d09b44d63c20fbca280a09fbce8ece6c466491a970703f8f79417df89e0960ca1d706a0e7002b

C:\Config.Msi\e5bba5e.rbs

MD5 95cb3c5f2e109d068ea439caea30ac4f
SHA1 1d13c39741c9d56e439fbfa128d7689d90444ee2
SHA256 2ca637c69cbd4fae96049d51ddc6953a100334a1eb5cafaf76951f96a4696109
SHA512 7352a8cb900df362b95b023abd3ab87c8704e2efe55987157f8284bc0f9c7ecd6bb3304dfa76a8328f8523f23fd862e6908e38f315c9ecd184ff846b511332b8

C:\Config.Msi\e5bba63.rbs

MD5 38d49b6b6ed28162fff5dddff4ef8e81
SHA1 4c707cc757f1ae1957aa63167126fce0270b3da9
SHA256 a366bd739c078bce1cf5c93787c24cc1f6a061e6e727e848ec26abc1c530b825
SHA512 5b42ec47f5fc3f7723ee1b43a93c5323d44278d1ca087cbfe10e495cb4019fa7d4cabb6588966379edfcb976d8baf13388ff8222067a36b1187377cc658a8188

C:\Config.Msi\e5bba68.rbs

MD5 fd686e628ec62fb0403a2ebcd68ca424
SHA1 ced13dcedbb337018dfc217896c268b005b7420a
SHA256 cba6aec5ba97478996524c75b78d1b89466e3b2720486a5df31dbce5044b7f30
SHA512 a7c0af32eedb0a91eb84e0ffb5f08940f274c33ff3289647adea92eb4620cfbd2d693eb8bf8377cc691b0e4bda7d7ca0b28fb6cde899df85d4722898297e16d2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Package.TypeScript.TSServer.DAE766CD850FFE55E554\Microsoft.VisualStudio.Package.TypeScript.TSServer.vsix

MD5 1a1ed543854a2717c0945f14c000042e
SHA1 670ed433c2e2a3016170b62741fefca00ecd2979
SHA256 5eb546d15300733d939191e0553e3d9dcb7e40804c584edc75bc7bb05b945958
SHA512 83b6457248148206b038afdef7aba6507edb429b80d6cf26782809762a08feab7b4cf495b3482b683c59d90bc61a3a124ac2b5df8ef62ef2b4942a947ac73176

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ConnectedServices.Core.4F79271CC441D81D5251\Microsoft.VisualStudio.ConnectedServices.Core.vsix

MD5 6680f6e3663200e9d65ab177da45eac2
SHA1 fcee718c82c7239f052f86caa8a09fcd33711b47
SHA256 411ccdb9813e05177b50851cedded5eeee666eca275fdd3526c85c1fd29301fc
SHA512 cfe862893f0e8e268aaf848da496e152cddea9a57b5f8e0c7ba2dbb0dc619af0cc2b13ab51e97292d762799513e1e98ec4ae24036f13ea20311efc4f81faff4c

C:\Config.Msi\e5bba6d.rbs

MD5 909fb48f1d21a0044fc510c7bc1bbea0
SHA1 90e05e7cd7ebe2fed6cd736828964f54c40ab058
SHA256 88abaedbdf87a7a158e6ab06bb2bb9c602859615621fbb5138e0e75628df0ac3
SHA512 48bc36b8becc7c3f30c255c4a3868be46372b85fbb6135abbe6b435d0b9d1e6d3a65cea9184116ecd14eac0e1485c595ed2e1d6230570442c7c8bbdaf7a2bc0d

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.AnyCPU\ServiceHub.RoslynCodeAnalysisService.exe.config

MD5 2680a38b64ceec6217604318684d8142
SHA1 6a7c75ac3fa9321d6b7370abf24ff079899bc74f
SHA256 631dee783643c94747258f22c0d7b19042f4f40c20ef50a3626bbd97f5b7ab82
SHA512 93fbb7fd8080aefe5e46491ce3b16e94603243e3193d5d928f4654392a359c508aacaf65be5934b64fdb8dc420dc012ec96987aab3c95f5323edc1ddf21424ed

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\cs\Microsoft.VisualStudio.Validation.resources.dll

MD5 6d64eb21e28d7da0951ccb11d5a111db
SHA1 31871e11da20d0fd27067bfe316e39e83b48df6a
SHA256 9e19f8cd05575acf7d590f24485ac44f68d69efad170723c17ec5f4e10b92cce
SHA512 e10677003bfbe68155bbabd663010644be46449c05a609cf0cdfcb14afbe58b9b5125b2b1f62e5697b4d36cbb40fe75ed016911d5fabc804db4cc9dedb8e505d

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\de\Microsoft.VisualStudio.Validation.resources.dll

MD5 6bdbeb8494c6df5ee482065a9d7f0b1e
SHA1 76f901c49a397a018d81d32a5fc0d1debbf61be1
SHA256 163cdc3ecd1f65b462394b4dfbdf8ff17d834a949bcc4593c99e49f04f5eb584
SHA512 4ab793f5c07fcdd5718658187efd66aa46e0cbbf2ef92bf75c17aef0dcdc7f809c43311db4d3e06500d3a01749fbb62849a90c38ba8210b71659bce3ac2592cd

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\Dia2Lib.dll

MD5 be6474b726207994decdc22e84936a3c
SHA1 ea1d16f16de16b29a576a1b5cc4baa31bc5db9bb
SHA256 6c4cac68010fe032218efe5e9fcf46eef9f77bfaa5f3bd33f03c5ff77d5a8fac
SHA512 d204240213a0b509101ae3c9b691e9f6a141946cf3284244f56314183c84d24c1cdaa28661444fb8e1dc018e24f8aae4505c35f9994e368032a9913c9de8ff59

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\es\Microsoft.VisualStudio.Validation.resources.dll

MD5 0f92dd2019cf7222118e8b5d9409a328
SHA1 d01114e9522b45b6893e8b73c8e620d55b960581
SHA256 d5f1bff4e7b51b2e4d2eb115b50f9a4c719787d75c396cae559b66c22f2acabf
SHA512 91d8b987d70c75fc75da3188af600b5786d94af66f1f051cd76f93d18090b91448dbded1953449f277833af0140276694fd1620725f373d190c708b45ad0574a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\fr\Microsoft.VisualStudio.Validation.resources.dll

MD5 1299df7f85b8abcc8205e7f968e64de5
SHA1 b9d72bdfda7a07477a7b243d8de246b751a9d6fb
SHA256 35a8fe6aebd5c08b5804fb76569daee301defa4d7c94fd944b44b33b1d19cfee
SHA512 008c131bc1b143a5d6dcf138fa553ad5e7a8a19fa517f1268e65c5c9d8a1b022a0e4ca24c304faf9e6fe486a1e5e1179b70c449d8749bdf17ff91693d183bb2c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\it\Microsoft.VisualStudio.Validation.resources.dll

MD5 e96afcac956de57a60cf403431a06b9f
SHA1 2f9fd5621e9d50259a02cb81b192b26f40364a3a
SHA256 6c57467ecb7c8c8829808fef07ae46d5257656b7980e40689f953c5d73ce0bae
SHA512 a484ccb5b4339af6a06c623cc8ff93a331ead98c415f7dde2cf376f036cd3ec6de4fa0a6ba142febefa7969de2ddcedab9fe2407a01c2372d33007d2651192a9

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\ja\Microsoft.VisualStudio.Validation.resources.dll

MD5 37c3387a524c942bc21029a532e0fa88
SHA1 221d9cbbb4f564c58c783a357743f157463a5ec9
SHA256 943b1b0b5b416b087a587346bb5490b517cd16df557cb32dfb43ee7549e42367
SHA512 61a63591bd41674c138f3860f6cce94c009a97344432d235f11552820462487907835d200408c947af948fa576f09ba073611017d14d9006aed8597132e92765

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\ko\Microsoft.VisualStudio.Validation.resources.dll

MD5 f7519010d92c7e3bf6dd25032575fd3d
SHA1 880ddbd3252eb830bac8541f8254743df8d2a050
SHA256 839f5cb03cf6dd364ee40a8e5ba80a15b7c3b070947a9d5e43217563f19f4a49
SHA512 3b5250666254f87c35fa3e730e0d308613b01fe35bfe42a31f00c5113fa84efac47a226de3a6b4b8428ec9f264fd7202c426f509de6e10b6ff6d5b95e3ce4efc

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\Microsoft.Bcl.AsyncInterfaces.dll

MD5 b984be2a4fc05e9f83e7446b4455806d
SHA1 3a9cd4a322a8f91e67552a87b079a4652805848a
SHA256 136d5965cf4768e8420b547a8bddea882921f426c371833d558a858a2f0c235a
SHA512 d0200ffceb4f850db6a7b3e1d7aab6b996ae8f26971472eca3e80d0ab4c763ff13f628a48c1ce02bb9d695a90986f872b81932ee8b7aa45b5cdf67080bb55b71

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\Microsoft.VisualStudio.Debugger.Interop.16.0.dll

MD5 571670aa99b76865a503aaebb70a9c06
SHA1 ccaaa2c94a00bd9c2e481993044f2599b940e4de
SHA256 d5e5045c45cfedda0c9c2d5aec8bbd8a75099400ddd7f0a04c3e73a396548e64
SHA512 8cced8a5c39e9c9c4d209f33e20344878c95ebf9d2ac257a2761ae31ee4ea026e7054d3721392026c79280b0d63ff75406d41ca7e26c6e9308740c5ffc48beec

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\pl\Microsoft.VisualStudio.Validation.resources.dll

MD5 157fea4ff784a1a3c450aaeafc808171
SHA1 8eac216d168deddf2057d3dc032a2f12559574c1
SHA256 1e018a4bfa279657bfaef3e2960bc375614013aee4fa5324d29f8f14ef72f0d8
SHA512 3c65075e46df5fa1a2a1ffc956f8846d313e33e7cdbc1f6e1d71c325d88eb0649b5b36f3e61f2ef53ba6ecf75778ce4c766a53820b0cd2e85fd4833545e77192

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\pt-BR\Microsoft.VisualStudio.Validation.resources.dll

MD5 f1d96fd5909173972c661a1d8fe629db
SHA1 63bb82d04ad575feb0bf508eabb3e23165a33183
SHA256 0e6fb3b7734bb8e34610156af5bff71bca3825f050479abd0b4494ca45b3fb59
SHA512 7538ad0e2f418e0d671e5157b9ee72d3e35c7d67b8bf2db3aabe3a7fa7420131f0e3da5d38a4bbf48523b37e06d05a1a565bf1a3ff6d066482235772ae893a57

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\ru\Microsoft.VisualStudio.Validation.resources.dll

MD5 da5d932621691d0a43f9c41589bea612
SHA1 af1c2d722c25702fd21dd94b1835febae694537a
SHA256 dd274a178c9a7648dfc64b2e58a9e0fa4cf62bfa24d5d54059f1689c29e5d4fc
SHA512 46621a0243430ae4e02964fa406f716d654c5a2b2fc9a1a27fea13a8fb17b06c6b7aec8445e8434e7880d68f30f91b8a403069fe1f918900901ad4cdda8dba71

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.Composition.AttributedModel.dll

MD5 d8ed9922f8017a98bcf1daf805b6dab4
SHA1 c459e952f1cf141781825787a1046e209bf8d0bd
SHA256 0f403e98d8bad390b970704a93aa532042409f499032823cac47e3004bad9c8a
SHA512 8247b707b9cf8576f21e5e9847f7ff320daca84c9f715abb130b42236efe4052eb56d7afc83fcd15ed6b74b90e656aceb173149c37d8baa186ab044d2b81ee49

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.Composition.Hosting.dll

MD5 9da1259a0684c799dbc8d62329f46285
SHA1 56c3dc427951920c3708fe3e2632c9277bb2a1bf
SHA256 8d9a239c7b03ce4a047ed0abd9e835db0feeaaa16c157e7d308603d03efb7ebc
SHA512 6b5889d840c114d31c9aa931f87cd149e34c5db36db7cd20bf5d3f19cb44080e2fcd7ecd2cc60f76ad66de6ff66903af32042f7c2b37c4a296c1e1f4902df319

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.Composition.TypedParts.dll

MD5 4b085863c51a3e580c2335545109da06
SHA1 5bc23549aa001972fe4f1aedb6576756e233dff8
SHA256 3100191a1448b9a613e04a63b65899cf74371fc2f5c03315aa40ab53468c7a24
SHA512 b4f03311591e188f741cbb7287def358e784b35bde475a8a353f4b371446590901ff9ead188fa0cd37972ec42792a306fa145a2d7bf0a8bf9aa9a40910be1526

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.Composition.Runtime.dll

MD5 7946b1f29289d7a211bf316606bc7661
SHA1 5b08e8bde7c1897d94bb41e3281ac26db8e48e82
SHA256 324acdfc86c5adaa12e9c4f40deacf1e9f45ac2e84e542a02d130e7380f79d6e
SHA512 20f5be8ed8047952cbb06f0ccdacda1a8564c6e2f1a42902cd3fe99867fac6b9d7927027e176127ac26ad64c0efdcc25b26e959c6125b69ff7d11401761f78c4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.Composition.Convention.dll

MD5 bfbedd1a06d2180711d5a06551db76ed
SHA1 b9a637966bfc1dd1d9b5944719c1385990f2f339
SHA256 88e716224482a702e3d44f02e6311b9d91fce9af506abf0482e8c5f82379034f
SHA512 692b05cc4a51485fef8e904b511d1682ff79f6257803ef0570b55805cd951fa3682e82b9304f63fc27de42f426730da7f04106a5441df5313693f6d22c3ec96c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\System.ComponentModel.Composition.dll

MD5 4597e728f51b16cec72b6bce5a5b56e0
SHA1 4e16bb59a7592fb4ff63c35d0ad8f448064a9246
SHA256 82260fef3a01a429ab525a75765f263cb54c5fd01abb87a0a4dab15bfae6fc37
SHA512 24f048ed781c16bb854b431ec1afe2ffd768be6c20537b44ba18d72ab7718ec71f664adc3a74f32f694a7df1a1991fc06e6426a0c6838c546ebcca685b493d80

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\TraceReloggerLib.dll

MD5 63d53278de054ac54da51d94d2bc0c9f
SHA1 66eefa94909b3d8e2ed0f1d366c27d9b261c1a7b
SHA256 6830c0f1d3f3c17719181e73dd5cfa8ccbb3f3c575329d2120576545103467b5
SHA512 45aafdc6d20f6eb49f149e6c5fc3930d78d06169c95ab87f7b2aefb13cda1e9072ce7bf5d9d7a07483972ba9d87f7ee98fcf6cd543fa44c46fad49d0a9fd516f

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\tr\Microsoft.VisualStudio.Validation.resources.dll

MD5 7c15ca39fca7df71d62c46e6f03389ef
SHA1 5a9fb6c41989821e3ff4a56e3c0a875911ca947f
SHA256 43884a1eede7a9e75fe194c64f72c4ab19c88a23af8de029ed6ea4b5be913333
SHA512 58c855d7391e8769d9451834c5c1ce49d238ce5aeb560ef5473fd09aba4668ebb9920910d0bda632574033619e80fcc4f1d76fa91b096c9435a8e742bc250d93

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\zh-Hans\Microsoft.VisualStudio.Validation.resources.dll

MD5 eb7953d05ef1ce51e790708d42ee5d18
SHA1 6159595dc609dcf3b08f76b80bef7145c2a02319
SHA256 58273441dd72458f4d40f80569321e498dff19dd02b6ded98ee70fbfa25b6e89
SHA512 1f38629a5c0ebfd143734b50ace90d0e9a8a215a5d887af3185fc4a175736f3266ae6ad756bac0da012e4b526e49391fb732c820e0a315ae5c394d87fea270ea

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Services\VsixServiceDiscovery\zh-Hant\Microsoft.VisualStudio.Validation.resources.dll

MD5 8ef011a0285333d0eefe22d5aa7a1702
SHA1 b677d16e7f8496fd2dc22fdca249330ef440a788
SHA256 2b05088124da6ef40b805f395ef901156841e1480e50aeaba6da2e2526973c32
SHA512 47f5f374b63cfca33c8c61c3ddd8925861be1675013fc1aae1538e53b45fde5f984354e54d4a939575a8a30f52baa784b3b578db6944153a8d715c5e3a9c661a

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\cs\Microsoft.ServiceHub.Framework.resources.dll

MD5 d211f72f3a25f79c7881128cce52e53d
SHA1 19fc529a2b78e755f572d3ccb48d3f6810aaf5c6
SHA256 2722730c403808166c2414110f2fb3dac597c1d9c8b41ceab0675c6e36c2c1dd
SHA512 a258f8ac46eb6e84947247315c97f421b452ecef02850eb669a404ec2a6f232c4b5ccd92f8f93a4d0e4ea7399574a2e9c9cb07cff9f79fc501e6926fe13a1c78

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\de\Microsoft.ServiceHub.Framework.resources.dll

MD5 c320e5bf865e8ea322f43fbe98eca2a4
SHA1 ecf46fad6e64d69f70d3d5cc3c0536af0eab7d79
SHA256 6c345f64e73295e45a3d2440612a5b4ca676b4a940ed650d1b8b0d2a588cb8fc
SHA512 55965c014248548ec1c9180fd26f7fe1d73ea3b3211706de85d873603fdc85c965abe1483a0b41550bb5df15734370f9bef8dc6e1276d9865ae04c580d849fe4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\es\Microsoft.ServiceHub.Framework.resources.dll

MD5 ef8de9b4b855cfb8d51d2a282c58a1f5
SHA1 39545543e86ba37c4214c819648970965adccf73
SHA256 f0e2597b3928ee9a02dd32b8df29edc30cec8fc98e1ce02be77e937546c06531
SHA512 068263bf78786a6d86909a4a5afe40e97b147b81e7ba0a75d02eb2f8317fd8ce9e4f7ad3bcf556918da1d3f456cd2857b4744ee9f138059e8b6c3bf086ab9ae4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\fr\Microsoft.ServiceHub.Framework.resources.dll

MD5 bb06267a6abe2d96656a1a457c3f9442
SHA1 29998c9cc319e88d9f9207766642316a6510cb06
SHA256 52418437d0ccae385c9b168faf8f82c5c0d9ef5aadd3fd1f18781b7fff81d31d
SHA512 e00cdb9949a5528605f15089aaf4a1c22f72b51b3ea0952c3747932d88f0634f397ebe0f87ab6b792c56bcca9ba8920a690e88227dd6dac3d7b7b00547576708

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\it\Microsoft.ServiceHub.Framework.resources.dll

MD5 e63ca5238056b79514e4fec8d215fb99
SHA1 d63a51b88a33e9f2a8cc407ddf7b642bc528c541
SHA256 0600d3d14fc79459524d719c29403671c42099c4129ac45c53f9603f995a5d72
SHA512 5823700703e03e8cb2ae7452093f7f7750d3ca3b509902933234f16f470b7944e24be6cbe4de17c5ad6996cda96f5d2754e1775e52d00f9336ffa1eb97bff0b0

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\ja\Microsoft.ServiceHub.Framework.resources.dll

MD5 bd7ec08bb80c260edba58d740549e62c
SHA1 12ed22cb33ffdf3d623f724581fc70c9d231f57b
SHA256 dfcb14753ced5a657320b67a59757869335b2db7cda30876514f1d99be4a0c3d
SHA512 f3d1ae5aa2f2668ee2f02125a0a4cb72a445d0e7a91806f2e3466d14eea8d59eddcf588051864c4686c7d637bf8ac0c6e4aaa2aeedb5d75b889da38714fc9bc6

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\ko\Microsoft.ServiceHub.Framework.resources.dll

MD5 360a6157fa2ac16966d20b3ac1b3d7d0
SHA1 d98c0b25110495a7766a5905c3bb740d3f245b01
SHA256 f7baf75e36104cb7e6daf99d57c42560134714fc9a8307544d9a282cebd0e05f
SHA512 4bd12759a6c8bd4336cd143b559cb056517299ee96d792c82ba6576df01f897b8f2e925ec2b153ca6d0e09cd3fdbe7e658350f940fecccdc277e03801ba96fd0

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\Microsoft.VisualStudio.Validation.dll

MD5 0b1d5949c6944383b1ee896c5e13d08b
SHA1 9b218dc4e6e1b5194c1ce05deb1abf434c6147c8
SHA256 cc08390e5e26ddf7284e673bc744bac25a3bbb755a238c7c0abea7184ac527e4
SHA512 8be3532e574019d507691ae6bc306e217db8acf71b4ae118800d4e327ed98ce78a182300d8d83c0c160ec842fc21199aa3163f956e6f172df041dd3f59280fd4

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\pl\Microsoft.ServiceHub.Framework.resources.dll

MD5 9f8d4e179b074c214b390e18636f59e4
SHA1 2f58505438a4c9b10474f4275edf561d268abf41
SHA256 91b5a8d99ea19e71ef1d108dd30fbb90dccdd3bb50f10071f12853ccb54e3b42
SHA512 4f5bc771576018c8be5267c4cfce097c32560b44096f7f3de0badd6377306d8ef86b138ef6fbefd3960bca7c38dc8b502e229dd8f4374cd504683ca5f8cb7dff

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\pt-BR\Microsoft.ServiceHub.Framework.resources.dll

MD5 191188995739b67024f2da83e0cdc54c
SHA1 25f13a43b347d22c0c9013e2ac7b0104854d5f85
SHA256 20c0438515a5aaa091d711ea15adbcb91ffba1c0f919355685753488e2fdc61f
SHA512 696084a6b0bfe09d0a33965461510b8721365ec7b5266e60e7cd6b34e9be47dbeacd075f85a098351f2fe96d9d5fd83e4515ece009454714f681c3f0190dab79

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\ru\Microsoft.ServiceHub.Framework.resources.dll

MD5 f34392f85fe92128e344d32a5e4d322f
SHA1 5d711c8b11813f0f79d2ae1a896b47d361c6e0c7
SHA256 a1ff0dd38f7a6cd8a6d50faa51f055a187296e955838b7d63e3fa708662f0c68
SHA512 0097e69da2d3915d842d2bb3370560492b0cdd2c37fbe4586af0b238f25170782a8a320366fc47ff8db5baa7448c14b96e48a9a0a690a8d3eb92f3fea8f513a1

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\SharedAssemblies\Microsoft.VisualStudio.RpcContracts.dll

MD5 c0ac065c77fc02a5fc309044cd9c1255
SHA1 25befde32ba783ead27653065bcff7eecb72b561
SHA256 b9cce0ccfef7ae9b4eb142b3bc65c5537b68273a1a921c583eb1613e8c00280c
SHA512 7696fcd9c3e3c5d1294a989646e849e91fb567ec55570848725be2b59f5ecb886b11d50cf4f0166687d3e0be5f8d5ea23fa7c58e2f01aa2bfb80fae9559d5f80

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\System.Management.dll

MD5 abfa6d66fcd4a2764c455e75514286c3
SHA1 42c9b4bf911c9e478fb637c6904d6f1a177e7bb5
SHA256 6995bc11aa735e6772222e782eea80238663d11fbe577435310735ce0a197335
SHA512 2d02ab4eb94ab6407ec0c94bce08c663dbae7ea791a3e161217308237b3eb83ebf775f7c2a03c0d2050349ec6f39bf93b0f271d46399d4f9c0d33b00ccb1ad37

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\tr\Microsoft.ServiceHub.Framework.resources.dll

MD5 bda805b6814173c494011cb9f6d119b8
SHA1 e2dd43e4bfe88fc170d3b0ee63fa51f9024184aa
SHA256 6c9db5895a1ff48e96a52d303953d59eaf715b6c75d333a500a3a7de0ece7684
SHA512 e3feb95e9b37422d97568e41d5a49d533702be4b0655aa535b532fec6a0c917d0d48bb08fb33225c408fdec2467ee3f913cb846d2bb6dfea904ab09e2ce96257

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\zh-Hans\Microsoft.ServiceHub.Framework.resources.dll

MD5 dd8cbb6754a3ccb4bfc21901f08d867b
SHA1 c16be90b2f019f2478d73882334f21955edbf3a7
SHA256 2c78063c778e55115c50871216fc2476f01fb8926b22fc5b1752695943b09bd9
SHA512 db1e4d5aa10221b485af52a7f4683e76c8d9c96c86b4cdf6488b194090e08e6d97b969ed39843eee6a17c19dd28f0f9112ebdb582bbfca09f72ef9889976dc13

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.Extensibility.amd64\zh-Hant\Microsoft.ServiceHub.Framework.resources.dll

MD5 f17839d3341ae0aab71df9e491c2e263
SHA1 f791420d63af5981f5ecc4bc9e890c08d609fc15
SHA256 ec5d4ff8589142aa65e8c2d324fb1b69c876d32cfb2c16c97e8233adbeb34987
SHA512 413dc6a5811a48d6f45d9020b12bea925d0963ce88895ea7f46972e6032e8691d3d77854e8f0517e9618ed8ac5ee24dd95006a01822a6f5aef13c1cb733f3d7c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\ServiceHub\Hosts\ServiceHub.Host.netfx.x86\ServiceHub.IdentityHost.exe.config

MD5 bdc4cd2a57442efc1aba0c60586d394e
SHA1 f7f6c411b70c4e8ed2d6723e6083653981f6c103
SHA256 4fe10d6993cf4cbdc426773865ec4077d6596319d51a6662818dc5a8a0c565ea
SHA512 3a1eeb358aa79b5084423ac75e0ed57d23fd32f9c22efe76a7dbd2fb913dd45b42f44796da05f6892f24fe3063cf2cc09d4708fbd56c32a8ef8f9758ee2787e5

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.Web.Scaffolding.AD42095FC53DAE2726DF\Microsoft.VisualStudio.Web.Scaffolding.vsix

MD5 35fa16e56979bb7635519e6ca7f3629e
SHA1 4a1c6385bc537949f84b0ddb8c5be6a32b5958d3
SHA256 56e8f5bd71cc1870613fa9508b97f11caa76394d78d8b14d8d2867bba8b13d65
SHA512 f7d57c609a28d064d79de44dad1e4398281c06d435b8649b67cc9b291357c4701a78dc5b719bc6fe51dca1a9d126c5847b10c56d595c29e0140997a97267d9cc

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProTools.Resources.201A9FA4B883BD864898\payload.vsix

MD5 664f91df9eb844b0f28b14b78e307c80
SHA1 3f2473c5d38063e298a071f58190536d96a6a68b
SHA256 250465ea7222037a56fc79dc7be8219a172b1d7f44f1e83da9680cc1ab38cf6a
SHA512 008622819a5fcff6f0d85a76716096a4750b7f01f6c011bfe4c0d61c22f982b2c849ee592c6ceb6c00aaa8a95f2171205e79bfdcc1055ecd2ccae5717774cc07

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vpqsq2xy.default-release\datareporting\glean\db\data.safe.tmp

MD5 1f93721b80f92399605d92d719090719
SHA1 8919274a11addcb265367eb8145a03e7d64831f8
SHA256 4d5a9181a5b44fe6933da460d529fbd343f5733d6d888966af5ceff30b6c527a
SHA512 53c6b2cdd53180a9d1865012badcb7ed3463ce99b1de8f8fc429d23da079364a03cd73a59661fbc16cccd1a828eace91699ce4b4143134aeb7aa803c21edf547

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\SQLCommon.AFCB7DEA75382272A162\SqlCommon.vsix

MD5 3c79e8df1c5319280b349d03a97eda91
SHA1 2a071033cb57064105780d2385df0e6606af14ef
SHA256 9c2b779ffb842911832ca64f293238be1c1eeb1f1ccd927ad578b3b9fd31d86a
SHA512 99c5dacf92c909d470af89b3c9ffa9d5b4abc96bec2a95fc0b44ea841a91b38e66b7985d7a8ad078f225da129dd55af0b0d774f77dedf59325b770562c83102b

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\SQLCommon.Targeted.1CDF8B498CCA347244B5\SQLCommon.amd64.vsix

MD5 8543f1c21698519491ac33202a6731f8
SHA1 737d02e8d5c6e86c198e7bed4eeab20a182c5cfd
SHA256 0b0458e375cb388a3570855cca982235abbdcd491a45f2b06013ab6ed0419373
SHA512 a3dec8614362f8e7b49db29b1fbd53ba25132ddaca88ad53663cdee637de88a02f4fb7886482e0f36d82186c4f46a7b2923901ab35f40820637af45b2a243bf0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\sqlsysclrtypes.F42743CE844200DE9B2A\SQLSysClrTypes.msi

MD5 cd220050dad19529e3c725bb68a17b12
SHA1 6078fb01cc735f21bd6cfe1b7c03b0f254a96b53
SHA256 adb3a406d64f355d8403aa59524c65a8c4be571c6430990cf6b303dc7011d8b5
SHA512 7696ca026ab0e9c1283b3f1c3c6e891205f42e07fb5c9d4392d458284484790603ecdcecda70dce1b86499e320d2a71ac96af9d1fdab0b514a32a34058560707

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.ProTools.70B9B0F70BED7E61E6AC\payload.vsix

MD5 1fb65f615e74a96ff6c757d0e14ad769
SHA1 2ef055b60586f27a2df9d42f9368c835fb335b36
SHA256 33634ce87f849c3a3b561906aaf41116be5c4e84b397cc4de42005af8390c240
SHA512 4572212b7a5fd46a010395526ed0cd479723a425a8d1cec5b6476a2bbc7a2d11c787a966860a3521b28e98df6cc44873c3d3a8b4a159560fffe94482d3a66c4f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.JavaScript.ProjectSystem.F44508437D6A666179E2\Microsoft.VisualStudio.JavaScript.ProjectSystem.vsix

MD5 75c40a7e9d775ee32564eabf819c42e2
SHA1 169ba77a524f22257a963e39e1b210379f02d719
SHA256 b68702315c11ae2d3b0428a1c754b04adc1760f90f927b92a5b41ca68850a929
SHA512 e15979ee32fc2027e06698511186b5008858dffbb6eb7968b77184915cf4e404f103c896bc1c1dcae3d98047d91565ca6bdfdea2c906dbe6dfc9a621ec105df4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b31b0bac537616a35891b583f3c9eb8f
SHA1 9987dc4acb98c84a2990334cc4ab688f34ca5197
SHA256 3a9d59c08acc10d727770fa9e8ac8c91b4a48c176ad645fdeb1913d70cc57e96
SHA512 92c2971580a5e706c804f90b525b16af783889feb2d8b8a8d5af6b1c2656e980dbbdd94ab9d466f8dfea17991a954d43e66cde890d454e28a1aa2dfde4392eae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0be8b0da-2774-4909-9e5c-5021bcc1c95d.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b65b78dbe029216c205ecef1bdc8e2f7
SHA1 c359aa4384ed414b7e77096e8d066d5901a844c2
SHA256 7a5ba5f77bca3a4ad77b34eee38c400caf5e08e45b96abf80c40528d21fdd43f
SHA512 04f506fd1451a0574f0a710a3552c474ec6d89e9b62f59aca4eafe5be68fb65601917bcc4f9316f05ddfa316aa2baecf7881c704012237242f3f4d0b2a2cb04f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 78142044b92d988bde47886ad60c659b
SHA1 a92fa4f5d88ef197dd0f8babd95e70da6fa648dc
SHA256 4f2f7ca5579c85a495aa89e2e9dbf8caee527e2c6c890e2b1c04087153ba7058
SHA512 ad259ed622d2ef257c6f3dbb22da19a8bacef1f30e1d9b478841bcc2fd42db48675c01b663fc7f2d17493b35b09cbb8bf5e14e109fa94413b4285339d1d10083

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 81766e12bb748efe82e491fa32e07580
SHA1 7e833a28ba960c3fb0ad05e8bae053dac0ad5f12
SHA256 d463319611312e3ada0f5c4c0b8f109cc446906fd5660e6f71e55e3c41df979e
SHA512 bb20cc1db48c25773decf98899d0edcd7f43848698de7c9faf46ccc2f28c0a7f2beb8f9b181810465fd0b94a3c1d1c4e8a5605ba41735f9c0d5362f3fc2bef09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6af14c26570b7c1a5d625f2d768326f1
SHA1 a290764bea7821fc999d28aabf86779702055ebe
SHA256 ac96f8f361175d92122fe06dee23ef77328800e696f8827278147838e3e02e4d
SHA512 d6a76cc49ed96d8629ed49610c3f669361fe5f6c979d88df28300dec52f7c817659b4473da9549e48fdb7b3613263b17f68608117fee1e2ba93fcce124ed8447

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bcce9aa8dc34422b6ab0a9f3da9da3ec
SHA1 64653189d4c39981f88ed33743987c976cc408a5
SHA256 01f235f4ebcc8e20941d86e80ea0502470baa53247a2d49cdd91bef5b4e05de7
SHA512 746093869f9d2465511833abe6538e28c4ce97c12f293a8aad0f9fff22816a6a154302137e4189211527fdac9a3c10d203ac2eb18c1690d5d0e0e3eff07ee589

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6566192bff8cf24dcb2557a74a2ec6bf
SHA1 6fd0ca8336d01eb561c033cb81add23878e9c434
SHA256 fd40630b1d45427ecb78243414eb15c832b24203315445d6269751727f1abbdb
SHA512 0f4d0dd6985a42914192485943de6b3228718c85d56990ede445fe66dcf71dbf69e74e1d8f9e7569abf862f71904cc62ca5fe9f15a3427923758a204c83ce0a8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebTools.5FE61FE6845FBFC12B7B\payload.vsix

MD5 c6d671f16f5ef968eed780a4a9bfc1ed
SHA1 593a1f2254b8faf4ada2e6c0926693582aac9f1d
SHA256 bc0382495409869310e3ca63e8afdd32c6574047da3ef1645fe912cf53a56d55
SHA512 6fcb98b7c78692397e6c80a13c6ff2b1fe27d69c7e021e90460ba0c13953002221cf73d3611f01d7ab7a55a6563987793a82fc0ead96489d84f6f0488ce2f15f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.NuGet.Build.Tasks.Setup.06FE92A74FB934D37EAB\Microsoft.NuGet.Build.Tasks.Setup.vsix

MD5 2edd06a066bbf1158359359ba2d11c62
SHA1 25d82026ab026d165343631cc4045ee9f7a1c43a
SHA256 5635b7c143b0f022cdd8f79494718f4c86df8ed0b036249258f22634f23a9536
SHA512 bde1a368404defc330cbfba6bd6d7a8ad4056884ac1274f497b08c3460e32c3dc8b3c347add19b861cd88cd329e0a98a8fedc6bd47098459e753329a4f7c21c4

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.auxil.Resources.F40BB074BBD9EF815721\payload.vsix

MD5 5959e4027ffc16ad7de5478d264714aa
SHA1 c2410babd1cfb321e64a82999679a392048ee219
SHA256 764f7b94585fda26bd3d04abc06b45f0617e3bcad0e09d81981a12499be26dcb
SHA512 dc4ec620bbadca592401997e11470d04b7af0ea9164052542f26b64156aa2e217e523600b87cbd1e032349eaa06c1536cd3aa462b51136b488f304ed00b1e43a

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.auxil.CEF3C1EDD0A6E09723DB\payload.vsix

MD5 efc44736be7807190abd4e526fc4ffbc
SHA1 39af3915851196088c092a62b6955cc660cb4154
SHA256 56b3ca17a48f8aa57cbef4dd71c607d1e57fd8e395ac3fd6666ad8d91594e489
SHA512 ff1df815d58dfc849290488f759f24512d77e696d5fe716e7f60e84397ba219a9bc7cf2b08627506229dfaa286b56a72f708b9801ee742bc860a6adf410bafba

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.FxCop.Resources.82EA13CE3B10C4DD5F72\payload.vsix

MD5 4ffbe4cbca490ab5403fe1cf1297367a
SHA1 567834324a460e994ea5e66876a3dae93c168720
SHA256 90404c922e5b8fa4688b5c7e5cc3444068157a7c4b2f5f4a0b12b08dd36c18bc
SHA512 61abe4bb824ae7f07b9145f8a5ff4e8483dd8dafd98418708ac4201a6ebe819b957ba28079296244f159435245dde7fbd420065558aaead64876d4b8f1dcb597

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.CodeAnalysis.Compilers.0B69F79C58DCF953426B\Microsoft.CodeAnalysis.Compilers.x64.vsix

MD5 ec560f32bab8e454edb6c43e63ac242f
SHA1 1a4e5755fac612294b6dfc51299fee9e2b6dc45d
SHA256 a8408f544147514fd9c2e4c2e0f15c7c5e4c12ce6d0ec134e051620f8969e33b
SHA512 b86378f8ceb80ca70aeebb2167e92b25a6ee78701e5ead55ccdb60757a49268e67cc5e57907ce7bb7cf993e0a7a787acf2926247b362688b33ea088ef0117b73

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.IDE.Resources.31A297B0ED4FA818B318\payload.vsix

MD5 5a69aecf5900eb7014ba1a6cac4e02ba
SHA1 526fd5167e1ff523466e495e831c6fd84dda191f
SHA256 4f6a8254f1432629acf7bb1291d24984c866dd708e44bb74751b9cc53627b040
SHA512 9904023ac953843ea232cc7207b37cfcc957da0da74b7e21fe27d678e11cdaa132797f193d5e002bbd8b89426fb9590057b512e240ad2dd29b5371403865a643

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.FxCop.6BB0A6FEABDC4EBC8141\payload.vsix

MD5 aae9569b0b11af0dec5d7fcaf1f6a8fb
SHA1 5084c329ea2d2ad95507950d5b064857c9954662
SHA256 b2f297343ec1bc10aeb86a1598cf88527cb24bea397bca0fe1fb52e67b541d82
SHA512 a56f51bb673185c1cf354753c580d711c954de32d680b47840f7514a9255d9d3436f59877389e36155403d8ae06f30dc38b79517b8948ea26c3d74efcb5b9631

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Servicing.Redist.B3D5AF897E76DB0BDBD6\Microsoft.VisualCpp.Servicing.Redist.vsix

MD5 32c2aae1e6a655f61af5308ce85bab23
SHA1 46a6da3c9027786e13f04c42f3a731375de19e85
SHA256 ffb7b76dfda75b5b3c426e25a4b9b0d4e9e745815e18210c50bbf52a84858ece
SHA512 175cf31cf274957bd76a42a30279b618d7b823e72f6c0d79cdfca613e050a64876812428a68c25dbdf31a0a87ae69d22d0500854bbe60e93b5fb8eec5b179497

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.StaticAnalysis.IDE.6DCBAFAEB97F175DE27A\payload.vsix

MD5 5e84308dd9039fe76a04f8cb55c98174
SHA1 125272e57496d39cff9cb61a6f1c5418435c96fe
SHA256 47abeb10f3ebd263b740d70523b7963ef1d8238bdab0ea4ca6e6d502cb4fc843
SHA512 a1a5e466b788610e17d6e5016c17373a6a0329681a851fd84fa388989be137a0ed954e20d2dd4b867633b64623b68dd0cdae18a89caf3bf144340042467c518f

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.WebToolsExtensions.A66B955E878F0D97ADBC\Microsoft.VisualStudio.WebToolsExtensions.vsix

MD5 ef7aedfac99f647012ab9c32de53f817
SHA1 dce121da4ea4269b7a8b85c5dfdec163603968ba
SHA256 068c177a6e84efa82031d3e350c0c3a84b6e5b0ecb82b09d4236a6c95a213bed
SHA512 0e5f723d85fc339babfd711aeba52e42783c7453ff4581cef18b2f98a3ba43504389187eb38c8a557d2ba195edd29dbdd654a44505d22c94b51370e8d655f394

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiaSymReader.Native.3DA3EA9865DC312F3A8D\payload.vsix

MD5 f7a1694a8dbb3ef91bc03df71acdd009
SHA1 078d27d342c2e4aba42497583d288f4e7c6576c3
SHA256 af3629179595be7b76612b1dc39c2a3acf7127f4e85dcb2f905969a73facb467
SHA512 a29b85c462e960723d3f90363ca9df3b3e6b2fa211ae4b2a4c00fa6974b29fc45bfc5e9e9627309e1f40c6421477a1cc9fc56ac845ee937fe6666512cedc5ba8

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.InteractiveWindow.1D6652DD6EE30D02EF61\Microsoft.VisualStudio.VsInteractiveWindow.vsix

MD5 d65ea89fe69300cd1f5fde3c4da5581f
SHA1 39c57d738f28339c5d3da59c523fba0427b304ac
SHA256 45add9883f1f556d5f96971761238e17685f8e363d0a6a8acef4edcd2f9d54d4
SHA512 02c4146eaff45e72faa083663728440ee608b4eb9c5d925a16e7bd01d650c09b35e0195caba68d6f9fc13315391779b39f381749b9945bc41b7cd99614060839

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.CRT.ClickOnce.Msi,version=14.40.33810,language=en-US\cab1.cab

MD5 53135f8d51f34d3444a5550522f2056c
SHA1 e1f1827581dfd7d6834f236bac33f8fbe15039c1
SHA256 e2572940979c287c6f7ecc30602ee7cc700d16f7ba93167b002b0e2aa872ffcb
SHA512 95753bd48b8ae2ae51016a0f1ea74c9e4c37211df26e2a8d53a5ed06e9354bb4411f409a7fd6fd360f6f6f8dfce24fa748abf3d90ebbe90df667ac2b6ff5373d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TextTemplating.Integration.Resources.412EC90542B84EC7DA19\payload.vsix

MD5 af1032736d9eb3a8846ba19b9f4743e7
SHA1 13849b617fb2b5a17674de011566a2e1d7d13b84
SHA256 12ed24d6a2ed94619ae7464749e99fb8822202b968cf667125d435ea1918fe0f
SHA512 b7b6cc4ee34045b1dfefe7c2efeeb624226b19ec80cd3df03a5a65a7c1c435a0fe85c1d3f3191f3f42350b89976f669105ed244e7642ac4e2ed702c2602ec8fe

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TextTemplating.Core.F7AE83AF8C602C92B7BD\payload.vsix

MD5 f359d843cc0781eaf6d32f916dabcbb1
SHA1 984664ace029c1c958c846f0497a373d92f4a563
SHA256 afe762d2b0b7c6008144e9e368607ddc366cc47faa9cee95077161069811bf8d
SHA512 1201cd4e8192ff05037c90c2f2b28fc2a9869db04a53a8d25dba392bddad1be2722e78cda1c8cd315046de1915d93809a90a682012b014a64922a46814ace446

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TextTemplating.Integration.9D23DFC54E32B2F935B2\payload.vsix

MD5 7db63a1ec0efe0d03d7c68bdd6ff260b
SHA1 141db0237a68c5ae5b312f981bcbe47403b26737
SHA256 b50120f412089af68dfe857a247c80704c098a649b94b7147eca6500b9a37672
SHA512 1cc24956af3f28ba10a5f4428ebe75e20e07206a3cc963834a858b4602c6e79642695cbe90f946974e8acc6c524b73d481d22afb97cf8dcfcda7f508e125e341

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TextTemplating.MSBuild.A981292981098549EAEC\payload.vsix

MD5 fff6ed44e867e0de4dbc26caef2565ea
SHA1 f3edc8269aa7bf8581462e3637577545568403bb
SHA256 9b52dcedcfae26121a3854a26409d2a99da233e4bc065472210d64346411e49a
SHA512 f37d2a19ce5de467adeffdbf356114911616d7a8c8025ae1e8c9f2a1ca101bff16eee3c3f15e1de5b277a54c0da9d1269ce4f1586af1dea12e80e67c2d249466

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.NuGet.Licenses.3F1E7558F6708CDECD4E\payload.vsix

MD5 2666815c3ce3c9b4f8c7f011412d5fbb
SHA1 5ebfc1968d0aff745e4185d3fe98e95cea5205de
SHA256 bbe59bac115ab022e7d72fd6d9ebeebb2a05ea853e25805da272326fec3ae9ef
SHA512 a9286dfd886cbfdee7a776ad8a655284f8f72b21da36c003e25f33a7568825ab8ce641ffc413f0b8ce185142899bf9865b857e3f0be1597b342e79f8d1554e28

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.CredentialProvider.225450118C0D347421F5\Microsoft.CredentialProvider.vsix

MD5 41bf3c9fc26f962ceb93d225ab9d1417
SHA1 1637811cf601903ca81d898a7234716e4da4bac3
SHA256 67e2c7b9ebc6318178821a4cb20f7d2ccbd42928157ca5232ce7e7945760c14b
SHA512 29b0cc6618de15296daf017c44b1059f7914ffee1a9554e7294f8576697cc802af9b0cbd278539e84b263cdbd074584fbae25b6bf7996debe4e3942dbfc31b3d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Redist.14.34195ADF139C68D06400\VC_redist.x86.exe

MD5 8457542fd4be74cb2c3a92b3386ae8e9
SHA1 198722b4f5fc62721910569d9d926dce22730c22
SHA256 a32dd41eaab0c5e1eaa78be3c0bb73b48593de8d97a7510b97de3fd993538600
SHA512 91a6283f774f9e2338b65aa835156854e9e76aed32f821b13cfd070dd6c87e1542ce2d5845beb5e4af1ddb102314bb6e0ad6214d896bb3e387590a01eae0c182

C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.40.33810,chip=x86\VCRedistInstall.ps1

MD5 5c404953e5900be016454aad75f5ec27
SHA1 2e11a6b3716c67183f0f2ab0dfdfb0ec72544ecb
SHA256 1451963edb8080629977c84e644ee22fd82e8a32f5d549a521cf262f24b401d1
SHA512 28ead049a8a73521d6fe420eeeb9da263f80caa29dd60eae1b5030acffe8c213b48be3051070fe2c4df707b7fd1015d81ae693ca46c1fafcdf5e7f6e780a09cf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.V1.CLI.4B17622814C996AACE15\payload.vsix

MD5 72ef116d59e0a28e9c165ff58e8c0add
SHA1 bf78113911b51ec0175e3777b116eaf0eadbcd92
SHA256 f7f4fce6505bccb1bbcf31846c5194e5186c674cb769075b7c9edd04486b4710
SHA512 7843bc78856795e55979b2007a3108277ad96ee4e82f42bd81be5c568e75f978676ebb5c5d0fd3e7244c451f1abc60191b708d944a43d9618eecd9bd97869e06

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestWIExtension.66E8AAAEEB2ED3566071\payload.vsix

MD5 301e546e580602816223c1cc542bb340
SHA1 f3a499a13dc57b9e68b95a7ca3b41c328276bb32
SHA256 f3a2e573ee4a7171265fbd18e105f3825d1ea07672e642449bededd9696fcbad
SHA512 46a4bc588f525a8efe5ee3ebcdd6753a99fa47ba73aab4a7989c72563b9f2139a56571fbc82bc5edef6c4fc27a0882ffebd2870dc89ca0938cb9580ca42dc96c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Agent.889E52E97FB8F8065E87\payload.vsix

MD5 003c2e290aa56042a76f5bf16fded6a1
SHA1 40c1589f65f7777704e9de7019feeb07164e9d84
SHA256 9fd433d8425e7845c8b57bd432ba66c797f186827f846b7e91727d23c2aff7ca
SHA512 932be1db3cbbb6732c353d1ad7843986620ef9560b117d7a5706be71ebe3c189b4ed1a4fea70001d28e8bd27c61d1af85d250ba0f138324e7b9c0851644f53c0

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Core.Resources.CF960EF096CA463261A8\payload.vsix

MD5 39ac374368977b0008632422c7d931dd
SHA1 a1ae42b72c9b547c74bc4db157dc0821f9cdea8a
SHA256 9508d757329f9d0334fff0403985f901445a8d4e96036b63b1e96520f8c5c571
SHA512 22f1bf08e725fb2d81b15127edbcc84704e7832f4b9bc49e0c0a17d34a0c61dd961410be1e5ac84becdeeca0b6c68a7055451bbd082c64cd7443aed20ccdc4e2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Core.691FD00BCD8AF1D67B66\payload.vsix

MD5 50265c19f51a810e1da03a5155e80abb
SHA1 d4d5760e77c5768a739c62c3f4690b2a98e07fbb
SHA256 e4d94edb2d84bde19a314ed16bdf2a089cc39fd4fcb0930ac0a660dc48ae023a
SHA512 49398e0f6ef7ec8402d45e58df581cace70129f3116c433380ee139f637a229e85e1e03ca356be245fde16e3a29b43606997962eb0e89a882ecf5b9de780ade2

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TP.Legacy.Common.Res.69EE3864C23F09BB950C\payload.vsix

MD5 b970e9f4d504e05cdf4aeb1a6657dbee
SHA1 6a78ae6f43bfe7a5adf275b82246f36f5caa6fcf
SHA256 76b50408cd41f24f79c6ee165a47d5236ae0af8fff15d2f7e5a30431152a20e2
SHA512 45f38d51edb08fc484ac8c6f208da41ffb7e3115dd6a315ded8369a201fd1bfedf280002005ecc7b9a3726784fe63eee32549814a658cd762630194958b00e88

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Common.55E7FECDC6230D5089E4\payload.vsix

MD5 eda3f053dc4d34b25146a932048127ad
SHA1 9fa805049d71d07555879c592709aff34ddcd913
SHA256 dd8cf461107390f8306d5e916e577c8826e4b7c5003a9925f06e6bb22a2d776c
SHA512 191d69777cf422b9134b46f36696e483345b57e5e5c942a961f354393642dec131e44d353d63d0c5876369a92ae68fa02a075868446ccda5dc988d48d859c849

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Professional.A40F8551EA348765BD01\payload.vsix

MD5 698ef5f1526bb75b4faa78512e9f3257
SHA1 32fc14895588b0096bd3deb38c26526ce606e637
SHA256 6df11eaa43e70bde00c83ece0c0c127af4d8a0ca2439aae077459456649584c5
SHA512 030b13c0068d18f7bea661e127bbf5a9548e5195cd8910f2b50a8c516709d690d8b0b7a87748e82cee75be4ee2fa6f20f7ddd4d25cecae3be571ab3b0381040c

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.TestSettings.0711866BFF75ECBA411D\payload.vsix

MD5 b52a7f9d093baa72b35e4994d32e6031
SHA1 c555dbea8573f408f092eda3c42a1715a3739205
SHA256 8e120d95ed021b228ff92783e68cef1ea5430b5018ade9c42c1c065d2e9b5a67
SHA512 c48fadaa28a76035406e2c5494aac928db54518f72ccc20e76a442ef9894ea124d3487124893a97a983d39f8580492376dceb109080af382982a14845ac01444

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Tips.Resources.DF434D262630C2CB9165\payload.vsix

MD5 4d4bf3299fe8f23459e80f16bd9c4ad5
SHA1 c66049712ce1cbb154368042b61360dcf0d6d645
SHA256 3ff080c71dbb27a3c19823b26cb524d1cb2193a4851aed78a189fc3e09f2d49f
SHA512 152ae501970a032515359aa0288d341857b49d7ade02eac5f4952f969b6bd282a98a98dbd72fe471869ace79c6630fd58eca1fc919295481edc00feac591f28f

memory/1900-24034-0x00000145AB990000-0x00000145AB9A0000-memory.dmp

memory/1900-24038-0x00000145AC260000-0x00000145AC270000-memory.dmp

memory/1900-24045-0x00000145B4520000-0x00000145B4521000-memory.dmp

memory/1900-24047-0x00000145B45A0000-0x00000145B45A1000-memory.dmp

memory/1900-24049-0x00000145B45A0000-0x00000145B45A1000-memory.dmp

memory/1900-24050-0x00000145B4630000-0x00000145B4631000-memory.dmp

memory/1900-24051-0x00000145B4630000-0x00000145B4631000-memory.dmp

memory/1900-24052-0x00000145B4640000-0x00000145B4641000-memory.dmp

memory/1900-24053-0x00000145B4640000-0x00000145B4641000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TestPlatform.Legacy.Tips.D6C9D95F43306509A32B\payload.vsix

MD5 8123374748f2bf0971acf68ef0645a82
SHA1 3ed4433bd9f91c2e7ab34f8dd19dcafc362e959b
SHA256 a9eda600388d36e3b8a397956533388a04b9efab78b9d7a7aecf693b1060c8aa
SHA512 d72bb5471217f1e1059702c141bb5e7fa65080cb14191c6ae51acbf852f87d64bf20c5a6848c13327ebce5de948fa85bf03680489dd6b71993ba17f44bef9f8e

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.TP.Legacy.Tips.Common.D4AA32FF0A52292FEBD4\payload.vsix

MD5 15135670352296823b6748d8bb042a76
SHA1 042562fd33b491eafe706308cf345febb35d95cf
SHA256 916050fc2a717fd461aab2045a8ef5c28c22f182a71716d409a85121d32bf3f4
SHA512 84ab48f2d60fcea70bf5acc7bbff2b22e94cd9cf30159b1e4df36fab38dde52f3cc592130b8207305ccd6d3f8c721cd45cf1ceb37186bb250d089d138c6489c3

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\1031\Microsoft.TeamFoundation.TestManagement.ClientPackageUI.dll

MD5 26e2cd4ab0e53bb8da65ebcc7c22e88c
SHA1 2c00f78c1cdf445ee1eba97b9e1d15cebf357b96
SHA256 5495b24a196015fedbe0600422121e617907e8033fc2a6ed2739c357f799f923
SHA512 fc7ff3533333ac0c718cb8e4b79917b1992fca28f0bbeb236221eb4ad9e9a748b42d474027558066b2084c75d705487fd58f90719a87057345b05bf843fab4db

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\mingw64\bin\git-upload-pack.exe

MD5 ad13683d85676e0d7d57f7e2e197484e
SHA1 8d442dbe6820cfa7225b17a2d4dc0b2062b8b065
SHA256 d3606171c89e7050ff2f274010a0b5cc586392f8faa8b5a121837c0204df9a01
SHA512 57f86e42dbb5491823dedbf1a0203ca81db0c94f0b44fac25a43fb33e397e9a623cc4bdcda6d014c1c8877ee7837760fc363954bbebef64ce9bf99dd35999c40

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\mingw64\share\licenses\libtasn1\COPYING.LESSER

MD5 4fbd65380cdd255951079008b364516c
SHA1 01a6b4bf79aca9b556822601186afab86e8c4fbf
SHA256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551
SHA512 1bca76c9f2f559a7851c278650125cd4f44a7ae4a96ceee6a6ba81d34d28fe7d6125c5ee459fef729b6a2a0eba3075c0841c8a156b3a26f66194f77f7d49151c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\mingw64\share\licenses\libtasn1\COPYING

MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Git\usr\ssl\ct_log_list.cnf

MD5 5b561a90362b8eb9127c792c3f5902e0
SHA1 a2587c4e97408b64274e5e052b74e3754892c13a
SHA256 f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b
SHA512 ce307f87b90e0a0d09335577283ab4509802b43d14725d76c65139f6625f7e4fe636f41c9c398ccc9a2c70b229a34fd796b8ae0e9f5f3720e43f727a60232167

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\CommonExtensions\Microsoft\TeamFoundation\Team Explorer\Microsoft.IdentityModel.Clients.ActiveDirectory.dll

MD5 82b4153a5d552e4731876a145fc3ceee
SHA1 2fba5d92d890ea54b2f32fa7be7e9876672b8b41
SHA256 9c530971bf1ac091c4200fb1d662fb5b8c388a4d92a418a31c738223a2247e73
SHA512 f14e21425792e4ea398b680971070efc2a9791d9b3dcbbd5cbccbb74e9c12236685edae125f0382ed5078fb1cb309754a2746175fe5480adc08256f77781f210

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.TestTools.Pex.Common.B2B15811A530046F4234\payload.vsix

MD5 4781ac9be0605cdbc4d25063a8b8831c
SHA1 06080f5c7d0553be7f37c2d5f4238fe544d329fe
SHA256 71fe81c9e4b0c8e45aca2ac5d037609015d68db170126fe3992a2c029a22fd6a
SHA512 992c4c03e13bb6f713b563b83a8e76bb4403e39c68e9f5c5189f2d3228810cd4194d3d6b19be24da627a7645bb9a57a70844608aa2e0d8a24e0e898afab2694d

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Linux.ConnectionManager.Resources.40CDDBA8212B42D4406A\payload.vsix

MD5 ac899f9628fad46d41d616156b3a8469
SHA1 eb2f08878e946d4d723d328a7d0c6c6a2bff9873
SHA256 a7544bc0cc806b4630476ef5d787c426df0cb1348b64066322acaa69a3e0dac7
SHA512 f60fdded04ae1b3c96dd0d3a32682ceb5c6e561b2854e2bc048ddd6818fc075c413dbcfe5a5408112beeb68a735deba01fff49989f5b5e5a76a8fb7568b6733c

memory/6496-27557-0x000001EE8BD80000-0x000001EE8BD88000-memory.dmp

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

MD5 88301cd4bcc8c1beb77558f8d0f11163
SHA1 d670397598328b7172a4027e4a74e003b64c126f
SHA256 b62ded4fad3dd0fa88d7a6a14b07f1060c08e03f2d5c113582d2a3f457517df3
SHA512 e38b0e4409d40dc7916b0e85bb910f95ce14522d1f27ad08a25283a1c47b8eab0a9dd805f8ea8d5a9a2213184c4154ef9fcf0f44aa738350a982c7755833da50

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\System.Reflection.Metadata.dll

MD5 b25621450be68d1c0397575dac869eb1
SHA1 ddbef3409ec74c286cb7a22d9c9fccacd9562a70
SHA256 f79ea5e38af769cbde5d7f5e873564708941a148bb461472019e10373ea4c780
SHA512 00c3d7e9c459e876c0a8b4122052ccf7a5f5bebe16dc163c928317efd567aaa523343d34c31f38c260aaff17a36db3c26d41e5cecf3f59bb609328daf3bb84e9

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\MSBuild\Microsoft.Build.CommonTypes.xsd

MD5 b9a83678260249d5c9a5ee01d22d7edb
SHA1 15bb6a0ff9a2798421fbd0ac8d126d03602ab9c3
SHA256 b320c858fc4f013a659d65ca15d278d000c040f8532a3a695e718dd872bc748b
SHA512 90a67100cbd9a0eaa8173e3b015604552ac683ef5b64e1e01630154b138703ed75a05616f1b785f07a05efd9f7d734cc7c1a9b8426524c6cbba4ac9d042f3fe6

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\MSBuild\Microsoft.Build.Core.xsd

MD5 2f4ea4a91b45e31daa071e131a5469ed
SHA1 1e081b54de8508d98d74f2cd27a9cda5063cfdd9
SHA256 73dbe752f8e1d3a911e1102fc58aa05a609fc9813710eced95b55fcef99c7504
SHA512 be533cd9d0d5cb7466d4c7bff1ebd075defd3d4c8f829b84f1be3fd4e7bf97cab996a2d08249356c252d936492dd86926eb8e8c7ec0e5800449db6e88cebe540

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\System.Reflection.MetadataLoadContext.dll

MD5 5f9ccc82572773b1693e341af6f019e6
SHA1 9bc8192526e56595971de16e93b853fff3bbc3f5
SHA256 1953d4d879a68fb3548b6417bc13e11673dd165e86610c4d7371247a18f8f2f3
SHA512 f1d91bd17abe512001dccd09056cf7f85af559abeaa8ab7941038e12a9dc9b7f4c737a74f31ade300f3e6594e0df947b0326abcd3751201f2bee23231de1ae58

C:\Config.Msi\e5bba72.rbs

MD5 ec16fa085d1525b19f5fd0f395e18c53
SHA1 410d276ec10cb3d1ee1af311bd599a375059b234
SHA256 76532f1c95847cb42fe26e02fb680ae6f01f5a1927161eaf6abdf67356db3a86
SHA512 71fc37841642f4d62c3961b4aea9c2670faf10b67f75659fa41c89d129460562cfd3e6e5f9c2a02cdd231b251ee281a64c0277a4645c9efe7b73a3686e2bc22a

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1036\FileTracker32UI.dll

MD5 8af129679b7e8e2abb5776fdb130b620
SHA1 fb713add81c74370e5efb622069b57e309c404d2
SHA256 0337c8fdd8f3999fac7a70a86af8e5ab17241b269ede3cc705516b6c3bf6c640
SHA512 ac190b81b8dd0c7f003285ac7cf396d38b599383f8506d125aad7c9bb5555472fbacec0362c4cf773d9036e64ca1ee4a790322aea1aedfed550795bfcbcbf6fe

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\2052\FileTracker64UI.dll

MD5 57f8aa537dd991265f6c895892538df1
SHA1 5da8e5d3cd578bcbe57823299cbdbb26abac7a61
SHA256 0625b75b3d815253a585445e854b5b8eec7568ee768acb9ef34ed6e2b7f9e097
SHA512 5bb2e83b48466304b2068030b97051a48f528580344a6bb01288ec9b0d259120732d6b14500fa3268bdcd065a522f5e9de5374c559e947f11ada4e8c54daf821

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\3082\FileTracker64UI.dll

MD5 ba2b8cab8b6b153cefdb9889d07d3c4d
SHA1 9ca96d034fc7e099d9b1edb5fa3436b833e3a188
SHA256 2c25ae6573a80111c3b552ec53079377235c33865f02610c5803efc549277b09
SHA512 89ba1e983644693eaab519ea7802771986e1538c0ef06612f96337b0360cb94f0672549d326d32c572da8373848f011220d78fe1cdcb6999eb63247e7b1963a9

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\3082\FileTracker32UI.dll

MD5 3739b01e5b7ce46f2c0fe36d92457bbd
SHA1 c503200795078d6c0455149f0e5057e140014f20
SHA256 eb6da364c99ee0236266db8b8d364ca1d2fcdc9754bf48ffc68d483d8944542e
SHA512 12cc3d8e7b0763d3991dd6c353ff3d03838b9eb6b5f8c364364f2e3aed5c8e2f15259a5671f1971dd9ccf92100a9c11cfeabf3d6970ba2e0074f903e70cecf11

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\2052\FileTracker32UI.dll

MD5 0af267f8f4b08b60e7c9de95f7d7262e
SHA1 406684e1b50e060962b52b6a253b55ec1c9ef288
SHA256 b751a6e5828fd362fd4664b94fec5b016079a6d4256cf7481e6ee5fdfee7196d
SHA512 13ed6009c6730a23d8c414af3379cf18ca648379ac6f5d6cce94d22156e4a77de4d83eaaffd6dfa4acd7ed040d562d02a2f18893ecad749c3cc3f070bcb9072a

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1049\FileTracker64UI.dll

MD5 4602b1927520bf3a385a1ace990ac10a
SHA1 f453b1ac643b0719d118874c44d2801bb51e562d
SHA256 a731011819aa8f6ede50ad061e9d6e4ba5c315b1c1dc02bd1487cffd46169eb1
SHA512 f53391d9fccd9b06f175fb8cd095dcd483b962d4532b4e90cd2c4cce1406c51161341e16166e4385663c5353ac81be23fd9955a3acbba68525409d265821dfe7

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1049\FileTracker32UI.dll

MD5 138d38ac02bebba164e338e7112bbb61
SHA1 22dc8bb5f385fd523a3bf38e2dc967b349472ade
SHA256 5a5e06321358c86f6f90328a028c750ce4367266f9a054274060dc778ccaff4d
SHA512 63adcd5e624e61e69eaa2dee6c5857238da79b8a65ddf2fa7c1a2065dae0c47f0d47ef3b0cf82d04e631384e60c7ec205c39398bc4c76968c0247c842d9a53ce

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1042\FileTracker64UI.dll

MD5 3d9d9bf348c5ff0648f68d94553d64cf
SHA1 8cabf6f1e97f879ca3a6d5c459b0d480b0020e8a
SHA256 dbc0e91f228544549c30cf917f8a6f8fda54f7768e738f18203f073e55d8384c
SHA512 920548f7edcce47f3953b88700932026e326bd2fd86630f544236d6aa572997a59d3b13d2f07b2ff908e96fdcfad1c638fb7b8ec30067976f20af3f711f1ecf6

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1042\FileTracker32UI.dll

MD5 e5a0d353513c62df1b2d34ad15047b2e
SHA1 8fdde9701cd005d77b955baa0157741d1f643281
SHA256 1b5e66d55f5b83e921600e85d515efa0df6fb70bafd8271bef9ca0c6ccd2aa16
SHA512 5246b9fb619d80617c09068ec93ff837bdfb8fea00ce697306874334d2ad0d8dd5f438ea8e22c0e5311941778080af2a99c8351586730c4e67c344c7a8364225

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1041\FileTracker64UI.dll

MD5 82daf43d61e78a92ba66360a80c0b934
SHA1 20ce4d814854267465b7b633b52b9a612d6ae9e2
SHA256 42f5d67ea60a5e763a4668a0b4327adc68a944eccd8292345ced8f3a1f6dcca3
SHA512 2f0db2c1bcccf4e8de3c36b4044f2b30299f4f2180fb07b0e1eeabc74cc581eb6ee1bc4f60087899c813933191166341f82da0fb00ebaf9c4ed70df53a0e0079

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1041\FileTracker32UI.dll

MD5 409a13625f4a002e4f9a5937ef900734
SHA1 802fff0d0e53aa801efe28fb96bdedee14628c13
SHA256 ce32cb3b010b22f09b8fde794fb707c06e7863bdfdd6e32e02bfcd2068913044
SHA512 4e10d48ebb02ee7b1a6f7ee7f6377156b1157ac324da2371764a021da09828202659264c460bb5b6c5faff803bb15fbaf1f9b73b6951215727b7529a01711c2c

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1040\FileTracker64UI.dll

MD5 e87973ca4c75b201a508fbf2a6886970
SHA1 000af80bc52ba7d7d641e049cf5050d67edc6766
SHA256 df6c9642841f98ae41bf09fbcd26c1507096805b42cf44a0511a6edf6ff7c0f2
SHA512 3e856f1ed6ffdab979ff6a55eb9f15eb75ef381320073706ad70718c434070b0b38623484fd5496cc1fc9ebb4f15a319690663c5c7a0b9e162abe76dd6eb101a

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1040\FileTracker32UI.dll

MD5 e7c605ed9d56d32376b849ece39f4e36
SHA1 fe4cb7bf825dc34d333f2d89b0fe262946c1f80d
SHA256 83b361feaa8456d456b823968b5811cefe9cd6df04e62bd45dad013b4cbfccce
SHA512 55f80c79a9fe4f554829acb6be4be8126d453c6efe01b7054c73b9b522170cbba2183fc9416b3ed7463c1587e58ba6c3bebf50bdd5e9088f53408655fd21be72

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1036\FileTracker64UI.dll

MD5 0723de9794b04e227f169a27840e84d1
SHA1 ba356f6e6e0eb81b16d69f19207c5930708aeb20
SHA256 74d69c5fe68b29376f085f8547f2ea2b70a368b198b2625d7fda6a0c8101b2e3
SHA512 1794be793f31931a8a91d123733ec9f66c62f0f194d37c6ed851bf9442cff1990d8edc90f3951d79b3bf56f651e4bc5c7d759f03d767c0413eaea454127b95e9

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1033\FileTrackerA4UI.dll

MD5 ee0df474c7c3e9f6fd62002c01c92324
SHA1 d7f6763386981971ddb78fd59562efd55a66f981
SHA256 f443828c5dddb7b7f8d2b4aec6caa41937e4c4cc3022cbb89f37b4f19e4acfa5
SHA512 65a76b3b2baf93cc2ee825be3906aff511fcc8f006256cd4cb76def96f74f6929dd0361203dad5bb1ec923db8ca2fef4002ee2afe3eecf93e0984f7c7bcd4160

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1033\FileTracker64UI.dll

MD5 bbdb4c21d5e275156121bf7f79c82025
SHA1 6eee2b1c2a98e68b9200d99ee61025ec4c6702dd
SHA256 fd3d7383387be59aea585e49473b2517de7eb88605f23a34a146570a04507d98
SHA512 2846c7de442085cc17a2fa3f85988933ea9fdf24ce7003d5d840026ec78b11d45cb28828e724e4ca7166f1888f7e369ccc422ca03577ab9c40ccdbba7e6a1e1c

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1033\FileTracker32UI.dll

MD5 b7816510175000aea06e14d131b531d0
SHA1 7cf0ea74bb3d1acad4be2842fbf73d476a27a220
SHA256 7eaad7d2cf4e9681fb55f832c91886116928169bf65518cb63a8f7d23f07adc2
SHA512 d855d2efaef88ee152e7ecfd32d958c2933eab40fdd562a1d9736ba8b615697798ae36ad983e3b8c82605f5fa715f9dfd432775f5273de14260d9980c401cd86

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1031\FileTracker64UI.dll

MD5 244621c8e111b134f8a647949d63f7e2
SHA1 5cb1849cdf62353e69817cb1dcaca93434b530aa
SHA256 49e914cc611874d9fbfe0d112ca0adb753eb25b0d71f4043aae335a5b8a0fe72
SHA512 f60e71b791f564dd49910b90c8288bd9b625b4403f562433a90047cbc5c4677361035f047e57786c62438920ade320a7b7e604a240af28476eb306523a08425b

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1031\FileTracker32UI.dll

MD5 669b0a9c7675a1e0ddf3d476ebee22ed
SHA1 457284c735a63d28bac96490df5e8d0913e5de7c
SHA256 b41de94fafdcd6273501868505a87e4d4b295ac6d02ca489e7bf63785b906890
SHA512 3af5d051e2c8f3364f5390513fa5ef216ad3629e40344b7541dfe0a65093dacf66db6a437377af377911341f3b0b5d460735f18095ead7fe6a6d0d67e0aaeb42

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1028\FileTracker64UI.dll

MD5 bc4a54db9ba29117c6fd46f467c23f55
SHA1 6fdb4405610666e6437e13a8254d50794ade9193
SHA256 8fed59fe774db24697b54b98976066f2650b5a28cf1f5fb73976a89d4865b3ba
SHA512 c3f0b4c14cb599b97cd21f4e5ebbeeb5e3ffac083f507cd14e1889c09f909eefb5625dea8ea4698be64f7c39acb4ef711ebc2663e8a7c6629c5b774b004d1223

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\amd64\1028\FileTracker32UI.dll

MD5 dfef8d748661c7c74e115c163c4a7959
SHA1 ddaa79171a92aa04ba80836616a65b373714a5e0
SHA256 ad179856492434272fedf43e2ca18a852164e086117380fc7390f6b38fffdc21
SHA512 498e4e0a58f398f9236bc0821119d8270c01e2ec68d91418cd1184db220bf3d7d8855eec37b6a35b82d4a166c59b407e8ef96e61c2dd05f91fa098d1205cfed9

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\arm64\FileTracker64.dll

MD5 2cf51155a4f119022064b54bf1a81f4b
SHA1 ba9ce3adf4db4cdd5dc1c830068b5f6a2b3805fb
SHA256 c9a23bfeb551612421bc8f72b53c27d3b1c0cd8fa7db055217a369098a000746
SHA512 0ccc30f5840ccf55dbf8535ad547726d05dfec9e56e04137406353ab7b1ce8d44c11a7f51efc1cfc72864951476a81f3cbc4c64fcb08f93f3a0fde9656220eb1

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\arm64\FileTracker32.dll

MD5 62736e7f111e01091808de115076cb46
SHA1 0013eb5af8267958c2818322dbe36597243541b8
SHA256 f505cb3cfa10bf0ab80d4f27bc9ec9bca2970fcaa98fbd84126ef9654d80dc20
SHA512 6a058e43b50239d16f361ff239f04cb98d84dbd9435d3462ca2dfeccb9f449b2d6e9d955bedc3bda5b39ccf78066b98af9589809a700cd4a6a82146e908851d4

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\arm64\FileTrackerA4.dll

MD5 20c6e2a20b9af20becc4529133bc9e33
SHA1 1ca7dfd041270557e7f0b92352ca5be0d7c9f9a3
SHA256 3a94057e329e7a60bda3e537d3dd9784b849d95b270a56409398f6576a283617
SHA512 5a45e385fcb06ed1181edfb5a9c04e855da847cfd8107a96bd6b5c65b9ed766b5f9d7dc4fafd9a4b804fe8d6234c65745b76970c4a80b24e14de75e6f6fe0d49

C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin\en-US\Debugger_General.xaml

MD5 3dbb9fc9ff9290868ebff9f0c6709518
SHA1 c6d5dc4605a5822377c066ae1578279c395c7389
SHA256 79b75495ef9f06b60c913e14374ff8408d119742ad53d895cc52da7f04fd6490
SHA512 17ce8a802aeedd591b33889b50d2da6df231ee5a881c58187732aff86009f33cdfed3c3d5037467e20c7e8b47f7018da58cdfc08fc8a993e8b9346146e48507c

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\vcruntime140.dll

MD5 b00c371a7b66b7a1727bbc5f0153335f
SHA1 92b5ccbd8e8bdd8f8ea5411bd8f37a0980e88bef
SHA256 c36c6f8e4a32ec20cd586787ec3ece9f9b1bad6fd07acdced7459d88c42877ca
SHA512 93fc8426cef1469d93fcb1766d18ff7b9cc08f46f0d6399268b04f1561c9b89ec2e2d02be3f0f535cbb445d685d50d5096805e002e3a1d336103ebe725650a58

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\WebViewHost\Microsoft.VisualStudio.Validation.dll

MD5 a627fd8565f6f442bc7555c94126e988
SHA1 4d096f96ec09228d508701e3d288f854b9906c21
SHA256 83ee28811e6815914191db0c1d65278f62a20995786bb1d416f48e8a3e290274
SHA512 1b4bfe6e74658b00ebed000d82c5bfc242d505b3d48eadcf07334e316feb9aa791f7e803f27903cb7eb1ee5ec5900de4d87afc0a7e6a482f25e2cc84ca9c9135

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\WebViewHost\MessagePack.dll

MD5 e7b64033f1429a4365893f414338796d
SHA1 ced68447b6cb3d06701fab79bdfccadf17c81fa8
SHA256 ae0284726ec89e4a7650ce2d4b7dc340d432d3ea875b542ecf9e18d0ae8294c7
SHA512 2b9facfb43dfd9fff416c4f6b389ecae72d4e99b5893b4d72e75b67e9ac20bac7dc86fcd4ceba0c10dbdd4a63f85b92c04c55b07e9baa0cd8af5459dcf6c07a0

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\WebViewHost\System.Threading.Tasks.Dataflow.dll

MD5 a3a3d520f1a9d8f2d68fe4d38b003339
SHA1 55d94a71805804bc1d3c418fc64ba45d7f361430
SHA256 aed34b711290ff0be80895cafd2f4dfc477fda406aab0160bbd4b912f5502d3e
SHA512 768a8c34a01e6bfef1e5b7f1ea1d8c4cfdb7bef2ad6af5b13072e58fb465446dbfa4ca32a9e7a6edcfed4a21c05b74485a28900c4cf14014abb1b65b7b2b8ac9

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualCpp.Redist.14.41C761257C9B12BCD6EF\VC_redist.x64.exe

MD5 1d545507009cc4ec7409c1bc6e93b17b
SHA1 84c61fadf8cd38016fb7632969b3ace9e54b763a
SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
SHA512 5935b69f5138ac3fbc33813c74da853269ba079f910936aefa95e230c6092b92f6225bffb594e5dd35ff29bf260e4b35f91adede90fdf5f062030d8666fd0104

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\WebViewHost\MessagePack.Annotations.dll

MD5 c2d28e4d566ae3d06c93462df8d0b1db
SHA1 6e190b93046f32df9281efd7654ce0dedaf206e9
SHA256 3c11d559b96554ff3389725412531cae07ff9c8fcb39bf4c400a1695ffa53db9
SHA512 82b3eefcf4e5e16da229650eb62177dc614329a37b5b971b82fca0abf3ed3b9c2c38d40355da2311d880594c592ce637894b7f0fd243731cc41d1550fad103cf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.VisualStudio.VC.Ide.Linux.ConnectionManager.2DC94F3B1A03466EA497\payload.vsix

MD5 c29c8594421f90a3977838392e056c01
SHA1 19e999a8d29e8173dd77d27306799c395870cfc9
SHA256 22523dc129bb39f21e78b1ce321f041b19f0e259f1df55b6c38bfe66eb928cdf
SHA512 7ee3bb38252924c12891e8216161ca1d6a3c4e9d75dde363399b9fdc4eaeb7e6647e6b9c84200a94f5f51551159f3c2eb85d55c225258c11ae6bd2bdf60f6767

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiagnosticsHub.Collection.Service.8C25FB5B9C8CF42492B2\cabx64_1.cab

MD5 cc41ae9a0895e69dc319ec2b7865063f
SHA1 76581bed46135799c2b63a72df99ab44b6fa54cd
SHA256 ce822f7ac53146a76c184bca3e7dc4b6c52364c5bf70c1924772519a21d72abb
SHA512 e955e5a0eca27755834685d5c8a4aa0ea0508a64436ccaf1c3a4a9c71faee342cc28f66bb8b0509642e9cd56b735bb0ec3b59621fd34551b3d1d96f2d57d0ddf

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiagnosticsHub.Collection.ExternalDependencies.x64.F1DAA574D8FC2AA7CDF2\payload.vsix

MD5 0e24323949435b9d305ad6d47295ffae
SHA1 225162a9c802e6fd4da84de86542b7ed3939f2c9
SHA256 0020b0041030bce6b8af293d56196ccdb5b24c27e57c631bee87f0696b494ab0
SHA512 bfb4fd7c88b94a544640c3ab93739b3bbb55fbebdf58c5b920e26a7736f289ffd29475f199e584ef06d56916de79a56410ed8e81dbc027c2d440052295b2cbe7

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiagnosticsHub.Collection.DC96ACC2F693600471E3\Microsoft.DiagnosticsHub.Collection.x64.vsix

MD5 cf99fdf4fa2a2b4ee5b829ffa2952c1f
SHA1 810e69be95bfc410457972cd6db9515036b7eb8d
SHA256 239a181020f8b806827fe731e43974495116326e6c3407556f50121aa49a0dc7
SHA512 e61f0c784c0c5e0f879b201c2c7e958754e985adb93503a0c5c8a329399f552dac7d7659ccbffbbea68b0632611085c6bfba197dbd25e04440b8be3908a63321

C:\Users\Admin\AppData\Local\Temp\txpd2i3b\Microsoft.DiagnosticsHub.Runtime.Targeted.C4F96E062BA9ACC20F75\Microsoft.DiagnosticsHub.Runtime.Targeted.x64.vsix

MD5 554e71657c72e3edd08b1bf4c89c4b5a
SHA1 a2c27a1f79f3619f1bc07defc8ee61eb559e12da
SHA256 2a50f5f9e40fc8bb9eed91e9278d3d8aa9bebb725f701ca6707acf874903239e
SHA512 0d7ff56d7337766319f56ad91399a1cada84798250696678ca1a7defc195e1a7ec2e5a58b16be268f01d88eb83a4d2ea7d1c6a2285cb350f2ab14b14c271b4d7