Resubmissions
16/04/2025, 17:22
250416-vxpzgaxpt9816/04/2025, 16:49
250416-vb7mdsxnv51016/04/2025, 15:57
250416-tefgmsszf11016/04/2025, 15:54
250416-tce34aszfs816/04/2025, 13:11
250416-qe95ga1wfw815/04/2025, 09:42
250415-lpvejsvyhy612/04/2025, 21:46
250412-1mryza1qy3812/04/2025, 20:56
250412-zq1vls1we11006/04/2025, 19:12
250406-xwgykswwds806/04/2025, 18:06
250406-wp71ravwbt8Analysis
- max time kernel
1800s - max time network
1800s - platform
windows11-21h2_x64 - resource
win11-20250410-en - resource tags
- submitted
12/04/2025, 20:56
General
- Target https://learn.microsoft.com/en-us/windows/win32/inputdev/virtual-key-codes
- Sample250412-zq1vls1we1
Score
10/10
Malware Config
Signatures
- Suspicious use of NtCreateUserProcessOtherParentProcess 22 IoCs
- Downloads MZ/PE file 1 IoCs
- Event Triggered Execution: Image File Execution Options Injection 1 TTPs 4 IoCs
- Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
- Loads dropped DLL 64 IoCs
- Adds Run key to start application 2 TTPs 7 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Command and Scripting Interpreter: PowerShell 1 TTPs 7 IoCs
Using powershell.exe command.
- Drops desktop.ini file(s) 1 IoCs
- Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
- Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
- Drops file in System32 directory 64 IoCs
- Drops file in Program Files directory 64 IoCs
- Drops file in Windows directory 64 IoCs
- Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- System Time Discovery 1 TTPs 7 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 5 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 55 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 9 IoCs
- Modifies Internet Explorer settings 1 TTPs 25 IoCs
- Modifies data under HKEY_USERS 64 IoCs
- Modifies registry class 64 IoCs
- Modifies system certificate store 2 TTPs 5 IoCs
- NTFS ADS 4 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 16 IoCs
- Suspicious use of SetWindowsHookEx 25 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://learn.microsoft.com/en-us/windows/win32/inputdev/virtual-key-codes1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x2e4,0x2e8,0x2ec,0x2e0,0x300,0x7ffae88ff208,0x7ffae88ff214,0x7ffae88ff2202⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1904,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:112⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2276,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:22⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2336,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:132⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3412,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3436,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4828,i,16302922047213216294,11019628473871622792,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window2⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x248,0x24c,0x250,0x244,0x268,0x7ffae88ff208,0x7ffae88ff214,0x7ffae88ff2203⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1808,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:113⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2152,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=1840,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:133⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4356,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4356,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4624,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4424,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4652,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4688,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4820,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5036,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5144,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:103⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3636,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4064,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4952,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5004,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4944,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5248,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:143⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=2524,i,17853780580601825637,9514058760333621414,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:143⤵
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start2⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"1⤵
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffae5cddcf8,0x7ffae5cddd04,0x7ffae5cddd102⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1952,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=1944 /prefetch:22⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1452,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=2244 /prefetch:112⤵
- Downloads MZ/PE file
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2352,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=2364 /prefetch:132⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3184,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3236 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3160,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3324 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4176,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4208 /prefetch:92⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4612,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4632 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5312,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5324 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5416,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5428 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5540,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5568 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5760,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5344 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3372,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3228 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3392,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3068 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=212,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3388 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3320,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3336 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=4632,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3168 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3216,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4484 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4764,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4640 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5860,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3352 /prefetch:142⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
-
-
C:\Users\Admin\Downloads\VisualStudioSetup.exe"C:\Users\Admin\Downloads\VisualStudioSetup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\389bcc2f713be3e907\vs_bootstrapper_d15\vs_setup_bootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\389bcc2f713be3e907\vs_bootstrapper_d15\vs_setup_bootstrapper.exe" --env "_SFX_CAB_EXE_PACKAGE:C:\Users\Admin\Downloads\VisualStudioSetup.exe _SFX_CAB_EXE_ORIGINALWORKINGDIR:C:\Users\Admin\Downloads"3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\getmac.exe"getmac"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe"C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe" /finalizeInstall install --in "C:\ProgramData\Microsoft\VisualStudio\Packages\_bootstrapper\vs_setup_bootstrapper_202504122057076255.json" --locale en-US --activityId "cf5194fd-adaa-498c-9216-a00d5f3960a1" --campaign "2030:89976ac7278540d2bc5c51247fbabccf" --pipe "e75833dd-2fd4-4e61-8cb5-50c10c7fda47"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exe"C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.windows.exe" /finalizeinstall 6F320B93-EE3C-4826-85E0-ADF79F8D4C61 "Visual Studio Installer" "Microsoft Visual Studio Installer" 3.13.2069.59209 0 "C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe"5⤵
- Executes dropped EXE
-
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe"C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe" elevate --activityId cf5194fd-adaa-498c-9216-a00d5f3960a1 --campaign 2030:89976ac7278540d2bc5c51247fbabccf --handle 328232 --locale en-US --pid 240 --pipeName 9605d14f9cde48d288f14e852ea40967 --serializedSession "{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Default\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1000,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"35547470-84ba-48fc-9651-f7ee1a28b93b\",\"ProcessStartTime\":638800882458875061,\"SkuName\":null,\"VSExeVersion\":null,\"BucketFiltersToEnableWatsonForFaults\":[{\"AdditionalProperties\":[],\"Id\":\"a02930d9-c607-41c3-8698-0fd9196735a5\",\"WatsonEventType\":\"VisualStudioNonFatalErrors2\",\"BucketParameterFilters\":[null,null,\"(?i)vs\\.setup.*\",null,null,null,null,null,null,null]},{\"AdditionalProperties\":[],\"Id\":\"64a13603-6d89-42e4-a299-13f77e5ad306\",\"WatsonEventType\":\"VisualStudioNonFatalErrors2\",\"BucketParameterFilters\":[null,null,\"(?i)vs\\.willow.*\",null,null,null,null,null,null,null]}],\"BucketFiltersToAddDumpsToFaults\":[]}"5⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops file in Program Files directory
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\SysWOW64\\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -NoLogo -NoProfile -Noninteractive -File "C:\Program Files (x86)\Microsoft Visual Studio\Installer\PrecheckTools\Microsoft.VisualStudio.Setup.TestPowerShell.ps1"6⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" queue pause6⤵
- System Location Discovery: System Language Discovery
-
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" queue pause6⤵
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=17.13.35710.127\VSInitializer.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Initializer,version=17.13.35710.127\VSInitializer.exe" -Operation Install -InstallationID 79b81165 -InstallationName VisualStudio/17.13.6+35931.197 -InstallationVersion 17.13.35931.197 -InstallationWorkloads Microsoft.VisualStudio.Workload.CoreEditor,Microsoft.VisualStudio.Workload.NativeDesktop -InstallationPackages Microsoft.VisualStudio.Component.CoreEditor,Microsoft.VisualStudio.Component.TypeScript.TSServer,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions,Microsoft.VisualStudio.Component.JavaScript.TypeScript,Microsoft.VisualStudio.Component.Roslyn.Compiler,Microsoft.Component.MSBuild,Microsoft.VisualStudio.Component.Roslyn.LanguageServices,Microsoft.VisualStudio.Component.TextTemplating,Microsoft.VisualStudio.Component.NuGet,Microsoft.VisualStudio.Component.Debugger.JustInTime,Component.Microsoft.VisualStudio.LiveShare.2022,Microsoft.VisualStudio.Component.IntelliCode,Component.VisualStudio.GitHub.Copilot,Microsoft.VisualStudio.Component.VC.CoreIde,Microsoft.VisualStudio.Component.VC.Tools.x86.x64,Microsoft.VisualStudio.Component.Graphics.Tools,Microsoft.VisualStudio.Component.VC.DiagnosticTools,Microsoft.VisualStudio.Component.Windows11SDK.22621,Microsoft.VisualStudio.Component.VC.ATL,Microsoft.VisualStudio.Component.VC.Redist.14.Latest,Microsoft.VisualStudio.ComponentGroup.NativeDesktop.Core,Microsoft.VisualStudio.Component.Windows11Sdk.WindowsPerformanceToolkit,Microsoft.VisualStudio.Component.CppBuildInsights,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions.CMake,Microsoft.VisualStudio.Component.VC.CMake.Project,Microsoft.VisualStudio.Component.VC.TestAdapterForBoostTest,Microsoft.VisualStudio.Component.VC.TestAdapterForGoogleTest,Microsoft.VisualStudio.Component.VC.ASAN,Microsoft.VisualStudio.Component.Vcpkg -InstallationPath """C:\Program Files\Microsoft Visual Studio\2022\Community""" -ComponentId Microsoft.VisualStudio.Product.Community -ChannelsPath """https://aka.ms/vs/17/release/channel""" -SetupEngineFilePath """C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe""" -Log """C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_017_Microsoft.VisualStudio.Initializer.log"""6⤵
- Executes dropped EXE
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.13.19.2512613,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.Build.UnGAC,version=17.13.19.2512613,chip=neutral,language=neutral\Microsoft.Build.UnGAC.exe"6⤵
- Executes dropped EXE
-
-
\??\c:\windows\syswow64\windowspowershell\v1.0\powershell.exe"c:\windows\syswow64\\windowspowershell\v1.0\powershell.exe" -NoLogo -NoProfile -Noninteractive -ExecutionPolicy Unrestricted -InputFormat None -Command "& """C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x86\VCRedistInstall.ps1""" -PayloadDirectory """C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x86""" -Architecture x86 -Logfile """C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_250_Microsoft.VisualCpp.Redist.14.log"""; exit $LastExitCode"6⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x86\VC_redist.x86.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x86\VC_redist.x86.exe" /q /norestart /log C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_250_Microsoft.VisualCpp.Redist.14.log7⤵
- Executes dropped EXE
-
C:\Windows\Temp\{5E2930AA-7BE7-43B3-8BBF-071A9A51169C}\.cr\VC_redist.x86.exe"C:\Windows\Temp\{5E2930AA-7BE7-43B3-8BBF-071A9A51169C}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x86\VC_redist.x86.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728 /q /norestart /log C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_250_Microsoft.VisualCpp.Redist.14.log8⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\Temp\{C6977D5E-A140-497D-B7EF-A7C41C3C6553}\.be\VC_redist.x86.exe"C:\Windows\Temp\{C6977D5E-A140-497D-B7EF-A7C41C3C6553}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{895311B2-D638-481A-A0F0-363524BE5FC1} {06B1148A-45FD-46C2-A65B-2639A1FCD5B0} 22769⤵
- Executes dropped EXE
- Adds Run key to start application
-
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={ba10fda9-f731-441f-a999-000bbb7ceec2} -burn.filehandle.self=948 -burn.embedded BurnPipe.{9091F4EE-421E-42D5-A9BA-43DFAD78D413} {06EF0E25-02BE-4595-8D10-A592FBEBB96F} 758010⤵
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.filehandle.attached=544 -burn.filehandle.self=560 -uninstall -quiet -burn.related.upgrade -burn.ancestors={ba10fda9-f731-441f-a999-000bbb7ceec2} -burn.filehandle.self=948 -burn.embedded BurnPipe.{9091F4EE-421E-42D5-A9BA-43DFAD78D413} {06EF0E25-02BE-4595-8D10-A592FBEBB96F} 758011⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{16F123ED-40C8-45B7-9939-AE35971B51DC} {F2E742E0-6F6D-40DE-A80A-5121874CA45E} 573212⤵
-
-
-
-
-
-
-
-
\??\c:\windows\syswow64\windowspowershell\v1.0\powershell.exe"c:\windows\syswow64\\windowspowershell\v1.0\powershell.exe" -NoLogo -NoProfile -Noninteractive -ExecutionPolicy Unrestricted -InputFormat None -Command "& """C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x64\VCRedistInstall.ps1""" -PayloadDirectory """C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x64""" -Architecture x64 -Logfile """C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_251_Microsoft.VisualCpp.Redist.14.log"""; exit $LastExitCode"6⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x64\VC_redist.x64.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x64\VC_redist.x64.exe" /q /norestart /log C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_251_Microsoft.VisualCpp.Redist.14.log7⤵
- Executes dropped EXE
-
C:\Windows\Temp\{591D3BC6-0797-46E6-BE36-7777E70A8EDB}\.cr\VC_redist.x64.exe"C:\Windows\Temp\{591D3BC6-0797-46E6-BE36-7777E70A8EDB}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualCpp.Redist.14,version=14.42.34438,chip=x64\VC_redist.x64.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728 /q /norestart /log C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_251_Microsoft.VisualCpp.Redist.14.log8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
C:\Windows\Temp\{0023DEB1-1FAF-4A7B-80C7-58F974BE4BC0}\.be\VC_redist.x64.exe"C:\Windows\Temp\{0023DEB1-1FAF-4A7B-80C7-58F974BE4BC0}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{87AA6353-6FB2-4D29-92CA-6780862E0DB6} {0D176E64-6667-4360-ADBA-9F9D5D5D093C} 15489⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={b49c10dd-4d54-45f8-ad13-fa25704456a4} -burn.filehandle.self=924 -burn.embedded BurnPipe.{5BB428CB-ADF0-4652-AF66-2D8AED078B7B} {877D59D6-4532-4453-B3E5-1FE5B0A5E329} 612410⤵
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=544 -burn.filehandle.self=560 -uninstall -quiet -burn.related.upgrade -burn.ancestors={b49c10dd-4d54-45f8-ad13-fa25704456a4} -burn.filehandle.self=924 -burn.embedded BurnPipe.{5BB428CB-ADF0-4652-AF66-2D8AED078B7B} {877D59D6-4532-4453-B3E5-1FE5B0A5E329} 612411⤵
- Loads dropped DLL
-
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{FD76626B-C5F1-40D1-8F2E-AA67DDC91265} {D520F8AF-D2BA-4BD0-AFC1-302C590CD403} 647212⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
-
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Debugger.JustInTime,version=17.13.35716.53\VsJustInTimeDebuggerRegistrationHelper.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Debugger.JustInTime,version=17.13.35716.53\VsJustInTimeDebuggerRegistrationHelper.exe" /register 79b81165 /packages "Microsoft.VisualStudio.Component.CoreEditor,Microsoft.VisualStudio.Component.TypeScript.TSServer,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions,Microsoft.VisualStudio.Component.JavaScript.TypeScript,Microsoft.VisualStudio.Component.Roslyn.Compiler,Microsoft.Component.MSBuild,Microsoft.VisualStudio.Component.Roslyn.LanguageServices,Microsoft.VisualStudio.Component.TextTemplating,Microsoft.VisualStudio.Component.NuGet,Microsoft.VisualStudio.Component.Debugger.JustInTime,Component.Microsoft.VisualStudio.LiveShare.2022,Microsoft.VisualStudio.Component.IntelliCode,Component.VisualStudio.GitHub.Copilot,Microsoft.VisualStudio.Component.VC.CoreIde,Microsoft.VisualStudio.Component.VC.Tools.x86.x64,Microsoft.VisualStudio.Component.Graphics.Tools,Microsoft.VisualStudio.Component.VC.DiagnosticTools,Microsoft.VisualStudio.Component.Windows11SDK.22621,Microsoft.VisualStudio.Component.VC.ATL,Microsoft.VisualStudio.Component.VC.Redist.14.Latest,Microsoft.VisualStudio.ComponentGroup.NativeDesktop.Core,Microsoft.VisualStudio.Component.Windows11Sdk.WindowsPerformanceToolkit,Microsoft.VisualStudio.Component.CppBuildInsights,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions.CMake,Microsoft.VisualStudio.Component.VC.CMake.Project,Microsoft.VisualStudio.Component.VC.TestAdapterForBoostTest,Microsoft.VisualStudio.Component.VC.TestAdapterForGoogleTest,Microsoft.VisualStudio.Component.VC.ASAN,Microsoft.VisualStudio.Component.Vcpkg" /log "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_306_Microsoft.VisualStudio.Debugger.JustInTime.log"6⤵
- Executes dropped EXE
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Graphics.EnableTools,version=17.13.35716.53\EnableGraphicsTools.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Microsoft.VisualStudio.Graphics.EnableTools,version=17.13.35716.53\EnableGraphicsTools.exe" /log "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_323_Microsoft.VisualStudio.Graphics.EnableTools.log" /vsfolder "C:\Program Files\Microsoft Visual Studio\2022\Community" /Cab6⤵
- Executes dropped EXE
-
C:\Windows\System32\wscript.exe"C:\Windows\System32\wscript.exe" /b /NoLogo C:\Users\Admin\AppData\Local\Temp\RunDismForEnableGraphicsTools.vbs7⤵
-
C:\Windows\system32\dism.exe"C:\Windows\system32\dism.exe" /Online /Add-Capability /CapabilityName:Tools.Graphics.DirectX~~~~0.0.1.0 /Quiet /NoRestart /LogPath:"C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_323_Microsoft.VisualStudio.Graphics.EnableTools_dism.log"8⤵
-
C:\Users\Admin\AppData\Local\Temp\BAB39C77-B300-40B2-AD1C-3D29D08E4FCC\dismhost.exeC:\Users\Admin\AppData\Local\Temp\BAB39C77-B300-40B2-AD1C-3D29D08E4FCC\dismhost.exe {FB689F60-EC39-486A-B78C-7A84924B2B36}9⤵
- Executes dropped EXE
-
-
-
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_10.0.22621,version=10.0.22621.6,productarch=neutral\winsdkinstaller.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_10.0.22621,version=10.0.22621.6,productarch=neutral\winsdkinstaller.exe" SetupExe=winsdksetup.exe LogFile="C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_414_Win11SDK_10.0.22621.log" SetupLogFolder=windowssdk CeipSetting="on" ProgramFilesOrSharedDriveSdkPath="C:\Program Files (x86)\Windows Kits\10" SetupParameters="/features OptionId.AvrfExternal OptionId.UWPManaged OptionId.WindowsSoftwareLogoToolkit OptionId.SigningTools OptionId.UWPLocalized OptionId.UWPCPP OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 OptionID.DesktopCPPARM OptionID.DesktopCPPARM64 OptionId.MSIInstallTools /quiet /norestart"6⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_10.0.22621,version=10.0.22621.6,productarch=neutral\winsdksetup.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_10.0.22621,version=10.0.22621.6,productarch=neutral\winsdksetup.exe" /features OptionId.AvrfExternal OptionId.UWPManaged OptionId.WindowsSoftwareLogoToolkit OptionId.SigningTools OptionId.UWPLocalized OptionId.UWPCPP OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 OptionID.DesktopCPPARM OptionID.DesktopCPPARM64 OptionId.MSIInstallTools /quiet /norestart /Ceip on /InstallPath "C:\Program Files (x86)\Windows Kits\10" /Log "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_414_Win11SDK_10.0.22621.winsdksetup_1.log"7⤵
- Executes dropped EXE
-
C:\Windows\Temp\{0102E5AD-A419-41EF-8464-6B946F22288E}\.cr\winsdksetup.exe"C:\Windows\Temp\{0102E5AD-A419-41EF-8464-6B946F22288E}\.cr\winsdksetup.exe" -burn.clean.room="C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_10.0.22621,version=10.0.22621.6,productarch=neutral\winsdksetup.exe" -burn.filehandle.attached=560 -burn.filehandle.self=556 /features OptionId.AvrfExternal OptionId.UWPManaged OptionId.WindowsSoftwareLogoToolkit OptionId.SigningTools OptionId.UWPLocalized OptionId.UWPCPP OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 OptionID.DesktopCPPARM OptionID.DesktopCPPARM64 OptionId.MSIInstallTools /quiet /norestart /Ceip on /InstallPath "C:\Program Files (x86)\Windows Kits\10" /Log "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_414_Win11SDK_10.0.22621.winsdksetup_1.log"8⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Windows\Temp\{E716D571-527C-4A45-ABA8-60EEA5508D1C}\.be\winsdksetup.exe"C:\Windows\Temp\{E716D571-527C-4A45-ABA8-60EEA5508D1C}\.be\winsdksetup.exe" -q -burn.elevated BurnPipe.{596B3ABB-5D29-4F65-AF76-733336EC5106} {3A879036-1F75-45EF-A97A-A07C49278C32} 75889⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry class
-
-
-
-
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_WindowsPerformanceToolkit,version=10.0.22621.3,productarch=neutral\winsdkinstaller.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_WindowsPerformanceToolkit,version=10.0.22621.3,productarch=neutral\winsdkinstaller.exe" SetupExe=winsdksetup.exe LogFile="C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_433_Win11SDK_WindowsPerformanceToolkit.log" SetupLogFolder=windowssdk CeipSetting="on" ProgramFilesOrSharedDriveSdkPath="C:\Program Files (x86)\Windows Kits\10" SetupParameters="/features OptionId.WindowsPerformanceToolkit /quiet /norestart"6⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_WindowsPerformanceToolkit,version=10.0.22621.3,productarch=neutral\winsdksetup.exe"C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_WindowsPerformanceToolkit,version=10.0.22621.3,productarch=neutral\winsdksetup.exe" /features OptionId.WindowsPerformanceToolkit /quiet /norestart /Ceip on /Log "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_433_Win11SDK_WindowsPerformanceToolkit.winsdksetup_1.log"7⤵
- Executes dropped EXE
-
C:\Windows\Temp\{B5EDA4A3-F874-4E84-916E-939D61617D99}\.cr\winsdksetup.exe"C:\Windows\Temp\{B5EDA4A3-F874-4E84-916E-939D61617D99}\.cr\winsdksetup.exe" -burn.clean.room="C:\ProgramData\Microsoft\VisualStudio\Packages\Win11SDK_WindowsPerformanceToolkit,version=10.0.22621.3,productarch=neutral\winsdksetup.exe" -burn.filehandle.attached=564 -burn.filehandle.self=684 /features OptionId.WindowsPerformanceToolkit /quiet /norestart /Ceip on /Log "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_433_Win11SDK_WindowsPerformanceToolkit.winsdksetup_1.log"8⤵
- Executes dropped EXE
-
C:\Windows\Temp\{8886A652-0E12-4849-B0B2-8F3931929404}\.be\winsdksetup.exe"C:\Windows\Temp\{8886A652-0E12-4849-B0B2-8F3931929404}\.be\winsdksetup.exe" -q -burn.elevated BurnPipe.{0E3E155B-7A94-451F-9379-699AAAE0E3DE} {70F07953-2B35-4E24-B4D6-E5DE77E2662B} 77809⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
-
-
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\vsfinalizer.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\vsfinalizer.exe" -Operation Install -SKU Community -InstallationID 79b81165 -InstallationName VisualStudio/17.13.6+35931.197 -InstallationVersion 17.13.35931.197 -InstallationWorkloads Microsoft.VisualStudio.Workload.CoreEditor,Microsoft.VisualStudio.Workload.NativeDesktop -InstallationPackages Microsoft.VisualStudio.Component.CoreEditor,Microsoft.VisualStudio.Component.TypeScript.TSServer,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions,Microsoft.VisualStudio.Component.JavaScript.TypeScript,Microsoft.VisualStudio.Component.Roslyn.Compiler,Microsoft.Component.MSBuild,Microsoft.VisualStudio.Component.Roslyn.LanguageServices,Microsoft.VisualStudio.Component.TextTemplating,Microsoft.VisualStudio.Component.NuGet,Microsoft.VisualStudio.Component.Debugger.JustInTime,Component.Microsoft.VisualStudio.LiveShare.2022,Microsoft.VisualStudio.Component.IntelliCode,Component.VisualStudio.GitHub.Copilot,Microsoft.VisualStudio.Component.VC.CoreIde,Microsoft.VisualStudio.Component.VC.Tools.x86.x64,Microsoft.VisualStudio.Component.Graphics.Tools,Microsoft.VisualStudio.Component.VC.DiagnosticTools,Microsoft.VisualStudio.Component.Windows11SDK.22621,Microsoft.VisualStudio.Component.VC.ATL,Microsoft.VisualStudio.Component.VC.Redist.14.Latest,Microsoft.VisualStudio.ComponentGroup.NativeDesktop.Core,Microsoft.VisualStudio.Component.Windows11Sdk.WindowsPerformanceToolkit,Microsoft.VisualStudio.Component.CppBuildInsights,Microsoft.VisualStudio.ComponentGroup.WebToolsExtensions.CMake,Microsoft.VisualStudio.Component.VC.CMake.Project,Microsoft.VisualStudio.Component.VC.TestAdapterForBoostTest,Microsoft.VisualStudio.Component.VC.TestAdapterForGoogleTest,Microsoft.VisualStudio.Component.VC.ASAN,Microsoft.VisualStudio.Component.Vcpkg -AlphaPacksCount 0 -ComponentId Microsoft.VisualStudio.Product.Community -ProductKey -ChannelsPath """https://aka.ms/vs/17/release/channel""" -ChannelId """VisualStudio.17.Release""" -ChannelManifestId """VisualStudio.17.Release/17.13.6+35931.197""" -SetupEngineFilePath """C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe""" -Log """C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_449_Microsoft.VisualStudio.Product.Community.log""" -Nickname """""" -DisplayVersion """17.13.6""" -SemanticVersion """17.13.6+35931.197""" -ChannelTitle """Current""" -ChannelSuffix """""" -CampaignId """2030:89976ac7278540d2bc5c51247fbabccf""" -ProductArch x64 -SetupResult 1 -UserOperation Install6⤵
- Executes dropped EXE
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\DDConfigCA.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\DDConfigCA.exe"7⤵
- Executes dropped EXE
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\devenv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\devenv.exe" /updateConfiguration /allowDuringSetup /log ActivityLog.Setup.xml7⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\VSFinalizer.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\VSFinalizer.exe" -Task PerfWatson7⤵
- Executes dropped EXE
- Checks processor information in registry
-
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /queue6⤵
-
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /queue6⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" queue continue6⤵
- System Location Discovery: System Language Discovery
-
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" queue continue6⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe" eqi 06⤵
- System Location Discovery: System Language Discovery
-
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" eqi 06⤵
-
-
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe" "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\devenv.exe"5⤵
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=5664,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6448 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=876,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=1200 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6584,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6288 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=4344,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5604 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5344,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6196 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5520,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6300 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=6332,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6412 /prefetch:142⤵
- NTFS ADS
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6344,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6252 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6324,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5444 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=6176,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5992 /prefetch:142⤵
- NTFS ADS
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6180,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5876 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6704,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6716 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=6836,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6672 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6872,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6924 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6744,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6356 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=7160,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6568 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=6560,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3188 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7244,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7216 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=6520,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6252 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=3444,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7416 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=6564,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6732 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7192,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5372 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7180,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3408 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=7148,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6648 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=6856,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=1200 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=3412,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6460 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7404,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7384 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=7376,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7460 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=7612,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7644 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=7780,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7812 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=7944,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7976 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=8100,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8132 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=8260,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8272 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=8420,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8292 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=8560,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8576 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=8708,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8752 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=8860,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8904 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=7748,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7684 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=7700,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7708 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=7756,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9060 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=9392,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9416 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=9560,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9648 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=9672,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9572 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=9612,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9680 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=9688,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9796 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=9748,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10000 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=9816,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10016 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=9424,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9396 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=10568,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10612 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=10584,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10632 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=10992,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11004 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=11140,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11176 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=11300,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11280 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=11420,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11440 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=11480,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11616 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=11644,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11664 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=11780,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11804 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=11920,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11956 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=12072,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12100 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=11928,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12244 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=12356,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12368 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=12372,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12536 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=12400,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12676 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=12804,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12816 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=13028,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13044 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=12416,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11648 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=13532,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13572 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=12784,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13660 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=13712,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13808 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=13860,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13952 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=13864,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12224 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=10544,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13212 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=3248,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12088 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=7032,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13052 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=11456,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14128 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=10688,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6540 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=14796,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14824 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=12352,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15020 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=15168,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12644 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=15268,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15284 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=13528,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9460 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=11304,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9472 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=14672,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14212 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=13216,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13372 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=7184,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14892 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=14812,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14572 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=7264,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15060 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=14076,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13564 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=13896,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13928 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=13588,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13888 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=15052,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13620 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=14604,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7340 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=6944,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7008 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=13876,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15016 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=13692,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6356 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=15092,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14324 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=6948,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13400 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=14808,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14684 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=14316,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14288 /prefetch:122⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=14292,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14256 /prefetch:142⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=15056,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12180 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=12944,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12980 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=12988,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9056 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=10040,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7828 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=7624,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10044 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=10200,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10168 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=10160,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9596 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --field-trial-handle=7604,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9724 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=10500,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9844 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=7188,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7340 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=14884,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7960 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=13968,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6984 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=8240,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7956 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=6688,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12404 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=10948,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12168 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=14912,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12152 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=13308,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9772 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=13636,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13632 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=13640,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8400 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=14916,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11668 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=14024,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14308 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --field-trial-handle=14888,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7616 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --field-trial-handle=13048,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13872 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=14968,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9872 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --field-trial-handle=8756,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15216 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=12472,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12604 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=12600,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13932 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --field-trial-handle=11500,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13512 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --field-trial-handle=12584,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13044 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=7284,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7688 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=13516,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8884 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --field-trial-handle=13684,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14872 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --field-trial-handle=15456,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5392 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --field-trial-handle=9812,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9460 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --field-trial-handle=9536,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15736 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --field-trial-handle=13172,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15580 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --field-trial-handle=15916,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15900 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --field-trial-handle=16040,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11268 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --field-trial-handle=16044,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=16024 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --field-trial-handle=15796,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15784 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --field-trial-handle=14396,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14756 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --field-trial-handle=12636,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14404 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --field-trial-handle=7856,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7800 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --field-trial-handle=8336,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8276 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --field-trial-handle=12548,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14740 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --field-trial-handle=14412,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15828 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --field-trial-handle=13212,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8016 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --field-trial-handle=10296,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12428 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --field-trial-handle=15864,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8784 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --field-trial-handle=7804,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15880 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --field-trial-handle=14020,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8620 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --field-trial-handle=15840,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8588 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --field-trial-handle=8728,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15860 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --field-trial-handle=15780,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10252 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --field-trial-handle=10008,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7860 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --field-trial-handle=8676,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7500 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --field-trial-handle=9684,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8844 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --field-trial-handle=5660,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6460 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --field-trial-handle=5704,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12156 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --field-trial-handle=12120,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9968 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --field-trial-handle=3316,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14900 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --field-trial-handle=14792,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7740 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --field-trial-handle=15804,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15144 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --field-trial-handle=10824,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10548 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --field-trial-handle=11176,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8880 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --field-trial-handle=15676,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12976 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --field-trial-handle=5372,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14560 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=189 --field-trial-handle=8948,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10980 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --field-trial-handle=8964,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10340 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --field-trial-handle=11048,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12504 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --field-trial-handle=6608,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=13348 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --field-trial-handle=5848,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14464 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --field-trial-handle=12284,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11716 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --field-trial-handle=11932,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10280 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --field-trial-handle=15688,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10024 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --field-trial-handle=6504,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8160 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --field-trial-handle=6592,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12708 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=199 --field-trial-handle=11656,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14624 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --field-trial-handle=12568,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7380 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=201 --field-trial-handle=5352,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=15288 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --field-trial-handle=10184,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8136 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=203 --field-trial-handle=3456,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10928 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --field-trial-handle=15004,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=10616 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --field-trial-handle=13700,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11436 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --field-trial-handle=10856,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=12540 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --field-trial-handle=10640,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=11308 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --field-trial-handle=10308,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9600 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --field-trial-handle=10852,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=8092 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --field-trial-handle=10628,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14184 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --field-trial-handle=10196,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14004 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --field-trial-handle=11308,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7568 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --field-trial-handle=4668,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=14360 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --field-trial-handle=15784,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4552 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=215 --field-trial-handle=13548,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=9576 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=216 --field-trial-handle=7256,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6172 /prefetch:12⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=14596,i,13980232874954785977,167677637872514577,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=7036 /prefetch:142⤵
- NTFS ADS
-
-
C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding E19BF4E384DA2395EE50BBBDE89615E52⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe"C:\ProgramData\Microsoft\VisualStudio\SetupWMI\MofCompiler.exe" -autorecover "C:\ProgramData\Microsoft\VisualStudio\SetupWMI\Microsoft.VisualStudio.Setup.Management.mof"2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\mofcomp.exe"C:\Windows\system32\wbem\mofcomp" -autorecover C:\ProgramData\Microsoft\VisualStudio\SetupWMI\Microsoft.VisualStudio.Setup.Management.mof3⤵
-
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding CF7F6E7CD637EDA2872578B47960AC8A M Global\MSI00002⤵
- Modifies registry class
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding EF75BE1C5FE3C4B4ED6625DE54D03B59 M Global\MSI00002⤵
- System Location Discovery: System Language Discovery
-
-
C:\Windows\System32\MsiExec.exeC:\Windows\System32\MsiExec.exe -Embedding 15823D7683E2B1C3602192170284162B2⤵
- Loads dropped DLL
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 8759D7C5B8029D6639B12608B2F449F1 E Global\MSI00002⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\appverif.exe"appverif.exe" /setupstandardproviders3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
C:\Windows\syswow64\appverif.exe"appverif.exe" /setupstandardproviders3⤵
- Executes dropped EXE
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft Visual Studio\Installer\setup.exe" resume --installPath "C:\Program Files\Microsoft Visual Studio\2022\Community" --runOnce --installSessionId ed739125-9951-431f-b315-083335aeb0191⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:21⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_250_Microsoft.VisualCpp.Redist.14.log"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_250_Microsoft.VisualCpp.Redist.14.log"4⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{0D6FF06C-E932-41A7-A65F-F95B51344C07} {B041E6DB-8921-4342-A180-8092DF20D457} 58605⤵
- Executes dropped EXE
- Adds Run key to start application
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_251_Microsoft.VisualCpp.Redist.14.log"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_setup_20250412205815_251_Microsoft.VisualCpp.Redist.14.log"4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{0AF3F4AE-0DDE-4BD4-8B22-61DCC3FB6472} {479F5A02-BC6F-46CE-9AC1-7AC4E05544AF} 110165⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe"C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{ba10fda9-f731-441f-a999-000bbb7ceec2}\VC_redist.x86.exe" -burn.filehandle.attached=556 -burn.filehandle.self=5644⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{b49c10dd-4d54-45f8-ad13-fa25704456a4}\VC_redist.x64.exe" -burn.filehandle.attached=552 -burn.filehandle.self=5684⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"1⤵
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"2⤵
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 27097 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {9792c0aa-8cf9-487c-9e74-afc4fe3d0348} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu3⤵
- Loads dropped DLL
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2428 -prefsLen 27133 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {9dd354dc-3f3d-4065-9b66-e5464271028d} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3888 -prefsLen 27274 -prefMapHandle 3892 -prefMapSize 270279 -jsInitHandle 3896 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3920 -initialChannelId {5a980727-d826-4aa8-8054-17a1fc778985} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4056 -prefsLen 27274 -prefMapHandle 4060 -prefMapSize 270279 -ipcHandle 4156 -initialChannelId {1186ed27-9cd6-4fc6-9b1f-9ff1b8bf7f20} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd3⤵
- Loads dropped DLL
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2748 -prefsLen 34773 -prefMapHandle 1684 -prefMapSize 270279 -jsInitHandle 1688 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4436 -initialChannelId {6cae520c-1d86-4807-9a76-9ce6cc68fa3b} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5004 -prefsLen 35010 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 5016 -initialChannelId {043122d4-f9e9-4d77-809b-d2fa5158b5ea} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5500 -prefsLen 32952 -prefMapHandle 5476 -prefMapSize 270279 -jsInitHandle 3088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4960 -initialChannelId {7655d4ba-8dda-421a-a804-4711bc5855e2} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2904 -prefsLen 32952 -prefMapHandle 5196 -prefMapSize 270279 -jsInitHandle 5636 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5644 -initialChannelId {cbdda3f2-ac36-43b9-85df-7efeace3722f} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5816 -prefsLen 32952 -prefMapHandle 5820 -prefMapSize 270279 -jsInitHandle 5824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5832 -initialChannelId {84e2c1ca-6388-4671-af18-ba51b936821d} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab3⤵
- Loads dropped DLL
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6256 -prefsLen 33031 -prefMapHandle 6264 -prefMapSize 270279 -jsInitHandle 6268 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6272 -initialChannelId {bc5e0c9a-e5b4-497e-82ba-dea88757d1af} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7136 -prefsLen 33031 -prefMapHandle 3004 -prefMapSize 270279 -jsInitHandle 7060 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3248 -initialChannelId {e4b50837-7c3d-4884-bdcc-50708f92277f} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3084 -prefsLen 33031 -prefMapHandle 2476 -prefMapSize 270279 -jsInitHandle 3080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6528 -initialChannelId {2b82b157-8366-4420-968d-e50062da43f3} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7460 -prefsLen 33081 -prefMapHandle 7308 -prefMapSize 270279 -jsInitHandle 7356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7468 -initialChannelId {fdfd2ee8-483a-45fb-bd7c-0b3d53169b92} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7784 -prefsLen 33081 -prefMapHandle 7788 -prefMapSize 270279 -jsInitHandle 7792 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7800 -initialChannelId {49cf702d-6e5f-4f53-9095-495fdbc913fe} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8028 -prefsLen 33081 -prefMapHandle 8032 -prefMapSize 270279 -jsInitHandle 8036 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8044 -initialChannelId {8b519dbe-78f3-462f-8bd7-e1fa54b4fe27} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab3⤵
- Checks processor information in registry
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8184 -prefsLen 33081 -prefMapHandle 8228 -prefMapSize 270279 -jsInitHandle 8180 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8240 -initialChannelId {d42068e1-5588-4212-a0cd-8ce3eb08fc4b} -parentPid 7036 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7036" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab3⤵
- Checks processor information in registry
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_414_Win11SDK_10.0.22621.winsdksetup_1.log" /features OptionId.AvrfExternal OptionId.UWPManaged OptionId.WindowsSoftwareLogoToolkit OptionId.SigningTools OptionId.UWPLocalized OptionId.UWPCPP OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 OptionID.DesktopCPPARM OptionID.DesktopCPPARM64 OptionId.MSIInstallTools /Ceip on /InstallPath "C:\Program Files (x86)\Windows Kits\10"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" -burn.clean.room="C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" -burn.filehandle.attached=544 -burn.filehandle.self=564 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_414_Win11SDK_10.0.22621.winsdksetup_1.log" /features OptionId.AvrfExternal OptionId.UWPManaged OptionId.WindowsSoftwareLogoToolkit OptionId.SigningTools OptionId.UWPLocalized OptionId.UWPCPP OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 OptionID.DesktopCPPARM OptionID.DesktopCPPARM64 OptionId.MSIInstallTools /Ceip on /InstallPath "C:\Program Files (x86)\Windows Kits\10"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /burn.runonce1⤵
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /burn.runonce2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" /quiet /modify /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_433_Win11SDK_WindowsPerformanceToolkit.winsdksetup_1.log" /features OptionId.WindowsPerformanceToolkit /Ceip on3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe"C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" -burn.clean.room="C:\ProgramData\Package Cache\{71684ad3-afc2-4a65-9d45-92ef58510f18}\winsdksetup.exe" -burn.filehandle.attached=544 -burn.filehandle.self=560 /quiet /modify /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\windowssdk\dd_setup_20250412205815_433_Win11SDK_WindowsPerformanceToolkit.winsdksetup_1.log" /features OptionId.WindowsPerformanceToolkit /Ceip on4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004D01⤵
-
C:\Windows\explorer.exeC:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding1⤵
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\devenv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\devenv.exe"2⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\controller\Microsoft.ServiceHub.Controller.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\controller\Microsoft.ServiceHub.Controller.exe" b3d86ddde737626a67d54c4e4d163a0a989ef90fb3bad1f20ebff79e5ea21542 /ControllerCooldownTimeout:30000 "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"3⤵
- Executes dropped EXE
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.VSDetouredHost.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.VSDetouredHost.exe" dotnet$VSDetouredHost net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- Executes dropped EXE
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.IdentityHost.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.IdentityHost.exe" dotnet.x64$IdentityHost net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- Executes dropped EXE
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.ThreadedWaitDialog.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.ThreadedWaitDialog.exe" dotnet$ThreadedWaitDialog net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- Executes dropped EXE
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.netfx.x64\ServiceHub.IntellicodeModelService.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.netfx.x64\ServiceHub.IntellicodeModelService.exe" netfx.x64$IntellicodeModelService net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/AppBasePath:C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\\" /ConfigFile:C:\Users\Admin\AppData\Local\Microsoft\VisualStudio\17.0_79b81165\devenv.exe.config4⤵
- Executes dropped EXE
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.IndexingService.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.IndexingService.exe" dotnet$IndexingService net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- Executes dropped EXE
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.Host.dotnet.x64.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.Host.dotnet.x64.exe" dotnet$C94B8CFE-E3FD-4BAF-A941-2866DBB566FE net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.TestWindowStoreHost.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.TestWindowStoreHost.exe" dotnet.x64$TestWindowStoreHost net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- System Time Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.Host.dotnet.x64.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ServiceHub\Hosts\ServiceHub.Host.dotnet.x64\ServiceHub.Host.dotnet.x64.exe" dotnet.x64$TerminalPTYService net.pipe://945621C2E09B92517DF3066BA521AE550E8D "/TelemetrySession:{\"TelemetryLevel\":null,\"IsOptedIn\":true,\"HostName\":\"Dev14\",\"AppInsightsInstrumentationKey\":\"f144292e-e3b2-4011-ac90-20e5c03fbce5\",\"AsimovInstrumentationKey\":\"AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70\",\"CollectorApiKey\":\"f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296\",\"AppId\":1001,\"UserId\":\"1d689c7a-3ab0-4990-bc62-7d1fe5594605\",\"Id\":\"4dae058f-2a12-43ff-82c8-9b050c0e267f\",\"ProcessStartTime\":638800890247765871,\"SkuName\":\"VS_Community\",\"VSExeVersion\":\"17.13.35931.197\",\"BucketFiltersToEnableWatsonForFaults\":[],\"BucketFiltersToAddDumpsToFaults\":[]}"4⤵
- System Time Discovery
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\terminal\ServiceHub\os64\OpenConsole.exe"c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\terminal\ServiceHub\os64\OpenConsole.exe" --headless --width 148 --height 7 --signal 0x7e4 --server 0x7dc5⤵
-
-
C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exeC:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoExit -Command "& { Import-Module """$env:VSAPPIDDIR\..\Tools\Microsoft.VisualStudio.DevShell.dll"""; Enter-VsDevShell -SkipAutomaticLocation -SetDefaultWindowTitle -InstallPath $env:VSAPPIDDIR\..\..\}"5⤵
- Command and Scripting Interpreter: PowerShell
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /c "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\VsDevCmd.bat" && set6⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c vswhere.exe -property catalog_productSemanticVersion -path "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\VsDevCmd.bat"7⤵
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exevswhere.exe -property catalog_productSemanticVersion -path "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\VsDevCmd.bat"8⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v10.0" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v10.0" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\Windows Kits\10\include\" /b /ad-h /on7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows Kits\Installed Roots" /v "KitsRoot10"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows Kits\Installed Roots" /v "KitsRoot10"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\Windows Kits\10\Lib\" /b /ad-h /on7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\vsdevcmd\ext\*.bat" /b /a-d-h /on7⤵
-
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\NETFXSDK"7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\NETFXSDK"7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\NETFXSDK"7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\NETFXSDK"7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"7⤵
-
C:\Windows\system32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"8⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"7⤵
-
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"8⤵
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Unrestricted -Command "iex (get-content \"C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\vcpkg-init.cmd\" -raw)#"7⤵
- Command and Scripting Interpreter: PowerShell
-
-
C:\Windows\system32\doskey.exeDOSKEY vcpkg-shell="C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\vcpkg-cmd.cmd" $*7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c type "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Auxiliary\Build\Microsoft.VCToolsVersion.v143.default.txt"7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c type "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Auxiliary\Build\Microsoft.VCRedistVersion.default.txt"7⤵
-
-
-
-
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PerfWatson2.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PerfWatson2.exe" -launchpeerthenterminate -p 9284 -version 16 -role 3 "{%22TelemetryLevel%22:null,%22IsOptedIn%22:true,%22HostName%22:%22Dev14%22,%22AppInsightsInstrumentationKey%22:%22f144292e-e3b2-4011-ac90-20e5c03fbce5%22,%22AsimovInstrumentationKey%22:%22AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70%22,%22CollectorApiKey%22:%22f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296%22,%22AppId%22:1001,%22UserId%22:%221d689c7a-3ab0-4990-bc62-7d1fe5594605%22,%22Id%22:%224dae058f-2a12-43ff-82c8-9b050c0e267f%22,%22ProcessStartTime%22:638800890247765871,%22SkuName%22:%22VS_Community%22,%22VSExeVersion%22:%2217.13.35931.197%22,%22BucketFiltersToEnableWatsonForFaults%22:[],%22BucketFiltersToAddDumpsToFaults%22:[]}"3⤵
- Executes dropped EXE
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\PerfWatson2.exe".\PerfWatson2.exe" -p 9284 -version 16 -role 3 {%22TelemetryLevel%22:null,%22IsOptedIn%22:true,%22HostName%22:%22Dev14%22,%22AppInsightsInstrumentationKey%22:%22f144292e-e3b2-4011-ac90-20e5c03fbce5%22,%22AsimovInstrumentationKey%22:%22AIF-312cbd79-9dbb-4c48-a7da-3cc2a931cb70%22,%22CollectorApiKey%22:%22f3e86b4023cc43f0be495508d51f588a-f70d0e59-0fb0-4473-9f19-b4024cc340be-7296%22,%22AppId%22:1001,%22UserId%22:%221d689c7a-3ab0-4990-bc62-7d1fe5594605%22,%22Id%22:%224dae058f-2a12-43ff-82c8-9b050c0e267f%22,%22ProcessStartTime%22:638800890247765871,%22SkuName%22:%22VS_Community%22,%22VSExeVersion%22:%2217.13.35931.197%22,%22BucketFiltersToEnableWatsonForFaults%22:[],%22BucketFiltersToAddDumpsToFaults%22:[]}4⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Checks processor information in registry
-
-
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe"C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe" --updateCheck --activityId 7e264dcb-c49d-4897-8ec0-e75cb19d51ef --instanceId 79b811653⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Checks processor information in registry
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\vshost.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\vshost.exe"3⤵
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {4C2856B7-0A51-4048-9BDE-71A3121CD8FA} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {DEDB7B61-D627-484E-8CE8-086E074AF8D9} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- Executes dropped EXE
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {54B775D8-F817-4DEF-9200-CCF07F3C7EFC} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {43B6B850-024E-4CE8-933C-ECAB95614FC3} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {85B9CECD-C3C3-4158-9CCD-012324A580FF} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {F4E21061-2A7C-4752-B3F4-56F257598E7B} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {A052A94C-684B-44A7-8FBA-5AB78977D9E4} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {36B0F0BA-5063-412B-9C8B-69A4E2A6D240} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {CEA192E3-FECD-466F-A83A-C352CCB42EE9} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {31A1668F-97B1-4560-814D-07A6E46972F0} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {B663E583-6200-48C0-AC41-0CEDD0F65BC2} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {38EB49C9-AB3F-472A-87A5-43D6959B330D} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {B589E262-FC01-4C49-880A-C276C960A433} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {14CACE2F-26EF-474B-8875-50E33CA6744F} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {CCF5D12E-1F5D-4A26-8099-34DA20C511CA} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {1347220F-D6EE-451C-B29A-1814825A8913} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {3F6A9C9A-4D22-4F5E-9EA4-C09B9BD60C3E} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {7E31649F-5DA5-4603-B02F-D3B63A100166} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {134A0081-C350-4979-8DE8-34AF2E8A580C} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -s {BFFF6F49-ACBB-47E1-9928-45891B1437BB} -p 9284 -i TagParser -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {387D91FE-15CA-493B-B355-C24845D0837B} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe"C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\VC\vcpackages\x86\VCPkgSrv.exe" -q -s {56A40654-42DD-4F08-B912-26EEDA7A6FE7} -p 9284 -i IntelliSense -r "C:\Program Files\Microsoft Visual Studio\2022\Community\common7\ide\x86\VSReliability.dll"4⤵
- System Location Discovery: System Language Discovery
-
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager remote --verbose3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-parse --git-dir --git-common-dir --is-bare-repository --git-path index --git-path objects/ --git-path hooks/ --git-path info/ --git-path logs/ --git-path HEAD --git-path description --git-path refs/ --show-toplevel --shared-index-path3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager for-each-ref --format='[%(refname)][%(objecttype)][%(objectname)][%(upstream)][%(push)][%(HEAD)]' refs/heads/ refs/remotes/ refs/tags/3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager cat-file --batch=[%(objectname)][%(objecttype)][%(objectsize)]3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --count --not --remotes --not --use-bitmap-index --header refs/heads/main --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --first-parent --walk-reflogs --header refs/stash --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --first-parent --walk-reflogs --header refs/stash --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager for-each-ref --format='[%(refname)][%(objecttype)][%(objectname)][%(upstream)][%(push)][%(HEAD)]' refs/heads/ refs/remotes/ refs/tags/3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager cat-file --batch=[%(objectname)][%(objecttype)][%(objectsize)]3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --count --not --remotes --not --use-bitmap-index --header refs/heads/main --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-parse --git-dir --git-common-dir --is-bare-repository --git-path index --git-path objects/ --git-path hooks/ --git-path info/ --git-path logs/ --git-path HEAD --git-path description --git-path refs/ --show-toplevel --shared-index-path3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager for-each-ref --format='[%(refname)][%(objecttype)][%(objectname)][%(upstream)][%(push)][%(HEAD)]' refs/heads/ refs/remotes/ refs/tags/3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager cat-file --batch=[%(objectname)][%(objecttype)][%(objectsize)]3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --count --not --remotes --not --use-bitmap-index --header refs/heads/main --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --first-parent --walk-reflogs --header refs/stash --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager rev-list --first-parent --walk-reflogs --header refs/stash --3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
C:\Windows\system32\cmd.exe"C:\Windows\system32\cmd.exe" /U /K "set ________________cd2ebaeb-5603-4897-9ed1-aaee5cae251b=Hi! && set VSCMD_DEBUG=5 && "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\..\Tools\VsDevCmd.bat" -no_logo -arch=amd64 -host_arch=x86 && echo -- 0644b162-d94d-4919-9a9c-eb03714e40ca && set"3⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c vswhere.exe -property catalog_productSemanticVersion -path "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\VsDevCmd.bat"4⤵
-
C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exevswhere.exe -property catalog_productSemanticVersion -path "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\VsDevCmd.bat"5⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer32"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkDir64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\SxS\VC7" /v "FrameworkVer64"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v10.0" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v10.0" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\Windows Kits\10\include\" /b /ad-h /on4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows Kits\Installed Roots" /v "KitsRoot10"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows Kits\Installed Roots" /v "KitsRoot10"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\Windows Kits\10\Lib\" /b /ad-h /on4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c dir "C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\vsdevcmd\ext\*.bat" /b /a-d-h /on4⤵
-
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\NETFXSDK"4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\NETFXSDK"4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Wow6432Node\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\NETFXSDK"4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\NETFXSDK"4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x86" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"4⤵
-
C:\Windows\System32\reg.exereg query "HKCU\SOFTWARE\Microsoft\Microsoft SDKs\Windows\v8.1A\WinSDK-NetFx40Tools-x64" /v "InstallationFolder"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"5⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c reg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"4⤵
-
C:\Windows\System32\reg.exereg query "HKLM\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\VSPerf" /v "CollectionToolsDir2019"5⤵
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Unrestricted -Command "iex (get-content \"C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\vcpkg-init.cmd\" -raw)#"4⤵
- Command and Scripting Interpreter: PowerShell
-
-
C:\Windows\System32\doskey.exeDOSKEY vcpkg-shell="C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\vcpkg-cmd.cmd" $*4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c type "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Auxiliary\Build\Microsoft.VCToolsVersion.v143.default.txt"4⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c type "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\Auxiliary\Build\Microsoft.VCRedistVersion.default.txt"4⤵
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -NoProfile -Command "& {Import-Module 'C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\\Microsoft.VisualStudio.DevShell.dll'; Send-VsDevShellTelemetry -NewInstanceType Cmd;}"4⤵
- Command and Scripting Interpreter: PowerShell
-
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager --no-optional-locks status --porcelain=v2 --branch --no-ahead-behind --untracked-files=all --ignored=matching --ignore-submodules=dirty3⤵
-
-
\??\c:\program files\microsoft visual studio\2022\community\common7\ide\commonextensions\microsoft\teamfoundation\team explorer\Git\mingw64\bin\git.exe"c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin/git.exe" -c "gc.auto=0" -c "credential.helper=manager" -c "core.askpass=c:/program files/microsoft visual studio/2022/community/common7/ide/commonextensions/microsoft/teamfoundation/team explorer/Git/mingw64/bin\git-askpass.exe" --no-pager config --show-origin -z --list3⤵
-
-
-
C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications1⤵
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Defense Evasion
Modify Registry
3Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Replay Monitor
Loading Replay Monitor...
Downloads
e5944f2.rbs
e5944f6.rbs
e5944fb.rbs
e594500.rbs
e594505.rbs
e59450a.rbs
e59450f.rbs
e594514.rbs
e594519.rbs
e59451e.rbs
e594523.rbs
e594528.rbs
e59452d.rbs
e594532.rbs
e594537.rbs
e59453c.rbs
e594541.rbs
e594546.rbs
e594547.rbf
e59454f.rbs
e594554.rbs
e594559.rbs
e594560.rbs
e594565.rbs
e594572.rbs
e594581.rbs
e594588.rbs
e59458e.rbs
e59459b.rbs
e5945aa.rbs
e5945af.rbs
e5945b4.rbs
e5945b9.rbs
e5945be.rbs
e5945c3.rbs
e5945c8.rbs
e5945cd.rbs
e5945d2.rbs
e5945d7.rbs
e5945dc.rbs
e5945e1.rbs
e5945e6.rbs
e5945eb.rbs
e5945f0.rbs
e5945f5.rbs
e5945fa.rbs
e5945ff.rbs
e594604.rbs
e594609.rbs
e59460e.rbs
e594613.rbs
e594618.rbs
e59461d.rbs
e594622.rbs
e594627.rbs
e59462c.rbs
e594631.rbs
e594636.rbs
e59463b.rbs
e594640.rbs
e594645.rbs
e59464a.rbs
e59464f.rbs
e594654.rbs
e594659.rbs
e59465e.rbs
e594663.rbs
e594668.rbs
e59466d.rbs
e594672.rbs
e594677.rbs
e59467c.rbs
e594681.rbs
e594686.rbs
e59468b.rbs
e594690.rbs
e594695.rbs
e59469a.rbs
e59469f.rbs
e5946a4.rbs
e5946a9.rbs
e5946ae.rbs
e5946b3.rbs
e5946b8.rbs
e5946bd.rbs
e5946c2.rbs
e5946c7.rbs
e5946cc.rbs
e5946d1.rbs
e5946d6.rbs
e5946db.rbs
e5946e0.rbs
e5946e5.rbs
e5946ea.rbs
e5946ef.rbs
e5946f4.rbs
e5946f9.rbs
e5946fe.rbs
e594703.rbs
e594708.rbs
e59470d.rbs
e594712.rbs
e594717.rbs
e59471c.rbs
e594721.rbs
e594726.rbs
e59472b.rbs
e594730.rbs
e594735.rbs
e59473a.rbs
msdbg2.dll
Windows.xml
msalruntime_x86.dll
Microsoft.VisualStudio.RemoteControl.dll
cat05047a45609f311645eebcac2739fc4c.cat
cat0b2a4987421d95d0cb37640889aa9e9b.cat
cat13d68b8a7b6678a368e2d13ff4027521.cat
cat26ea25236f12b23db661acf268a70cfa.cat
cat2a30b5d1115d515c6ddd8cd6b5173835.cat
cat353be8f91891a6a5761b9ac157fa2ff1.cat
cat43cc1b2daf931a3f0ea4ad696c2327fb.cat
cat463ad1b0783ebda908fd6c16a4abfe93.cat
cat4ec14c5368b7642563c070cd168960a8.cat
catdcfb1aa345e349091a44e86ce1766566.cat
cate59830bab4961666e8d8c2af1e5fa771.cat
appnotify.h
WindowsApp.lib
WindowsApp.lib
WindowsApp.lib
WindowsApp.lib
Windows.AI.MachineLearning.MachineLearningContract.winmd
Windows.AI.MachineLearning.Preview.MachineLearningPreviewContract.winmd
Windows.ApplicationModel.Activation.ActivatedEventsContract.winmd
Windows.ApplicationModel.Activation.ActivationCameraSettingsContract.winmd
Windows.ApplicationModel.Activation.ContactActivatedEventsContract.winmd
Windows.ApplicationModel.Activation.WebUISearchActivatedEventsContract.winmd
Windows.ApplicationModel.Activation.WebUISearchActivatedEventsContract.xml
Windows.ApplicationModel.Background.BackgroundAlarmApplicationContract.winmd
Windows.ApplicationModel.Calls.Background.CallsBackgroundContract.winmd
Windows.ApplicationModel.Calls.CallsPhoneContract.winmd
Windows.ApplicationModel.Calls.CallsVoipContract.winmd
Windows.ApplicationModel.Calls.LockScreenCallContract.winmd
Windows.ApplicationModel.CommunicationBlocking.CommunicationBlockingContract.winmd
Windows.ApplicationModel.FullTrustAppContract.winmd
Windows.ApplicationModel.Preview.InkWorkspace.PreviewInkWorkspaceContract.winmd
Windows.ApplicationModel.Preview.Notes.PreviewNotesContract.winmd
Windows.ApplicationModel.Resources.Management.ResourceIndexerContract.winmd
Windows.ApplicationModel.Search.Core.SearchCoreContract.winmd
Windows.ApplicationModel.Search.SearchContract.winmd
Windows.ApplicationModel.SocialInfo.SocialInfoContract.winmd
Windows.ApplicationModel.StartupTaskContract.winmd
Windows.ApplicationModel.Wallet.WalletContract.winmd
Windows.Devices.Custom.CustomDeviceContract.winmd
Windows.Devices.DevicesLowLevelContract.winmd
Windows.Devices.Portable.PortableDeviceContract.winmd
Windows.Devices.Printers.Extensions.ExtensionsContract.winmd
Windows.Devices.Printers.PrintersContract.winmd
Windows.Devices.Scanners.ScannerDeviceContract.winmd
Windows.Devices.SmartCards.SmartCardBackgroundTriggerContract.winmd
Windows.Devices.SmartCards.SmartCardEmulatorContract.winmd
Windows.Devices.Sms.LegacySmsApiContract.winmd
Windows.Embedded.DeviceLockdown.DeviceLockdownContract.winmd
Windows.Foundation.FoundationContract.winmd
Windows.Foundation.UniversalApiContract.winmd
Windows.Gaming.Input.GamingInputPreviewContract.winmd
Windows.Gaming.Preview.GamesEnumerationContract.winmd
Windows.Gaming.UI.GameChatOverlayContract.winmd
Windows.Gaming.UI.GamingUIProviderContract.winmd
Windows.Gaming.XboxLive.StorageApiContract.winmd
Windows.Globalization.GlobalizationJapanesePhoneticAnalyzerContract.winmd
Windows.Graphics.Printing3D.Printing3DContract.winmd
Windows.Management.Deployment.Preview.DeploymentPreviewContract.winmd
Windows.Management.Deployment.SharedPackageContainerContract.winmd
Windows.Management.Update.WindowsUpdateContract.winmd
Windows.Management.Workplace.WorkplaceSettingsContract.winmd
Windows.Media.AppBroadcasting.AppBroadcastingContract.winmd
Windows.Media.AppRecording.AppRecordingContract.winmd
Windows.Media.Capture.AppBroadcastContract.winmd
Windows.Media.Capture.AppCaptureContract.winmd
Windows.Media.Capture.AppCaptureMetadataContract.winmd
Windows.Media.Capture.CameraCaptureUIContract.winmd
Windows.Media.Capture.GameBarContract.winmd
Windows.Media.Devices.CallControlContract.winmd
Windows.Media.MediaControlContract.winmd
Windows.Media.Playlists.PlaylistsContract.winmd
Windows.Media.Protection.ProtectionRenewalContract.winmd
Windows.Networking.Connectivity.WwanContract.winmd
Windows.Networking.NetworkOperators.LegacyNetworkOperatorsContract.winmd
Windows.Networking.NetworkOperators.NetworkOperatorsFdnContract.WinMD
Windows.Networking.Sockets.ControlChannelTriggerContract.winmd
Windows.Networking.XboxLive.XboxLiveSecureSocketsContract.winmd
Windows.Perception.Automation.Core.PerceptionAutomationCoreContract.winmd
Windows.Phone.PhoneContract.winmd
Windows.Phone.StartScreen.DualSimTileContract.WinMD
Windows.Security.EnterpriseData.EnterpriseDataContract.winmd
Windows.Security.ExchangeActiveSyncProvisioning.EasContract.winmd
Windows.Security.Isolation.Isolatedwindowsenvironmentcontract.winmd
Windows.Services.Maps.GuidanceContract.winmd
Windows.Services.Maps.LocalSearchContract.winmd
Windows.Services.Store.StoreContract.winmd
Windows.Services.TargetedContent.TargetedContentContract.winmd
Windows.Storage.Provider.CloudFilesContract.winmd
Windows.System.Profile.ProfileHardwareTokenContract.winmd
Windows.System.Profile.ProfileRetailInfoContract.winmd
Windows.System.Profile.ProfileSharedModeContract.winmd
Windows.System.Profile.SystemManufacturers.SystemManufacturersContract.winmd
Windows.System.SystemManagementContract.winmd
Windows.System.UserProfile.UserProfileContract.winmd
Windows.System.UserProfile.UserProfileLockScreenContract.winmd
Windows.UI.ApplicationSettings.ApplicationsSettingsContract.winmd
Windows.UI.Core.AnimationMetrics.AnimationMetricsContract.winmd
Windows.UI.Core.CoreWindowDialogsContract.winmd
Windows.UI.Core.Preview.Communications.PreviewCommunicationsContract.winmd
Windows.UI.Shell.SecurityAppManagerContract.winmd
Windows.UI.Shell.SecurityAppManagerContract.xml
Windows.UI.Shell.WindowTabManagerContract.winmd
Windows.UI.UIAutomation.UIAutomationContract.winmd
Windows.UI.UIAutomation.UIAutomationContract.xml
Windows.UI.ViewManagement.ViewManagementViewScalingContract.winmd
Windows.UI.WebUI.Core.WebUICommandBarContract.winmd
Windows.UI.Xaml.Core.Direct.XamlDirectContract.winmd
Windows.UI.Xaml.Hosting.HostingContract.winmd
Windows.Web.Http.Diagnostics.HttpDiagnosticsContract.winmd
windows.system.profile.platformautomaticappsignincontract.winmd
api-ms-win-core-console-l1-1-0.dll
api-ms-win-core-datetime-l1-1-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll
api-ms-win-core-libraryloader-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-memory-l1-1-0.dll
api-ms-win-core-namedpipe-l1-1-0.dll
api-ms-win-core-processenvironment-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-crt-conio-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-environment-l1-1-0.dll
api-ms-win-crt-filesystem-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-multibyte-l1-1-0.dll
api-ms-win-crt-private-l1-1-0.dll
api-ms-win-crt-process-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-crt-time-l1-1-0.dll
api-ms-win-crt-utility-l1-1-0.dll
ISVTier5AppSignSDK.cc
SupportedAPIs.xml
ServicingCommon.dll
Microsoft.Diagnostics.Tracing.EventSource.dll
Microsoft.Windows.Build.Signing.mssign32.dll.manifest
ServicingCommon.dll
signtool.exe.manifest
Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll
Microsoft.IdentityModel.Clients.ActiveDirectory.dll
ServicingCommon.dll
msdbg2.dll
abi-x86-Clang.cmake
BlueGeneP-dynamic-Initialize.cmake
Windows-Determine-CXX.cmake
WindowsPhone-MSVC-C.cmake
WindowsPhone-MSVC-CXX.cmake
WindowsPhone.cmake
Xenix.cmake
visionOS-Determine-CXX.cmake
visionOS.cmake
v12_CSharp.json
v12_LIB.json
v12_Link.json
v12_MASM.json
v12_RC.json
v143_Link.json
System.Text.Json.dll
Resources.en.resx
diagnosticsHub.js
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
msalruntime.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
msalruntime_arm64.dll
msalruntime_x86.dll
Microsoft.VisualStudio.CoreUtility.dll
Microsoft.VisualStudio.Text.Data.dll
Microsoft.VisualStudio.Text.Logic.dll
md-vb.zip
CertificateInformation.dat
Microsoft.NET.StringTools.dll
Microsoft.IdentityModel.Clients.ActiveDirectory.dll
netstandard.dll
Microsoft.TeamFoundation.TestManagement.ClientPackageUI.dll
git.exe
COPYING
COPYING.LESSER
ct_log_list.cnf
System.Net.Http.Formatting.dll
Microsoft.IO.Redist.dll
System.Text.Encodings.Web.dll
System.Management.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
Microsoft.VisualStudio.TestWindow.Interfaces.resources.dll
Microsoft.VisualStudio.TestWindow.Internal.resources.dll
DumpMinitool.x86.exe.config
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
testhost.net47.arm64.exe.config
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.TestPlatform.CommunicationUtilities.resources.dll
Microsoft.TestPlatform.CoreUtilities.resources.dll
Microsoft.VisualStudio.TestPlatform.Common.resources.dll
Microsoft.VisualStudio.TestPlatform.ObjectModel.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.TestWindow.RemoteUtilities.resources.dll
Microsoft.VisualStudio.Extensibility.Editor.Contracts.dll
EULA.rtf
ThirdPartyNotices.rtf
System.Buffers.dll
System.Collections.Immutable.dll
Microsoft.Bcl.AsyncInterfaces.dll
Microsoft.DiaSymReader.dll
Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll
Microsoft.VisualStudio.RemoteControl.dll
Microsoft.VisualStudio.Validation.dll
System.Composition.AttributedModel.dll
System.Composition.Convention.dll
System.Composition.Hosting.dll
System.Composition.Runtime.dll
System.Composition.TypedParts.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
Microsoft.VisualStudio.Validation.resources.dll
MessagePack.Annotations.dll
Microsoft.VisualStudio.Validation.dll
System.Numerics.Vectors.dll
System.Security.Principal.Windows.dll
System.Threading.Tasks.Extensions.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.resources.dll
Microsoft.CodeAnalysis.InteractiveHost.dll
tbbmalloc.dll
hotItem.png
hotPath.png
autoComplete.css
filter.svg
itemcollapsedicon.png
itemexpandedicon.png
knockout-3.4.0.js
congrats_tutorial.png
Welcome.Python.Run.StopDebugging.png
Welcome.Python.Run.png
treeGrid.css
codeDirectionArrow.svg
hotItem.svg
hotPath.svg
hotPathDisabled.svg
i_chartzoom_reset.svg
i_chartzoom_reset_disabled.svg
chart.css
indeterminateProgress.css
searchControl.css
toolbar.css
information_blue.svg
function.linux.appService.arm.json
Microsoft.VisualStudio.Copilot.ChunkIndexing.MarkdownChunkSource.servicehub.service.json
System.ClientModel.dll
System.Memory.Data.dll
Copilot.png
Microsoft.Extensions.DependencyInjection.dll
dbgcore.dll
dbghelp.dll
symsrv.dll
Microsoft.SmartML.IntelliCode.dll
Microsoft.VisualStudio.LiveShare.dll
version.json
System.CodeDom.dll
ImageContentTask.xml
MeshContentTask.xml
ShaderGraphContentTask.xml
Brighten.dgsl
lambert.dgsl
dsdadd.bmp
dsdadd.dds
dsddot.bmp
dsdmath.bmp
dsdmul.bmp
dsdmuladd.bmp
ImageContentTask.props
ImageContentTask.targets
MeshContentTask.props
MeshContentTask.targets
ShaderGraphContentTask.props
ShaderGraphContentTask.targets
rabbitmq.json
secrets.keyVault.nuget.json
Microsoft.Win32.Primitives.dll
System.AppContext.dll
System.Collections.Concurrent.dll
System.Collections.NonGeneric.dll
System.Collections.Specialized.dll
System.Collections.dll
System.ComponentModel.EventBasedAsync.dll
System.ComponentModel.Primitives.dll
System.ComponentModel.TypeConverter.dll
System.ComponentModel.dll
System.Console.dll
System.Data.Common.dll
System.Diagnostics.Contracts.dll
System.Diagnostics.Debug.dll
System.Diagnostics.FileVersionInfo.dll
System.Diagnostics.Process.dll
System.Diagnostics.StackTrace.dll
System.Diagnostics.TextWriterTraceListener.dll
System.Diagnostics.Tools.dll
System.Diagnostics.TraceSource.dll
System.Diagnostics.Tracing.dll
System.Drawing.Primitives.dll
System.Dynamic.Runtime.dll
System.Globalization.Calendars.dll
System.Globalization.Extensions.dll
System.Globalization.dll
System.IO.Compression.ZipFile.dll
System.IO.Compression.dll
System.IO.FileSystem.DriveInfo.dll
System.IO.FileSystem.Primitives.dll
System.IO.FileSystem.Watcher.dll
System.IO.FileSystem.dll
System.IO.IsolatedStorage.dll
System.IO.MemoryMappedFiles.dll
System.IO.Pipes.dll
System.IO.UnmanagedMemoryStream.dll
System.IO.dll
System.Linq.Expressions.dll
System.Linq.Parallel.dll
System.Linq.Queryable.dll
System.Linq.dll
System.Net.Http.dll
System.Net.NameResolution.dll
System.Net.NetworkInformation.dll
System.Net.Ping.dll
System.Net.Primitives.dll
System.Net.Requests.dll
System.Net.Security.dll
System.Net.Sockets.dll
System.Net.WebHeaderCollection.dll
System.Net.WebSockets.Client.dll
System.Net.WebSockets.dll
System.ObjectModel.dll
System.Reflection.Extensions.dll
System.Reflection.Primitives.dll
System.Reflection.dll
System.Resources.Reader.dll
System.Resources.ResourceManager.dll
System.Resources.Writer.dll
System.Runtime.CompilerServices.VisualC.dll
System.Runtime.Extensions.dll
System.Runtime.Handles.dll
System.Runtime.InteropServices.dll
System.Runtime.Numerics.dll
System.Runtime.Serialization.Formatters.dll
System.Runtime.Serialization.Json.dll
System.Runtime.Serialization.Primitives.dll
System.Runtime.Serialization.Xml.dll
System.Runtime.dll
System.Security.Claims.dll
System.Security.Cryptography.Algorithms.dll
System.Security.Cryptography.Csp.dll
System.Security.Cryptography.Encoding.dll
System.Security.Cryptography.Primitives.dll
System.Security.Cryptography.X509Certificates.dll
System.Security.Principal.dll
System.Security.SecureString.dll
System.Text.Encoding.Extensions.dll
System.Text.Encoding.dll
System.Text.RegularExpressions.dll
System.Threading.Overlapped.dll
System.Threading.Tasks.Parallel.dll
System.Threading.Tasks.dll
System.Threading.Thread.dll
System.Threading.ThreadPool.dll
System.Threading.Timer.dll
System.Threading.dll
System.Xml.ReaderWriter.dll
System.Xml.XDocument.dll
System.Xml.XPath.XDocument.dll
System.Xml.XPath.dll
System.Xml.XmlDocument.dll
System.Xml.XmlSerializer.dll
datacollector.exe.config
vstest.console.exe.config
System.Security.AccessControl.dll
Icon.ico
file.ts
jsconfig.json
tsconfig.json
Prospective.WebCSharp.tt
vspmsgui.dll
vspmsgui.dll
Microsoft.VisualStudio.CodeAnalysis.dll
Microsoft.VisualStudio.Debugger.Metadata.dll
Microsoft.VisualStudio.ExtensionEngineContract.dll
Microsoft.VisualStudio.Setup.Common.dll
Microsoft.VisualStudio.Setup.Download.dll
Microsoft.VisualStudio.Setup.dll
Microsoft.VisualStudio.Utilities.Internal.dll
Microsoft.VisualStudio.vil.dll
Microsoft.VisualStudio.vil.host.dll
Microsoft.VisualStudio.Debugger.Runtime.Desktop.dll
Microsoft.VisualStudio.Debugger.Runtime.NetCoreApp.dll
microsoft.visualstudio.setup.nuget.config
vspmsg.dll
JavaScript.vssettings
System.Memory.dll
System.Runtime.CompilerServices.Unsafe.dll
MemoryAnalyzer.Extensions.dll
Microsoft.DiaSymReader.PortablePdb.dll
Microsoft.Diagnostics.FastSerialization.dll
Microsoft.Diagnostics.MemoryGraph.dll
Microsoft.Diagnostics.Utilities.dll
Microsoft.VisualStudio.Debugger.Interop.10.0.dll
Microsoft.VisualStudio.Debugger.Interop.11.0.dll
Microsoft.VisualStudio.Debugger.Interop.12.0.dll
Microsoft.VisualStudio.Debugger.Interop.14.0.dll
Microsoft.VisualStudio.Debugger.Interop.15.0.dll
Microsoft.VisualStudio.Debugger.InteropA.dll
System.Memory.dll
System.Numerics.Vectors.dll
System.Reflection.Metadata.dll
System.Runtime.CompilerServices.Unsafe.dll
iisresolver.dll
msvcp140_atomic_wait.dll
symsrv.yes
vcruntime140.dll
vsdebugeng.manimpl.45.dll
Microsoft.Win32.Registry.dll
msvsmon.html
Microsoft.TeamFoundation.TestManagement.Client.dll
Microsoft.TeamFoundation.TestManagement.Common.dll
Newtonsoft.Json.dll
concrt140.dll
msvcp140.dll
VsGraphicsResources.dll
MCppEE.dll
TypeScriptDebugEngine.dll
msdia140.dll
ServiceHub.RoslynCodeAnalysisService.exe.config
ServiceHub.LiveUnitTesting.RemoteSyncManager.runtimeconfig.json
ServiceHub.RoslynCodeAnalysisServiceS.runtimeconfig.json
dotnet.x64.DataWarehouseHost.servicehub.host.json
dotnet.x64.IdentityHost.servicehub.host.json
dotnet.x64.IndexingService.servicehub.host.json
dotnet.x64.LiveUnitTesting.RemoteSyncManager.servicehub.host.json
dotnet.x64.LiveUnitTesting.servicehub.host.json
dotnet.x64.RoslynCodeAnalysisService.servicehub.host.json
dotnet.x64.RoslynCodeAnalysisServiceS.servicehub.host.json
dotnet.x64.TestWindowStoreHost.servicehub.host.json
dotnet.x64.ThreadedWaitDialog.servicehub.host.json
dotnet.x64.VSDetouredHost.servicehub.host.json
dotnet.x64.servicehub.host.json
ServiceHub.IdentityHost.exe.config
vcruntime140.dll
Microsoft.Build.CommonTypes.xsd
Microsoft.Build.Core.xsd
Microsoft.CodeAnalysis.CSharp.Scripting.dll
Microsoft.CodeAnalysis.CSharp.dll
Microsoft.CodeAnalysis.Scripting.dll
Microsoft.CodeAnalysis.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
Microsoft.CodeAnalysis.CSharp.resources.dll
Microsoft.CodeAnalysis.resources.dll
System.Reflection.MetadataLoadContext.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTrackerA4UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
FileTracker32UI.dll
FileTracker64UI.dll
Microsoft.Bcl.AsyncInterfaces.dll
System.Reflection.Metadata.dll
System.Threading.Tasks.Dataflow.dll
System.ValueTuple.dll
FileTracker32.dll
FileTracker64.dll
FileTrackerA4.dll
Debugger_General.xaml
liblinux.resources.dll
Microsoft.Cpp.UnitTest.props
liblinux.IO.resources.dll
liblinux.Local.resources.dll
text.js
text.js
license
LICENSE.md
LICENSE
LICENSE
license
LICENSE
LICENSE-MIT.txt
LICENSE
LICENSE
package.json
package.json
LICENSE
index.js
package.json
LICENSE
LICENSE
LICENSE
LICENSE
AUTHORS
LICENSE
parse.js
LICENSE
Microsoft.VisualStudio.Telemetry.dll
VSPerfControl.Interop.dll
msdia140.dll
VsGraphicsHelper.dll
System.Memory.dll
System.Runtime.CompilerServices.Unsafe.dll
asan_ignorelist.txt
vctip.exe.config
clang_rt.asan_dynamic-i386.pdb
Microsoft.Diagnostics.Tracing.EventSource.dll
xdcmake.exe.config
complex.xml
list.xml
libvcruntimed.amd64.onecore.pdb
exe_initialize_mta.lib
iso_stdio_wide_specifiers.lib
legacy_stdio_definitions.lib
legacy_stdio_wide_specifiers.lib
oldnames.lib
legacy_stdio_float_rounding.obj
stl_asan.lib
vcasan.lib
exe_initialize_mta.lib
iso_stdio_wide_specifiers.lib
legacy_stdio_definitions.lib
legacy_stdio_wide_specifiers.lib
legacy_x86_flt_exceptions.lib
oldnames.lib
legacy_stdio_float_rounding.obj
index.js
package.json
index.js
index.js
package.json
package.json
StyleSheet.scss
newtypescriptfileitems.vsdir
DotNetConfig471.xsd
mscordaccore_amd64_amd64_8.0.1525.16413.dll
payload.vsix
payload.vsix
VCRedistInstall.ps1
payload.vsix
payload.vsix
payload.vsix
6b12414fdb1b4978419abcd383206c09.cab
b2f03f34ff83ec013b9e45c7cd8e8a73.cab
cdea5502a35d09ddfbcda12e3a391dc0.cab
4e2dea081242e821596b58b31bc22cca.cab
598442d9f84639d200d4f3af477da95c.cab
WPTarm (DesktopEditions)-arm_en-us.msi
winsdksetup.exe
state.json
state.packages.json.temp
vs_setup_bootstrapper_202504122057076255.json
04d012af-55fa-4cd1-a166-425bb88aa9a7.tmp
BrowsingTopicsState
f_000021
f_000027
f_000028
f_000029
f_00002a
f_00002c
f_00002d
f_00002e
f_00002f
f_000030
f_000031
f_000032
f_000033
f_000034
f_00004f
f_000050
f_000051
f_000054
f_000058
f_000059
f_00005a
f_00005b
f_00005c
f_00005d
f_00005e
f_00005f
f_000060
f_000061
f_000062
f_000063
f_000064
f_000065
f_000066
f_000075
f_00007d
f_000080
f_000081
f_000082
f_000083
f_000085
f_000086
f_000087
f_000088
f_000089
f_00008c
f_00008d
f_000092
f_000093
f_000094
f_000095
f_000096
f_000099
f_00009a
f_00009d
f_00009f
f_0000a1
f_0000bd
f_0000c4
f_0000c6
f_0000c7
f_0000cb
00f119d0e3687ed3_0
03b1acdebff60f63_0
063172c9bd1c3422_0
0aa898d597fa5c73_0
0b34925ddc155ea1_0
0de3a278c9f4dd01_0
0eb9c8c3e820b87a_0
135a9e73b7a29232_0
1527c099ccddc0a5_0
15cd38f1f1b441a7_0
17e9493a44028423_0
19999a2a8128f45e_0
1be286c8ab34a802_0
1c0ff3edc0dbba2b_0
1c38110a78eac25b_0
1dfb50dfadcc27a3_0
23616bad75d05bad_0
2460aaa185f52ccc_0
257d3a5e7355bef1_0
2855d76ec7a22058_0
2b184db0f281c346_0
2b4ae78d51cdb355_0
336a68eaaf209f48_0
368b17a383641879_0
37d8b6049d230e38_0
3a12a04147592b52_0
3acad907af421081_0
481259400994a284_0
4b171d13b8768fc3_0
501d82430fb5d81f_0
53535b983b8b96ab_0
54a440609d21c00b_0
55af2028267f4a04_0
560286513b03151a_0
58745ed7addf7fa8_0
62cb294ec6c7d5d3_0
631c1b4334a89b9f_0
655af0b538dff04b_0
66c18c924a8a0d83_0
69b6a40380788ee4_0
6ff4d50f577b03c3_0
70434794dcfeb902_0
72bdc484b0491e51_0
762920f647bedb68_0
76c6feb7af8ca890_0
77206dd891392ee2_0
778ad2c4e24f089a_0
7980a33aab61a268_0
79908d9ff6c41209_0
7b851d2fbea1822c_0
7c3d0cd0ea880feb_0
800f65fec24a4579_0
83433ce2cacae53f_0
84a2fe8f56b49a94_0
88998ca8c78fc210_0
8912ad0b4e56acee_0
8a258020e792a558_0
8a33db4a354e11fa_0
8b72699a9880a5ae_0
906e852e2ca24dcf_0
91844f6525f7a6ca_0
934d6ec18a0efb95_0
9a5e51e657602b48_0
9a9d0d2f83e2ebb1_0
9e4ab542d04809ed_0
a17dcfb826bd230e_0
a63ca1cf5cab4813_0
ac272ec86af68e4c_0
ac685bbd675e8c2a_0
aedcd7c2ecb237a5_0
b241277419cecb2c_0
b29a22cda6e8c3d0_0
b2f43f08b3d26567_0
b8285230d9705a74_0
b942fcd2a1f973e4_0
bd2b5d178c09fded_0
bfccb966aaccf4c3_0
c33632f3438835db_0
c416a2f9f28d0a43_0
c4b28b961c72f1b6_0
c5ef252818e91556_0
c600c5428f1f0e3d_0
c6a8d3b1c7428193_0
c879a374c494578f_0
c9515676e73438af_0
c9b88e3f5d33f037_0
cab260261cdbd87e_0
cb690ff37ed7a3c2_0
d058c290b4a3fd4c_0
d50c0afa66d988df_0
d71b1922f68b2f71_0
dbdc324083362809_0
e015f5fa047d4b15_0
e32f01a2f4c89224_0
ead4c42f5a657651_0
eb1db3e09270b92a_0
f3404afe7129e30c_0
fb23f94e5d004208_0
fbb8cda7d6a96209_0
fe6d793844767ab1_0
fe8b7ca011cc9644_0
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
000005.ldb
000011.ldb
000015.ldb
CURRENT
LOG
LOG.old
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
TransportSecurity
TransportSecurity
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
the-real-index
the-real-index~RFe5dda26.TMP
index.txt
index.txt~RFe5dda84.TMP
ba23d8ecda68de77_0
ba23d8ecda68de77_1
fa813c9ad67834ac_0
fa813c9ad67834ac_1
the-real-index
the-real-index
the-real-index~RFe57e3b9.TMP
the-real-index
c353d183-75e8-40b7-8d82-cdee1d723516.tmp
f_000025
Local State
Local State
Local State
Local State
Local State
settings.dat
LOG.old
MANIFEST-000001
data_0
data_1
data_2
data_3
f_00008a
f_00008b
f_00008c
f_00008d
f_00008e
f_00008f
f_000090
f_000091
f_000092
the-real-index
the-real-index~RFe578be4.TMP
data_1
05d9e4b8-040e-4ae3-8e93-97ad7e645689.tmp
LOG
LOG
Favicons
History
000003.log
LOG
Cookies
Network Persistent State
Network Persistent State
Network Persistent State
Reporting and NEL
SCT Auditing Pending Reports
Sdch Dictionaries
TransportSecurity
Preferences
Secure Preferences
LOG
LOG
LOG
sync_diagnostic.log
Visited Links
Web Data
default_cloud_config.json
LOG
000003.log
LOG
CloudConfigLog
CloudConfigLog
CloudConfigLog
OperationConfig
wallet-checkout-eligible-sites.json
wallet-notification-config.json
wallet-stable.json
wallet-tokenization-config.json
data_0
data_1
data_3
data_1
Last Version
Local State
Local State
Local State
Local State
Local State
data_1
Filtering Rules
LICENSE
Variations
20250412205758_e81360db57734909918b0d59b5a1eaa9.trn
20250412205738_634034e916a6493e8ee1d9303dc598d6.trn
20250412211052_cdcd227cb788435499af65577f29f80e.trn
20250412211122_24ded7d0505a4fdcb137d9dc87ab0b07.trn
20250412211152_9f13365f1342422b922d891aa6d04099.trn
20250412211223_c268bc9310a146d4ada0a964a253d814.trn
20250412211323_0a063bbabd0342e3a5f7a1851a52894f.trn
20250412211353_b6165092d2b14c959d1abcfdbb704ffa.trn
20250412211423_c8b9eaf459ee4d678ccbc1489b5de293.trn
20250412211453_f7c2b11cb2934835843b9c1feaeb65b8.trn
20250412211553_81ad0cba5aeb44f6b989c87e66c79cd1.trn
20250412211623_5b8e8fb6466342ce837c240bd22fec37.trn
20250412211723_4b5540e6f60040cca2dac9f4485f7e2a.trn
20250412211753_594e9ba599954b65b266fbf2ca457379.trn
20250412211823_0983f42f0dcf40159da6289670ba81a9.trn
20250412211923_c8af29d6e65e4154ade4f5c333ac6fa7.trn
20250412211953_8c15a61edef14def901b3ebf44970782.trn
20250412212023_9f7058cf71864ef5858efbc136551979.trn
20250412212053_9acc38606f344e3c9561ec3f5e64126d.trn
20250412212123_199ca58e33e843f99b607005d7f6900f.trn
20250412212153_cb2810677bd24cac8b5e4f0772a80e00.trn
20250412212223_e4a18b4c2729403080dd61a15e880993.trn
20250412212253_e2dba6d918c743dcb04bb712a49ec6bf.trn
20250412212323_fa3bf30c3fd04a0bb483fc350df1477a.trn
20250412212353_e877d21dacef4320afc9dc4c697d6554.trn
20250412212423_f19c02a61ea049bc87e21a11e4664888.trn
20250412212453_f663192a43a04ebf8374f38f3590cee8.trn
20250412212523_c2104c2a3a104c0cac9bb128d95ac97f.trn
20250412212553_d17fc188238648908f279d4c3d4b6c5a.trn
VSWorkspaceSettings.json
MarkdownFile.ico
devenv.exe.config
.updateUri
channels.json
channelManifest.json
state.json
SharedSettings.v1.sqlite
SharedSettings.v1.sqlite
SharedSettings.v1.sqlite
SharedSettings.v1.sqlite
WMSDKNS.XML.bak
dyntelconfig[1].cache
DisabledFlights[1].cache
RemoteSettings_Common_17.0[1].cache
ShippedFlights[1].cache
dyntelconfig[1].cache
RemoteSettings_Installer[1].cache
activity-stream.discovery_stream.json
112D4C9466238C41CE818B43828CEA3666D9671F
2D8C9F7A77571E8600B5BAC65B587021BD99A586
4A2424DE1635DB2C795C9BFB3289D0CEEF40CC60
637CB927FA5F9CFB5D20F85A2D1D8D33A2C739C5
A4C1598D8137E5321C01407DD8E5EEB89202A4E0
A585344A45AF937E3AB7D706291A9A3ED8D581D9
B63E9F8189F0F51B2B7EF713CAB7CC0DEFC6AF4E
B63E9F8189F0F51B2B7EF713CAB7CC0DEFC6AF4E
CB6923ECFC32C5622714A87A4461A85A6D8FB7F2
D44BE624B280C3ADED70A41DDF5C6B5E7875EB29
Microsoft.IdentityModel.Abstractions.dll
msalruntime_arm64.dll
msalruntime.dll
vs_setup_bootstrapper.exe
4cbh1qnb.json
RCXC403.tmp
TFRBADA.tmp
project.vcxproj
project.vcxproj
__PSScriptPolicyTest_vnhgnfpz.hhu.ps1
c5l0nykk.ph2
dd_setup_20250412205815_323_Microsoft.VisualStudio.Graphics.EnableTools_dism.log
dd_setup_20250412205815_388_Microsoft.VisualCpp.Premium.Tools.HostX86.TargetX86.log
f3xo5myl.json
2pjb1hss.json
cab1.cab
Microsoft.Build.vsix
payload.vsix
cab1.cab
Microsoft.Build.UnGAC.exe
Microsoft.CodeAnalysis.Compilers.x64.vsix
ExpressionEvaluatorPackage.vsix
Roslyn.VisualStudio.Setup.vsix
Microsoft.CredentialProvider.vsix
Microsoft.DataAI.NuGetRecommender.vsix
Microsoft.Developer.IdentityServiceGS.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.DiagnosticsHub.Collection.x64.vsix
payload.vsix
cabx64_1.cab
Microsoft.DiagnosticsHub.CpuSampling.x64.vsix
Microsoft.DiagnosticsHub.Instrumentation.vsix
Microsoft.DiagnosticsHub.Instrumentation.x64.vsix
Microsoft.DiagnosticsHub.Runtime.vsix
payload.vsix
payload.vsix
Microsoft.DiagnosticsHub.Runtime.Targeted.x64.vsix
Microsoft.DiagnosticsHub.UserMarks.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
cab1.cab
cab1.cab
cab1.cab
cab1.cab
payload.vsix
payload.vsix
payload.vsix
aspnetcore-runtime-x64.zip
windowsdesktop-runtime-x64.zip
Microsoft.NuGet.Build.Tasks.Setup.vsix
Microsoft.ServiceHub.Managed.vsix
Microsoft.ServiceHub.Node.vsix
Microsoft.ServiceHub.amd64.vsix
Microsoft.VC.14.42.17.12.CRT.Redist.X64.base.vsix
Microsoft.VC.14.42.17.12.CRT.Redist.X86.base.vsix
Microsoft.VC.14.42.17.12.CRT.Redist.x64.OneCore.Desktop.base.vsix
Microsoft.VC.14.42.17.12.CRT.Redist.x86.OneCore.Desktop.base.vsix
Microsoft.VC.14.43.17.13.ASAN.Headers.base.vsix
Microsoft.VC.14.43.17.13.ASAN.X86.OneCore.base.vsix
Microsoft.VC.14.43.17.13.ATL.Headers.base.vsix
Microsoft.VC.14.43.17.13.ATL.Source.base.vsix
Microsoft.VC.14.43.17.13.ATL.X64.base.vsix
Microsoft.VC.14.43.17.13.ATL.X86.base.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx64.Targetx64.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx64.Targetx64.base.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx64.Targetx86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx64.Targetx86.base.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx86.Targetx64.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx86.Targetx64.base.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx86.Targetx86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.CA.Ext.Hostx86.Targetx86.base.vsix
Microsoft.VC.14.43.17.13.CA.Rulesets.base.vsix
Microsoft.VC.14.43.17.13.CRT.Headers.Resources.base.enu.vsix
Microsoft.VC.14.43.17.13.CRT.Headers.base.vsix
Microsoft.VC.14.43.17.13.CRT.Source.base.vsix
Microsoft.VC.14.43.17.13.CRT.x64.Desktop.base.vsix
Microsoft.VC.14.43.17.13.CRT.x64.Store.base.vsix
Microsoft.VC.14.43.17.13.CRT.x86.OneCore.Desktop.base.vsix
Microsoft.VC.14.43.17.13.CRT.x86.Store.base.vsix
Microsoft.VC.14.43.17.13.PGO.Headers.base.vsix
Microsoft.VC.14.43.17.13.PGO.X64.base.vsix
Microsoft.VC.14.43.17.13.PGO.X86.base.vsix
Microsoft.VC.14.43.17.13.Prem.HostX64.TargetX64.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Prem.HostX64.TargetX86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Prem.HostX86.TargetX86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Prem.Hostx86.Targetx64.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Premium.Tools.HostX64.TargetX64.base.vsix
Microsoft.VC.14.43.17.13.Premium.Tools.HostX64.TargetX86.base.vsix
Microsoft.VC.14.43.17.13.Premium.Tools.HostX86.TargetX64.base.vsix
Microsoft.VC.14.43.17.13.Premium.Tools.HostX86.TargetX86.base.vsix
Microsoft.VC.14.43.17.13.Props.vsix
Microsoft.VC.14.43.17.13.Props.ATLMFC.vsix
Microsoft.VC.14.43.17.13.Props.x64.vsix
Microsoft.VC.14.43.17.13.Props.x86.vsix
Microsoft.VC.14.43.17.13.Servicing.vsix
Microsoft.VC.14.43.17.13.Servicing.ATL.vsix
Microsoft.VC.14.43.17.13.Servicing.CAExtensions.vsix
Microsoft.VC.14.43.17.13.Servicing.CARulesets.vsix
Microsoft.VC.14.43.17.13.Servicing.Compilers.vsix
Microsoft.VC.14.43.17.13.Servicing.CrtHeaders.vsix
Microsoft.VC.14.43.17.13.Tools.Core.Props.vsix
Microsoft.VC.14.43.17.13.Tools.HostX64.TargetX64.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Tools.HostX64.TargetX64.base.vsix
Microsoft.VC.14.43.17.13.Tools.HostX64.TargetX86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Tools.HostX64.TargetX86.base.vsix
Microsoft.VC.14.43.17.13.Tools.HostX86.TargetX64.base.vsix
Microsoft.VC.14.43.17.13.Tools.HostX86.TargetX86.Res.base.enu.vsix
Microsoft.VC.14.43.17.13.Tools.HostX86.TargetX86.base.vsix
Microsoft.VC.14.43.17.13.Tools.Hostx86.Targetx64.Res.base.enu.vsix
payload.vsix
payload.vsix
Microsoft.VisualCpp.ASAN.X86.vsix
Microsoft.VisualCpp.ASAN.X86.OneCore.vsix
Microsoft.VisualCpp.ATL.Headers.vsix
Microsoft.VisualCpp.ATL.Source.vsix
Microsoft.VisualCpp.ATL.X64.vsix
Microsoft.VisualCpp.ATL.X86.vsix
Microsoft.VisualCpp.CA.Ext.Hostx64.Targetx64.vsix
Microsoft.VisualCpp.CA.Ext.Hostx64.Targetx86.vsix
Microsoft.VisualCpp.CA.Ext.Hostx86.Targetx64.vsix
Microsoft.VisualCpp.CA.Ext.Hostx86.Targetx86.vsix
cab1.cab
Microsoft.VisualCpp.CRT.Headers.vsix
Microsoft.VisualCpp.CRT.Redist.Resources.enu.vsix
Microsoft.VisualCpp.CRT.Redist.X64.vsix
Microsoft.VisualCpp.CRT.Redist.X86.vsix
Microsoft.VisualCpp.CRT.Redist.x64.OneCore.Desktop.vsix
Microsoft.VisualCpp.CRT.Redist.x86.OneCore.Desktop.vsix
Microsoft.VisualCpp.CRT.Source.vsix
Microsoft.VisualCpp.CRT.x64.Desktop.vsix
Microsoft.VisualCpp.CRT.x64.OneCore.Desktop.vsix
Microsoft.VisualCpp.CRT.x64.Store.vsix
Microsoft.VisualCpp.CRT.x86.Desktop.vsix
Microsoft.VisualCpp.CRT.x86.OneCore.Desktop.vsix
Microsoft.VisualCpp.CRT.x86.Store.vsix
payload.vsix
Microsoft.VisualCpp.DIA.SDK.vsix
Microsoft.VisualCpp.PGO.Headers.vsix
Microsoft.VisualCpp.PGO.X64.vsix
Microsoft.VisualCpp.PGO.X86.vsix
Microsoft.VisualCpp.Premium.Tools.HostX64.TargetX64.vsix
Microsoft.VisualCpp.Premium.Tools.HostX64.TargetX86.vsix
Microsoft.VisualCpp.Premium.Tools.HostX86.TargetX64.vsix
Microsoft.VisualCpp.Premium.Tools.HostX86.TargetX86.vsix
VC_redist.x86.exe
VC_redist.x64.exe
cab1.cab
cab1.cab
Microsoft.VisualCpp.Servicing.DIASDK.vsix
Microsoft.VisualCpp.Servicing.Redist.vsix
Microsoft.VisualCpp.Tools.Common.Utils.vsix
Microsoft.VisualCpp.Tools.Common.Utils.Resources.enu.vsix
payload.vsix
Microsoft.VisualCpp.Tools.Core.Resources.enu.vsix
Microsoft.VisualCpp.Tools.Core.x86.vsix
Microsoft.VisualCpp.Tools.HostX64.TargetX64.vsix
Microsoft.VisualCpp.Tools.HostX64.TargetX86.vsix
Microsoft.VisualCpp.Tools.HostX86.TargetX64.vsix
Microsoft.VisualCpp.Tools.HostX86.TargetX86.vsix
Microsoft.VisualCpp.Tools.HostX86.TargetX86.Res.enu.vsix
Microsoft.VisualCpp.Tools.Hostx86.Targetx64.Res.enu.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Cache.Service.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
cab1.cab
cab1.cab
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Community.Shared.Msi.msi
cab1.cab
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Connected.Auto.vsix
Microsoft.VisualStudio.Connected.Auto.vsix
payload.vsix
Microsoft.VisualStudio.ConnectedServices.Core.vsix
Microsoft.VisualStudio.Copilot.Contracts.vsix
Microsoft.VisualStudio.CoreDotNet.vsix
payload.vsix
UserProfiles.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Debugger.BrokeredServices.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
VsJustInTimeDebuggerRegistrationHelper.exe
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
VisualStudioEditorsSetup.vsix
Microsoft.VisualStudio.Extensibility.Container.vsix
Microsoft.VisualStudio.ExtensionManager.Auto.vsix
Microsoft.VisualStudio.ExtensionManager.vsix
Microsoft.VisualStudio.ExtensionManager.x64.vsix
cab1.cab
cab1.cab
Microsoft.VisualStudio.Finalizer.vsix
cab1.cab
payload.vsix
payload.vsix
Microsoft.VisualStudio.GraphProvider.Auto.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
EnableGraphicsTools.exe
cab1.cab
cab1.cab
payload.vsix
Microsoft.VisualStudio.Identity.vsix
payload.vsix
VSInitializer.exe
payload.vsix
Microsoft.VisualStudio.IntelliCode.CSharp.vsix
Microsoft.VisualStudio.VsInteractiveWindow.vsix
Microsoft.VisualStudio.JavaScript.ProjectSystem.vsix
Microsoft.VisualStudio.JavaScript.Sdk.1.0.2191419.nupkg
Microsoft.VisualStudio.LanguageServer.vsix
payload.vsix
Microsoft.VisualStudio.LiveShare.vsix
Microsoft.VisualStudio.LiveShare.VSCore.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.MefHosting.vsix
payload.vsix
Microsoft.VisualStudio.MinShell.Auto.vsix
Microsoft.VisualStudio.MinShell.Auto.vsix
payload.vsix
cab1.cab
cab1.cab
cab1.cab
cab1.cab
payload.vsix
cab1.cab
Microsoft.VisualStudio.MinShell.x64.vsix
payload.vsix
payload.vsix
NuGet.Tools.vsix
payload.vsix
Microsoft.VisualStudio.OpenFolder.vsix
Microsoft.VisualStudio.OpenTelemetry.ClientExtensions.netfx.vsix
Microsoft.VisualStudio.OpenTelemetry.Collector.netfx.vsix
Microsoft.VisualStudio.Package.NodeJs.x64.vsix
Microsoft.VisualStudio.Package.TypeScript.TSServer.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.Platform.CallHierarchy.vsix
Microsoft.VisualStudio.Platform.Editor.vsix
Microsoft.VisualStudio.Platform.Markdown.vsix
Microsoft.VisualStudio.Platform.NavigateTo.vsix
Microsoft.VisualStudio.Platform.Terminal.x64.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.ProjectServices.vsix
Microsoft.VisualStudio.ProjectSystem.Vsix
Microsoft.VisualStudio.ProjectSystem.Full.vsix
Microsoft.VisualStudio.ProjectSystem.Query.Vsix
Microsoft.VisualStudio.ScriptedHost.vsix
Microsoft.VisualStudio.ScriptedHost.x64.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.TestTools.TestPlatform.V2.CLI.vsix
payload.vsix
Microsoft.VisualStudio.TextMateGrammars.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.UIInternal.vsix
Microsoft.VisualStudio.UIInternal.Guide.vsix
Microsoft.VisualStudio.UIInternal.vsix
payload.vsix
Microsoft.VisualStudio.VC.CMake.x64.vsix
Microsoft.VisualStudio.VC.CMake.Project.x64.vsix
Microsoft.VisualStudio.VC.Copilot.Setup.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.VC.Ide.LanguageService.Dependencies.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
BoostUnitTestAdapter.vsix
Packaging.TAfGT.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
cab1.cab
Microsoft.VisualStudio.Web.Azure.Common.vsix
Microsoft.VisualStudio.Web.Scaffolding.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
payload.vsix
Microsoft.VisualStudio.WebToolsExtensions.vsix
Microsoft.VisualStudio.WebToolsExtensions.MSBuild.vsix
Microsoft.WebTools.DotNet.Core.ItemTemplates.vsix
Microsoft.WebTools.Shared.vsix
SqlCommon.vsix
SQLCommon.amd64.vsix
payload.vsix
payload.vsix
payload.vsix
SQLitePCLRaw.x64.vsix
TypeScript.Build.vsix
TypeScript.Tools.vsix
03fbc2dfe9d3e7bb2389c7ed18c6ad3e.cab
05047a45609f311645eebcac2739fc4c.cab
05254f60ea43b4e3959b17cdb03268c0.cab
07a57cdb41ba28cced14005f087267be.cab
08e9468089f54c8455f59fd9bb48fcec.cab
0b2a4987421d95d0cb37640889aa9e9b.cab
12613ba26e037e99a874a64c1084f880.cab
126c039acc6f1c0a9426a128efb713e7.cab
12a529d45b148a2d28290a8a7535b37b.cab
13bf5f9b75a9d1c9f44ba5d34a14227f.cab
13d68b8a7b6678a368e2d13ff4027521.cab
15bc5316e373960d82abc253bceaa25d.cab
1623efce9d1a46396798f44a7bc769e9.cab
16ab2ea2187acffa6435e334796c8c89.cab
19248fabbb2098a7b88c4a2786066bcc.cab
1a296530f0182ff1e94f088c27d05da0.cab
1de82860db02f762c5f65a73daa31f3e.cab
1f32e9acf0bb1e6a5f485cd8670cd8e1.cab
20e79882c0bf37840a94a4ce06bc571e.cab
220daf459e79c5d26366654b1b482e87.cab
262fa3187c00a1f695e0c3eeb7ecf423.cab
2630bae9681db6a9f6722366f47d055c.cab
263104e5ce3a72f68151a93d88a3f22f.cab
26ea25236f12b23db661acf268a70cfa.cab
2868a02217691d527e42fe0520627bfa.cab
2a30b5d1115d515c6ddd8cd6b5173835.cab
2cd67f5657d2cee1a106c4fdab506e58.cab
2dd914bb5abd9365f932d15eede09c52.cab
2e876dd22fa5e6785f137e3422dd50ec.cab
306e26e920fd32cb02bf538b4e799a0d.cab
31ec2a68a04d58dc4a3d639fddc68493.cab
353be8f91891a6a5761b9ac157fa2ff1.cab
3988e4dfdc3f1d180c47a61a0ca76215.cab
3cf96a08c3b29e9dcf5946d28affb747.cab
3e2f7be479e3679d700ce0782e4cc318.cab
4035a83dc8e73244d15d1196d55059c3.cab
40d92f424eff54b03db4c51669f9a8d6.cab
43cc1b2daf931a3f0ea4ad696c2327fb.cab
43d52fdb99b86048e15fbd34f5b99cb5.cab
441901505fcd0b2e997ea7d954f04171.cab
44472e2321abba45e828de25827264a3.cab
45821d1fcb842bff411f5f2f8c1d4106.cab
463ad1b0783ebda908fd6c16a4abfe93.cab
47133212c2f5ccf49392d7762293a075.cab
4a4c678668584fc994ead5b99ccf7f03.cab
4ad4df991deb0eaa1f79f896b959d580.cab
4c3ef4b2b1dc72149f979f4243d2accf.cab
4c59234340aaf3a96ec480c1aad8d179.cab
4dc69cc131b3f4fdde53e76d759509dc.cab
4ec14c5368b7642563c070cd168960a8.cab
4fe4c8b88812f5339018c0eef95acdb9.cab
50ce7925226cb6ab8e0fe9ad9fd58433.cab
52a8e5203ade8fe7174c590308f2e44a.cab
53174a8154da07099db041b9caffeaee.cab
5509e4710313421be8d5e7cfbfde4d30.cab
559dbc3a49a69c6adf60b1c87b4df71b.cab
563138901adf40a699df4654138ac397.cab
56a114848fda9a7e47bad4b3fc4be9a6.cab
576cff9c50e8085ab8d9c28ee12bac3e.cab
58314d0646d7e1a25e97c902166c3155.cab
590d28783ff280b8b0016c3492433241.cab
5a22e5cde814b041749fb271547f4dd5.cab
5c2fcb46e03eada0ed0cad44a3f5c71f.cab
5c9ecffb06ed5f4fe5fb7db86bf7328b.cab
5cf1d61a223a02ff2f52fe05f058d52e.cab
5f6cfec263cd265cf3b0d97fd78ddf05.cab
61d57a7a82309cd161a854a6f4619e52.cab
66c7c64126fbf84f47ccec556d149b12.cab
67c9fd1fab36154e6e7e429610cd67c8.cab
67fb2af3d2219b403e419535a547c019.cab
685f3d4691f444bc382762d603a99afc.cab
68a5a2b14625f935761325cddfadca11.cab
68de71e3e2fb9941ee5b7c77500c0508.cab
69661e20556b3ca9456b946c2c881ddd.cab
6b5a91701fdb98ac8bc4af6e238e0390.cab
6e86d5003787b5a44d77f0142b20f2ff.cab
6ee7bbee8435130a869cf971694fd9e2.cab
703316c9de0a32acf316d03b1cffc559.cab
73b80f421d7f3df5a71bd772f56bf3ae.cab
75122a9de1700f465c29b6cc76fa6372.cab
766c0ffd568bbb31bf7fb6793383e24a.cab
77db8ab55a0b236db83c55ced6e8a9a3.cab
78fa3c824c2c48bd4a49ab5969adaaf7.cab
7afc7b670accd8e3cc94cfffd516f5cb.cab
7b7c7382fe1ea268787e911da88eb37e.cab
7c3667a45d36470bf3cb648878a6ac2e.cab
8016f7584c8fbeff0b032c65f4173e78.cab
8038f3cc95dc4b7d0346cb2ab7e044ff.cab
80dcdb79b8a5960a384abe5a217a7e3a.cab
8125ee239710f33ea485965f76fae646.cab
818d2d3634f0efb6e64d7e7c8ca5f98b.cab
838060235bcd28bf40ef7532c50ee032.cab
89d9bbd87f7a5560bafa520a4ebfdf17.cab
8c44e508e7582f9362c66a2e47a19b5e.cab
8ce0662e0e014576121e526f53d8f6b5.cab
8da73ae89e24f0b5cdf1787799c2a65f.cab
8daf1f236e631041cdaa802ddb9ccc3d.cab
8e4755178e6b5bcba8d3538c3630b7a5.cab
8eec88833ea319aaa1061d6528c77b93.cab
8fe3c1ca244ece932599eb0b61855d8f.cab
90e1202895672ce81992e71be30528cc.cab
9126f6ff98d955951fe9323f4444c119.cab
921968b1c32e680f338247ac68950f5a.cab
93a74a1d34a22ae9d2e1ccc5208ad21a.cab
94521fd1a9c57258998d60ce60dc43c3.cab
948a611cd2aca64b1e5113ffb7b95d5f.cab
9494c0c1f781298600a3c07e837acd0f.cab
96076045170fe5db6d5dcf14b6f6688e.cab
9a7145bc3b132e5da6d44c0ab4a1af70.cab
9ba47e440ec2fbe9a3d32a53bf0f68dc.cab
9bcb3fab78e80d68be28892ea7ad46c3.cab
9bfca1e044c38e04afe2363d3db899c8.cab
a17683486ace64c3f9a1cacb81ee0260.cab
a1e2a83aa8a71c48c742eeaff6e71928.cab
a330840cf08ad4d210703c9acd1bf2b8.cab
a35cd6c9233b6ba3da66eecaa9190436.cab
a68c0988d16ee124783efd98074dcbf9.cab
a76e4219ecb0f1c0006a6fe080c54ad9.cab
aa9c58552bdb82dae4ed48ece081cfe3.cab
ac4ddfcf1101c483559a5f6e36f1ef2d.cab
b1a824e2952532fe8fd0145f5d148d25.cab
b1a8ecf890b4ffddd05e8c9422f55db7.cab
b4eea6c909a31ab051e6f9b6218beec8.cab
b5f177b84c0ec473cbd69557634b27cd.cab
b80b7321357f7c9f281536f9440dfe68.cab
b82881a61b7477bd4eb5de2cd5037fe2.cab
b913ca15956d14df2d4b1f11ae07885b.cab
ba60f891debd633ae9c26e1372703e3c.cab
be06eca425b0c3c2f4de61cbfe9bc7a7.cab
beb5360d2daaa3167dea7ad16c28f996.cab
c0aa6d435b0851bf34365aadabd0c20f.cab
c1be9e93e88be3f6207f5cc074775d81.cab
c1c7e442409c0adbf81ae43aa0e4351f.cab
c2aabf6ea5c1d348ec22f3aeb92f8656.cab
c4d38a2c963178a1a3469ca3d913768e.cab
cd9128b760c06a010e1621af6528432e.cab
d117bb4bc77abadc7c603552e122e513.cab
d3e405ab232f8aca8c5b6a48a913d6b0.cab
d67259e233ce975d91c3b02d483becad.cab
d95da93904819b1f7e68adb98b49a9c7.cab
dcfb1aa345e349091a44e86ce1766566.cab
de111c3d435b0785b31b28c386ee691f.cab
e072b3b3d3164e26b63338dce51862a7.cab
e10768bb6e9d0ea730280336b697da66.cab
e10f8811d44b50885777f56f8272f66b.cab
e24dd258b3bbfa69c0842948fe0dd670.cab
e3bfdbe21d5f48f62e6347294e6e8492.cab
e3d1b35aecfccda1b4af6fe5988ac4be.cab
e5950ce9ba509b3370ebf328742a5f45.cab
e59830bab4961666e8d8c2af1e5fa771.cab
e5c4b31ff9997ac5603f4f28cd7df602.cab
e87de81a902e0c8cde9e1355c3ff5f3f.cab
e98fa5eb5fee6ce17a7a69d585870b7c.cab
ec0637c03f99046936d32d51e13a392a.cab
ec9ab4bbb809719605d27da343b909e8.cab
ec9d39539c27e8cf5ad39bffce00c34e.cab
eca0aa33de85194cd50ed6e0aae0156f.cab
ed4d1c6b9811d81e3cebc553ae604f0d.cab
ed5aa2f399092df3084cce671f072cac.cab
ef4472fd7552490fd759075186ed2ec8.cab
f105a73f98cfc88c7b64d8f7b39a474c.cab
f4661eda3692e166927c14c96164150a.cab
f7b25543b47329ef932ad391c72c4ab7.cab
f87007e985bc5453a0f01ed1a5510abe.cab
f9b24c8280986c0683fbceca5326d806.cab
f9ff50431335056fb4fbac05b8268204.cab
fe38b2fd0d440e3c6740b626f51a22fc.cab
fef2cfedd6135e0ed85290b83f3682c3.cab
ff8dd5a961e46b5d05906ac4b7a5ba37.cab
931721e121ef91707ddcb6cac354d95c.cab
WinSdkInstaller.exe
SQLSysClrTypes.msi
tmpaddon
tmpaddon
tmpaddon
default.dic
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
5d696d521de238c3.customDestinations-ms
AlternateServices.bin
AlternateServices.bin
data.safe.tmp
data.safe.tmp
data.safe.tmp
data.safe.tmp
events
events
0eae57d2-341a-4155-ae78-0f757deba122
72447cdb-b89b-4939-9bfa-ba1ea68026e9
77948e40-c514-4715-b537-c02188640cc2
850eb4af-228d-4a4a-b816-39585ff0fb23
dca21144-3f63-490e-833f-55138e121bb3
df7dd840-542c-4eb7-b673-5e77e5b4656b
extensions.json
gmpopenh264.dll
gmpopenh264.info
manifest.json
widevinecdm.dll
prefs-1.js
prefs-1.js
prefs.js
prefs.js
serviceworker-1.txt
serviceworker.txt
recovery.baklz4
{906d2f86-c2d2-4e7a-a7c1-3cb9d241fa83}.final
2926346687feisraebbaatsaed--hte.sqlite
{70613469-ed99-46f4-b957-80675dc8e7dd}.final
3870112724rsegmnoittet-es.sqlite
ProjectSettings.json
Browse.VC.db-wal
slnx.sqlite
VSWorkspaceState.json
slnx.sqlite
Browse.VC.db
Browse.VC.db-wal
6ee2f83d-f059-485e-8b5b-807f53f9443e.vsidx
Browse.VC.db
Browse.VC.db-wal
Browse.VC.db-wal
Browse.VC.db-wal
DocumentLayout.json
Unconfirmed 261801.crdownload
Browse.VC.db-wal
small.ico
Browse.VC.db-wal
Browse.VC.opendb
MSI354A.tmp
ngen.log
ngen.log
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.Resources.dll
Microsoft.SqlServer.Types.dll
VsGraphicsHelper.dll
appverif.exe
VsGraphicsResources.dll
manifest.json
hyph-as.hyb
hyph-hi.hyb
hyph-nb.hyb
manifest.json
manifest.json
notification_fast.bundle.js.LICENSE.txt
tokenized-card.bundle.js.LICENSE.txt
strings.json
manifest.json
LICENSE
manifest.json
VC_redist.x64.exe
license.rtf
thm.wxl
thm.xml
BootstrapperApplicationData.xml
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
license.rtf
thm.wxl
wixstdba.dll
license.rtf
BootstrapperApplicationData.xml
UserExperienceManifest.xml
BootstrapperApplicationData.xml
BootstrapperCore.dll
Microsoft.Bootstrapper.dll
Microsoft.Diagnostics.Tracing.EventSource.dll
mbahost.dll
wixstdba.dll
logo.png
VC_redist.x86.exe
BootstrapperCore.config
Microsoft.VisualStudio.PerformanceTools.Detours.dll
stdole.dll
Microsoft.SqlServer.Types.dll
memory/240-1756-0x00000207B0B70000-0x00000207B0B98000-memory.dmp
memory/240-1342-0x000002078E850000-0x000002078E88C000-memory.dmp
memory/240-1361-0x00000207A9620000-0x00000207A962C000-memory.dmp
memory/240-1362-0x00000207A9890000-0x00000207A98C8000-memory.dmp
memory/240-1364-0x00000207A9970000-0x00000207A99B2000-memory.dmp
memory/240-1365-0x00000207A98F0000-0x00000207A98F8000-memory.dmp
memory/240-1367-0x00000207ABED0000-0x00000207ABED8000-memory.dmp
memory/240-1368-0x00000207ABEE0000-0x00000207ABF30000-memory.dmp
memory/240-1408-0x00000207ABFE0000-0x00000207AC08A000-memory.dmp
memory/240-1409-0x00000207ABF30000-0x00000207ABF8E000-memory.dmp
memory/240-1410-0x00000207A9930000-0x00000207A9952000-memory.dmp
memory/240-1412-0x00000207ABF90000-0x00000207ABFAE000-memory.dmp
memory/240-1413-0x00000207ABFB0000-0x00000207ABFCC000-memory.dmp
memory/240-1414-0x00000207AC1E0000-0x00000207AC2DC000-memory.dmp
memory/240-1411-0x00000207AC090000-0x00000207AC0E0000-memory.dmp
memory/240-1430-0x00000207AC0E0000-0x00000207AC0F2000-memory.dmp
memory/240-1470-0x00000207A81E0000-0x00000207A8312000-memory.dmp
memory/240-1356-0x00000207A8D80000-0x00000207A8D8E000-memory.dmp
memory/240-1476-0x00000207A80C0000-0x00000207A80C8000-memory.dmp
memory/240-1490-0x00000207A81D0000-0x00000207A81D8000-memory.dmp
memory/240-1348-0x00000207A8A10000-0x00000207A8A2A000-memory.dmp
memory/240-1497-0x00000207A8340000-0x00000207A834E000-memory.dmp
memory/240-1496-0x00000207A8350000-0x00000207A8368000-memory.dmp
memory/240-1498-0x00000207A8390000-0x00000207A83A2000-memory.dmp
memory/240-1355-0x00000207A8A30000-0x00000207A8A38000-memory.dmp
memory/240-1363-0x00000207A9250000-0x00000207A925E000-memory.dmp
memory/240-1754-0x00000207B0C30000-0x00000207B0C3A000-memory.dmp
memory/240-1358-0x00000207A9670000-0x00000207A97D0000-memory.dmp
memory/240-1763-0x00000207B0BE0000-0x00000207B0BF8000-memory.dmp
memory/240-1359-0x00000207A97D0000-0x00000207A988A000-memory.dmp
memory/240-1354-0x00000207A8D90000-0x00000207A8DA0000-memory.dmp
memory/240-1353-0x000002078E890000-0x000002078E898000-memory.dmp
memory/240-1352-0x000002078E840000-0x000002078E84A000-memory.dmp
memory/240-1351-0x00000207A8D40000-0x00000207A8D66000-memory.dmp
memory/240-1765-0x00000207B0E60000-0x00000207B0F00000-memory.dmp
memory/240-1762-0x00000207B0D30000-0x00000207B0D6C000-memory.dmp
memory/240-1761-0x00000207B0BB0000-0x00000207B0BBA000-memory.dmp
memory/240-1760-0x00000207B0B60000-0x00000207B0B68000-memory.dmp
memory/240-1337-0x000002078E020000-0x000002078E31C000-memory.dmp
memory/240-1338-0x00000207A8A50000-0x00000207A8BBE000-memory.dmp
memory/240-1339-0x00000207A8870000-0x00000207A8904000-memory.dmp
memory/240-1340-0x00000207A8BC0000-0x00000207A8C5E000-memory.dmp
memory/240-1341-0x00000207A8C60000-0x00000207A8D12000-memory.dmp
memory/240-1357-0x00000207A9480000-0x00000207A950A000-memory.dmp
memory/240-1343-0x000002078E810000-0x000002078E83A000-memory.dmp
memory/240-1344-0x000002078E8C0000-0x000002078E8E2000-memory.dmp
memory/240-1764-0x00000207B0DB0000-0x00000207B0DBA000-memory.dmp
memory/240-1349-0x00000207A9030000-0x00000207A9130000-memory.dmp
memory/240-1347-0x000002078E7D0000-0x000002078E7DE000-memory.dmp
memory/240-1350-0x00000207A8D20000-0x00000207A8D34000-memory.dmp
memory/944-87195-0x00007FFAB7090000-0x00007FFAB70A0000-memory.dmp
memory/1152-1766-0x000001F2EF250000-0x000001F2EF258000-memory.dmp
memory/1152-1767-0x000001F2EF260000-0x000001F2EF268000-memory.dmp
memory/1152-1768-0x000001F2EF940000-0x000001F2EF96A000-memory.dmp
memory/1152-1772-0x000001F2EE520000-0x000001F2EE52A000-memory.dmp
memory/1152-1773-0x000001F2EE530000-0x000001F2EE538000-memory.dmp
memory/1152-1759-0x000001F2EF0E0000-0x000001F2EF11C000-memory.dmp
memory/1152-5681-0x000001F2EF7C0000-0x000001F2EF7D2000-memory.dmp
memory/2004-1801-0x0000000005750000-0x0000000005D7A000-memory.dmp
memory/2004-1813-0x00000000066B0000-0x00000000066FC000-memory.dmp
memory/2004-1812-0x0000000006120000-0x000000000613E000-memory.dmp
memory/2004-1811-0x0000000005D80000-0x00000000060D7000-memory.dmp
memory/2004-1800-0x0000000002920000-0x0000000002956000-memory.dmp
memory/2004-1804-0x0000000005550000-0x00000000055B6000-memory.dmp
memory/2132-39758-0x00000000005A0000-0x0000000000617000-memory.dmp
memory/2192-28213-0x0000018B62940000-0x0000018B6294A000-memory.dmp
memory/3024-1458-0x000001E768DC0000-0x000001E768DCC000-memory.dmp
memory/3636-89826-0x00007FFAB7940000-0x00007FFAB7950000-memory.dmp
memory/5244-818-0x0000000007BD0000-0x0000000007BD8000-memory.dmp
memory/5244-780-0x0000000005640000-0x0000000005648000-memory.dmp
memory/5244-814-0x00000000078F0000-0x00000000079AA000-memory.dmp
memory/5244-841-0x000000000A9A0000-0x000000000A9A8000-memory.dmp
memory/5244-820-0x0000000007CC0000-0x0000000007CCE000-memory.dmp
memory/5244-777-0x0000000005380000-0x00000000054EE000-memory.dmp
memory/5244-844-0x000000000AA10000-0x000000000AA22000-memory.dmp
memory/5244-819-0x000000000AC00000-0x000000000AC38000-memory.dmp
memory/5244-778-0x00000000056D0000-0x0000000005764000-memory.dmp
memory/5244-857-0x000000000AA40000-0x000000000AA4A000-memory.dmp
memory/5244-858-0x000000000BC00000-0x000000000BC22000-memory.dmp
memory/5244-782-0x0000000005CF0000-0x0000000005DA2000-memory.dmp
memory/5244-776-0x0000000000690000-0x00000000006F8000-memory.dmp
memory/5244-817-0x0000000007BB0000-0x0000000007BB8000-memory.dmp
memory/5244-779-0x0000000005870000-0x0000000005970000-memory.dmp
memory/5244-795-0x0000000007CE0000-0x0000000008286000-memory.dmp
memory/5244-794-0x0000000007690000-0x0000000007722000-memory.dmp
memory/5244-793-0x00000000071C0000-0x0000000007226000-memory.dmp
memory/5244-791-0x0000000006480000-0x00000000067D7000-memory.dmp
memory/5244-783-0x0000000005850000-0x0000000005864000-memory.dmp
memory/5244-790-0x0000000006450000-0x0000000006472000-memory.dmp
memory/5244-781-0x0000000005770000-0x00000000057C0000-memory.dmp
memory/5244-786-0x0000000006000000-0x0000000006010000-memory.dmp
memory/5244-785-0x0000000005C50000-0x0000000005C58000-memory.dmp
memory/5244-843-0x000000000BD10000-0x000000000BD60000-memory.dmp
memory/5244-784-0x0000000005C60000-0x0000000005C86000-memory.dmp
memory/5644-24740-0x00000295619A0000-0x00000295619A8000-memory.dmp
memory/5696-39155-0x0000000000570000-0x00000000005E7000-memory.dmp
memory/5732-39147-0x0000000000570000-0x00000000005E7000-memory.dmp
memory/6472-39795-0x00000000005A0000-0x0000000000617000-memory.dmp
memory/6516-39796-0x00000000005A0000-0x0000000000617000-memory.dmp
memory/6664-5480-0x0000020ADD180000-0x0000020ADD18A000-memory.dmp
memory/6664-5481-0x0000020AF77A0000-0x0000020AF790A000-memory.dmp
memory/6664-5482-0x0000020AF7630000-0x0000020AF76C4000-memory.dmp
memory/8356-5072-0x0000021975210000-0x0000021975228000-memory.dmp
memory/9392-39102-0x0000000000570000-0x00000000005E7000-memory.dmp
memory/10172-89880-0x0000027AB0850000-0x0000027AB0852000-memory.dmp
memory/10172-89870-0x0000027AB0A10000-0x0000027AB0A12000-memory.dmp
memory/10172-89888-0x0000027AB13E0000-0x0000027AB13E2000-memory.dmp
memory/10172-89889-0x0000027AB13D0000-0x0000027AB13D2000-memory.dmp
memory/10172-89886-0x0000027AB12D0000-0x0000027AB12D2000-memory.dmp
memory/10172-89884-0x0000027AB0DC0000-0x0000027AB0DC2000-memory.dmp
memory/10172-89881-0x0000027AB0B30000-0x0000027AB0B32000-memory.dmp
memory/10172-89883-0x0000027AB0D30000-0x0000027AB0D32000-memory.dmp
memory/10172-89890-0x0000027AB1410000-0x0000027AB1412000-memory.dmp
memory/10172-89882-0x0000027AB0AB0000-0x0000027AB0AB2000-memory.dmp
memory/10172-89878-0x0000027AB0870000-0x0000027AB0872000-memory.dmp
memory/10172-89874-0x0000027AB0910000-0x0000027AB0912000-memory.dmp
memory/10172-89836-0x0000027AA8490000-0x0000027AA84A0000-memory.dmp
memory/10172-89891-0x0000027AB1410000-0x0000027AB1412000-memory.dmp
memory/10172-89872-0x0000027AB0A60000-0x0000027AB0A62000-memory.dmp
memory/10172-89871-0x0000027AB0A10000-0x0000027AB0A12000-memory.dmp
memory/10172-89868-0x0000027AB0900000-0x0000027AB0902000-memory.dmp
memory/10172-89844-0x0000027AA86D0000-0x0000027AA86E0000-memory.dmp
memory/10172-89833-0x00007FFAB7940000-0x00007FFAB7950000-memory.dmp
memory/10172-89892-0x0000027AB1530000-0x0000027AB1532000-memory.dmp
memory/10172-89893-0x0000027AB14D0000-0x0000027AB14D2000-memory.dmp
memory/10172-89894-0x0000027AB12D0000-0x0000027AB12D2000-memory.dmp
memory/10172-89898-0x0000027AB1300000-0x0000027AB1302000-memory.dmp
memory/10172-89900-0x0000027AB1450000-0x0000027AB1452000-memory.dmp
memory/10172-89901-0x0000027AB1480000-0x0000027AB1482000-memory.dmp