***********************************************
*                                             *
*   ____  _____ ____  _     ___ _   _ _____   *
*  |  _ \| ____|  _ \| |   |_ _| \ | | ____|  *
*  | |_) |  _| | | | | |    | ||  \| |  _|    *
*  |  _ <| |___| |_| | |___ | || |\  | |___   *
*  |_| \_|_____|____/|_____|___|_| \_|_____|  *
*                                             *
*  Telegram: https://t.me/ytteam_cloud        *
***********************************************

ID: 824, Name: csrss.exe, CommandLine: 
===============
ID: 1016, Name: winlogon.exe, CommandLine: winlogon.exe
===============
ID: 760, Name: fontdrvhost.exe, CommandLine: "fontdrvhost.exe"
===============
ID: 1224, Name: dwm.exe, CommandLine: "dwm.exe"
===============
ID: 2188, Name: uihost.exe, CommandLine: "C:\Program Files\McAfee\WebAdvisor\UIHost.exe" 
===============
ID: 5276, Name: sihost.exe, CommandLine: sihost.exe
===============
ID: 5544, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
===============
ID: 860, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc
===============
ID: 1260, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
===============
ID: 2856, Name: taskhostw.exe, CommandLine: taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
===============
ID: 4084, Name: igfxEMN.exe, CommandLine: "C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_8224d2a1e5167214\igfxEMN.exe"
===============
ID: 1984, Name: explorer.exe, CommandLine: C:\WINDOWS\Explorer.EXE
===============
ID: 1940, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
===============
ID: 7448, Name: SearchHost.exe, CommandLine: "C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
===============
ID: 7460, Name: StartMenuExperienceHost.exe, CommandLine: "C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
===============
ID: 7640, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding
===============
ID: 7716, Name: Widgets.exe, CommandLine: "C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" -ServerName:Microsoft.Windows.DashboardServer
===============
ID: 7728, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding
===============
ID: 7832, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc
===============
ID: 4352, Name: dllhost.exe, CommandLine: C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
===============
ID: 6568, Name: ctfmon.exe, CommandLine: "ctfmon.exe"
===============
ID: 8196, Name: TextInputHost.exe, CommandLine: "C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXjd5de1g66v206tj52m9d0dtpppx4cgpn.mca
===============
ID: 8624, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
===============
ID: 8812, Name: RtkAudUService64.exe, CommandLine: "C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e562d56b918f874e\RtkAudUService64.exe" -background
===============
ID: 9164, Name: mswake.exe, CommandLine: "C:\RPC\mswake.exe" 
===============
ID: 6940, Name: dllhost.exe, CommandLine: C:\WINDOWS\system32\DllHost.exe /Processid:{7EAD5C10-8B3F-11E6-AE22-56B6B6499611}
===============
ID: 8984, Name: QAAgent.exe, CommandLine: "C:\Program Files\Acer\Quick Access Service\QAAgent.exe"
===============
ID: 8936, Name: QAAdminAgent.exe, CommandLine: "C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe"
===============
ID: 1328, Name: igfxextN.exe, CommandLine: "C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_8224d2a1e5167214\igfxextN.exe" -Embedding
===============
ID: 8168, Name: unsecapp.exe, CommandLine: C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
===============
ID: 6516, Name: ACCStd.exe, CommandLine: "C:\Program Files (x86)\Acer\Care Center\ACCStd.exe"
===============
ID: 4004, Name: ePowerButton_NB.exe, CommandLine: "C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe" -s
===============
ID: 6084, Name: ShellExperienceHost.exe, CommandLine: "C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
===============
ID: 6336, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding
===============
ID: 6716, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s NPSMSvc
===============
ID: 6772, Name: SystemSettingsBroker.exe, CommandLine: C:\Windows\System32\SystemSettingsBroker.exe -Embedding
===============
ID: 3056, Name: WidgetService.exe, CommandLine: "C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\widgetservice.exe" -RegisterProcessAsComServer -Embedding
===============
ID: 5356, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Widgets.exe --webview-exe-version=421.20070.2010.0 --user-data-dir="C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --disk-cache-size=52428800 --edge-webview-is-background --enable-features=MojoIpcz,msWebView2TreatAppSuspendAsDeviceSuspend,UseNativeThreadPool,UseBackgroundNativeThreadPool --lang=es-MX --accept-lang=es-MX --mojo-named-platform-channel-pipe=7716.8456.13395080742486345030 /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461
===============
ID: 2228, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=120.0.6099.200 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=120.0.2210.121 --initial-client-data=0x184,0x188,0x18c,0x168,0x1c4,0x7ff8c6762b38,0x7ff8c6762b44,0x7ff8c6762b50
===============
ID: 8752, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=421.20070.2010.0 --embedded-browser-webview=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1840 --field-trial-handle=1844,i,18279769398519553164,16737412375269370694,262144 --enable-features=MojoIpcz,UseBackgroundNativeThreadPool,UseNativeThreadPool,msWebView2TreatAppSuspendAsDeviceSuspend --variations-seed-version /prefetch:2 /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461
===============
ID: 2524, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es-419 --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=421.20070.2010.0 --embedded-browser-webview=1 --mojo-platform-channel-handle=3188 --field-trial-handle=1844,i,18279769398519553164,16737412375269370694,262144 --enable-features=MojoIpcz,UseBackgroundNativeThreadPool,UseNativeThreadPool,msWebView2TreatAppSuspendAsDeviceSuspend --variations-seed-version /prefetch:3 /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461
===============
ID: 6288, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es-419 --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=421.20070.2010.0 --embedded-browser-webview=1 --mojo-platform-channel-handle=3220 --field-trial-handle=1844,i,18279769398519553164,16737412375269370694,262144 --enable-features=MojoIpcz,UseBackgroundNativeThreadPool,UseNativeThreadPool,msWebView2TreatAppSuspendAsDeviceSuspend --variations-seed-version /prefetch:8 /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461
===============
ID: 7276, Name: msedgewebview2.exe, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\damia\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=421.20070.2010.0 --embedded-browser-webview=1 --first-renderer-process --lang=es-419 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-1705022587240088 --launch-time-ticks=457309532 --mojo-platform-channel-handle=3820 --field-trial-handle=1844,i,18279769398519553164,16737412375269370694,262144 --enable-features=MojoIpcz,UseBackgroundNativeThreadPool,UseNativeThreadPool,msWebView2TreatAppSuspendAsDeviceSuspend --variations-seed-version /pfhostedapp:56da1610806e7b9394d7f3617c56f7b6be719461 /prefetch:1
===============
ID: 3476, Name: AppMonitorPlugIn.exe, CommandLine: "C:\Program Files\Acer\User Experience Improvement Program Service\Plugin\AppMonitor\AppMonitorPlugIn.exe"
===============
ID: 7020, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
===============
ID: 3176, Name: taskhostw.exe, CommandLine: taskhostw.exe
===============
ID: 10900, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CaptureService
===============
ID: 7536, Name: ApplicationFrameHost.exe, CommandLine: C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
===============
ID: 11460, Name: dllhost.exe, CommandLine: C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
===============
ID: 2632, Name: RtkUWP.exe, CommandLine: "C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.30.259.0_x64__dt26b99r8h8gj\RtkUWP.exe" -ServerName:App.AppX2vzv616czv2j97f46vn25b5ksjvhr8z1.mca
===============
ID: 11748, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding
===============
ID: 8316, Name: Discord.exe, CommandLine: C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe
===============
ID: 4320, Name: Discord.exe, CommandLine: C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\damia\AppData\Roaming\discord /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\damia\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9030 --annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=22.3.26 --initial-client-data=0x570,0x574,0x578,0x55c,0x57c,0x83c5d78,0x83c5d88,0x83c5d94
===============
ID: 5168, Name: Discord.exe, CommandLine: "C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\damia\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1876,i,10507893899311123950,6039104860513942376,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
===============
ID: 6700, Name: Discord.exe, CommandLine: "C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es-419 --service-sandbox-type=none --user-data-dir="C:\Users\damia\AppData\Roaming\discord" --standard-schemes --secure-schemes=disclip --bypasscsp-schemes --cors-schemes --fetch-schemes=disclip --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2148 --field-trial-handle=1876,i,10507893899311123950,6039104860513942376,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
===============
ID: 1744, Name: Discord.exe, CommandLine: "C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe" --type=renderer --user-data-dir="C:\Users\damia\AppData\Roaming\discord" --standard-schemes --secure-schemes=disclip --bypasscsp-schemes --cors-schemes --fetch-schemes=disclip --service-worker-schemes --streaming-schemes --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\damia\AppData\Local\Discord\app-1.0.9030\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --lang=es-419 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1705022584774278 --launch-time-ticks=59535828109 --mojo-platform-channel-handle=3816 --field-trial-handle=1876,i,10507893899311123950,6039104860513942376,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --enable-node-leakage-in-renderers /prefetch:1
===============
ID: 9376, Name: Discord.exe, CommandLine: "C:\Users\damia\AppData\Local\Discord\app-1.0.9030\Discord.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es-419 --service-sandbox-type=audio --user-data-dir="C:\Users\damia\AppData\Roaming\discord" --standard-schemes --secure-schemes=disclip --bypasscsp-schemes --cors-schemes --fetch-schemes=disclip --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=4368 --field-trial-handle=1876,i,10507893899311123950,6039104860513942376,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
===============
ID: 9832, Name: smartscreen.exe, CommandLine: C:\Windows\System32\smartscreen.exe -Embedding
===============
ID: 9676, Name: QsuprFEMy2GISfXvLBIhEKdy.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\QsuprFEMy2GISfXvLBIhEKdy.exe" 
===============
ID: 2468, Name: XU7UwgdhTkLvbTLX9iXfaEAu.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\XU7UwgdhTkLvbTLX9iXfaEAu.exe" 
===============
ID: 5028, Name: 2oEyItWuw08unn4D2YKujotP.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\2oEyItWuw08unn4D2YKujotP.exe" 
===============
ID: 8748, Name: Ag1e18dHOSXdDS9wfyrdffjc.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\Ag1e18dHOSXdDS9wfyrdffjc.exe" 
===============
ID: 8392, Name: cRaBkzim5xGEk5C4HwC28RUI.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\cRaBkzim5xGEk5C4HwC28RUI.exe" --Admin IsNotAutoStart IsNotTask
===============
ID: 9068, Name: InstallSetup8.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\InstallSetup8.exe" 
===============
ID: 13100, Name: e0cbefcb1af40c7d4aff4aca26621a98.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\e0cbefcb1af40c7d4aff4aca26621a98.exe" 
===============
ID: 10760, Name: rty27.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\rty27.exe" 
===============
ID: 15176, Name: nsbD051.tmp, CommandLine: C:\Users\damia\AppData\Local\Temp\nsbD051.tmp
===============
ID: 16652, Name: hnxrp3z3wYJWKkWmq3LeALFI.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\hnxrp3z3wYJWKkWmq3LeALFI.exe" 
===============
ID: 16708, Name: YreqG46ywo_cP2ZPewpTkGat.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\YreqG46ywo_cP2ZPewpTkGat.exe" 
===============
ID: 16728, Name: ERSYZ9BXCQF3APuk98uhO7Sy.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\ERSYZ9BXCQF3APuk98uhO7Sy.exe" 
===============
ID: 16112, Name: Au4r7KGAEBVj6PN7YaF5B1zB.exe, CommandLine: "C:\Users\damia\Documents\GuardFox\Au4r7KGAEBVj6PN7YaF5B1zB.exe" --Admin IsNotAutoStart IsNotTask
===============
ID: 15220, Name: Windows.exe, CommandLine: "C:\Users\damia\AppData\Roaming\Windows.exe" 
===============
ID: 12352, Name: explorhe.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\d887ceb89d\explorhe.exe" 
===============
ID: 16816, Name: qemu-ga.exe, CommandLine: "C:\Users\damia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qemu-ga.exe" 
===============
ID: 11844, Name: CompPkgSrv.exe, CommandLine: C:\Windows\System32\CompPkgSrv.exe -Embedding
===============
ID: 15888, Name: rundll32.exe, CommandLine: "C:\Windows\System32\rundll32.exe" C:\Users\damia\AppData\Roaming\006700e5a2ab05\clip64.dll, Main
===============
ID: 12472, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --origin-trial-disabled-features=WebGPU --first-renderer-process --disable-databases --lang=es-419 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1705022584773480 --launch-time-ticks=88031226766 --mojo-platform-channel-handle=3500 --field-trial-handle=2500,i,15189746244042265991,1281133384039043656,262144 --variations-seed-version=20240110-180219.406000 /prefetch:1
===============
ID: 18852, Name: InstallSetup7.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\InstallSetup7.exe" 
===============
ID: 9572, Name: 31839b57a4f11171d6abc8bbc4451ee4.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\31839b57a4f11171d6abc8bbc4451ee4.exe" 
===============
ID: 10092, Name: rty25.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\rty25.exe" 
===============
ID: 5816, Name: nsa11FA.tmp, CommandLine: C:\Users\damia\AppData\Local\Temp\nsa11FA.tmp
===============
ID: 14928, Name: Default.exe, CommandLine: "C:\Users\damia\AppData\Local\Identities\schmle\Default.exe"
===============
ID: 4088, Name: qemu-ga.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\d887ceb89d\qemu-ga.exe" 
===============
ID: 18472, Name: SystemSettings.exe, CommandLine: "C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
===============
ID: 18720, Name: LiveUpdateChecker.exe, CommandLine: "C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe" -auto
===============
ID: 19180, Name: SecHealthUI.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25992.9000.0_x64__8wekyb3d8bbwe\SecHealthUI.exe" -ServerName:SecHealthUI.AppX8tam42xc7v2czs3s1nt0nkxvfjtepzp9.mca
===============
ID: 10420, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding
===============
ID: 12556, Name: SecurityHealthHost.exe, CommandLine: \\?\C:\Windows\System32\SecurityHealth\1.0.2311.17002-0\SecurityHealthHost.exe {E041C90B-68BA-42C9-991E-477B73A75C90} -Embedding
===============
ID: 17160, Name: explorhe.exe, CommandLine: "C:\Users\damia\AppData\Local\Temp\d887ceb89d\explorhe.exe"
===============
ID: 10324, Name: jsc.exe, CommandLine: C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
