***********************************************

* *
* ____ _____ ____ _ ___ _ _ _____ *
* | _ \| ____| _ \| | |_ _| \ | | ____| *
* | |_) | _| | | | | | | || \| | _| *
* | _ <| |___| |_| | |___ | || |\ | |___ *
* |_| \_|_____|____/|_____|___|_| \_|_____| *
* *
* Telegram: https://t.me/REDLINESUPPORT *
***********************************************

ID: 508, Name: csrss.exe, CommandLine:

===============
ID: 660, Name: winlogon.exe, CommandLine:
===============
ID: 2928, Name: taskhost.exe, CommandLine: "taskhost.exe"
===============
ID: 2780, Name: dwm.exe, CommandLine: "C:\Windows\system32\Dwm.exe"
===============
ID: 3028, Name: explorer.exe, CommandLine: C:\Windows\Explorer.EXE
===============
ID: 3096, Name: taskeng.exe, CommandLine:
===============
ID: 3252, Name: ALU.exe, CommandLine:
===============
ID: 4004, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --auto-launch-onlogon --start-
maximized
===============
ID: 3992, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-
dir=C:\Users\Diagnose\AppData\Local\Microsoft\Edge\User Data" /prefetch:7
--monitor-self-annotation=ptype=crashpad-handler "--
database=C:\Users\Diagnose\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--
metrics-dir=C:\Users\Diagnose\AppData\Local\Microsoft\Edge\User Data"
--annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-
version=83.0.4103.97 "--annotation=exe=C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win32
--annotation=prod=Edge --annotation=ver=83.0.478.50 --initial-client-
data=0xa8,0xac,0xb0,0x7c,0xb4,0x5f923a30,0x5f923a40,0x5f923a4c
===============
ID: 2616, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-
handle=1192,12052708027050526892,10721056198524843611,131072 --gpu-
preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQ
AAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAA
AGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-
handle=1220 /prefetch:2
===============
ID: 2080, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=utility --field-trial-
handle=1192,12052708027050526892,10721056198524843611,131072 --lang=de --service-
sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-
handle=1452 /prefetch:8
===============
ID: 2132, Name: RtHDVCpl.exe, CommandLine: "C:\Program
Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s
===============
ID: 2848, Name: RtHDVBg.exe, CommandLine: "C:\Program
Files\Realtek\Audio\HDA\RtHDVBg.exe" /SF3
===============
ID: 3968, Name: SonicFocusTray.exe, CommandLine: "C:\Program Files\ASUS\Sonic
Focus\SonicFocusTray.exe"
===============
ID: 4048, Name: AmIcoSinglun.exe, CommandLine: "C:\Program
Files\AmIcoSingLun\AmIcoSinglun.exe"
===============
ID: 888, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-
handle=1192,12052708027050526892,10721056198524843611,131072 --lang=de --disable-
client-side-phishing-detection --enable-auto-reload --device-scale-factor=1 --num-
raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11
--no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2884 /prefetch:1
===============
ID: 3604, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-
handle=1192,12052708027050526892,10721056198524843611,131072 --lang=de --disable-
client-side-phishing-detection --enable-auto-reload --device-scale-factor=1 --num-
raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13
--no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2936 /prefetch:1
===============
ID: 3488, Name: msedge.exe, CommandLine: "C:\Program
Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-
handle=1192,12052708027050526892,10721056198524843611,131072 --lang=de --disable-
client-side-phishing-detection --instant-process --enable-auto-reload --device-
scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation
--renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-
handle=3028 /prefetch:1
===============
ID: 4900, Name: vmware-tray.exe, CommandLine: "C:\Program Files\VMware\VMware
Workstation\vmware-tray.exe"
===============
ID: 4948, Name: igfxtray.exe, CommandLine: "C:\Windows\System32\igfxtray.exe"
===============
ID: 5036, Name: hkcmd.exe, CommandLine: "C:\Windows\System32\hkcmd.exe"
===============
ID: 5104, Name: igfxpers.exe, CommandLine: "C:\Windows\System32\igfxpers.exe"
===============
ID: 5716, Name: Starburst.exe, CommandLine: "C:\Program Files\Mazda Motor
Corporation\IDS\Runtime\Starburst.exe"
===============
ID: 5728, Name: ProbeTickHandler.exe, CommandLine: "C:\Program Files\Mazda Motor
Corporation\IDS\Runtime\ProbeTickHandler.exe"
===============
ID: 5736, Name: EngineeringFeedback.exe, CommandLine: "C:\Program Files\Mazda Motor
Corporation\IDS\Runtime\EngineeringFeedback.exe"
===============
ID: 3636, Name: agent.exe, CommandLine:
C:\ProgramData\FLEXnet\Connect\11\\agent.exe -Embedding
===============
ID: 5448, Name: Avira.Systray.exe, CommandLine: "C:\Program
Files\Avira\Launcher\Avira.Systray.exe" /connectToHost
===============
ID: 3072, Name: steam.exe, CommandLine: "C:\Program Files\Steam\steam.exe" -silent
===============
ID: 5160, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" "-lang=de_DE" "-
cachedir=C:\Users\Diagnose\AppData\Local\Steam\htmlcache" "-steampid=3072" "-
buildid=1594252496" "-steamid=0" "-steamuniverse=Public" "-clientui=C:\Program
Files\Steam\clientui" --enable-blink-features=ResizeObserver,Worklet,AudioWorklet
--enable-media-stream --enable-smooth-scrolling --enable-direct-write
--disablehighdpi --force-device-scale-factor=1 --device-scale-factor=1 "--log-
file=C:\Program Files\Steam\logs\cef_log.txt"
===============
ID: 4172, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=crashpad-handler
/prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-
annotation=ptype=crashpad-handler "--database=C:\Program Files\Steam\dumps" "--
metrics-dir=C:\Users\Diagnose\AppData\Local\CEF\User Data"
--url=http://crash.steampowered.com/submit --annotation=platform=win32
--annotation=product=cefwebhelper --annotation=version=1594252496 --initial-client-
data=0x1a8,0x1d4,0x1d8,0x1d0,0x1dc,0x16d67e0,0x16d67f0,0x16d67fc
===============
ID: 3004, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=gpu-process --field-trial-
handle=1108,14201298624231564116,9833478430533370269,131072 --disable-
features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --log-
file="C:\Program Files\Steam\logs\cef_log.txt" --product-version="Valve Steam
Client" --lang=de-DE --force-device-scale-factor=1 --disablehighdpi
--disablehighdpi --buildid=1594252496 --steamid=0 --gpu-
preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAA
AAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAA
AAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --log-file="C:\Program
Files\Steam\logs\cef_log.txt" --service-request-channel-token=16685921176176078182
--mojo-platform-channel-handle=1124 --ignored=" --type=renderer " /prefetch:2
===============
ID: 2776, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=utility --field-trial-
handle=1108,14201298624231564116,9833478430533370269,131072 --disable-
features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --lang=de
--service-sandbox-type=network --log-file="C:\Program Files\Steam\logs\cef_log.txt"
--product-version="Valve Steam Client" --lang=de-DE --force-device-scale-factor=1
--disablehighdpi --disablehighdpi --buildid=1594252496 --steamid=0 --log-
file="C:\Program Files\Steam\logs\cef_log.txt" --service-request-channel-
token=4231569373707163914 --mojo-platform-channel-handle=1568 /prefetch:8
===============
ID: 5256, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --force-device-
scale-factor=1 --log-file="C:\Program Files\Steam\logs\cef_log.txt" --field-trial-
handle=1108,14201298624231564116,9833478430533370269,131072 --disable-
features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-
blink-features=ResizeObserver,Worklet,AudioWorklet --lang=de --log-file="C:\Program
Files\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --force-
device-scale-factor=1 --disablehighdpi --disablehighdpi --buildid=1594252496
--steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-
before-activation --service-request-channel-token=14741103292507165224 --renderer-
client-id=5 --mojo-platform-channel-handle=2076 /prefetch:1
===============
ID: 4460, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --force-device-
scale-factor=1 --log-file="C:\Program Files\Steam\logs\cef_log.txt" --field-trial-
handle=1108,14201298624231564116,9833478430533370269,131072 --disable-
features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-
blink-features=ResizeObserver,Worklet,AudioWorklet --lang=de --log-file="C:\Program
Files\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --force-
device-scale-factor=1 --disablehighdpi --disablehighdpi --buildid=1594252496
--steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-
before-activation --service-request-channel-token=17788661672569345290 --renderer-
client-id=6 --mojo-platform-channel-handle=2216 /prefetch:1
===============
ID: 5804, Name: steamwebhelper.exe, CommandLine: "C:\Program
Files\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --force-device-
scale-factor=1 --log-file="C:\Program Files\Steam\logs\cef_log.txt" --field-trial-
handle=1108,14201298624231564116,9833478430533370269,131072 --disable-
features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-
blink-features=ResizeObserver,Worklet,AudioWorklet --lang=de --log-file="C:\Program
Files\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --force-
device-scale-factor=1 --disablehighdpi --disablehighdpi --buildid=1594252496
--steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-
before-activation --service-request-channel-token=1132843788123866761 --renderer-
client-id=7 --mojo-platform-channel-handle=2312 /prefetch:1
===============
ID: 7896, Name: OriginThinSetupInternal.exe, CommandLine:
"C:\ProgramData\Origin\SelfUpdate\Staged\OriginThinSetupInternal.exe"
"/InstallPath:C:\Program Files\Origin" /locale:de_DE /Version:10.5.74.41754
/DesktopShortcut:false /StartShortcut:false /Autostart:false /Autopatch:true
/Autoupdate:true /TelemOO:false /Beta:false /IsBetaBuild:false /Handoff
/WaitForExit /UpdateDataSource:staged /NoLaunch /silent /UnattendedMode:Service
===============
ID: 5404, Name: consent.exe, CommandLine:
===============
ID: 3080, Name: explorer.exe, CommandLine: C:\Windows\explorer.exe
===============
ID: 7304, Name: explorer.exe, CommandLine: C:\Windows\explorer.exe
===============
ID: 7288, Name: explorer.exe, CommandLine: C:\Windows\explorer.exe
===============
ID: 3972, Name: explorer.exe, CommandLine: C:\Windows\explorer.exe
===============
ID: 2888, Name: cmd.exe, CommandLine: "cmd.exe" /C taskkill /F /PID 2264 &&
choice /C Y /N /D Y /T 3 & Del
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"
===============
ID: 7584, Name: conhost.exe, CommandLine: \??\C:\Windows\system32\conhost.exe
"887008887-1196316292-9759117924275875202056133658670707540-1476191403-529489631
===============
ID: 7632, Name: choice.exe, CommandLine: choice /C Y /N /D Y /T 3
===============
ID: 7212, Name: cmd.exe, CommandLine: "cmd.exe" /C taskkill /F /PID 1204 &&
choice /C Y /N /D Y /T 3 & Del
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"
===============
ID: 7876, Name: conhost.exe, CommandLine: \??\C:\Windows\system32\conhost.exe "-
1726165075-7437761415296052041381388926-713791386-1464555463893603336-1370781598
===============
ID: 7336, Name: choice.exe, CommandLine: choice /C Y /N /D Y /T 3
===============
ID: 4796, Name: ultramediaburner.exe, CommandLine:
===============
ID: 7816, Name: ultramediaburner.tmp, CommandLine:
===============
ID: 7772, Name: UltraMediaBurner.exe, CommandLine:
===============
ID: 1828, Name: Toliladixae.exe, CommandLine:
===============
ID: 13556, Name: ProZipper.exe, CommandLine:
===============
ID: 13912, Name: ProZipper.tmp, CommandLine:
===============
ID: 17344, Name: cmd.exe, CommandLine:
===============
ID: 18388, Name: conhost.exe, CommandLine:
===============
ID: 16772, Name: InlogBrowser_62517.exe, CommandLine:
===============
ID: 13932, Name: rundll32.exe, CommandLine:
===============
ID: 17404, Name: InlogBrowser_62517.tmp, CommandLine:
===============
ID: 15912, Name: rundll32.exe, CommandLine:
===============
ID: 18412, Name: conhost.exe, CommandLine:
===============
ID: 2188, Name: rundll32.exe, CommandLine:
===============
ID: 8740, Name: conhost.exe, CommandLine:
===============
ID: 49416, Name: AddInProcess32.exe, CommandLine:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
===============
ID: 46288, Name: taskeng.exe, CommandLine: taskeng.exe {3E35FEB6-CCF4-4034-9A61-
B57CBDE6C958}
===============
ID: 50196, Name: cjarrre, CommandLine: C:\Users\Diagnose\AppData\Roaming\cjarrre
===============
ID: 48660, Name: cmd.exe, CommandLine:
===============
ID: 52512, Name: conhost.exe, CommandLine:
===============
ID: 52880, Name: cjarrre, CommandLine: C:\Users\Diagnose\AppData\Roaming\cjarrre
===============
ID: 51488, Name: sc.exe, CommandLine: