***********************************************

* ____ _____ ____ _ ___ _ _ _____ *

* | _ | ____| _ | | |_ _| | | ____| *
* | |_) | _| | | | | | | || | | _| *
* | _ <| |___| |_| | |___ | || | | |___ *
* |_| _|_____|____/|_____|___|_| _|_____| *
* *
* Telegram : https://t.me/BananaLogs *
***********************************************

ID: 20832, Name: winlogon.exe, CommandLine: C:\WINDOWS\System32\WinLogon.exe -

SpecialSession
===============
ID: 11484, Name: fontdrvhost.exe, CommandLine: "fontdrvhost.exe"
===============
ID: 19880, Name: dwm.exe, CommandLine: "dwm.exe"
===============
ID: 19516, Name: AnySign4PC.exe, CommandLine: "C:\Program Files (x86)\SoftForum\
XecureWeb\AnySign\dll\\AnySign4PC.exe" port=10530;port_s=10531;no_shut=1;
===============
ID: 13200, Name: sihost.exe, CommandLine: sihost.exe
===============
ID: 10344, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k
UnistackSvcGroup -s CDPUserSvc
===============
ID: 3728, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k
BthAppGroup -p -s BluetoothUserService
===============
ID: 15628, Name: igfxEMN.exe, CommandLine: "C:\WINDOWS\System32\DriverStore\
FileRepository\cui_dch.inf_amd64_2e49f48165b8de10\igfxEMN.exe"
===============
ID: 12080, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k
UnistackSvcGroup -s WpnUserService
===============
ID: 18352, Name: taskhostw.exe, CommandLine: taskhostw.exe {222A245B-E637-4AE9-
A93F-A59CA119A75E}
===============
ID: 13272, Name: OZWebLauncher.exe, CommandLine: "C:\Program Files (x86)\FORCS\
OZWebLauncher\OZWebLauncher.exe"
===============
ID: 624, Name: explorer.exe, CommandLine: C:\WINDOWS\Explorer.EXE
===============
ID: 20956, Name: sServiceKeyMonitor.exe, CommandLine: "C:\Program Files\Samsung\
sService\sServiceKeyMonitor.exe"
===============
ID: 2068, Name: SamsungSecuritySupporter.exe, CommandLine: "C:\WINDOWS\System32\
DriverStore\FileRepository\
samsungsecuritysupportservicecomponent.inf_amd64_1a667ff5c9ffbbd3\
SamsungSecuritySupporter.exe"
===============
ID: 5348, Name: SamsungSystemSupportEngine.exe, CommandLine: "C:\WINDOWS\System32\
DriverStore\FileRepository\sfourswcomp.inf_amd64_bc90c19221c12130\
SamsungSystemSupportEngine.exe"
===============
ID: 5828, Name: VestCert.exe, CommandLine: "C:\Program Files (x86)\VestCert\
VestCert.exe"
===============
ID: 10348, Name: MaWebDRMAgent.exe, CommandLine: "C:\Program Files (x86)\MarkAny\
WebDRMNoAX\bin\MaWebDRMAgent.exe"
===============
ID: 600, Name: MaWebDRMAgent_x64.exe, CommandLine: "C:\Program Files (x86)\MarkAny\
WebDRMNoAX\bin\MaWebDRMAgent_x64.exe"
===============
ID: 10332, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k
ClipboardSvcGroup -p -s cbdhsvc
===============
ID: 3064, Name: ctfmon.exe, CommandLine: "ctfmon.exe"
===============
ID: 1380, Name: veraport-x64.exe, CommandLine: "C:\program files\wizvera\
veraport20\veraport-x64.exe"
===============
ID: 9844, Name: StartMenuExperienceHost.exe, CommandLine: "C:\WINDOWS\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\
StartMenuExperienceHost.exe" -
ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
===============
ID: 2080, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 2484, Name: StSess.exe, CommandLine: "C:\Program Files\AhnLab\Safe Transaction\
stsess.exe" /EAA
===============
ID: 16988, Name: SearchApp.exe, CommandLine: "C:\WINDOWS\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -
ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
===============
ID: 15904, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 632, Name: YourPhone.exe, CommandLine: "C:\Program Files\WindowsApps\
Microsoft.YourPhone_1.21102.134.0_x64__8wekyb3d8bbwe\YourPhone.exe" -
ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
===============
ID: 10176, Name: SettingSyncHost.exe, CommandLine: C:\WINDOWS\system32\
SettingSyncHost.exe -Embedding
===============
ID: 18176, Name: StSess32.exe, CommandLine: "C:\Program Files\AhnLab\Safe
Transaction\Nz32\StSess32.exe"
===============
ID: 14168, Name: nosstarter.npe, CommandLine:
===============
ID: 13080, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 3616, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 16432, Name: dllhost.exe, CommandLine: C:\WINDOWS\system32\DllHost.exe
/Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
===============
ID: 14860, Name: TextInputHost.exe, CommandLine: "C:\WINDOWS\SystemApps\
MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -
ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca
===============
ID: 18952, Name: SecurityHealthSystray.exe, CommandLine: "C:\Windows\System32\
SecurityHealthSystray.exe"
===============
ID: 9684, Name: MaximAudioService64.exe, CommandLine: "C:\Windows\System32\
MaximAudioService64.exe"
===============
ID: 22096, Name: AYAgent.aye, CommandLine: "C:\Program Files\ESTsoft\ALYac\
AYAgent.aye" /run
===============
ID: 2008, Name: CompPkgSrv.exe, CommandLine: C:\Windows\System32\CompPkgSrv.exe -
Embedding
===============
ID: 18864, Name: KakaoTalk.exe, CommandLine: "C:\Program Files (x86)\Kakao\
KakaoTalk\KakaoTalk.exe" -bystartup
===============
ID: 8092, Name: RtkAudUService64.exe, CommandLine: C:\WINDOWS\System32\DriverStore\
FileRepository\realtekservice.inf_amd64_fdd83e4dd87bcfa1\RtkAudUService64.exe -
background
===============
ID: 19008, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --no-startup-window /prefetch:5
===============
ID: 21308, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\rnjsq\
AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-
annotation=ptype=crashpad-handler "--database=C:\Users\rnjsq\AppData\Local\Google\
Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --
annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --
annotation=ver=112.0.5615.49 --initial-client-
data=0xec,0xf0,0xf4,0xc8,0xf8,0x7ffe61a9aa60,0x7ffe61a9aa70,0x7ffe61a9aa80
===============
ID: 19612, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=utility --utility-sub-
type=network.mojom.NetworkService --lang=ko --service-sandbox-type=none --mojo-
platform-channel-handle=2244 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:8
===============
ID: 17892, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=utility --utility-sub-
type=storage.mojom.StorageService --lang=ko --service-sandbox-type=service --mojo-
platform-channel-handle=2472 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:8
===============
ID: 4708, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --extension-process --allow-insecure-
localhost --lang=ko --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-
1680523686616043 --launch-time-ticks=1028486157730 --mojo-platform-channel-
handle=3752 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 10228, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --extension-process --allow-insecure-
localhost --lang=ko --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-
1680523686616043 --launch-time-ticks=1028486169488 --mojo-platform-channel-
handle=3920 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 5868, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --extension-process --allow-insecure-
localhost --lang=ko --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-
1680523686616043 --launch-time-ticks=1028486211155 --mojo-platform-channel-
handle=4340 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 13132, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --extension-process --allow-insecure-
localhost --lang=ko --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-
1680523686616043 --launch-time-ticks=1028486364540 --mojo-platform-channel-
handle=4988 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 18020, Name: steam.exe, CommandLine: "C:\Program Files (x86)\Steam\steam.exe" -
silent
===============
ID: 16964, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=ko_KR" "-cachedir=C:\Users\rnjsq\
AppData\Local\Steam\htmlcache" "-steampid=18020" "-buildid=1679680416" "-steamid=0"
"-logdir=C:\Program Files (x86)\Steam\logs" "-steamuniverse=Public" "-realm=Global"
"-clientui=C:\Program Files (x86)\Steam\clientui" --enable-media-stream --enable-
smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\
logs\cef_log.txt" --disable-quick-menu --disable-features=SameSiteByDefaultCookies
--enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-blink-
features=Badging
===============
ID: 16692, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-
uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-
handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\
rnjsq\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --
annotation=platform=win64 --annotation=product=cefwebhelper --
annotation=version=1679680416 --initial-client-
data=0x3b8,0x3bc,0x3c0,0x394,0x3c4,0x7ffe20d4f070,0x7ffe20d4f080,0x7ffe20d4f090
===============
ID: 21700, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --log-
file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam
Client" --lang=ko-KR --buildid=1679680416 --steamid=0 --gpu-
preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQ
AAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAA
AGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --log-file="C:\Program Files
(x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1796 /prefetch:2
===============
ID: 16168, Name: IGCCTray.exe, CommandLine: "C:\Program Files\WindowsApps\
AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\
GCP.ML.BackgroundSysTray\IGCCTray.exe"
===============
ID: 12620, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-
type=network.mojom.NetworkService --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --
lang=ko --service-sandbox-type=network --log-file="C:\Program Files (x86)\Steam\
logs\cef_log.txt" --product-version="Valve Steam Client" --lang=ko-KR --
buildid=1679680416 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\
cef_log.txt" --mojo-platform-channel-handle=2340 /prefetch:8
===============
ID: 18264, Name: IGCC.exe, CommandLine: "C:\Program Files\WindowsApps\
AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.exe" -
ServerName:App.AppXxq4ar3drev924dxqnatpa4s48c4zrxd1.mca
===============
ID: 12808, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program
Files (x86)\Steam\logs\cef_log.txt" --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --
enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-blink-
features=Badging --lang=ko --log-file="C:\Program Files (x86)\Steam\logs\
cef_log.txt" --product-version="Valve Steam Client" --buildid=1679680416 --
steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2588
/prefetch:1
===============
ID: 3228, Name: Cortana.exe, CommandLine: "C:\Program Files\WindowsApps\
Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe" -
ServerName:App.AppX2y379sjp88wjq1y80217mddj3fargf2y.mca
===============
ID: 4248, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 3948, Name: svchost.exe, CommandLine: C:\WINDOWS\system32\svchost.exe -k
AarSvcGroup -p -s AarSvc
===============
ID: 19724, Name: Win32Bridge.Server.exe, CommandLine: "C:\Program Files\
WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\
Win32Bridge.Server.exe" /InvokerPRAID: App
===============
ID: 14736, Name: HncUpdateTray.exe, CommandLine: "C:\Program Files (x86)\HNC\Office
2020\HncUtils\Service\HncUpdateTray.exe"
===============
ID: 11612, Name: jusched.exe, CommandLine: "C:\Program Files (x86)\Common Files\
Java\Java Update\jusched.exe"
===============
ID: 11380, Name: HncUpdateTray_ODT.exe, CommandLine: "C:\Program Files (x86)\HNC\
HwpODTCtrl\HncUtils\Service\HncUpdateTray_ODT.exe"
===============
ID: 18420, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program
Files (x86)\Steam\logs\cef_log.txt" --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --
enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-blink-
features=Badging --lang=ko --log-file="C:\Program Files (x86)\Steam\logs\
cef_log.txt" --product-version="Valve Steam Client" --buildid=1679680416 --
steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2968
/prefetch:1
===============
ID: 4068, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\bin\
cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program Files
(x86)\Steam\logs\cef_log.txt" --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --
enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-blink-
features=Badging --lang=ko --log-file="C:\Program Files (x86)\Steam\logs\
cef_log.txt" --product-version="Valve Steam Client" --buildid=1679680416 --
steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3084
/prefetch:1
===============
ID: 16124, Name: steamwebhelper.exe, CommandLine: "C:\Program Files (x86)\Steam\
bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program
Files (x86)\Steam\logs\cef_log.txt" --field-trial-
handle=1764,16562806719759785123,2037330890410558373,131072 --enable-
features=CastMediaRouteProvider --disable-features=SameSiteByDefaultCookies --
enable-blink-features=ResizeObserver,Worklet,AudioWorklet --disable-blink-
features=Badging --lang=ko --log-file="C:\Program Files (x86)\Steam\logs\
cef_log.txt" --product-version="Valve Steam Client" --buildid=1679680416 --
steamid=0 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3256
/prefetch:1
===============
ID: 4956, Name: Video.UI.exe, CommandLine: "C:\Program Files\WindowsApps\
Microsoft.ZuneVideo_10.21092.10731.0_x64__8wekyb3d8bbwe\Video.UI.exe" -
ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
===============
ID: 8688, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 18284, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 6808, Name: svchost.exe, CommandLine: C:\WINDOWS\System32\svchost.exe -k
UnistackSvcGroup
===============
ID: 9208, Name: SystemSettings.exe, CommandLine: "C:\Windows\ImmersiveControlPanel\
SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
===============
ID: 14724, Name: ApplicationFrameHost.exe, CommandLine: C:\WINDOWS\system32\
ApplicationFrameHost.exe -Embedding
===============
ID: 22024, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=utility --utility-sub-
type=proxy_resolver.mojom.ProxyResolverFactory --lang=ko --service-sandbox-
type=service --mojo-platform-channel-handle=5652 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:8
===============
ID: 15436, Name: SUEngine.exe, CommandLine: "C:\Program Files\Samsung\
SamsungUpdate\SUEngine.exe"
===============
ID: 14980, Name: conhost.exe, CommandLine: \??\C:\WINDOWS\system32\conhost.exe 0x4
===============
ID: 13708, Name: SUUserModeWorker.exe, CommandLine: "C:\Program Files\Samsung\
SamsungUpdate\SUUserModeWorker.exe"
===============
ID: 15204, Name: SearchApp.exe, CommandLine: "C:\WINDOWS\SystemApps\
Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -
ServerName:ShellFeedsUI.AppX88fpyyrd21w8wqe62wzsjh5agex7tf1e.mca
===============
ID: 16164, Name: vbc.exe, CommandLine: C:\Windows\Microsoft.NET\Framework64\
v4.0.30319\vbc.exe -a cryptonight-heavy --url=pool.hashvault.pro:5555 -u
45hQkcHE12TMwiKrnaUJdhMQXetDJU4CWfuGX34S8jm9T87QAuQ3hAkeQrccYw9R4XTMJRETZK5zFEqzyiS
eKFrNNgGuBxY -R --variant=-1 --max-cpu-usage=50 --donate-level=1 -opencl
===============
ID: 18620, Name: UserOOBEBroker.exe, CommandLine: C:\Windows\System32\oobe\
UserOOBEBroker.exe -Embedding
===============
ID: 6488, Name: AppVShNotify.exe, CommandLine: "C:\Program Files\Common Files\
Microsoft Shared\ClickToRun\AppVShNotify.exe"
===============
ID: 11792, Name: ONENOTEM.EXE, CommandLine: "C:\Program Files\Microsoft Office\
root\Office16\ONENOTEM.EXE" sr
===============
ID: 14632, Name: ShellExperienceHost.exe, CommandLine: "C:\WINDOWS\SystemApps\
ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -
ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
===============
ID: 20884, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService
--lang=ko --service-sandbox-type=audio --mojo-platform-channel-handle=6488 --field-
trial-handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:8
===============
ID: 15476, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=gpu-process --gpu-
preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAA
AAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-
platform-channel-handle=2036 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:2
===============
ID: 18268, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --allow-insecure-localhost --lang=ko --
device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation
--renderer-client-id=48 --time-ticks-at-unix-epoch=-1680523686616043 --launch-time-
ticks=1029972531940 --mojo-platform-channel-handle=7724 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 1420, Name: RobloxPlayerBeta.exe, CommandLine: "C:\Users\rnjsq\AppData\Local\
Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe" --app -t
ABPeiz3Z4dadt8V6deVV33XehNYPAO65wnBvwv3XD46K4vcaLCMYeA5p5u9gUDuR1BTNUpnhxRC1wQ2o0jA
2kOdcowYzDyDPxM7JtiMOYO_Wfm6ybN2jVZUMYPXa8B9lSDzjM2HPVHJYcF1ypymDwRkh2YXOs2S1phkA4f
6PGQ6YGbCnOdS4tAG-YYciW4z1ZOqWWtcMxQojXl5LJfrj_dhDvbXH_6wNhMHQWeilmPQ -j
https://assetgame.roblox.com/game/PlaceLauncher.ashx?
request=RequestGame&browserTrackerId=118637107064&placeId=3260590327&isPlayTogether
Game=false&joinAttemptId=280a7dfb-4f61-4bf5-beba-
b3ba315dae05&joinAttemptOrigin=PlayButton -b 118637107064 --
launchtime=1681553779459 --rloc ko_kr --gloc ko_kr
===============
ID: 12348, Name: GameBarPresenceWriter.exe, CommandLine: "C:\Windows\System32\
GameBarPresenceWriter.exe" -
ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
===============
ID: 13768, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --no-startup-window /prefetch:5
===============
ID: 4608, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\rnjsq\
AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-
annotation=ptype=crashpad-handler "--database=C:\Users\rnjsq\AppData\Local\
Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\rnjsq\AppData\Local\
Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --
annotation=chromium-version=112.0.5615.49 "--annotation=exe=C:\Program Files (x86)\
Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--
annotation=prod=Microsoft Edge" --annotation=ver=112.0.1722.39 --initial-client-
data=0xf4,0xf8,0xfc,0xd0,0x108,0x7ffe29f535f0,0x7ffe29f53600,0x7ffe29f53610
===============
ID: 20220, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=gpu-process --gpu-
preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAA
AAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-
platform-channel-handle=2296 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:2
===============
ID: 12372, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=utility --utility-sub-
type=network.mojom.NetworkService --lang=ko --service-sandbox-type=none --mojo-
platform-channel-handle=2612 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:3
===============
ID: 18648, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=utility --utility-sub-
type=storage.mojom.StorageService --lang=ko --service-sandbox-type=service --mojo-
platform-channel-handle=2144 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:8
===============
ID: 17564, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --extension-process --lang=ko --js-flags=--
ms-user-locale=ko_KR --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-
1680523686616319 --launch-time-ticks=1030992226675 --mojo-platform-channel-
handle=4332 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 1572, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --instant-process --lang=ko --js-flags=--
ms-user-locale=ko_KR --device-scale-factor=1 --num-raster-threads=4 --enable-main-
frame-before-activation --renderer-client-id=15 --time-ticks-at-unix-epoch=-
1680523686616319 --launch-time-ticks=1031000527058 --mojo-platform-channel-
handle=5324 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 17828, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=26 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1031935741082 --mojo-platform-channel-handle=3360 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 21920, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=27 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1031935759880 --mojo-platform-channel-handle=4784 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 22004, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService
--lang=ko --service-sandbox-type=audio --mojo-platform-channel-handle=6812 --field-
trial-handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:8
===============
ID: 648, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=utility --utility-sub-
type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=ko --service-
sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-
handle=7924 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:8
===============
ID: 19756, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --allow-insecure-localhost --lang=ko --
device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation
--renderer-client-id=106 --time-ticks-at-unix-epoch=-1680523686616043 --launch-
time-ticks=1032106471009 --mojo-platform-channel-handle=7900 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 4020, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=renderer --allow-insecure-localhost --lang=ko --
device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation
--renderer-client-id=114 --time-ticks-at-unix-epoch=-1680523686616043 --launch-
time-ticks=1032302236123 --mojo-platform-channel-handle=6148 --field-trial-
handle=2044,i,14378554767507836441,15409429836446897272,131072 /prefetch:1
===============
ID: 2984, Name: SearchProtocolHost.exe, CommandLine: "C:\WINDOWS\system32\
SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-248550248-
3328627258-3025286992-10018_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-
248550248-3328627258-3025286992-10018 1 -2147483646 "Software\Microsoft\Windows
Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\
ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
===============
ID: 19624, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=48 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1032522800825 --mojo-platform-channel-handle=5692 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 9736, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=103 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1032753772389 --mojo-platform-channel-handle=11536 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 21728, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=utility --utility-sub-
type=entity_extraction_service.mojom.Extractor --lang=ko --service-sandbox-
type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=11892
--field-trial-handle=2308,i,17688014716779798743,144936289318773274,131072
/prefetch:8
===============
ID: 15208, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=133 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1032848116242 --mojo-platform-channel-handle=8560 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 296, Name: FZeGzKMigQMElD7uc4oIfjiI.exe, CommandLine: "C:\Users\rnjsq\Pictures\
Minor Policy\FZeGzKMigQMElD7uc4oIfjiI.exe"
===============
ID: 22284, Name: hgxov1JkyLKqlVPsnvzeiJP4.exe, CommandLine: "C:\Users\rnjsq\
Pictures\Minor Policy\hgxov1JkyLKqlVPsnvzeiJP4.exe"
===============
ID: 17760, Name: ex93m2gN7mE79InfGXoVLwc7.exe, CommandLine: "C:\Users\rnjsq\
Pictures\Minor Policy\ex93m2gN7mE79InfGXoVLwc7.exe"
===============
ID: 17984, Name: ki252665.exe, CommandLine: C:\Users\rnjsq\AppData\Local\Temp\
IXP000.TMP\ki252665.exe
===============
ID: 21140, Name: ki337841.exe, CommandLine: C:\Users\rnjsq\AppData\Local\Temp\
IXP001.TMP\ki337841.exe
===============
ID: 19956, Name: ki753975.exe, CommandLine: C:\Users\rnjsq\AppData\Local\Temp\
IXP002.TMP\ki753975.exe
===============
ID: 12384, Name: ki854876.exe, CommandLine: C:\Users\rnjsq\AppData\Local\Temp\
IXP003.TMP\ki854876.exe
===============
ID: 2216, Name: FT5v5IRTvLiIPHiSYGrTIfaA.exe, CommandLine: "C:\Users\rnjsq\
Pictures\Minor Policy\FT5v5IRTvLiIPHiSYGrTIfaA.exe"
===============
ID: 11620, Name: xBTLzE4lZAhG1VRjsb4PhBzn.exe, CommandLine: "C:\Users\rnjsq\
Pictures\Minor Policy\xBTLzE4lZAhG1VRjsb4PhBzn.exe"
===============
ID: 19816, Name: T3AT4Oqmww5S1Rf1cMQKAG1u.exe, CommandLine: "C:\Users\rnjsq\
Pictures\Minor Policy\T3AT4Oqmww5S1Rf1cMQKAG1u.exe"
===============
ID: 10936, Name: az656652.exe, CommandLine: C:\Users\rnjsq\AppData\Local\Temp\
IXP004.TMP\az656652.exe
===============
ID: 20092, Name: msedge.exe, CommandLine: "C:\Program Files (x86)\Microsoft\Edge\
Application\msedge.exe" --type=renderer --lang=ko --js-flags=--ms-user-locale=ko_KR
--device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-
activation --renderer-client-id=139 --time-ticks-at-unix-epoch=-1680523686616319 --
launch-time-ticks=1032891364391 --mojo-platform-channel-handle=4404 --field-trial-
handle=2308,i,17688014716779798743,144936289318773274,131072 /prefetch:1
===============
ID: 9392, Name: 123.exe, CommandLine: "C:\Windows\Temp\123.exe"
===============
ID: 21280, Name: 321.exe, CommandLine: "C:\Windows\Temp\321.exe"
===============
ID: 21220, Name: AppLaunch.exe, CommandLine: "C:\\Windows\\Microsoft.NET\\
Framework\\v4.0.30319\\AppLaunch.exe"
===============
ID: 21108, Name: Install.exe, CommandLine: .\Install.exe
===============
ID: 8936, Name: Install.exe, CommandLine: .\Install.exe /S /site_id "525403"
===============
ID: 16116, Name: sihost.exe, CommandLine: sihost.exe
===============
ID: 14900, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --remote-debugging-port=62415 --headless --user-data-
dir="C:\Users\rnjsq\AppData\Local\Google\Chrome\User DataJPMAO" --profile-
directory="Default"
===============
ID: 13756, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\rnjsq\
AppData\Local\Google\Chrome\User DataJPMAO" /prefetch:7 --monitor-self-
annotation=ptype=crashpad-handler "--database=C:\Users\rnjsq\AppData\Local\Google\
Chrome\User DataJPMAO\Crashpad" --url=https://clients2.google.com/cr/report --
annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --
annotation=ver=112.0.5615.49 --initial-client-
data=0xc4,0x114,0x118,0xf0,0x11c,0x7ffe61a9aa60,0x7ffe61a9aa70,0x7ffe61a9aa80
===============
ID: 11864, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=gpu-process --headless --use-angle=swiftshader-webgl
--headless --gpu-
preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAA
AAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-
gl=angle --mojo-platform-channel-handle=1576 --field-trial-
handle=1588,i,12836091656570782944,1552624035555651100,131072 --disable-
features=PaintHolding /prefetch:2
===============
ID: 19328, Name: chrome.exe, CommandLine: "C:\Program Files\Google\Chrome\
Application\chrome.exe" --type=utility --utility-sub-
type=network.mojom.NetworkService --lang=ko --service-sandbox-type=none --use-
angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-
handle=1868 --field-trial-
handle=1588,i,12836091656570782944,1552624035555651100,131072 --disable-
features=PaintHolding /prefetch:8