b5a6d790d1a89b5e9dbf73b91220c9ea25e4a4a78de3c02d2b57ae8a40e85c30

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 19:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Size 377KB
Sample260805-x28ngseq4t
SHA256 b5a6d790d1a89b5e9dbf73b91220c9ea25e4a4a78de3c02d2b57ae8a40e85c30
MD5 065a17e5462b8b590187b89a0b5c98f8
SHA1 d41deefa34cc014572fd3dcbb1ddb73dc3a17634
SHA512 b573fedf387eaf524d5926a73ce87452f3a0e2788b188efc052ae9e6228c3e3fa928b79c78b06d4584e84b0e12da2d3ad722fdd7a897a7c8cb110142ad4a6b9a
SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/griEfsNrwT:pYyDi5eNiQ7uysMFZzN/gGL1a
TLSH
T1E6847C16FB9508FDE5A7C5748A9245469A357C9F0B71EADF07C8422A2F237F08E39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery persistence

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 2 IoCs

resource	yara_rule
behavioral2/files/0x000d00000001c547-3.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral2/files/0x000d00000001c549-12.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Executes dropped EXE 24 IoCs

pid	Process
4908	audiodg.exe
2312	shost.exe
732	audiodg.exe
3232	shost.exe
868	audiodg.exe
5520	shost.exe
1604	audiodg.exe
1220	shost.exe
808	audiodg.exe
4672	shost.exe
2856	audiodg.exe
2712	shost.exe
4944	audiodg.exe
4876	shost.exe
4680	audiodg.exe
5084	shost.exe
2592	audiodg.exe
2564	shost.exe
5904	audiodg.exe
2544	shost.exe
2964	audiodg.exe
5528	shost.exe
4800	audiodg.exe
5192	shost.exe

Modifies system executable filetype association 2 TTPs 36 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3192	msedge.exe

Modifies registry class 36 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 2996 wrote to memory of 4908	2996	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe	89
PID 2996 wrote to memory of 2312	2996	2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe	90
PID 2312 wrote to memory of 732	2312	shost.exe	91
PID 2312 wrote to memory of 3232	2312	shost.exe	92
PID 3232 wrote to memory of 868	3232	shost.exe	93
PID 3232 wrote to memory of 5520	3232	shost.exe	94
PID 5520 wrote to memory of 1604	5520	shost.exe	95
PID 5520 wrote to memory of 1220	5520	shost.exe	96
PID 1220 wrote to memory of 808	1220	shost.exe	97
PID 1220 wrote to memory of 4672	1220	shost.exe	98
PID 4672 wrote to memory of 2856	4672	shost.exe	99
PID 4672 wrote to memory of 2712	4672	shost.exe	100
PID 2712 wrote to memory of 4944	2712	shost.exe	101
PID 2712 wrote to memory of 4876	2712	shost.exe	102
PID 4876 wrote to memory of 4680	4876	shost.exe	103
PID 4876 wrote to memory of 5084	4876	shost.exe	104
PID 5084 wrote to memory of 2592	5084	shost.exe	105
PID 5084 wrote to memory of 2564	5084	shost.exe	106
PID 2564 wrote to memory of 5904	2564	shost.exe	107
PID 2564 wrote to memory of 2544	2564	shost.exe	108
PID 2544 wrote to memory of 2964	2544	shost.exe	109
PID 2544 wrote to memory of 5528	2544	shost.exe	110
PID 5528 wrote to memory of 4800	5528	shost.exe	111
PID 5528 wrote to memory of 5192	5528	shost.exe	112

C:\Users\Admin\AppData\Local\Temp\2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe"
1⤵
- Modifies system executable filetype association
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2996
- C:\Users\Admin\Documents\diagnostics\audiodg.exe
  "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
  2⤵
  - Executes dropped EXE
  PID:4908
- C:\Users\Admin\Documents\diagnostics\shost.exe
  "C:\Users\Admin\Documents\diagnostics\shost.exe"
  2⤵
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2312
- - C:\Users\Admin\Documents\diagnostics\audiodg.exe
    "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
    3⤵
    - Executes dropped EXE
    PID:732
- - C:\Users\Admin\Documents\diagnostics\shost.exe
    "C:\Users\Admin\Documents\diagnostics\shost.exe"
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:3232
  - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
      "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
      4⤵
      Executes dropped EXE
      PID:868
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe"
      4⤵
      Executes dropped EXE
      Modifies system executable filetype association
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:5520
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        Executes dropped EXE
        
        PID:1604
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:1220
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        Executes dropped EXE
        
        PID:808
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        Executes dropped EXE
        
        PID:2856
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:2712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        Executes dropped EXE
        
        PID:4944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        Executes dropped EXE
        
        PID:4680
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:5084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        Executes dropped EXE
        
        PID:2592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:2564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        Executes dropped EXE
        
        PID:5904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:2544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        Executes dropped EXE
        
        PID:2964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:5528
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        Executes dropped EXE
        
        PID:4800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        Executes dropped EXE
        
        PID:5192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:4892
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:4724
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:6100
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:4016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:5848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:200
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:3356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:2864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:3628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:1672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:2968
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:4340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:5272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:1632
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:1256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:3936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:2528
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:5968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:1348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:4480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:4956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:1144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:3284
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:3168
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:4520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:4632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:2108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:2072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:4856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:5952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:2004
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:4572
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:2540
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:1776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:2436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:1164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:4328
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:2836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:4136
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:2940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:2476
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:2472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:1364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:3896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:1588
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:3032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:2232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:3368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:5924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:2648
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:3736
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:1688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:3344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:2632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:1556
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:4660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:4208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:4524
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:3524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:4796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:1156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:4360
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:5932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:3140
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:4948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:3152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:2912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:5504
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:5692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:5660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:4316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:2932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:4172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:2792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:5608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:1296
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:6084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:5640
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=audiodg.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
        55⤵
        
        PID:4716
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x350,0x7ffaca48c188,0x7ffaca48c194,0x7ffaca48c1a0
        56⤵
        
        PID:2880
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,862907590322850309,10686732170005412330,262144 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:2
        56⤵
        
        PID:3132
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,11286372137933369722,13854746012058169857,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:11
        56⤵
        System Time Discovery
        
        PID:3192
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,7023175754635938304,488970622217178111,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
        56⤵
        
        PID:5488
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,5638534624238490244,6636905076821256951,2097152 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
        56⤵
        
        PID:5404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,16609286117181653628,10157561436781576529,2097152 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
        56⤵
        
        PID:4808
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,290168975112200541,15833034615568831699,2097152 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
        56⤵
        
        PID:5512
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,6861385552071698641,17082567269924554820,2097152 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:9
        56⤵
        
        PID:5764
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,9686199486094158160,5436184935127730224,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
        56⤵
        
        PID:5040
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,15965670019614927098,5840660186265146936,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14
        56⤵
        
        PID:6496
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,11249657420124712310,9459410846205469094,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
        56⤵
        
        PID:6504
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5820,i,9406229855404572205,17055447965123540785,2097152 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
        56⤵
        
        PID:6740
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,803697667830385008,3889678239387329922,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
        56⤵
        
        PID:8704
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,803697667830385008,3889678239387329922,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
        56⤵
        
        PID:9136
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,12810858102148525600,2190315836123553539,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
        56⤵
        
        PID:11084
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,18316950105102232851,16283556167398107592,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
        56⤵
        
        PID:11092
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,729212779765381752,5283056197168057608,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
        56⤵
        
        PID:11100
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2104,i,11131588609573023856,832614791823346005,524288 --field-trial-handle=2428,i,12403897170518330026,16872949120614019558,262144 --variations-seed-version --mojo-platform-channel-handle=1796 /prefetch:14
        56⤵
        
        PID:16212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:5680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:1004
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:4180
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:4840
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:2520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:1412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:4268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:2640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:4768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:5368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:5364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:4460
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:2656
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:2100
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:2028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:1440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:1248
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:4740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:3184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:3792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:4344
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:5648
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:4972
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:1304
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:2176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:5144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:5644
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:3200
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:1868
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:4792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:2316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:1160
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:4000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:2820
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:5732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:2464
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:1896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:6148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:6156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:6188
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:6196
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:6236
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:6244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:6264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:6276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:6304
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:6312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:6348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:6368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:6392
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:6412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:6432
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:6448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:6468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:6480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:6568
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:6588
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:6608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:6624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:6648
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:6676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:6704
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:6728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:6780
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:6860
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:6912
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:6924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:6948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:6956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:7000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:7020
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:7108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:7124
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:7144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:7160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:4628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:6208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:6280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:6300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:6372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:6416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:6460
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:4496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:6232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:5828
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:5760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:3436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:3540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:6664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:6760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:6928
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:6944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:7060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:7084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:7072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:7128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:1224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:6204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:6288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:6216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:6332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:6344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:6628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:5900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:5184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:6340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:2240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:6984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:7092
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:5344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:6748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:7012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:6908
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:6164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:6896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:7204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:7224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:7232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:7276
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:7292
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:7308
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:7316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:7340
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:7352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:7368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:7380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:7408
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:7416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:7440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:7448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:7472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:7480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:7500
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:7512
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:7536
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:7576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:7616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:7640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:7684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:7704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:7716
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:7728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:7752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:7760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:7780
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:7796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:7812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:7832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:7848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:7856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:7876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:7888
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:7908
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:7920
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:7944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:7956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:7972
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:7984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:8008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:8016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:8040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:8048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:8072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:8088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:8112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:8128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:8144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:8156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:8176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:7172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:7056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:7188
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:3832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:7216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:7304
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:7332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:6880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:1276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:5560
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:7400
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:7564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:7596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:7660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:7676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:7708
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:7712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:7788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:7820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:7884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:7916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:7932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:7988
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:8028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:8064
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:8132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:8172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:7196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:6672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:908
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:1316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:4464
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:6856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:2600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:7364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:7548
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:7496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:7436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:7600
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:7800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:7808
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:7940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:8104
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:3268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:7508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:7452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:7652
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:5980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:7980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:3448
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:7244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:3480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:7608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:5844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:7840
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:6056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:5704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:8212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:8220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:8248
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:8260
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        171⤵
        
        PID:8284
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        171⤵
        
        PID:8296
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        172⤵
        
        PID:8324
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        172⤵
        
        PID:8344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        173⤵
        
        PID:8364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        173⤵
        
        PID:8372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        174⤵
        
        PID:8440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        174⤵
        
        PID:8452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        175⤵
        
        PID:8480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        175⤵
        
        PID:8492
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        176⤵
        
        PID:8512
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        176⤵
        
        PID:8524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        177⤵
        
        PID:8564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        177⤵
        
        PID:8572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        178⤵
        
        PID:8600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        178⤵
        
        PID:8620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        179⤵
        
        PID:8636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        179⤵
        
        PID:8652
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        180⤵
        
        PID:8672
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        180⤵
        
        PID:8700
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        181⤵
        
        PID:8720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        181⤵
        
        PID:8732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        182⤵
        
        PID:8760
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        182⤵
        
        PID:8780
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        183⤵
        
        PID:8792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        183⤵
        
        PID:8812
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        184⤵
        
        PID:8832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        184⤵
        
        PID:8844
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        185⤵
        
        PID:8876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        185⤵
        
        PID:8884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        186⤵
        
        PID:8988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        186⤵
        
        PID:9008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        187⤵
        
        PID:9040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        187⤵
        
        PID:9060
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        188⤵
        
        PID:9080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        188⤵
        
        PID:9088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        189⤵
        
        PID:9116
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        189⤵
        
        PID:9132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        190⤵
        
        PID:9184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        190⤵
        
        PID:9192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        191⤵
        
        PID:4696
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        191⤵
        
        PID:8204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        192⤵
        
        PID:8300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        192⤵
        
        PID:8408
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        193⤵
        
        PID:8404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        193⤵
        
        PID:8436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        194⤵
        
        PID:8496
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        194⤵
        
        PID:8556
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        195⤵
        
        PID:8588
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        195⤵
        
        PID:8632
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        196⤵
        
        PID:8752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        196⤵
        
        PID:8788
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        197⤵
        
        PID:8948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        197⤵
        
        PID:8900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        198⤵
        
        PID:8924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        198⤵
        
        PID:8928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        199⤵
        
        PID:8952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        199⤵
        
        PID:8964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        200⤵
        
        PID:9036
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        200⤵
        
        PID:9108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        201⤵
        
        PID:9156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        201⤵
        
        PID:9176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        202⤵
        
        PID:3360
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        202⤵
        
        PID:9208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        203⤵
        
        PID:8360
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        203⤵
        
        PID:8548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        204⤵
        
        PID:8912
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        204⤵
        
        PID:8932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        205⤵
        
        PID:9140
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        205⤵
        
        PID:8276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        206⤵
        
        PID:9232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        206⤵
        
        PID:9268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        207⤵
        
        PID:9300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        207⤵
        
        PID:9344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        208⤵
        
        PID:9376
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        208⤵
        
        PID:9396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        209⤵
        
        PID:9424
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        209⤵
        
        PID:9440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        210⤵
        
        PID:9472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        210⤵
        
        PID:9484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        211⤵
        
        PID:9508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        211⤵
        
        PID:9520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        212⤵
        
        PID:9544
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        212⤵
        
        PID:9564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        213⤵
        
        PID:9584
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        213⤵
        
        PID:9612
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        214⤵
        
        PID:9652
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        214⤵
        
        PID:9672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        215⤵
        
        PID:9724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        215⤵
        
        PID:9744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        216⤵
        
        PID:9768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        216⤵
        
        PID:9788
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        217⤵
        
        PID:9804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        217⤵
        
        PID:9828
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        218⤵
        
        PID:9852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        218⤵
        
        PID:9868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        219⤵
        
        PID:9888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        219⤵
        
        PID:9912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        220⤵
        
        PID:9928
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        220⤵
        
        PID:9952
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        221⤵
        
        PID:9968
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        221⤵
        
        PID:9984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        222⤵
        
        PID:10000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        222⤵
        
        PID:10008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        223⤵
        
        PID:10032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        223⤵
        
        PID:10048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        224⤵
        
        PID:10064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        224⤵
        
        PID:10080
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        225⤵
        
        PID:10096
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        225⤵
        
        PID:10108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        226⤵
        
        PID:10128
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        226⤵
        
        PID:10144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        227⤵
        
        PID:10160
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        227⤵
        
        PID:10172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        228⤵
        
        PID:10188
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        228⤵
        
        PID:10208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        229⤵
        
        PID:10224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        229⤵
        
        PID:10236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        230⤵
        
        PID:9272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        230⤵
        
        PID:9392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        231⤵
        
        PID:9432
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        231⤵
        
        PID:9516
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        232⤵
        
        PID:9540
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        232⤵
        
        PID:9592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        233⤵
        
        PID:9700
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        233⤵
        
        PID:9696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        234⤵
        
        PID:9620
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        234⤵
        
        PID:9792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        235⤵
        
        PID:8704
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        235⤵
        
        PID:9360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        236⤵
        
        PID:9384
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        236⤵
        
        PID:9236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        237⤵
        
        PID:9880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        237⤵
        
        PID:9960
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        238⤵
        
        PID:10020
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        238⤵
        
        PID:10060
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        239⤵
        
        PID:11032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        239⤵
        
        PID:11056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        240⤵
        
        PID:11108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        240⤵
        
        PID:11192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        241⤵
        
        PID:11252
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        241⤵
        
        PID:9996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        242⤵
        
        PID:9992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        242⤵
        
        PID:11180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        243⤵
        
        PID:11216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        243⤵
        
        PID:11144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        244⤵
        
        PID:11196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        244⤵
        
        PID:10012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        245⤵
        
        PID:11212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        245⤵
        
        PID:11068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        246⤵
        
        PID:11280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        246⤵
        
        PID:11296
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        247⤵
        
        PID:11332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        247⤵
        
        PID:11344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        248⤵
        
        PID:11364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        248⤵
        
        PID:11380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        249⤵
        
        PID:11396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        249⤵
        
        PID:11412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        250⤵
        
        PID:11436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        250⤵
        
        PID:11448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        251⤵
        
        PID:11468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        251⤵
        
        PID:11484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        252⤵
        
        PID:11500
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        252⤵
        
        PID:11520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        253⤵
        
        PID:11548
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        253⤵
        
        PID:11564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        254⤵
        
        PID:11580
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        254⤵
        
        PID:11596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        255⤵
        
        PID:11608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        255⤵
        
        PID:11636
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        256⤵
        
        PID:11648
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        256⤵
        
        PID:11664
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        257⤵
        
        PID:11688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        257⤵
        
        PID:11708
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        258⤵
        
        PID:11724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        258⤵
        
        PID:11740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        259⤵
        
        PID:11804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        259⤵
        
        PID:11824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        260⤵
        
        PID:11844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        260⤵
        
        PID:11864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        261⤵
        
        PID:11880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        261⤵
        
        PID:11900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        262⤵
        
        PID:11912
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        262⤵
        
        PID:11956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        263⤵
        
        PID:11980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        263⤵
        
        PID:11996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        264⤵
        
        PID:12012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        264⤵
        
        PID:12020
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        265⤵
        
        PID:12120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        265⤵
        
        PID:12144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        266⤵
        
        PID:12168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        266⤵
        
        PID:12188
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        267⤵
        
        PID:12216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        267⤵
        
        PID:12240
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        268⤵
        
        PID:12256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        268⤵
        
        PID:12276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        269⤵
        
        PID:3228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        269⤵
        
        PID:11328
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        270⤵
        
        PID:11348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        270⤵
        
        PID:11416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        271⤵
        
        PID:11452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        271⤵
        
        PID:5404
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        272⤵
        
        PID:11572
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        272⤵
        
        PID:11640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        273⤵
        
        PID:11756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        273⤵
        
        PID:11772
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        274⤵
        
        PID:11788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        274⤵
        
        PID:11840
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        275⤵
        
        PID:11904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        275⤵
        
        PID:12000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        276⤵
        
        PID:12096
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        276⤵
        
        PID:12088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        277⤵
        
        PID:12024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        277⤵
        
        PID:3076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        278⤵
        
        PID:12160
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        278⤵
        
        PID:2016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        279⤵
        
        PID:1488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        279⤵
        
        PID:12244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        280⤵
        
        PID:1028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        280⤵
        
        PID:11300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        281⤵
        
        PID:11320
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        281⤵
        
        PID:11656
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        282⤵
        
        PID:11744
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        282⤵
        
        PID:11868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        283⤵
        
        PID:12084
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        283⤵
        
        PID:6024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        284⤵
        
        PID:11096
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        284⤵
        
        PID:11088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        285⤵
        
        PID:11224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        285⤵
        
        PID:11152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        286⤵
        
        PID:11100
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        286⤵
        
        PID:2680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        287⤵
        
        PID:11488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        287⤵
        
        PID:11712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        288⤵
        
        PID:12072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        288⤵
        
        PID:11208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        289⤵
        
        PID:6476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        289⤵
        
        PID:12292
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        290⤵
        
        PID:12328
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        290⤵
        
        PID:12344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        291⤵
        
        PID:12372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        291⤵
        
        PID:12388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        292⤵
        
        PID:12408
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        292⤵
        
        PID:12432
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        293⤵
        
        PID:12448
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        293⤵
        
        PID:12464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        294⤵
        
        PID:12488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        294⤵
        
        PID:12508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        295⤵
        
        PID:12564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        295⤵
        
        PID:12572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        296⤵
        
        PID:12592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        296⤵
        
        PID:12620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        297⤵
        
        PID:12636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        297⤵
        
        PID:12648
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        298⤵
        
        PID:12676
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        298⤵
        
        PID:12688
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        299⤵
        
        PID:12716
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        299⤵
        
        PID:12728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        300⤵
        
        PID:12764
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        300⤵
        
        PID:12776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        301⤵
        
        PID:12796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        301⤵
        
        PID:12816
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        302⤵
        
        PID:12836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        302⤵
        
        PID:12848
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        303⤵
        
        PID:12884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        303⤵
        
        PID:12896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        304⤵
        
        PID:12916
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        304⤵
        
        PID:12940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        305⤵
        
        PID:12956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        305⤵
        
        PID:13004
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        306⤵
        
        PID:13060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        306⤵
        
        PID:13068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        307⤵
        
        PID:13104
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        307⤵
        
        PID:13120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        308⤵
        
        PID:13144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        308⤵
        
        PID:13164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        309⤵
        
        PID:13184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        309⤵
        
        PID:13192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        310⤵
        
        PID:13212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        310⤵
        
        PID:13228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        311⤵
        
        PID:13244
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        311⤵
        
        PID:13264
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        312⤵
        
        PID:13292
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        312⤵
        
        PID:13308
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        313⤵
        
        PID:12360
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        313⤵
        
        PID:12436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        314⤵
        
        PID:12468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        314⤵
        
        PID:12484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        315⤵
        
        PID:12600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        315⤵
        
        PID:1148
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        316⤵
        
        PID:6508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        316⤵
        
        PID:6556
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        317⤵
        
        PID:12692
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        317⤵
        
        PID:12740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        318⤵
        
        PID:12792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        318⤵
        
        PID:12852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        319⤵
        
        PID:12980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        319⤵
        
        PID:12988
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        320⤵
        
        PID:13040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        320⤵
        
        PID:13048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        321⤵
        
        PID:13000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        321⤵
        
        PID:13036
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        322⤵
        
        PID:13196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        322⤵
        
        PID:13256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        323⤵
        
        PID:13280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        323⤵
        
        PID:6380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        324⤵
        
        PID:12624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        324⤵
        
        PID:7424
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        325⤵
        
        PID:12844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        325⤵
        
        PID:12868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        326⤵
        
        PID:6884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        326⤵
        
        PID:13268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        327⤵
        
        PID:12496
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        327⤵
        
        PID:13016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        328⤵
        
        PID:13332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        328⤵
        
        PID:13340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        329⤵
        
        PID:13360
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        329⤵
        
        PID:13384
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        330⤵
        
        PID:13404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        330⤵
        
        PID:13412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        331⤵
        
        PID:13440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        331⤵
        
        PID:13452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        332⤵
        
        PID:13480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        332⤵
        
        PID:13488
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        333⤵
        
        PID:13520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        333⤵
        
        PID:13536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        334⤵
        
        PID:13560
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        334⤵
        
        PID:13572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        335⤵
        
        PID:13608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        335⤵
        
        PID:13620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        336⤵
        
        PID:13648
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        336⤵
        
        PID:13660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        337⤵
        
        PID:13688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        337⤵
        
        PID:13696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        338⤵
        
        PID:13720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        338⤵
        
        PID:13744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        339⤵
        
        PID:13768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        339⤵
        
        PID:13784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        340⤵
        
        PID:13812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        340⤵
        
        PID:13832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        341⤵
        
        PID:13852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        341⤵
        
        PID:13876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        342⤵
        
        PID:13900
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        342⤵
        
        PID:13916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        343⤵
        
        PID:13932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        343⤵
        
        PID:13948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        344⤵
        
        PID:13972
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        344⤵
        
        PID:13992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        345⤵
        
        PID:14012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        345⤵
        
        PID:14044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        346⤵
        
        PID:14060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        346⤵
        
        PID:14076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        347⤵
        
        PID:14100
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        347⤵
        
        PID:14116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        348⤵
        
        PID:14140
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        348⤵
        
        PID:14164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        349⤵
        
        PID:14176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        349⤵
        
        PID:14204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        350⤵
        
        PID:14224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        350⤵
        
        PID:14244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        351⤵
        
        PID:14260
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        351⤵
        
        PID:14276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        352⤵
        
        PID:14300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        352⤵
        
        PID:14320
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        353⤵
        
        PID:4608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        353⤵
        
        PID:13324
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        354⤵
        
        PID:13400
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        354⤵
        
        PID:13456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        355⤵
        
        PID:13556
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        355⤵
        
        PID:13604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        356⤵
        
        PID:8120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        356⤵
        
        PID:13712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        357⤵
        
        PID:13764
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        357⤵
        
        PID:13836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        358⤵
        
        PID:13880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        358⤵
        
        PID:13924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        359⤵
        
        PID:14004
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        359⤵
        
        PID:14056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        360⤵
        
        PID:14120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        360⤵
        
        PID:8160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        361⤵
        
        PID:14220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        361⤵
        
        PID:14296
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        362⤵
        
        PID:12440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        362⤵
        
        PID:13552
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        363⤵
        
        PID:1108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        363⤵
        
        PID:5896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        364⤵
        
        PID:13952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        364⤵
        
        PID:14084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        365⤵
        
        PID:14324
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        365⤵
        
        PID:13776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        366⤵
        
        PID:13848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        366⤵
        
        PID:14344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        367⤵
        
        PID:14372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        367⤵
        
        PID:14392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        368⤵
        
        PID:14412
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        368⤵
        
        PID:14428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        369⤵
        
        PID:14452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        369⤵
        
        PID:14468
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        370⤵
        
        PID:14480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        370⤵
        
        PID:14500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        371⤵
        
        PID:14524
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        371⤵
        
        PID:14536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        372⤵
        
        PID:14556
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        372⤵
        
        PID:14576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        373⤵
        
        PID:14596
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        373⤵
        
        PID:14612
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        374⤵
        
        PID:14632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        374⤵
        
        PID:14656
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        375⤵
        
        PID:14684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        375⤵
        
        PID:14692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        376⤵
        
        PID:14716
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        376⤵
        
        PID:14728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        377⤵
        
        PID:14756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        377⤵
        
        PID:14776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        378⤵
        
        PID:14812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        378⤵
        
        PID:14828
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        379⤵
        
        PID:14844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        379⤵
        
        PID:14860
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        380⤵
        
        PID:14880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        380⤵
        
        PID:14908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        381⤵
        
        PID:14924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        381⤵
        
        PID:14944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        382⤵
        
        PID:14964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        382⤵
        
        PID:14988
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        383⤵
        
        PID:15004
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        383⤵
        
        PID:15036
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        384⤵
        
        PID:15052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        384⤵
        
        PID:15068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        385⤵
        
        PID:15084
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        385⤵
        
        PID:15100
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        386⤵
        
        PID:15124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        386⤵
        
        PID:15144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        387⤵
        
        PID:15172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        387⤵
        
        PID:15196
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        388⤵
        
        PID:15216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        388⤵
        
        PID:15236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        389⤵
        
        PID:15252
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        389⤵
        
        PID:15280
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        390⤵
        
        PID:15296
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        390⤵
        
        PID:15312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        391⤵
        
        PID:15356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        391⤵
        
        PID:8268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        392⤵
        
        PID:14368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        392⤵
        
        PID:8340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        393⤵
        
        PID:14472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        393⤵
        
        PID:4348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        394⤵
        
        PID:14640
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        394⤵
        
        PID:14676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        395⤵
        
        PID:14704
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        395⤵
        
        PID:120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        396⤵
        
        PID:14796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        396⤵
        
        PID:8820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        397⤵
        
        PID:14876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        397⤵
        
        PID:14916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        398⤵
        
        PID:5796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        398⤵
        
        PID:15044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        399⤵
        
        PID:15104
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        399⤵
        
        PID:15116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        400⤵
        
        PID:5864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        400⤵
        
        PID:15204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        401⤵
        
        PID:15304
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        401⤵
        
        PID:2412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        402⤵
        
        PID:1568
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        402⤵
        
        PID:14440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        403⤵
        
        PID:14732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        403⤵
        
        PID:3060
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        404⤵
        
        PID:2676
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        404⤵
        
        PID:14948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        405⤵
        
        PID:15072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        405⤵
        
        PID:4116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        406⤵
        
        PID:8892
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        406⤵
        
        PID:2908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        407⤵
        
        PID:4912
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        407⤵
        
        PID:4852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        408⤵
        
        PID:1940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        408⤵
        
        PID:2868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        409⤵
        
        PID:15372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        409⤵
        
        PID:15380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        410⤵
        
        PID:15404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        410⤵
        
        PID:15420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        411⤵
        
        PID:15448
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        411⤵
        
        PID:15460
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        412⤵
        
        PID:15480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        412⤵
        
        PID:15500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        413⤵
        
        PID:15532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        413⤵
        
        PID:15540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        414⤵
        
        PID:15568
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        414⤵
        
        PID:15584
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        415⤵
        
        PID:15616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        415⤵
        
        PID:15628
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        416⤵
        
        PID:15652
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        416⤵
        
        PID:15676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        417⤵
        
        PID:15704
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        417⤵
        
        PID:15720
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        418⤵
        
        PID:15748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        418⤵
        
        PID:15760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        419⤵
        
        PID:15796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        419⤵
        
        PID:15812
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        420⤵
        
        PID:15836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        420⤵
        
        PID:15852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        421⤵
        
        PID:15872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        421⤵
        
        PID:15884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        422⤵
        
        PID:15924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        422⤵
        
        PID:15932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        423⤵
        
        PID:15952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        423⤵
        
        PID:15964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        424⤵
        
        PID:15992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        424⤵
        
        PID:16008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        425⤵
        
        PID:16028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        425⤵
        
        PID:16048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        426⤵
        
        PID:16080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        426⤵
        
        PID:16092
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        427⤵
        
        PID:16120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        427⤵
        
        PID:16128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        428⤵
        
        PID:16152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        428⤵
        
        PID:16168
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        429⤵
        
        PID:16200
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        429⤵
        
        PID:16220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        430⤵
        
        PID:16240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        430⤵
        
        PID:16268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        431⤵
        
        PID:16332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        431⤵
        
        PID:16352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        432⤵
        
        PID:9048
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        432⤵
        
        PID:9128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        433⤵
        
        PID:15524
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        433⤵
        
        PID:3624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        434⤵
        
        PID:15632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        434⤵
        
        PID:15644
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        435⤵
        
        PID:9292
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        435⤵
        
        PID:15764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        436⤵
        
        PID:9764
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        436⤵
        
        PID:9340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        437⤵
        
        PID:15984
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        437⤵
        
        PID:16012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        438⤵
        
        PID:4736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        438⤵
        
        PID:16116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        439⤵
        
        PID:16184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        439⤵
        
        PID:5024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        440⤵
        
        PID:16300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        440⤵
        
        PID:1820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        441⤵
        
        PID:11104
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        441⤵
        
        PID:16364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        442⤵
        
        PID:1312
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        442⤵
        
        PID:10200
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        443⤵
        
        PID:11424
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        443⤵
        
        PID:2548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        444⤵
        
        PID:16088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        444⤵
        
        PID:16108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        445⤵
        
        PID:2252
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        445⤵
        
        PID:15544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        446⤵
        
        PID:10232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        446⤵
        
        PID:11372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        447⤵
        
        PID:6212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        447⤵
        
        PID:15392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        448⤵
        
        PID:16388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        448⤵
        
        PID:16400
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        449⤵
        
        PID:16424
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        449⤵
        
        PID:16436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        450⤵
        
        PID:16476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        450⤵
        
        PID:16488
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        451⤵
        
        PID:16512
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        451⤵
        
        PID:16520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        452⤵
        
        PID:16556
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        452⤵
        
        PID:16572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        453⤵
        
        PID:16600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        453⤵
        
        PID:16608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        454⤵
        
        PID:16632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        454⤵
        
        PID:16644
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        455⤵
        
        PID:16680
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        455⤵
        
        PID:16692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        456⤵
        
        PID:16720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        456⤵
        
        PID:16732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        457⤵
        
        PID:16752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        457⤵
        
        PID:16764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        458⤵
        
        PID:16808
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        458⤵
        
        PID:16816
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        459⤵
        
        PID:16844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        459⤵
        
        PID:16852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        460⤵
        
        PID:16892
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        460⤵
        
        PID:16908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        461⤵
        
        PID:16932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        461⤵
        
        PID:16948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        462⤵
        
        PID:16976
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        462⤵
        
        PID:16996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        463⤵
        
        PID:17028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        463⤵
        
        PID:17040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        464⤵
        
        PID:17068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        464⤵
        
        PID:17080
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        465⤵
        
        PID:17100
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        465⤵
        
        PID:17120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        466⤵
        
        PID:17164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        466⤵
        
        PID:17172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        467⤵
        
        PID:17200
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        467⤵
        
        PID:17212
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        468⤵
        
        PID:17236
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        468⤵
        
        PID:17256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        469⤵
        
        PID:17288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        469⤵
        
        PID:17300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        470⤵
        
        PID:17324
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        470⤵
        
        PID:17332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        471⤵
        
        PID:17364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        471⤵
        
        PID:17372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        472⤵
        
        PID:17404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        472⤵
        
        PID:15792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        473⤵
        
        PID:6336
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        473⤵
        
        PID:16420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        474⤵
        
        PID:16492
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        474⤵
        
        PID:12180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        475⤵
        
        PID:6720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        475⤵
        
        PID:16592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        476⤵
        
        PID:6768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        476⤵
        
        PID:16672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        477⤵
        
        PID:16744
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        477⤵
        
        PID:6932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        478⤵
        
        PID:16832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        478⤵
        
        PID:6992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        479⤵
        
        PID:16952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        479⤵
        
        PID:16924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        480⤵
        
        PID:17116
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        480⤵
        
        PID:17060
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        481⤵
        
        PID:17176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        481⤵
        
        PID:17216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        482⤵
        
        PID:17268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        482⤵
        
        PID:17312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        483⤵
        
        PID:17396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        483⤵
        
        PID:11988
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        484⤵
        
        PID:7008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        484⤵
        
        PID:16648
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        485⤵
        
        PID:12416
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        485⤵
        
        PID:16704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        486⤵
        
        PID:6852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        486⤵
        
        PID:4440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        487⤵
        
        PID:17252
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        487⤵
        
        PID:17376
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        488⤵
        
        PID:6600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        488⤵
        
        PID:17424
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        489⤵
        
        PID:17488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        489⤵
        
        PID:17496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        490⤵
        
        PID:17520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        490⤵
        
        PID:17536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        491⤵
        
        PID:17560
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        491⤵
        
        PID:17568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        492⤵
        
        PID:17592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        492⤵
        
        PID:17608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        493⤵
        
        PID:17640
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        493⤵
        
        PID:17656
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        494⤵
        
        PID:17680
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        494⤵
        
        PID:17692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        495⤵
        
        PID:17720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        495⤵
        
        PID:17736
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        496⤵
        
        PID:17764
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        496⤵
        
        PID:17776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        497⤵
        
        PID:17812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        497⤵
        
        PID:17824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        498⤵
        
        PID:17844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        498⤵
        
        PID:17856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        499⤵
        
        PID:17884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        499⤵
        
        PID:17896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        500⤵
        
        PID:17932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        500⤵
        
        PID:17948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        501⤵
        
        PID:17980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        501⤵
        
        PID:18000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        502⤵
        
        PID:18024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        502⤵
        
        PID:18040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:9620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0865ed3eadf43dff2e3945bc670b1cbcc189a6b0b3b92a2c11ff65da78bf99b6
MD5 f7338545fb11a149edf5ba49d57642cd
SHA1 8ffc33f023a988b75d3e2a1b9c870ea4ff951f74
SHA512 8639151c50a649c1fa9c67b33ab184fade2ed485648849cca38bf939fc1567d6d22987645b80a9618c487980f264d6858f5cfc60c62309693003d0cdc13c9faa
TLSH
T148719409232E69E3DF2599B102D964F832B284D34D4F6E066038BF744506FEF6C2AD6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598dcf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598dcf.TMP
Size 3KB
SHA256 b3072b92c056762a8275e16af8385d1b970ec742f8bde46b8d33c48ac572d962
MD5 8a7cb1405aac90cb0555e298889d14d2
SHA1 60c393c75ad7964a8f2ef3b1d51a34a629bec846
SHA512 1b1bfe666b8b9cbdb4920872268cb60fe750a03bdb26afe02bfdd70e6bbb498dafa83d8806dab917c93c043d04f78264c8a9090ee03d636aede199617b24e42d
TLSH
T18661A519232E59E3DF25597002D964F832B688C34D4FAE0260347F744906FDF6C29E6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 55e87f8f9cd36427f69b8d8fa0611210ccd2dc7bfa6fca20831d5e2db44b798b
MD5 f0aa9d782a8e75cdec1fdaac8ce165a3
SHA1 96ed546d0441b734946345cdb635371e4a5e0399
SHA512 8baf8b54d5dddd1d878178e7326ad184672194f934cdfb39203b1da6dfd0b4057576ccd74ceb9423c818823a7fcde378873f442043355818780a4a48b295693f
TLSH
T12741BEF783E4856E8D0196F0AA14AF2BDF2D0611432C7C5989D4EE27E7E3471E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

bd76babb-cc35-4a76-a229-bd37751c516f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd76babb-cc35-4a76-a229-bd37751c516f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a249771fad87b4dea050ea7e175e336fad270bca559950f3c74df371db58a81
MD5 12a19899a860a1f9631e1a7bc09ee82d
SHA1 fc6ad3abe37cf7173a538f43b25b547fdee789cc
SHA512 490988517ce30de9f7f837922242e56cc7d73f013459192f062fa1206777131ad08929c4e7a6918c7abde244e51bcd2f17a56a5fc7daaadc774a508c0c678db5
SSDEEP 192:sxRYR3yM/jK1Ml8wCN/fvsNxdsmZdzoA8p9K/la6+WNB4R/AZxGyJYGeIgVaJ:sxRY98N/fvsNxd2c/RW/7AKI
TLSH
T10762D916A9389D77DCDBD21DF6517BA3D2F81523A1901E449AFCDA1C00E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 cee3ba85b97c404a41f35aeacf2a103861c8db2701f29119a7ba4a3d027e6136
MD5 7459600da5e3312bffef79d441a5deee
SHA1 c0cb116889f63198448e6e97bde42bcd9a2f9178
SHA512 7c6d7d6063d22e5bcff3886f165de7b8c05384638266ead270e956684b715f4c6e03d1c8daf137dfcc6632b64f25f6b0d1eb10c449c91d1b1b21a515c33bc423
SSDEEP 192:sxR3R3yM/jK1Ml8wCN/fvs2xdsmZdzoA8p9K/la6+WNB4R/AZxGyJYGeIgDqaJ:sxR398N/fvs2xd2c/RW/7AKl
TLSH
T1AA62E916A9349D77DCDBD21DF651BFA3D2F81523A1901E449AFC9A1C00E76ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a99c67ab466dde97fa8652f698873505370dd3340fc7d2557306b76b9f41f0d2
MD5 60f10e40c2f87c93267ed479e362c5d9
SHA1 8c0bd35e68ff2cbea13ee1433c9e1930a1878a82
SHA512 9a3f5b7026825ac2556f3cc52628b23061b2655e1c96b6959a5a90cd48e3eae9e0a841a64c2ab6846166707a6a6be7118a6cf13f2106be33c11861d1346521e4
SSDEEP 192:sxR3R3yM/jK1Ml8UQiCN/fvs2xcsmZdzoA8pLK/la6+WNB4R/AZxGDJYGeIgDq+J:sxR39qVN/fvs2xc22/RW/79Kh
TLSH
T18F62D916A9349D77DCDBD21DF6517B93D2F81533A1901E44AAFC9A1C00E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0c63837e85f2e3599a0a96c39fca2a8a2967d830b2ed85e99cdde084836b5351
MD5 2f94585fb34594eeec264e5ebae16069
SHA1 739d0e5a5f654c55baa61b86c7efe68dbbfaf8ef
SHA512 fc5d28041916a2ba140833549321a931bf72fdceadeda9512600498b1971cbaddebb5f1a366a5bcd90fce245cebf565cd5feea4a32d3e74e8ed3bf5a801ff1cf
SSDEEP 768:0xCycs7pLuL7ijWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OVfrVAeCroJwK+Z:0xCycQE7ijWgbrfM1u1jagpAeZJwPZ
TLSH
T14BE2EC7B680CCB7F4F404A9DEC297EDBADD802CB96D88D9447EA840C03C67EB51165DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 e2ba81501f1535cf302cffcda31dafc0726218f6c864d858ac32c003af8d657d
MD5 8aadc5c5c90e7935108d3e25575221a1
SHA1 a8cff5767d8b2f374a51edaf2c1e21544bb946d2
SHA512 08b28e16f13266f9b178724ed0ae103cf271784b830330348eb5fd0cca89eb32b8cef0e5ba3ac878459d14b5a83da23fb9da4c9c9dd3f0fb51becb86f1e4838c
TLSH
T1D7813386B07E965578BE294C85A1C9578A81B0B33019A43BBFE901721F7AF016DFCDCD
MD5 SHA1 SHA512 TLSH

Submit Download

6ad4c392-6c60-4fbc-845c-ce46ac08e4ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6ad4c392-6c60-4fbc-845c-ce46ac08e4ef.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 fe538a2781ef918a4afa574cc1911f4d60c20bafa6e45561aa2a4d5ebd913d63
MD5 1d09a0a5bbf2baee85b994f830c13860
SHA1 8e37a51d12d978ca8dfa47a677f359b9a352a58c
SHA512 7d71335a878dd3127b1b032260b7603115f302651d97b24863daabf92168027703b1d8b44546ebd63b0e8ef77a29c161d6444d53777a0aad8d62f8c8b934a4f7
SSDEEP 768:RFjrv+4UNbdR3nwg3OjiStbSfF669yrqUjWiIwwxMt5a:zbsbX3h3fF66INWZTMza
TLSH
T12D138D71E854DAB7DCF6DBC5B2127687AFF011A385C94AD8DAC96E0C01870DE274BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 082581e5a21efc4a4791a7959810fd7e8cd200bfa9f0a6474fd729dab56acaff
MD5 08d8fd237a1963fd7701e360137a5acc
SHA1 54e21cc6cb99303edb600417ef11d9950dcceade
SHA512 e4f18b397ca0cb566c4176dfff09c0d95ade6df1f620d59ccfa23d0166b9c45572bcc819baf199870399082baacfbb9b68a6ad66454f957b089b546af5261651
SSDEEP 768:Vrv+4UNbdR3NOjDkKL2ktbSjF669yrqUjWiIwwxMt5a:VbsbX3N/3jF66INWZTMza
TLSH
T11D03BE70B8689EB3C8F6D685B21336C3BF7411A389C50F98C9D96B0D064B5DA374792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8914fd1e914e7839fe2663b3f787e8a25b017295e89e0248c9406b5713364d34
MD5 c2b1ba8061145918e63d906251b90326
SHA1 d157938ab589ae54321caea181f85f336d849f55
SHA512 86caee466c67a9512f760728ee0932fc537d30d55dd8619106fb5a3e22b07d0f7bc3f6724ebf5bdde8785387daab62f74fbd52e5e8b7b0f877ac46b1ef3f78b7
SSDEEP 768:Drv+4UNbdR3NOjDkKL2ktbSjF669yrqUjWiIwwxMt5a:DbsbX3N/3jF66INWZTMza
TLSH
T1E003BE70B8689EB3C8F6D685B21336C3BF7411A389C50F98C9D96B0D064B5DA374792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 65d24dff4dfa045041436fe8bef770a9f2eee818d314da65aa73adcdf745f52f
MD5 7b1481d0326a5900e2ff860405a21e58
SHA1 10d191f6b44348d9fcc2e608731bcccefe2a8e3e
SHA512 e02a14ca0d1e8798941fcd33ba1a59b345ff370d546c39c82473cf5036726080c8a3fd0b5da0304adf8d28cc5a9a2f627b1eedca3612d4aacc67a07e32e15501
SSDEEP 768:Srv+4UNbdR3UOjDkKL2ktbSjF669yrqUjWiIwwxMt5a:SbsbX3U/3jF66INWZTMza
TLSH
T10803AE70B8689EB3C8F6D685B21336C3BFB411A385C50F98CAD96B0D064B5DA3747927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8fbfaa304fa3e03ece299a14601ad052f2f23d5434919deade0f46edb681a2f0
MD5 d663f79586897e05833b6cabc6201bb7
SHA1 8bbb29e221bb129fc318d02dc440afeed84322e6
SHA512 553548dc9f16da0687d87314a4f05f0cb2d652efd46dcacb4f60978126173f12a47bf1d884f44f800a30205f99c10ce4facf7c3973f4cd2ad622bea9c56c25f2
SSDEEP 768:Brv+4UNbdR3NOjDkKL2ktbSjF669yrqUjWiIwwxMt5a:BbsbX3N/3jF66INWZTMza
TLSH
T1E003BF70B8689EB3C8F6D685B21336C3BFB411A385C50F98C9D96B0D064B5DA374792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f695bb25809a79537e886ef057526cb6e2db28a471e808628236da77adf59e2b
MD5 9c7ec295185b5a22c1403702fe7c7f28
SHA1 2057bbfbf3d7ae7e77f00200db7c239c2e0619dc
SHA512 2282d33c44757cf83d39d607232754c081645e6a21b7bcd8c1777f7ad94de159aaa8b7bb4c2818587572094e62ba459ef838ae21d9e3bff6cf5d8a80a812f2bc
SSDEEP 768:arv+4UNbdl3DPkKL21jF669yrqUjWiIwwxMRKXOUiler:absbX34NjF66INWZTM0XOUsQ
TLSH
T12103CF31AC589AB7CDF2D68672533783BFB4109396C50B88CADC670D469B4DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0f3c5c0-513c-4a64-bbb2-bc8d8de0ae88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c0f3c5c0-513c-4a64-bbb2-bc8d8de0ae88.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

audiodg.exe

Path C:\Users\Admin\Documents\diagnostics\audiodg.exe
Size 62KB
SHA256 cd8af46fa5b8b45a9e4514b7fd5e1d9ff0e34844ac0e32d9c41286cb268ba0b6
MD5 ebf2bfa83a1a59df046c4683ca7663f4
SHA1 24bf0bd5cc46a90e079b731ec734add5868976b9
SHA512 67f397320fec2b1751d73f274d2d4065f7da5392ff6e9ad53763ff6aa4d1b88ef3e9155858da89f567115d9d519c2968172a045841ae536f538ff0e6a981d6dc
SSDEEP 768:Q2/+TWecYpqowEO5yOPxJO1h2A+B01g/My:QAwWecYpVwaExJO1EA+Bdd
TLSH
T12853F7243BF60128F1BFBFB65AF0726A9F76F6336506955E14C1034A4623981CE40BBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shost.exe

Path C:\Users\Admin\Documents\diagnostics\shost.exe
Size 377KB
SHA256 b5a6d790d1a89b5e9dbf73b91220c9ea25e4a4a78de3c02d2b57ae8a40e85c30
MD5 065a17e5462b8b590187b89a0b5c98f8
SHA1 d41deefa34cc014572fd3dcbb1ddb73dc3a17634
SHA512 b573fedf387eaf524d5926a73ce87452f3a0e2788b188efc052ae9e6228c3e3fa928b79c78b06d4584e84b0e12da2d3ad722fdd7a897a7c8cb110142ad4a6b9a
SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/griEfsNrwT:pYyDi5eNiQ7uysMFZzN/gGL1a
TLSH
T1E6847C16FB9508FDE5A7C5748A9245469A357C9F0B71EADF07C8422A2F237F08E39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads