using System;

using System.Text.RegularExpressions;

​

public class Program

{

    public static bool TryParseCommandLine(string cmdLine, out string exePath, out string args)

        {

            Regex rexUnQuotedPath = new Regex("(?i)^([^\"]+\\.exe)[ \\t]*(.*)$");

            Regex rexQuotedPath = new Regex("(?i)^\"([^\"]+\\.exe)\"[ \\t]*(.*)$");

​

            var match = rexUnQuotedPath.Match(cmdLine);

​

            if (!match.Success)

            {

                match = rexQuotedPath.Match(cmdLine);

            }

​

            if (!match.Success)

            {

                exePath = null;

                args = null;

                return false;

            }

​

            exePath = match.Groups[1].Value;

            args = match.Groups[2].Value;

            return true;

        }

​

    public static void Main()

    {

        string cmdLines = "winlogon.exe \r\n\\??\\C:\\WINDOWS\\system32\\lsaiso.exe\r\n\"C:\\WINDOWS\\system32\\lsass.exe  \"    \r\nC:\\WINDOWS\\system32\\svchost.exe    -k DcomLaunch -p -s PlugPlay\r\nC:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p\r\n\"C:\\Windows\\System32\\WUDFHost.exe\" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\\UMDFCommunicationPorts\\WUDF\\HostProcess-8493aaca-260d-4edc-a5c1-15dd96829657 -SystemEventPortName:\\UMDFCommunicationPorts\\WUDF\\HostProcess-20c1c212-5550-4a7a-b6f9-e8533debd010 -IoCancelEventPortName:\\UMDFCommunicationPorts\\WUDF\\HostProcess-77c40e7c-cb79-405d-b1a7-d634968e5c02 -NonStateChangingEventPortName:\\UMDFCommunicationPorts\\WUDF\\HostProcess-7a5ecf00-fd37-49e1-9be5-1332039aff60 -LifetimeId:2a0e58f5-7949-47ea-a7c2-55b087e56eb6 -DeviceGroupId:WudfDefaultDevicePool -HostArg:0\r\n\"fontdrvhost.exe\"\r\nC:\\WINDOWS\\system32\\svchost.exe -k RPCSS -p\r\nC:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p -s LSM\r\n\"dwm.exe\"\r\nC:\\WINDOWS\\System32\\svchost.exe -k NetworkService -s TermService\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s nsi\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p -s HvHost\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -s W32Time\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetwork -p\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog\r\nC:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p -s Dnscache\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s Schedule\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s ProfSvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p -s NlaSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s UserManager\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s UmRdpService\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s EventSystem\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p -s Themes\r\nC:\\WINDOWS\\system32\\svchost.exe -k appmodel -p -s StateRepository\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -s CertPropSvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalService -p -s netprofm\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s SENS\r\nC:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p -s LanmanWorkstation\r\nC:\\WINDOWS\\system32\\igfxCUIService.exe\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p -s SessionEnv\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s FontCache\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p -s ShellHWDetection\r\nC:\\WINDOWS\\System32\\spoolsv.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s Winmgmt\r\nC:\\WINDOWS\\system32\\svchost.exe -k WbioSvcGroup -s WbioSrvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k NetSvcs -p -s iphlpsvc\r\n\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe\"\r\n\"C:\\Program Files\\Araxis\\Araxis Merge\\snapshotsvc.exe\"\r\n\"C:\\Program Files\\Bonjour\\mDNSResponder.exe\"\r\nC:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p -s CryptSvc\r\n\"C:\\Program Files (x86)\\Kaspersky Lab\\Kaspersky Endpoint Security for Windows\\avp.exe\" -r\r\nC:\\WINDOWS\\CCM\\RemCtrl\\CmRcService.exe\r\n\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" /service\r\nC:\\WINDOWS\\System32\\svchost.exe -k utcsvc -p\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNoNetwork -p -s DPS\r\n\"C:\\Program Files\\Everything\\Everything.exe\" -svc\r\n\"C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Phone Tools\\CoreCon\\11.0\\bin\\IpOverUsbSvc.exe\"\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s LanmanServer\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s SstpSvc\r\n\"C:\\Program Files\\Microsoft SQL Server\\90\\Shared\\sqlwriter.exe\"\r\nC:\\WINDOWS\\Sysmon.exe\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks\r\n\"C:\\Program Files (x86)\\VMware\\VMware Workstation\\vmware-authd.exe\"\r\nC:\\WINDOWS\\SysWOW64\\vmnetdhcp.exe\r\n\"C:\\Program Files (x86)\\Common Files\\VMware\\USB\\vmware-usbarbitrator64.exe\"\r\nC:\\WINDOWS\\SysWOW64\\vmnat.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s WpnService\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalService -p -s WdiServiceHost\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs\r\nC:\\WINDOWS\\system32\\wbem\\unsecapp.exe -Embedding\r\n\"C:\\Program Files (x86)\\VMware\\VMware Workstation\\vmware-hostd.exe\" -u \"C:\\ProgramData\\VMware\\hostd\\config.xml\"\r\nC:\\WINDOWS\\system32\\wbem\\wmiprvse.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s lfsvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p -s WinRM\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV\r\n\"C:\\Program Files (x86)\\Kaspersky Lab\\Kaspersky Endpoint Security for Windows\\avpsus.exe\"\r\nC:\\WINDOWS\\CCM\\CcmExec.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s CDPSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s UsoSvc\r\nC:\\WINDOWS\\system32\\SearchIndexer.exe /Embedding\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p\r\nC:\\WINDOWS\\sysWOW64\\wbem\\wmiprvse.exe -Embedding\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc\r\n\"C:\\Program Files (x86)\\Kaspersky Lab\\Kaspersky Endpoint Security for Windows\\avp.exe\" -gui\r\nsihost.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup -s CDPUserSvc\r\nC:\\WINDOWS\\system32\\svchost.exe -k LxssManagerUser -p -s LxssManagerUser\r\nC:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup -s WpnUserService\r\nC:\\WINDOWS\\Microsoft.Net\\Framework64\\v3.0\\WPF\\PresentationFontCache.exe\r\nC:\\WINDOWS\\system32\\svchost.exe -k appmodel -p -s camsvc\r\ntaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}\r\n\"C:\\Program Files\\ParkControl\\parkcontrol.exe\" /systray /delay\r\n\"C:\\Program Files\\Microsoft Mouse and Keyboard Center\\ipoint.exe\"\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s TokenBroker\r\n\"C:\\Program Files\\Microsoft Mouse and Keyboard Center\\itype.exe\"\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService\r\n\"ctfmon.exe\"\r\nigfxEM.exe\r\nigfxHK.exe\r\nigfxTray.exe\r\nC:\\WINDOWS\\system32\\SettingSyncHost.exe -Embedding\r\nC:\\WINDOWS\\system32\\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc\r\nC:\\Windows\\System32\\RuntimeBroker.exe -Embedding\r\nC:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p -s Appinfo\r\n\"C:\\Program Files\\Microsoft Mouse and Keyboard Center\\MKCHelper.exe\"\r\n\"C:\\WINDOWS\\CCM\\SCNotification.exe\"\r\n\"C:\\Windows\\System32\\SecurityHealthSystray.exe\"\r\n\"C:\\Program Files\\Everything\\Everything.exe\" -startup\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\"\r\n\"C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe\" /fromrunkey\r\n\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\Mattermost.exe\" --hidden\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\" --no-rate-limit --no-upload-gzip --type=crash-handler \"--crashes-directory=C:\\Users\\vselin\\AppData\\Local\\Temp\\skype-preview Crashes\" \"--database=C:\\Users\\vselin\\AppData\\Local\\Temp\\skype-preview Crashes\" \"--metrics-dir=C:\\Users\\vselin\\AppData\\Local\\Temp\\skype-preview Crashes\" --url=https://rink.hockeyapp.net/api/2/apps/a741743329d94bc08826af367733939d/crashes/upload --initial-client-data=0x5ac,0x5b0,0x5b4,0x5a8,0x5b8,0x562c0d0,0x562c0e0,0x562c0ec\r\n\"C:\\Program Files (x86)\\VMware\\VMware Workstation\\vmware-tray.exe\"\r\n\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\Mattermost.exe\" --type=gpu-process --no-sandbox --supports-dual-gpus=false --gpu-driver-bug-workarounds=9,12,13,23,27,29,49,70,84 --disable-gl-extensions=\"GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent\" --gpu-vendor-id=0x8086 --gpu-device-id=0x0152 --gpu-driver-vendor=\"Intel Corporation\" --gpu-driver-version=10.18.10.4252 --gpu-driver-date=7-10-2015 --service-request-channel-token=4B8421F21873314547AAE1F3731C68D2 --mojo-platform-channel-handle=1672 /prefetch:2\r\n\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\Mattermost.exe\" --type=renderer --no-sandbox --service-pipe-token=862557FCC12A85F3A263EC313AF2FC51 --lang=en-US --app-user-model-id=com.squirrel.mattermost.Mattermost --app-path=\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\resources\\app.asar\" --node-integration=true --webview-tag=true --no-sandbox --background-color=#fff --context-id=2 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553...\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\" --type=gpu-process --field-trial-handle=2216,1924487465541847852,15325446488094326760,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=14260420570179711397 --mojo-platform-channel-handle=2220 --ignored=\" --type=renderer \" /prefetch:2\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\" --type=utility --field-trial-handle=2216,1924487465541847852,15325446488094326760,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --service-request-channel-token=18318393678016445619 --mojo-platform-channel-handle=2448 /prefetch:8\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --ms-disable-indexeddb-transaction-timeout --field-trial-handle=2216,1924487465541847852,15325446488094326760,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=en-US --app-user-model-id=Microsoft.Skype.SkypeDesktop --app-path=\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\resources\\app.asar\" --webview-tag --no-sandbox --no-zygote --native-window-open --preload=\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\resources\\app.asar\\Preload.js\" --background-color=#fff --node-integration-in-subframes --enable-spellcheck --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=12839709893984327545 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2756 /prefetch:1 --skype-process-type=Main --skype-w...\r\n\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\Mattermost.exe\" --type=renderer --no-sandbox --service-pipe-token=17337A4A590F3C102443AE49396A9CE5 --lang=en-US --app-user-model-id=com.squirrel.mattermost.Mattermost --app-path=\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\resources\\app.asar\" --node-integration=false --webview-tag=true --no-sandbox --preload=\"C:\\Users\\vselin\\AppData\\Local\\mattermost\\app-4.2.3\\resources\\app.asar\\browser\\webview\\mattermost_bundle.js\" --context-isolation --background-color=#fff --guest-instance-id=1 --enable-blink-features --disable-blink-features --hidden-page --context-id=2 --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,...\r\n\"C:\\Program Files (x86)\\Microsoft\\Skype for Desktop\\Skype.exe\" --type=utility --field-trial-handle=2216,1924487465541847852,15325446488094326760,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=audio --service-request-channel-token=2882715872251867863 --mojo-platform-channel-handle=3388 /prefetch:8\r\n\"C:\\Program Files\\Total Commander\\TOTALCMD64.EXE\"\r\n\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\UcMapi.exe\" -Embedding\r\nC:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup\r\n\"C:\\Program Files (x86)\\IObit\\IObit Uninstaller\\UninstallMonitor.exe\" /srvupt\r\n\"C:\\Users\\vselin\\AppData\\Local\\SourceTree\\app-3.3.4\\SourceTree.exe\"\r\n\"C:\\Users\\vselin\\AppData\\Local\\SourceTree\\app-3.3.4\\tools\\putty\\pageant.exe\" C:\\Users\\vselin\\.ssh\\putt_gitlab.ppk\r\n\"C:\\Program Files\\Sublime Text 3\\sublime_text.exe\" \"g:\\Work\\Gitlab\\ptmc.installer\\.gitignore\"\r\n\"/C/Program Files/Sublime Text 3/plugin_host.exe\" \"7388\" \"--auto-shell-env\"\r\nC:\\WINDOWS\\system32\\ApplicationFrameHost.exe -Embedding\r\n\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\lynchtmlconv.exe\" -Embedding\r\n\"C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\\WinStore.App.exe\" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca\r\nC:\\WINDOWS\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\r\n\"C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\AppleMobileDeviceService.exe\"\r\n\"C:\\Program Files\\iPod\\bin\\iPodService.exe\"\r\n\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"\r\n\"C:\\Program Files (x86)\\TeamViewer\\TeamViewer_Service.exe\"\r\n\"C:\\Users\\vselin\\AppData\\Local\\Microsoft\\WindowsApps\\wt.exe\"\r\n\"C:\\Program Files\\WindowsApps\\Microsoft.WindowsTerminal_0.8.10261.0_x64__8wekyb3d8bbwe\\OpenConsole.exe\" --headless --width 120 --height 28 --signal 0x748 --server 0x744\r\n\"C:\\Program Files\\PowerShell\\6\\pwsh.exe\"\r\nC:\\WINDOWS\\system32\\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" \"G:\\Work\\Gitlab\\MPXDeployment-2\"\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" --type=gpu-process --field-trial-handle=1824,9666070155889421580,16356861576427407069,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAADgAAAgAAAAAAAAYAAAAAAACAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAABQAAABAAAAAAAAAAAAAAAAYAAAAQAAAAAAAAAAEAAAAFAAAAEAAAAAAAAAABAAAABgAAAA== --service-request-channel-token=2208375317215893407 --mojo-platform-channel-handle=1772 --ignored=\" --type=renderer \" /prefetch:2\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" --type=renderer --disable-color-correct-rendering --field-trial-handle=1824,9666070155889421580,16356861576427407069,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-US --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-user-model-id=Microsoft.VisualStudioCode --app-path=\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\resources\\app\" --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#282a36 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11111038524890928304 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2552 /prefetch:1\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" --inspect-port=0 \"c:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\resources\\app\\out\\bootstrap-fork\" --type=extensionHost\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" --no-rate-limit --no-upload-gzip --type=crash-handler \"--crashes-directory=C:\\Users\\vselin\\AppData\\Local\\Temp\\VSCode Crashes\" \"--database=C:\\Users\\vselin\\AppData\\Local\\Temp\\VSCode Crashes\" \"--metrics-dir=C:\\Users\\vselin\\AppData\\Local\\Temp\\VSCode Crashes\" --url=https://rink.hockeyapp.net/api/2/apps/0ac07349c6e34e978fdfb42074932f22/crashes/upload --initial-client-data=0xc50,0xa90,0xc54,0x8b8,0xaac,0x7ff745268618,0x7ff745268628,0x7ff745268638\r\n\"c:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\resources\\app\\out\\vs\\platform\\files\\node\\watcher\\win32\\CodeHelper.exe\" g:\\Work\\Gitlab\\MPXDeployment-2\r\n\\??\\C:\\WINDOWS\\system32\\conhost.exe 0x4\r\n\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\Code.exe\" --type=renderer --disable-color-correct-rendering --field-trial-handle=1824,9666070155889421580,16356861576427407069,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-US --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-user-model-id=Microsoft.VisualStudioCode --app-path=\"C:\\Users\\vselin\\AppData\\Local\\Programs\\Microsoft VS Code\\resources\\app\" --node-integration --no-sandbox --no-zygote --background-color=#282a36 --disable-blink-features=Auxclick --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7270722641110046671 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2756 /prefetch:1\r\n\\\\?\\C:\\WINDOWS\\system32\\conhost.exe --headless --width 200 --height 16 --signal 0xa6c --server 0xa64\r\nC:\\Windows\\System32\\cmd.exe\r\ncmd /s /c \"C:\\Users\\vselin\\.vscode\\extensions\\ms-vscode.csharp-1.21.9\\.omnisharp\\1.34.9\\OmniSharp.exe -s g:\\Work\\Gitlab\\MPXDeployment-2\\Sources\\Infrastructure.sln --hostPID 12220 DotNet:enablePackageRestore=false --encoding utf-8 --loglevel information --plugin C:\\Users\\vselin\\.vscode\\extensions\\ms-vscode.csharp-1.21.9\\.razor\\OmniSharpPlugin\\Microsoft.AspNetCore.Razor.OmniSharpPlugin.dll FileOptions:SystemExcludeSearchPatterns:0=**/.git FileOptions:SystemExcludeSearchPatterns:1=**/.svn FileOptions:SystemExcludeSearchPatterns:2=**/.hg FileOptions:SystemExcludeSearchPatterns:3=**/CVS FileOptions:SystemExcludeSearchPatterns:4=**/.DS_Store FileOptions:SystemExcludeSearchPatterns:5=**/*.pyc FileOptions:SystemExcludeSearchPatterns:6=packages FileOptions:SystemExcludeSearchPatterns:7=Sources/..out FileOptions:SystemExcludeSearchPatterns:8=Sources/packages formattingOptions:useTabs=false formattingOptions:tabSize=4 formattingOptions:indentationSize=4\"\r\nC:\\Users\\vselin\\.vscode\\extensions\\ms-vscode.csharp-1.21.9\\.omnisharp\\1.34.9\\OmniSharp.exe  -s g:\\Work\\Gitlab\\MPXDeployment-2\\Sources\\Infrastructure.sln --hostPID 12220 DotNet:enablePackageRestore=false --encoding utf-8 --loglevel information --plugin C:\\Users\\vselin\\.vscode\\extensions\\ms-vscode.csharp-1.21.9\\.razor\\OmniSharpPlugin\\Microsoft.AspNetCore.Razor.OmniSharpPlugin.dll FileOptions:SystemExcludeSearchPatterns:0=**/.git FileOptions:SystemExcludeSearchPatterns:1=**/.svn FileOptions:SystemExcludeSearchPatterns:2=**/.hg FileOptions:SystemExcludeSearchPatterns:3=**/CVS FileOptions:SystemExcludeSearchPatterns:4=**/.DS_Store FileOptions:SystemExcludeSearchPatterns:5=**/*.pyc FileOptions:SystemExcludeSearchPatterns:6=packages FileOptions:SystemExcludeSearchPatterns:7=Sources/..out FileOptions:SystemExcludeSearchPatterns:8=Sources/packages formattingOptions:useTabs=false formattingOptions:tabSize=4 formattingOptions:indentationSize=4\r\n\"C:\\Program Files\\dotnet\\dotnet.EXE\" c:\\Users\\vselin\\.vscode\\extensions\\tintoy.msbuild-project-tools-0.3.3\\out\\language-server\\MSBuildProjectTools.LanguageServer.Host.dll\r\nC:\\WINDOWS\\System32\\svchost.exe -k LocalService -p -s LicenseManager\r\n\"C:\\Program Files\\Process Hacker\\ProcessHacker.exe\"\r\nC:\\WINDOWS\\system32\\svchost.exe -k LocalService -p -s BthAvctpSvc\r\ntaskhostw.exe\r\n\"C:\\Program Files (x86)\\JetBrains\\ETW Host\\JetBrains.Etw.Collector.Host.exe\"\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\Common7\\IDE\\devenv.exe\" \"G:\\Work\\Gitlab\\MPXDeployment-2\\Sources\\Infrastructure.sln\"\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\Common7\\IDE\\PerfWatson2.exe\" 12864 -version 1 -user vselin -userappdir \"C:\\Users\\vselin\\AppData\\Local\" -clientndx 1\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.Node.x86\\ServiceHub.Host.Node.x86.exe\" \"./ServiceHub/controller/hubController.all.js\" \"93f62c050bed4488e508b34786907587a8276656ae085597ecab219d647f33cc//\\\\devenv.exe.config\"\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.CLR.x86\\ServiceHub.VSDetouredHost.exe\" desktopClr.x86$VSDetouredHost 1b41b2df0d8bd11cb7ed370d79321127\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.CLR.x86\\ServiceHub.Host.CLR.x86.exe\" desktopClr.x86$C94B8CFE-E3FD-4BAF-A941-2866DBB566FE 1b41b2df0d8bd11cb7ed370d79321127\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.CLR.x86\\ServiceHub.RoslynCodeAnalysisService32.exe\" \"desktopClr.x86$RoslynCodeAnalysisService32$$VS (12864) (1)\" 1b41b2df0d8bd11cb7ed370d79321127\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\MSBuild\\15.0\\Bin\\MSBuild.exe\" \"C:\\Users\\vselin\\AppData\\Local\\Temp\\Tumiryt.proj\"\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.CLR.x86\\ServiceHub.IdentityHost.exe\" desktopClr.x86$IdentityHost 1b41b2df0d8bd11cb7ed370d79321127\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ServiceHub\\Hosts\\ServiceHub.Host.CLR.x86\\ServiceHub.SettingsHost.exe\" desktopClr.x86$SettingsHost 1b41b2df0d8bd11cb7ed370d79321127\r\n\"C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2019.18114.19418.0_x64__8wekyb3d8bbwe\\Microsoft.Photos.exe\" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca\r\n\"C:\\Program Files (x86)\\Microsoft Visual Studio\\2017\\Enterprise\\common7\\ide\\PrivateAssemblies\\Microsoft.Alm.Shared.Remoting.RemoteContainer.dll\" 12864 tcp://127.0.0.1:49617/a1ab6f81-45ad-4540-b371-5d7aa471d0d7 \"C:\\Users\\vselin\\AppData\\Local\\Microsoft\\VisualStudio\\15.0_5aa4690b\\devenv.exe.config\"\r\n\"C:\\WINDOWS\\system32\\mmc.exe\" \"C:\\WINDOWS\\system32\\eventvwr.msc\"\r\n\"C:\\Program Files (x86)\\VMware\\VMware Workstation\\vmware-unity-helper.exe\" -d -e:{3B24B11C-52BF-404B-884B-3DE7159D7C47}\r\n\"C:\\WINDOWS\\system32\\cmd.exe\"\r\npowershell\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\"\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler \"--user-data-dir=C:\\Users\\vselin\\AppData\\Local\\Google\\Chrome\\User Data\" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\vselin\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\vselin\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=79.0.3945.130 --initial-client-data=0xa4,0xa8,0xac,0xa0,0xb0,0x7ffaf504dd08,0x7ffaf504dd18,0x7ffaf504dd28\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=watcher --main-thread-id=18064 --on-initialized-event-handle=64 --parent-handle=528 /prefetch:6\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=gpu-process --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=1643333852560223742 --mojo-platform-channel-handle=1508 --ignored=\" --type=renderer \" /prefetch:2\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --service-request-channel-token=1387232059792412265 --mojo-platform-channel-handle=1856 /prefetch:8\r\nC:\\WINDOWS\\system32\\CredentialEnrollmentManager.exe\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8973677994551725579 --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8007637934269413126 --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15167364597772725836 --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4520 /prefetch:1\r\nexplorer.exe\r\n\"C:\\WINDOWS\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe\" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca\r\n\"C:\\WINDOWS\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7725123574532559217 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=ppapi --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --ppapi-flash-args --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --service-request-channel-token=3306494756525704760 --mojo-platform-channel-handle=2380 --ignored=\" --type=renderer \" /prefetch:3\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=utility --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --service-request-channel-token=11363477219695616856 --mojo-platform-channel-handle=4836 --ignored=\" --type=renderer \" /prefetch:8\r\n\"C:\\WINDOWS\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=1429084780462363714 --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1\r\n\"C:\\WINDOWS\\SystemApps\\Microsoft.LockApp_cw5n1h2txyewy\\LockApp.exe\" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca\r\n\"C:\\Windows\\ImmersiveControlPanel\\SystemSettings.exe\" -ServerName:microsoft.windows.immersivecontrolpanel\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=754281120967727756 --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4332 /prefetch:1\r\n\"C:\\WINDOWS\\system32\\mstsc.exe\"\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=1175055575844250720 --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8100 /prefetch:1\r\n\"C:\\WINDOWS\\SystemApps\\InputApp_cw5n1h2txyewy\\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe\" -ServerName:App.AppXagta193n5rpf7mheremt3yyfa1g555vc.mca\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=416609356143601099 --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8648 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2823283142791662533 --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10633931970437863583 --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=16514969707043269190 --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17920937897890224684 --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=86973294720080203 --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8244 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9380147152631772389 --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9384 /prefetch:1\r\n\"C:\\WINDOWS\\system32\\SearchProtocolHost.exe\" Global\\UsGthrFltPipeMssGthrPipe63_ Global\\UsGthrCtrlFltPipeMssGthrPipe63 1 -2147483646 \"Software\\Microsoft\\Windows Search\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)\" \"C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\usgthrsvc\" \"DownLevelDaemon\"\r\n\"C:\\WINDOWS\\system32\\SearchFilterHost.exe\" 0 772 776 784 8192 780\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=840843234182453174 --renderer-client-id=152 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8868 /prefetch:1\r\n\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1512,11541162669419344178,14341180854952209733,131072 --lang=en-US --disable-oor-cors --enable-auto-reload --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=588827698526590123 --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2932 /prefetch:1\r\nC:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p -s BITS\r\nwininit.exe\r\nwinlogon.exe\r\nC:\\Windows\\system32\\lsass.exe\r\nC:\\Windows\\system32\\svchost.exe -k DcomLaunch\r\nC:\\Windows\\system32\\svchost.exe -k RPCSS\r\n\"LogonUI.exe\" /flags:0x0\r\nC:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted\r\nC:\\Windows\\system32\\svchost.exe -k netsvcs\r\nC:\\Windows\\system32\\svchost.exe -k LocalService\r\nC:\\Windows\\system32\\svchost.exe -k NetworkService\r\nC:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork\r\nC:\\Windows\\System32\\spoolsv.exe\r\nC:\\Windows\\system32\\svchost.exe -k apphost\r\nC:\\Windows\\System32\\svchost.exe -k utcsvc\r\n\"C:\\MPX\\Management Service\\\\Tenants\\Tenants.Host.exe\"\r\n\"C:\\MPX\\Management Service\\\\UserActionsLogger\\UserActionsLogging.Host.exe\"\r\nC:\\MPX\\Common\\MongoDB\\\\mongod.exe --service --config \"C:\\ProgramData\\MPX\\MongoDB\\\\config\\mongod.conf\"\r\n\"C:\\MPX\\Common\\SQLServer\\MSSQL11.MAXPATROLXCORE\\MSSQL\\Binn\\sqlservr.exe\" -sMAXPATROLXCORE\r\n\"C:\\MPX\\Common\\PostgreSQL\\bin\\pg_ctl.exe\" runservice -N \"PostgreSQL.PTMS\" -D \"C:\\ProgramData\\Positive Technologies\\Data\\PostgreSQL\" -w\r\n\"C:\\MPX\\Common\\Erlang 20.3\\erts-9.3\\bin\\erlsrv.exe\"\r\n\"C:\\MPX\\Common\\Erlang 20.3\\erts-9.3\\bin\\erl.exe\" -service_event ErlSrv_RabbitMQ -nohup -sname rabbit@bvt-core  -pa \"C:/MPX/Common/RabbitMQ/rabbitmq_server-3.7.18/ebin\" -boot start_sasl -s \"rabbit\" boot -config \"C:\\\\ProgramData\\\\MPX\\\\RabbitMQ\\\\rabbitmq\"  +W w +A \"64\" +MBas ageffcbf +MHas ageffcbf +MBlmbcs 512 +MHlmbcs 512 +MMmcs 30 +P 1048576 +t 5000000 +stbt db +zdbbl 128000  -kernel inet_default_connect_options \"[{nodelay,true}]\"  -sasl errlog_type error -sasl sasl_error_logger false -rabbit lager_log_root \"\\\"C:/ProgramData/MPX/RabbitMQ/log\\\"\" -rabbit lager_default_file \"\\\"C:/ProgramData/MPX/RabbitMQ/log/rabbit@bvt-core.log\\\"\" -rabbit lager_upgrade_file \"\\\"C:/ProgramData/MPX/RabbitMQ/log/rabbit@bvt-core_upgrade.log\\\"\" -rabbit feature_flags_file \"\\\"C:/ProgramData/MPX/RabbitMQ/db/rabbit@bvt-core-feature_flags\\\"\" -rabbit enabled_plugins_file \"\\\"C:/ProgramData/MPX/RabbitMQ/enabled_plugins\\\"\" -rabbit plugins_dir \"\\\"C:/MPX/Common/RabbitMQ/rabbitmq_server-3.7.18/plugins\\\"\" -rabbit plugins...\r\n\\??\\C:\\Windows\\system32\\conhost.exe 0x4\r\nc:\\salt\\bin\\ssm.exe\r\n\"C:\\MPX\\Common\\Erlang 20.3\\erts-9.3\\bin\\epmd\" -daemon\r\n\"C:\\MPX\\Common\\PostgreSQL\\bin\\postgres.exe\" -D \"C:\\ProgramData\\Positive Technologies\\Data\\PostgreSQL\"\r\n\"C:\\MPX_new\\MaxPatrol SIEM Server\\\\healthmon.exe\" -d --config \"C:\\ProgramData\\MPX_new\\Positive Technologies\\MaxPatrol SIEM Server\\\\config\\siem.conf\"\r\n\"C:\\MPX_new\\MaxPatrol SIEM Server\\\\normalizer.exe\" -d --config \"C:\\ProgramData\\MPX_new\\Positive Technologies\\MaxPatrol SIEM Server\\\\config\\siem.conf\"\r\n\"C:\\MPX_new\\MaxPatrol SIEM Server\\\\receiver.exe\" -d --config \"C:\\ProgramData\\MPX_new\\Positive Technologies\\MaxPatrol SIEM Server\\\\config\\siem.conf\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forklog\" \"6764\" \"6760\"\r\n\"C:\\Program Files (x86)\\Microsoft SQL Server\\90\\Shared\\sqlbrowser.exe\"\r\nC:\\BuildAgent\\launcher\\bin\\TeamCityAgentService-windows-x86-32.exe -s C:\\BuildAgent\\launcher\\conf\\wrapper.conf\r\nC:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted\r\n\"C:\\Program Files\\VMware\\VMware Tools\\VMware VGAuth\\VGAuthService.exe\"\r\n\"C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\"\r\nC:\\Windows\\system32\\svchost.exe -k iissvcs\r\n\"C:\\Program Files (x86)\\Positive Technologies\\Common\\ZabbixAgent\\zabbix_agentd.exe\" --multiple-agents --config \"C:\\ProgramData\\Zabbix Agent\\config\\zabbix_agentd.conf\"\r\n\"C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe\" -Xrs -Djava.library.path=\"../launcher/lib;../launcher/bin\" -classpath \"../launcher/lib/wrapper.jar;../launcher/lib/launcher.jar\" -Dwrapper.key=\"CorS7qQEOLlL3ISu\" -Dwrapper.port=32000 -Dwrapper.jvm.port.min=31000 -Dwrapper.jvm.port.max=31999 -Dwrapper.pid=816 -Dwrapper.version=\"3.2.3\" -Dwrapper.native_library=\"wrapper\" -Dwrapper.service=\"TRUE\" -Dwrapper.cpu.timeout=\"10\" -Dwrapper.jvmid=2 org.tanukisoftware.wrapper.WrapperSimpleApp jetbrains.buildServer.agent.StandAloneLauncher -ea -Xmx512m -XX:+HeapDumpOnOutOfMemoryError -Xrs -Dlog4j.configuration=file:../conf/teamcity-agent-log4j.xml -Dteamcity_logs=../logs/ jetbrains.buildServer.agent.AgentMain -file ../conf/buildAgent.properties\r\n\"C:\\Program Files\\Java\\jre1.8.0_151\\bin\\java.exe\" -ea -Xmx512m -XX:+HeapDumpOnOutOfMemoryError -Xrs -Dlog4j.configuration=file:../conf/teamcity-agent-log4j.xml -Dteamcity_logs=../logs/ -classpath C:\\BuildAgent\\lib\\agent-configurator.jar;C:\\BuildAgent\\lib\\agent-installer-ui.jar;C:\\BuildAgent\\lib\\agent-launcher.jar;C:\\BuildAgent\\lib\\agent-openapi.jar;C:\\BuildAgent\\lib\\agent-upgrade.jar;C:\\BuildAgent\\lib\\agent.jar;C:\\BuildAgent\\lib\\annotations.jar;C:\\BuildAgent\\lib\\app-wrapper.jar;C:\\BuildAgent\\lib\\buildAgent-updates-applying.jar;C:\\BuildAgent\\lib\\cloud-shared.jar;C:\\BuildAgent\\lib\\common-impl.jar;C:\\BuildAgent\\lib\\common-runtime.jar;C:\\BuildAgent\\lib\\common.jar;C:\\BuildAgent\\lib\\commons-beanutils-core.jar;C:\\BuildAgent\\lib\\commons-codec.jar;C:\\BuildAgent\\lib\\commons-collections-3.2.2.jar;C:\\BuildAgent\\lib\\commons-compress-1.9.jar;C:\\BuildAgent\\lib\\commons-httpclient-3.1.jar;C:\\BuildAgent\\lib\\commons-io-1.3.2.jar;C:\\BuildAgent\\lib\\commons-logging.jar;C:\\BuildAgent\\lib\\coverage-agent-co...\r\n\"c:\\MPX\\Common\\Erlang 20.3\\lib\\os_mon-2.4.4\\priv\\bin\\win32sysinfo.exe\"\r\n\"C:\\MPX\\Common\\Erlang 20.3\\erts-9.3\\bin\\inet_gethost.exe\" 4\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkboot\" \"6168\" \"-x4\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkboot\" \"6196\" \"-x3\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkboot\" \"6156\" \"-x5\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkavlauncher\" \"6636\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkcol\" \"6188\"\r\nC:\\Windows\\system32\\wbem\\wmiprvse.exe\r\nC:\\Windows\\System32\\svchost.exe -k termsvcs\r\nC:\\Windows\\system32\\svchost.exe -k NetworkServiceNetworkRestricted\r\nC:\\Windows\\system32\\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6116\"\r\nC:\\Windows\\System32\\msdtc.exe\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Analytics.Printing\\Analytics.Printing.Host.exe\"\r\n\"c:\\salt\\bin\\python.exe\" -E -s c:\\salt\\bin\\Scripts\\salt-minion -c c:\\salt\\conf -l quiet\r\n\"c:\\salt\\bin\\python.exe\" \"-s\" \"-E\" \"-c\" \"from multiprocessing.spawn import spawn_main; spawn_main(pipe_handle=784, parent_pid=5092)\" \"--multiprocessing-fork\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"180\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Analytics.QueryAggregator\\Analytics.QueryAggregator.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Analytics.Reports\\Analytics.Reports.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Analytics.ReportsDelivery\\Analytics.ReportsDelivery.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Analytics.Widgets\\Analytics.Widgets.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\ApplicationRegistration\\ApplicationRegistration.Host.exe\"\r\nC:\\Windows\\system32\\rundll32.exe C:\\Windows\\system32\\pla.dll,PlaHost \"Siem.normalizer.Collector\" \"0xc0c_0x13f0_0xd57641d9\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Chromium\\chrome.exe\"  --disable-background-networking --disable-background-timer-throttling --disable-client-side-phishing-detection --disable-default-apps --disable-extensions --disable-hang-monitor --disable-popup-blocking --disable-prompt-on-repost --disable-sync --metrics-recording-only --no-first-run --safebrowsing-disable-auto-update --bwsi --process-per-tab --wm-window-animations-disabled --enable-automation --remote-debugging-port=9222 --user-data-dir=\"C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\\\Chromium\\user-data-dir\" --data-path=\"C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\\\Chromium\\data-path\" --crash-dumps-dir=\"C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\\\Chromium\\crash-dumps-dir\" --disk-cache-dir=\"C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\\\Chromium\\disk-cache-dir\" --headless --disable-gpu --hide-scrollbars --mute-audio --v=1 --enable-logging --ignore-certificate-errors --p...\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.Identity\\Assets.Identity.Host.exe\"\r\nC:\\Windows\\system32\\rundll32.exe C:\\Windows\\system32\\pla.dll,PlaHost \"Siem.receiver.Collector\" \"0xc9c_0xd48_0xd7ecbef8\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\chrome.exe\" --type=crashpad-handler \"--user-data-dir=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\" /prefetch:7 --monitor-self --monitor-self-argument=--type=crashpad-handler \"--monitor-self-argument=--user-data-dir=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\" --monitor-self-argument=/prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\\Crashpad\" \"--metrics-dir=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\" --annotation=plat=Win64 --annotation=prod=Chromium --annotation=ver=70.0.3538.0-devel --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7ffd4b3c8510,0x7ffd4b3c8520,0x7ffd4b3c8530\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\chrome.exe\" --type=crashpad-handler \"--user-data-dir=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\" /prefetch:7 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\Chromium\\user-data-dir\\Crashpad\" --annotation=plat=Win64 --annotation=prod=Chromium --annotation=ver=70.0.3538.0-devel --initial-client-data=0x134,0x138,0x13c,0x130,0x140,0x7ff6ce46d7e0,0x7ff6ce46d7f0,0x7ff6ce46d800\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.PreMerger\\Assets.PreMerger.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\ProgramData\\MPX\\Positive Technologies\\MaxPatrol SIEM Core\\\\Chromium\\crash-dumps-dir\" --annotation=plat=Win64 --annotation=prod= --annotation=ver= --initial-client-data=0x1f0,0x1f4,0x1f8,0x1ec,0x1fc,0x7ffd47bc2390,0x7ffd47bc23a0,0x7ffd47bc23b0\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\chrome.exe\" --type=renderer --disable-background-timer-throttling --enable-automation --enable-logging --file-url-path-alias=\"/gen=C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\gen\" --use-gl=swiftshader-webgl --v=1 --disable-gpu-compositing --service-pipe-token=704150468128120836 --lang=en-US --headless --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=704150468128120836 --renderer-client-id=2 --mojo-platform-channel-handle=1148 /prefetch:1\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\Chromium\\chrome.exe\" --type=gpu-process --enable-logging --headless --v=1 --headless --gpu-preferences=KAAAAAAAAACAAwBgAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --use-gl=swiftshader-webgl --override-use-software-gl-for-tests --headless --enable-logging --v=1 --service-request-channel-token=1462155076452191137 --mojo-platform-channel-handle=1180 --ignored=\" --type=renderer \" /prefetch:2\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.Processing\\Assets.Processing.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.Projections\\Projections.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6076\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.Scans\\Assets.Scans.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6016\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6040\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6052\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.TemporalReadModel\\Assets.TemporalReadModel.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6004\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6240\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6008\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Assets.Triggers\\Assets.Triggers.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5984\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Deployment.Configuration\\Deployment.Configuration.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5976\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6012\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6036\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Events\\Events.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5988\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6068\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5948\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6092\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Events.Monitoring\\Events.Monitoring.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5964\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5924\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Events.Triggers\\Events.Triggers.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5916\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6552\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5908\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5876\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5872\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Groups\\Groups.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5956\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5844\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\HealthMonitoring\\HealthMonitoring.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6256\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Incident\\Incidents.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5836\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\IncidentReadModel\\IncidentsReadModel.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5864\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Licensing\\Licensing.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6296\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5896\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5824\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5816\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5832\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6380\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6292\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Scanning\\Scanning.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6384\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6100\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Scopes\\Scopes.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6364\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Tables\\Tables.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5808\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6080\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6340\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Topology\\Topology.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Triggers\\Triggers.Host.exe\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\Users.Settings\\Users.Settings.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6448\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6416\"\r\n\"C:\\MPX\\MaxPatrol SIEM Core\\\\HealthMonitoring.Watchdog.Core\\HealthMonitoring.Watchdog.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6472\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6648\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6576\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6568\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6592\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6424\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6200\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5772\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6056\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5768\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6560\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6072\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6572\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5764\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6584\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6580\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5760\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5804\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6404\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5784\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5740\"\r\n\"C:\\MPX\\Knowledge Base\\\\KnowledgeBase.PlatformRegistration\\KnowledgeBase.PlatformRegistration.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5716\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6624\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5712\"\r\n\"C:\\MPX\\Knowledge Base\\\\KnowledgeBase\\KnowledgeBase.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6496\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5728\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"6680\"\r\n\"C:\\MPX_new\\MaxPatrol SIEM Server\\HealthMonitoring.Watchdog.Siem\\HealthMonitoring.Watchdog.Host.exe\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5544\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5520\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"5512\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"4892\"\r\ntaskhostex.exe\r\nrdpclip\r\nC:\\Windows\\Explorer.EXE\r\n\"C:\\Program Files\\VMware\\VMware Tools\\vmtoolsd.exe\" -n vmusr\r\n\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\"\r\n\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\"\r\n\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe\" -auto -critical\r\n\"C:\\Program Files (x86)\\Notepad++\\notepad++.exe\" \"C:\\Users\\Administrator\\Desktop\\processes.txt\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"3588\"\r\n\"C:/MPX/Common/PostgreSQL/bin/postgres.exe\" \"--forkbackend\" \"7124\"\r\ntaskeng.exe {C69489C9-3103-4F0F-BCE7-9D1D66786EF9}";

        var lines = Regex.Split(cmdLines, "\r\n");

        foreach (var line in lines)

        {

            if (TryParseCommandLine(line, out var exePath, out var args))

            {

                //Console.WriteLine($"ExePath: {parsedCmdLine.ExePath}");

                //Console.WriteLine($"Args: {parsedCmdLine.Args}");

                // Original command line:

                Console.WriteLine($"\n{line.Replace(' ', '\u00B7')}");

                // Quoted exe path command line:

                var CmdLine = $"\"{exePath}\" {args}".Trim();

                Console.WriteLine(CmdLine.Replace(' ', '\u00B7'));

            }

            else

            {

                Console.WriteLine($"\n!! ERROR WHILE PARSING LINE {line.Replace(' ', '\u00B7')}\n");

            }

        }

    }

}