Lunar Paradies Developer Dox By Olaf Reason: he thinks he is opsec king *********************************************** * _ _ _ _ * * / \ / \ / \ / \ * * ( M | E | T | A ) * * \_/ \_/ \_/ \_/ * * * * NWO OLAF SEE EVERTING * *********************************************** Personal INFO: Real Name: john-william.sokolis", - mom: Anika Sokolis - Adress: Goldregenweg 4, 27777 Ganderkesee, Deutschland - Alte Schule: gymnasium-ganderkesee - Alte Lehrerin: Frau Richter - IP: 147.189.175.36 - Email: thekingof11@web.de , dj@thekingofnetwork.de , anika-sokolis@web.de , thekingof2010@web.de , folunder@primevillerp.de - System INFO: - - Computer: DESKTOP-61HH2BF - User: lpthe - Domain: - Hostname: DESKTOP-61HH2BF - NetBIOS: DESKTOP-61HH2BF - Language: de-DE - Anti Virus: - Windows Defender - HWID: 07173465B129FD4CDB71E32F12885CB3 - RAM Size: 16384MB - CPU Vendor: AuthenticAMD - CPU Name: AMD Ryzen 5 3600 6-Core Processor - CPU Threads: 12 - CPU Cores: 6 - GPU: Radeon RX550/550 Series - Display resolution: 1920x1080 - SOFTWARE : APPS - Visual Studio Community 2022 AMD Chipset Software Brave Inno Setup Version 6.3.3 MEGAsync Microsoft Edge Microsoft Edge WebView2-Laufzeit OBS Studio Overwolf Paragon RP Launcher version 1.0 ParagonRP Launcher version 1.0 RAGE Multiplayer Rockstar Games Launcher Rockstar Games SDK Steam TLauncher Xming 6.9.0.31 DJUCED icecap_collectionresources vs_vswebprotocolselectormsires Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33816 hide.me VPN 4.2.1 Microsoft .NET Runtime - 6.0.26 (x86) Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 Microsoft .NET Framework 4.7.2 Targeting Pack vs_CoreEditorFonts Microsoft Windows Desktop Runtime - 6.0.26 (x86) Microsoft Windows Desktop Runtime - 6.0.26 (x86) Microsoft .NET Runtime - 8.0.10 (x86) vs_minshellsharedmsi Kumulatives Microsoft .NET Framework Intellisense Pack für Visual Studio (Deutsch) DJHERCULESMIX Products Series drivers Microsoft .NET SDK 7.0.410 (x64) Microsoft Windows Desktop Runtime - 7.0.20 (x64) vs_tipsmsi Microsoft ASP.NET Core 8.0.10 Shared Framework (x86) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33816 Launcher Prerequisites (x64) vs_vswebprotocolselectormsi Java Auto Updater Epic Online Services vs_filehandler_amd64 icecap_collection_neutral vs_minshellmsires vs_filehandler_x86 Grand Theft Auto V Microsoft .NET Framework 4.8 SDK (Deutsch) icecap_collectionresourcesx64 vs_clickoncesigntoolmsi Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33816 Microsoft TestPlatform SDK Local Feed AMD PCI Driver vs_minshellinteropsharedmsi vs_clickoncebootstrappermsi Microsoft Windows Desktop Targeting Pack - 8.0.10 (x86) Epic Games Launcher Microsoft .NET Framework 4.8 SDK Microsoft .NET Host FX Resolver - 8.0.10 (x86) AMD PSP Driver Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.7.2 (Deutsch) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 vs_SQLClickOnceBootstrappermsi Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.8 (Deutsch) AMD Ryzen Balanced Driver AMD_Chipset_Drivers vs_communitysharedmsi Microsoft Visual Studio Setup WMI Provider AMD SBxxx SMBus Driver vs_githubprotocolhandlermsi Microsoft .NET SDK 6.0.421 (x64) Promontory_GPIO Driver Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 Microsoft .NET Host FX Resolver - 6.0.26 (x86) vs_clickoncebootstrappermsires Microsoft .NET Framework 4.8 Targeting Pack ClickOnce Bootstrapper Package for Microsoft .NET Framework VS Immersive Activate Helper Microsoft .NET Targeting Pack - 8.0.10 (x86) IntelliTraceProfilerProxy Microsoft .NET Host - 6.0.26 (x86) vcpp_crt.redist.clickonce GrandRP Launcher 1.0 version 1.0 Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33816 Microsoft .NET Host - 8.0.10 (x86) AMD GPIO2 Driver Microsoft Visual Studio Setup Configuration Entity Framework 6.2.0 Tools for Visual Studio 2022 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 vs_FileTracker_Singleton Microsoft Windows Desktop Runtime - 8.0.10 (x86) vs_BlendMsi vs_devenvsharedmsi Python Launcher Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 Microsoft ASP.NET Core 8.0.10 Targeting Pack (x86) Python Launcher vs_communitymsires - *********************************************** * _ _ _ _ * * / \ / \ / \ / \ * * ( M | E | T | A ) * * \_/ \_/ \_/ \_/ * * * * NWO OLAF SEE EVERTING * *********************************************** ALL FILES WHAT HE STARTS: ID: 25584, Name: csrss.exe, CommandLine: =============== ID: 8252, Name: winlogon.exe, CommandLine: =============== ID: 7648, Name: fontdrvhost.exe, CommandLine: =============== ID: 19492, Name: dwm.exe, CommandLine: =============== ID: 19880, Name: atieclxx.exe, CommandLine: =============== ID: 7284, Name: Razer Synapse Service Process.exe, CommandLine: "C:\Program Files (x86)\Razer\Synapse3\Service\..\UserProcess\Razer Synapse Service Process.exe" =============== ID: 14728, Name: sihost.exe, CommandLine: sihost.exe =============== ID: 24256, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc =============== ID: 2436, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc =============== ID: 9020, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService =============== ID: 16744, Name: taskhostw.exe, CommandLine: taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} =============== ID: 3616, Name: explorer.exe, CommandLine: C:\Windows\Explorer.EXE =============== ID: 11820, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc =============== ID: 12524, Name: StartMenuExperienceHost.exe, CommandLine: "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca =============== ID: 11228, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 11256, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 10768, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc =============== ID: 9560, Name: dllhost.exe, CommandLine: C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F} =============== ID: 24612, Name: UserOOBEBroker.exe, CommandLine: C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding =============== ID: 15580, Name: ctfmon.exe, CommandLine: =============== ID: 13920, Name: smartscreen.exe, CommandLine: C:\Windows\System32\smartscreen.exe -Embedding =============== ID: 14496, Name: SecurityHealthSystray.exe, CommandLine: "C:\Windows\System32\SecurityHealthSystray.exe" =============== ID: 15212, Name: lghub_system_tray.exe, CommandLine: "C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe" --minimized =============== ID: 23088, Name: lghub_agent.exe, CommandLine: "C:\Program Files\LGHUB\lghub_agent.exe" =============== ID: 24148, Name: unsecapp.exe, CommandLine: C:\Windows\system32\wbem\unsecapp.exe -Embedding =============== ID: 7304, Name: TextInputHost.exe, CommandLine: "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXjd5de1g66v206tj52m9d0dtpppx4cgpn.mca =============== ID: 19096, Name: SearchHost.exe, CommandLine: "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca =============== ID: 23172, Name: RadeonSoftware.exe, CommandLine: "C:\Program Files\AMD\CNext\CNext\Radeonsoftware.exe" atlogon =============== ID: 19684, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" =============== ID: 6480, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1952 -parentBuildID 20231211174248 -prefsHandle 1868 -prefMapHandle 1856 -prefsLen 35233 -prefMapSize 243542 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6dfb6f42-c902-4a04-abcc-9ebb33050042} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3a65dc010 gpu =============== ID: 20176, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20231211174248 -prefsHandle 2292 -prefMapHandle 2288 -prefsLen 35233 -prefMapSize 243542 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b9b94e33-65a7-4fe7-a955-06796d753623} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b399d80710 socket =============== ID: 19440, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3096 -childID 1 -isForBrowser -prefsHandle 3088 -prefMapHandle 3084 -prefsLen 35417 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8aa46289-f5b8-4878-9511-8ee546fa1907} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3a6d5b690 tab =============== ID: 5956, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=13184 -childID 151 -isForBrowser -prefsHandle 13188 -prefMapHandle 13192 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {18162945-cb58-44d0-b8bb-3a5f37454efc} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b3212150 tab =============== ID: 6064, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11116 -childID 152 -isForBrowser -prefsHandle 9960 -prefMapHandle 12228 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {76403698-1e22-412b-82c7-6dd442c36b2f} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b3212850 tab =============== ID: 16472, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9064 -childID 153 -isForBrowser -prefsHandle 12604 -prefMapHandle 12608 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3271467-b92c-4b9a-bd00-c1ed3a5d44ae} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3a8b37150 tab =============== ID: 17436, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12216 -childID 154 -isForBrowser -prefsHandle 12600 -prefMapHandle 11416 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {18f46e15-c9d1-49f1-b589-464103bea38e} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b0c21310 tab =============== ID: 23384, Name: dllhost.exe, CommandLine: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} =============== ID: 6392, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12496 -childID 155 -isForBrowser -prefsHandle 10544 -prefMapHandle 9508 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {14f0a36f-f89f-4dc4-a8be-c93acbf95f79} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3bcf69f50 tab =============== ID: 4044, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10832 -childID 157 -isForBrowser -prefsHandle 11944 -prefMapHandle 12392 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d1bdbee-2930-4978-bbe7-1e139a704191} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b4911310 tab =============== ID: 19868, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12592 -childID 159 -isForBrowser -prefsHandle 10964 -prefMapHandle 9528 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {93de58a8-fda4-44b8-a0cb-ec8b3ff6a44c} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b0cd3bd0 tab =============== ID: 25244, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11484 -childID 160 -isForBrowser -prefsHandle 6724 -prefMapHandle 7376 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c001dd7d-8ef5-424b-8855-e596f7e745c8} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3bd695bd0 tab =============== ID: 13484, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5952 -childID 161 -isForBrowser -prefsHandle 13016 -prefMapHandle 13020 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {eb90328a-dece-4788-bc8e-670bddeb7317} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3bd695d90 tab =============== ID: 24928, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=12572 -childID 162 -isForBrowser -prefsHandle 6988 -prefMapHandle 6600 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6e526733-c0a1-4456-a51c-40df97a272c3} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3b7cf6d90 tab =============== ID: 5688, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5396 -childID 163 -isForBrowser -prefsHandle 10392 -prefMapHandle 10456 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b123beda-022a-404e-a47d-f287caf516fe} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3ba0a7a10 tab =============== ID: 1768, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5564 -childID 164 -isForBrowser -prefsHandle 10436 -prefMapHandle 10428 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c6adf618-f056-4faf-a0bf-98a7ad26a60b} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3ba0a7bd0 tab =============== ID: 7932, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9556 -childID 165 -isForBrowser -prefsHandle 2592 -prefMapHandle 11388 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d166c8be-0bb2-4639-9e3b-9c1762de75ad} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3ba0a7d90 tab =============== ID: 25248, Name: Notepad.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2311.35.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe" "C:\Users\theki\Desktop\how to use.txt" =============== ID: 23664, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11716 -childID 166 -isForBrowser -prefsHandle 10440 -prefMapHandle 11496 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {57a26f91-df84-4305-86da-01cc73d8cc1a} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3a88104d0 tab =============== ID: 15380, Name: firefox.exe, CommandLine: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11688 -childID 167 -isForBrowser -prefsHandle 8580 -prefMapHandle 6076 -prefsLen 32044 -prefMapSize 243542 -jsInitHandle 1292 -jsInitLen 229864 -parentBuildID 20231211174248 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6a3dcf56-b1d1-4db4-a9f2-244ecf5918e1} 19684 "\\.\pipe\gecko-crash-server-pipe.19684" 1b3a8810d90 tab =============== ID: 9776, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 22412, Name: backgroundTaskHost.exe, CommandLine: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Microsoft.WebMediaExtensions.AppXb4nq4kx3w1sq6tkszx17tgm51q0rdn3v.mca =============== ID: 13128, Name: backgroundTaskHost.exe, CommandLine: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Microsoft.WebMediaExtensions.AppXb4nq4kx3w1sq6tkszx17tgm51q0rdn3v.mca =============== ID: 320, Name: Loader.exe, CommandLine: "C:\Users\theki\Desktop\Loader.exe" =============== ID: 6404, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 23704, Name: Loader.exe, CommandLine: "C:\Users\theki\Desktop\Loader.exe" =============== ID: 3668, Name: FiveM.exe, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.exe" =============== ID: 3080, Name: FiveM_b2699_DumpServer, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_b2699_DumpServer" -dumpserver:956 -parentpid:3668 =============== ID: 19884, Name: FiveM_ROSLauncher, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ROSLauncher" ros:launcher --parent_pid=3668 "C:\program files\rockstar games\launcher\launcher.exe" -noRecogniser =============== ID: 24932, Name: FiveM_b2699_GTAProcess.exe, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.exe" =============== ID: 19760, Name: GameBarPresenceWriter.exe, CommandLine: "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer =============== ID: 14572, Name: GameBar.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.11012.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca =============== ID: 21720, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService =============== ID: 10868, Name: GameBarFTServer.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.11012.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe" -Embedding =============== ID: 13592, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 21824, Name: FiveM_ROSService, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ROSService" ros:service =============== ID: 10528, Name: XboxGameBarWidgets.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.GamingApp_2312.1001.18.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe" -ServerName:Microsoft.Xbox.WidgetsApp.AppXvmd054fy0d5ktfeay7jt5w8kg32dxk24.mca =============== ID: 23268, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\RuntimeBroker.exe -Embedding =============== ID: 10424, Name: FiveM_ChromeBrowser, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ChromeBrowser" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --disable-accelerated-mjpeg-decode --use-angle=d3d11 --enable-experimental-web-platform-features --locales-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --resources-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --user-agent-product="Chrome/103.0.5060.141 CitizenFX/1.0.0.7298" --lang=en-US --user-data-dir="C:\Users\theki\AppData\Local\CEF\User Data" --log-file="C:\Users\theki\AppData\Local\FiveM\FiveM.app\cef_console.txt" --mojo-platform-channel-handle=4428 --field-trial-handle=5364,i,16866047769620039270,11289634768800268102,131072 --enable-features=BlockInsecurePrivateNetworkRequests,BlockInsecurePrivateNetworkRequestsFromPrivate,BlockInsecurePrivateNetworkRequestsFromUnknown,ClientHintThirdPartyDelegation,ClientHintsMetaHTTPEquivAcceptCH,ClientHintsMetaNameAcceptCH,ClipboardCustomFormats,CookieSameSiteConsidersRedirectChain,CriticalClientHint,DocumentPolicyNegotiation,DocumentReporting,EditContext,EnableCanvas2DLayers,ExperimentalContentSecurityPolicyFeatures,OriginIsolationHeader,OriginPolicy,PrefersColorSchemeClientHintHeader,PrivateNetworkAccessForWorkers,PrivateNetworkAccessRespectPreflightResults,SchemefulSameSite,UserAgentClientHint,UserAgentClientHintFullVersionList,ViewportHeightClientHintHeader --disable-features=HardwareMediaKeyHandling /prefetch:8 =============== ID: 12000, Name: FiveM_ChromeBrowser, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ChromeBrowser" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --disable-accelerated-mjpeg-decode --use-angle=d3d11 --enable-experimental-web-platform-features --locales-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --resources-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --user-agent-product="Chrome/103.0.5060.141 CitizenFX/1.0.0.7298" --lang=en-US --user-data-dir="C:\Users\theki\AppData\Local\CEF\User Data" --log-file="C:\Users\theki\AppData\Local\FiveM\FiveM.app\cef_console.txt" --mojo-platform-channel-handle=4488 --field-trial-handle=5364,i,16866047769620039270,11289634768800268102,131072 --enable-features=BlockInsecurePrivateNetworkRequests,BlockInsecurePrivateNetworkRequestsFromPrivate,BlockInsecurePrivateNetworkRequestsFromUnknown,ClientHintThirdPartyDelegation,ClientHintsMetaHTTPEquivAcceptCH,ClientHintsMetaNameAcceptCH,ClipboardCustomFormats,CookieSameSiteConsidersRedirectChain,CriticalClientHint,DocumentPolicyNegotiation,DocumentReporting,EditContext,EnableCanvas2DLayers,ExperimentalContentSecurityPolicyFeatures,OriginIsolationHeader,OriginPolicy,PrefersColorSchemeClientHintHeader,PrivateNetworkAccessForWorkers,PrivateNetworkAccessRespectPreflightResults,SchemefulSameSite,UserAgentClientHint,UserAgentClientHintFullVersionList,ViewportHeightClientHintHeader --disable-features=HardwareMediaKeyHandling /prefetch:8 =============== ID: 15728, Name: FiveM_ChromeBrowser, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ChromeBrowser" --type=renderer --locales-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --resources-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --user-agent-product="Chrome/103.0.5060.141 CitizenFX/1.0.0.7298" --user-data-dir="C:\Users\theki\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --disable-accelerated-video-decode --enable-experimental-web-platform-features --log-file="C:\Users\theki\AppData\Local\FiveM\FiveM.app\cef_console.txt" --register-pepper-plugins="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin\d3d_rendering.dll;application/x-cfx-game-view" --remote-debugging-port=13172 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --launch-time-ticks=432939216908 --mojo-platform-channel-handle=4612 --field-trial-handle=5364,i,16866047769620039270,11289634768800268102,131072 --enable-features=BlockInsecurePrivateNetworkRequests,BlockInsecurePrivateNetworkRequestsFromPrivate,BlockInsecurePrivateNetworkRequestsFromUnknown,ClientHintThirdPartyDelegation,ClientHintsMetaHTTPEquivAcceptCH,ClientHintsMetaNameAcceptCH,ClipboardCustomFormats,CookieSameSiteConsidersRedirectChain,CriticalClientHint,DocumentPolicyNegotiation,DocumentReporting,EditContext,EnableCanvas2DLayers,ExperimentalContentSecurityPolicyFeatures,OriginIsolationHeader,OriginPolicy,PrefersColorSchemeClientHintHeader,PrivateNetworkAccessForWorkers,PrivateNetworkAccessRespectPreflightResults,SchemefulSameSite,UserAgentClientHint,UserAgentClientHintFullVersionList,ViewportHeightClientHintHeader --disable-features=HardwareMediaKeyHandling /prefetch:1 =============== ID: 25524, Name: FiveM_ChromeBrowser, CommandLine: "C:\Users\theki\AppData\Local\FiveM\FiveM.app\data\cache\subprocess\FiveM_ChromeBrowser" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-sandbox --disable-accelerated-mjpeg-decode --use-angle=d3d11 --enable-experimental-web-platform-features --locales-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --resources-dir-path="C:\Users\theki\AppData\Local\FiveM\FiveM.app\bin/cef" --user-agent-product="Chrome/103.0.5060.141 CitizenFX/1.0.0.7298" --lang=en-US --user-data-dir="C:\Users\theki\AppData\Local\CEF\User Data" --log-file="C:\Users\theki\AppData\Local\FiveM\FiveM.app\cef_console.txt" --mojo-platform-channel-handle=9756 --field-trial-handle=5364,i,16866047769620039270,11289634768800268102,131072 --enable-features=BlockInsecurePrivateNetworkRequests,BlockInsecurePrivateNetworkRequestsFromPrivate,BlockInsecurePrivateNetworkRequestsFromUnknown,ClientHintThirdPartyDelegation,ClientHintsMetaHTTPEquivAcceptCH,ClientHintsMetaNameAcceptCH,ClipboardCustomFormats,CookieSameSiteConsidersRedirectChain,CriticalClientHint,DocumentPolicyNegotiation,DocumentReporting,EditContext,EnableCanvas2DLayers,ExperimentalContentSecurityPolicyFeatures,OriginIsolationHeader,OriginPolicy,PrefersColorSchemeClientHintHeader,PrivateNetworkAccessForWorkers,PrivateNetworkAccessRespectPreflightResults,SchemefulSameSite,UserAgentClientHint,UserAgentClientHintFullVersionList,ViewportHeightClientHintHeader --disable-features=HardwareMediaKeyHandling /prefetch:8 =============== ID: 22712, Name: XboxPcAppFT.exe, CommandLine: "C:\Program Files\WindowsApps\Microsoft.GamingApp_2312.1001.18.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe" -Embedding ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡌⢻⣧⠹⣿⣿⢸⣿⣸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡌⢿⣧⡘⣿⠈⣿⡇⠿⠿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠿⠛⠋⠉⠉⠋⠉⠁⠀⠀⠀⠀⠉⠉⠈⢿⣷⣌⠃⠟⡱⢰⣿⡦⣙⣛⠿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠟⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⡽⢲⠾⢣⣿⡿⢡⣿⣿⢧⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠴⣣⢺⢲⣼⢡⣿⡿⢃⣚⣆⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⠟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣴⣦⡶⢃⠰⠏⢈⢻⢡⣶⣾⣿⣆⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⠟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠸⣿⣯⠀⣝⠸⠂⠸⢀⠘⣿⣿⣿⣿⣆⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣧⡁⢩⣷⣿⣄⠻⡆⣿⣿⣿⣿⣿⣆⢹⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⠿⣿⣿⣿⣿⣷⣅⢹⣿⣿⣿⣿⣿⣦⣦⣍⣛⡿⠿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢰⡀⠀⠀⠀⠀⠀⠀⠈⠙⠻⣿⣿⣿⣦⡿⠿⠟⣿⣿⣿⣿⣿⣿⣿⣷⣶⣮⣭⣙⡛⠻⠿ ⣿⣿⢡⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢘⣩⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠙⠛⠻⢿⣦⣴⣟⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⠀⠀⠀⠀⠀⠀⠀⢀⣿⠿⠿⣦⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣶⣭⣙⡻⠿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣬⠀⠀⠀⠀⠀⠀⠀⠸⢠⣶⠶⠒⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⣶⣮⣝⡛⠿⣿⣿⣿⣿⣿⣿ ⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⠛⠀⠀⠀⠀⠀⠀⠀⣤⠋⠀⢀⣈⣿⡄⠳⠖⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣶⣬⣝⡛⠿⣿ ⣿⣿⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠼⠿⠿⠄⠀⠀⠀⠀⠀⣼⣿⣾⣁⣠⣡⣤⣦⣼⡆⠀⠀⠀⠀⠀⢠⠀⢀⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⣶ ⣿⣿⡇⠠⠀⠀⠀⠀⠀⠀⠀⠀⢀⡄⢰⡆⣲⠀⠀⠀⠀⢠⣾⣿⣿⣿⣿⣿⣹⣿⣿⣿⠁⠀⠀⠀⠀⠀⠈⡄⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ "FOLUNDER FUCKT BY NWO OLAF" ⣿⣿⣷⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⠓⠈⣡⣴⠆⠀⠀⢠⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⠀⠀⠀⢸⠇⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⡄⡄⠀⠀⠀⠀⠀⠀⠀⢰⣶⢿⣿⣿⠀⠀⠀⣿⣿⡿⢿⣛⣿⣿⣿⣿⣿⣿⡏⠀⠀⠀⠀⠀⠸⢀⠄⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣧⠀⠀⠀⠀⠀⠀⠀⠀⢸⢻⢸⣽⣿⠀⠀⢸⣿⣿⣿⣾⡿⠿⠿⠿⣿⣿⣿⣿⠀⠀⠀⠀⠀⠀⠈⣼⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣆⠀⠀⠀⠀⠀⠀⠀⠀⢾⣿⣿⣿⠀⠀⣿⣿⡏⡅⠒⠈⠀⠀⠀⢸⣿⣿⣿⠄⠀⠀⠀⠀⠀⠀⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⡄⠀⠀⠀⠀⠀⠀⠀⢈⠻⣿⣿⠀⠀⣿⣿⡇⠀⣴⣶⣶⣿⡆⢸⣿⣿⡟⢀⠀⠀⠀⠀⠀⠀⣸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣄⠀⠀⠀⠀⠀⠀⠈⢤⡙⢿⣇⠀⠸⣿⣿⣄⠻⣿⣿⡿⠇⣼⣿⢋⡀⣠⠂⠀⠀⠀⠀⣰⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿ ⣿⣿⣿⣿⣿⣿⣿⡀⠠⡀⠀⠀⠀⠀⠈⠻⣦⣌⠓⠦⣙⣿⣿⣷⣤⣭⣶⣾⣿⣿⠏⣰⡏⠀⠀⠀⠀⠘⣿⡿⠟⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠟⣋⣥⣾ ⣿⣿⣿⣿⣿⣿⣿⣷⡀⢻⣆⡀⠀⠀⠀⠠⣈⡉⢀⡀⣮⣍⣛⠿⢿⣿⣿⡿⢟⣡⣾⣿⡤⠆⠀⠀⠀⢀⣀⣠⣶⣿⣿⣿⡿⠟⣋⣩⣭⣵⣶⣶⣾⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣦⣙⠃⢀⣷⣄⠀⢬⣳⣿⣧⠸⣿⣿⣿⣶⣶⣶⡶⠿⠛⠛⠉⠀⠀⠀⠀⠀⣤⣉⣉⣭⣿⠟⣡⣶⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⢁⣼⣿⣿⣷⣶⣾⣿⠐⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⠀⠀⠀⠻⠿⣛⠛⣥⡾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀⡀⠀⢠⣀⣀⣀⣀⣀⣠⣤⣴⣶⣾⣿⣿⣴⡄⠘⣿⠱⠊⣾⣿⣷⣿⣿⣿⣿⣿⣿⣿⡟⣹⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠈⠀⣠⣸⣿⣿⣿⣿⣿⣿⣿⣿⡏⣿⣿⣿⣿⠿⡀⠀⢶⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⢱⣿⣿⣿⣿⣿⣿ ⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠿⢟⣋⣡⡤⠀⢠⣿⣿⣿⣿⣷⡹⣿⣿⣿⣿⣿⠀⠿⢟⣩⣴⣿⣿⡀⠈⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⢡⣿⣿⣿⣿⣿⣿⠿ ⣿⣿⣿⠿⠟⣛⣋⣭⣭⣵⣖⣠⣜⣛⠿⠿⠁⠀⠿⠿⠿⣿⣟⠿⣷⠘⣿⣿⣿⠃⢀⣾⣿⣿⣿⣿⣿⣷⡀⠀⠻⣿⣿⣿⣿⣿⣿⣿⠣⣿⣿⣿⣿⡿⡋⣴⣿ ⡿⢋⣴⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠃⢀⣾⣿⣿⣿⣿⣿⣷⣦⣤⣾⣿⣿⣾⣿⣿⣿⣿⣿⣿⣿⣿⣧⠀⠀⠹⣿⣿⣿⣿⣿⣿⢸⣿⣿⣿⢋⣼⢠⣿⣿ ⢡⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠃⠀⣼⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣇⠀⠀⠹⣿⣿⣿⣿⣿⣿⣿⡿⢓⣰⠃⣿⣿⣿