Process Hacker 2.39.124 Windows NT 6.1 Service Pack 1 (64-bit) 22.03.2017 17:14:25 Name File Read rate average Write rate average Total rate average I/O priority Response time (ms) svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace9.fx 2,61 MB/s 2,61 MB/s Very Low 8 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace8.fx 950,67 kB/s 950,67 kB/s Very Low 6 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin 679,5 kB/s 679,5 kB/s Very Low 40 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpengine.dll 450,91 kB/s 450,91 kB/s Very Low 22 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.79 329 kB/s 329 kB/s Very Low 3 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace7.fx 299,5 kB/s 299,5 kB/s Very Low 9 System (4) C:\Windows\System32\wdi\LogFiles\BootCKCL.etl 181,33 kB/s 181,33 kB/s Normal 12 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.83 164,5 kB/s 164,5 kB/s Very Low 6 svchost.exe (940) C:\$Mft 113 kB/s 113 kB/s Very Low 26 ProcessHacker.exe (2448) C:\Windows\System32\ExplorerFrame.dll 109,33 kB/s 109,33 kB/s Normal 8 ProcessHacker.exe (2448) C:\Windows\System32\shell32.dll 98 kB/s 98 kB/s Normal 16 ProcessHacker.exe (2448) C:\Windows\System32\SearchFolder.dll 76,58 kB/s 76,58 kB/s Normal 3 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.5B 73,5 kB/s 73,5 kB/s Very Low 6 ProcessHacker.exe (2448) C:\Windows\System32\StructuredQuery.dll 63,75 kB/s 63,75 kB/s Normal 3 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7C 57,5 kB/s 57,5 kB/s Very Low 11 svchost.exe (692) C:\Windows\inf\machine.PNF 46,33 kB/s 46,33 kB/s Normal 2 ProcessHacker.exe (2448) C:\Windows\System32\imageres.dll 42,67 kB/s 42,67 kB/s Normal 10 ProcessHacker.exe (2448) C:\Windows\System32\comdlg32.dll 37,83 kB/s 37,83 kB/s Normal 7 ProcessHacker.exe (2448) C:\Windows\System32\oleacc.dll 36,2 kB/s 36,2 kB/s Normal 4 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTPhEtRundownLogger.etl 33 kB/s 33 kB/s Normal 2 ProcessHacker.exe (2448) C:\Windows\System32\wpdshext.dll 29,75 kB/s 29,75 kB/s Normal 10 ProcessHacker.exe (2448) C:\Windows\System32\ieframe.dll 26,7 kB/s 26,7 kB/s Normal 19 ProcessHacker.exe (2448) C:\Windows\System32\EhStorAPI.dll 24,13 kB/s 24,13 kB/s Normal 25 ProcessHacker.exe (2448) C:\Windows\Resources\Themes\Aero\Shell\NormalColor\shellstyle.dll 17,75 kB/s 17,75 kB/s Normal 9 ProcessHacker.exe (2448) C:\Windows\System32\ntlanman.dll 15,1 kB/s 15,1 kB/s Normal 3 System (4) C:\$Mft 819 B/s 12 kB/s 12,8 kB/s Normal 2 ProcessHacker.exe (2448) C:\Windows\System32\davclnt.dll 12,7 kB/s 12,7 kB/s Normal 5 svchost.exe (940) C:\Windows\System32\DriverStore\FileRepository 12 kB/s 12 kB/s Very Low 9 svchost.exe (2868) C:\Program Files\Windows Defender\MpSvc.dll 11 kB/s 11 kB/s Normal 12 explorer.exe (2016) C:\Windows\System32\SearchFolder.dll 10,4 kB/s 10,4 kB/s Normal 18 ProcessHacker.exe (2448) C:\Windows\System32\en-US\shell32.dll.mui 8,67 kB/s 8,67 kB/s Normal 69 ProcessHacker.exe (2448) C:\Windows\System32\en-US\comdlg32.dll.mui 8,33 kB/s 8,33 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\wscapi.dll 8,13 kB/s 8,13 kB/s Normal 9 svchost.exe (2868) C:\Windows\System32\tdh.dll 8 kB/s 8 kB/s Normal 13 svchost.exe (692) C:\Windows\inf\keyboard.PNF 8 kB/s 8 kB/s Normal 5 ProcessHacker.exe (2448) C:\Windows\Fonts\StaticCache.dat 8 kB/s 8 kB/s Normal 28 ProcessHacker.exe (2448) C:\Windows\Fonts\segoeuii.ttf 8 kB/s 8 kB/s Normal 35 svchost.exe (692) C:\Windows\inf\usbport.PNF 7,88 kB/s 7,88 kB/s Normal 2 svchost.exe (692) C:\Windows\System32\drivers\http.sys 7,75 kB/s 7,75 kB/s Normal 14 svchost.exe (2868) C:\Program Files\Windows Defender\MsMpRes.dll 7,56 kB/s 7,56 kB/s Normal 23 svchost.exe (692) C:\Windows\inf\msmouse.PNF 7,54 kB/s 7,54 kB/s Normal 0 svchost.exe (692) C:\Windows\System32\drivers\afd.sys 7,5 kB/s 7,5 kB/s Normal 20 svchost.exe (692) C:\Windows\inf\oem21.PNF 6,67 kB/s 6,67 kB/s Normal 14 ProcessHacker.exe (2448) C:\$Mft 6,67 kB/s 6,67 kB/s Normal 27 svchost.exe (692) C:\Windows\inf\mshdc.PNF 6,42 kB/s 6,42 kB/s Normal 7 svchost.exe (692) C:\Windows\System32\drivers\WUDFPf.sys 5,54 kB/s 5,54 kB/s Normal 7 ProcessHacker.exe (2448) C:\Windows\System32\davhlpr.dll 5,4 kB/s 5,4 kB/s Normal 8 svchost.exe (692) C:\Windows\System32\FirewallAPI.dll 5,33 kB/s 5,33 kB/s Normal 11 svchost.exe (692) C:\Windows\inf\oem25.PNF 5,33 kB/s 5,33 kB/s Normal 13 ProcessHacker.exe (2448) C:\Windows\System32\drprov.dll 5,1 kB/s 5,1 kB/s Normal 6 svchost.exe (692) C:\$Mft 5 kB/s 5 kB/s Normal 5 System (4) C:\$LogFile 5 kB/s 5 kB/s Normal 14 svchost.exe (940) C:\Windows\winsxs 4,89 kB/s 4,89 kB/s Very Low 10 ProcessHacker.exe (2448) C:\Windows\System32\propsys.dll 4,8 kB/s 4,8 kB/s Normal 11 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db 4,67 kB/s 4,67 kB/s Normal 14 svchost.exe (2868) C:\$Mft 4,44 kB/s 4,44 kB/s Very Low 16 svchost.exe (1104) C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 4 kB/s 4 kB/s Normal 19 System (4) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 4 kB/s 4 kB/s Normal 0 svchost.exe (2868) C:\Program Files\Windows Defender\en-US\MsMpRes.dll.mui 4 kB/s 4 kB/s Normal 37 svchost.exe (692) C:\Windows\System32\drivers\discache.sys 3,59 kB/s 3,59 kB/s Normal 8 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.A0 3,55 kB/s 3,55 kB/s Very Low 15 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.87 3,55 kB/s 3,55 kB/s Very Low 14 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.80 3,55 kB/s 3,55 kB/s Very Low 13 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7E 3,55 kB/s 3,55 kB/s Very Low 12 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.67 3,55 kB/s 3,55 kB/s Very Low 21 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx 2 kB/s 1,5 kB/s 3,5 kB/s Normal 15 ProcessHacker.exe (2448) C:\Windows\System32\en-US\oleaccrc.dll.mui 3,4 kB/s 3,4 kB/s Normal 16 explorer.exe (2016) C:\Windows\System32\shell32.dll 3,2 kB/s 3,2 kB/s Normal 102 System (4) C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf 3,11 kB/s 3,11 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\wscisvif.dll 2,94 kB/s 2,94 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\en-US\advapi32.dll.mui 2,81 kB/s 2,81 kB/s Normal 18 svchost.exe (692) C:\Windows\inf\oem17.PNF 2,67 kB/s 2,67 kB/s Normal 31 svchost.exe (692) C:\Windows\Globalization\Sorting\SortDefault.nls 2,67 kB/s 2,67 kB/s Normal 17 svchost.exe (692) C:\Windows\System32\drivers\Wdf01000.sys 2,63 kB/s 2,63 kB/s Normal 14 svchost.exe (692) C:\Windows\System32\clfs.sys 2,54 kB/s 2,54 kB/s Normal 21 svchost.exe (940) C:\Windows\inf 2,4 kB/s 2,4 kB/s Very Low 25 svchost.exe (692) C:\Windows\inf\oem19.PNF 2,33 kB/s 2,33 kB/s Normal 19 svchost.exe (692) C:\Windows\inf\netrasa.PNF 2,33 kB/s 2,33 kB/s Normal 24 svchost.exe (692) C:\Windows\inf\cpu.PNF 2,08 kB/s 2,08 kB/s Normal 30 svchost.exe (2868) C:\Windows\System32\wscproxystub.dll 2 kB/s 2 kB/s Normal 0 svchost.exe (940) C:\Windows\System32\SMI\Store\Machine 2 kB/s 2 kB/s Very Low 15 svchost.exe (692) C:\Windows\System32\drivers\nsiproxy.sys 2 kB/s 2 kB/s Normal 9 svchost.exe (940) C:\Windows\servicing\Sessions 2 kB/s 2 kB/s Very Low 8 svchost.exe (692) C:\Windows\inf\usbvideo.PNF 2 kB/s 2 kB/s Normal 12 svchost.exe (940) C:\Program Files\Windows Journal\en-US 2 kB/s 2 kB/s Very Low 13 svchost.exe (692) C:\Windows\inf\oem8.PNF 1,88 kB/s 1,88 kB/s Normal 12 svchost.exe (940) C:\Windows\winsxs\FileMaps 1,78 kB/s 1,78 kB/s Very Low 12 ProcessHacker.exe (2448) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 1,7 kB/s 1,7 kB/s Normal 9 System (4) C:\Windows\winsxs 1,6 kB/s 1,6 kB/s Very Low 16 svchost.exe (692) C:\Windows\inf\nettun.PNF 1,58 kB/s 1,58 kB/s Normal 10 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles 1,5 kB/s 1,5 kB/s Very Low 19 svchost.exe (692) C:\Windows\inf\disk.PNF 1,41 kB/s 1,41 kB/s Normal 12 ProcessHacker.exe (2448) C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll 1,33 kB/s 1,33 kB/s Normal 17 svchost.exe (940) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7 1,33 kB/s 1,33 kB/s Very Low 117 svchost.exe (940) C:\Windows\Web\Wallpaper 1,33 kB/s 1,33 kB/s Very Low 27 svchost.exe (940) C:\Windows\SysWOW64\wbem 1,33 kB/s 1,33 kB/s Very Low 18 System (4) C:\Windows\System32\config 1,33 kB/s 1,33 kB/s Normal 79 System (4) C:\Windows 1,33 kB/s 1,33 kB/s Normal 0 System (4) C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log 1,33 kB/s 1,33 kB/s Normal 1 svchost.exe (940) C:\Program Files\Windows Mail 1,33 kB/s 1,33 kB/s Very Low 13 svchost.exe (692) C:\Windows\inf\battery.PNF 1,29 kB/s 1,29 kB/s Normal 23 svchost.exe (692) C:\Windows\System32\drivers\en-US\afd.sys.mui 1,21 kB/s 1,21 kB/s Normal 44 svchost.exe (692) C:\Windows\inf\oem18.PNF 1,21 kB/s 1,21 kB/s Normal 16 svchost.exe (692) C:\Windows\inf\acpi.PNF 1,17 kB/s 1,17 kB/s Normal 28 svchost.exe (692) C:\Windows\inf\oem9.PNF 1,08 kB/s 1,08 kB/s Normal 52 svchost.exe (692) C:\Windows\inf\cdrom.PNF 1,04 kB/s 1,04 kB/s Normal 17 svchost.exe (940) C:\Windows\SysWOW64\en-US 1 kB/s 1 kB/s Very Low 15 svchost.exe (940) C:\Windows\System32\WindowsPowerShell\v1.0\en-US 1 kB/s 1 kB/s Very Low 15 svchost.exe (692) C:\Windows\inf\tpm.PNF 1 kB/s 1 kB/s Normal 11 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail 1 kB/s 1 kB/s Very Low 21 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 1 kB/s 1 kB/s Very Low 12 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows 1 kB/s 1 kB/s Very Low 14 svchost.exe (940) C:\ProgramData\GlassWire\service\stats 1 kB/s 1 kB/s Very Low 11 svchost.exe (692) C:\Windows\inf\oem5.PNF 896 B/s 896 B/s Normal 224 ProcessHacker.exe (2448) C:\Windows\System32\oleaccrc.dll 819 B/s 819 B/s Normal 13 ProcessHacker.exe (2448) C:\Users\Ministeerium\Documents\Processmon 819 B/s 819 B/s Normal 12 svchost.exe (940) C:\ProgramData\Microsoft\Windows\WER\ReportQueue 819 B/s 819 B/s Very Low 24 svchost.exe (692) C:\Windows\inf\umbus.PNF 810 B/s 810 B/s Normal 7 svchost.exe (692) C:\Windows\inf\hdaudbus.PNF 768 B/s 768 B/s Normal 28 svchost.exe (940) C:\Windows\SysWOW64 744 B/s 744 B/s Very Low 26 svchost.exe (692) C:\Windows\System32\drivers\RDPREFMP.sys 744 B/s 744 B/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\en-US\mpr.dll.mui 716 B/s 716 B/s Normal 30 ProcessHacker.exe (2448) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms 716 B/s 716 B/s Normal 12 svchost.exe (692) C:\Windows\System32\drivers\RDPENCDD.sys 698 B/s 698 B/s Normal 31 svchost.exe (692) C:\Windows\System32\drivers\RDPCDD.sys 698 B/s 698 B/s Normal 12 svchost.exe (692) C:\Windows\System32\drivers\en-US\pci.sys.mui 682 B/s 682 B/s Normal 21 svchost.exe (692) C:\Windows\inf 682 B/s 682 B/s Normal 6 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db 682 B/s 682 B/s Normal 3 svchost.exe (692) C:\Windows\inf\netavpna.PNF 605 B/s 605 B/s Normal 10 svchost.exe (692) C:\Windows\inf\compositebus.PNF 597 B/s 597 B/s Normal 28 svchost.exe (692) C:\Windows\inf\volume.PNF 554 B/s 554 B/s Normal 7 svchost.exe (692) C:\Windows\inf\rdpbus.PNF 554 B/s 554 B/s Normal 25 svchost.exe (692) C:\Windows\inf\netsstpa.PNF 554 B/s 554 B/s Normal 0 svchost.exe (692) C:\Windows\inf\blbdrive.PNF 512 B/s 512 B/s Normal 28 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex 512 B/s 512 B/s Very Low 25 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows 512 B/s 512 B/s Very Low 29 svchost.exe (940) C:\Program Files\Windows Journal 512 B/s 512 B/s Very Low 14 svchost.exe (692) C:\Windows\inf\hal.PNF 469 B/s 469 B/s Normal 10 svchost.exe (940) C:\Windows\System32\Speech\SpeechUX\en-US 455 B/s 455 B/s Very Low 46 svchost.exe (940) C:\Windows\System32\migwiz 455 B/s 455 B/s Very Low 0 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WER\ReportQueue 455 B/s 455 B/s Very Low 37 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasdlta.vdm 455 B/s 455 B/s Very Low 27 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasbase.vdm 455 B/s 455 B/s Very Low 0 svchost.exe (940) C:\Program Files\DVD Maker 455 B/s 455 B/s Very Low 27 svchost.exe (692) C:\Windows\inf\volsnap.PNF 426 B/s 426 B/s Normal 18 svchost.exe (692) C:\Windows\inf\scrawpdo.PNF 418 B/s 418 B/s Normal 14 svchost.exe (940) C:\Windows\winsxs\Manifests 372 B/s 372 B/s Very Low 37 svchost.exe (940) C:\ProgramData\GlassWire\service 372 B/s 372 B/s Very Low 4 svchost.exe (692) C:\Windows\System32\en-US\rascfg.dll.mui 256 B/s 256 B/s Normal 12 ProcessHacker.exe (2448) C:\Users\Ministeerium\Links\Downloads.lnk 204 B/s 204 B/s Normal 60 svchost.exe (692) C:\Windows\System32\en-US\comres.dll.mui 186 B/s 186 B/s Normal 16