Process Hacker 2.39.124 Windows NT 6.1 Service Pack 1 (64-bit) 22.03.2017 17:14:47 Name File Read rate average Write rate average Total rate average I/O priority Response time (ms) svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl 345,6 kB/s 345,6 kB/s Very Low 5 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin 197,27 kB/s 197,27 kB/s Very Low 40 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpengine.dll 150,3 kB/s 150,3 kB/s Very Low 22 svchost.exe (2868) C:\Windows\System32\ole32.dll 120 kB/s 120 kB/s Very Low 1 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace9.fx 116,17 kB/s 116,17 kB/s Very Low 8 svchost.exe (2868) C:\Windows\System32\advapi32.dll 116 kB/s 116 kB/s Very Low 1 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace8.fx 114,08 kB/s 114,08 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\oleaut32.dll 112,5 kB/s 112,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\setupapi.dll 112 kB/s 112 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\clbcatq.dll 105,5 kB/s 105,5 kB/s Very Low 2 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace10.fx 98,36 kB/s 98,36 kB/s Very Low 3 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.79 87,73 kB/s 87,73 kB/s Very Low 3 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace1.fx 86,53 kB/s 86,53 kB/s Very Low 5 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7C 84,4 kB/s 84,4 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\rpcss.dll 80 kB/s 80 kB/s Very Low 2 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace7.fx 79,87 kB/s 79,87 kB/s Very Low 9 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.80 76,39 kB/s 76,39 kB/s Very Low 8 System (4) C:\Windows\System32\wdi\LogFiles\BootCKCL.etl 75,29 kB/s 75,29 kB/s Normal 10 svchost.exe (2868) C:\Windows\System32\kernel32.dll 70,67 kB/s 70,67 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\winsta.dll 66 kB/s 66 kB/s Very Low 6 svchost.exe (992) C:\Windows\System32\wbem\Repository\OBJECTS.DATA 65,6 kB/s 65,6 kB/s Normal 4 svchost.exe (2868) C:\Windows\System32\cfgmgr32.dll 63 kB/s 63 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\user32.dll 54,75 kB/s 54,75 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\Wldap32.dll 53,5 kB/s 53,5 kB/s Very Low 2 svchost.exe (992) C:\Windows\System32\wbem\esscli.dll 52,3 kB/s 52,3 kB/s Normal 7 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.67 50,58 kB/s 50,58 kB/s Very Low 8 svchost.exe (940) C:\$Mft 48,59 kB/s 120 B/s 48,71 kB/s Very Low 27 svchost.exe (2868) C:\Windows\System32\sspicli.dll 48,5 kB/s 48,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\SysWOW64\kernel32.dll 48 kB/s 48 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.83 43,87 kB/s 43,87 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\umpnpmgr.dll 43,5 kB/s 43,5 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7E 43,35 kB/s 43,35 kB/s Very Low 7 svchost.exe (2868) C:\Windows\System32\ntmarta.dll 42,5 kB/s 42,5 kB/s Very Low 4 svchost.exe (2868) C:\Windows\SysWOW64\user32.dll 41 kB/s 41 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\KernelBase.dll 39,33 kB/s 39,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\usp10.dll 38,25 kB/s 38,25 kB/s Very Low 2 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 36,8 kB/s 36,8 kB/s Normal 8 svchost.exe (2868) C:\Windows\System32\gdi32.dll 36 kB/s 36 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\msctf.dll 35,75 kB/s 35,75 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\devobj.dll 35 kB/s 35 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\rpcrt4.dll 34,83 kB/s 34,83 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\msvcrt.dll 32 kB/s 32 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.5B 30,93 kB/s 30,93 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\imm32.dll 27,75 kB/s 27,75 kB/s Very Low 1 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.tmp 26,95 kB/s 26,95 kB/s Normal 10 ProcessHacker.exe (2448) C:\Windows\System32\ExplorerFrame.dll 26,84 kB/s 26,84 kB/s Normal 12 svchost.exe (2868) C:\Windows\SysWOW64\ntdll.dll 26 kB/s 26 kB/s Very Low 2 svchost.exe (992) C:\Windows\System32\wbem\Repository\INDEX.BTR 25,6 kB/s 25,6 kB/s Normal 5 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.log 24,38 kB/s 24,38 kB/s Normal 99 svchost.exe (2868) C:\Windows\System32\SPInf.dll 23,5 kB/s 23,5 kB/s Very Low 3 svchost.exe (2868) C:\Windows\SysWOW64\gdi32.dll 23,38 kB/s 23,38 kB/s Very Low 13 svchost.exe (2868) C:\Windows\System32\userenv.dll 23,25 kB/s 23,25 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\shell32.dll 22,29 kB/s 22,29 kB/s Normal 16 svchost.exe (2868) C:\Windows\System32\credssp.dll 21,5 kB/s 21,5 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\gpapi.dll 21 kB/s 21 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\pcwum.dll 20 kB/s 20 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\cryptbase.dll 17,25 kB/s 17,25 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\devrtl.dll 16,5 kB/s 16,5 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\SearchFolder.dll 16,41 kB/s 16,41 kB/s Normal 3 svchost.exe (692) C:\Windows\inf\machine.PNF 16,35 kB/s 16,35 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\RpcRtRemote.dll 16 kB/s 16 kB/s Very Low 5 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.87 15,74 kB/s 15,74 kB/s Very Low 4 explorer.exe (2016) C:\Windows\System32\ieframe.dll 15,43 kB/s 15,43 kB/s Normal 8 svchost.exe (992) C:\Windows\System32\wbem\NCProv.dll 15,1 kB/s 15,1 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\sechost.dll 14,33 kB/s 14,33 kB/s Very Low 4 taskhost.exe (1852) C:\Windows\System32\esent.dll 13,71 kB/s 13,71 kB/s Normal 6 ProcessHacker.exe (2448) C:\Windows\System32\StructuredQuery.dll 13,66 kB/s 13,66 kB/s Normal 3 svchost.exe (992) C:\Windows\System32\wbem\wbemess.dll 13,6 kB/s 13,6 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\profapi.dll 13,5 kB/s 13,5 kB/s Very Low 3 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTPhEtRundownLogger.etl 11,65 kB/s 11,65 kB/s Normal 2 ProcessHacker.exe (2448) C:\Windows\System32\comdlg32.dll 10,39 kB/s 10,39 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\lpk.dll 10,25 kB/s 10,25 kB/s Very Low 3 taskhost.exe (1852) C:\Windows\System32\wininet.dll 10,09 kB/s 10,09 kB/s Normal 5 svchost.exe (2868) C:\Windows\System32\umpo.dll 10 kB/s 10 kB/s Very Low 3 ProcessHacker.exe (2448) C:\Windows\System32\imageres.dll 9,14 kB/s 9,14 kB/s Normal 10 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 1,6 kB/s 6,4 kB/s 8 kB/s Normal 6 System (4) C:\$BitMap 7,53 kB/s 7,53 kB/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\oleacc.dll 6,7 kB/s 6,7 kB/s Normal 4 svchost.exe (992) C:\Windows\System32\authz.dll 6,4 kB/s 6,4 kB/s Normal 16 System (4) C:\$LogFile 6 kB/s 6 kB/s Normal 17 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 5,78 kB/s 5,78 kB/s Normal 59 explorer.exe (2016) C:\Windows\System32\wininet.dll 5,33 kB/s 5,33 kB/s Normal 6 ProcessHacker.exe (2448) C:\Windows\System32\ieframe.dll 4,94 kB/s 4,94 kB/s Normal 19 explorer.exe (2016) C:\Windows\System32\mlang.dll 4,9 kB/s 4,9 kB/s Normal 6 taskhost.exe (1852) C:\Program Files\Internet Explorer\sqmapi.dll 4,59 kB/s 4,59 kB/s Normal 6 ProcessHacker.exe (2448) C:\Windows\System32\wpdshext.dll 4,58 kB/s 4,58 kB/s Normal 10 System (4) C:\$Mft 256 B/s 4,13 kB/s 4,38 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\wbem\WmiDcPrv.dll 4 kB/s 4 kB/s Very Low 10 ProcessHacker.exe (2448) C:\Windows\Resources\Themes\Aero\Shell\NormalColor\shellstyle.dll 3,8 kB/s 3,8 kB/s Normal 9 ProcessHacker.exe (2448) C:\Windows\System32\EhStorAPI.dll 3,71 kB/s 3,71 kB/s Normal 25 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx 3,37 kB/s 3,37 kB/s Normal 1 svchost.exe (2868) C:\Windows\System32\wow64cpu.dll 3,25 kB/s 3,25 kB/s Very Low 7 svchost.exe (992) C:\Windows\System32\wbemcomn.dll 3,2 kB/s 3,2 kB/s Normal 16 taskhost.exe (1852) C:\$LogFile 3 kB/s 3 kB/s Normal 0 svchost.exe (2868) C:\Program Files\Windows Defender\MpSvc.dll 2,93 kB/s 2,93 kB/s Normal 12 explorer.exe (2016) C:\Windows\System32\ole32.dll 2,86 kB/s 2,86 kB/s Normal 6 svchost.exe (692) C:\Windows\inf\keyboard.PNF 2,82 kB/s 2,82 kB/s Normal 5 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.log 2,8 kB/s 2,8 kB/s Normal 1 ProcessHacker.exe (2448) C:\Windows\System32\ntlanman.dll 2,8 kB/s 2,8 kB/s Normal 3 svchost.exe (692) C:\Windows\inf\usbport.PNF 2,78 kB/s 2,78 kB/s Normal 2 svchost.exe (692) C:\Windows\System32\drivers\http.sys 2,73 kB/s 2,73 kB/s Normal 14 System (4) C:\Users\Ministeerium\Documents\Processmon\Process Hacker Disk3..4.txt 2,67 kB/s 2,67 kB/s Normal 59 svchost.exe (692) C:\Windows\inf\msmouse.PNF 2,66 kB/s 2,66 kB/s Normal 0 svchost.exe (692) C:\Windows\System32\drivers\afd.sys 2,65 kB/s 2,65 kB/s Normal 20 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 2,46 kB/s 2,46 kB/s Normal 77 svchost.exe (692) C:\Windows\inf\oem21.PNF 2,35 kB/s 2,35 kB/s Normal 14 ProcessHacker.exe (2448) C:\Windows\System32\davclnt.dll 2,35 kB/s 2,35 kB/s Normal 5 svchost.exe (692) C:\Windows\inf\mshdc.PNF 2,26 kB/s 2,26 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\wscapi.dll 2,17 kB/s 2,17 kB/s Normal 9 svchost.exe (2868) C:\Windows\System32\tdh.dll 2,13 kB/s 2,13 kB/s Normal 13 svchost.exe (2868) C:\Program Files\Windows Defender\MsMpRes.dll 2,02 kB/s 2,02 kB/s Normal 23 explorer.exe (2016) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 1 kB/s 1 kB/s 2 kB/s Normal 17 explorer.exe (2016) C:\Windows\System32\SearchFolder.dll 1,93 kB/s 1,93 kB/s Normal 18 taskhost.exe (1852) C:\$Mft 1,9 kB/s 1,9 kB/s Normal 11 svchost.exe (692) C:\Windows\System32\FirewallAPI.dll 1,88 kB/s 1,88 kB/s Normal 11 svchost.exe (692) C:\Windows\inf\oem25.PNF 1,88 kB/s 1,88 kB/s Normal 13 ProcessHacker.exe (2448) C:\Windows\System32\en-US\shell32.dll.mui 1,86 kB/s 1,86 kB/s Normal 69 svchost.exe (692) C:\Windows\System32\drivers\WUDFPf.sys 1,85 kB/s 1,85 kB/s Normal 7 ProcessHacker.exe (2448) C:\Windows\System32\en-US\comdlg32.dll.mui 1,79 kB/s 1,79 kB/s Normal 6 svchost.exe (692) C:\$Mft 1,76 kB/s 1,76 kB/s Normal 5 svchost.exe (940) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 1,68 kB/s 1,68 kB/s Very Low 0 explorer.exe (2016) C:\Windows\System32\shell32.dll 1,63 kB/s 1,63 kB/s Normal 90 explorer.exe (2016) C:\Windows\System32\propsys.dll 1,6 kB/s 1,6 kB/s Normal 29 svchost.exe (2868) C:\$Mft 1,55 kB/s 1,55 kB/s Very Low 16 ProcessHacker.exe (2448) C:\$Mft 1,43 kB/s 1,43 kB/s Normal 27 svchost.exe (940) C:\Windows\winsxs 1,42 kB/s 1,42 kB/s Very Low 10 explorer.exe (2016) C:\Windows\System32\shlwapi.dll 1,4 kB/s 1,4 kB/s Normal 22 System (4) C:\Windows\Prefetch 1,23 kB/s 1,23 kB/s Normal 37 ProcessHacker.exe (2448) C:\Windows\Fonts\StaticCache.dat 1,23 kB/s 1,23 kB/s Normal 28 ProcessHacker.exe (2448) C:\Windows\Fonts\segoeuii.ttf 1,23 kB/s 1,23 kB/s Normal 35 svchost.exe (692) C:\Windows\System32\drivers\discache.sys 1,2 kB/s 1,2 kB/s Normal 8 System (4) C:\Windows\System32\winevt\Logs\System.evtx 1,14 kB/s 1,14 kB/s Normal 1 explorer.exe (2016) C:\$LogFile 1,14 kB/s 1,14 kB/s Normal 0 svchost.exe (1104) C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 1,07 kB/s 1,07 kB/s Normal 19 System (4) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 1,07 kB/s 1,07 kB/s Normal 0 svchost.exe (2868) C:\Program Files\Windows Defender\en-US\MsMpRes.dll.mui 1,07 kB/s 1,07 kB/s Normal 37 System (4) C:\Users\Ministeerium\Documents\Processmon\Process Hacker Disk3...3.txt 1,05 kB/s 1,05 kB/s Normal 6 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.A0 1,03 kB/s 1,03 kB/s Very Low 15 svchost.exe (2868) C:\Windows\SysWOW64 1 kB/s 1 kB/s Very Low 14 ProcessHacker.exe (2448) C:\Windows\System32\davhlpr.dll 1 kB/s 1 kB/s Normal 8 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db 1 kB/s 1 kB/s Normal 14 explorer.exe (2016) C:\$Mft 975 B/s 975 B/s Normal 23 ProcessHacker.exe (2448) C:\Windows\System32\drprov.dll 967 B/s 967 B/s Normal 6 svchost.exe (692) C:\Windows\inf\oem17.PNF 963 B/s 963 B/s Normal 31 svchost.exe (692) C:\Windows\Globalization\Sorting\SortDefault.nls 963 B/s 963 B/s Normal 17 System (4) C:\$Extend\$UsnJrnl:$J 963 B/s 963 B/s Normal 0 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx 546 B/s 409 B/s 955 B/s Normal 15 svchost.exe (692) C:\Windows\System32\drivers\Wdf01000.sys 948 B/s 948 B/s Normal 14 System (4) C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf 924 B/s 924 B/s Normal 0 svchost.exe (692) C:\Windows\System32\clfs.sys 918 B/s 918 B/s Normal 21 ProcessHacker.exe (2448) C:\Windows\System32\propsys.dll 910 B/s 910 B/s Normal 11 svchost.exe (940) C:\Windows\inf 896 B/s 896 B/s Very Low 23 svchost.exe (692) C:\Windows\inf\oem19.PNF 843 B/s 843 B/s Normal 19 svchost.exe (692) C:\Windows\inf\netrasa.PNF 843 B/s 843 B/s Normal 24 System (4) C:\Windows\Temp 819 B/s 819 B/s Normal 1 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup 819 B/s 819 B/s Normal 35 System (4) C:\Windows\System32\LogFiles\WMI 819 B/s 819 B/s Normal 35 System (4) C:\Windows\ServiceProfiles\LocalService\AppData\Local 819 B/s 819 B/s Normal 34 svchost.exe (2868) C:\Windows\System32\wscisvif.dll 802 B/s 802 B/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\user32.dll 780 B/s 780 B/s Normal 38 ProcessHacker.exe (2448) C:\Windows\System32\msctf.dll 780 B/s 780 B/s Normal 12 svchost.exe (2868) C:\Windows\System32\en-US\advapi32.dll.mui 768 B/s 768 B/s Normal 18 svchost.exe (692) C:\Windows\inf\cpu.PNF 752 B/s 752 B/s Normal 30 svchost.exe (692) C:\Windows\System32\drivers\nsiproxy.sys 722 B/s 722 B/s Normal 9 svchost.exe (692) C:\Windows\inf\usbvideo.PNF 722 B/s 722 B/s Normal 12 ProcessHacker.exe (2448) C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23688_none_145d575e8b8eb5b3\GdiPlus.dll 707 B/s 707 B/s Normal 74 svchost.exe (692) C:\Windows\inf\oem8.PNF 677 B/s 677 B/s Normal 12 svchost.exe (940) C:\$LogFile 646 B/s 646 B/s Normal 0 svchost.exe (908) C:\$LogFile 646 B/s 646 B/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\en-US\oleaccrc.dll.mui 644 B/s 644 B/s Normal 16 svchost.exe (692) C:\Windows\inf\nettun.PNF 572 B/s 572 B/s Normal 10 svchost.exe (2868) C:\Windows\System32\wscproxystub.dll 546 B/s 546 B/s Normal 0 svchost.exe (940) C:\Windows\System32\DriverStore\FileRepository 534 B/s 534 B/s Very Low 9 svchost.exe (940) C:\Windows\winsxs\FileMaps 528 B/s 528 B/s Very Low 12 System (4) C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log 528 B/s 528 B/s Normal 1 System (4) C:\Windows\winsxs 512 B/s 512 B/s Very Low 16 svchost.exe (692) C:\Windows\inf\disk.PNF 480 B/s 480 B/s Normal 12 svchost.exe (692) C:\Windows\inf\battery.PNF 466 B/s 466 B/s Normal 23 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Process Hacker Disk3..4.txt.lnk 455 B/s 455 B/s Normal 59 svchost.exe (940) C:\Windows\System32\SMI\Store\Machine 438 B/s 438 B/s Very Low 15 svchost.exe (692) C:\Windows\System32\drivers\en-US\afd.sys.mui 436 B/s 436 B/s Normal 44 svchost.exe (692) C:\Windows\inf\oem18.PNF 436 B/s 436 B/s Normal 16 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Processmon.lnk 431 B/s 431 B/s Normal 34 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx 215 B/s 215 B/s 430 B/s Normal 9 svchost.exe (692) C:\Windows\inf\acpi.PNF 421 B/s 421 B/s Normal 28 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.chk 409 B/s 409 B/s Normal 28 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles 409 B/s 409 B/s Very Low 19 svchost.exe (692) C:\Windows\inf\oem9.PNF 391 B/s 391 B/s Normal 52 explorer.exe (2016) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent 390 B/s 390 B/s Normal 11 explorer.exe (2016) C:\$Extend\$ObjId 390 B/s 390 B/s Normal 14 svchost.exe (692) C:\Windows\inf\cdrom.PNF 376 B/s 376 B/s Normal 17 System (4) C:\Windows\System32\wdi\LogFiles 372 B/s 372 B/s Normal 0 svchost.exe (692) C:\Windows\inf\tpm.PNF 361 B/s 361 B/s Normal 11 ProcessHacker.exe (2448) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 322 B/s 322 B/s Normal 9 svchost.exe (692) C:\Windows\inf\oem5.PNF 316 B/s 316 B/s Normal 224 System (4) C:\Windows\Prefetch\ReadyBoot 315 B/s 315 B/s Normal 110 ProcessHacker.exe (2448) C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll 292 B/s 292 B/s Normal 17 svchost.exe (940) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7 292 B/s 292 B/s Very Low 117 svchost.exe (692) C:\Windows\inf\umbus.PNF 286 B/s 286 B/s Normal 7 svchost.exe (940) C:\Windows\System32\WindowsPowerShell\v1.0\en-US 273 B/s 273 B/s Very Low 15 svchost.exe (692) C:\Windows\inf\hdaudbus.PNF 271 B/s 271 B/s Normal 28 svchost.exe (940) C:\ProgramData\Microsoft\Windows\WER\ReportQueue 256 B/s 256 B/s Very Low 24 svchost.exe (940) C:\Windows\SysWOW64 248 B/s 248 B/s Very Low 26 svchost.exe (692) C:\Windows\System32\drivers\RDPREFMP.sys 248 B/s 248 B/s Normal 0 svchost.exe (692) C:\Windows\System32\drivers\en-US\pci.sys.mui 240 B/s 240 B/s Normal 21 System (4) C:\Windows\System32\catroot2 240 B/s 240 B/s Normal 221 svchost.exe (692) C:\Windows\inf 240 B/s 240 B/s Normal 6 svchost.exe (692) C:\Windows\System32\drivers\RDPENCDD.sys 232 B/s 232 B/s Normal 31 svchost.exe (692) C:\Windows\System32\drivers\RDPCDD.sys 232 B/s 232 B/s Normal 12 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Process Hacker Disk3...3.txt.lnk 215 B/s 215 B/s Normal 7 svchost.exe (692) C:\Windows\inf\compositebus.PNF 210 B/s 210 B/s Normal 28 svchost.exe (692) C:\Windows\inf\netavpna.PNF 201 B/s 201 B/s Normal 10 svchost.exe (692) C:\Windows\inf\volume.PNF 195 B/s 195 B/s Normal 7 svchost.exe (692) C:\Windows\inf\rdpbus.PNF 195 B/s 195 B/s Normal 25 svchost.exe (692) C:\Windows\inf\netsstpa.PNF 195 B/s 195 B/s Normal 0 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\History\History.IE5 195 B/s 195 B/s Normal 33 ProcessHacker.exe (2448) C:\$Secure 195 B/s 195 B/s Normal 22 svchost.exe (940) C:\Windows\System32\spool\drivers\color 186 B/s 186 B/s Very Low 9 svchost.exe (940) C:\Windows\System32\DriverStore\FileRepository\tplcd.inf_amd64_neutral_b3059c9c221fad3e 186 B/s 186 B/s Very Low 22 svchost.exe (940) C:\Program Files\Common Files\Microsoft Shared\Stationery 186 B/s 186 B/s Very Low 9 svchost.exe (692) C:\Windows\inf\blbdrive.PNF 180 B/s 180 B/s Normal 28 svchost.exe (940) C:\Windows\servicing\Sessions 170 B/s 170 B/s Very Low 8 svchost.exe (940) C:\Program Files\Windows Journal\en-US 170 B/s 170 B/s Very Low 13 svchost.exe (692) C:\Windows\inf\hal.PNF 165 B/s 165 B/s Normal 10 svchost.exe (940) C:\Windows\Web\Wallpaper 163 B/s 163 B/s Very Low 27 svchost.exe (940) C:\Windows\SysWOW64\wbem 163 B/s 163 B/s Very Low 18 System (4) C:\Windows\System32\config 163 B/s 163 B/s Normal 79 System (4) C:\Windows 163 B/s 163 B/s Normal 0 svchost.exe (940) C:\Program Files\Windows Mail 163 B/s 163 B/s Very Low 13 svchost.exe (940) C:\Windows\SysWOW64\en-US 157 B/s 157 B/s Very Low 15 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail 157 B/s 157 B/s Very Low 21 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 157 B/s 157 B/s Very Low 12 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows 157 B/s 157 B/s Very Low 14 svchost.exe (940) C:\ProgramData\GlassWire\service\stats 157 B/s 157 B/s Very Low 11 ProcessHacker.exe (2448) C:\Windows\System32\oleaccrc.dll 151 B/s 151 B/s Normal 13 ProcessHacker.exe (2448) C:\Users\Ministeerium\Documents\Processmon 151 B/s 151 B/s Normal 12 svchost.exe (692) C:\Windows\inf\volsnap.PNF 150 B/s 150 B/s Normal 18 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db 146 B/s 146 B/s Normal 3 svchost.exe (692) C:\Windows\inf\scrawpdo.PNF 139 B/s 139 B/s Normal 14 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex 136 B/s 136 B/s Very Low 25 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows 136 B/s 136 B/s Very Low 29 svchost.exe (940) C:\Program Files\Windows Journal 136 B/s 136 B/s Very Low 14 svchost.exe (940) C:\Windows\System32\Speech\SpeechUX\en-US 132 B/s 132 B/s Very Low 46 svchost.exe (940) C:\Windows\System32\migwiz 132 B/s 132 B/s Very Low 0 ProcessHacker.exe (2448) C:\Windows\System32\en-US\mpr.dll.mui 132 B/s 132 B/s Normal 30 ProcessHacker.exe (2448) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms 132 B/s 132 B/s Normal 12 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WER\ReportQueue 132 B/s 132 B/s Very Low 37 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasdlta.vdm 132 B/s 132 B/s Very Low 27 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasbase.vdm 132 B/s 132 B/s Very Low 0 svchost.exe (940) C:\Program Files\DVD Maker 132 B/s 132 B/s Very Low 27 svchost.exe (940) C:\Windows\winsxs\Manifests 124 B/s 124 B/s Very Low 37 svchost.exe (940) C:\ProgramData\GlassWire\service 124 B/s 124 B/s Very Low 4 svchost.exe (692) C:\Windows\System32\en-US\rascfg.dll.mui 90 B/s 90 B/s Normal 12 svchost.exe (692) C:\Windows\System32\en-US\comres.dll.mui 62 B/s 62 B/s Normal 16 ProcessHacker.exe (2448) C:\Users\Ministeerium\Links\Downloads.lnk 37 B/s 37 B/s Normal 60