Process Hacker 2.39.124 Windows NT 6.1 Service Pack 1 (64-bit) 22.03.2017 17:15:10 Name File Read rate average Write rate average Total rate average I/O priority Response time (ms) System (4) C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{b2461a36-4c48-4e1a-bb7f-546c6dd84ede}\snapshot.etl 85,33 kB/s 85,33 kB/s Normal 3 System (4) C:\Windows\System32\wdi\LogFiles\BootCKCL.etl 172,08 kB/s 75,04 kB/s 247,12 kB/s Normal 11 svchost.exe (1280) C:\Windows\System32\wdi\LogFiles\ShutdownCKCL.etl 136 kB/s 136 kB/s Normal 8 System (4) C:\Windows\System32\wdi\LogFiles\ShutdownCKCL.etl 134,4 kB/s 134,4 kB/s Normal 15 svchost.exe (1280) C:\Windows\System32\wdi\LogFiles\BootCKCL.etl 128,8 kB/s 128,8 kB/s Normal 17 svchost.exe (2868) C:\Program Files\Windows Defender\MpClient.dll 63,5 kB/s 63,5 kB/s Very Low 1 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl 157,09 kB/s 157,09 kB/s Very Low 5 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin 111,19 kB/s 111,19 kB/s Very Low 40 svchost.exe (1280) C:\Windows\System32\wdi\LogFiles\WdiContextLog.etl.001 68 kB/s 68 kB/s Normal 7 svchost.exe (1280) C:\Windows\System32\diagperf.dll 63,2 kB/s 63,2 kB/s Normal 6 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.67 95,13 kB/s 95,13 kB/s Very Low 10 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.79 95,04 kB/s 95,04 kB/s Very Low 3 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.80 95,05 kB/s 95,05 kB/s Very Low 8 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpengine.dll 87,02 kB/s 87,02 kB/s Very Low 22 svchost.exe (2868) C:\Windows\System32\ieframe.dll 52,33 kB/s 52,33 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7C 68,37 kB/s 68,37 kB/s Very Low 6 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7E 65,38 kB/s 65,38 kB/s Very Low 8 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx 21,33 kB/s 21,33 kB/s Normal 1 System (4) C:\Windows\System32\wdi\LogFiles\WdiContextLog.etl.002 25,6 kB/s 12,8 kB/s 38,4 kB/s Normal 20 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace8.fx 58,2 kB/s 58,2 kB/s Very Low 6 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace9.fx 56,85 kB/s 56,85 kB/s Very Low 8 System (4) C:\Windows\System32\wdi\LogFiles\WdiContextLog.etl.001 34,4 kB/s 34,4 kB/s Normal 17 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace10.fx 47,04 kB/s 47,04 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\imagehlp.dll 15,83 kB/s 15,83 kB/s Very Low 3 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace7.fx 44,37 kB/s 44,37 kB/s Very Low 9 svchost.exe (1280) C:\Windows\System32\wdi\LogFiles\WdiContextLog.etl.002 25,6 kB/s 25,6 kB/s Normal 32 svchost.exe (940) C:\Windows\Prefetch\ReadyBoot\Trace1.fx 38,23 kB/s 38,23 kB/s Very Low 5 svchost.exe (908) C:\Windows\System32\diagperf.dll 13,33 kB/s 13,33 kB/s Normal 5 System (4) C:\Windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin 12 kB/s 12 kB/s Normal 3 svchost.exe (1280) C:\Windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin 11,33 kB/s 11,33 kB/s Normal 39 svchost.exe (2868) C:\Windows\System32\wininet.dll 23,25 kB/s 23,25 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\SearchFolder.dll 18,3 kB/s 18,3 kB/s Very Low 7 svchost.exe (940) C:\$Mft 28,48 kB/s 70 B/s 28,55 kB/s Very Low 27 svchost.exe (2868) C:\Windows\System32\dui70.dll 21,4 kB/s 21,4 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\FXSAPI.dll 17,42 kB/s 17,42 kB/s Very Low 1 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.83 24,37 kB/s 24,37 kB/s Very Low 6 svchost.exe (2868) C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcp90.dll 21,34 kB/s 21,34 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\msftedit.dll 16,17 kB/s 16,17 kB/s Very Low 2 System (4) C:\Windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin 8 kB/s 8 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\QAGENT.DLL 15,33 kB/s 15,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\SyncCenter.dll 16,21 kB/s 16,21 kB/s Very Low 8 svchost.exe (2868) C:\Windows\System32\urlmon.dll 16,69 kB/s 16,69 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\bthprops.cpl 14,75 kB/s 14,75 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\iertutil.dll 16,44 kB/s 16,44 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\ExplorerFrame.dll 17,1 kB/s 17,1 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\esent.dll 17,96 kB/s 17,96 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\WWanAPI.dll 14 kB/s 14 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\dnsapi.dll 18,98 kB/s 18,98 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\pnidui.dll 14,57 kB/s 14,57 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\mlang.dll 11,5 kB/s 11,5 kB/s Very Low 99 svchost.exe (2868) C:\Windows\System32\imapi2.dll 13,64 kB/s 13,64 kB/s Very Low 7 svchost.exe (2868) C:\Windows\System32\WindowsCodecs.dll 15,15 kB/s 15,15 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\UIAnimation.dll 11,2 kB/s 11,2 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.5B 17,78 kB/s 17,78 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\gameux.dll 14 kB/s 14 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\srchadmin.dll 12,71 kB/s 12,71 kB/s Very Low 2 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 16,73 kB/s 16,73 kB/s Normal 8 svchost.exe (2868) C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll 13,33 kB/s 13,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\hgcpl.dll 11,42 kB/s 11,42 kB/s Very Low 5 svchost.exe (2868) C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcr90.dll 14,38 kB/s 14,38 kB/s Very Low 1 ProcessHacker.exe (2448) C:\Windows\System32\ExplorerFrame.dll 15,68 kB/s 15,68 kB/s Normal 12 svchost.exe (1280) C:\Windows\System32\dps.dll 8 kB/s 8 kB/s Normal 35 svchost.exe (2868) C:\Windows\System32\DXP.dll 11,63 kB/s 11,63 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\authui.dll 12 kB/s 12 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\provsvc.dll 9,92 kB/s 9,92 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\wdmaud.drv 11 kB/s 11 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\cscui.dll 11 kB/s 11 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ActionCenter.dll 10,07 kB/s 10,07 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\shell32.dll 12,63 kB/s 12,63 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\FXSST.dll 9,25 kB/s 9,25 kB/s Very Low 3 svchost.exe (2868) C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23688_none_145d575e8b8eb5b3\GdiPlus.dll 11,05 kB/s 11,05 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\duser.dll 11,05 kB/s 11,05 kB/s Very Low 2 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.87 12,78 kB/s 12,78 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\QUTIL.DLL 9,29 kB/s 9,29 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\stobject.dll 9,38 kB/s 9,38 kB/s Very Low 2 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.tmp 11,91 kB/s 11,91 kB/s Normal 10 ProcessHacker.exe (2448) C:\Windows\System32\shell32.dll 12 kB/s 12 kB/s Normal 16 svchost.exe (992) C:\Windows\System32\wbem\Repository\OBJECTS.DATA 11,31 kB/s 11,31 kB/s Normal 4 svchost.exe (2868) C:\Windows\System32\api-ms-win-core-synch-l1-2-0.dll 4 kB/s 4 kB/s Very Low 9 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.log 11,38 kB/s 11,38 kB/s Normal 99 svchost.exe (2868) C:\Windows\System32\wbemcomn.dll 10,88 kB/s 10,88 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\ntshrui.dll 9,11 kB/s 9,11 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\winmm.dll 8,56 kB/s 8,56 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\MPSSVC.dll 9,62 kB/s 9,62 kB/s Very Low 1 svchost.exe (1280) C:\Windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin 5,5 kB/s 5,5 kB/s Normal 17 svchost.exe (2868) C:\Windows\System32\PortableDeviceTypes.dll 7,79 kB/s 7,79 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\wlanapi.dll 7,25 kB/s 7,25 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\SndVolSSO.dll 8,44 kB/s 8,44 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\winspool.drv 8 kB/s 8 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\prnfldr.dll 7,81 kB/s 7,81 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\cryptui.dll 7,94 kB/s 7,94 kB/s Very Low 10 svchost.exe (2868) C:\Windows\System32\schedsvc.dll 8,89 kB/s 8,89 kB/s Very Low 5 svchost.exe (692) C:\Windows\inf\machine.PNF 9,59 kB/s 9,59 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\diagtrack.dll 8,17 kB/s 8,17 kB/s Very Low 1 svchost.exe (992) C:\Windows\System32\wbem\esscli.dll 9,02 kB/s 9,02 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\timedate.cpl 7,5 kB/s 7,5 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\esteidcm64.dll 8,34 kB/s 8,34 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\wbemcore.dll 8,28 kB/s 8,28 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\SearchFolder.dll 8,84 kB/s 8,84 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\ncsi.dll 7,68 kB/s 7,68 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\webio.dll 7,58 kB/s 7,58 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\netcfgx.dll 7,97 kB/s 7,97 kB/s Very Low 2 svchost.exe (2868) C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 6,21 kB/s 6,21 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\kernel32.dll 7,85 kB/s 7,85 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\FntCache.dll 7,39 kB/s 7,39 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\WPDShServiceObj.dll 5,79 kB/s 5,79 kB/s Very Low 3 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx 1,33 kB/s 1,33 kB/s 2,67 kB/s Normal 10 svchost.exe (2868) C:\Windows\System32\EhStorShell.dll 6,25 kB/s 6,25 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\perftrack.dll 6,89 kB/s 6,89 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\scksp.dll 6,7 kB/s 6,7 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\diagperf.dll 6,54 kB/s 6,54 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\BFE.DLL 6,5 kB/s 6,5 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\StructuredQuery.dll 7,36 kB/s 7,36 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\networkexplorer.dll 5,69 kB/s 5,69 kB/s Very Low 3 explorer.exe (2016) C:\Windows\System32\ieframe.dll 7,2 kB/s 7,2 kB/s Normal 8 svchost.exe (2868) C:\Windows\SysWOW64\kernel32.dll 6,86 kB/s 6,86 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\msls31.dll 5,55 kB/s 5,55 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\SCardSvr.dll 6,04 kB/s 6,04 kB/s Very Low 4 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTPhEtRundownLogger.etl 6,83 kB/s 6,83 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\netshell.dll 6,3 kB/s 6,3 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\gpsvc.dll 6 kB/s 6 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\wbem\fastprox.dll 6,33 kB/s 6,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\shacct.dll 5,33 kB/s 5,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\winhttp.dll 5,73 kB/s 5,73 kB/s Very Low 4 taskhost.exe (1852) C:\Windows\System32\esent.dll 6,4 kB/s 6,4 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\wbem\esscli.dll 5,63 kB/s 5,63 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\Syncreg.dll 4,57 kB/s 4,57 kB/s Very Low 13 svchost.exe (2868) C:\Windows\System32\AltTab.dll 4,57 kB/s 4,57 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\shdocvw.dll 4,94 kB/s 4,94 kB/s Very Low 2 svchost.exe (2868) C:\Windows\SysWOW64\user32.dll 5,86 kB/s 5,86 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\bcryptprimitives.dll 5,63 kB/s 5,63 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\dnsrslvr.dll 5,36 kB/s 5,36 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\nlasvc.dll 5,18 kB/s 5,18 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\WmiPrvSD.dll 5,28 kB/s 5,28 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wwapi.dll 3,92 kB/s 3,92 kB/s Very Low 3 ProcessHacker.exe (2448) C:\Windows\System32\comdlg32.dll 5,6 kB/s 5,6 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\propsys.dll 5,27 kB/s 5,27 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\taskcomp.dll 5,09 kB/s 5,09 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\srvsvc.dll 4,97 kB/s 4,97 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\dps.dll 4,85 kB/s 4,85 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\sysmain.dll 5,13 kB/s 5,13 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wkssvc.dll 4,86 kB/s 4,86 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\cryptsvc.dll 4,75 kB/s 4,75 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\actxprxy.dll 4,8 kB/s 4,8 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 1,83 kB/s 1,83 kB/s Very Low 82 svchost.exe (2868) C:\Windows\System32\fveapi.dll 4,79 kB/s 4,79 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wevtsvc.dll 4,89 kB/s 4,89 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\batmeter.dll 4 kB/s 4 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\iphlpsvc.dll 4,53 kB/s 4,53 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\ole32.dll 4,8 kB/s 4,8 kB/s Very Low 1 ProcessHacker.exe (2448) C:\Windows\System32\imageres.dll 4,92 kB/s 4,92 kB/s Normal 10 svchost.exe (2868) C:\Windows\ehome\ehSSO.dll 3,64 kB/s 3,64 kB/s Very Low 3 System (4) C:\$LogFile 5,18 kB/s 5,18 kB/s Normal 13 svchost.exe (2868) C:\Windows\System32\advapi32.dll 4,64 kB/s 4,64 kB/s Very Low 1 taskhost.exe (1852) C:\Windows\System32\wininet.dll 4,71 kB/s 4,71 kB/s Normal 5 System (4) C:\$BitMap 4,68 kB/s 4,68 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\PortableDeviceApi.dll 4,42 kB/s 4,42 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\msacm32.dll 3,69 kB/s 3,69 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\oleaut32.dll 4,5 kB/s 4,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\setupapi.dll 4,48 kB/s 4,48 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\wbem\WMIsvc.dll 4,29 kB/s 4,29 kB/s Very Low 11 svchost.exe (2868) C:\Windows\System32\vssapi.dll 4,25 kB/s 4,25 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\uxtheme.dll 4,26 kB/s 4,26 kB/s Very Low 1 svchost.exe (992) C:\Windows\System32\wbem\Repository\INDEX.BTR 4,41 kB/s 4,41 kB/s Normal 5 svchost.exe (2868) C:\Windows\System32\shlwapi.dll 4,29 kB/s 4,29 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\KernelBase.dll 4,37 kB/s 4,37 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wdscore.dll 4,07 kB/s 4,07 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\repdrvfs.dll 4,06 kB/s 4,06 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\hnetcfg.dll 4,13 kB/s 4,13 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\nci.dll 4 kB/s 4 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ncrypt.dll 4,06 kB/s 4,06 kB/s Very Low 3 System (4) C:\$Mft 438 B/s 4 kB/s 4,43 kB/s Normal 4 svchost.exe (2868) C:\Windows\System32\clbcatq.dll 4,22 kB/s 4,22 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\user32.dll 4,21 kB/s 4,21 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\sxs.dll 4,05 kB/s 4,05 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\netprofm.dll 4,05 kB/s 4,05 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\clusapi.dll 3,93 kB/s 3,93 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\bcrypt.dll 4,05 kB/s 4,05 kB/s Very Low 7 svchost.exe (2868) C:\Windows\System32\netman.dll 4 kB/s 4 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\wbemess.dll 3,88 kB/s 3,88 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\credui.dll 3,77 kB/s 3,77 kB/s Very Low 13 svchost.exe (2868) C:\Windows\System32\rasdlg.dll 3,82 kB/s 3,82 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\rpcrt4.dll 3,87 kB/s 3,87 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\msacm32.drv 3,13 kB/s 3,13 kB/s Very Low 0 svchost.exe (2868) C:\Windows\System32\cscapi.dll 3,22 kB/s 3,22 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\dhcpcore.dll 3,75 kB/s 3,75 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\profsvc.dll 3,64 kB/s 3,64 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\aepic.dll 3,69 kB/s 3,69 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\AudioSes.dll 3,67 kB/s 3,67 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\NCProv.dll 3,46 kB/s 3,46 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\audiosrv.dll 3,66 kB/s 3,66 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\crypt32.dll 3,67 kB/s 3,67 kB/s Very Low 2 svchost.exe (2868) C:\Windows\SysWOW64\ntdll.dll 3,71 kB/s 3,71 kB/s Very Low 2 System (4) C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-235185186-3546086629-2573179706-1000_UserData.bin 1,33 kB/s 1,33 kB/s Normal 1 svchost.exe (2868) C:\Windows\System32\es.dll 3,55 kB/s 3,55 kB/s Very Low 8 svchost.exe (2868) C:\Windows\System32\radardt.dll 3,29 kB/s 3,29 kB/s Very Low 8 svchost.exe (2868) C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll 3,57 kB/s 3,57 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\sqmapi.dll 3,4 kB/s 3,4 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\ubpm.dll 3,44 kB/s 3,44 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wevtapi.dll 3,5 kB/s 3,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\shsvcs.dll 3,44 kB/s 3,44 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\PeerDist.dll 3,5 kB/s 3,5 kB/s Very Low 10 svchost.exe (2868) C:\Windows\System32\msvcrt.dll 3,55 kB/s 3,55 kB/s Very Low 2 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 744 B/s 2,91 kB/s 3,63 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\cscsvc.dll 3,43 kB/s 3,43 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\WinSCard.dll 3,32 kB/s 3,32 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\mprapi.dll 3,37 kB/s 3,37 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\dhcpcsvc.dll 3,21 kB/s 3,21 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\cryptdll.dll 3,23 kB/s 3,23 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\samlib.dll 3,25 kB/s 3,25 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\appinfo.dll 3,18 kB/s 3,18 kB/s Very Low 3 ProcessHacker.exe (2448) C:\Windows\System32\oleacc.dll 3,55 kB/s 3,55 kB/s Normal 4 svchost.exe (2868) C:\Windows\System32\xmllite.dll 3,23 kB/s 3,23 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\resutils.dll 3,14 kB/s 3,14 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\logoncli.dll 3,21 kB/s 3,21 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\taskschd.dll 3,29 kB/s 3,29 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\umpnpmgr.dll 3,35 kB/s 3,35 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wbem\WmiDcPrv.dll 3,32 kB/s 3,32 kB/s Very Low 3 svchost.exe (2868) C:\Windows\SysWOW64\gdi32.dll 3,34 kB/s 3,34 kB/s Very Low 13 svchost.exe (2868) C:\Windows\System32\cryptnet.dll 3,04 kB/s 3,04 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\cscobj.dll 3,15 kB/s 3,15 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\browser.dll 3,03 kB/s 3,03 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\rpcss.dll 3,2 kB/s 3,2 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\MMDevAPI.dll 3,16 kB/s 3,16 kB/s Very Low 2 svchost.exe (2868) C:\Program Files\Windows Defender\MpSvc.dll 3,33 kB/s 3,33 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\mswsock.dll 3,11 kB/s 3,11 kB/s Very Low 14 svchost.exe (2868) C:\Windows\System32\vsstrace.dll 2,94 kB/s 2,94 kB/s Very Low 0 svchost.exe (2868) C:\Windows\System32\ws2_32.dll 3,06 kB/s 3,06 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\midimap.dll 2,5 kB/s 2,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\srvcli.dll 2,88 kB/s 2,88 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\rasapi32.dll 2,92 kB/s 2,92 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\dhcpcore6.dll 2,93 kB/s 2,93 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\wer.dll 2,88 kB/s 2,88 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\usp10.dll 2,94 kB/s 2,94 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\apphelp.dll 2,92 kB/s 2,92 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ndiscapCfg.dll 2,71 kB/s 2,71 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\PortableDeviceConnectApi.dll 2,8 kB/s 2,8 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\ssdpapi.dll 2,62 kB/s 2,62 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\hid.dll 2,39 kB/s 2,39 kB/s Very Low 16 svchost.exe (2868) C:\Windows\System32\cscdll.dll 2,39 kB/s 2,39 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\authz.dll 2,74 kB/s 2,74 kB/s Very Low 3 svchost.exe (1280) C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-235185186-3546086629-2573179706-1000_UserData.bin 1 kB/s 1 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\linkinfo.dll 2,33 kB/s 2,33 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\gdi32.dll 2,77 kB/s 2,77 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\msctf.dll 2,75 kB/s 2,75 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\mstask.dll 2,69 kB/s 2,69 kB/s Very Low 11 svchost.exe (2868) C:\Windows\System32\trkwks.dll 2,65 kB/s 2,65 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\IPHLPAPI.DLL 2,66 kB/s 2,66 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\mmcss.dll 2,55 kB/s 2,55 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\winsta.dll 2,64 kB/s 2,64 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\dhcpcsvc6.dll 2,43 kB/s 2,43 kB/s Very Low 0 svchost.exe (2868) C:\Windows\System32\certprop.dll 2,5 kB/s 2,5 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\wbem\wmiutils.dll 2,58 kB/s 2,58 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\dwmapi.dll 2,5 kB/s 2,5 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wkscli.dll 2,47 kB/s 2,47 kB/s Very Low 2 svchost.exe (992) C:\Windows\System32\wbem\NCProv.dll 2,6 kB/s 2,6 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\FirewallAPI.dll 2,54 kB/s 2,54 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wdiasqmmodule.dll 2,29 kB/s 2,29 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\cfgmgr32.dll 2,52 kB/s 2,52 kB/s Very Low 4 ProcessHacker.exe (2448) C:\Windows\System32\ieframe.dll 2,62 kB/s 2,62 kB/s Normal 19 svchost.exe (2868) C:\Windows\System32\wdi.dll 2,45 kB/s 2,45 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\pcasvc.dll 2,45 kB/s 2,45 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\netjoin.dll 2,38 kB/s 2,38 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\netapi32.dll 2,32 kB/s 2,32 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wlanutil.dll 1,75 kB/s 1,75 kB/s Very Low 7 explorer.exe (2016) C:\Windows\System32\wininet.dll 2,49 kB/s 2,49 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\tdh.dll 2,49 kB/s 2,49 kB/s Very Low 25 svchost.exe (2868) C:\Windows\System32\wpdbusenum.dll 2,32 kB/s 2,32 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\powrprof.dll 2,34 kB/s 2,34 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\RpcEpMap.dll 2,33 kB/s 2,33 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\wintrust.dll 2,33 kB/s 2,33 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\ncobjapi.dll 2,22 kB/s 2,22 kB/s Very Low 2 svchost.exe (992) C:\Windows\System32\wbem\wbemess.dll 2,34 kB/s 2,34 kB/s Normal 3 ProcessHacker.exe (2448) C:\Windows\System32\wpdshext.dll 2,38 kB/s 2,38 kB/s Normal 10 svchost.exe (2868) C:\Windows\System32\nlaapi.dll 2,16 kB/s 2,16 kB/s Very Low 2 explorer.exe (2016) C:\Windows\System32\mlang.dll 2,29 kB/s 2,29 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\atl.dll 2,13 kB/s 2,13 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\Wldap32.dll 2,14 kB/s 2,14 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\imm32.dll 2,13 kB/s 2,13 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\wiarpc.dll 2,03 kB/s 2,03 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\Sens.dll 2 kB/s 2 kB/s Very Low 4 taskhost.exe (1852) C:\Program Files\Internet Explorer\sqmapi.dll 2,14 kB/s 2,14 kB/s Normal 6 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx 1,49 kB/s 666 B/s 2,14 kB/s Normal 1 svchost.exe (2868) C:\Windows\System32\rasman.dll 2 kB/s 2 kB/s Very Low 1 svchost.exe (2868) C:\Windows\System32\themeservice.dll 1,97 kB/s 1,97 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ntdsapi.dll 2,02 kB/s 2,02 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\samcli.dll 1,88 kB/s 1,88 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\Resources\Themes\Aero\Shell\NormalColor\shellstyle.dll 2,05 kB/s 2,05 kB/s Normal 9 svchost.exe (2868) C:\Windows\System32\sspicli.dll 1,94 kB/s 1,94 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\EhStorAPI.dll 1,93 kB/s 1,93 kB/s Normal 25 svchost.exe (2868) C:\Windows\System32\wfapigp.dll 1,69 kB/s 1,69 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\IconCodecService.dll 1,55 kB/s 1,55 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\wscapi.dll 1,91 kB/s 1,91 kB/s Very Low 6 svchost.exe (2868) C:\Windows\System32\SPInf.dll 1,81 kB/s 1,81 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\userenv.dll 1,79 kB/s 1,79 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ntmarta.dll 1,7 kB/s 1,7 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\rtutils.dll 1,63 kB/s 1,63 kB/s Very Low 10 svchost.exe (2868) C:\Windows\System32\powertracker.dll 1,61 kB/s 1,61 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\sfc_os.dll 1,6 kB/s 1,6 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\wbem\wbemsvc.dll 1,63 kB/s 1,63 kB/s Very Low 0 svchost.exe (2868) C:\Windows\System32\gpapi.dll 1,62 kB/s 1,62 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\sechost.dll 1,59 kB/s 1,59 kB/s Very Low 4 svchost.exe (692) C:\Windows\inf\keyboard.PNF 1,65 kB/s 1,65 kB/s Normal 5 svchost.exe (692) C:\Windows\inf\usbport.PNF 1,63 kB/s 1,63 kB/s Normal 2 System (4) C:\Users\Ministeerium\Documents\Processmon\Process Hacker Disk3...5.txt 1,52 kB/s 1,52 kB/s Normal 3 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 1,58 kB/s 1,58 kB/s Normal 59 svchost.exe (2868) C:\Windows\System32\tcpipcfg.dll 1,43 kB/s 1,43 kB/s Very Low 4 svchost.exe (692) C:\Windows\System32\drivers\http.sys 1,6 kB/s 1,6 kB/s Normal 14 svchost.exe (2868) C:\Windows\System32\dsrole.dll 1,47 kB/s 1,47 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\cryptsp.dll 1,5 kB/s 1,5 kB/s Very Low 2 svchost.exe (692) C:\Windows\inf\msmouse.PNF 1,56 kB/s 1,56 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\Apphlpdm.dll 1,45 kB/s 1,45 kB/s Very Low 6 svchost.exe (692) C:\Windows\System32\drivers\afd.sys 1,55 kB/s 1,55 kB/s Normal 20 svchost.exe (2868) C:\Windows\System32\FWPUCLNT.DLL 1,45 kB/s 1,45 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\uxsms.dll 1,43 kB/s 1,43 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\nsisvc.dll 1,39 kB/s 1,39 kB/s Very Low 2 ProcessHacker.exe (2448) C:\Windows\System32\ntlanman.dll 1,48 kB/s 1,48 kB/s Normal 3 svchost.exe (2868) C:\Windows\System32\slc.dll 1,37 kB/s 1,37 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\devobj.dll 1,4 kB/s 1,4 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\ktmw32.dll 1,32 kB/s 1,32 kB/s Very Low 4 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent 1,23 kB/s 1,23 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\npmproxy.dll 1,28 kB/s 1,28 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\cryptbase.dll 1,33 kB/s 1,33 kB/s Very Low 2 svchost.exe (692) C:\Windows\inf\oem21.PNF 1,38 kB/s 1,38 kB/s Normal 14 taskhost.exe (1852) C:\$LogFile 1,36 kB/s 1,36 kB/s Normal 0 svchost.exe (2868) C:\Windows\System32\sysntfy.dll 1,25 kB/s 1,25 kB/s Very Low 4 explorer.exe (2016) C:\Windows\System32\ole32.dll 1,33 kB/s 1,33 kB/s Normal 6 svchost.exe (2868) C:\Windows\System32\wbem\wbemprox.dll 1,27 kB/s 1,27 kB/s Very Low 4 svchost.exe (2868) C:\Windows\System32\devrtl.dll 1,27 kB/s 1,27 kB/s Very Low 2 svchost.exe (692) C:\Windows\inf\mshdc.PNF 1,33 kB/s 1,33 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\netutils.dll 1,21 kB/s 1,21 kB/s Very Low 2 svchost.exe (2868) C:\Windows\System32\RpcRtRemote.dll 1,23 kB/s 1,23 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\rasadhlp.dll 1,14 kB/s 1,14 kB/s Very Low 42 svchost.exe (2868) C:\Windows\System32\fvecerts.dll 1,18 kB/s 1,18 kB/s Very Low 0 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.log 1,27 kB/s 1,27 kB/s Normal 1 svchost.exe (1280) C:\$Secure 819 B/s 819 B/s Normal 28 svchost.exe (1280) C:\$Mft 819 B/s 819 B/s Normal 35 svchost.exe (2868) C:\Windows\System32\TSChannel.dll 1,13 kB/s 1,13 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\tbs.dll 1,15 kB/s 1,15 kB/s Very Low 4 ProcessHacker.exe (2448) C:\Windows\System32\davclnt.dll 1,24 kB/s 1,24 kB/s Normal 5 svchost.exe (2868) C:\Windows\System32\winnsi.dll 1,16 kB/s 1,16 kB/s Very Low 4 System (4) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 1,18 kB/s 1,18 kB/s Normal 0 svchost.exe (992) C:\Windows\System32\authz.dll 1,1 kB/s 1,1 kB/s Normal 16 svchost.exe (908) C:\$LogFile 1,12 kB/s 1,12 kB/s Normal 0 svchost.exe (2868) C:\Program Files\Windows Defender\MsMpRes.dll 1,12 kB/s 1,12 kB/s Normal 23 svchost.exe (2868) C:\Windows\System32\lmhsvc.dll 1,04 kB/s 1,04 kB/s Very Low 4 svchost.exe (692) C:\Windows\System32\FirewallAPI.dll 1,1 kB/s 1,1 kB/s Normal 11 svchost.exe (692) C:\Windows\inf\oem25.PNF 1,1 kB/s 1,1 kB/s Normal 13 svchost.exe (2868) C:\Windows\System32\wtsapi32.dll 1,04 kB/s 1,04 kB/s Very Low 5 svchost.exe (2868) C:\Windows\System32\profapi.dll 1,04 kB/s 1,04 kB/s Very Low 3 svchost.exe (2868) C:\Windows\System32\secur32.dll 1,02 kB/s 1,02 kB/s Very Low 11 svchost.exe (692) C:\Windows\System32\drivers\WUDFPf.sys 1,07 kB/s 1,07 kB/s Normal 7 svchost.exe (2868) C:\Windows\System32\pnpts.dll 945 B/s 945 B/s Very Low 5 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 832 B/s 832 B/s Very Low 13 svchost.exe (692) C:\$Mft 1,03 kB/s 1,03 kB/s Normal 5 explorer.exe (2016) C:\Windows\System32\SearchFolder.dll 1,02 kB/s 1,02 kB/s Normal 18 ProcessHacker.exe (2448) C:\Windows\System32\en-US\shell32.dll.mui 1 kB/s 1 kB/s Normal 69 svchost.exe (2868) C:\Windows\System32\msasn1.dll 957 B/s 957 B/s Very Low 4 svchost.exe (2868) C:\Windows\System32\sscore.dll 887 B/s 887 B/s Very Low 0 ProcessHacker.exe (2448) C:\Windows\System32\en-US\comdlg32.dll.mui 984 B/s 984 B/s Normal 6 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 614 B/s 614 B/s Very Low 12 explorer.exe (2016) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 477 B/s 477 B/s 954 B/s Normal 17 svchost.exe (2868) C:\Windows\System32\credssp.dll 880 B/s 880 B/s Very Low 3 taskhost.exe (1852) C:\$Mft 910 B/s 910 B/s Normal 11 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 704 B/s 704 B/s Very Low 1 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 885 B/s 885 B/s Normal 77 svchost.exe (2868) C:\$Mft 893 B/s 893 B/s Very Low 16 svchost.exe (2868) C:\Windows\System32\avrt.dll 837 B/s 837 B/s Very Low 33 explorer.exe (2016) C:\Windows\System32\shell32.dll 883 B/s 883 B/s Normal 90 System (4) C:\Windows\System32\winevt\Logs 744 B/s 744 B/s Normal 0 ProcessHacker.exe (2448) C:\$Mft 866 B/s 866 B/s Normal 26 svchost.exe (2868) C:\Windows\System32\pcwum.dll 819 B/s 819 B/s Very Low 4 svchost.exe (2868) C:\Windows\System32\lpk.dll 807 B/s 807 B/s Very Low 3 svchost.exe (2868) C:\Windows\System32\umpo.dll 787 B/s 787 B/s Very Low 3 svchost.exe (2868) C:\Windows\System32\ksuser.dll 640 B/s 640 B/s Very Low 4 svchost.exe (940) C:\Windows\winsxs 819 B/s 819 B/s Very Low 10 svchost.exe (2868) C:\Windows\System32\psapi.dll 708 B/s 708 B/s Very Low 123 svchost.exe (2868) C:\Windows\System32\version.dll 734 B/s 734 B/s Very Low 5 svchost.exe (940) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 762 B/s 762 B/s Very Low 0 System (4) C:\Users\Ministeerium\Documents\Processmon\Process Hacker Disk3..4.txt 744 B/s 744 B/s Normal 59 explorer.exe (2016) C:\Windows\System32\propsys.dll 744 B/s 744 B/s Normal 29 svchost.exe (2868) C:\Windows\System32\nrpsrv.dll 698 B/s 698 B/s Very Low 6 svchost.exe (692) C:\Windows\System32\drivers\discache.sys 709 B/s 709 B/s Normal 8 svchost.exe (2868) C:\Windows\System32\wmsgapi.dll 632 B/s 632 B/s Very Low 10 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx 303 B/s 379 B/s 682 B/s Normal 9 explorer.exe (2016) C:\Windows\System32\shlwapi.dll 651 B/s 651 B/s Normal 22 svchost.exe (2868) C:\Windows\System32\dnsext.dll 585 B/s 585 B/s Very Low 0 ProcessHacker.exe (2448) C:\Windows\Fonts\StaticCache.dat 655 B/s 655 B/s Normal 28 ProcessHacker.exe (2448) C:\Windows\Fonts\segoeuii.ttf 655 B/s 655 B/s Normal 35 svchost.exe (2868) C:\Windows\System32\wship6.dll 601 B/s 601 B/s Very Low 3 svchost.exe (2868) C:\Windows\System32\WSHTCPIP.DLL 578 B/s 578 B/s Very Low 7 svchost.exe (1104) C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 606 B/s 606 B/s Normal 19 svchost.exe (2868) C:\Program Files\Windows Defender\en-US\MsMpRes.dll.mui 606 B/s 606 B/s Normal 37 System (4) C:\$Extend\$UsnJrnl:$J 599 B/s 599 B/s Normal 1 svchost.exe (2868) C:\Windows\System32\nsi.dll 576 B/s 576 B/s Very Low 6 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.A0 595 B/s 595 B/s Very Low 15 svchost.exe (992) C:\Windows\System32\wbemcomn.dll 564 B/s 564 B/s Normal 16 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 448 B/s 448 B/s Very Low 0 svchost.exe (692) C:\Windows\inf\oem17.PNF 564 B/s 564 B/s Normal 31 svchost.exe (692) C:\Windows\Globalization\Sorting\SortDefault.nls 564 B/s 564 B/s Normal 17 svchost.exe (692) C:\Windows\System32\drivers\Wdf01000.sys 556 B/s 556 B/s Normal 14 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db 551 B/s 551 B/s Normal 14 explorer.exe (2016) C:\$LogFile 546 B/s 546 B/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\davhlpr.dll 542 B/s 542 B/s Normal 8 svchost.exe (692) C:\Windows\System32\clfs.sys 538 B/s 538 B/s Normal 21 System (4) C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf 521 B/s 521 B/s Normal 0 ProcessHacker.exe (2448) C:\Windows\System32\drprov.dll 512 B/s 512 B/s Normal 6 svchost.exe (940) C:\Windows\inf 512 B/s 512 B/s Very Low 23 svchost.exe (2868) C:\Windows\System32\wow64cpu.dll 475 B/s 475 B/s Very Low 7 svchost.exe (692) C:\Windows\inf\oem19.PNF 494 B/s 494 B/s Normal 19 svchost.exe (692) C:\Windows\inf\netrasa.PNF 494 B/s 494 B/s Normal 24 ProcessHacker.exe (2448) C:\Windows\System32\propsys.dll 481 B/s 481 B/s Normal 11 System (4) C:\Users\Ministeerium\Documents\Processmon\Process Hacker Disk3...3.txt 476 B/s 476 B/s Normal 6 explorer.exe (2016) C:\$Mft 455 B/s 455 B/s Normal 23 System (4) C:\Windows\Prefetch 442 B/s 442 B/s Normal 37 svchost.exe (2868) C:\Windows\System32\wscisvif.dll 445 B/s 445 B/s Normal 0 svchost.exe (692) C:\Windows\inf\cpu.PNF 441 B/s 441 B/s Normal 30 svchost.exe (2868) C:\Windows\System32\en-US\advapi32.dll.mui 426 B/s 426 B/s Normal 18 svchost.exe (692) C:\Windows\System32\drivers\nsiproxy.sys 423 B/s 423 B/s Normal 9 svchost.exe (692) C:\Windows\inf\usbvideo.PNF 423 B/s 423 B/s Normal 12 svchost.exe (692) C:\Windows\inf\oem8.PNF 397 B/s 397 B/s Normal 12 ProcessHacker.exe (2448) C:\Windows\System32\user32.dll 364 B/s 364 B/s Normal 38 ProcessHacker.exe (2448) C:\Windows\System32\msctf.dll 364 B/s 364 B/s Normal 12 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations 315 B/s 315 B/s Normal 2 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows 315 B/s 315 B/s Normal 2 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache 315 B/s 315 B/s Normal 2 System (4) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows 315 B/s 315 B/s Normal 1 System (4) C:\$Extend\$ObjId 315 B/s 315 B/s Normal 1 ProcessHacker.exe (2448) C:\Windows\System32\en-US\oleaccrc.dll.mui 341 B/s 341 B/s Normal 16 svchost.exe (692) C:\Windows\inf\nettun.PNF 335 B/s 335 B/s Normal 10 ProcessHacker.exe (2448) C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23688_none_145d575e8b8eb5b3\GdiPlus.dll 329 B/s 329 B/s Normal 74 svchost.exe (2868) C:\Windows\System32\rascfg.dll 292 B/s 292 B/s Very Low 19 svchost.exe (2868) C:\Windows\System32\wscproxystub.dll 303 B/s 303 B/s Normal 0 System (4) C:\Users\Ministeerium\Documents\Processmon 273 B/s 273 B/s Normal 1 System (4) C:\Users\Ministeerium\Documents 273 B/s 273 B/s Normal 1 svchost.exe (940) C:\Windows\winsxs\FileMaps 297 B/s 297 B/s Very Low 12 System (4) C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log 372 B/s 372 B/s Normal 1 System (4) C:\Windows\winsxs 292 B/s 292 B/s Very Low 16 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Processmon.lnk 285 B/s 285 B/s Normal 24 svchost.exe (940) C:\$LogFile 285 B/s 285 B/s Normal 0 svchost.exe (692) C:\Windows\inf\disk.PNF 278 B/s 278 B/s Normal 12 svchost.exe (692) C:\Windows\inf\battery.PNF 273 B/s 273 B/s Normal 23 System (4) C:\Windows\System32\winevt\Logs\System.evtx 264 B/s 264 B/s Normal 1 svchost.exe (940) C:\Windows\System32\DriverStore\FileRepository 261 B/s 261 B/s Very Low 9 svchost.exe (692) C:\Windows\System32\drivers\en-US\afd.sys.mui 256 B/s 256 B/s Normal 44 svchost.exe (692) C:\Windows\inf\oem18.PNF 256 B/s 256 B/s Normal 16 svchost.exe (2868) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 192 B/s 192 B/s Very Low 15 svchost.exe (692) C:\Windows\inf\acpi.PNF 247 B/s 247 B/s Normal 28 svchost.exe (940) C:\Windows\System32\SMI\Store\Machine 236 B/s 236 B/s Very Low 15 svchost.exe (692) C:\Windows\inf\oem9.PNF 229 B/s 229 B/s Normal 52 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles 227 B/s 227 B/s Very Low 19 svchost.exe (692) C:\Windows\inf\cdrom.PNF 220 B/s 220 B/s Normal 17 svchost.exe (692) C:\Windows\inf\tpm.PNF 211 B/s 211 B/s Normal 11 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Process Hacker Disk3...5.txt.lnk 195 B/s 195 B/s Normal 2 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx 95 B/s 95 B/s 190 B/s Normal 9 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WebCache\V01.chk 186 B/s 186 B/s Normal 28 System (4) C:\ProgramData\Microsoft\Windows Defender 178 B/s 178 B/s Normal 0 System (4) C:\ProgramData\Microsoft 178 B/s 178 B/s Normal 0 svchost.exe (692) C:\Windows\inf\oem5.PNF 185 B/s 185 B/s Normal 224 explorer.exe (2016) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent 182 B/s 182 B/s Normal 11 explorer.exe (2016) C:\$Extend\$ObjId 182 B/s 182 B/s Normal 14 ProcessHacker.exe (2448) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 170 B/s 170 B/s Normal 9 svchost.exe (692) C:\Windows\inf\umbus.PNF 167 B/s 167 B/s Normal 7 svchost.exe (2868) C:\Windows\System32\sfc.dll 153 B/s 153 B/s Very Low 0 svchost.exe (692) C:\Windows\inf\hdaudbus.PNF 158 B/s 158 B/s Normal 28 ProcessHacker.exe (2448) C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll 157 B/s 157 B/s Normal 17 svchost.exe (940) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7 157 B/s 157 B/s Very Low 117 svchost.exe (2868) C:\Windows\SysWOW64 146 B/s 146 B/s Very Low 14 svchost.exe (940) C:\Windows\System32\WindowsPowerShell\v1.0\en-US 151 B/s 151 B/s Very Low 15 System (4) C:\Windows\Temp 141 B/s 141 B/s Normal 1 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup 141 B/s 141 B/s Normal 35 System (4) C:\Windows\System32\LogFiles\WMI 141 B/s 141 B/s Normal 35 System (4) C:\Windows\ServiceProfiles\LocalService\AppData\Local 141 B/s 141 B/s Normal 34 svchost.exe (940) C:\ProgramData\Microsoft\Windows\WER\ReportQueue 146 B/s 146 B/s Very Low 24 svchost.exe (940) C:\Windows\SysWOW64 143 B/s 143 B/s Very Low 26 svchost.exe (692) C:\Windows\System32\drivers\RDPREFMP.sys 143 B/s 143 B/s Normal 0 svchost.exe (692) C:\Windows\System32\drivers\en-US\pci.sys.mui 141 B/s 141 B/s Normal 21 svchost.exe (692) C:\Windows\inf 141 B/s 141 B/s Normal 6 svchost.exe (692) C:\Windows\System32\drivers\RDPENCDD.sys 134 B/s 134 B/s Normal 31 svchost.exe (692) C:\Windows\System32\drivers\RDPCDD.sys 134 B/s 134 B/s Normal 12 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Process Hacker Disk3..4.txt.lnk 124 B/s 124 B/s Normal 59 svchost.exe (692) C:\Windows\inf\compositebus.PNF 123 B/s 123 B/s Normal 28 System (4) C:\Windows\System32\wdi\LogFiles 117 B/s 117 B/s Normal 0 svchost.exe (692) C:\Windows\inf\netavpna.PNF 116 B/s 116 B/s Normal 10 svchost.exe (692) C:\Windows\inf\volume.PNF 114 B/s 114 B/s Normal 7 svchost.exe (692) C:\Windows\inf\rdpbus.PNF 114 B/s 114 B/s Normal 25 svchost.exe (692) C:\Windows\inf\netsstpa.PNF 114 B/s 114 B/s Normal 0 System (4) C:\Windows\Prefetch\ReadyBoot 110 B/s 110 B/s Normal 110 svchost.exe (692) C:\Windows\inf\blbdrive.PNF 105 B/s 105 B/s Normal 28 System (4) C:\Windows\System32\catroot2 99 B/s 99 B/s Normal 221 svchost.exe (692) C:\Windows\inf\hal.PNF 97 B/s 97 B/s Normal 10 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\Process Hacker Disk3...3.txt.lnk 95 B/s 95 B/s Normal 7 taskhost.exe (1852) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\History\History.IE5 91 B/s 91 B/s Normal 33 ProcessHacker.exe (2448) C:\$Secure 91 B/s 91 B/s Normal 22 svchost.exe (940) C:\Windows\System32\spool\drivers\color 89 B/s 89 B/s Very Low 9 svchost.exe (940) C:\Windows\System32\DriverStore\FileRepository\tplcd.inf_amd64_neutral_b3059c9c221fad3e 89 B/s 89 B/s Very Low 22 svchost.exe (940) C:\Program Files\Common Files\Microsoft Shared\Stationery 89 B/s 89 B/s Very Low 9 svchost.exe (692) C:\Windows\inf\volsnap.PNF 88 B/s 88 B/s Normal 18 svchost.exe (940) C:\Windows\servicing\Sessions 85 B/s 85 B/s Very Low 8 svchost.exe (940) C:\Program Files\Windows Journal\en-US 85 B/s 85 B/s Very Low 13 svchost.exe (940) C:\Windows\Web\Wallpaper 83 B/s 83 B/s Very Low 27 svchost.exe (940) C:\Windows\SysWOW64\wbem 83 B/s 83 B/s Very Low 18 System (4) C:\Windows\System32\config 83 B/s 83 B/s Normal 79 System (4) C:\Windows 83 B/s 83 B/s Normal 0 svchost.exe (940) C:\Program Files\Windows Mail 83 B/s 83 B/s Very Low 13 svchost.exe (940) C:\Windows\SysWOW64\en-US 81 B/s 81 B/s Very Low 15 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail 81 B/s 81 B/s Very Low 21 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 81 B/s 81 B/s Very Low 12 svchost.exe (940) C:\Users\Default\AppData\Roaming\Microsoft\Windows 81 B/s 81 B/s Very Low 14 svchost.exe (940) C:\ProgramData\GlassWire\service\stats 81 B/s 81 B/s Very Low 11 ProcessHacker.exe (2448) C:\Windows\System32\oleaccrc.dll 80 B/s 80 B/s Normal 13 svchost.exe (692) C:\Windows\inf\scrawpdo.PNF 80 B/s 80 B/s Normal 14 ProcessHacker.exe (2448) C:\Users\Ministeerium\Documents\Processmon 80 B/s 80 B/s Normal 12 ProcessHacker.exe (2448) C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db 78 B/s 78 B/s Normal 3 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex 75 B/s 75 B/s Very Low 25 svchost.exe (940) C:\ProgramData\Microsoft\Search\Data\Applications\Windows 75 B/s 75 B/s Very Low 29 svchost.exe (940) C:\Program Files\Windows Journal 75 B/s 75 B/s Very Low 14 svchost.exe (940) C:\Windows\System32\Speech\SpeechUX\en-US 74 B/s 74 B/s Very Low 46 svchost.exe (940) C:\Windows\System32\migwiz 74 B/s 74 B/s Very Low 0 svchost.exe (940) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows\WER\ReportQueue 74 B/s 74 B/s Very Low 37 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasdlta.vdm 74 B/s 74 B/s Very Low 27 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85B0338C-6A66-44C6-A217-8853163F0665}\mpasbase.vdm 74 B/s 74 B/s Very Low 0 svchost.exe (940) C:\Program Files\DVD Maker 74 B/s 74 B/s Very Low 27 svchost.exe (940) C:\Windows\winsxs\Manifests 71 B/s 71 B/s Very Low 37 svchost.exe (940) C:\ProgramData\GlassWire\service 71 B/s 71 B/s Very Low 4 ProcessHacker.exe (2448) C:\Windows\System32\en-US\mpr.dll.mui 70 B/s 70 B/s Normal 30 ProcessHacker.exe (2448) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms 70 B/s 70 B/s Normal 12 svchost.exe (692) C:\Windows\System32\en-US\rascfg.dll.mui 52 B/s 52 B/s Normal 12 svchost.exe (692) C:\Windows\System32\en-US\comres.dll.mui 35 B/s 35 B/s Normal 16 svchost.exe (908) C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat 22 B/s 22 B/s Normal 0 ProcessHacker.exe (2448) C:\Users\Ministeerium\Links\Downloads.lnk 20 B/s 20 B/s Normal 60