Process Hacker 2.39.124 Windows NT 6.1 Service Pack 1 (64-bit) 22.03.2017 17:16:15 Name File Read rate average Write rate average Total rate average I/O priority Response time (ms) Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll 178,29 kB/s 178,29 kB/s Normal 144 sppsvc.exe (2128) C:\Windows\System32\sppsvc.exe 99,26 kB/s 99,26 kB/s Very Low 9 svchost.exe (2868) C:\Windows\System32\sppsvc.exe 81,25 kB/s 81,25 kB/s Very Low 21 Unknown process (2808) C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\fe6ac93181b40a571892e14bfb9d65f2\mscorlib.ni.dll 74,17 kB/s 74,17 kB/s Normal 156 svchost.exe (992) C:\Windows\System32\wuaueng.dll 47,1 kB/s 47,1 kB/s Very Low 14 svchost.exe (992) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log 34,59 kB/s 34,59 kB/s Very Low 17 sppsvc.exe (2128) C:\Windows\System32\sppobjs.dll 26,56 kB/s 26,56 kB/s Very Low 11 svchost.exe (992) C:\Windows\SoftwareDistribution\DataStore\DataStore.edb 19,89 kB/s 19,89 kB/s Very Low 8 Unknown process (2808) C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll 14,15 kB/s 14,15 kB/s Normal 203 explorer.exe (2016) C:\Program Files\Internet Explorer\ieproxy.dll 12,72 kB/s 12,72 kB/s Normal 5 svchost.exe (992) C:\Windows\System32\qmgr.dll 11,88 kB/s 11,88 kB/s Normal 23 Unknown process (704) C:\Windows\SysWOW64 11,16 kB/s 11,16 kB/s Normal 46 sppsvc.exe (2128) C:\Windows\System32\sppwinob.dll 10,62 kB/s 10,62 kB/s Very Low 28 System (4) C:\Windows\System32\drivers\spsys.sys 10,47 kB/s 10,47 kB/s Normal 7 svchost.exe (992) C:\Windows\System32\esent.dll 7,62 kB/s 7,62 kB/s Very Low 11 Unknown process (704) C:\$Mft 7,16 kB/s 7,16 kB/s Normal 23 svchost.exe (908) C:\Windows\System32\wuapi.dll 7,05 kB/s 7,05 kB/s Normal 3 svchost.exe (908) C:\Windows\System32\dbghelp.dll 6,32 kB/s 6,32 kB/s Normal 12 svchost.exe (992) C:\Windows\System32\upnp.dll 6,34 kB/s 6,34 kB/s Normal 26 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll 6,06 kB/s 6,06 kB/s Normal 114 ProcessHacker.exe (2448) C:\Windows\System32\sppsvc.exe 4,92 kB/s 4,92 kB/s Very Low 1 WmiPrvSE.exe (2088) C:\Windows\System32\msdtcprx.dll 4,36 kB/s 4,36 kB/s Normal 6 System (4) C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat 4,58 kB/s 4,58 kB/s Normal 89 svchost.exe (1248) C:\Windows\System32\ssdpsrv.dll 4,43 kB/s 4,43 kB/s Normal 3 services.exe (556) C:\Windows\System32\ubpm.dll 3,2 kB/s 3,2 kB/s Normal 14 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 3,1 kB/s 1 kB/s 4,1 kB/s Normal 16 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v4.0.30319 3,9 kB/s 3,9 kB/s Normal 33 Unknown process (704) C:\Windows\Microsoft.NET\Framework\v4.0.30319 3,72 kB/s 3,72 kB/s Normal 25 mscorsvw.exe (2808) C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf 3,49 kB/s 3,49 kB/s Normal 14 System (4) C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf 3,3 kB/s 3,3 kB/s Normal 2 System (4) C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf 3,14 kB/s 3,14 kB/s Normal 1 System (4) C:\Windows\System32\winevt\Logs\Security.evtx 2,91 kB/s 2,91 kB/s Normal 0 explorer.exe (2016) C:\Windows\System32\werconcpl.dll 3,01 kB/s 3,01 kB/s Normal 4 ProcessHacker.exe (2448) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 2,99 kB/s 2,99 kB/s Very Low 306 explorer.exe (2016) C:\Windows\System32\wscinterop.dll 2,99 kB/s 2,99 kB/s Normal 0 explorer.exe (2016) C:\Windows\System32\wscui.cpl 2,96 kB/s 2,96 kB/s Normal 28 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx 2,75 kB/s 2,75 kB/s Normal 1 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb 2,67 kB/s 2,67 kB/s Normal 13 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7C 2,8 kB/s 2,8 kB/s Very Low 8 System (4) C:\$Mft 341 B/s 2,27 kB/s 2,6 kB/s Normal 5 sppsvc.exe (2128) C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat 2,38 kB/s 2,38 kB/s Very Low 23 System (4) C:\$LogFile 2 kB/s 2 kB/s Normal 11 svchost.exe (908) C:\Windows\System32\wscsvc.dll 2,32 kB/s 2,32 kB/s Very Low 27 sppsvc.exe (2128) C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf 2,29 kB/s 2,29 kB/s Normal 9 Unknown process (704) C:\Windows\assembly\GAC_MSIL 2,23 kB/s 2,23 kB/s Normal 1 System (4) C:\Windows\SoftwareDistribution\DataStore\DataStore.edb 442 B/s 1,73 kB/s 2,16 kB/s Normal 1 ProcessHacker.exe (2448) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 2,17 kB/s 2,17 kB/s Very Low 194 System (4) C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf 2,1 kB/s 2,1 kB/s Normal 2 svchost.exe (2868) C:\Windows\System32\drivers\spsys.sys 2,06 kB/s 2,06 kB/s Very Low 26 Unknown process (704) C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf 1,92 kB/s 1,92 kB/s Normal 19 Unknown process (704) C:\Windows\SysWOW64\QUTIL.DLL 1,89 kB/s 1,89 kB/s Normal 97 Unknown process (704) C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll 1,81 kB/s 1,81 kB/s Normal 310 Unknown process (704) C:\Windows\assembly\GAC_MSIL\napinit\6.1.0.0__31bf3856ad364e35\NAPINIT.DLL 1,81 kB/s 1,81 kB/s Normal 120 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll 1,8 kB/s 1,8 kB/s Normal 133 svchost.exe (1104) C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 1,68 kB/s 1,68 kB/s Normal 74 System (4) C:\Windows\System32\winevt\Logs\System.evtx 1,2 kB/s 1,2 kB/s Normal 1 WmiPrvSE.exe (2088) C:\Windows\System32\tquery.dll 1,45 kB/s 1,45 kB/s Normal 15 Unknown process (2808) C:\Windows\assembly\NativeImages_v2.0.50727_64 1,56 kB/s 1,56 kB/s Normal 35 explorer.exe (2016) C:\Windows\System32\wercplsupport.dll 1,57 kB/s 1,57 kB/s Normal 6 mscorsvw.exe (2808) C:\$Mft 1,52 kB/s 1,52 kB/s Normal 11 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx 1,51 kB/s 1,51 kB/s Normal 10 WmiPrvSE.exe (2088) C:\Windows\System32\mtxclu.dll 1,39 kB/s 1,39 kB/s Normal 10 svchost.exe (908) C:\Windows\System32\cabinet.dll 1,42 kB/s 1,42 kB/s Normal 3 svchost.exe (2868) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.80 1,53 kB/s 1,53 kB/s Very Low 10 svchost.exe (992) C:\$LogFile 1,41 kB/s 1,41 kB/s Normal 8 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx 1,42 kB/s 1,42 kB/s Normal 1 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4WHC.evtx 1,42 kB/s 1,42 kB/s Normal 1 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx 1,42 kB/s 1,42 kB/s Normal 1 svchost.exe (992) C:\Windows\System32\bitsigd.dll 1,3 kB/s 1,3 kB/s Normal 6 explorer.exe (2016) C:\Windows\System32\en-US\wscui.cpl.mui 1,25 kB/s 1,25 kB/s Normal 15 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs 682 B/s 682 B/s Normal 29 svchost.exe (992) C:\Windows\System32\mspatcha.dll 1,22 kB/s 1,22 kB/s Normal 23 Unknown process (704) C:\Windows\assembly\NativeImages_v2.0.50727_32 1,12 kB/s 1,12 kB/s Normal 19 svchost.exe (940) C:\Windows\System32\wpdbusenum.dll 1,1 kB/s 1,1 kB/s Normal 34 Unknown process (704) C:\Windows\SysWOW64\mscoree.dll 1,09 kB/s 1,09 kB/s Normal 47 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log 1,08 kB/s 1,08 kB/s Normal 0 svchost.exe (992) C:\Windows\WindowsUpdate.log 26 B/s 1,05 kB/s 1,08 kB/s Very Low 3 System (4) C:\Windows\Prefetch 819 B/s 819 B/s Normal 45 svchost.exe (992) C:\Windows\System32\wups2.dll 1,01 kB/s 1,01 kB/s Normal 27 services.exe (556) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 1 kB/s 1 kB/s Normal 5 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v2.0.50727 999 B/s 999 B/s Normal 46 Unknown process (2808) C:\Program Files (x86)\TinyWall\cs\TinyWall.resources.dll 999 B/s 999 B/s Normal 86 svchost.exe (908) C:\Windows\System32\wups.dll 984 B/s 984 B/s Normal 2 Unknown process (2808) C:\Windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\067043f048af81f24f63e378a754772e\AuditPolicyGPManagedStubs.Interop.ni.dll 911 B/s 911 B/s Normal 41 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx 887 B/s 887 B/s Normal 2 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoree.tlb 774 B/s 774 B/s Normal 206 explorer.exe (2016) C:\Windows\System32\wer.dll 728 B/s 728 B/s Normal 10 explorer.exe (2016) C:\Windows\System32\hcproviders.dll 728 B/s 728 B/s Normal 4 Unknown process (704) C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0483c93466914f3fbd5b44454b0c8a98\Accessibility.ni.dll 707 B/s 707 B/s Normal 93 sppsvc.exe (2128) C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 700 B/s 700 B/s Very Low 84 sppsvc.exe (2128) C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 700 B/s 700 B/s Very Low 39 System (4) C:\$BitMap 750 B/s 750 B/s Normal 1 Unknown process (2808) C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll 599 B/s 599 B/s Normal 104 services.exe (556) C:\Windows\System32\sppsvc.exe 550 B/s 550 B/s Normal 20 services.exe (556) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 548 B/s 548 B/s Normal 5 svchost.exe (2868) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 547 B/s 547 B/s Very Low 309 System (4) C:\Windows\Microsoft.NET\Framework\v4.0.30319 409 B/s 409 B/s Normal 89 System (4) C:\Windows\Microsoft.NET\Framework64\v4.0.30319 409 B/s 409 B/s Normal 90 System (4) C:\Windows\Microsoft.NET\Framework64 409 B/s 409 B/s Normal 1 System (4) C:\Windows\Microsoft.NET\Framework 409 B/s 409 B/s Normal 89 Unknown process (704) C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\664b5d4e3a1e23bfa586206f5534ab7b\Microsoft.VisualC.ni.dll 536 B/s 536 B/s Normal 49 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 524 B/s 524 B/s Normal 2 sppsvc.exe (2128) C:\$Mft 512 B/s 512 B/s Very Low 114 svchost.exe (992) C:\Windows\System32\wbem\Repository\OBJECTS.DATA 546 B/s 546 B/s Normal 4 System (4) C:\System Volume Information\{24d2b399-0f09-11e7-a150-0021ccbbdb18}{3808876b-c176-4e48-b7ae-04046e6cc752} 546 B/s 546 B/s Normal 1 Unknown process (704) C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll 487 B/s 487 B/s Normal 127 svchost.exe (908) C:\Windows\System32\qmgr.dll 473 B/s 473 B/s Normal 22 sppsvc.exe (2128) C:\Windows\System32\en-US\sppsvc.exe.mui 473 B/s 473 B/s Normal 4 explorer.exe (2016) C:\Windows\System32\en-US\ActionCenter.dll.mui 432 B/s 432 B/s Normal 19 sppsvc.exe (2128) C:\Windows\System32\taskschd.dll 415 B/s 415 B/s Very Low 72 Unknown process (704) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 414 B/s 414 B/s Normal 12 Unknown process (704) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail\Stationery 381 B/s 381 B/s Normal 29 svchost.exe (992) C:\$Mft 381 B/s 381 B/s Very Low 36 svchost.exe (908) C:\$LogFile 409 B/s 409 B/s Normal 0 svchost.exe (908) C:\Windows\System32\wu.upgrade.ps.dll 367 B/s 367 B/s Normal 3 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx 361 B/s 361 B/s Normal 2 System (4) C:\Windows\System32\winevt\Logs\Application.evtx 341 B/s 341 B/s Normal 11 explorer.exe (2016) C:\Windows\System32\ActionCenter.dll 318 B/s 318 B/s Normal 20 svchost.exe (908) C:\$Mft 315 B/s 315 B/s Normal 6 sppsvc.exe (2128) C:\Windows\System32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms 309 B/s 309 B/s Very Low 28 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 204 B/s 102 B/s 306 B/s Normal 3 Unknown process (2808) C:\Windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll 299 B/s 299 B/s Normal 92 Unknown process (704) C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll 292 B/s 292 B/s Normal 179 Unknown process (704) C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll 292 B/s 292 B/s Normal 137 Unknown process (704) C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll 292 B/s 292 B/s Normal 205 Unknown process (704) C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll 292 B/s 292 B/s Normal 186 Unknown process (704) C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll 292 B/s 292 B/s Normal 138 Unknown process (704) C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll 292 B/s 292 B/s Normal 132 Unknown process (704) C:\Windows\assembly\GAC_32 285 B/s 285 B/s Normal 12 Unknown process (2808) C:\Windows\System32\l_intl.nls 249 B/s 249 B/s Normal 63 svchost.exe (992) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.chk 221 B/s 221 B/s Very Low 74 Unknown process (704) C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\BDATunePIA.dll 219 B/s 219 B/s Normal 95 System (4) C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d} 215 B/s 215 B/s Normal 1 svchost.exe (992) C:\Windows\SoftwareDistribution\DataStore\Logs 215 B/s 215 B/s Very Low 41 WmiPrvSE.exe (2088) C:\Windows\System32\msdtcuiu.dll 186 B/s 186 B/s Normal 70 sppsvc.exe (2128) C:\Windows\System32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms 196 B/s 196 B/s Very Low 57 Unknown process (704) C:\Windows\winsxs 190 B/s 190 B/s Normal 12 System (4) C:\Windows\System32\winevt\Logs 204 B/s 204 B/s Normal 11 Unknown process (704) C:\Windows\Microsoft.NET 190 B/s 190 B/s Normal 29 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent 204 B/s 204 B/s Normal 12 explorer.exe (2016) C:\$Mft 204 B/s 204 B/s Normal 21 System (4) C:\$Extend\$UsnJrnl:$J 204 B/s 204 B/s Normal 6 System (4) C:\Windows\Temp 68 B/s 68 B/s Normal 1 svchost.exe (992) C:\Windows\System32\wbem\Repository\INDEX.BTR 136 B/s 136 B/s Normal 7 System (4) C:\Windows 68 B/s 68 B/s Normal 1 Unknown process (2808) C:\Windows\assembly\GAC_64\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\AuditPolicyGPManagedStubs.Interop.dll 112 B/s 112 B/s Normal 57 Unknown process (704) C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\AuditPolicyGPManagedStubs.Interop.dll 109 B/s 109 B/s Normal 130 System (4) C:\Windows\System32\wdi 107 B/s 107 B/s Normal 1 Unknown process (2808) C:\Windows\System32\oleaut32.dll 99 B/s 99 B/s Normal 22 Unknown process (2808) C:\Windows\System32\msvcr120_clr0400.dll 99 B/s 99 B/s Normal 115 Unknown process (2808) C:\Windows\System32\mscoree.dll 99 B/s 99 B/s Normal 33 Unknown process (2808) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll 99 B/s 99 B/s Normal 224 Unknown process (2808) C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089 99 B/s 99 B/s Normal 14 Unknown process (2808) C:\Windows\assembly\GAC_64 99 B/s 99 B/s Normal 14 svchost.exe (992) C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat 99 B/s 99 B/s Normal 26 Unknown process (704) C:\Windows\SysWOW64\version.dll 97 B/s 97 B/s Normal 198 Unknown process (704) C:\Windows\SysWOW64\usp10.dll 97 B/s 97 B/s Normal 64 Unknown process (704) C:\Windows\SysWOW64\sspicli.dll 97 B/s 97 B/s Normal 26 Unknown process (704) C:\Windows\SysWOW64\shlwapi.dll 97 B/s 97 B/s Normal 119 Unknown process (704) C:\Windows\SysWOW64\sechost.dll 97 B/s 97 B/s Normal 181 Unknown process (704) C:\Windows\SysWOW64\rpcrt4.dll 97 B/s 97 B/s Normal 33 Unknown process (704) C:\Windows\SysWOW64\oleaut32.dll 97 B/s 97 B/s Normal 340 Unknown process (704) C:\Windows\SysWOW64\ole32.dll 97 B/s 97 B/s Normal 22 Unknown process (704) C:\Windows\SysWOW64\msvcrt.dll 97 B/s 97 B/s Normal 204 Unknown process (704) C:\Windows\SysWOW64\msvcr120_clr0400.dll 97 B/s 97 B/s Normal 114 Unknown process (704) C:\Windows\SysWOW64\msctf.dll 97 B/s 97 B/s Normal 41 Unknown process (704) C:\Windows\SysWOW64\lpk.dll 97 B/s 97 B/s Normal 76 Unknown process (704) C:\Windows\SysWOW64\KernelBase.dll 97 B/s 97 B/s Normal 19 Unknown process (704) C:\Windows\SysWOW64\cryptbase.dll 97 B/s 97 B/s Normal 30 Unknown process (704) C:\Windows\SysWOW64\advapi32.dll 97 B/s 97 B/s Normal 52 Unknown process (704) C:\Windows\System32\wow64win.dll 97 B/s 97 B/s Normal 45 Unknown process (704) C:\Windows\System32\wow64.dll 97 B/s 97 B/s Normal 16 Unknown process (704) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll 97 B/s 97 B/s Normal 70 Unknown process (704) C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089 95 B/s 95 B/s Normal 16 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx 91 B/s 91 B/s Normal 30 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4WHC.evtx 91 B/s 91 B/s Normal 8 svchost.exe (908) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx 91 B/s 91 B/s Normal 8 explorer.exe (2016) C:\Windows\System32\en-US\hcproviders.dll.mui 91 B/s 91 B/s Normal 17 System (4) C:\Windows\System32\wdi\LogFiles 68 B/s 68 B/s Normal 1 System (4) C:\Users\Ministeerium\Documents\Processmon 68 B/s 68 B/s Normal 1 System (4) C:\Users\Ministeerium\Documents 68 B/s 68 B/s Normal 18 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations 68 B/s 68 B/s Normal 18 System (4) C:\Users\Ministeerium\AppData\Roaming\Microsoft\Windows 68 B/s 68 B/s Normal 3 System (4) C:\$Extend\$ObjId 68 B/s 68 B/s Normal 18 Unknown process (704) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg 48 B/s 48 B/s Normal 318 svchost.exe (908) C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat 18 B/s 18 B/s Normal 138