Process Hacker 2.39.124 Windows NT 6.1 Service Pack 1 (64-bit) 22.03.2017 17:26:45 Name File Read rate average Write rate average Total rate average I/O priority Response time (ms) sppsvc.exe (3884) C:\Windows\System32\sppsvc.exe 103,64 kB/s 103,64 kB/s Very Low 11 ProcessHacker.exe (3408) C:\Windows\System32\shell32.dll 85 kB/s 85 kB/s Normal 19 svchost.exe (2640) C:\Windows\System32\sppsvc.exe 77 kB/s 77 kB/s Very Low 18 ProcessHacker.exe (3408) C:\Windows\System32\imageres.dll 64 kB/s 64 kB/s Normal 16 ProcessHacker.exe (3408) C:\Windows\System32\comdlg32.dll 56,75 kB/s 56,75 kB/s Normal 4 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.79 50 kB/s 50 kB/s Very Low 4 svchost.exe (1008) C:\Windows\System32\wuaueng.dll 49,65 kB/s 49,65 kB/s Very Low 15 ProcessHacker.exe (3408) C:\Windows\System32\ExplorerFrame.dll 46 kB/s 46 kB/s Normal 10 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.67 43,27 kB/s 43,27 kB/s Very Low 36 ProcessHacker.exe (3408) C:\Windows\System32\wpdshext.dll 39,67 kB/s 39,67 kB/s Normal 16 svchost.exe (1008) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log 36,57 kB/s 36,57 kB/s Very Low 16 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.80 33,67 kB/s 33,67 kB/s Very Low 13 ProcessHacker.exe (3408) C:\Windows\System32\EhStorAPI.dll 32,17 kB/s 32,17 kB/s Normal 9 sppsvc.exe (3884) C:\Windows\System32\sppobjs.dll 27,96 kB/s 27,96 kB/s Very Low 13 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7E 26,87 kB/s 26,87 kB/s Very Low 10 ProcessHacker.exe (3408) C:\Windows\Resources\Themes\Aero\Shell\NormalColor\shellstyle.dll 26,63 kB/s 26,63 kB/s Normal 6 ProcessHacker.exe (3408) C:\Windows\System32\ntlanman.dll 25,17 kB/s 25,17 kB/s Normal 2 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\7cce91036d83c5e7f6a2446dc1d01864\System.Windows.Forms.ni.dll 22,63 kB/s 22,63 kB/s Normal 7 ProcessHacker.exe (3408) C:\Windows\System32\davclnt.dll 21,17 kB/s 21,17 kB/s Normal 2 svchost.exe (1008) C:\Windows\SoftwareDistribution\DataStore\DataStore.edb 21,03 kB/s 21,03 kB/s Very Low 4 explorer.exe (1504) C:\Program Files\Internet Explorer\ieproxy.dll 19,08 kB/s 19,08 kB/s Normal 12 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\eace58a34b74dba2300b414a6dc637d2\PresentationCore.ni.dll 18,07 kB/s 18,07 kB/s Normal 8 System (4) C:\Users\Ministeerium\Pictures\ScreenShoots2017.3_\2017-03-22 17_26_11-Greenshot.png 17,07 kB/s 17,07 kB/s Normal 4 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatio5ae0f00f#\ab3791c3aeb97cd3264ac94ef58920fd\PresentationFramework.ni.dll 16,53 kB/s 16,53 kB/s Normal 15 System (4) C:\Windows\System32\sppsvc.exe 13,47 kB/s 13,47 kB/s Normal 1 Unknown process (3756) C:\Windows\SysWOW64 12,7 kB/s 12,7 kB/s Normal 30 ProcessHacker.exe (3408) C:\Windows\System32\en-US\comdlg32.dll.mui 12,5 kB/s 12,5 kB/s Normal 6 svchost.exe (1008) C:\Windows\System32\qmgr.dll 12,46 kB/s 12,46 kB/s Normal 22 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.7C 11,33 kB/s 11,33 kB/s Very Low 10 sppsvc.exe (3884) C:\Windows\System32\sppwinob.dll 10,89 kB/s 10,89 kB/s Very Low 34 System (4) C:\Windows\System32\drivers\spsys.sys 10,74 kB/s 10,74 kB/s Normal 2 ProcessHacker.exe (3408) C:\$Mft 8,8 kB/s 8,8 kB/s Normal 29 Unknown process (3756) C:\$Mft 10,24 kB/s 10,24 kB/s Normal 10 svchost.exe (1008) C:\Windows\System32\esent.dll 9,04 kB/s 9,04 kB/s Very Low 3 Unknown process (2736) C:\Windows\System32\wbem\cimwin32.dll 8,88 kB/s 8,88 kB/s Normal 3 ProcessHacker.exe (3408) C:\Windows\System32\davhlpr.dll 6,75 kB/s 6,75 kB/s Normal 11 ProcessHacker.exe (3408) C:\Windows\System32\drprov.dll 6,38 kB/s 6,38 kB/s Normal 8 ProcessHacker.exe (3408) C:\Windows\System32\SearchFolder.dll 6,4 kB/s 6,4 kB/s Normal 14 svchost.exe (920) C:\Windows\System32\wuapi.dll 7,43 kB/s 7,43 kB/s Normal 4 svchost.exe (2640) C:\Windows\System32\ieframe.dll 6,98 kB/s 6,98 kB/s Very Low 2 svchost.exe (1008) C:\Windows\System32\upnp.dll 6,65 kB/s 6,65 kB/s Normal 12 svchost.exe (920) C:\Windows\System32\dbghelp.dll 6,32 kB/s 6,32 kB/s Very Low 15 svchost.exe (2640) C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcp90.dll 6,1 kB/s 6,1 kB/s Very Low 3 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\System\6f584662f20f93c3e7519cf468ef3889\System.ni.dll 5,94 kB/s 5,94 kB/s Normal 10 ProcessHacker.exe (3408) C:\Windows\System32\en-US\oleaccrc.dll.mui 4,25 kB/s 4,25 kB/s Normal 16 System (4) C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf 5,09 kB/s 5,09 kB/s Normal 26 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\35a36d5faf5966eed2243f3d43f9f490\mscorlib.ni.dll 5,24 kB/s 5,24 kB/s Normal 10 System (4) C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat 4,82 kB/s 4,82 kB/s Normal 4 svchost.exe (1272) C:\Windows\System32\ssdpsrv.dll 4,65 kB/s 4,65 kB/s Normal 4 svchost.exe (2640) C:\Windows\System32\esent.dll 4,49 kB/s 4,49 kB/s Very Low 2 WmiPrvSE.exe (2224) C:\Windows\System32\msdtcprx.dll 4,36 kB/s 4,36 kB/s Normal 6 svchost.exe (2640) C:\Program Files\Windows Defender\MpClient.dll 4,43 kB/s 4,43 kB/s Very Low 1 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\35a36d5faf5966eed2243f3d43f9f490\mscorlib.ni.dll 4,35 kB/s 4,35 kB/s Normal 18 explorer.exe (1504) C:\Windows\System32\wscinterop.dll 4,3 kB/s 4,3 kB/s Normal 10 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 3,26 kB/s 1,05 kB/s 4,31 kB/s Normal 17 explorer.exe (1504) C:\Windows\System32\wscui.cpl 4,25 kB/s 4,25 kB/s Normal 5 svchost.exe (2640) C:\Windows\System32\dui70.dll 4,29 kB/s 4,29 kB/s Very Low 1 explorer.exe (1504) C:\Windows\System32\werconcpl.dll 4,23 kB/s 4,23 kB/s Normal 3 svchost.exe (2640) C:\Windows\System32\shell32.dll 4,21 kB/s 4,21 kB/s Very Low 1 svchost.exe (2640) C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcr90.dll 4,11 kB/s 4,11 kB/s Very Low 3 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx 4 kB/s 4 kB/s Normal 1 Unknown process (3816) C:\Windows\Microsoft.NET\Framework64\v4.0.30319 4 kB/s 4 kB/s Normal 33 svchost.exe (2640) C:\Windows\System32\wininet.dll 3,96 kB/s 3,96 kB/s Very Low 3 Unknown process (3756) C:\Windows\Microsoft.NET\Framework\v4.0.30319 3,9 kB/s 3,9 kB/s Normal 23 System (4) C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf 3,57 kB/s 3,57 kB/s Normal 3 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.87 3,58 kB/s 3,58 kB/s Very Low 7 svchost.exe (2640) C:\Windows\System32\ExplorerFrame.dll 3,49 kB/s 3,49 kB/s Very Low 2 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\8eb4ba98ad8c3e1bfdce7c0b03e941b9\WindowsBase.ni.dll 3,49 kB/s 3,49 kB/s Normal 11 Unknown process (3816) C:\Windows\Prefetch\MSCORSVW.EXE-98F0699A.pf 3,29 kB/s 3,29 kB/s Normal 15 System (4) C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf 3,11 kB/s 3,11 kB/s Normal 157 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatio5ae0f00f#\ab3791c3aeb97cd3264ac94ef58920fd\PresentationFramework.ni.dll 3,06 kB/s 3,06 kB/s Normal 25 svchost.exe (2640) C:\Windows\System32\WindowsCodecs.dll 3,01 kB/s 3,01 kB/s Very Low 2 System (4) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 2,96 kB/s 2,96 kB/s Normal 34 explorer.exe (1504) C:\Windows\System32\imageres.dll 2,91 kB/s 2,91 kB/s Normal 9 svchost.exe (2640) C:\Program Files\Common Files\System\Ole DB\oledb32.dll 2,91 kB/s 2,91 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\tquery.dll 2,85 kB/s 2,85 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\iertutil.dll 2,8 kB/s 2,8 kB/s Very Low 9 svchost.exe (2640) C:\Windows\System32\urlmon.dll 2,78 kB/s 2,78 kB/s Very Low 2 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb 2,74 kB/s 2,74 kB/s Normal 1 svchost.exe (2640) C:\Windows\System32\schedsvc.dll 2,76 kB/s 2,76 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\gameux.dll 2,63 kB/s 2,63 kB/s Very Low 2 ProcessHacker.exe (3408) C:\Users\Ministeerium\Documents\Processmon 2 kB/s 2 kB/s Normal 40 svchost.exe (2640) C:\Windows\System32\netcfgx.dll 2,52 kB/s 2,52 kB/s Very Low 1 svchost.exe (2640) C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll 2,5 kB/s 2,5 kB/s Very Low 2 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\fd7e7403eee6d82b2019f3c67205e62f\System.Drawing.ni.dll 2,47 kB/s 2,47 kB/s Normal 9 ProcessHacker.exe (3408) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 2,47 kB/s 2,47 kB/s Very Low 89 svchost.exe (1008) C:\Windows\System32\msxml3.dll 2,46 kB/s 2,46 kB/s Normal 5 sppsvc.exe (3884) C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat 2,44 kB/s 2,44 kB/s Very Low 16 WmiPrvSE.exe (2304) C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf 2,39 kB/s 2,39 kB/s Normal 40 svchost.exe (2640) C:\Windows\System32\NaturalLanguage6.dll 2,43 kB/s 2,43 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\SyncCenter.dll 2,41 kB/s 2,41 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\MPSSVC.dll 2,4 kB/s 2,4 kB/s Very Low 6 svchost.exe (920) C:\Windows\System32\wscsvc.dll 2,38 kB/s 2,38 kB/s Normal 14 svchost.exe (2640) C:\Windows\System32\esteidcm64.dll 2,38 kB/s 2,38 kB/s Very Low 4 Unknown process (3756) C:\Windows\assembly\GAC_MSIL 2,34 kB/s 2,34 kB/s Normal 1 svchost.exe (2640) C:\Windows\System32\FntCache.dll 2,34 kB/s 2,34 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\FXSAPI.dll 2,32 kB/s 2,32 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\wbem\wbemcore.dll 2,32 kB/s 2,32 kB/s Very Low 2 sppsvc.exe (3884) C:\Windows\Prefetch\SPPSVC.EXE-CBE91656.pf 2,23 kB/s 2,23 kB/s Normal 24 System (4) C:\Windows\SoftwareDistribution\DataStore\DataStore.edb 455 B/s 1,78 kB/s 2,22 kB/s Normal 6 System (4) C:\$BitMap 2,24 kB/s 2,24 kB/s Normal 2 explorer.exe (1504) C:\Windows\System32\wercplsupport.dll 2,2 kB/s 2,2 kB/s Normal 4 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx 2,19 kB/s 2,19 kB/s Normal 10 svchost.exe (2640) C:\Windows\System32\pnidui.dll 2,22 kB/s 2,22 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\msdart.dll 2,18 kB/s 2,18 kB/s Very Low 6 svchost.exe (2640) C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23688_none_145d575e8b8eb5b3\GdiPlus.dll 2,17 kB/s 2,17 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\duser.dll 2,17 kB/s 2,17 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\authui.dll 2,17 kB/s 2,17 kB/s Very Low 2 svchost.exe (2640) C:\Program Files\Windows Defender\MpSvc.dll 2,14 kB/s 2,14 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\drivers\spsys.sys 2,12 kB/s 2,12 kB/s Very Low 42 svchost.exe (2640) C:\Windows\System32\imapi2.dll 2,12 kB/s 2,12 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\msftedit.dll 2,11 kB/s 2,11 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\perftrack.dll 2,1 kB/s 2,1 kB/s Very Low 2 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx 2,06 kB/s 2,06 kB/s Normal 1 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4WHC.evtx 2,06 kB/s 2,06 kB/s Normal 1 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx 2,06 kB/s 2,06 kB/s Normal 1 System (4) C:\$LogFile 2,13 kB/s 2,13 kB/s Normal 8 svchost.exe (2640) C:\Windows\System32\SearchFolder.dll 2,08 kB/s 2,08 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\ncsi.dll 2,07 kB/s 2,07 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\netshell.dll 2,1 kB/s 2,1 kB/s Very Low 5 svchost.exe (2640) C:\Windows\System32\bcryptprimitives.dll 2,06 kB/s 2,06 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\QAGENT.DLL 2,04 kB/s 2,04 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\DXP.dll 2,02 kB/s 2,02 kB/s Very Low 7 svchost.exe (2640) C:\Windows\System32\cscui.dll 2,02 kB/s 2,02 kB/s Very Low 1 Unknown process (3756) C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf 2,01 kB/s 2,01 kB/s Normal 16 svchost.exe (2640) C:\Windows\System32\srchadmin.dll 1,98 kB/s 1,98 kB/s Very Low 2 System (4) C:\Windows\Prefetch\MSCORSVW.EXE-FAA88858.pf 1,95 kB/s 1,95 kB/s Normal 1 Unknown process (3756) C:\Windows\SysWOW64\QUTIL.DLL 1,94 kB/s 1,94 kB/s Normal 46 svchost.exe (2640) C:\Windows\System32\bthprops.cpl 1,92 kB/s 1,92 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\diagtrack.dll 1,92 kB/s 1,92 kB/s Very Low 2 Unknown process (3756) C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll 1,9 kB/s 1,9 kB/s Normal 352 GfxUI.exe (216) C:\Windows\Fonts\framd.ttf 1,9 kB/s 1,9 kB/s Normal 5 svchost.exe (2640) C:\Windows\System32\wdmaud.drv 1,87 kB/s 1,87 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\WWanAPI.dll 1,87 kB/s 1,87 kB/s Very Low 1 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\napinit\6.1.0.0__31bf3856ad364e35\NAPINIT.DLL 1,85 kB/s 1,85 kB/s Normal 70 svchost.exe (2640) C:\Windows\System32\scksp.dll 1,79 kB/s 1,79 kB/s Very Low 2 explorer.exe (1504) C:\Windows\System32\en-US\wscui.cpl.mui 1,77 kB/s 1,77 kB/s Normal 6 svchost.exe (2640) C:\Windows\System32\StructuredQuery.dll 1,74 kB/s 1,74 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\NlsData0009.dll 1,73 kB/s 1,73 kB/s Very Low 3 svchost.exe (1116) C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb 1,68 kB/s 1,68 kB/s Normal 14 svchost.exe (2640) C:\Windows\System32\sysmain.dll 1,71 kB/s 1,71 kB/s Very Low 5 svchost.exe (2640) C:\Windows\System32\ntshrui.dll 1,67 kB/s 1,67 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\webio.dll 1,67 kB/s 1,67 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\tdh.dll 1,64 kB/s 1,64 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\diagperf.dll 1,63 kB/s 1,63 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\BFE.DLL 1,63 kB/s 1,63 kB/s Very Low 2 Unknown process (3816) C:\Windows\assembly\NativeImages_v2.0.50727_64 1,6 kB/s 1,6 kB/s Normal 37 svchost.exe (2640) C:\Windows\System32\stobject.dll 1,6 kB/s 1,6 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\NlsData0000.dll 1,58 kB/s 1,58 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\gpsvc.dll 1,58 kB/s 1,58 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wbem\esscli.dll 1,58 kB/s 1,58 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\ActionCenter.dll 1,53 kB/s 1,53 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\hgcpl.dll 1,52 kB/s 1,52 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\SCardSvr.dll 1,51 kB/s 1,51 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\SndVolSSO.dll 1,5 kB/s 1,5 kB/s Very Low 10 svchost.exe (2640) C:\Windows\System32\actxprxy.dll 1,5 kB/s 1,5 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\taskcomp.dll 1,49 kB/s 1,49 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\wbem\WmiPrvSD.dll 1,48 kB/s 1,48 kB/s Very Low 2 svchost.exe (1008) C:\Windows\System32\cabinet.dll 1,46 kB/s 1,46 kB/s Normal 14 svchost.exe (2640) C:\Windows\System32\winmm.dll 1,46 kB/s 1,46 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\PortableDeviceApi.dll 1,47 kB/s 1,47 kB/s Very Low 2 WmiPrvSE.exe (2224) C:\Windows\System32\mtxclu.dll 1,39 kB/s 1,39 kB/s Normal 10 svchost.exe (2640) C:\Windows\System32\QUTIL.DLL 1,41 kB/s 1,41 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\dnsrslvr.dll 1,42 kB/s 1,42 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\timedate.cpl 1,41 kB/s 1,41 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\cryptui.dll 1,41 kB/s 1,41 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\srvsvc.dll 1,41 kB/s 1,41 kB/s Very Low 13 svchost.exe (2640) C:\Windows\System32\fveapi.dll 1,4 kB/s 1,4 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\winspool.drv 1,39 kB/s 1,39 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\nlasvc.dll 1,39 kB/s 1,39 kB/s Very Low 2 svchost.exe (1008) C:\Windows\System32\bitsigd.dll 1,37 kB/s 1,37 kB/s Normal 4 System (4) C:\$Mft 68 B/s 2 kB/s 2,07 kB/s Normal 5 svchost.exe (2640) C:\Windows\System32\prnfldr.dll 1,36 kB/s 1,36 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\bcrypt.dll 1,35 kB/s 1,35 kB/s Very Low 1 svchost.exe (1008) C:\$LogFile 1,33 kB/s 1,33 kB/s Normal 0 svchost.exe (2640) C:\Windows\System32\provsvc.dll 1,32 kB/s 1,32 kB/s Very Low 12 svchost.exe (2640) C:\Windows\System32\wkssvc.dll 1,31 kB/s 1,31 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\netman.dll 1,33 kB/s 1,33 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\hnetcfg.dll 1,31 kB/s 1,31 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\cryptsvc.dll 1,28 kB/s 1,28 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\wbem\WMIsvc.dll 1,28 kB/s 1,28 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\EhStorShell.dll 1,28 kB/s 1,28 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\uxtheme.dll 1,27 kB/s 1,27 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\winhttp.dll 1,26 kB/s 1,26 kB/s Very Low 2 svchost.exe (1008) C:\Windows\System32\mspatcha.dll 1,25 kB/s 1,25 kB/s Normal 27 GfxUI.exe (216) C:\Windows\System32\igfxdev.dll 1,25 kB/s 1,25 kB/s Normal 7 svchost.exe (2640) C:\Windows\System32\UIAnimation.dll 1,24 kB/s 1,24 kB/s Very Low 5 svchost.exe (2640) C:\Windows\System32\FXSST.dll 1,23 kB/s 1,23 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\netprofm.dll 1,24 kB/s 1,24 kB/s Very Low 6 svchost.exe (2640) C:\Windows\System32\sxs.dll 1,22 kB/s 1,22 kB/s Very Low 8 svchost.exe (2640) C:\Windows\System32\iphlpsvc.dll 1,21 kB/s 1,21 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\dps.dll 1,21 kB/s 1,21 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\ncrypt.dll 1,21 kB/s 1,21 kB/s Very Low 2 GfxUI.exe (216) C:\Windows\System32\msctf.dll 1,21 kB/s 1,21 kB/s Normal 11 svchost.exe (2640) C:\Windows\System32\rasdlg.dll 1,21 kB/s 1,21 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\vssapi.dll 1,19 kB/s 1,19 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\PortableDeviceTypes.dll 1,18 kB/s 1,18 kB/s Very Low 3 Unknown process (3756) C:\Windows\assembly\NativeImages_v2.0.50727_32 1,17 kB/s 1,17 kB/s Normal 36 svchost.exe (952) C:\Windows\System32\wpdbusenum.dll 1,16 kB/s 1,16 kB/s Normal 6 svchost.exe (2640) C:\Windows\System32\thumbcache.dll 1,15 kB/s 1,15 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wevtapi.dll 1,17 kB/s 1,17 kB/s Very Low 2 ProcessHacker.exe (3408) C:\Windows\System32\en-US\mpr.dll.mui 896 B/s 896 B/s Normal 19 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\System\6f584662f20f93c3e7519cf468ef3889\System.ni.dll 1,14 kB/s 1,14 kB/s Normal 22 svchost.exe (2640) C:\Windows\System32\wbem\repdrvfs.dll 1,14 kB/s 1,14 kB/s Very Low 2 svchost.exe (1008) C:\Windows\WindowsUpdate.log 14 B/s 1,11 kB/s 1,12 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\nci.dll 1,13 kB/s 1,13 kB/s Very Low 1 svchost.exe (2640) C:\Windows\System32\wdscore.dll 1,13 kB/s 1,13 kB/s Very Low 92 Unknown process (3756) C:\Windows\SysWOW64\mscoree.dll 1,12 kB/s 1,12 kB/s Normal 47 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log 1,11 kB/s 1,11 kB/s Normal 0 svchost.exe (2640) C:\Windows\System32\clusapi.dll 1,11 kB/s 1,11 kB/s Very Low 15 svchost.exe (2640) C:\Windows\System32\imagehlp.dll 1,1 kB/s 1,1 kB/s Very Low 2 svchost.exe (2640) C:\Windows\System32\profsvc.dll 1,11 kB/s 1,11 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\wbem\wbemess.dll 1,11 kB/s 1,11 kB/s Very Low 2 svchost.exe (1008) C:\Windows\System32\wups2.dll 1,07 kB/s 1,07 kB/s Normal 43 svchost.exe (2640) C:\Windows\System32\shsvcs.dll 1,07 kB/s 1,07 kB/s Very Low 10 svchost.exe (2640) C:\Windows\System32\mprapi.dll 1,07 kB/s 1,07 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\es.dll 1,07 kB/s 1,07 kB/s Very Low 3 services.exe (572) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 1,05 kB/s 1,05 kB/s Normal 5 svchost.exe (2640) C:\Windows\System32\msls31.dll 1,04 kB/s 1,04 kB/s Very Low 4 Unknown process (3816) C:\Program Files (x86)\TinyWall\cs\TinyWall.resources.dll 1,03 kB/s 1,03 kB/s Normal 60 svchost.exe (2640) C:\Windows\System32\cscobj.dll 1,05 kB/s 1,05 kB/s Very Low 2 svchost.exe (920) C:\Windows\System32\wups.dll 1,01 kB/s 1,01 kB/s Normal 5 explorer.exe (1504) C:\Windows\System32\wer.dll 1 kB/s 1 kB/s Normal 10 explorer.exe (1504) C:\Windows\System32\hcproviders.dll 1 kB/s 1 kB/s Normal 4 svchost.exe (2640) C:\Windows\System32\ubpm.dll 1,01 kB/s 1,01 kB/s Very Low 2 Unknown process (3816) C:\Windows\Microsoft.NET\Framework64\v2.0.50727 1 kB/s 1 kB/s Normal 48 svchost.exe (2640) C:\Windows\System32\shacct.dll 1 kB/s 1 kB/s Very Low 3 svchost.exe (2640) C:\Windows\System32\WinSCard.dll 0,99 kB/s 0,99 kB/s Very Low 17 System (4) C:\Windows\SoftwareDistribution\DataStore\Logs 819 B/s 819 B/s Normal 31 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\8eb4ba98ad8c3e1bfdce7c0b03e941b9\WindowsBase.ni.dll 992 B/s 992 B/s Normal 47 svchost.exe (2640) C:\Windows\System32\wlanapi.dll 989 B/s 989 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\networkexplorer.dll 991 B/s 991 B/s Very Low 2 GfxUI.exe (216) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll 986 B/s 986 B/s Normal 16 svchost.exe (2640) C:\Windows\System32\aelupsvc.dll 975 B/s 975 B/s Very Low 3 Greenshot.exe (2068) C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23688_none_145d575e8b8eb5b3\GdiPlus.dll 963 B/s 963 B/s Normal 11 Greenshot.exe (2068) C:\Windows\System32\gdi32.dll 963 B/s 963 B/s Normal 12 svchost.exe (2640) C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 968 B/s 968 B/s Very Low 2 Unknown process (3816) C:\Windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\067043f048af81f24f63e378a754772e\AuditPolicyGPManagedStubs.Interop.ni.dll 958 B/s 958 B/s Normal 15 svchost.exe (2640) C:\Windows\System32\wer.dll 981 B/s 981 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\logoncli.dll 962 B/s 962 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\credui.dll 960 B/s 960 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\shdocvw.dll 949 B/s 949 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wbem\NCProv.dll 937 B/s 937 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\PortableDeviceConnectApi.dll 955 B/s 955 B/s Very Low 0 svchost.exe (2640) C:\Windows\System32\cryptdll.dll 937 B/s 937 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\samlib.dll 934 B/s 934 B/s Very Low 1 svchost.exe (2640) C:\Windows\System32\sqmapi.dll 932 B/s 932 B/s Very Low 91 svchost.exe (2640) C:\Windows\System32\wscapi.dll 904 B/s 904 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\WPDShServiceObj.dll 901 B/s 901 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\xmllite.dll 900 B/s 900 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\trkwks.dll 904 B/s 904 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\browser.dll 879 B/s 879 B/s Very Low 1 svchost.exe (2640) C:\Windows\System32\rasapi32.dll 878 B/s 878 B/s Very Low 2 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx 887 B/s 887 B/s Normal 1 svchost.exe (1008) C:\Windows\System32\wbem\Repository\OBJECTS.DATA 862 B/s 862 B/s Normal 19 svchost.exe (2640) C:\Windows\System32\appinfo.dll 859 B/s 859 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\resutils.dll 850 B/s 850 B/s Very Low 14 svchost.exe (1008) C:\Windows\System32\winhttp.dll 840 B/s 840 B/s Normal 50 svchost.exe (2640) C:\Windows\System32\vsstrace.dll 844 B/s 844 B/s Very Low 0 svchost.exe (2640) C:\Windows\System32\wersvc.dll 833 B/s 833 B/s Very Low 9 svchost.exe (2640) C:\Windows\System32\cryptnet.dll 836 B/s 836 B/s Very Low 2 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\508999f3ca8f70e7989b05af313e0470\System.Xaml.ni.dll 834 B/s 834 B/s Normal 5 svchost.exe (2640) C:\Windows\System32\wdi.dll 836 B/s 836 B/s Very Low 1 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 819 B/s 819 B/s Normal 1 svchost.exe (920) C:\$LogFile 819 B/s 819 B/s Normal 0 svchost.exe (2640) C:\Windows\System32\mmcss.dll 798 B/s 798 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\srvcli.dll 794 B/s 794 B/s Very Low 9 svchost.exe (2640) C:\Windows\System32\radardt.dll 793 B/s 793 B/s Very Low 1 svchost.exe (2640) C:\Windows\System32\dwmapi.dll 781 B/s 781 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\wpdbusenum.dll 793 B/s 793 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\certprop.dll 763 B/s 763 B/s Very Low 1 sppsvc.exe (3884) C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 739 B/s 739 B/s Very Low 105 sppsvc.exe (3884) C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 739 B/s 739 B/s Very Low 99 svchost.exe (1008) C:\Windows\System32\iertutil.dll 735 B/s 735 B/s Normal 7 Unknown process (3756) C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0483c93466914f3fbd5b44454b0c8a98\Accessibility.ni.dll 724 B/s 724 B/s Normal 53 svchost.exe (2640) C:\Windows\System32\mpr.dll 721 B/s 721 B/s Very Low 5 Unknown process (3816) C:\$Mft 716 B/s 716 B/s Normal 10 svchost.exe (2640) C:\Windows\System32\Syncreg.dll 712 B/s 712 B/s Very Low 6 svchost.exe (2640) C:\Windows\System32\AltTab.dll 712 B/s 712 B/s Very Low 1 svchost.exe (2640) C:\Windows\System32\netjoin.dll 715 B/s 715 B/s Very Low 4 svchost.exe (2640) C:\Windows\System32\batmeter.dll 697 B/s 697 B/s Very Low 4 svchost.exe (2640) C:\Windows\System32\nlaapi.dll 699 B/s 699 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wkscli.dll 670 B/s 670 B/s Very Low 1 svchost.exe (2640) C:\Windows\System32\ssdpapi.dll 669 B/s 669 B/s Very Low 5 System (4) C:\Windows\Microsoft.NET\Framework64\v4.0.30319 585 B/s 585 B/s Normal 17 System (4) C:\Windows\Microsoft.NET\Framework64 585 B/s 585 B/s Normal 1 svchost.exe (2640) C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-484C1FBC2240790DB4B97612CABF7FDA094933A1.bin.5B 668 B/s 668 B/s Very Low 12 svchost.exe (2640) C:\Windows\System32\msacm32.dll 656 B/s 656 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\ncobjapi.dll 649 B/s 649 B/s Very Low 2 explorer.exe (1504) C:\Windows\System32\en-US\ActionCenter.dll.mui 627 B/s 627 B/s Normal 41 svchost.exe (2640) C:\Windows\System32\Sens.dll 635 B/s 635 B/s Very Low 4 svchost.exe (2640) C:\Windows\System32\netapi32.dll 626 B/s 626 B/s Very Low 6 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatio84a6349c#\454e2265c47c5198b8496e170b8aab52\PresentationFramework-SystemCore.ni.dll 623 B/s 623 B/s Normal 28 svchost.exe (2640) C:\Windows\System32\themeservice.dll 616 B/s 616 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wiarpc.dll 609 B/s 609 B/s Very Low 3 GfxUI.exe (216) C:\Windows\System32\icm32.dll 606 B/s 606 B/s Normal 15 svchost.exe (2640) C:\Windows\System32\cscapi.dll 606 B/s 606 B/s Very Low 1 GfxUI.exe (216) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationNative_v0400.dll 606 B/s 606 B/s Normal 13 Unknown process (3816) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll 577 B/s 577 B/s Normal 50 svchost.exe (2640) C:\Windows\System32\rasman.dll 580 B/s 580 B/s Very Low 1 services.exe (572) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 576 B/s 576 B/s Normal 3 svchost.exe (2640) C:\Windows\ehome\ehSSO.dll 567 B/s 567 B/s Very Low 3 services.exe (572) C:\Windows\System32\sppsvc.exe 564 B/s 564 B/s Normal 60 svchost.exe (2640) C:\Windows\System32\msacm32.drv 556 B/s 556 B/s Very Low 0 Unknown process (3816) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 551 B/s 551 B/s Normal 11 svchost.exe (2640) C:\Windows\System32\pnrpnsp.dll 555 B/s 555 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\wdiasqmmodule.dll 552 B/s 552 B/s Very Low 3 Unknown process (3756) C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\664b5d4e3a1e23bfa586206f5534ab7b\Microsoft.VisualC.ni.dll 549 B/s 549 B/s Normal 12 Unknown process (2736) C:\Windows\System32\framedynos.dll 540 B/s 540 B/s Normal 7 svchost.exe (2640) C:\Windows\System32\wwapi.dll 534 B/s 534 B/s Very Low 1 sppsvc.exe (3884) C:\$Mft 525 B/s 525 B/s Very Low 24 Unknown process (3756) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 524 B/s 524 B/s Normal 69 explorer.exe (1504) C:\$Mft 512 B/s 512 B/s Normal 24 Unknown process (3756) C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll 499 B/s 499 B/s Normal 37 System (4) C:\Windows\System32\winevt\Logs\Application.evtx 501 B/s 501 B/s Normal 16 svchost.exe (920) C:\Windows\System32\qmgr.dll 498 B/s 498 B/s Normal 49 svchost.exe (2640) C:\Windows\System32\powertracker.dll 503 B/s 503 B/s Very Low 2 System (4) C:\Windows\Microsoft.NET\Framework\v4.0.30319 455 B/s 455 B/s Normal 1 System (4) C:\Windows\Microsoft.NET\Framework 455 B/s 455 B/s Normal 1 Greenshot.exe (2068) C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\70ba671418b52f8f3fad72c849fdc40f\System.Core.ni.dll 496 B/s 496 B/s Normal 11 sppsvc.exe (3884) C:\Windows\System32\en-US\sppsvc.exe.mui 485 B/s 485 B/s Normal 11 svchost.exe (2640) C:\Windows\System32\Apphlpdm.dll 494 B/s 494 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\dsrole.dll 477 B/s 477 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\atl.dll 477 B/s 477 B/s Very Low 4 explorer.exe (1504) C:\Windows\System32\ActionCenter.dll 462 B/s 462 B/s Normal 20 svchost.exe (2640) C:\Windows\System32\samcli.dll 467 B/s 467 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\rtutils.dll 460 B/s 460 B/s Very Low 5 svchost.exe (2640) C:\Windows\System32\NapiNSP.dll 459 B/s 459 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\cscdll.dll 449 B/s 449 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\linkinfo.dll 448 B/s 448 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\midimap.dll 445 B/s 445 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\slc.dll 443 B/s 443 B/s Very Low 3 svchost.exe (2640) C:\Windows\System32\wfapigp.dll 433 B/s 433 B/s Very Low 9 svchost.exe (2640) C:\Windows\System32\nsisvc.dll 426 B/s 426 B/s Very Low 3 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 423 B/s 423 B/s Normal 22 GfxUI.exe (216) C:\Windows\System32\powrprof.dll 405 B/s 405 B/s Normal 9 Unknown process (3756) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail\Stationery 399 B/s 399 B/s Normal 29 svchost.exe (1008) C:\$Mft 399 B/s 399 B/s Very Low 15 svchost.exe (2640) C:\Windows\System32\npmproxy.dll 399 B/s 399 B/s Very Low 2 svchost.exe (2640) C:\Windows\System32\ktmw32.dll 397 B/s 397 B/s Very Low 2 svchost.exe (920) C:\Windows\System32\wu.upgrade.ps.dll 387 B/s 387 B/s Normal 1 svchost.exe (2640) C:\Windows\System32\sysntfy.dll 390 B/s 390 B/s Very Low 2 WmiPrvSE.exe (2304) C:\Windows\System32\wbem 372 B/s 372 B/s Normal 12 WmiPrvSE.exe (2304) C:\$Mft 372 B/s 372 B/s Normal 9 Greenshot.exe (2068) C:\Windows\System32\ole32.dll 372 B/s 372 B/s Normal 13 Greenshot.exe (2068) C:\Users\Ministeerium\Pictures\ScreenShoots2017.3_ 372 B/s 372 B/s Normal 16 svchost.exe (2640) C:\Windows\System32\hid.dll 373 B/s 373 B/s Very Low 13 GfxUI.exe (216) C:\Windows\ServiceProfiles\LocalService\AppData\Local\~FontCache-System.dat 372 B/s 372 B/s Normal 12 GfxUI.exe (216) C:\$Mft 372 B/s 372 B/s Normal 12 Greenshot.exe (2068) C:\$Mft 361 B/s 361 B/s Normal 9 WmiPrvSE.exe (2304) C:\Windows\System32\wbem\stdprov.dll 349 B/s 349 B/s Normal 17 System (4) C:\Windows\System32\winevt\Logs 351 B/s 351 B/s Normal 1 svchost.exe (2640) C:\Windows\System32\fvecerts.dll 353 B/s 353 B/s Very Low 0 svchost.exe (2640) C:\Windows\System32\NlsLexicons0009.dll 349 B/s 349 B/s Very Low 6 svchost.exe (2640) C:\Windows\System32\winrnr.dll 347 B/s 347 B/s Very Low 5 svchost.exe (2640) C:\Windows\System32\tbs.dll 344 B/s 344 B/s Very Low 6 System (4) C:\Windows\System32\winevt\Logs\System.evtx 204 B/s 204 B/s Normal 1 ProcessHacker.exe (3408) C:\Users\Ministeerium\Links\Downloads.lnk 256 B/s 256 B/s Normal 14 svchost.exe (920) C:\$Mft 332 B/s 332 B/s Normal 17 System (4) C:\$Extend\$UsnJrnl:$J 204 B/s 204 B/s Normal 1 sppsvc.exe (3884) C:\Windows\System32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms 327 B/s 327 B/s Very Low 36 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx 215 B/s 107 B/s 322 B/s Normal 9 Unknown process (3816) C:\Windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll 315 B/s 315 B/s Normal 50 svchost.exe (2640) C:\Windows\System32\TSChannel.dll 310 B/s 310 B/s Very Low 3 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsForm0b574481#\c4a7dc9c12d8803442a79a565b42a76e\WindowsFormsIntegration.ni.dll 303 B/s 303 B/s Normal 15 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll 299 B/s 299 B/s Normal 108 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll 299 B/s 299 B/s Normal 193 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll 299 B/s 299 B/s Normal 143 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll 299 B/s 299 B/s Normal 115 Unknown process (3756) C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll 299 B/s 299 B/s Normal 63 Unknown process (3756) C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll 299 B/s 299 B/s Normal 77 Unknown process (3756) C:\Windows\assembly\GAC_32 299 B/s 299 B/s Normal 14 svchost.exe (2640) C:\Windows\System32\IconCodecService.dll 298 B/s 298 B/s Very Low 5 svchost.exe (2640) C:\Windows\System32\netutils.dll 291 B/s 291 B/s Very Low 23 svchost.exe (2640) C:\Windows\System32\api-ms-win-core-synch-l1-2-0.dll 285 B/s 285 B/s Very Low 9 System (4) C:\Windows\Prefetch 287 B/s 287 B/s Normal 1 svchost.exe (2640) C:\Program Files\Common Files\System\Ole DB\oledb32r.dll 279 B/s 279 B/s Very Low 0 svchost.exe (2640) C:\Windows\System32\rasadhlp.dll 277 B/s 277 B/s Very Low 2 WmiPrvSE.exe (2304) C:\Windows\System32\wbem\wmipcima.dll 256 B/s 256 B/s Normal 29 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx 261 B/s 261 B/s Normal 0 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx 248 B/s 248 B/s Normal 1 svchost.exe (2640) C:\Windows\System32\sscore.dll 251 B/s 251 B/s Very Low 0 svchost.exe (2640) C:\Windows\System32\pnpts.dll 240 B/s 240 B/s Very Low 7 svchost.exe (2640) C:\Windows\System32\wlanutil.dll 238 B/s 238 B/s Very Low 7 svchost.exe (1008) C:\Windows\SoftwareDistribution\DataStore\Logs\edb.chk 227 B/s 227 B/s Very Low 47 svchost.exe (1008) C:\Windows\SoftwareDistribution\DataStore\Logs 227 B/s 227 B/s Very Low 51 Unknown process (3756) C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\BDATunePIA.dll 224 B/s 224 B/s Normal 42 System (4) C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d} 221 B/s 221 B/s Normal 2 svchost.exe (1008) C:\Windows\System32\wbem\Repository\INDEX.BTR 215 B/s 215 B/s Normal 28 sppsvc.exe (3884) C:\Windows\System32\spp\plugin-manifests-signed\sppwinob-spp-plugin-manifest-signed.xrm-ms 202 B/s 202 B/s Very Low 322 Unknown process (3756) C:\Windows\winsxs 199 B/s 199 B/s Normal 13 Unknown process (3756) C:\Windows\Microsoft.NET 199 B/s 199 B/s Normal 29 System (4) C:\Windows 199 B/s 199 B/s Normal 1 WmiPrvSE.exe (2304) C:\Windows\System32\wmi.dll 186 B/s 186 B/s Normal 27 WmiPrvSE.exe (2304) C:\Windows\System32\wbem\cimwin32.dll 186 B/s 186 B/s Normal 49 WmiPrvSE.exe (2224) C:\Windows\System32\msdtcuiu.dll 186 B/s 186 B/s Normal 49 WmiPrvSE.exe (2304) C:\Windows\System32\framedynos.dll 186 B/s 186 B/s Normal 44 WmiPrvSE.exe (2304) C:\Windows\System32\browcli.dll 186 B/s 186 B/s Normal 54 svchost.exe (2640) C:\Windows\System32\wmsgapi.dll 188 B/s 188 B/s Very Low 9 svchost.exe (2640) C:\Windows\System32\psapi.dll 177 B/s 177 B/s Very Low 5 svchost.exe (2640) C:\Windows\System32\dnsext.dll 157 B/s 157 B/s Very Low 0 System (4) C:\Windows\Temp 154 B/s 154 B/s Normal 41 svchost.exe (2640) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 141 B/s 141 B/s Very Low 9 System (4) C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx 138 B/s 138 B/s Normal 1 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx 132 B/s 132 B/s Normal 207 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4WHC.evtx 132 B/s 132 B/s Normal 8 svchost.exe (920) C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx 132 B/s 132 B/s Normal 9 System (4) C:\Users\Ministeerium\AppData\Local\Greenshot\Greenshot.log 132 B/s 132 B/s Normal 3 explorer.exe (1504) C:\Windows\System32\en-US\hcproviders.dll.mui 128 B/s 128 B/s Normal 17 svchost.exe (2640) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 119 B/s 119 B/s Very Low 57 Unknown process (3816) C:\Windows\assembly\GAC_64\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\AuditPolicyGPManagedStubs.Interop.dll 118 B/s 118 B/s Normal 49 Unknown process (3756) C:\Windows\assembly\GAC_32\AuditPolicyGPManagedStubs.Interop\6.1.0.0__31bf3856ad364e35\AuditPolicyGPManagedStubs.Interop.dll 112 B/s 112 B/s Normal 40 System (4) C:\Windows\System32\wdi\LogFiles 110 B/s 110 B/s Normal 1 System (4) C:\Windows\System32\wdi 110 B/s 110 B/s Normal 3 svchost.exe (2640) C:\Windows\System32\ksuser.dll 108 B/s 108 B/s Very Low 8 Unknown process (3816) C:\Windows\System32\msvcr120_clr0400.dll 105 B/s 105 B/s Normal 63 Unknown process (3816) C:\Windows\System32\mscoree.dll 105 B/s 105 B/s Normal 58 Unknown process (3816) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll 105 B/s 105 B/s Normal 130 svchost.exe (1008) C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat 105 B/s 105 B/s Normal 37 Unknown process (3756) C:\Windows\SysWOW64\usp10.dll 102 B/s 102 B/s Normal 280 Unknown process (3756) C:\Windows\SysWOW64\oleaut32.dll 102 B/s 102 B/s Normal 303 Unknown process (3756) C:\Windows\SysWOW64\ole32.dll 102 B/s 102 B/s Normal 316 Unknown process (3756) C:\Windows\SysWOW64\lpk.dll 102 B/s 102 B/s Normal 292 svchost.exe (2640) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 102 B/s 102 B/s Very Low 315 Unknown process (3816) C:\Windows\assembly\GAC_64 102 B/s 102 B/s Normal 19 Unknown process (3756) C:\Windows\SysWOW64\version.dll 99 B/s 99 B/s Normal 96 Unknown process (3756) C:\Windows\SysWOW64\sspicli.dll 99 B/s 99 B/s Normal 253 Unknown process (3756) C:\Windows\SysWOW64\shlwapi.dll 99 B/s 99 B/s Normal 83 Unknown process (3756) C:\Windows\SysWOW64\sechost.dll 99 B/s 99 B/s Normal 57 Unknown process (3756) C:\Windows\SysWOW64\rpcrt4.dll 99 B/s 99 B/s Normal 206 Unknown process (3756) C:\Windows\SysWOW64\msvcrt.dll 99 B/s 99 B/s Normal 102 Unknown process (3756) C:\Windows\SysWOW64\msvcr120_clr0400.dll 99 B/s 99 B/s Normal 67 Unknown process (3756) C:\Windows\SysWOW64\msctf.dll 99 B/s 99 B/s Normal 247 Unknown process (3756) C:\Windows\SysWOW64\KernelBase.dll 99 B/s 99 B/s Normal 214 Unknown process (3756) C:\Windows\SysWOW64\cryptbase.dll 99 B/s 99 B/s Normal 225 Unknown process (3756) C:\Windows\SysWOW64\advapi32.dll 99 B/s 99 B/s Normal 258 Unknown process (3756) C:\Windows\System32\wow64win.dll 99 B/s 99 B/s Normal 218 Unknown process (3756) C:\Windows\System32\wow64.dll 99 B/s 99 B/s Normal 209 System (4) C:\Windows\System32\LogFiles\WMI 99 B/s 99 B/s Normal 0 Unknown process (3756) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll 99 B/s 99 B/s Normal 265 Unknown process (3756) C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089 99 B/s 99 B/s Normal 16 System (4) C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log 99 B/s 99 B/s Normal 1 svchost.exe (1424) C:\ProgramData\Microsoft\Diagnosis\events11.rbs 91 B/s 91 B/s Normal 0 svchost.exe (1424) C:\ProgramData\Microsoft\Diagnosis\events10.rbs 91 B/s 91 B/s Normal 1 svchost.exe (1424) C:\ProgramData\Microsoft\Diagnosis\events01.rbs 91 B/s 91 B/s Normal 0 svchost.exe (1424) C:\ProgramData\Microsoft\Diagnosis\events00.rbs 91 B/s 91 B/s Normal 0 System (4) C:\Windows\System32\LogFiles\WMI\RtBackup 89 B/s 89 B/s Normal 2 svchost.exe (2640) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 76 B/s 76 B/s Very Low 0 System (4) C:\Windows\System32\config 74 B/s 74 B/s Normal 1 svchost.exe (2640) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 68 B/s 68 B/s Very Low 18 Unknown process (3756) C:\Users\Ministeerium\AppData\Local\Microsoft\Windows Mail\Stationery\Roses.jpg 51 B/s 51 B/s Normal 370 svchost.exe (920) C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat 32 B/s 32 B/s Normal 0 svchost.exe (2640) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 32 B/s 32 B/s Very Low 28 GfxUI.exe (216) C:\Windows\assembly\NativeImages_v4.0.30319_64\Presentatio84a6349c#\454e2265c47c5198b8496e170b8aab52\PresentationFramework-SystemCore.ni.dll.aux 18 B/s 18 B/s Normal 13