Deserialized.System.Diagnostics.Process
Deserialized.System.ComponentModel.Component
Deserialized.System.MarshalByRefObject
Deserialized.System.Object
System.Diagnostics.Process (AutoHotkey)
8
false
Deserialized.System.IntPtr
Deserialized.System.ValueType
Deserialized.System.Object
2500
Deserialized.Microsoft.Win32.SafeHandles.SafeProcessHandle
Deserialized.Microsoft.Win32.SafeHandles.SafeHandleZeroOrMinusOneIsInvalid
Deserialized.System.Runtime.InteropServices.SafeHandle
Deserialized.System.Runtime.ConstrainedExecution.CriticalFinalizerObject
Deserialized.System.Object
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
171
14912
.
0
Deserialized.System.Diagnostics.ProcessModule
Deserialized.System.ComponentModel.Component
Deserialized.System.MarshalByRefObject
Deserialized.System.Object
System.Diagnostics.ProcessModule (AutoHotkey.exe)
AutoHotkey.exe
C:\Program Files\AutoHotkey\AutoHotkey.exe
5368709120
1245184
5369430152
File: C:\Program Files\AutoHotkey\AutoHotkey.exe_x000D__x000A_InternalName: AutoHotkey_x000D__x000A_OriginalFilename: AutoHotkey.exe_x000D__x000A_FileVersion: 1.1.28.00_x000D__x000A_FileDescription: AutoHotkey Unicode 64-bit_x000D__x000A_Product: AutoHotkey_x000D__x000A_ProductVersion: 1.1.28.00_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
1216
1.1.28.00
1.1.28.00
AutoHotkey Unicode 64-bit
AutoHotkey
1413120
204800
System.Diagnostics.ProcessThreadCollection
13592
13592
5296128
5296128
246000
246000
5414912
5414912
12247040
12247040
209362944
4504330240
true
Deserialized.System.Diagnostics.ProcessPriorityClass
Deserialized.System.Enum
Deserialized.System.ValueType
Deserialized.System.Object
Normal
32
5296128
5296128
PT0.328125S
AutoHotkey
255
true
1
Deserialized.System.Diagnostics.ProcessStartInfo
Deserialized.System.Object
System.Diagnostics.ProcessStartInfo
false
Deserialized.System.Collections.Specialized.StringDictionaryWithComparer
Deserialized.System.Collections.Specialized.StringDictionary
Deserialized.System.Object
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
Deserialized.System.Collections.Specialized.StringDictionary+GenericAdapter
Deserialized.System.Object
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
Deserialized.System.String[]
Deserialized.System.Array
Deserialized.System.Object
false
false
0
Normal
2019-08-27T10:56:21.5460487+03:00
System.Diagnostics.ProcessThreadCollection
PT0.515625S
PT0.1875S
180191232
4475158528
false
10293248
10293248
AutoHotkey
1
171
4475158528
10293248
5296128
13592
C:\Program Files\AutoHotkey\AutoHotkey.exe
0.515625
1.1.28.00
1.1.28.00
AutoHotkey Unicode 64-bit
AutoHotkey
Process
System.Diagnostics.Process (browsernativehost)
8
false
14816
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
210
18092
.
0
System.Diagnostics.ProcessModule (browsernativehost.exe)
browsernativehost.exe
C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe
140702562582528
761856
140702562979756
File: C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: browsernativehost.exe_x000D__x000A_FileVersion: 5.1.38.7312_x000D__x000A_FileDescription: _x000D__x000A_Product: browsernativehost_x000D__x000A_ProductVersion: 5.1.38.7312_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
744
5.1.38.7312
5.1.38.7312
browsernativehost
1413120
204800
System.Diagnostics.ProcessThreadCollection
16680
16680
6434816
6434816
280880
280880
6434816
6434816
16957440
16957440
179355648
4474322944
true
Normal
32
6434816
6434816
PT5.203125S
browsernativehost
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:42.5627771+03:00
System.Diagnostics.ProcessThreadCollection
PT34.484375S
PT29.28125S
173064192
4468031488
false
14827520
14827520
browsernativehost
1
210
4468031488
14827520
6434816
16680
C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe
34.484375
5.1.38.7312
5.1.38.7312
browsernativehost
Process
System.Diagnostics.Process (Ditto)
8
false
7668
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
343
9032
.
0
System.Diagnostics.ProcessModule (Ditto.exe)
Ditto.exe
C:\Program Files\WindowsApps\60145ScottBrogden.ditto-cp_3.22.20.0_x005F_x86__n6b029mg40na2\Ditto.exe
17498112
4165632
19651218
File: C:\Program Files\WindowsApps\60145ScottBrogden.ditto-cp_3.22.20.0_x005F_x86__n6b029mg40na2\Ditto.exe_x000D__x000A_InternalName: CP_Main_x000D__x000A_OriginalFilename: Ditto_x000D__x000A_FileVersion: 3.22.20.0_x000D__x000A_FileDescription: Ditto_x000D__x000A_Product: Ditto_x000D__x000A_ProductVersion: 3.22.20.0_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
4068
3.22.20.0
3.22.20.0
Ditto
Ditto
1413120
204800
System.Diagnostics.ProcessThreadCollection
23104
23104
7507968
7507968
335880
335880
8241152
8241152
23441408
23441408
214507520
214507520
true
Normal
32
7507968
7507968
PT5.390625S
Ditto
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:18.6499958+03:00
System.Diagnostics.ProcessThreadCollection
PT6.90625S
PT1.515625S
192929792
192929792
false
21688320
21688320
Ditto
1
343
192929792
21688320
7507968
23104
C:\Program Files\WindowsApps\60145ScottBrogden.ditto-cp_3.22.20.0_x005F_x86__n6b029mg40na2\Ditto.exe
6.90625
3.22.20.0
3.22.20.0
Ditto
Ditto
Process
System.Diagnostics.Process (dweundo)
8
false
13960
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
140
15204
.
0
System.Diagnostics.ProcessModule (dweundo.exe)
dweundo.exe
C:\Program Files (x86)\dweundo\dweundo.exe
4194304
45056
4199044
File: C:\Program Files (x86)\dweundo\dweundo.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: dweundo.exe_x000D__x000A_FileVersion: 1.1_x000D__x000A_FileDescription: dweundo (http://purl.org/net/dweundo)_x000D__x000A_Product: dweundo_x000D__x000A_ProductVersion: 1.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
44
1.1
1.1
dweundo (http://purl.org/net/dweundo)
dweundo
1413120
204800
System.Diagnostics.ProcessThreadCollection
12024
12024
3481600
3481600
122672
122672
3698688
3698688
7946240
7946240
76582912
76582912
true
Normal
32
3481600
3481600
PT0S
dweundo
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:20.8463745+03:00
System.Diagnostics.ProcessThreadCollection
PT0.015625S
PT0.015625S
69505024
69505024
false
7376896
7376896
dweundo
1
140
69505024
7376896
3481600
12024
C:\Program Files (x86)\dweundo\dweundo.exe
0.015625
1.1
1.1
dweundo (http://purl.org/net/dweundo)
dweundo
Process
System.Diagnostics.Process (Everything)
8
false
10084
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
247
9780
.
0
System.Diagnostics.ProcessModule (Everything.exe)
Everything.exe
C:\Program Files\Everything\Everything.exe
5368709120
2203648
5368763952
File: C:\Program Files\Everything\Everything.exe_x000D__x000A_InternalName: Everything_x000D__x000A_OriginalFilename: Everything.exe_x000D__x000A_FileVersion: 1.4.1.877_x000D__x000A_FileDescription: Everything_x000D__x000A_Product: Everything_x000D__x000A_ProductVersion: 1.4.1.877_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
2152
1.4.1.877
1.4.1.877
Everything
Everything
1413120
204800
System.Diagnostics.ProcessThreadCollection
16648
16648
88150016
88150016
231952
231952
88150016
88150016
93569024
93569024
250003456
4544970752
true
Normal
32
88150016
88150016
PT11.171875S
Everything
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:02.8003554+03:00
System.Diagnostics.ProcessThreadCollection
PT1M5.484375S
PT54.3125S
242663424
4537630720
false
92327936
92327936
Everything
1
247
4537630720
92327936
88150016
16648
C:\Program Files\Everything\Everything.exe
65.484375
1.4.1.877
1.4.1.877
Everything
Everything
Process
System.Diagnostics.Process (fdm)
8
false
4212
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
956
14972
.
0
System.Diagnostics.ProcessModule (fdm.exe)
fdm.exe
C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe
140695710007296
10248192
140695716260092
File: C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: fdm.exe_x000D__x000A_FileVersion: 5.1.38.7312_x000D__x000A_FileDescription: Free Download Manager_x000D__x000A_Product: Free Download Manager_x000D__x000A_ProductVersion: 5.1.38.7312_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
10008
FreeDownloadManager.org
5.1.38.7312
5.1.38.7312
Free Download Manager
Free Download Manager
1413120
204800
System.Diagnostics.ProcessThreadCollection
67328
67328
130387968
130387968
908224
908224
176160768
176160768
166035456
166035456
1364267008
5659234304
true
Normal
32
130387968
130387968
PT5.203125S
fdm
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:15.3434446+03:00
System.Diagnostics.ProcessThreadCollection
PT8.96875S
PT3.765625S
1328422912
5623390208
false
90644480
90644480
fdm
1
956
5623390208
90644480
130387968
67328
C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe
FreeDownloadManager.org
8.96875
5.1.38.7312
5.1.38.7312
Free Download Manager
Free Download Manager
Process
System.Diagnostics.Process (firefox)
8
false
13208
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1601
656
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
136504
136504
208261120
208261120
1709408
1709408
240967680
240967680
293175296
293175296
-808570880
2206804619264
true
Normal
32
208261120
208261120
PT1.921875S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T14:31:38.2846991+03:00
System.Diagnostics.ProcessThreadCollection
PT16.203125S
PT14.28125S
-832069632
2206781120512
false
198844416
198844416
firefox
1
1601
2206781120512
198844416
208261120
136504
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
16.203125
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
11848
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1537
2576
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
146072
146072
120373248
120373248
1597024
1597024
331005952
331005952
300834816
300834816
-884568064
2206728622080
true
Normal
32
120373248
120373248
PT3.453125S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T13:56:19.6329372+03:00
System.Diagnostics.ProcessThreadCollection
PT35.015625S
PT31.5625S
-929198080
2206683992064
false
134737920
134737920
firefox
1
1537
2206683992064
134737920
120373248
146072
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
35.015625
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
14956
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1503
10108
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
115352
115352
100982784
100982784
1538656
1538656
115798016
115798016
167231488
167231488
-1156718592
2206456471552
true
Normal
32
100982784
100982784
PT0.5S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T19:14:36.6065595+03:00
System.Diagnostics.ProcessThreadCollection
PT3.671875S
PT3.171875S
-1162158080
2206451032064
false
132882432
132882432
firefox
1
1503
2206451032064
132882432
100982784
115352
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
3.671875
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
16076
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1433
16092
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
139448
139448
203829248
203829248
1709112
1709112
363675648
363675648
365461504
365461504
-658911232
2206954278912
true
Normal
32
203829248
203829248
PT9.125S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:40.4452145+03:00
System.Diagnostics.ProcessThreadCollection
PT1M21.015625S
PT1M11.890625S
-695328768
2206917861376
false
216018944
216018944
firefox
1
1433
2206917861376
216018944
203829248
139448
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
81.015625
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
14648
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
2185
16716
.
67132
StartInfo - Google Search - Mozilla Firefox
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
346064
346064
932839424
932839424
1492728
1492728
2142216192
2142216192
1811857408
1811857408
1115385856
2208728576000
true
Normal
32
932839424
932839424
PT5M45.828125S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:36.0803246+03:00
System.Diagnostics.ProcessThreadCollection
PT25M21.390625S
PT19M35.5625S
581672960
2208194863104
false
947494912
947494912
firefox
1
2185
2208194863104
947494912
932839424
346064
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
1521.390625
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
12964
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
574
17072
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
102832
102832
153145344
153145344
934456
934456
281669632
281669632
132628480
132628480
1000808448
2204319031296
true
Normal
32
153145344
153145344
PT55.796875S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:38.0120624+03:00
System.Diagnostics.ProcessThreadCollection
PT3M54.265625S
PT2M58.46875S
845369344
2204163592192
false
80388096
80388096
firefox
1
574
2204163592192
80388096
153145344
102832
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
234.265625
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
3964
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
873
17080
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
113656
113656
329662464
329662464
1042712
1042712
366370816
366370816
397377536
397377536
-993525760
2206619664384
true
Normal
32
329662464
329662464
PT12.265625S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:40.1021012+03:00
System.Diagnostics.ProcessThreadCollection
PT1M51.734375S
PT1M39.46875S
-1007157248
2206606032896
false
277827584
277827584
firefox
1
873
2206606032896
277827584
329662464
113656
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
111.734375
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
9176
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
826
17272
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
88008
88008
129679360
129679360
1109168
1109168
230346752
230346752
273293312
273293312
-1222299648
2206390890496
true
Normal
32
129679360
129679360
PT4.859375S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:38.8269003+03:00
System.Diagnostics.ProcessThreadCollection
PT1M1.578125S
PT56.71875S
-1248059392
2206365130752
false
156524544
156524544
firefox
1
826
2206365130752
156524544
129679360
88008
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
61.578125
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
6440
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1232
17504
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
148256
148256
514801664
514801664
1548280
1548280
679268352
679268352
658161664
658161664
-1496309760
2231886684160
true
Normal
32
514801664
514801664
PT46.953125S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:40.7954589+03:00
System.Diagnostics.ProcessThreadCollection
PT3M38.078125S
PT2M51.125S
1417457664
2226210516992
false
524640256
524640256
firefox
1
1232
2226210516992
524640256
514801664
148256
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
218.078125
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
12428
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1472
18204
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
125784
125784
162258944
162258944
1619192
1619192
237072384
237072384
273928192
273928192
-898707456
2206714482688
true
Normal
32
162258944
162258944
PT4.53125S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T11:02:53.225385+03:00
System.Diagnostics.ProcessThreadCollection
PT34.734375S
PT30.203125S
-930471936
2206682718208
false
189308928
189308928
firefox
1
1472
2206682718208
189308928
162258944
125784
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
34.734375
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (firefox)
8
false
12332
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
1362
18232
.
0
System.Diagnostics.ProcessModule (firefox.exe)
firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
140695213506560
606208
140695213813968
File: C:\Program Files\Mozilla Firefox\firefox.exe_x000D__x000A_InternalName: Firefox_x000D__x000A_OriginalFilename: firefox.exe_x000D__x000A_FileVersion: 68.0.2_x000D__x000A_FileDescription: Firefox_x000D__x000A_Product: Firefox_x000D__x000A_ProductVersion: 68.0.2_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: Language Neutral_x000D__x000A_
592
Mozilla Corporation
68.0.2
68.0.2
Firefox
Firefox
1413120
204800
System.Diagnostics.ProcessThreadCollection
111816
111816
181530624
181530624
1607976
1607976
196968448
196968448
230113280
230113280
-879996928
2206733193216
true
Normal
32
181530624
181530624
PT5.75S
firefox
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:56:43.0255902+03:00
System.Diagnostics.ProcessThreadCollection
PT51.59375S
PT45.84375S
-901230592
2206711959552
false
211763200
211763200
firefox
1
1362
2206711959552
211763200
181530624
111816
C:\Program Files\Mozilla Firefox\firefox.exe
Mozilla Corporation
51.59375
68.0.2
68.0.2
Firefox
Firefox
Process
System.Diagnostics.Process (navicat)
8
false
16636
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
2473
7688
.
1314902
* Untitled - Query - Navicat for PostgreSQL
System.Diagnostics.ProcessModule (navicat.exe)
navicat.exe
C:\Program Files\PremiumSoft\Navicat 12 for PostgreSQL\navicat.exe
4194304
53858304
36932272
File: C:\Program Files\PremiumSoft\Navicat 12 for PostgreSQL\navicat.exe_x000D__x000A_InternalName: navicat.exe_x000D__x000A_OriginalFilename: navicat.exe_x000D__x000A_FileVersion: 12.1.22.0_x000D__x000A_FileDescription: Navicat for PostgreSQL_x000D__x000A_Product: Navicat for PostgreSQL_x000D__x000A_ProductVersion: 12.1_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
52596
PremiumSoft CyberTech Ltd.
12.1.22.0
12.1
Navicat for PostgreSQL
Navicat for PostgreSQL
1413120
204800
System.Diagnostics.ProcessThreadCollection
276000
276000
173408256
173408256
697776
697776
269389824
269389824
292655104
292655104
679415808
4974383104
true
Normal
32
173408256
173408256
PT30.875S
navicat
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T15:56:21.1328039+03:00
System.Diagnostics.ProcessThreadCollection
PT56.234375S
PT25.359375S
644014080
4938981376
false
66871296
66871296
navicat
1
2473
4938981376
66871296
173408256
276000
C:\Program Files\PremiumSoft\Navicat 12 for PostgreSQL\navicat.exe
PremiumSoft CyberTech Ltd.
56.234375
12.1.22.0
12.1
Navicat for PostgreSQL
Navicat for PostgreSQL
Process
System.Diagnostics.Process (notepad++)
8
false
4624
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
290
22024
.
792130
C:\Users\illym\Desktop\Temp\Get-Process.xml - Notepad++
System.Diagnostics.ProcessModule (notepad++.exe)
notepad++.exe
C:\Program Files\Notepad++\notepad++.exe
140697733693440
3649536
140697734995844
File: C:\Program Files\Notepad++\notepad++.exe_x000D__x000A_InternalName: npp.exe_x000D__x000A_OriginalFilename: Notepad++.exe_x000D__x000A_FileVersion: 7.7_x000D__x000A_FileDescription: Notepad++ : a free (GNU) source code editor_x000D__x000A_Product: Notepad++_x000D__x000A_ProductVersion: 7.7_x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English (United States)_x000D__x000A_
3564
Don HO don.h@free.fr
7.7
7.7
Notepad++ : a free (GNU) source code editor
Notepad++
1413120
204800
System.Diagnostics.ProcessThreadCollection
21888
21888
16732160
16732160
353992
353992
24780800
24780800
36184064
36184064
275099648
4570066944
true
Normal
32
16732160
16732160
PT2.546875S
notepad++
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T18:17:00.4985191+03:00
System.Diagnostics.ProcessThreadCollection
PT3.4375S
PT0.890625S
247128064
4542095360
false
24793088
24793088
notepad++
1
290
4542095360
24793088
16732160
21888
C:\Program Files\Notepad++\notepad++.exe
Don HO don.h@free.fr
3.4375
7.7
7.7
Notepad++ : a free (GNU) source code editor
Notepad++
Process
System.Diagnostics.Process (nvcontainer)
8
false
7076
Microsoft.Win32.SafeHandles.SafeProcessHandle
false
false
555
6568
.
0
System.Diagnostics.ProcessModule (nvcontainer.exe)
nvcontainer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
13369344
479232
13441489
File: C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe_x000D__x000A_InternalName: _x000D__x000A_OriginalFilename: _x000D__x000A_FileVersion: _x000D__x000A_FileDescription: _x000D__x000A_Product: _x000D__x000A_ProductVersion: _x000D__x000A_Debug: False_x000D__x000A_Patched: False_x000D__x000A_PreRelease: False_x000D__x000A_PrivateBuild: False_x000D__x000A_SpecialBuild: False_x000D__x000A_Language: English_x000D__x000A_
468
1413120
204800
System.Diagnostics.ProcessThreadCollection
59016
59016
29392896
29392896
247960
247960
113201152
113201152
112721920
112721920
253108224
253108224
true
Normal
32
29392896
29392896
PT9.0625S
nvcontainer
255
true
1
System.Diagnostics.ProcessStartInfo
false
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
System.Collections.DictionaryEntry
[OneDriveConsumer, C:\Users\illym\OneDrive]
[PATHEXT, .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PL;.CPL]
[TERM_PROGRAM_VERSION, 1.37.1]
[FPS_BROWSER_USER_PROFILE_STRING, Default]
[TEMP, C:\Users\illym\AppData\Local\Temp]
[LOGONSERVER, \\DC1]
[PROCESSOR_ARCHITECTURE, AMD64]
[FPS_BROWSER_APP_PROFILE_STRING, Internet Explorer]
[USERNAME, ili]
[LANG, en_US.UTF-8]
[windir, C:\WINDOWS]
[COMPUTERNAME, ILI]
[ComSpec, C:\WINDOWS\system32\cmd.exe]
[ProgramData, C:\ProgramData]
[DriverData, C:\Windows\System32\Drivers\DriverData]
[VS140COMNTOOLS, C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\]
[PUBLIC, C:\Users\Public]
[PROCESSOR_IDENTIFIER, Intel64 Family 6 Model 60 Stepping 3, GenuineIntel]
[USERPROFILE, C:\Users\illym]
[PROCESSOR_LEVEL, 6]
[CommonProgramFiles(x86), C:\Program Files (x86)\Common Files]
[OneDrive, C:\Users\illym\OneDrive]
[USERDOMAIN, NTSERV1]
[ProgramFiles, C:\Program Files]
[ALLUSERSPROFILE, C:\ProgramData]
[SystemRoot, C:\WINDOWS]
[OPENSSL_CONF, C:\Program Files\OpenSSL-Win64\bin\openssl.cfg]
[USERDOMAIN_ROAMINGPROFILE, NTSERV1]
[JD2_HOME, C:\Users\illym\AppData\Local\JDownloader v2.0]
[APPDATA, C:\Users\illym\AppData\Roaming]
[ProgramW6432, C:\Program Files]
[NUMBER_OF_PROCESSORS, 8]
[COLORTERM, truecolor]
[HOMEPATH, \Users\illym]
[ChocolateyPath, C:\Chocolatey]
[TERM_PROGRAM, vscode]
[SESSIONNAME, Console]
[PSExecutionPolicyPreference, Bypass]
[CommonProgramFiles, C:\Program Files\Common Files]
[SystemDrive, C:]
[ChocolateyInstall, C:\ProgramData\chocolatey]
[CommonProgramW6432, C:\Program Files\Common Files]
[HOMEDRIVE, C:]
[OS, Windows_NT]
[PROCESSOR_REVISION, 3c03]
[PSModulePath, D:\ILI\Profile\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ResourceManager\AzureResourceManager;C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement;C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin\psModules\;C:\Program Files (x86)\VMware\Infrastructure\PowerCLI\Modules;C:\Users\illym\.vscode\extensions\ms-vscode.powershell-2019.5.0\modules]
[Path, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Wireshark\;C:\ProgramData\chocolatey\bin;C:\Program Files\OpenSSL-Win64\bin;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\php\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\PowerShell\6-preview\preview;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\6\;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\PowerShell\6.0.5\;C:\Program Files\PowerShell\7-preview\preview;C:\Users\illym\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\Programs\Python\Python37\;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Local\GitHubDesktop\bin;C:\Program Files (x86)\Nmap;C:\Program Files\Microsoft VS Code\bin;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\illym\.dotnet\tools;C:\Users\illym\AppData\Local\Programs\Microsoft VS Code Insiders\bin;C:\Users\illym\AppData\Local\Microsoft\WindowsApps;C:\Users\illym\AppData\Roaming\Python\Python37\Scripts\;C:\Users\illym\AppData\Local\nvs\default;C:\Users\illym\AppData\Local\nvs\;C:\Users\illym\AppData\Local\Programs\Fiddler]
[TMP, C:\Users\illym\AppData\Local\Temp]
[USERDNSDOMAIN, CCC.CO.IL]
[TVT, C:\Program Files (x86)\Lenovo]
[ProgramFiles(x86), C:\Program Files (x86)]
[LOCALAPPDATA, C:\Users\illym\AppData\Local]
false
false
false
true
false
false
0
Normal
2019-08-27T10:55:46.7219066+03:00
System.Diagnostics.ProcessThreadCollection
PT19.5S
PT10.4375S
215621632
215621632
false
27176960
27176960
nvcontainer
1
555
215621632
27176960
29392896
59016
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
19.5
Process