win-procs/OpenVPNConnect.exe.txt
2023-12-05 06:24:43 +02:00

141 lines
16 KiB
Plaintext

Module: OpenVPNConnect.exe, 64-bit
Full path: C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe
File version: 3121
Description: OpenVPN Connect
PID: 17700
Parent PID: 20304 (OpenVPNConnect.exe)
Priority: 8
Threads: 18
Owner: AGRYNCO-NB\agrynco (S-1-5-21-4255264900-3681165211-3101920415-1001)
Session: 1
Started at: 04.12.2023 20:38:43
Uptime: 09:42:49.4923516
Command Line:
"C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe" --type=renderer --user-data-dir="C:\Users\agrynco\AppData\Roaming\OpenVPN Connect" --app-user-model-id=org.openvpn.client --app-path="C:\Program Files\OpenVPN Connect\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=72294880 --mojo-platform-channel-handle=2708 --field-trial-handle=1760,i,5958442264970714144,15567797338808778164,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
Current Directory:
C:\Windows\system32\
Environment:
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\agrynco\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=AGRYNCO-NB
ComSpec=C:\Windows\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
EFC_11936=1
FPS_BROWSER_APP_PROFILE_STRING=Internet Explorer
FPS_BROWSER_USER_PROFILE_STRING=Default
HOMEDRIVE=C:
HOMEPATH=\Users\agrynco
IGCCSVC_DB=AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAOJ66MrrVw0+QBhqk5hoEKwQAAAACAAAAAAAQZgAAAAEAACAAAADnIlH5GScq5R1YwQo2Cdo8Ywd0ZnJUWgTOe7r4V5F63wAAAAAOgAAAAAIAACAAAAAlDR5jYnr48atTqrib8QkVE8gaMuCWSNJWtk+jRzAnqmAAAAALixtyTpkBnS9kEaVJMR5ea2pX1V5u/MVPU0mJfqqQjVqIIvyG3dc/oZ+f7BajWsnfH7FhM0r+7l9Y5zMMoZkm2KAtRIvw/7Ty5HukYLvfOe223gFueFWm34eioL7L3xRAAAAAJzbevzwd+31hEaN3Oa+gjRBOMxyfyX5U0mEeaqvaPv/Ds59UhBmINpbz6//2aDTGdkpe40Lp2WLhU71srp61hw==
JetBrains Rider=C:\Program Files\JetBrains\JetBrains Rider 2023.2.3\bin;
LOCALAPPDATA=C:\Users\agrynco\AppData\Local
LOGONSERVER=\\AGRYNCO-NB
NUMBER_OF_PROCESSORS=20
NVM_HOME=C:\Users\agrynco\AppData\Roaming\nvm
NVM_SYMLINK=C:\Program Files\nodejs
OneDrive=C:\Users\agrynco\OneDrive
OneDriveConsumer=C:\Users\agrynco\OneDrive
ORIGINAL_XDG_CURRENT_DESKTOP=undefined
OS=Windows_NT
Path=C:\Program Files\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files\dotnet\;C:\Program Files\LINQPad7;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\Microsoft SQL Server\150\Tools\Binn\;C:\Users\agrynco\AppData\Roaming\nvm;C:\Program Files\nodejs;C:\Program Files\WireGuard\;C:\Program Files (x86)\Microsoft SQL Server\160\DTS\Binn\;C:\Program Files\TortoiseGit\bin;C:\Program Files\Docker\Docker\resources\bin;C:\Program Files\PowerShell\7\;C:\Users\agrynco\AppData\Local\Microsoft\WindowsApps;C:\Users\agrynco\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\agrynco\.dotnet\tools;C:\Program Files\JetBrains\JetBrains Rider 2023.2.3\bin;;C:\Users\agrynco\AppData\Roaming\nvm;C:\Program Files\nodejs;C:\Program Files\Azure Data Studio\bin
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
POWERSHELL_DISTRIBUTION_CHANNEL=MSI:Windows 10 Pro
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 154 Stepping 3, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=9a03
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PSModulePath=C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SONAR_TOKEN=sqp_4ba776407397ab3d628d0eea2a02bc040832cad0
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\agrynco\AppData\Local\Temp
TMP=C:\Users\agrynco\AppData\Local\Temp
USERDOMAIN=AGRYNCO-NB
USERDOMAIN_ROAMINGPROFILE=AGRYNCO-NB
USERNAME=agrynco
USERPROFILE=C:\Users\agrynco
windir=C:\Windows
ZES_ENABLE_SYSMAN=1
USER Objects: 1
Processor Time: 00:00:00.1875000 0%
Privileged Time: 00:00:00.0156250 0%
User Time: 00:00:00.1718750 0%
Handle Count: 291
Page File Bytes: 42430464
Page File Bytes Peak: 63471616
Working Set: 86364160
Working Set Peak: 105099264
Pool Nonpaged Bytes: 17264
Pool Paged Bytes: 514152
Private Bytes: 42430464
Page Faults: 46668 0/sec
Virtual Bytes: 2229662171136
Virtual Bytes Peak: 2229783810048
IO Data Bytes: 3246581 0/sec
IO Read Bytes: 1928764 0/sec
IO Write Bytes: 1317817 0/sec
IO Other Bytes: 2292 0/sec
IO Data Operations: 1310 0/sec
IO Read Operations: 577 0/sec
IO Write Operations: 733 0/sec
IO Other Operations: 242 0/sec
Modules:
Base Size Path (version info is not displayed)
00007FF788D30000 8F93000 C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe
00007FF87BE10000 217000 C:\Windows\SYSTEM32\ntdll.dll
00007FF87AD80000 C4000 C:\Windows\System32\KERNEL32.DLL
00007FF879480000 3A5000 C:\Windows\System32\KERNELBASE.dll
00007FF87B500000 D7000 C:\Windows\System32\OLEAUT32.dll
00007FF879270000 9A000 C:\Windows\System32\msvcp_win.dll
00007FF879950000 111000 C:\Windows\System32\ucrtbase.dll
00007FFFD3760000 3F8000 C:\Program Files\OpenVPN Connect\ffmpeg.dll
00007FF876660000 233000 C:\Windows\SYSTEM32\dbghelp.dll
00007FF87A5E0000 389000 C:\Windows\System32\combase.dll
00007FF844AE0000 445000 C:\Windows\SYSTEM32\UIAutomationCore.DLL
00007FF87AF00000 117000 C:\Windows\System32\RPCRT4.dll
00007FF879B60000 71000 C:\Windows\System32\WS2_32.dll
00007FF869230000 7000 C:\Windows\SYSTEM32\MSIMG32.dll
00007FF879310000 166000 C:\Windows\System32\CRYPT32.dll
00007FF87AD50000 29000 C:\Windows\System32\GDI32.dll
00007FF870780000 34000 C:\Windows\SYSTEM32\WINMM.dll
00007FF879240000 26000 C:\Windows\System32\win32u.dll
00007FF877C30000 2D000 C:\Windows\SYSTEM32\IPHLPAPI.DLL
00007FF86CBB0000 A000 C:\Windows\SYSTEM32\VERSION.dll
00007FF878740000 2C000 C:\Windows\SYSTEM32\USERENV.dll
00007FF879830000 119000 C:\Windows\System32\gdi32full.dll
00007FF87ACA0000 A7000 C:\Windows\System32\msvcrt.dll
00007FF864290000 A8000 C:\Windows\SYSTEM32\WINSPOOL.DRV
00007FF875200000 273000 C:\Windows\SYSTEM32\DWrite.dll
00007FF87BA00000 1AE000 C:\Windows\System32\USER32.dll
00007FF87AAD0000 F3000 C:\Windows\System32\shcore.dll
00007FF878000000 C000 C:\Windows\SYSTEM32\Secur32.dll
00007FF872820000 137000 C:\Windows\SYSTEM32\WINHTTP.dll
00007FF871F20000 1F000 C:\Windows\SYSTEM32\dhcpcsvc.DLL
00007FF87ABD0000 A6000 C:\Windows\System32\sechost.dll
00007FF878490000 42000 C:\Windows\SYSTEM32\SSPICLI.DLL
00007FF87BBB0000 31000 C:\Windows\System32\IMM32.DLL
00007FF879A70000 7A000 C:\Windows\System32\bcryptPrimitives.dll
00007FF87A980000 B1000 C:\Windows\System32\ADVAPI32.dll
00007FF8789D0000 C000 C:\Windows\SYSTEM32\CRYPTBASE.DLL
00007FF877F90000 4D000 C:\Windows\SYSTEM32\powrprof.dll
00007FF877F70000 13000 C:\Windows\SYSTEM32\UMPDC.dll
00007FF876210000 AB000 C:\Windows\system32\uxtheme.dll
00007FF8786A0000 69000 C:\Windows\system32\mswsock.dll
00007FF879BE0000 859000 C:\Windows\System32\SHELL32.dll
00007FF878190000 18000 C:\Windows\SYSTEM32\kernel.appcore.dll