Kopie	PID	Type	Naam ingang
powershell.exe	14444	Directory	\BaseNamedObjects
powershell.exe	14444	Directory	\KnownDlls
powershell.exe	14444	Event	\KernelObjects\LowMemoryCondition
powershell.exe	14444	Event	\BaseNamedObjects\CorDBIPCSetupSyncEvent_14444
powershell.exe	14444	Event	\KernelObjects\MaximumCommitCondition
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Core.Strings.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Common.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\nl\Microsoft.Exchange.Core.Strings.resources.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\MSExchangeLESearchWorker.exe
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Providers.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Sync.Common.dll
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	\Device\Afd
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Diagnostics.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\nl\Microsoft.Exchange.Data.resources.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Directory.dll
powershell.exe	14444	File	C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My
powershell.exe	14444	File	\Device\KsecDD
powershell.exe	14444	File	C:\Windows\System32\nl-NL\crypt32.dll.mui
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.PowerShell.Configuration.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\Microsoft.Exchange.Data.Common\14.1.214.0__31bf3856ad364e35\Microsoft.Exchange.Data.Common.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Mapi.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Extensibility.Internal.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.dll
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Net.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.UM.UMCommon.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.MailboxReplicationService.Common.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Storage.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Configuration.RedirectionModule.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Resources\1.0.0.0_nl_31bf3856ad364e35\Microsoft.PowerShell.Security.Resources.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Logging.Search.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Configuration.ObjectModel.dll
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Management.dll
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4959_none_08e45ce1a83d7e3c
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4959_none_08e45ce1a83d7e3c
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4959_none_08e45ce1a83d7e3c
powershell.exe	14444	File	C:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.MessageSecurity.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_nl_31bf3856ad364e35\System.Management.Automation.Resources.dll
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_nl_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Management.Resources\1.0.0.0_nl_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
powershell.exe	14444	File	C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
powershell.exe	14444	File	C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
powershell.exe	14444	File	C:\Windows\System32\nl-NL\KernelBase.dll.mui
powershell.exe	14444	File	C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
powershell.exe	14444	File	C:\Windows\assembly\pubpol460.dat
powershell.exe	14444	File	C:\Windows\assembly\NativeImages_v2.0.50727_64\index299d.dat
powershell.exe	14444	File	C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\64bit\security.config.cch
powershell.exe	14444	File	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\security.config.cch
powershell.exe	14444	File	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config.cch
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
powershell.exe	14444	File	\Device\NamedPipe\srvsvc
powershell.exe	14444	File	C:\Windows\System32\nl-NL\setupapi.dll.mui
powershell.exe	14444	File	C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757
powershell.exe	14444	File	C:\Windows\Registration\R000000000005.clb
powershell.exe	14444	File	\Device\KsecDD
powershell.exe	14444	File	C:\Windows\System32\WindowsPowerShell\v1.0\nl-NL\powershell.exe.mui
powershell.exe	14444	File	C:\Windows\System32
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\services\crypt32
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Classes
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\.NETFramework
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Control Panel\International
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer
powershell.exe	14444	Key	\REGISTRY\USER
powershell.exe	14444	Key	\REGISTRY\USER\.DEFAULT
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER
powershell.exe	14444	Key	\REGISTRY\MACHINE
powershell.exe	14444	Key	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
powershell.exe	14444	Key	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
powershell.exe	14444	Mutant	\BaseNamedObjects\DBWinMutex
powershell.exe	14444	Mutant	\BaseNamedObjects\PerfData_Global_Mutex
powershell.exe	14444	Mutant	\BaseNamedObjects\LOADPERF_MUTEX
powershell.exe	14444	Section	\BaseNamedObjects\NLS_CodePage_850_3_2_0_0
powershell.exe	14444	Section	\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0
powershell.exe	14444	Section	\BaseNamedObjects\_ADACCESS_PERF_DATA_
powershell.exe	14444	Section	\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
powershell.exe	14444	Section	\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
powershell.exe	14444	Section	\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000046.db
powershell.exe	14444	Section	\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
powershell.exe	14444	Section	\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0
powershell.exe	14444	Section	\BaseNamedObjects\NLS_CodePage_850_3_2_0_0
powershell.exe	14444	Section	\BaseNamedObjects\Cor_Public_IPCBlock_14444
powershell.exe	14444	Section	\BaseNamedObjects\Cor_Private_IPCBlock_14444
powershell.exe	14444	Section	\BaseNamedObjects\windows_shell_global_counters
powershell.exe	14444	Section	\BaseNamedObjects\windows_shell_global_counters
powershell.exe	14444	Section	\BaseNamedObjects\__ComCatalogCache__