Loading built-in default control script [03-10-2024 10:54:29] DbgSVC started [03-10-2024 10:54:29] New process found: Process Name - System Process Process ID - 0 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - System Process ID - 4 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - smss.exe Process ID - 316 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - csrss.exe Process ID - 428 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - wininit.exe Process ID - 512 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - csrss.exe Process ID - 520 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - winlogon.exe Process ID - 580 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - services.exe Process ID - 648 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - lsass.exe Process ID - 656 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 756 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 804 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - LogonUI.exe Process ID - 964 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 972 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - dwm.exe Process ID - 980 Process Identity - Window Manager\DWM-1 [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 992 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 100 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 460 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1032 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1152 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1164 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1312 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1628 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 1792 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - spoolsv.exe Process ID - 1948 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MEMTA.exe Process ID - 1748 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MEPOPS.exe Process ID - 2084 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2096 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MEPOC.exe Process ID - 2104 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2116 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2128 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MELSC.exe Process ID - 2136 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - ComboCleaner.WinService.exe Process ID - 2144 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - SMSvcHost.exe Process ID - 2160 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - MESMTPC.exe Process ID - 2208 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2220 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2228 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MsMpEng.exe Process ID - 2236 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - ComboCleaner.Guard.exe Process ID - 2244 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2256 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - WMSvc.exe Process ID - 2288 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - plesksrv.exe Process ID - 2376 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - mqsvc.exe Process ID - 2384 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - PopPassD.exe Process ID - 2424 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MEDMS.EXE Process ID - 2440 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MsDepSvc.exe Process ID - 2452 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - sqlbrowser.exe Process ID - 2468 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - MEIMAPS.EXE Process ID - 2492 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - sqlwriter.exe Process ID - 2500 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - dns.exe Process ID - 2532 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MBAMService.exe Process ID - 2660 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - SMSvcHost.exe Process ID - 4048 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - w3wp.exe Process ID - 4076 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 4084 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - SMSvcHost.exe Process ID - 4484 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - WmiPrvSE.exe Process ID - 4496 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New process found: Process Name - sqlservr.exe Process ID - 4680 Process Identity - NT SERVICE\MSSQL$MSSQLSERVER2017 [03-10-2024 10:54:29] New process found: Process Name - sqlceip.exe Process ID - 4688 Process Identity - NT SERVICE\SQLTELEMETRY$MSSQLSERVER2017 [03-10-2024 10:54:29] New process found: Process Name - mysqld.exe Process ID - 4696 Process Identity - NT SERVICE\PleskSQLServer [03-10-2024 10:54:29] New process found: Process Name - mysqld.exe Process ID - 4724 Process Identity - NT SERVICE\MariaDB103 [03-10-2024 10:54:29] New process found: Process Name - w3wp.exe Process ID - 5616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 10:54:29] New process found: Process Name - conhost.exe Process ID - 5780 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 10:54:29] New process found: Process Name - fdlauncher.exe Process ID - 6192 Process Identity - NT SERVICE\MSSQLFDLauncher$MSSQLSERVER2017 [03-10-2024 10:54:29] New process found: Process Name - fdhost.exe Process ID - 6220 Process Identity - NT SERVICE\MSSQLFDLauncher$MSSQLSERVER2017 [03-10-2024 10:54:29] New process found: Process Name - conhost.exe Process ID - 6228 Process Identity - NT SERVICE\MSSQLFDLauncher$MSSQLSERVER2017 [03-10-2024 10:54:29] New process found: Process Name - csrss.exe Process ID - 6508 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - winlogon.exe Process ID - 6552 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - dwm.exe Process ID - 6676 Process Identity - Window Manager\DWM-2 [03-10-2024 10:54:29] New process found: Process Name - rdpclip.exe Process ID - 2820 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - RuntimeBroker.exe Process ID - 3640 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - rundll32.exe Process ID - 6916 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - sihost.exe Process ID - 6880 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - explorer.exe Process ID - 5924 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - ShellExperienceHost.exe Process ID - 7228 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - SearchUI.exe Process ID - 7316 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - taskhostw.exe Process ID - 7524 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - SearchIndexer.exe Process ID - 7740 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 7768 Process Identity - SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 7944 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - ServerManager.exe Process ID - 8556 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - WmiPrvSE.exe Process ID - 9020 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MusNotification.exe Process ID - 8244 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - MusNotificationUx.exe Process ID - 8012 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - ComboCleaner.exe Process ID - 5548 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - w3wp.exe Process ID - 8000 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 10:54:29] New process found: Process Name - conhost.exe Process ID - 9008 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 10:54:29] New process found: Process Name - Malwarebytes.exe Process ID - 9172 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - traymonitor.exe Process ID - 7784 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - METray.exe Process ID - 7888 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:29] New process found: Process Name - audiodg.exe Process ID - 9300 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 10:54:29] New process found: Process Name - ComboCleaner.Guard.exe Process ID - 4068 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - svchost.exe Process ID - 2620 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - WerFault.exe Process ID - 2252 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - wermgr.exe Process ID - 2596 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - DbgSvc.exe Process ID - 4736 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:29] New process found: Process Name - dllhost.exe Process ID - 5932 Process Identity - NT AUTHORITY\SYSTEM COM+ package name - System Application [03-10-2024 10:54:29] New process found: Process Name - msdtc.exe Process ID - 6904 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:29] New service found: Service Name - AJRouter Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ALG Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AppHostSvc Process ID - 2096 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - AppIDSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Appinfo Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AppMgmt Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AppReadiness Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AppVClient Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AppXSvc Process ID - 7768 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - aspnet_state Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - AudioEndpointBuilder Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Audiosrv Process ID - 1628 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - AxInstSV Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - BFE Process ID - 1164 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - BITS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - BrokerInfrastructure Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Browser Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - bthserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - CDPSvc Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - CertPropSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - ClipSVC Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ComboCleaner.Guard Process ID - 2244 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - ComboCleaner.WinService Process ID - 2144 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - COMSysApp Process ID - 5932 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - CoreMessagingRegistrar Process ID - 1164 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - CryptSvc Process ID - 1152 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - CscService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DbgSvc Process ID - 4736 Current State - SERVICE_START_PENDING [03-10-2024 10:54:29] New service found: Service Name - DcomLaunch Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - DcpSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - defragsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DeviceAssociationService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DeviceInstall Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DevQueryBroker Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Dhcp Process ID - 100 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - diagnosticshub.standardcollector.service Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DiagTrack Process ID - 2128 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - DmEnrollmentSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - dmwappushservice Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DNS Process ID - 2532 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Dnscache Process ID - 1152 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - dot3svc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DPS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DsmSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - DsSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Eaphost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - EFS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - embeddedmode Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - EntAppSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - EventLog Process ID - 100 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - EventSystem Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - fdPHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - FDResPub Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - FontCache Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - FontCache3.0.0.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - FrameServer Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ftpsvc Process ID - 2220 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - GoogleChromeElevationService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - gpsvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - hidserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - HvHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - icssvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - IKEEXT Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - iphlpsvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - KeyIso Process ID - 656 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - KPSSVC Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - KtmRm Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - LanmanServer Process ID - 2256 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - LanmanWorkstation Process ID - 1152 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - lfsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - LicenseManager Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - lltdsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - lmhosts Process ID - 100 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - LSM Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MapsBroker Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - MariaDB103 Process ID - 4724 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MBAMService Process ID - 2660 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MBVpnTunnelService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - MEDMS Process ID - 2440 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MEIMAPS Process ID - 2492 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MELCS Process ID - 2136 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MEMTAS Process ID - 1748 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MEPOCS Process ID - 2104 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MEPOPS Process ID - 2084 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MESMTPCS Process ID - 2208 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MpsSvc Process ID - 1164 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MsDepSvc Process ID - 2452 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MSDTC Process ID - 6904 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MSiSCSI Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - msiserver Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - MSMQ Process ID - 2384 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MSSQL$MSSQLSERVER2017 Process ID - 4680 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - MSSQLFDLauncher$MSSQLSERVER2017 Process ID - 6192 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NcaSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - NcbService Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Netlogon Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Netman Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - NetMsmqActivator Process ID - 4484 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NetPipeActivator Process ID - 4048 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - netprofm Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NetSetupSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NetTcpActivator Process ID - 2160 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NetTcpPortSharing Process ID - 2160 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - NgcCtnrSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - NgcSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - NlaSvc Process ID - 1152 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - nsi Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PcaSvc Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PerfHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - PhoneSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - pla Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - PleskSQLServer Process ID - 4696 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - plesksrv Process ID - 2376 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PleskStartup Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - PleskTaskManager Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - PleskWebSocket Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - PlugPlay Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PolicyAgent Process ID - 4084 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PopPassD Process ID - 2424 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Power Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PrintNotify Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ProfSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - QWAVE Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RasAuto Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RasMan Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RemoteAccess Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RemoteRegistry Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - RmSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RpcEptMapper Process ID - 804 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - RpcLocator Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - RpcSs Process ID - 804 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - RSoPProv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - sacsvr Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SamSs Process ID - 656 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SCardSvr Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ScDeviceEnum Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Schedule Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SCPolicySvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - seclogon Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SENS Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SensorDataService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SensorService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SensrSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SessionEnv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SharedAccess Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - ShellHWDetection Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - smphost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SNMPTRAP Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Spooler Process ID - 1948 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SQLAgent$MSSQLSERVER2017 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SQLBrowser Process ID - 2468 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SQLTELEMETRY$MSSQLSERVER2017 Process ID - 4688 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SQLWriter Process ID - 2500 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - SSDPSRV Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SstpSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - StateRepository Process ID - 2228 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - stisvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - StorSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - svsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - swprv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SysMain Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - SystemEventsBroker Process ID - 756 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - TabletInputService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - TapiSrv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - TermService Process ID - 972 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Themes Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - TieringEngineService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - tiledatamodelsvc Process ID - 2228 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - TimeBrokerSvc Process ID - 100 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - TrkWks Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - TrustedInstaller Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - tzautoupdate Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UALSVC Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UevAgentService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UI0Detect Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UmRdpService Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - upnphost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UserManager Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - UsoSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - VaultSvc Process ID - 656 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - vds Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicguestinterface Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicheartbeat Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmickvpexchange Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicrdv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicshutdown Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmictimesync Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicvmsession Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - vmicvss Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - VSS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - W32Time Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - w3logsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - W3SVC Process ID - 2116 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WalletService Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WAS Process ID - 2116 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WbioSrvc Process ID - 1792 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Wcmsvc Process ID - 1312 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WdiServiceHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WdiSystemHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WdNisSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - Wecsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WEPHOSTSVC Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - wercplsupport Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WerSvc Process ID - 2620 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WiaRpc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WinDefend Process ID - 2236 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WinHttpAutoProxySvc Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - Winmgmt Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WinRM Process ID - 1152 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - wisvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - wlidsvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - wmiApSrv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WMSVC Process ID - 2288 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WPDBusEnum Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WpnService Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - WSearch Process ID - 7740 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - wudfsvc Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - XblAuthManager Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - XblGameSave Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - CDPUserSvc_4edcb Process ID - 7944 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - OneSyncSvc_4edcb Process ID - 7944 Current State - SERVICE_RUNNING [03-10-2024 10:54:29] New service found: Service Name - PimIndexMaintenanceSvc_4edcb Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UnistoreSvc_4edcb Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - UserDataSvc_4edcb Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:29] New service found: Service Name - WpnUserService_4edcb Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:30] New process found: Process Name - svchost.exe Process ID - 7144 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 10:54:30] New process found: Process Name - pleskstartup.exe Process ID - 7236 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:30] New process found: Process Name - conhost.exe Process ID - 5500 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:30] New process found: Process Name - pleskstartuphandler.exe Process ID - 6400 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:30] Service state changed: Service Name - DbgSvc Process ID - 4736 Current State - SERVICE_RUNNING [03-10-2024 10:54:30] Service state changed: Service Name - DPS Process ID - 1164 Current State - SERVICE_RUNNING [03-10-2024 10:54:30] Service state changed: Service Name - MapsBroker Process ID - 7144 Current State - SERVICE_RUNNING [03-10-2024 10:54:30] Service state changed: Service Name - PleskStartup Process ID - 7236 Current State - SERVICE_START_PENDING [03-10-2024 10:54:30] Service state changed: Service Name - WdiServiceHost Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 10:54:30] Service state changed: Service Name - WdiSystemHost Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:32] New process found: Process Name - dllhost.exe Process ID - 6052 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:32] New process found: Process Name - nssm.exe Process ID - 9288 Process Identity - NT SERVICE\PleskTaskManager [03-10-2024 10:54:32] New process found: Process Name - task-manager.exe Process ID - 8040 Process Identity - NT SERVICE\PleskTaskManager [03-10-2024 10:54:32] New process found: Process Name - conhost.exe Process ID - 7968 Process Identity - NT SERVICE\PleskTaskManager [03-10-2024 10:54:32] Process Exited: Process Name - conhost.exe Process ID - 5500 [03-10-2024 10:54:32] Process Exited: Process Name - pleskstartuphandler.exe Process ID - 6400 [03-10-2024 10:54:32] Process Exited: Process Name - pleskstartup.exe Process ID - 7236 [03-10-2024 10:54:32] Service state changed: Service Name - PleskStartup Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:32] Service state changed: Service Name - PleskTaskManager Process ID - 9288 Current State - SERVICE_START_PENDING [03-10-2024 10:54:32] Service state changed: Service Name - wisvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:33] New process found: Process Name - nssm.exe Process ID - 8156 Process Identity - NT SERVICE\PleskWebSocket [03-10-2024 10:54:33] New process found: Process Name - php.exe Process ID - 2800 Process Identity - NT SERVICE\PleskWebSocket [03-10-2024 10:54:33] New process found: Process Name - conhost.exe Process ID - 2336 Process Identity - NT SERVICE\PleskWebSocket [03-10-2024 10:54:33] Service state changed: Service Name - PleskTaskManager Process ID - 9288 Current State - SERVICE_RUNNING [03-10-2024 10:54:33] Service state changed: Service Name - PleskWebSocket Process ID - 8156 Current State - SERVICE_START_PENDING [03-10-2024 10:54:35] New process found: Process Name - sppsvc.exe Process ID - 8508 Process Identity - SYSTEM [03-10-2024 10:54:35] Service state changed: Service Name - PleskWebSocket Process ID - 8156 Current State - SERVICE_RUNNING [03-10-2024 10:54:35] Service state changed: Service Name - sppsvc Process ID - 8508 Current State - SERVICE_RUNNING [03-10-2024 10:54:35] Service state changed: Service Name - UALSVC Process ID - 460 Current State - SERVICE_START_PENDING [03-10-2024 10:54:36] Process Exited: Process Name - wermgr.exe Process ID - 2596 [03-10-2024 10:54:38] New process found: Process Name - ComboCleaner.Guard.exe Process ID - 9920 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:54:38] Process Exited: Process Name - ComboCleaner.Guard.exe Process ID - 2244 [03-10-2024 10:54:38] Process Exited: Process Name - WerFault.exe Process ID - 2252 [03-10-2024 10:54:38] Process Exited: Process Name - ComboCleaner.Guard.exe Process ID - 4068 [03-10-2024 10:54:38] Process Exited: Process Name - dllhost.exe Process ID - 6052 [03-10-2024 10:54:38] Service state changed: Service Name - ComboCleaner.Guard Process ID - 0 Current State - SERVICE_START_PENDING [03-10-2024 10:54:41] New process found: Process Name - ApplicationFrameHost.exe Process ID - 4364 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:41] New process found: Process Name - SystemSettings.exe Process ID - 3776 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:41] Service state changed: Service Name - MapsBroker Process ID - 7144 Current State - SERVICE_STOP_PENDING [03-10-2024 10:54:41] Service state changed: Service Name - UALSVC Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:54:42] Process Exited: Process Name - MusNotificationUx.exe Process ID - 8012 [03-10-2024 10:54:42] Process Exited: Process Name - MusNotification.exe Process ID - 8244 [03-10-2024 10:54:44] Process Exited: Process Name - ServerManager.exe Process ID - 8556 [03-10-2024 10:54:45] Process Exited: Process Name - SystemSettings.exe Process ID - 3776 [03-10-2024 10:54:45] Process Exited: Process Name - svchost.exe Process ID - 7144 [03-10-2024 10:54:45] Service state changed: Service Name - ComboCleaner.Guard Process ID - 9920 Current State - SERVICE_RUNNING [03-10-2024 10:54:45] Service state changed: Service Name - MapsBroker Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:54:47] New process found: Process Name - w3wp.exe Process ID - 9372 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 10:54:47] New process found: Process Name - cmd.exe Process ID - 9380 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:47] New process found: Process Name - conhost.exe Process ID - 9420 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:54:47] New process found: Process Name - conhost.exe Process ID - 9708 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 10:54:47] Service state changed: Service Name - lfsvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 10:54:58] Service state changed: Service Name - NetSetupSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:08] Process Exited: Process Name - cmd.exe Process ID - 9380 [03-10-2024 10:55:08] Process Exited: Process Name - conhost.exe Process ID - 9420 [03-10-2024 10:55:09] Process Exited: Process Name - svchost.exe Process ID - 1792 [03-10-2024 10:55:09] Service state changed: Service Name - WbioSrvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:11] Process Exited: Process Name - sppsvc.exe Process ID - 8508 [03-10-2024 10:55:11] Service state changed: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:16] New process found: Process Name - python.exe Process ID - 10084 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:16] New process found: Process Name - conhost.exe Process ID - 5872 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:28] New process found: Process Name - w3wp.exe Process ID - 9236 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 10:55:29] New process found: Process Name - w3wp.exe Process ID - 1200 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 10:55:29] New process found: Process Name - php-cgi.exe Process ID - 8456 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 10:55:30] Process Exited: Process Name - svchost.exe Process ID - 2620 [03-10-2024 10:55:30] Service state changed: Service Name - WerSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:39] Process Exited: Process Name - conhost.exe Process ID - 5872 [03-10-2024 10:55:39] Process Exited: Process Name - python.exe Process ID - 10084 [03-10-2024 10:55:39] Service state changed: Service Name - wisvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:43] New process found: Process Name - python.exe Process ID - 8296 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:43] New process found: Process Name - conhost.exe Process ID - 7992 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:44] New process found: Process Name - chrome.exe Process ID - 8276 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:44] New process found: Process Name - chrome.exe Process ID - 7240 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:44] New process found: Process Name - chrome.exe Process ID - 9244 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:44] New process found: Process Name - chrome.exe Process ID - 10216 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:44] New process found: Process Name - updater.exe Process ID - 9764 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:55:44] New process found: Process Name - updater.exe Process ID - 9780 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:55:44] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 9764 Current State - SERVICE_RUNNING [03-10-2024 10:55:45] New process found: Process Name - setup.exe Process ID - 9988 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 3384 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - setup.exe Process ID - 6864 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 9316 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 9460 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 9620 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 8448 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 5908 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] New process found: Process Name - chrome.exe Process ID - 5568 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:55:45] Process Exited: Process Name - chrome.exe Process ID - 7240 [03-10-2024 10:55:45] Process Exited: Process Name - chrome.exe Process ID - 8276 [03-10-2024 10:55:45] Process Exited: Process Name - chrome.exe Process ID - 9244 [03-10-2024 10:55:45] Process Exited: Process Name - updater.exe Process ID - 9764 [03-10-2024 10:55:45] Process Exited: Process Name - updater.exe Process ID - 9780 [03-10-2024 10:55:45] Process Exited: Process Name - chrome.exe Process ID - 10216 [03-10-2024 10:55:45] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:55:51] New process found: Process Name - WMIADAP.exe Process ID - 5604 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:55:51] Service state changed: Service Name - NgcSvc Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 10:56:00] New process found: Process Name - w3wp.exe Process ID - 7404 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 10:56:00] New process found: Process Name - conhost.exe Process ID - 8732 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 10:56:00] Process Exited: Process Name - setup.exe Process ID - 6864 [03-10-2024 10:56:00] Process Exited: Process Name - setup.exe Process ID - 9988 [03-10-2024 10:56:06] New process found: Process Name - conhost.exe Process ID - 8808 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [03-10-2024 10:56:28] New process found: Process Name - w3wp.exe Process ID - 176 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 10:57:04] Process Exited: Process Name - svchost.exe Process ID - 7768 [03-10-2024 10:57:04] Service state changed: Service Name - AppXSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:57:36] Process Exited: Process Name - audiodg.exe Process ID - 9300 [03-10-2024 10:57:36] Service state changed: Service Name - wlidsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:57:43] Process Exited: Process Name - chrome.exe Process ID - 5908 [03-10-2024 10:57:44] Process Exited: Process Name - chrome.exe Process ID - 5568 [03-10-2024 10:57:45] Process Exited: Process Name - chrome.exe Process ID - 8448 [03-10-2024 10:57:45] Process Exited: Process Name - chrome.exe Process ID - 9460 [03-10-2024 10:57:45] Process Exited: Process Name - chrome.exe Process ID - 9620 [03-10-2024 10:57:47] Process Exited: Process Name - conhost.exe Process ID - 7992 [03-10-2024 10:57:47] Process Exited: Process Name - python.exe Process ID - 8296 [03-10-2024 10:57:48] Process Exited: Process Name - chrome.exe Process ID - 3384 [03-10-2024 10:57:48] Process Exited: Process Name - chrome.exe Process ID - 9316 [03-10-2024 10:57:48] Service state changed: Service Name - NgcSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 10:57:51] New process found: Process Name - wsqmcons.exe Process ID - 9268 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 10:57:52] Process Exited: Process Name - wsqmcons.exe Process ID - 9268 [03-10-2024 10:58:07] New process found: Process Name - cmd.exe Process ID - 5516 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:58:07] New process found: Process Name - conhost.exe Process ID - 4616 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:58:23] Process Exited: Process Name - conhost.exe Process ID - 4616 [03-10-2024 10:58:23] Process Exited: Process Name - cmd.exe Process ID - 5516 [03-10-2024 10:58:27] Process Exited: Process Name - WMIADAP.exe Process ID - 5604 [03-10-2024 10:58:30] New process found: Process Name - powershell.exe Process ID - 5312 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:58:30] New process found: Process Name - conhost.exe Process ID - 7196 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 10:58:57] New process found: Process Name - w3wp.exe Process ID - 1128 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 10:58:58] New process found: Process Name - conhost.exe Process ID - 644 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 11:00:21] Process Exited: Process Name - powershell.exe Process ID - 5312 [03-10-2024 11:00:21] Process Exited: Process Name - conhost.exe Process ID - 7196 [03-10-2024 11:01:27] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9020 [03-10-2024 11:01:30] Process Exited: Process Name - w3wp.exe Process ID - 9236 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:01:38] New process found: Process Name - w3wp.exe Process ID - 7684 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) Web application pool name - pharmacy.acwits.in(domain)(4.0)(pool) [03-10-2024 11:01:39] New process found: Process Name - conhost.exe Process ID - 6368 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) [03-10-2024 11:01:51] New process found: Process Name - XblGameSaveTask.exe Process ID - 10016 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:51] New process found: Process Name - conhost.exe Process ID - 9056 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:52] New process found: Process Name - taskhostw.exe Process ID - 8072 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:52] New process found: Process Name - taskhostw.exe Process ID - 392 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:52] New process found: Process Name - rundll32.exe Process ID - 2476 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:52] New process found: Process Name - taskhostw.exe Process ID - 9840 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:52] New process found: Process Name - Defrag.exe Process ID - 832 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:52] New process found: Process Name - conhost.exe Process ID - 8740 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:52] New process found: Process Name - MpCmdRun.exe Process ID - 9320 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:52] New process found: Process Name - taskhostw.exe Process ID - 8468 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:01:52] Process Exited: Process Name - conhost.exe Process ID - 9056 [03-10-2024 11:01:52] Process Exited: Process Name - XblGameSaveTask.exe Process ID - 10016 [03-10-2024 11:01:52] Service state changed: Service Name - LicenseManager Process ID - 1032 Current State - SERVICE_RUNNING [03-10-2024 11:01:52] Service state changed: Service Name - RemoteRegistry Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:01:52] Service state changed: Service Name - StorSvc Process ID - 460 Current State - SERVICE_START_PENDING [03-10-2024 11:01:53] New process found: Process Name - tzsync.exe Process ID - 9912 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - rundll32.exe Process ID - 6640 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 8648 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - MpCmdRun.exe Process ID - 508 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 5920 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - CompatTelRunner.exe Process ID - 5896 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 10092 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - dstokenclean.exe Process ID - 8244 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - MpCmdRun.exe Process ID - 4212 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 9020 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - svchost.exe Process ID - 9056 Process Identity - SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 7328 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - MpCmdRun.exe Process ID - 7448 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - TrustedInstaller.exe Process ID - 8636 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 9456 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - CompatTelRunner.exe Process ID - 10328 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - cleanmgr.exe Process ID - 10348 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 10376 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - dllhost.exe Process ID - 10692 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - sdiagnhost.exe Process ID - 10776 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:53] New process found: Process Name - ngentask.exe Process ID - 10804 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 10820 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 10868 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - ngentask.exe Process ID - 10880 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - conhost.exe Process ID - 10916 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] New process found: Process Name - ngen.exe Process ID - 11072 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:53] Process Exited: Process Name - taskhostw.exe Process ID - 392 [03-10-2024 11:01:53] Process Exited: Process Name - rundll32.exe Process ID - 2476 [03-10-2024 11:01:53] Process Exited: Process Name - taskhostw.exe Process ID - 8468 [03-10-2024 11:01:53] Service state changed: Service Name - AppXSvc Process ID - 9056 Current State - SERVICE_RUNNING [03-10-2024 11:01:53] Service state changed: Service Name - ClipSVC Process ID - 9056 Current State - SERVICE_RUNNING [03-10-2024 11:01:53] Service state changed: Service Name - DsmSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:01:53] Service state changed: Service Name - StorSvc Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 11:01:53] Service state changed: Service Name - TrustedInstaller Process ID - 8636 Current State - SERVICE_RUNNING [03-10-2024 11:01:53] Service state changed: Service Name - wlidsvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:01:54] New process found: Process Name - ngen.exe Process ID - 8300 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:54] New process found: Process Name - audiodg.exe Process ID - 10524 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:01:54] Process Exited: Process Name - rundll32.exe Process ID - 6640 [03-10-2024 11:01:54] Process Exited: Process Name - ngen.exe Process ID - 11072 [03-10-2024 11:01:55] New process found: Process Name - w3wp.exe Process ID - 8724 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:01:55] New process found: Process Name - MpCmdRun.exe Process ID - 11188 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 11:01:55] New process found: Process Name - ngen.exe Process ID - 5372 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:55] Process Exited: Process Name - w3wp.exe Process ID - 4076 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:01:55] Process Exited: Process Name - ngen.exe Process ID - 8300 [03-10-2024 11:01:55] Process Exited: Process Name - conhost.exe Process ID - 8808 [03-10-2024 11:01:55] Process Exited: Process Name - ngentask.exe Process ID - 10804 [03-10-2024 11:01:55] Process Exited: Process Name - conhost.exe Process ID - 10868 [03-10-2024 11:01:56] Process Exited: Process Name - ngen.exe Process ID - 5372 [03-10-2024 11:01:56] Process Exited: Process Name - taskhostw.exe Process ID - 9840 [03-10-2024 11:01:56] Process Exited: Process Name - ngentask.exe Process ID - 10880 [03-10-2024 11:01:56] Process Exited: Process Name - conhost.exe Process ID - 10916 [03-10-2024 11:01:57] New process found: Process Name - sppsvc.exe Process ID - 11244 Process Identity - SYSTEM [03-10-2024 11:01:57] Process Exited: Process Name - sdiagnhost.exe Process ID - 10776 [03-10-2024 11:01:57] Process Exited: Process Name - conhost.exe Process ID - 10820 [03-10-2024 11:01:57] Service state changed: Service Name - defragsvc Process ID - 8880 Current State - SERVICE_START_PENDING [03-10-2024 11:01:57] Service state changed: Service Name - sppsvc Process ID - 11244 Current State - SERVICE_RUNNING [03-10-2024 11:01:58] New process found: Process Name - svchost.exe Process ID - 8880 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:01:58] Process Exited: Process Name - dllhost.exe Process ID - 10692 [03-10-2024 11:01:58] Service state changed: Service Name - defragsvc Process ID - 8880 Current State - SERVICE_RUNNING [03-10-2024 11:02:01] Process Exited: Process Name - w3wp.exe Process ID - 7404 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 11:02:01] Process Exited: Process Name - conhost.exe Process ID - 8732 [03-10-2024 11:02:30] Process Exited: Process Name - w3wp.exe Process ID - 176 Web application pool name - galaxytools.in [03-10-2024 11:02:30] Service state changed: Service Name - sppsvc Process ID - 11244 Current State - SERVICE_STOP_PENDING [03-10-2024 11:02:41] Process Exited: Process Name - taskhostw.exe Process ID - 8072 [03-10-2024 11:02:41] Service state changed: Service Name - DsmSvc Process ID - 992 Current State - SERVICE_STOP_PENDING [03-10-2024 11:02:48] New process found: Process Name - w3wp.exe Process ID - 4340 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:02:53] Process Exited: Process Name - MpCmdRun.exe Process ID - 508 [03-10-2024 11:02:53] Process Exited: Process Name - conhost.exe Process ID - 5920 [03-10-2024 11:02:53] Process Exited: Process Name - MpCmdRun.exe Process ID - 9320 [03-10-2024 11:02:53] Process Exited: Process Name - conhost.exe Process ID - 9456 [03-10-2024 11:03:02] Process Exited: Process Name - conhost.exe Process ID - 8648 [03-10-2024 11:03:02] Process Exited: Process Name - tzsync.exe Process ID - 9912 [03-10-2024 11:03:36] New process found: Process Name - DismHost.exe Process ID - 5308 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:03:53] Process Exited: Process Name - TrustedInstaller.exe Process ID - 8636 [03-10-2024 11:03:53] Service state changed: Service Name - TrustedInstaller Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:04:09] Process Exited: Process Name - Defrag.exe Process ID - 832 [03-10-2024 11:04:09] Process Exited: Process Name - conhost.exe Process ID - 8740 [03-10-2024 11:04:14] New process found: Process Name - CompatTelRunner.exe Process ID - 5152 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:04:14] Process Exited: Process Name - CompatTelRunner.exe Process ID - 10328 [03-10-2024 11:04:23] Process Exited: Process Name - w3wp.exe Process ID - 4340 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:04:39] Process Exited: Process Name - sppsvc.exe Process ID - 11244 [03-10-2024 11:04:39] Service state changed: Service Name - DsmSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:04:39] Service state changed: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:04:39] Service state changed: Service Name - wisvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:04:40] New process found: Process Name - TrustedInstaller.exe Process ID - 8452 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:04:40] Service state changed: Service Name - TrustedInstaller Process ID - 8452 Current State - SERVICE_RUNNING [03-10-2024 11:04:41] New process found: Process Name - w3wp.exe Process ID - 10080 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) Web application pool name - medblinkit.com(domain)(4.0)(pool) [03-10-2024 11:04:42] New process found: Process Name - conhost.exe Process ID - 9348 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) [03-10-2024 11:04:42] New process found: Process Name - TiWorker.exe Process ID - 8676 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:04:43] Process Exited: Process Name - CompatTelRunner.exe Process ID - 5152 [03-10-2024 11:04:43] Process Exited: Process Name - CompatTelRunner.exe Process ID - 5896 [03-10-2024 11:04:43] Process Exited: Process Name - conhost.exe Process ID - 10092 [03-10-2024 11:04:53] Process Exited: Process Name - MpCmdRun.exe Process ID - 4212 [03-10-2024 11:04:53] Process Exited: Process Name - conhost.exe Process ID - 7328 [03-10-2024 11:05:19] Process Exited: Process Name - DismHost.exe Process ID - 5308 [03-10-2024 11:05:19] Process Exited: Process Name - cleanmgr.exe Process ID - 10348 [03-10-2024 11:05:33] New process found: Process Name - w3wp.exe Process ID - 10248 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:05:33] New process found: Process Name - conhost.exe Process ID - 10400 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:05:41] New process found: Process Name - w3wp.exe Process ID - 10612 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:05:41] Service state changed: Service Name - wisvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:06:07] New process found: Process Name - w3wp.exe Process ID - 10232 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:06:07] New process found: Process Name - conhost.exe Process ID - 9748 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:06:55] New process found: Process Name - w3wp.exe Process ID - 11144 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:06:55] Process Exited: Process Name - w3wp.exe Process ID - 8724 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:06:55] Service state changed: Service Name - ClipSVC Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:07:00] Process Exited: Process Name - conhost.exe Process ID - 644 [03-10-2024 11:07:00] Process Exited: Process Name - w3wp.exe Process ID - 1128 Web application pool name - taxtribute.com [03-10-2024 11:07:10] Process Exited: Process Name - svchost.exe Process ID - 9056 [03-10-2024 11:07:10] Service state changed: Service Name - AppXSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:07:14] Process Exited: Process Name - svchost.exe Process ID - 8880 [03-10-2024 11:07:14] Service state changed: Service Name - defragsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:07:14] Service state changed: Service Name - wlidsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:07:18] Process Exited: Process Name - audiodg.exe Process ID - 10524 [03-10-2024 11:07:19] Process Exited: Process Name - TrustedInstaller.exe Process ID - 8452 [03-10-2024 11:07:19] Process Exited: Process Name - TiWorker.exe Process ID - 8676 [03-10-2024 11:07:19] Service state changed: Service Name - TrustedInstaller Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:07:50] Process Exited: Process Name - w3wp.exe Process ID - 9372 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:07:50] Process Exited: Process Name - conhost.exe Process ID - 9708 [03-10-2024 11:09:04] New process found: Process Name - powershell_ise.exe Process ID - 5940 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:09:30] Process Exited: Process Name - powershell_ise.exe Process ID - 5940 [03-10-2024 11:09:42] New process found: Process Name - python.exe Process ID - 1008 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:09:42] New process found: Process Name - conhost.exe Process ID - 8056 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:09:43] New process found: Process Name - w3wp.exe Process ID - 9508 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:10:04] New process found: Process Name - w3wp.exe Process ID - 10604 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:10:04] New process found: Process Name - where.exe Process ID - 6260 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:10:04] New process found: Process Name - conhost.exe Process ID - 8264 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:10:05] New process found: Process Name - conhost.exe Process ID - 2752 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:10:05] Process Exited: Process Name - where.exe Process ID - 6260 [03-10-2024 11:10:05] Process Exited: Process Name - conhost.exe Process ID - 8264 [03-10-2024 11:10:14] Process Exited: Process Name - w3wp.exe Process ID - 8000 Web application pool name - kdbps.edu.in [03-10-2024 11:10:14] Process Exited: Process Name - conhost.exe Process ID - 9008 [03-10-2024 11:10:23] New process found: Process Name - w3wp.exe Process ID - 11020 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 11:10:23] New process found: Process Name - w3wp.exe Process ID - 8636 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 11:10:23] New process found: Process Name - conhost.exe Process ID - 10076 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 11:10:23] New process found: Process Name - conhost.exe Process ID - 9584 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 11:11:35] Process Exited: Process Name - w3wp.exe Process ID - 10248 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:11:35] Process Exited: Process Name - conhost.exe Process ID - 10400 [03-10-2024 11:11:43] Process Exited: Process Name - conhost.exe Process ID - 9348 [03-10-2024 11:11:43] Process Exited: Process Name - w3wp.exe Process ID - 10080 Web application pool name - medblinkit.com(domain)(4.0)(pool) [03-10-2024 11:11:53] Process Exited: Process Name - dstokenclean.exe Process ID - 8244 [03-10-2024 11:11:53] Process Exited: Process Name - conhost.exe Process ID - 9020 [03-10-2024 11:11:53] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:11:57] New process found: Process Name - w3wp.exe Process ID - 9932 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:11:57] Process Exited: Process Name - w3wp.exe Process ID - 11144 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:12:10] Process Exited: Process Name - conhost.exe Process ID - 9748 [03-10-2024 11:12:10] Process Exited: Process Name - w3wp.exe Process ID - 10232 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:12:12] New process found: Process Name - w3wp.exe Process ID - 10748 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:12:12] New process found: Process Name - conhost.exe Process ID - 576 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:12:50] Process Exited: Process Name - python.exe Process ID - 1008 [03-10-2024 11:12:50] Process Exited: Process Name - conhost.exe Process ID - 8056 [03-10-2024 11:14:17] New process found: Process Name - python.exe Process ID - 5896 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:14:17] New process found: Process Name - conhost.exe Process ID - 10216 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:15:05] New process found: Process Name - w3wp.exe Process ID - 5536 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 11:15:07] New process found: Process Name - w3wp.exe Process ID - 4620 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:15:46] Process Exited: Process Name - w3wp.exe Process ID - 9508 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:15:56] New process found: Process Name - w3wp.exe Process ID - 11060 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) Web application pool name - medblinkit.com(domain)(4.0)(pool) [03-10-2024 11:15:57] New process found: Process Name - where.exe Process ID - 7392 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) [03-10-2024 11:15:57] New process found: Process Name - conhost.exe Process ID - 11000 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) [03-10-2024 11:15:58] New process found: Process Name - conhost.exe Process ID - 11096 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) [03-10-2024 11:15:58] Process Exited: Process Name - where.exe Process ID - 7392 [03-10-2024 11:15:58] Process Exited: Process Name - conhost.exe Process ID - 11000 [03-10-2024 11:16:07] Process Exited: Process Name - conhost.exe Process ID - 2752 [03-10-2024 11:16:07] Process Exited: Process Name - w3wp.exe Process ID - 10604 Web application pool name - tools.taxtribute.com [03-10-2024 11:16:26] Process Exited: Process Name - w3wp.exe Process ID - 8636 Web application pool name - csr.bmvfragrances.com [03-10-2024 11:16:26] Process Exited: Process Name - conhost.exe Process ID - 9584 [03-10-2024 11:16:27] New process found: Process Name - w3wp.exe Process ID - 2216 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:16:27] New process found: Process Name - conhost.exe Process ID - 4616 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:16:32] Process Exited: Process Name - python.exe Process ID - 5896 [03-10-2024 11:16:32] Process Exited: Process Name - conhost.exe Process ID - 10216 [03-10-2024 11:16:34] New process found: Process Name - dllhost.exe Process ID - 676 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:16:34] New process found: Process Name - dllhost.exe Process ID - 344 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:16:43] New process found: Process Name - w3wp.exe Process ID - 1240 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 11:16:44] New process found: Process Name - pythonw.exe Process ID - 4092 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:16:44] Process Exited: Process Name - dllhost.exe Process ID - 676 [03-10-2024 11:16:45] New process found: Process Name - SearchProtocolHost.exe Process ID - 2744 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:16:45] New process found: Process Name - SearchFilterHost.exe Process ID - 8248 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:16:46] New process found: Process Name - pythonw.exe Process ID - 9772 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:16:52] New process found: Process Name - svchost.exe Process ID - 6724 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:16:52] Service state changed: Service Name - BITS Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:16:52] Service state changed: Service Name - SSDPSRV Process ID - 6724 Current State - SERVICE_RUNNING [03-10-2024 11:16:58] New process found: Process Name - w3wp.exe Process ID - 2556 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:16:58] Process Exited: Process Name - w3wp.exe Process ID - 9932 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:17:11] New process found: Process Name - where.exe Process ID - 9480 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 11:17:11] New process found: Process Name - conhost.exe Process ID - 8716 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 11:17:12] New process found: Process Name - conhost.exe Process ID - 11240 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 11:17:12] Process Exited: Process Name - conhost.exe Process ID - 8716 [03-10-2024 11:17:12] Process Exited: Process Name - where.exe Process ID - 9480 [03-10-2024 11:17:44] Process Exited: Process Name - w3wp.exe Process ID - 10612 Web application pool name - DefaultAppPool [03-10-2024 11:18:14] Process Exited: Process Name - conhost.exe Process ID - 576 [03-10-2024 11:18:14] Process Exited: Process Name - pythonw.exe Process ID - 4092 [03-10-2024 11:18:14] Process Exited: Process Name - pythonw.exe Process ID - 9772 [03-10-2024 11:18:14] Process Exited: Process Name - w3wp.exe Process ID - 10748 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:18:18] New process found: Process Name - w3wp.exe Process ID - 8676 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:18:18] New process found: Process Name - py.exe Process ID - 9616 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:18:18] New process found: Process Name - conhost.exe Process ID - 3572 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:18:18] New process found: Process Name - python.exe Process ID - 7932 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:18:18] New process found: Process Name - python.exe Process ID - 228 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:18:54] New process found: Process Name - w3wp.exe Process ID - 8572 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:18:54] New process found: Process Name - conhost.exe Process ID - 6044 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:18:54] Service state changed: Service Name - BITS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:19:06] New process found: Process Name - python.exe Process ID - 2680 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:06] Process Exited: Process Name - python.exe Process ID - 228 [03-10-2024 11:19:16] New process found: Process Name - python.exe Process ID - 6208 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:16] Process Exited: Process Name - python.exe Process ID - 2680 [03-10-2024 11:19:21] Process Exited: Process Name - conhost.exe Process ID - 3572 [03-10-2024 11:19:21] Process Exited: Process Name - python.exe Process ID - 6208 [03-10-2024 11:19:21] Process Exited: Process Name - python.exe Process ID - 7932 [03-10-2024 11:19:21] Process Exited: Process Name - py.exe Process ID - 9616 [03-10-2024 11:19:35] New process found: Process Name - iexplore.exe Process ID - 5388 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:36] New process found: Process Name - iexplore.exe Process ID - 10572 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:38] Process Exited: Process Name - iexplore.exe Process ID - 10572 [03-10-2024 11:19:39] New process found: Process Name - InetMgr.exe Process ID - 8384 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:48] New process found: Process Name - dllhost.exe Process ID - 11192 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:19:53] Process Exited: Process Name - dllhost.exe Process ID - 11192 [03-10-2024 11:20:01] New process found: Process Name - w3wp.exe Process ID - 9744 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:20:02] New process found: Process Name - w3wp.exe Process ID - 9800 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:20:02] New process found: Process Name - conhost.exe Process ID - 9828 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 11:20:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 2744 [03-10-2024 11:20:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 8248 [03-10-2024 11:20:04] Process Exited: Process Name - conhost.exe Process ID - 6044 [03-10-2024 11:20:04] Process Exited: Process Name - w3wp.exe Process ID - 8572 Web application pool name - tools.taxtribute.com [03-10-2024 11:20:06] Process Exited: Process Name - iexplore.exe Process ID - 5388 [03-10-2024 11:20:10] New process found: Process Name - where.exe Process ID - 10564 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:20:10] New process found: Process Name - conhost.exe Process ID - 8824 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:20:11] New process found: Process Name - conhost.exe Process ID - 7900 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:20:11] Process Exited: Process Name - conhost.exe Process ID - 8824 [03-10-2024 11:20:11] Process Exited: Process Name - where.exe Process ID - 10564 [03-10-2024 11:20:23] New process found: Process Name - notepad.exe Process ID - 10460 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:20:26] Process Exited: Process Name - notepad.exe Process ID - 10460 [03-10-2024 11:20:33] Process Exited: Process Name - MpCmdRun.exe Process ID - 7448 [03-10-2024 11:20:33] Process Exited: Process Name - conhost.exe Process ID - 10376 [03-10-2024 11:20:35] New process found: Process Name - lpremove.exe Process ID - 9768 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:20:35] New process found: Process Name - conhost.exe Process ID - 7984 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:20:36] Process Exited: Process Name - conhost.exe Process ID - 7984 [03-10-2024 11:20:36] Process Exited: Process Name - lpremove.exe Process ID - 9768 [03-10-2024 11:20:37] New process found: Process Name - taskhostw.exe Process ID - 3948 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:20:48] Service state changed: Service Name - BITS Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:21:08] Process Exited: Process Name - w3wp.exe Process ID - 5536 Web application pool name - galaxytools.in [03-10-2024 11:21:09] Process Exited: Process Name - w3wp.exe Process ID - 4620 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:21:37] New process found: Process Name - WmiPrvSE.exe Process ID - 5360 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:21:39] Process Exited: Process Name - taskhostw.exe Process ID - 3948 [03-10-2024 11:21:41] New process found: Process Name - w3wp.exe Process ID - 8360 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11144 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 9944 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:21:59] New process found: Process Name - w3wp.exe Process ID - 9144 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:21:59] Process Exited: Process Name - w3wp.exe Process ID - 2556 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:22:20] New process found: Process Name - w3wp.exe Process ID - 448 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:22:20] New process found: Process Name - conhost.exe Process ID - 9460 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 11:22:44] Process Exited: Process Name - w3wp.exe Process ID - 1240 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 11:22:44] Process Exited: Process Name - conhost.exe Process ID - 11240 [03-10-2024 11:22:55] Service state changed: Service Name - BITS Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:24:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 9944 [03-10-2024 11:24:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11144 [03-10-2024 11:24:20] Process Exited: Process Name - w3wp.exe Process ID - 8676 Web application pool name - DefaultAppPool [03-10-2024 11:24:21] New process found: Process Name - w3wp.exe Process ID - 772 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:24:41] Process Exited: Process Name - dllhost.exe Process ID - 344 [03-10-2024 11:26:04] Process Exited: Process Name - w3wp.exe Process ID - 9800 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:26:04] Process Exited: Process Name - conhost.exe Process ID - 9828 [03-10-2024 11:26:40] New process found: Process Name - csrss.exe Process ID - 4464 Process Identity - SYSTEM [03-10-2024 11:26:40] New process found: Process Name - winlogon.exe Process ID - 5220 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:40] New process found: Process Name - LogonUI.exe Process ID - 6032 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:40] New process found: Process Name - dwm.exe Process ID - 4764 Process Identity - Window Manager\DWM-3 [03-10-2024 11:26:40] New process found: Process Name - dllhost.exe Process ID - 8996 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:40] New process found: Process Name - TSTheme.exe Process ID - 8580 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:40] New process found: Process Name - Malwarebytes.exe Process ID - 9716 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:40] New process found: Process Name - rdpclip.exe Process ID - 5604 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - RuntimeBroker.exe Process ID - 7376 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - sihost.exe Process ID - 9692 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - svchost.exe Process ID - 9908 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - taskhostw.exe Process ID - 10472 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - userinit.exe Process ID - 1452 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - explorer.exe Process ID - 10772 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - updater.exe Process ID - 9832 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:41] New process found: Process Name - taskhostw.exe Process ID - 9636 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - updater.exe Process ID - 8288 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:41] New process found: Process Name - sppsvc.exe Process ID - 8112 Process Identity - SYSTEM [03-10-2024 11:26:41] New process found: Process Name - updater.exe Process ID - 10800 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:41] New process found: Process Name - updater.exe Process ID - 7420 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:41] New process found: Process Name - audiodg.exe Process ID - 10748 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:26:41] New process found: Process Name - ShellExperienceHost.exe Process ID - 10308 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - ServerManager.exe Process ID - 8492 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - SearchUI.exe Process ID - 10492 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] New process found: Process Name - svchost.exe Process ID - 11436 Process Identity - SYSTEM [03-10-2024 11:26:41] New process found: Process Name - InstallAgent.exe Process ID - 11544 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:41] Process Exited: Process Name - LogonUI.exe Process ID - 6032 [03-10-2024 11:26:41] Service state changed: Service Name - AppXSvc Process ID - 11436 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] Service state changed: Service Name - DsmSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 9832 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 10800 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] Service state changed: Service Name - NetSetupSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] Service state changed: Service Name - sppsvc Process ID - 8112 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] New service found: Service Name - CDPUserSvc_7a24a9 Process ID - 9908 Current State - SERVICE_RUNNING [03-10-2024 11:26:41] New service found: Service Name - OneSyncSvc_7a24a9 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:41] New service found: Service Name - PimIndexMaintenanceSvc_7a24a9 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:41] New service found: Service Name - UnistoreSvc_7a24a9 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:41] New service found: Service Name - UserDataSvc_7a24a9 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:41] New service found: Service Name - WpnUserService_7a24a9 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:42] New process found: Process Name - InstallAgentUserBroker.exe Process ID - 11656 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:42] New process found: Process Name - SppExtComObj.Exe Process ID - 11748 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 11:26:42] New process found: Process Name - slui.exe Process ID - 11784 Process Identity - NT AUTHORITY\NETWORK SERVICE [03-10-2024 11:26:42] New process found: Process Name - slui.exe Process ID - 11820 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11892 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:26:42] Process Exited: Process Name - taskhostw.exe Process ID - 9636 [03-10-2024 11:26:42] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 11:26:44] New process found: Process Name - mobsync.exe Process ID - 11992 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:44] Process Exited: Process Name - slui.exe Process ID - 11784 [03-10-2024 11:26:44] Process Exited: Process Name - slui.exe Process ID - 11820 [03-10-2024 11:26:45] Process Exited: Process Name - dllhost.exe Process ID - 8996 [03-10-2024 11:26:46] Process Exited: Process Name - TSTheme.exe Process ID - 8580 [03-10-2024 11:26:47] Process Exited: Process Name - InstallAgentUserBroker.exe Process ID - 11656 [03-10-2024 11:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12248 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:26:49] Process Exited: Process Name - InstallAgent.exe Process ID - 11544 [03-10-2024 11:26:50] New process found: Process Name - TSTheme.exe Process ID - 4372 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:51] New process found: Process Name - ComboCleaner.exe Process ID - 9148 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:51] Process Exited: Process Name - updater.exe Process ID - 7420 [03-10-2024 11:26:51] Process Exited: Process Name - updater.exe Process ID - 8288 [03-10-2024 11:26:51] Process Exited: Process Name - updater.exe Process ID - 9832 [03-10-2024 11:26:51] Process Exited: Process Name - updater.exe Process ID - 10800 [03-10-2024 11:26:51] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:51] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:26:54] Process Exited: Process Name - mobsync.exe Process ID - 11992 [03-10-2024 11:26:55] New process found: Process Name - traymonitor.exe Process ID - 10704 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:55] New process found: Process Name - METray.exe Process ID - 11844 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:26:56] Process Exited: Process Name - TSTheme.exe Process ID - 4372 [03-10-2024 11:26:58] New process found: Process Name - w3wp.exe Process ID - 10624 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:27:00] Process Exited: Process Name - conhost.exe Process ID - 7900 [03-10-2024 11:27:00] Process Exited: Process Name - w3wp.exe Process ID - 9744 Web application pool name - tools.taxtribute.com [03-10-2024 11:27:01] New process found: Process Name - w3wp.exe Process ID - 12164 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:27:01] Process Exited: Process Name - userinit.exe Process ID - 1452 [03-10-2024 11:27:01] Process Exited: Process Name - w3wp.exe Process ID - 9144 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:27:11] New process found: Process Name - wlrmdr.exe Process ID - 6400 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:27:13] New process found: Process Name - conhost.exe Process ID - 5896 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:27:14] Process Exited: Process Name - sppsvc.exe Process ID - 8112 [03-10-2024 11:27:14] Process Exited: Process Name - SppExtComObj.Exe Process ID - 11748 [03-10-2024 11:27:14] Service state changed: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:27:29] Process Exited: Process Name - w3wp.exe Process ID - 2216 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:27:29] Process Exited: Process Name - conhost.exe Process ID - 4616 [03-10-2024 11:27:29] Service state changed: Service Name - DsmSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:27:41] New process found: Process Name - dllhost.exe Process ID - 10780 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:27:44] Process Exited: Process Name - w3wp.exe Process ID - 8360 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:27:46] Process Exited: Process Name - dllhost.exe Process ID - 10780 [03-10-2024 11:27:48] New process found: Process Name - w3wp.exe Process ID - 11384 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:27:48] New process found: Process Name - conhost.exe Process ID - 11372 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:27:51] New process found: Process Name - w3wp.exe Process ID - 11772 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:27:51] New process found: Process Name - where.exe Process ID - 928 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:27:51] New process found: Process Name - conhost.exe Process ID - 8652 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:27:52] New process found: Process Name - conhost.exe Process ID - 9620 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:27:52] Process Exited: Process Name - where.exe Process ID - 928 [03-10-2024 11:27:52] Process Exited: Process Name - conhost.exe Process ID - 8652 [03-10-2024 11:27:53] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11892 [03-10-2024 11:27:53] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12248 [03-10-2024 11:28:15] Service state changed: Service Name - NetSetupSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:28:48] Service state changed: Service Name - OneSyncSvc_7a24a9 Process ID - 9908 Current State - SERVICE_RUNNING [03-10-2024 11:29:23] New process found: Process Name - w3wp.exe Process ID - 11392 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 11:30:26] New process found: Process Name - w3wp.exe Process ID - 11780 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:31:09] New process found: Process Name - w3wp.exe Process ID - 11360 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:31:11] Process Exited: Process Name - conhost.exe Process ID - 5896 [03-10-2024 11:31:11] Process Exited: Process Name - w3wp.exe Process ID - 10624 Web application pool name - tools.taxtribute.com [03-10-2024 11:31:21] New process found: Process Name - conhost.exe Process ID - 12548 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:31:22] Process Exited: Process Name - w3wp.exe Process ID - 772 Web application pool name - DefaultAppPool [03-10-2024 11:31:44] Process Exited: Process Name - svchost.exe Process ID - 11436 [03-10-2024 11:31:44] Service state changed: Service Name - AppXSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:31:52] New process found: Process Name - dllhost.exe Process ID - 13004 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:31:57] Process Exited: Process Name - dllhost.exe Process ID - 13004 [03-10-2024 11:32:02] New process found: Process Name - w3wp.exe Process ID - 13208 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:32:02] Process Exited: Process Name - w3wp.exe Process ID - 12164 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:32:48] New process found: Process Name - dllhost.exe Process ID - 3624 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:32:53] Process Exited: Process Name - dllhost.exe Process ID - 3624 [03-10-2024 11:32:56] New process found: Process Name - w3wp.exe Process ID - 10152 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:32:59] Process Exited: Process Name - w3wp.exe Process ID - 11360 Web application pool name - tools.taxtribute.com [03-10-2024 11:32:59] Process Exited: Process Name - conhost.exe Process ID - 12548 [03-10-2024 11:33:18] New process found: Process Name - conhost.exe Process ID - 11660 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:33:23] Process Exited: Process Name - w3wp.exe Process ID - 448 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:33:23] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5360 [03-10-2024 11:33:23] Process Exited: Process Name - conhost.exe Process ID - 9460 [03-10-2024 11:33:53] Process Exited: Process Name - conhost.exe Process ID - 9620 [03-10-2024 11:33:53] Process Exited: Process Name - w3wp.exe Process ID - 11772 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:34:50] Process Exited: Process Name - conhost.exe Process ID - 11372 [03-10-2024 11:34:50] Process Exited: Process Name - w3wp.exe Process ID - 11384 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:34:51] New process found: Process Name - notepad.exe Process ID - 10164 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:34:56] Process Exited: Process Name - notepad.exe Process ID - 10164 [03-10-2024 11:36:13] Process Exited: Process Name - audiodg.exe Process ID - 10748 [03-10-2024 11:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 8828 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:36:47] New process found: Process Name - dllhost.exe Process ID - 5360 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:36:47] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:36:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 1724 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:36:48] New process found: Process Name - SearchFilterHost.exe Process ID - 13024 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11228 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:37:03] New process found: Process Name - w3wp.exe Process ID - 8676 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:37:03] Process Exited: Process Name - w3wp.exe Process ID - 13208 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:37:29] Process Exited: Process Name - w3wp.exe Process ID - 11780 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:37:32] Process Exited: Process Name - dllhost.exe Process ID - 5360 [03-10-2024 11:37:40] New process found: Process Name - w3wp.exe Process ID - 3936 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:37:40] New process found: Process Name - where.exe Process ID - 3620 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:37:40] New process found: Process Name - conhost.exe Process ID - 13172 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:37:41] New process found: Process Name - conhost.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 11:37:41] Process Exited: Process Name - where.exe Process ID - 3620 [03-10-2024 11:37:41] Process Exited: Process Name - conhost.exe Process ID - 13172 [03-10-2024 11:37:58] New process found: Process Name - w3wp.exe Process ID - 12524 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:38:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 1724 [03-10-2024 11:38:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 13024 [03-10-2024 11:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8828 [03-10-2024 11:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11228 [03-10-2024 11:38:43] New process found: Process Name - w3wp.exe Process ID - 5876 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:38:43] New process found: Process Name - where.exe Process ID - 3356 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:38:43] New process found: Process Name - conhost.exe Process ID - 10636 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:38:44] New process found: Process Name - conhost.exe Process ID - 12012 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:38:44] Process Exited: Process Name - where.exe Process ID - 3356 [03-10-2024 11:38:44] Process Exited: Process Name - conhost.exe Process ID - 10636 [03-10-2024 11:38:52] New process found: Process Name - w3wp.exe Process ID - 12740 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 11:38:58] Process Exited: Process Name - w3wp.exe Process ID - 10152 Web application pool name - tools.taxtribute.com [03-10-2024 11:38:58] Process Exited: Process Name - conhost.exe Process ID - 11660 [03-10-2024 11:42:04] New process found: Process Name - w3wp.exe Process ID - 12896 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:42:04] Process Exited: Process Name - w3wp.exe Process ID - 8676 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:42:45] New process found: Process Name - w3wp.exe Process ID - 2556 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:43:42] New process found: Process Name - w3wp.exe Process ID - 9472 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:43:42] New process found: Process Name - conhost.exe Process ID - 12300 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 11:44:00] Process Exited: Process Name - w3wp.exe Process ID - 12524 Web application pool name - DefaultAppPool [03-10-2024 11:44:44] Process Exited: Process Name - w3wp.exe Process ID - 5876 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:44:44] Process Exited: Process Name - conhost.exe Process ID - 12012 [03-10-2024 11:44:54] Process Exited: Process Name - w3wp.exe Process ID - 12740 Web application pool name - taxtribute.com [03-10-2024 11:45:08] New process found: Process Name - w3wp.exe Process ID - 1788 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:45:22] New process found: Process Name - w3wp.exe Process ID - 11736 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:45:22] New process found: Process Name - where.exe Process ID - 1236 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 11:45:22] New process found: Process Name - conhost.exe Process ID - 9572 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 11:45:23] New process found: Process Name - conhost.exe Process ID - 12720 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 11:45:23] Process Exited: Process Name - where.exe Process ID - 1236 [03-10-2024 11:45:23] Process Exited: Process Name - conhost.exe Process ID - 9572 [03-10-2024 11:45:25] New process found: Process Name - dllhost.exe Process ID - 10444 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:45:25] New process found: Process Name - dllhost.exe Process ID - 9684 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:45:31] New process found: Process Name - SystemPropertiesAdvanced.exe Process ID - 4308 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:45:36] Process Exited: Process Name - dllhost.exe Process ID - 10444 [03-10-2024 11:46:39] New process found: Process Name - w3wp.exe Process ID - 2272 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:46:39] New process found: Process Name - conhost.exe Process ID - 5328 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 11:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9384 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10416 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:47:06] New process found: Process Name - w3wp.exe Process ID - 10712 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:47:06] Process Exited: Process Name - w3wp.exe Process ID - 12896 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:47:26] Process Exited: Process Name - w3wp.exe Process ID - 11392 Web application pool name - galaxytools.in [03-10-2024 11:47:52] New process found: Process Name - w3wp.exe Process ID - 5632 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 11:47:52] New process found: Process Name - conhost.exe Process ID - 11680 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 11:48:09] Process Exited: Process Name - SystemPropertiesAdvanced.exe Process ID - 4308 [03-10-2024 11:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9384 [03-10-2024 11:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10416 [03-10-2024 11:48:28] New process found: Process Name - notepad.exe Process ID - 12284 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 11:48:56] New process found: Process Name - w3wp.exe Process ID - 10992 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:48:57] New process found: Process Name - w3wp.exe Process ID - 3028 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 11:49:30] Service state changed: Service Name - WdiSystemHost Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 11:50:43] Process Exited: Process Name - w3wp.exe Process ID - 3936 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:50:43] Process Exited: Process Name - conhost.exe Process ID - 8564 [03-10-2024 11:50:48] Process Exited: Process Name - w3wp.exe Process ID - 2556 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:51:10] Process Exited: Process Name - w3wp.exe Process ID - 1788 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:51:20] New process found: Process Name - w3wp.exe Process ID - 10844 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:51:20] New process found: Process Name - conhost.exe Process ID - 12424 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 11:51:30] Process Exited: Process Name - php-cgi.exe Process ID - 8456 [03-10-2024 11:51:31] Process Exited: Process Name - w3wp.exe Process ID - 1200 Web application pool name - PleskControlPanel [03-10-2024 11:51:44] Process Exited: Process Name - w3wp.exe Process ID - 9472 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:51:44] Process Exited: Process Name - conhost.exe Process ID - 12300 [03-10-2024 11:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 3964 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 11928 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:51:56] New process found: Process Name - w3wp.exe Process ID - 9780 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 11:51:56] New process found: Process Name - php-cgi.exe Process ID - 3620 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 11:51:56] New process found: Process Name - php-cgi.exe Process ID - 2668 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 11:51:56] New process found: Process Name - php-cgi.exe Process ID - 11992 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 11:51:57] New process found: Process Name - w3wp.exe Process ID - 2392 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 11:52:06] New process found: Process Name - w3wp.exe Process ID - 1992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:52:06] Process Exited: Process Name - w3wp.exe Process ID - 10712 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:52:12] New process found: Process Name - php-cgi.exe Process ID - 7656 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 11:52:26] Process Exited: Process Name - w3wp.exe Process ID - 11736 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:52:26] Process Exited: Process Name - conhost.exe Process ID - 12720 [03-10-2024 11:52:32] New process found: Process Name - w3wp.exe Process ID - 10540 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:52:40] Process Exited: Process Name - w3wp.exe Process ID - 2272 Web application pool name - masteradmin.taxtribute.com [03-10-2024 11:52:40] Process Exited: Process Name - conhost.exe Process ID - 5328 [03-10-2024 11:53:33] Process Exited: Process Name - dllhost.exe Process ID - 9684 [03-10-2024 11:53:54] Process Exited: Process Name - w3wp.exe Process ID - 5632 Web application pool name - tools.taxtribute.com [03-10-2024 11:53:54] Process Exited: Process Name - conhost.exe Process ID - 11680 [03-10-2024 11:53:55] New process found: Process Name - w3wp.exe Process ID - 3340 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 11:53:56] New process found: Process Name - conhost.exe Process ID - 1804 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 11:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 3964 [03-10-2024 11:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 11928 [03-10-2024 11:54:58] Process Exited: Process Name - w3wp.exe Process ID - 10992 Web application pool name - DefaultAppPool [03-10-2024 11:56:41] New process found: Process Name - dllhost.exe Process ID - 11484 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 684 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 11:56:46] Process Exited: Process Name - dllhost.exe Process ID - 11484 [03-10-2024 11:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9224 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 11:57:08] New process found: Process Name - w3wp.exe Process ID - 11600 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 11:57:08] New process found: Process Name - w3wp.exe Process ID - 10880 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:57:08] Process Exited: Process Name - w3wp.exe Process ID - 1992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 11:57:22] Process Exited: Process Name - w3wp.exe Process ID - 10844 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:57:22] Process Exited: Process Name - conhost.exe Process ID - 12424 [03-10-2024 11:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 684 [03-10-2024 11:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9224 [03-10-2024 11:58:12] New process found: Process Name - w3wp.exe Process ID - 1000 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 11:58:12] New process found: Process Name - conhost.exe Process ID - 11680 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 11:58:34] Process Exited: Process Name - w3wp.exe Process ID - 10540 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 11:59:31] New process found: Process Name - w3wp.exe Process ID - 8316 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 11:59:35] New process found: Process Name - w3wp.exe Process ID - 10140 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 11:59:35] New process found: Process Name - conhost.exe Process ID - 3380 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 11:59:56] Process Exited: Process Name - conhost.exe Process ID - 1804 [03-10-2024 11:59:56] Process Exited: Process Name - w3wp.exe Process ID - 3340 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 11:59:59] Process Exited: Process Name - w3wp.exe Process ID - 3028 Web application pool name - prathabypriyal.com [03-10-2024 12:00:38] New process found: Process Name - w3wp.exe Process ID - 768 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 12:00:52] New process found: Process Name - w3wp.exe Process ID - 6340 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:00:52] New process found: Process Name - conhost.exe Process ID - 688 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 12:02:09] New process found: Process Name - w3wp.exe Process ID - 8804 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:02:09] Process Exited: Process Name - w3wp.exe Process ID - 10880 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:03:10] Process Exited: Process Name - w3wp.exe Process ID - 11600 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:04:14] Process Exited: Process Name - w3wp.exe Process ID - 1000 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:04:14] Process Exited: Process Name - conhost.exe Process ID - 11680 [03-10-2024 12:04:37] New process found: Process Name - w3wp.exe Process ID - 1176 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 12:05:33] Process Exited: Process Name - w3wp.exe Process ID - 8316 Web application pool name - DefaultAppPool [03-10-2024 12:05:37] Process Exited: Process Name - conhost.exe Process ID - 3380 [03-10-2024 12:05:37] Process Exited: Process Name - w3wp.exe Process ID - 10140 Web application pool name - csr.bmvfragrances.com [03-10-2024 12:06:17] New process found: Process Name - w3wp.exe Process ID - 2740 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 12:06:18] New process found: Process Name - conhost.exe Process ID - 13032 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 12:06:32] New process found: Process Name - w3wp.exe Process ID - 1180 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 12:06:41] Process Exited: Process Name - w3wp.exe Process ID - 768 Web application pool name - galaxytools.in [03-10-2024 12:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10360 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3160 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:06:54] Process Exited: Process Name - conhost.exe Process ID - 688 [03-10-2024 12:06:55] Process Exited: Process Name - w3wp.exe Process ID - 6340 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:07:11] New process found: Process Name - w3wp.exe Process ID - 5388 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:07:11] Process Exited: Process Name - w3wp.exe Process ID - 8804 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3160 [03-10-2024 12:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10360 [03-10-2024 12:09:28] New process found: Process Name - w3wp.exe Process ID - 12180 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 12:09:28] New process found: Process Name - conhost.exe Process ID - 6408 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 12:11:40] Process Exited: Process Name - w3wp.exe Process ID - 1176 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 12:12:11] New process found: Process Name - w3wp.exe Process ID - 5132 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:12:11] Process Exited: Process Name - w3wp.exe Process ID - 5388 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:12:19] Process Exited: Process Name - w3wp.exe Process ID - 2740 Web application pool name - taxtribute.com [03-10-2024 12:12:19] Process Exited: Process Name - conhost.exe Process ID - 13032 [03-10-2024 12:12:36] New process found: Process Name - w3wp.exe Process ID - 10956 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 12:12:45] New process found: Process Name - conhost.exe Process ID - 12752 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 12:13:00] Process Exited: Process Name - w3wp.exe Process ID - 2392 Web application pool name - shop.galaxytools.in [03-10-2024 12:14:31] New process found: Process Name - w3wp.exe Process ID - 12256 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 12:15:08] New process found: Process Name - w3wp.exe Process ID - 13128 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:15:22] New process found: Process Name - w3wp.exe Process ID - 2156 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:15:26] New process found: Process Name - conhost.exe Process ID - 3364 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 12:15:30] Process Exited: Process Name - conhost.exe Process ID - 6408 [03-10-2024 12:15:30] Process Exited: Process Name - w3wp.exe Process ID - 12180 Web application pool name - csr.bmvfragrances.com [03-10-2024 12:15:37] New process found: Process Name - w3wp.exe Process ID - 11048 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:15:40] New process found: Process Name - conhost.exe Process ID - 9124 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 12:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 392 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2636 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:17:13] New process found: Process Name - w3wp.exe Process ID - 10340 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:17:13] Process Exited: Process Name - w3wp.exe Process ID - 5132 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:17:56] New process found: Process Name - w3wp.exe Process ID - 11032 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:17:57] New process found: Process Name - conhost.exe Process ID - 11644 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 12:18:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 392 [03-10-2024 12:18:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2636 [03-10-2024 12:21:11] Process Exited: Process Name - w3wp.exe Process ID - 13128 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:21:24] Process Exited: Process Name - w3wp.exe Process ID - 2156 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:21:24] Process Exited: Process Name - conhost.exe Process ID - 3364 [03-10-2024 12:21:39] Process Exited: Process Name - conhost.exe Process ID - 9124 [03-10-2024 12:21:39] Process Exited: Process Name - w3wp.exe Process ID - 11048 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 5912 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 12576 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:22:14] New process found: Process Name - w3wp.exe Process ID - 12712 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:22:14] Process Exited: Process Name - w3wp.exe Process ID - 10340 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:22:38] Process Exited: Process Name - w3wp.exe Process ID - 10956 Web application pool name - taxtribute.com [03-10-2024 12:22:38] Process Exited: Process Name - conhost.exe Process ID - 12752 [03-10-2024 12:23:58] Process Exited: Process Name - w3wp.exe Process ID - 11032 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:23:58] Process Exited: Process Name - conhost.exe Process ID - 11644 [03-10-2024 12:24:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 5912 [03-10-2024 12:24:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 12576 [03-10-2024 12:24:21] New process found: Process Name - w3wp.exe Process ID - 5948 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 12:24:22] New process found: Process Name - conhost.exe Process ID - 11084 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 12:25:46] New process found: Process Name - w3wp.exe Process ID - 12140 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 12:25:48] New process found: Process Name - conhost.exe Process ID - 11372 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 12:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9300 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9372 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:27:16] New process found: Process Name - w3wp.exe Process ID - 12020 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:27:16] Process Exited: Process Name - w3wp.exe Process ID - 12712 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9300 [03-10-2024 12:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9372 [03-10-2024 12:28:28] New process found: Process Name - w3wp.exe Process ID - 12244 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 12:28:28] New process found: Process Name - conhost.exe Process ID - 3756 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 12:30:20] New process found: Process Name - w3wp.exe Process ID - 6292 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 12:30:26] New process found: Process Name - w3wp.exe Process ID - 13092 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 12:30:26] New process found: Process Name - w3wp.exe Process ID - 9248 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:30:27] New process found: Process Name - conhost.exe Process ID - 7456 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 12:31:05] New process found: Process Name - w3wp.exe Process ID - 2360 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 12:31:08] New process found: Process Name - conhost.exe Process ID - 10512 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 12:31:24] Process Exited: Process Name - w3wp.exe Process ID - 5948 Web application pool name - csr.bmvfragrances.com [03-10-2024 12:31:24] Process Exited: Process Name - conhost.exe Process ID - 11084 [03-10-2024 12:31:32] Process Exited: Process Name - w3wp.exe Process ID - 12256 Web application pool name - galaxytools.in [03-10-2024 12:31:49] Process Exited: Process Name - conhost.exe Process ID - 11372 [03-10-2024 12:31:49] Process Exited: Process Name - w3wp.exe Process ID - 12140 Web application pool name - taxtribute.com [03-10-2024 12:32:06] New process found: Process Name - w3wp.exe Process ID - 11972 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 12:32:07] New process found: Process Name - conhost.exe Process ID - 1044 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 12:32:16] New process found: Process Name - w3wp.exe Process ID - 11368 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:32:16] Process Exited: Process Name - w3wp.exe Process ID - 12020 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:34:30] Process Exited: Process Name - conhost.exe Process ID - 3756 [03-10-2024 12:34:30] Process Exited: Process Name - w3wp.exe Process ID - 12244 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 12:34:32] New process found: Process Name - w3wp.exe Process ID - 2432 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 12:35:01] New process found: Process Name - sshost.exe Process ID - 11912 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:01] New process found: Process Name - conhost.exe Process ID - 10348 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:01] New process found: Process Name - mysqldump.exe Process ID - 9416 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:01] New process found: Process Name - conhost.exe Process ID - 12824 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:14] New process found: Process Name - mysqldump.exe Process ID - 11376 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:14] New process found: Process Name - conhost.exe Process ID - 9048 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:35:14] Process Exited: Process Name - mysqldump.exe Process ID - 9416 [03-10-2024 12:35:14] Process Exited: Process Name - conhost.exe Process ID - 12824 [03-10-2024 12:35:15] Process Exited: Process Name - conhost.exe Process ID - 9048 [03-10-2024 12:35:15] Process Exited: Process Name - conhost.exe Process ID - 10348 [03-10-2024 12:35:15] Process Exited: Process Name - mysqldump.exe Process ID - 11376 [03-10-2024 12:35:15] Process Exited: Process Name - sshost.exe Process ID - 11912 [03-10-2024 12:35:35] Process Exited: Process Name - w3wp.exe Process ID - 1180 Web application pool name - DefaultAppPool [03-10-2024 12:36:13] New process found: Process Name - w3wp.exe Process ID - 10728 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 12:36:13] New process found: Process Name - conhost.exe Process ID - 9936 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 12:36:22] Process Exited: Process Name - w3wp.exe Process ID - 6292 Web application pool name - edtribute.com [03-10-2024 12:36:28] Process Exited: Process Name - w3wp.exe Process ID - 13092 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 12:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12228 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9832 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:37:00] New process found: Process Name - w3wp.exe Process ID - 13280 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 12:37:07] Process Exited: Process Name - w3wp.exe Process ID - 2360 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 12:37:07] Process Exited: Process Name - conhost.exe Process ID - 10512 [03-10-2024 12:37:18] New process found: Process Name - w3wp.exe Process ID - 12220 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:37:18] Process Exited: Process Name - w3wp.exe Process ID - 11368 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:38:08] Process Exited: Process Name - conhost.exe Process ID - 1044 [03-10-2024 12:38:08] Process Exited: Process Name - w3wp.exe Process ID - 11972 Web application pool name - taxtribute.com [03-10-2024 12:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9832 [03-10-2024 12:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12228 [03-10-2024 12:42:16] Process Exited: Process Name - conhost.exe Process ID - 9936 [03-10-2024 12:42:16] Process Exited: Process Name - w3wp.exe Process ID - 10728 Web application pool name - csr.bmvfragrances.com [03-10-2024 12:42:19] New process found: Process Name - w3wp.exe Process ID - 6044 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:42:19] Process Exited: Process Name - w3wp.exe Process ID - 12220 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:43:27] Process Exited: Process Name - conhost.exe Process ID - 7456 [03-10-2024 12:43:27] Process Exited: Process Name - w3wp.exe Process ID - 9248 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:46:34] Process Exited: Process Name - w3wp.exe Process ID - 2432 Web application pool name - galaxytools.in [03-10-2024 12:46:41] New process found: Process Name - WmiPrvSE.exe Process ID - 9372 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9376 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:47:15] New process found: Process Name - w3wp.exe Process ID - 11148 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 12:47:18] New process found: Process Name - conhost.exe Process ID - 6292 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) [03-10-2024 12:47:20] New process found: Process Name - w3wp.exe Process ID - 380 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:47:20] Process Exited: Process Name - w3wp.exe Process ID - 6044 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9372 [03-10-2024 12:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9376 [03-10-2024 12:49:02] Process Exited: Process Name - w3wp.exe Process ID - 13280 Web application pool name - DefaultAppPool [03-10-2024 12:50:56] New process found: Process Name - w3wp.exe Process ID - 8000 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 12:50:58] New process found: Process Name - conhost.exe Process ID - 328 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 12:51:09] New process found: Process Name - w3wp.exe Process ID - 11296 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:51:09] New process found: Process Name - conhost.exe Process ID - 12200 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 12:51:23] New process found: Process Name - w3wp.exe Process ID - 11900 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 12:51:25] New process found: Process Name - w3wp.exe Process ID - 1776 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 12:51:39] New process found: Process Name - w3wp.exe Process ID - 11668 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 2248 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 10364 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:51:59] Service state changed: Service Name - wisvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 12:51:59] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 12:52:21] New process found: Process Name - w3wp.exe Process ID - 10020 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:52:21] Process Exited: Process Name - w3wp.exe Process ID - 380 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:52:54] Service state changed: Service Name - wisvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 12:53:01] New process found: Process Name - w3wp.exe Process ID - 12116 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 12:53:18] Process Exited: Process Name - conhost.exe Process ID - 6292 [03-10-2024 12:53:18] Process Exited: Process Name - w3wp.exe Process ID - 11148 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 12:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 2248 [03-10-2024 12:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 10364 [03-10-2024 12:55:19] New process found: Process Name - w3wp.exe Process ID - 12296 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 12:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 4220 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 12:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5160 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 12:57:11] Process Exited: Process Name - w3wp.exe Process ID - 11296 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:57:11] Process Exited: Process Name - conhost.exe Process ID - 12200 [03-10-2024 12:57:23] New process found: Process Name - w3wp.exe Process ID - 9516 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:57:23] Process Exited: Process Name - w3wp.exe Process ID - 10020 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 12:57:27] Process Exited: Process Name - w3wp.exe Process ID - 1776 Web application pool name - galaxytools.in [03-10-2024 12:57:41] Process Exited: Process Name - w3wp.exe Process ID - 11668 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 12:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4220 [03-10-2024 12:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5160 [03-10-2024 12:59:04] Process Exited: Process Name - w3wp.exe Process ID - 12116 Web application pool name - adminportal.galaxytools.in [03-10-2024 13:01:21] Process Exited: Process Name - w3wp.exe Process ID - 12296 Web application pool name - prathabypriyal.com [03-10-2024 13:01:54] New process found: Process Name - w3wp.exe Process ID - 868 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:01:54] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 13:01:59] Process Exited: Process Name - conhost.exe Process ID - 328 [03-10-2024 13:01:59] Process Exited: Process Name - w3wp.exe Process ID - 8000 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:02:17] New process found: Process Name - w3wp.exe Process ID - 10252 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 13:02:24] New process found: Process Name - w3wp.exe Process ID - 5440 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:02:24] Process Exited: Process Name - w3wp.exe Process ID - 9516 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:02:25] New process found: Process Name - w3wp.exe Process ID - 11740 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 13:02:25] Process Exited: Process Name - conhost.exe Process ID - 10076 [03-10-2024 13:02:25] Process Exited: Process Name - w3wp.exe Process ID - 11020 Web application pool name - kdbps.edu.in [03-10-2024 13:04:26] Process Exited: Process Name - w3wp.exe Process ID - 11900 Web application pool name - DefaultAppPool [03-10-2024 13:04:51] New process found: Process Name - w3wp.exe Process ID - 10756 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 13:05:09] New process found: Process Name - where.exe Process ID - 5928 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 13:05:09] New process found: Process Name - conhost.exe Process ID - 13276 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 13:05:10] New process found: Process Name - conhost.exe Process ID - 6364 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 13:05:10] Process Exited: Process Name - where.exe Process ID - 5928 [03-10-2024 13:05:10] Process Exited: Process Name - conhost.exe Process ID - 13276 [03-10-2024 13:06:41] New process found: Process Name - WmiPrvSE.exe Process ID - 12180 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 4204 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:07:02] New process found: Process Name - w3wp.exe Process ID - 11048 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 13:07:02] New process found: Process Name - conhost.exe Process ID - 8436 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 13:07:25] New process found: Process Name - w3wp.exe Process ID - 10616 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:07:25] Process Exited: Process Name - w3wp.exe Process ID - 5440 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4204 [03-10-2024 13:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12180 [03-10-2024 13:09:48] New process found: Process Name - w3wp.exe Process ID - 8016 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:09:48] New process found: Process Name - conhost.exe Process ID - 1476 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:10:56] Process Exited: Process Name - w3wp.exe Process ID - 868 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:12:26] New process found: Process Name - w3wp.exe Process ID - 6640 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:12:26] Process Exited: Process Name - w3wp.exe Process ID - 10616 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:14:04] Process Exited: Process Name - conhost.exe Process ID - 8436 [03-10-2024 13:14:04] Process Exited: Process Name - w3wp.exe Process ID - 11048 Web application pool name - masteradmin.taxtribute.com [03-10-2024 13:14:18] New process found: Process Name - w3wp.exe Process ID - 1200 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:14:19] New process found: Process Name - where.exe Process ID - 8684 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:14:19] New process found: Process Name - conhost.exe Process ID - 13176 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:14:20] New process found: Process Name - conhost.exe Process ID - 9184 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:14:20] Process Exited: Process Name - where.exe Process ID - 8684 [03-10-2024 13:14:20] Process Exited: Process Name - conhost.exe Process ID - 13176 [03-10-2024 13:15:50] Process Exited: Process Name - conhost.exe Process ID - 1476 [03-10-2024 13:15:50] Process Exited: Process Name - w3wp.exe Process ID - 8016 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:16:04] New process found: Process Name - w3wp.exe Process ID - 3964 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:16:21] New process found: Process Name - w3wp.exe Process ID - 6324 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 13:16:25] New process found: Process Name - conhost.exe Process ID - 1572 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 13:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10496 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6628 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:17:10] New process found: Process Name - w3wp.exe Process ID - 11460 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 13:17:28] New process found: Process Name - w3wp.exe Process ID - 824 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:17:28] Process Exited: Process Name - w3wp.exe Process ID - 6640 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6628 [03-10-2024 13:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10496 [03-10-2024 13:18:19] Process Exited: Process Name - w3wp.exe Process ID - 10252 Web application pool name - galaxytools.in [03-10-2024 13:18:51] New process found: Process Name - w3wp.exe Process ID - 9988 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 13:18:51] New process found: Process Name - where.exe Process ID - 11348 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 13:18:51] New process found: Process Name - conhost.exe Process ID - 12568 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 13:18:52] New process found: Process Name - conhost.exe Process ID - 1096 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 13:18:52] Process Exited: Process Name - where.exe Process ID - 11348 [03-10-2024 13:18:52] Process Exited: Process Name - conhost.exe Process ID - 12568 [03-10-2024 13:18:55] New process found: Process Name - w3wp.exe Process ID - 528 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 13:19:53] Process Exited: Process Name - w3wp.exe Process ID - 10756 Web application pool name - DefaultAppPool [03-10-2024 13:21:38] New process found: Process Name - w3wp.exe Process ID - 10744 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 13:21:56] Process Exited: Process Name - php-cgi.exe Process ID - 2668 [03-10-2024 13:21:56] Process Exited: Process Name - php-cgi.exe Process ID - 3620 [03-10-2024 13:22:19] Process Exited: Process Name - w3wp.exe Process ID - 1200 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:22:19] Process Exited: Process Name - conhost.exe Process ID - 9184 [03-10-2024 13:22:22] Process Exited: Process Name - conhost.exe Process ID - 1572 [03-10-2024 13:22:22] Process Exited: Process Name - w3wp.exe Process ID - 6324 Web application pool name - taxtribute.com [03-10-2024 13:22:29] New process found: Process Name - w3wp.exe Process ID - 9460 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:22:29] Process Exited: Process Name - w3wp.exe Process ID - 824 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:22:41] New process found: Process Name - w3wp.exe Process ID - 7508 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:22:41] New process found: Process Name - where.exe Process ID - 2008 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:22:41] New process found: Process Name - conhost.exe Process ID - 7084 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:22:42] New process found: Process Name - conhost.exe Process ID - 8096 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:22:42] Process Exited: Process Name - where.exe Process ID - 2008 [03-10-2024 13:22:42] Process Exited: Process Name - conhost.exe Process ID - 7084 [03-10-2024 13:23:13] Process Exited: Process Name - w3wp.exe Process ID - 11460 Web application pool name - edtribute.com [03-10-2024 13:23:40] New process found: Process Name - w3wp.exe Process ID - 5360 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 13:24:57] Process Exited: Process Name - w3wp.exe Process ID - 528 Web application pool name - prathabypriyal.com [03-10-2024 13:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10632 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9236 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:27:30] New process found: Process Name - w3wp.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:27:30] Process Exited: Process Name - w3wp.exe Process ID - 9460 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:27:40] Process Exited: Process Name - w3wp.exe Process ID - 10744 Web application pool name - galaxytools.in [03-10-2024 13:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9236 [03-10-2024 13:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10632 [03-10-2024 13:28:44] Process Exited: Process Name - w3wp.exe Process ID - 7508 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:28:44] Process Exited: Process Name - conhost.exe Process ID - 8096 [03-10-2024 13:29:06] Process Exited: Process Name - w3wp.exe Process ID - 3964 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:29:42] Process Exited: Process Name - w3wp.exe Process ID - 5360 Web application pool name - DefaultAppPool [03-10-2024 13:29:53] Process Exited: Process Name - conhost.exe Process ID - 1096 [03-10-2024 13:29:53] Process Exited: Process Name - w3wp.exe Process ID - 9988 Web application pool name - masteradmin.taxtribute.com [03-10-2024 13:30:16] New process found: Process Name - w3wp.exe Process ID - 10168 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 13:31:57] New process found: Process Name - TSTheme.exe Process ID - 6244 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 13:32:03] Process Exited: Process Name - TSTheme.exe Process ID - 6244 [03-10-2024 13:32:32] New process found: Process Name - w3wp.exe Process ID - 5348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:32:32] Process Exited: Process Name - w3wp.exe Process ID - 11768 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:33:05] Service state changed: Service Name - ScDeviceEnum Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 13:34:19] New process found: Process Name - w3wp.exe Process ID - 12788 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:34:19] New process found: Process Name - conhost.exe Process ID - 9852 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 13:34:42] New process found: Process Name - w3wp.exe Process ID - 1016 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:34:44] New process found: Process Name - conhost.exe Process ID - 12948 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:35:16] New process found: Process Name - w3wp.exe Process ID - 9848 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 13:36:17] Process Exited: Process Name - w3wp.exe Process ID - 10168 Web application pool name - DefaultAppPool [03-10-2024 13:36:25] New process found: Process Name - w3wp.exe Process ID - 8788 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 13:36:30] New process found: Process Name - conhost.exe Process ID - 12372 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 13:36:36] New process found: Process Name - w3wp.exe Process ID - 11340 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 13:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 4608 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11928 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:36:54] New process found: Process Name - w3wp.exe Process ID - 11200 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 13:36:54] New process found: Process Name - conhost.exe Process ID - 11476 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 13:37:33] New process found: Process Name - w3wp.exe Process ID - 13220 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:37:33] Process Exited: Process Name - w3wp.exe Process ID - 5348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4608 [03-10-2024 13:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11928 [03-10-2024 13:39:06] New process found: Process Name - w3wp.exe Process ID - 12188 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:39:07] New process found: Process Name - where.exe Process ID - 12924 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:39:07] New process found: Process Name - conhost.exe Process ID - 12816 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:39:08] New process found: Process Name - conhost.exe Process ID - 11432 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 13:39:08] Process Exited: Process Name - conhost.exe Process ID - 12816 [03-10-2024 13:39:08] Process Exited: Process Name - where.exe Process ID - 12924 [03-10-2024 13:39:28] New process found: Process Name - w3wp.exe Process ID - 10508 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:40:07] New process found: Process Name - w3wp.exe Process ID - 13128 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:40:07] New process found: Process Name - conhost.exe Process ID - 6892 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 13:40:44] Process Exited: Process Name - w3wp.exe Process ID - 1016 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:40:44] Process Exited: Process Name - conhost.exe Process ID - 12948 [03-10-2024 13:40:57] Process Exited: Process Name - php-cgi.exe Process ID - 7656 [03-10-2024 13:40:57] Process Exited: Process Name - php-cgi.exe Process ID - 11992 [03-10-2024 13:40:58] Process Exited: Process Name - w3wp.exe Process ID - 9780 Web application pool name - PleskControlPanel [03-10-2024 13:42:34] New process found: Process Name - w3wp.exe Process ID - 9100 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:42:34] Process Exited: Process Name - w3wp.exe Process ID - 13220 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:42:38] Process Exited: Process Name - w3wp.exe Process ID - 11340 Web application pool name - prathabypriyal.com [03-10-2024 13:42:56] Process Exited: Process Name - w3wp.exe Process ID - 11200 Web application pool name - csr.bmvfragrances.com [03-10-2024 13:42:56] Process Exited: Process Name - conhost.exe Process ID - 11476 [03-10-2024 13:43:14] New process found: Process Name - w3wp.exe Process ID - 8760 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:43:14] New process found: Process Name - where.exe Process ID - 12792 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:43:14] New process found: Process Name - conhost.exe Process ID - 10616 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:43:15] New process found: Process Name - conhost.exe Process ID - 9004 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 13:43:15] Process Exited: Process Name - conhost.exe Process ID - 10616 [03-10-2024 13:43:15] Process Exited: Process Name - where.exe Process ID - 12792 [03-10-2024 13:44:50] New process found: Process Name - w3wp.exe Process ID - 8844 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 13:44:50] New process found: Process Name - php-cgi.exe Process ID - 7184 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 13:45:17] New process found: Process Name - w3wp.exe Process ID - 10628 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 13:45:30] Process Exited: Process Name - w3wp.exe Process ID - 10508 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:46:10] Process Exited: Process Name - conhost.exe Process ID - 6892 [03-10-2024 13:46:10] Process Exited: Process Name - w3wp.exe Process ID - 13128 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:46:21] Process Exited: Process Name - conhost.exe Process ID - 9852 [03-10-2024 13:46:21] Process Exited: Process Name - w3wp.exe Process ID - 12788 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:46:28] Process Exited: Process Name - w3wp.exe Process ID - 8788 Web application pool name - taxtribute.com [03-10-2024 13:46:28] Process Exited: Process Name - conhost.exe Process ID - 12372 [03-10-2024 13:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 3636 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10176 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:47:31] New process found: Process Name - InstallAgent.exe Process ID - 3720 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 13:47:31] New process found: Process Name - InstallAgent.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 13:47:35] New process found: Process Name - w3wp.exe Process ID - 10540 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:47:35] Process Exited: Process Name - w3wp.exe Process ID - 9100 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:47:36] Process Exited: Process Name - InstallAgent.exe Process ID - 3720 [03-10-2024 13:47:36] Process Exited: Process Name - InstallAgent.exe Process ID - 12728 [03-10-2024 13:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3636 [03-10-2024 13:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10176 [03-10-2024 13:48:18] Process Exited: Process Name - w3wp.exe Process ID - 9848 Web application pool name - galaxytools.in [03-10-2024 13:49:08] Process Exited: Process Name - conhost.exe Process ID - 11432 [03-10-2024 13:49:08] Process Exited: Process Name - w3wp.exe Process ID - 12188 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:50:18] New process found: Process Name - w3wp.exe Process ID - 3268 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 13:51:34] New process found: Process Name - w3wp.exe Process ID - 776 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:51:34] New process found: Process Name - conhost.exe Process ID - 8332 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 13:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11660 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 12820 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:52:37] New process found: Process Name - w3wp.exe Process ID - 2748 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:52:37] Process Exited: Process Name - w3wp.exe Process ID - 10540 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:53:12] New process found: Process Name - w3wp.exe Process ID - 9220 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 13:53:15] New process found: Process Name - conhost.exe Process ID - 11300 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 13:53:20] Process Exited: Process Name - w3wp.exe Process ID - 10628 Web application pool name - DefaultAppPool [03-10-2024 13:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11660 [03-10-2024 13:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 12820 [03-10-2024 13:54:28] New process found: Process Name - w3wp.exe Process ID - 12248 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 13:54:28] New process found: Process Name - conhost.exe Process ID - 1892 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 13:56:18] New process found: Process Name - w3wp.exe Process ID - 12796 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 13:56:41] New process found: Process Name - WmiPrvSE.exe Process ID - 10988 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 13:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9780 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 13:57:16] Process Exited: Process Name - w3wp.exe Process ID - 8760 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 13:57:16] Process Exited: Process Name - conhost.exe Process ID - 9004 [03-10-2024 13:57:24] New process found: Process Name - w3wp.exe Process ID - 4024 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 13:57:24] New process found: Process Name - conhost.exe Process ID - 4372 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 13:57:35] Process Exited: Process Name - w3wp.exe Process ID - 776 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 13:57:35] Process Exited: Process Name - conhost.exe Process ID - 8332 [03-10-2024 13:57:37] New process found: Process Name - w3wp.exe Process ID - 12404 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:57:37] Process Exited: Process Name - w3wp.exe Process ID - 2748 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 13:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9780 [03-10-2024 13:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10988 [03-10-2024 13:59:14] Process Exited: Process Name - w3wp.exe Process ID - 9220 Web application pool name - taxtribute.com [03-10-2024 13:59:14] Process Exited: Process Name - conhost.exe Process ID - 11300 [03-10-2024 13:59:44] New process found: Process Name - w3wp.exe Process ID - 3044 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 13:59:45] New process found: Process Name - conhost.exe Process ID - 10720 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 14:01:21] Process Exited: Process Name - w3wp.exe Process ID - 3268 Web application pool name - galaxytools.in [03-10-2024 14:02:11] New process found: Process Name - w3wp.exe Process ID - 3372 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:02:20] Process Exited: Process Name - w3wp.exe Process ID - 12796 Web application pool name - prathabypriyal.com [03-10-2024 14:02:39] New process found: Process Name - w3wp.exe Process ID - 6860 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:02:39] Process Exited: Process Name - w3wp.exe Process ID - 12404 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:02:41] New process found: Process Name - w3wp.exe Process ID - 10808 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 14:03:26] Process Exited: Process Name - w3wp.exe Process ID - 4024 Web application pool name - schoolerp.edtribute.com [03-10-2024 14:03:26] Process Exited: Process Name - conhost.exe Process ID - 4372 [03-10-2024 14:04:52] New process found: Process Name - w3wp.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 14:05:12] New process found: Process Name - w3wp.exe Process ID - 4308 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:05:12] New process found: Process Name - conhost.exe Process ID - 3268 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 14:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11092 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:06:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 1872 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:06:48] New process found: Process Name - SearchFilterHost.exe Process ID - 10236 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1800 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:06:54] New process found: Process Name - w3wp.exe Process ID - 5896 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:07:40] New process found: Process Name - w3wp.exe Process ID - 11640 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:07:40] Process Exited: Process Name - w3wp.exe Process ID - 6860 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:08:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 1872 [03-10-2024 14:08:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 10236 [03-10-2024 14:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1800 [03-10-2024 14:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11092 [03-10-2024 14:08:14] Process Exited: Process Name - w3wp.exe Process ID - 3372 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:08:43] Process Exited: Process Name - w3wp.exe Process ID - 10808 Web application pool name - galaxytools.in [03-10-2024 14:09:30] New process found: Process Name - w3wp.exe Process ID - 2172 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 14:09:32] New process found: Process Name - conhost.exe Process ID - 9212 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 14:10:46] Process Exited: Process Name - w3wp.exe Process ID - 3044 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:10:46] Process Exited: Process Name - conhost.exe Process ID - 10720 [03-10-2024 14:10:54] Process Exited: Process Name - w3wp.exe Process ID - 176 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [03-10-2024 14:11:13] Process Exited: Process Name - conhost.exe Process ID - 3268 [03-10-2024 14:11:13] Process Exited: Process Name - w3wp.exe Process ID - 4308 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:12:27] New process found: Process Name - w3wp.exe Process ID - 528 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 14:12:30] New process found: Process Name - conhost.exe Process ID - 1668 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 14:12:30] Process Exited: Process Name - conhost.exe Process ID - 1892 [03-10-2024 14:12:30] Process Exited: Process Name - w3wp.exe Process ID - 12248 Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:12:42] New process found: Process Name - w3wp.exe Process ID - 8276 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:12:42] Process Exited: Process Name - w3wp.exe Process ID - 11640 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:12:56] Process Exited: Process Name - w3wp.exe Process ID - 5896 Web application pool name - DefaultAppPool [03-10-2024 14:13:09] New process found: Process Name - w3wp.exe Process ID - 7900 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:15:33] Process Exited: Process Name - w3wp.exe Process ID - 2172 Web application pool name - taxtribute.com [03-10-2024 14:15:33] Process Exited: Process Name - conhost.exe Process ID - 9212 [03-10-2024 14:16:41] New process found: Process Name - WmiPrvSE.exe Process ID - 8516 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 1784 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:17:43] New process found: Process Name - w3wp.exe Process ID - 6672 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:17:43] Process Exited: Process Name - w3wp.exe Process ID - 8276 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:17:51] New process found: Process Name - w3wp.exe Process ID - 10344 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 14:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1784 [03-10-2024 14:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8516 [03-10-2024 14:18:57] New process found: Process Name - w3wp.exe Process ID - 12076 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:18:57] New process found: Process Name - conhost.exe Process ID - 11668 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 14:19:10] New process found: Process Name - w3wp.exe Process ID - 12100 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 14:19:12] Process Exited: Process Name - w3wp.exe Process ID - 7900 Web application pool name - DefaultAppPool [03-10-2024 14:20:00] New process found: Process Name - w3wp.exe Process ID - 7492 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:21:03] New process found: Process Name - SearchProtocolHost.exe Process ID - 952 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:21:03] New process found: Process Name - SearchFilterHost.exe Process ID - 12504 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:22:29] Process Exited: Process Name - w3wp.exe Process ID - 528 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 14:22:29] Process Exited: Process Name - conhost.exe Process ID - 1668 [03-10-2024 14:22:44] New process found: Process Name - w3wp.exe Process ID - 11388 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:22:44] Process Exited: Process Name - w3wp.exe Process ID - 6672 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:23:53] Process Exited: Process Name - w3wp.exe Process ID - 10344 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 14:23:59] New process found: Process Name - w3wp.exe Process ID - 1068 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 14:24:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 952 [03-10-2024 14:24:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 12504 [03-10-2024 14:25:47] New process found: Process Name - w3wp.exe Process ID - 12524 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:26:12] Process Exited: Process Name - w3wp.exe Process ID - 12100 Web application pool name - prathabypriyal.com [03-10-2024 14:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8976 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12732 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:26:51] Process Exited: Process Name - php-cgi.exe Process ID - 7184 [03-10-2024 14:26:52] Process Exited: Process Name - w3wp.exe Process ID - 8844 Web application pool name - PleskControlPanel [03-10-2024 14:27:45] New process found: Process Name - w3wp.exe Process ID - 9376 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:27:45] Process Exited: Process Name - w3wp.exe Process ID - 11388 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8976 [03-10-2024 14:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12732 [03-10-2024 14:28:59] Process Exited: Process Name - conhost.exe Process ID - 11668 [03-10-2024 14:28:59] Process Exited: Process Name - w3wp.exe Process ID - 12076 Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:29:02] Process Exited: Process Name - w3wp.exe Process ID - 7492 Web application pool name - DefaultAppPool [03-10-2024 14:30:13] New process found: Process Name - w3wp.exe Process ID - 4124 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:30:14] New process found: Process Name - w3wp.exe Process ID - 9916 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [03-10-2024 14:30:14] New process found: Process Name - conhost.exe Process ID - 13172 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 14:30:14] New process found: Process Name - conhost.exe Process ID - 10912 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [03-10-2024 14:30:23] New process found: Process Name - w3wp.exe Process ID - 9832 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 14:31:29] New process found: Process Name - w3wp.exe Process ID - 4548 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:31:30] New process found: Process Name - conhost.exe Process ID - 6720 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 14:32:30] New process found: Process Name - w3wp.exe Process ID - 10556 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 14:32:47] New process found: Process Name - w3wp.exe Process ID - 9036 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:32:47] Process Exited: Process Name - w3wp.exe Process ID - 9376 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:33:02] Process Exited: Process Name - w3wp.exe Process ID - 1068 Web application pool name - galaxytools.in [03-10-2024 14:34:29] New process found: Process Name - w3wp.exe Process ID - 6672 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 14:34:29] New process found: Process Name - php-cgi.exe Process ID - 2024 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 14:35:49] Process Exited: Process Name - w3wp.exe Process ID - 12524 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:35:52] New process found: Process Name - w3wp.exe Process ID - 11896 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:36:16] Process Exited: Process Name - w3wp.exe Process ID - 9916 Web application pool name - schoolerp.taxtribute.com [03-10-2024 14:36:16] Process Exited: Process Name - conhost.exe Process ID - 10912 [03-10-2024 14:36:25] Process Exited: Process Name - w3wp.exe Process ID - 9832 Web application pool name - taxtribute.com [03-10-2024 14:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9840 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11784 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:37:32] Process Exited: Process Name - w3wp.exe Process ID - 4548 Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:37:32] Process Exited: Process Name - conhost.exe Process ID - 6720 [03-10-2024 14:37:47] New process found: Process Name - w3wp.exe Process ID - 9612 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:37:47] Process Exited: Process Name - w3wp.exe Process ID - 9036 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:38:11] New process found: Process Name - w3wp.exe Process ID - 5948 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:38:11] New process found: Process Name - conhost.exe Process ID - 9664 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 14:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9840 [03-10-2024 14:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11784 [03-10-2024 14:38:32] Process Exited: Process Name - w3wp.exe Process ID - 10556 Web application pool name - adminportal.galaxytools.in [03-10-2024 14:39:19] New process found: Process Name - w3wp.exe Process ID - 9132 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 14:40:00] New process found: Process Name - w3wp.exe Process ID - 11588 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 14:41:45] New process found: Process Name - w3wp.exe Process ID - 10140 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:41:46] New process found: Process Name - conhost.exe Process ID - 12952 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 14:41:54] Process Exited: Process Name - w3wp.exe Process ID - 11896 Web application pool name - DefaultAppPool [03-10-2024 14:42:49] New process found: Process Name - w3wp.exe Process ID - 5976 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:42:49] Process Exited: Process Name - w3wp.exe Process ID - 9612 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:43:57] New process found: Process Name - w3wp.exe Process ID - 13188 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 14:44:08] New process found: Process Name - w3wp.exe Process ID - 8136 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:44:13] Process Exited: Process Name - w3wp.exe Process ID - 5948 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:44:13] Process Exited: Process Name - conhost.exe Process ID - 9664 [03-10-2024 14:45:21] New process found: Process Name - w3wp.exe Process ID - 7984 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 14:45:21] Process Exited: Process Name - w3wp.exe Process ID - 9132 Web application pool name - galaxytools.in [03-10-2024 14:46:01] Process Exited: Process Name - w3wp.exe Process ID - 11588 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 14:46:33] New process found: Process Name - w3wp.exe Process ID - 13068 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10364 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9636 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:47:18] New process found: Process Name - w3wp.exe Process ID - 6216 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 14:47:18] New process found: Process Name - conhost.exe Process ID - 11548 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 14:47:51] New process found: Process Name - w3wp.exe Process ID - 1528 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:47:51] Process Exited: Process Name - w3wp.exe Process ID - 5976 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9636 [03-10-2024 14:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10364 [03-10-2024 14:48:16] Process Exited: Process Name - w3wp.exe Process ID - 4124 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:48:16] Process Exited: Process Name - conhost.exe Process ID - 13172 [03-10-2024 14:48:48] Process Exited: Process Name - w3wp.exe Process ID - 10140 Web application pool name - masteradmin.taxtribute.com [03-10-2024 14:48:48] Process Exited: Process Name - conhost.exe Process ID - 12952 [03-10-2024 14:48:59] New process found: Process Name - w3wp.exe Process ID - 5116 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:48:59] New process found: Process Name - conhost.exe Process ID - 13064 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 14:50:00] Process Exited: Process Name - w3wp.exe Process ID - 13188 Web application pool name - shop.galaxytools.in [03-10-2024 14:50:34] New process found: Process Name - w3wp.exe Process ID - 1012 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 14:51:10] Process Exited: Process Name - w3wp.exe Process ID - 8136 Web application pool name - DefaultAppPool [03-10-2024 14:51:23] Process Exited: Process Name - w3wp.exe Process ID - 7984 Web application pool name - prathabypriyal.com [03-10-2024 14:52:36] Process Exited: Process Name - w3wp.exe Process ID - 13068 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 14:52:51] New process found: Process Name - w3wp.exe Process ID - 10184 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:52:51] Process Exited: Process Name - w3wp.exe Process ID - 1528 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:53:20] Process Exited: Process Name - w3wp.exe Process ID - 6216 Web application pool name - tools.taxtribute.com [03-10-2024 14:53:20] Process Exited: Process Name - conhost.exe Process ID - 11548 [03-10-2024 14:55:49] New process found: Process Name - w3wp.exe Process ID - 624 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 14:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13188 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 14:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4136 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 14:57:27] Process Exited: Process Name - conhost.exe Process ID - 6364 [03-10-2024 14:57:27] Process Exited: Process Name - w3wp.exe Process ID - 11740 Web application pool name - kdbps.edu.in [03-10-2024 14:57:48] New process found: Process Name - w3wp.exe Process ID - 11644 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 14:57:48] New process found: Process Name - conhost.exe Process ID - 7136 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 14:57:53] New process found: Process Name - w3wp.exe Process ID - 11940 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:57:53] Process Exited: Process Name - w3wp.exe Process ID - 10184 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 14:58:01] Process Exited: Process Name - w3wp.exe Process ID - 5116 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 14:58:01] Process Exited: Process Name - conhost.exe Process ID - 13064 [03-10-2024 14:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4136 [03-10-2024 14:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13188 [03-10-2024 14:59:13] New process found: Process Name - w3wp.exe Process ID - 11876 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 14:59:13] New process found: Process Name - conhost.exe Process ID - 10376 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:00:36] Process Exited: Process Name - w3wp.exe Process ID - 1012 Web application pool name - galaxytools.in [03-10-2024 15:01:56] Process Exited: Process Name - w3wp.exe Process ID - 5616 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:01:56] Process Exited: Process Name - conhost.exe Process ID - 5780 [03-10-2024 15:02:01] New process found: Process Name - w3wp.exe Process ID - 6260 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:02:02] New process found: Process Name - conhost.exe Process ID - 11616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 15:02:26] New process found: Process Name - w3wp.exe Process ID - 2156 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:02:26] New process found: Process Name - conhost.exe Process ID - 11676 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 15:02:51] Process Exited: Process Name - w3wp.exe Process ID - 624 Web application pool name - DefaultAppPool [03-10-2024 15:02:54] New process found: Process Name - w3wp.exe Process ID - 8624 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:02:54] Process Exited: Process Name - w3wp.exe Process ID - 11940 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:04:55] New process found: Process Name - w3wp.exe Process ID - 12400 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:05:14] Process Exited: Process Name - conhost.exe Process ID - 10376 [03-10-2024 15:05:14] Process Exited: Process Name - w3wp.exe Process ID - 11876 Web application pool name - taxtribute.com [03-10-2024 15:05:30] Process Exited: Process Name - php-cgi.exe Process ID - 2024 [03-10-2024 15:05:31] Process Exited: Process Name - w3wp.exe Process ID - 6672 Web application pool name - PleskControlPanel [03-10-2024 15:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10848 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:06:43] New process found: Process Name - w3wp.exe Process ID - 3900 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 15:06:43] New process found: Process Name - where.exe Process ID - 284 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 15:06:43] New process found: Process Name - conhost.exe Process ID - 3268 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 15:06:44] New process found: Process Name - conhost.exe Process ID - 9432 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 15:06:44] Process Exited: Process Name - where.exe Process ID - 284 [03-10-2024 15:06:44] Process Exited: Process Name - conhost.exe Process ID - 3268 [03-10-2024 15:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 8780 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:06:49] New process found: Process Name - w3wp.exe Process ID - 7176 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 15:07:03] New process found: Process Name - w3wp.exe Process ID - 5820 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 15:07:55] New process found: Process Name - w3wp.exe Process ID - 332 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:07:55] Process Exited: Process Name - w3wp.exe Process ID - 8624 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8780 [03-10-2024 15:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10848 [03-10-2024 15:08:19] New process found: Process Name - w3wp.exe Process ID - 5228 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 15:08:19] New process found: Process Name - conhost.exe Process ID - 8424 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 15:09:11] New process found: Process Name - w3wp.exe Process ID - 11916 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:09:11] New process found: Process Name - conhost.exe Process ID - 10048 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 15:10:47] New process found: Process Name - conhost.exe Process ID - 1576 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [03-10-2024 15:13:57] Process Exited: Process Name - w3wp.exe Process ID - 12400 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:14:22] Process Exited: Process Name - w3wp.exe Process ID - 5228 Web application pool name - schoolerp.edtribute.com [03-10-2024 15:14:22] Process Exited: Process Name - conhost.exe Process ID - 8424 [03-10-2024 15:14:28] Process Exited: Process Name - w3wp.exe Process ID - 2156 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:14:28] Process Exited: Process Name - conhost.exe Process ID - 11676 [03-10-2024 15:15:06] Process Exited: Process Name - w3wp.exe Process ID - 5820 Web application pool name - galaxytools.in [03-10-2024 15:15:13] Process Exited: Process Name - conhost.exe Process ID - 10048 [03-10-2024 15:15:13] Process Exited: Process Name - w3wp.exe Process ID - 11916 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:15:56] New process found: Process Name - w3wp.exe Process ID - 3992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:15:56] Process Exited: Process Name - w3wp.exe Process ID - 332 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:15:56] Process Exited: Process Name - conhost.exe Process ID - 1576 [03-10-2024 15:16:03] Process Exited: Process Name - w3wp.exe Process ID - 6260 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:16:03] Process Exited: Process Name - conhost.exe Process ID - 11616 [03-10-2024 15:16:09] New process found: Process Name - w3wp.exe Process ID - 8560 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:16:09] New process found: Process Name - conhost.exe Process ID - 9832 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 15:16:41] New process found: Process Name - WmiPrvSE.exe Process ID - 7104 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 8436 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:17:11] New process found: Process Name - w3wp.exe Process ID - 12924 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 15:17:31] New process found: Process Name - w3wp.exe Process ID - 12876 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 15:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7104 [03-10-2024 15:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8436 [03-10-2024 15:18:19] New process found: Process Name - w3wp.exe Process ID - 572 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:18:19] New process found: Process Name - conhost.exe Process ID - 12156 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 15:18:45] Process Exited: Process Name - w3wp.exe Process ID - 3900 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 15:18:45] Process Exited: Process Name - conhost.exe Process ID - 9432 [03-10-2024 15:20:58] New process found: Process Name - w3wp.exe Process ID - 10604 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:20:58] Process Exited: Process Name - w3wp.exe Process ID - 3992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:21:50] Process Exited: Process Name - conhost.exe Process ID - 7136 [03-10-2024 15:21:50] Process Exited: Process Name - w3wp.exe Process ID - 11644 Web application pool name - kdbps.edu.in [03-10-2024 15:23:13] Process Exited: Process Name - w3wp.exe Process ID - 12924 Web application pool name - edtribute.com [03-10-2024 15:23:32] Process Exited: Process Name - w3wp.exe Process ID - 12876 Web application pool name - galaxytools.in [03-10-2024 15:24:30] New process found: Process Name - w3wp.exe Process ID - 1704 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 15:24:30] New process found: Process Name - conhost.exe Process ID - 10192 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 15:24:48] New process found: Process Name - w3wp.exe Process ID - 336 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 15:24:48] New process found: Process Name - php-cgi.exe Process ID - 7676 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 15:25:59] New process found: Process Name - w3wp.exe Process ID - 10844 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:25:59] Process Exited: Process Name - w3wp.exe Process ID - 10604 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2732 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12584 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:27:11] Process Exited: Process Name - w3wp.exe Process ID - 8560 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:27:11] Process Exited: Process Name - conhost.exe Process ID - 9832 [03-10-2024 15:27:58] New process found: Process Name - w3wp.exe Process ID - 6672 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:27:58] New process found: Process Name - where.exe Process ID - 1532 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 15:27:58] New process found: Process Name - conhost.exe Process ID - 676 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 15:27:59] New process found: Process Name - conhost.exe Process ID - 5720 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [03-10-2024 15:27:59] Process Exited: Process Name - conhost.exe Process ID - 676 [03-10-2024 15:27:59] Process Exited: Process Name - where.exe Process ID - 1532 [03-10-2024 15:28:04] New process found: Process Name - w3wp.exe Process ID - 12008 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2732 [03-10-2024 15:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12584 [03-10-2024 15:29:21] Process Exited: Process Name - w3wp.exe Process ID - 572 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:29:21] Process Exited: Process Name - conhost.exe Process ID - 12156 [03-10-2024 15:30:52] Process Exited: Process Name - w3wp.exe Process ID - 7176 Web application pool name - DefaultAppPool [03-10-2024 15:31:00] New process found: Process Name - w3wp.exe Process ID - 1692 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:31:00] Process Exited: Process Name - w3wp.exe Process ID - 10844 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:31:32] New process found: Process Name - w3wp.exe Process ID - 10820 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 15:31:37] New process found: Process Name - w3wp.exe Process ID - 3964 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 15:31:37] New process found: Process Name - conhost.exe Process ID - 12672 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:31:40] New process found: Process Name - w3wp.exe Process ID - 11544 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 15:33:01] New process found: Process Name - w3wp.exe Process ID - 9572 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:33:01] New process found: Process Name - conhost.exe Process ID - 5672 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 15:36:02] New process found: Process Name - w3wp.exe Process ID - 13216 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:36:02] Process Exited: Process Name - w3wp.exe Process ID - 1692 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5164 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11600 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:37:21] New process found: Process Name - w3wp.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 15:37:32] Process Exited: Process Name - w3wp.exe Process ID - 1704 Web application pool name - kdbps.edu.in [03-10-2024 15:37:32] Process Exited: Process Name - conhost.exe Process ID - 10192 [03-10-2024 15:37:39] Process Exited: Process Name - w3wp.exe Process ID - 3964 Web application pool name - taxtribute.com [03-10-2024 15:37:39] Process Exited: Process Name - conhost.exe Process ID - 12672 [03-10-2024 15:37:42] Process Exited: Process Name - w3wp.exe Process ID - 11544 Web application pool name - DefaultAppPool [03-10-2024 15:37:56] New process found: Process Name - w3wp.exe Process ID - 10496 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 15:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5164 [03-10-2024 15:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11600 [03-10-2024 15:39:12] New process found: Process Name - w3wp.exe Process ID - 4492 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 15:40:58] New process found: Process Name - w3wp.exe Process ID - 4480 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:40:59] New process found: Process Name - conhost.exe Process ID - 8996 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 15:41:03] New process found: Process Name - w3wp.exe Process ID - 12992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:41:03] Process Exited: Process Name - w3wp.exe Process ID - 13216 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:41:04] Process Exited: Process Name - conhost.exe Process ID - 5672 [03-10-2024 15:41:04] Process Exited: Process Name - w3wp.exe Process ID - 9572 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:41:06] Process Exited: Process Name - w3wp.exe Process ID - 12008 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:41:13] New process found: Process Name - w3wp.exe Process ID - 2656 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 15:41:45] New process found: Process Name - w3wp.exe Process ID - 10020 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:43:00] New process found: Process Name - conhost.exe Process ID - 5724 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 15:43:16] New process found: Process Name - where.exe Process ID - 4508 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:43:16] New process found: Process Name - conhost.exe Process ID - 12016 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:43:17] New process found: Process Name - conhost.exe Process ID - 3812 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:43:17] Process Exited: Process Name - where.exe Process ID - 4508 [03-10-2024 15:43:17] Process Exited: Process Name - conhost.exe Process ID - 12016 [03-10-2024 15:43:24] Process Exited: Process Name - w3wp.exe Process ID - 8460 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 15:43:34] Process Exited: Process Name - w3wp.exe Process ID - 10820 Web application pool name - galaxytools.in [03-10-2024 15:46:03] New process found: Process Name - w3wp.exe Process ID - 9688 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:46:03] Process Exited: Process Name - w3wp.exe Process ID - 12992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:46:41] New process found: Process Name - WmiPrvSE.exe Process ID - 9236 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8456 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:47:00] Process Exited: Process Name - w3wp.exe Process ID - 4480 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:47:00] Process Exited: Process Name - conhost.exe Process ID - 8996 [03-10-2024 15:47:43] New process found: Process Name - w3wp.exe Process ID - 2576 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 15:47:47] Process Exited: Process Name - w3wp.exe Process ID - 10020 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 15:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8456 [03-10-2024 15:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9236 [03-10-2024 15:49:15] Process Exited: Process Name - w3wp.exe Process ID - 2656 Web application pool name - taxtribute.com [03-10-2024 15:49:15] Process Exited: Process Name - conhost.exe Process ID - 3812 [03-10-2024 15:49:48] New process found: Process Name - w3wp.exe Process ID - 6316 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 15:51:05] New process found: Process Name - w3wp.exe Process ID - 5800 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:51:05] Process Exited: Process Name - w3wp.exe Process ID - 9688 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:51:20] New process found: Process Name - w3wp.exe Process ID - 8644 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 15:51:20] New process found: Process Name - conhost.exe Process ID - 12328 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 15:51:57] New process found: Process Name - w3wp.exe Process ID - 2200 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 15:51:57] New process found: Process Name - conhost.exe Process ID - 12836 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 15:53:46] Process Exited: Process Name - w3wp.exe Process ID - 2576 Web application pool name - shop.galaxytools.in [03-10-2024 15:55:50] Process Exited: Process Name - php-cgi.exe Process ID - 7676 [03-10-2024 15:55:51] Process Exited: Process Name - w3wp.exe Process ID - 336 Web application pool name - PleskControlPanel [03-10-2024 15:56:07] New process found: Process Name - w3wp.exe Process ID - 7492 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:56:07] Process Exited: Process Name - w3wp.exe Process ID - 5800 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 15:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13068 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 15:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12696 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 15:56:52] New process found: Process Name - w3wp.exe Process ID - 8516 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 15:56:59] Process Exited: Process Name - conhost.exe Process ID - 5724 [03-10-2024 15:56:59] Process Exited: Process Name - w3wp.exe Process ID - 10496 Web application pool name - kdbps.edu.in [03-10-2024 15:57:30] New process found: Process Name - w3wp.exe Process ID - 10648 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 15:57:30] New process found: Process Name - conhost.exe Process ID - 6560 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 15:57:59] Process Exited: Process Name - conhost.exe Process ID - 12836 [03-10-2024 15:58:00] Process Exited: Process Name - w3wp.exe Process ID - 2200 Web application pool name - csr.bmvfragrances.com [03-10-2024 15:58:12] New process found: Process Name - w3wp.exe Process ID - 12552 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 15:58:12] New process found: Process Name - where.exe Process ID - 5300 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 15:58:12] New process found: Process Name - conhost.exe Process ID - 1004 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 15:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12696 [03-10-2024 15:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13068 [03-10-2024 15:58:13] New process found: Process Name - conhost.exe Process ID - 8316 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 15:58:13] Process Exited: Process Name - conhost.exe Process ID - 1004 [03-10-2024 15:58:13] Process Exited: Process Name - where.exe Process ID - 5300 [03-10-2024 15:58:50] Process Exited: Process Name - w3wp.exe Process ID - 6316 Web application pool name - galaxytools.in [03-10-2024 15:59:08] New process found: Process Name - w3wp.exe Process ID - 12564 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 15:59:53] New process found: Process Name - w3wp.exe Process ID - 6488 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 16:00:14] New process found: Process Name - w3wp.exe Process ID - 11252 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 16:00:20] New process found: Process Name - w3wp.exe Process ID - 6272 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 16:00:42] New process found: Process Name - w3wp.exe Process ID - 12148 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 16:00:42] New process found: Process Name - conhost.exe Process ID - 4732 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 16:01:08] New process found: Process Name - w3wp.exe Process ID - 11924 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:01:08] Process Exited: Process Name - w3wp.exe Process ID - 7492 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:01:20] New process found: Process Name - w3wp.exe Process ID - 1668 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 16:01:20] New process found: Process Name - where.exe Process ID - 12052 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:01:20] New process found: Process Name - conhost.exe Process ID - 11784 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:01:21] New process found: Process Name - conhost.exe Process ID - 1908 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:01:21] Process Exited: Process Name - conhost.exe Process ID - 11784 [03-10-2024 16:01:21] Process Exited: Process Name - where.exe Process ID - 12052 [03-10-2024 16:01:23] Process Exited: Process Name - w3wp.exe Process ID - 8644 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:01:23] Process Exited: Process Name - conhost.exe Process ID - 12328 [03-10-2024 16:02:54] Process Exited: Process Name - w3wp.exe Process ID - 8516 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 16:04:32] Process Exited: Process Name - conhost.exe Process ID - 6560 [03-10-2024 16:04:32] Process Exited: Process Name - w3wp.exe Process ID - 10648 Web application pool name - taxtribute.com [03-10-2024 16:05:11] Process Exited: Process Name - w3wp.exe Process ID - 12564 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 16:05:55] Process Exited: Process Name - w3wp.exe Process ID - 6488 Web application pool name - galaxytools.in [03-10-2024 16:06:09] New process found: Process Name - w3wp.exe Process ID - 2516 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:06:09] Process Exited: Process Name - w3wp.exe Process ID - 11924 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:06:17] Process Exited: Process Name - w3wp.exe Process ID - 11252 Web application pool name - shop.galaxytools.in [03-10-2024 16:06:21] Process Exited: Process Name - w3wp.exe Process ID - 6272 Web application pool name - adminportal.galaxytools.in [03-10-2024 16:06:26] New process found: Process Name - w3wp.exe Process ID - 10208 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 16:06:41] New process found: Process Name - WmiPrvSE.exe Process ID - 10184 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:06:43] Process Exited: Process Name - conhost.exe Process ID - 4732 [03-10-2024 16:06:43] Process Exited: Process Name - w3wp.exe Process ID - 12148 Web application pool name - schoolerp.edtribute.com [03-10-2024 16:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2788 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:07:23] Process Exited: Process Name - w3wp.exe Process ID - 1668 Web application pool name - csr.bmvfragrances.com [03-10-2024 16:07:23] Process Exited: Process Name - conhost.exe Process ID - 1908 [03-10-2024 16:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2788 [03-10-2024 16:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10184 [03-10-2024 16:09:16] New process found: Process Name - w3wp.exe Process ID - 3936 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:09:16] New process found: Process Name - conhost.exe Process ID - 9324 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:11:10] New process found: Process Name - w3wp.exe Process ID - 8652 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:11:10] Process Exited: Process Name - w3wp.exe Process ID - 2516 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:11:20] New process found: Process Name - w3wp.exe Process ID - 9436 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:16:12] New process found: Process Name - w3wp.exe Process ID - 13100 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:16:12] Process Exited: Process Name - w3wp.exe Process ID - 8652 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:16:18] Process Exited: Process Name - w3wp.exe Process ID - 3936 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:16:18] Process Exited: Process Name - conhost.exe Process ID - 9324 [03-10-2024 16:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 360 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10020 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:17:13] New process found: Process Name - w3wp.exe Process ID - 9948 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:17:13] New process found: Process Name - conhost.exe Process ID - 9516 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:17:22] Process Exited: Process Name - w3wp.exe Process ID - 9436 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 360 [03-10-2024 16:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10020 [03-10-2024 16:18:15] Process Exited: Process Name - w3wp.exe Process ID - 4492 Web application pool name - DefaultAppPool [03-10-2024 16:19:15] Process Exited: Process Name - conhost.exe Process ID - 8316 [03-10-2024 16:19:15] Process Exited: Process Name - w3wp.exe Process ID - 12552 Web application pool name - kdbps.edu.in [03-10-2024 16:19:33] New process found: Process Name - w3wp.exe Process ID - 2032 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 16:19:33] New process found: Process Name - where.exe Process ID - 3160 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 16:19:33] New process found: Process Name - conhost.exe Process ID - 11224 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 16:19:34] New process found: Process Name - conhost.exe Process ID - 11740 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 16:19:34] Process Exited: Process Name - where.exe Process ID - 3160 [03-10-2024 16:19:34] Process Exited: Process Name - conhost.exe Process ID - 11224 [03-10-2024 16:19:54] New process found: Process Name - w3wp.exe Process ID - 11948 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 16:20:00] New process found: Process Name - w3wp.exe Process ID - 9840 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 16:20:10] New process found: Process Name - w3wp.exe Process ID - 4092 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 16:21:12] New process found: Process Name - w3wp.exe Process ID - 8272 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:21:12] Process Exited: Process Name - w3wp.exe Process ID - 13100 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:21:19] New process found: Process Name - w3wp.exe Process ID - 12924 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:21:20] New process found: Process Name - conhost.exe Process ID - 7348 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 16:22:01] New process found: Process Name - w3wp.exe Process ID - 12752 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 16:22:01] New process found: Process Name - where.exe Process ID - 9340 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 16:22:01] New process found: Process Name - conhost.exe Process ID - 2740 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 16:22:02] New process found: Process Name - conhost.exe Process ID - 12880 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 16:22:02] Process Exited: Process Name - conhost.exe Process ID - 2740 [03-10-2024 16:22:02] Process Exited: Process Name - where.exe Process ID - 9340 [03-10-2024 16:22:11] New process found: Process Name - w3wp.exe Process ID - 5840 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 16:22:12] New process found: Process Name - conhost.exe Process ID - 11336 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 16:22:21] New process found: Process Name - w3wp.exe Process ID - 2656 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 16:22:21] New process found: Process Name - conhost.exe Process ID - 10364 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 16:23:15] Process Exited: Process Name - conhost.exe Process ID - 9516 [03-10-2024 16:23:15] Process Exited: Process Name - w3wp.exe Process ID - 9948 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:25:57] Process Exited: Process Name - w3wp.exe Process ID - 11948 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 16:26:02] Process Exited: Process Name - w3wp.exe Process ID - 9840 Web application pool name - adminportal.galaxytools.in [03-10-2024 16:26:14] New process found: Process Name - w3wp.exe Process ID - 2040 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:26:14] Process Exited: Process Name - w3wp.exe Process ID - 8272 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:26:29] Process Exited: Process Name - w3wp.exe Process ID - 10208 Web application pool name - galaxytools.in [03-10-2024 16:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6200 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12504 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:27:22] Process Exited: Process Name - conhost.exe Process ID - 7348 [03-10-2024 16:27:22] Process Exited: Process Name - w3wp.exe Process ID - 12924 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:28:06] New process found: Process Name - w3wp.exe Process ID - 10816 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 16:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6200 [03-10-2024 16:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12504 [03-10-2024 16:28:12] Process Exited: Process Name - w3wp.exe Process ID - 5840 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 16:28:12] Process Exited: Process Name - conhost.exe Process ID - 11336 [03-10-2024 16:28:23] Process Exited: Process Name - w3wp.exe Process ID - 2656 Web application pool name - masteradmin.taxtribute.com [03-10-2024 16:28:23] Process Exited: Process Name - conhost.exe Process ID - 10364 [03-10-2024 16:28:51] New process found: Process Name - w3wp.exe Process ID - 11620 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 16:28:52] New process found: Process Name - conhost.exe Process ID - 32 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 16:29:20] New process found: Process Name - w3wp.exe Process ID - 12120 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 16:29:20] New process found: Process Name - php-cgi.exe Process ID - 11984 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 16:31:01] New process found: Process Name - cmd.exe Process ID - 11604 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:31:01] New process found: Process Name - conhost.exe Process ID - 11028 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:31:01] New process found: Process Name - runtask.exe Process ID - 12304 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:31:01] New process found: Process Name - dllhost.exe Process ID - 5104 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:31:01] New process found: Process Name - php.exe Process ID - 10116 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 16:31:01] New process found: Process Name - conhost.exe Process ID - 12332 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 16:31:06] Process Exited: Process Name - dllhost.exe Process ID - 5104 [03-10-2024 16:31:15] New process found: Process Name - w3wp.exe Process ID - 432 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:31:15] Process Exited: Process Name - w3wp.exe Process ID - 2040 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:31:20] New process found: Process Name - w3wp.exe Process ID - 11148 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 16:32:18] Process Exited: Process Name - php.exe Process ID - 10116 [03-10-2024 16:32:18] Process Exited: Process Name - conhost.exe Process ID - 11028 [03-10-2024 16:32:18] Process Exited: Process Name - cmd.exe Process ID - 11604 [03-10-2024 16:32:18] Process Exited: Process Name - runtask.exe Process ID - 12304 [03-10-2024 16:32:18] Process Exited: Process Name - conhost.exe Process ID - 12332 [03-10-2024 16:32:23] New process found: Process Name - w3wp.exe Process ID - 732 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:32:23] New process found: Process Name - where.exe Process ID - 6864 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:32:23] New process found: Process Name - conhost.exe Process ID - 2604 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:32:24] New process found: Process Name - conhost.exe Process ID - 1696 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:32:24] Process Exited: Process Name - conhost.exe Process ID - 2604 [03-10-2024 16:32:24] Process Exited: Process Name - where.exe Process ID - 6864 [03-10-2024 16:33:27] New process found: Process Name - w3wp.exe Process ID - 9436 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 16:33:35] Process Exited: Process Name - w3wp.exe Process ID - 2032 Web application pool name - taxtribute.com [03-10-2024 16:33:35] Process Exited: Process Name - conhost.exe Process ID - 11740 [03-10-2024 16:34:09] Process Exited: Process Name - w3wp.exe Process ID - 10816 Web application pool name - shop.galaxytools.in [03-10-2024 16:34:23] New process found: Process Name - w3wp.exe Process ID - 10836 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 16:36:06] New process found: Process Name - w3wp.exe Process ID - 11912 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:36:17] New process found: Process Name - w3wp.exe Process ID - 2200 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:36:17] Process Exited: Process Name - w3wp.exe Process ID - 432 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10856 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10964 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:37:53] Process Exited: Process Name - conhost.exe Process ID - 32 [03-10-2024 16:37:53] Process Exited: Process Name - w3wp.exe Process ID - 11620 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 16:38:12] Process Exited: Process Name - w3wp.exe Process ID - 4092 Web application pool name - DefaultAppPool [03-10-2024 16:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10856 [03-10-2024 16:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10964 [03-10-2024 16:38:26] Process Exited: Process Name - w3wp.exe Process ID - 732 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:38:26] Process Exited: Process Name - conhost.exe Process ID - 1696 [03-10-2024 16:39:30] Process Exited: Process Name - w3wp.exe Process ID - 9436 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 16:40:26] Process Exited: Process Name - w3wp.exe Process ID - 10836 Web application pool name - prathabypriyal.com [03-10-2024 16:41:17] New process found: Process Name - w3wp.exe Process ID - 5348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:41:17] Process Exited: Process Name - w3wp.exe Process ID - 2200 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:41:41] New process found: Process Name - w3wp.exe Process ID - 9096 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:41:41] New process found: Process Name - conhost.exe Process ID - 13120 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 16:42:08] Process Exited: Process Name - w3wp.exe Process ID - 11912 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:43:09] New process found: Process Name - w3wp.exe Process ID - 4480 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:43:18] New process found: Process Name - w3wp.exe Process ID - 9340 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 16:44:28] New process found: Process Name - w3wp.exe Process ID - 9388 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:44:28] New process found: Process Name - conhost.exe Process ID - 10752 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 16:45:12] New process found: Process Name - w3wp.exe Process ID - 9928 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 16:46:19] New process found: Process Name - w3wp.exe Process ID - 12916 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:46:19] Process Exited: Process Name - w3wp.exe Process ID - 5348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2360 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2628 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:47:22] Process Exited: Process Name - w3wp.exe Process ID - 11148 Web application pool name - galaxytools.in [03-10-2024 16:48:03] Process Exited: Process Name - w3wp.exe Process ID - 12752 Web application pool name - kdbps.edu.in [03-10-2024 16:48:03] Process Exited: Process Name - conhost.exe Process ID - 12880 [03-10-2024 16:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2360 [03-10-2024 16:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2628 [03-10-2024 16:48:37] New process found: Process Name - w3wp.exe Process ID - 11348 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 16:48:55] New process found: Process Name - w3wp.exe Process ID - 12660 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 16:48:55] New process found: Process Name - conhost.exe Process ID - 10808 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 16:49:10] Process Exited: Process Name - w3wp.exe Process ID - 4480 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:49:45] New process found: Process Name - w3wp.exe Process ID - 12836 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 16:49:45] New process found: Process Name - where.exe Process ID - 4212 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:49:45] New process found: Process Name - conhost.exe Process ID - 10496 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:49:46] New process found: Process Name - conhost.exe Process ID - 6392 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 16:49:46] Process Exited: Process Name - where.exe Process ID - 4212 [03-10-2024 16:49:46] Process Exited: Process Name - conhost.exe Process ID - 10496 [03-10-2024 16:51:15] Process Exited: Process Name - w3wp.exe Process ID - 9928 Web application pool name - prathabypriyal.com [03-10-2024 16:51:20] New process found: Process Name - w3wp.exe Process ID - 13252 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:51:20] New process found: Process Name - w3wp.exe Process ID - 5808 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:51:20] New process found: Process Name - conhost.exe Process ID - 8476 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 16:51:20] Process Exited: Process Name - w3wp.exe Process ID - 12916 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11016 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 7104 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:52:43] Process Exited: Process Name - w3wp.exe Process ID - 9096 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:52:43] Process Exited: Process Name - conhost.exe Process ID - 13120 [03-10-2024 16:53:30] Process Exited: Process Name - w3wp.exe Process ID - 9388 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 16:53:30] Process Exited: Process Name - conhost.exe Process ID - 10752 [03-10-2024 16:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 7104 [03-10-2024 16:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11016 [03-10-2024 16:54:40] Process Exited: Process Name - w3wp.exe Process ID - 11348 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 16:55:20] Process Exited: Process Name - w3wp.exe Process ID - 9340 Web application pool name - DefaultAppPool [03-10-2024 16:55:48] Process Exited: Process Name - conhost.exe Process ID - 6392 [03-10-2024 16:55:48] Process Exited: Process Name - w3wp.exe Process ID - 12836 Web application pool name - csr.bmvfragrances.com [03-10-2024 16:55:58] New process found: Process Name - w3wp.exe Process ID - 11160 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:56:21] New process found: Process Name - w3wp.exe Process ID - 3216 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:56:21] Process Exited: Process Name - w3wp.exe Process ID - 5808 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 16:56:27] New process found: Process Name - w3wp.exe Process ID - 10100 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 16:56:41] New process found: Process Name - WmiPrvSE.exe Process ID - 12844 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 16:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 6816 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 16:57:22] Process Exited: Process Name - conhost.exe Process ID - 8476 [03-10-2024 16:57:22] Process Exited: Process Name - w3wp.exe Process ID - 13252 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 16:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6816 [03-10-2024 16:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12844 [03-10-2024 16:58:58] Process Exited: Process Name - conhost.exe Process ID - 10808 [03-10-2024 16:58:58] Process Exited: Process Name - w3wp.exe Process ID - 12660 Web application pool name - kdbps.edu.in [03-10-2024 17:00:20] Process Exited: Process Name - php-cgi.exe Process ID - 11984 [03-10-2024 17:00:22] Process Exited: Process Name - w3wp.exe Process ID - 12120 Web application pool name - PleskControlPanel [03-10-2024 17:00:53] New process found: Process Name - w3wp.exe Process ID - 6640 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 17:00:53] New process found: Process Name - conhost.exe Process ID - 8332 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 17:01:19] New process found: Process Name - w3wp.exe Process ID - 8024 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 17:01:22] New process found: Process Name - w3wp.exe Process ID - 7448 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:01:22] Process Exited: Process Name - w3wp.exe Process ID - 3216 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:02:01] Process Exited: Process Name - w3wp.exe Process ID - 11160 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:02:29] Process Exited: Process Name - w3wp.exe Process ID - 10100 Web application pool name - galaxytools.in [03-10-2024 17:02:36] New process found: Process Name - w3wp.exe Process ID - 10796 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:02:36] New process found: Process Name - conhost.exe Process ID - 10124 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:03:56] New process found: Process Name - w3wp.exe Process ID - 644 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:05:06] New process found: Process Name - w3wp.exe Process ID - 3284 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 17:05:17] New process found: Process Name - w3wp.exe Process ID - 10640 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 17:05:17] New process found: Process Name - conhost.exe Process ID - 11716 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 17:05:55] New process found: Process Name - w3wp.exe Process ID - 12256 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [03-10-2024 17:05:55] New process found: Process Name - conhost.exe Process ID - 10340 Process Identity - IIS APPPOOL\pnacademy.acwits.in [03-10-2024 17:06:09] New process found: Process Name - w3wp.exe Process ID - 13184 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 17:06:24] New process found: Process Name - w3wp.exe Process ID - 4212 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:06:24] Process Exited: Process Name - w3wp.exe Process ID - 7448 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:06:29] New process found: Process Name - w3wp.exe Process ID - 8432 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 17:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9044 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12224 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:07:22] Process Exited: Process Name - w3wp.exe Process ID - 8024 Web application pool name - adminportal.galaxytools.in [03-10-2024 17:07:23] New process found: Process Name - conhost.exe Process ID - 1220 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 17:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9044 [03-10-2024 17:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12224 [03-10-2024 17:08:39] Process Exited: Process Name - conhost.exe Process ID - 10124 [03-10-2024 17:08:39] Process Exited: Process Name - w3wp.exe Process ID - 10796 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:09:55] New process found: Process Name - w3wp.exe Process ID - 11224 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 17:09:55] New process found: Process Name - conhost.exe Process ID - 10468 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 17:09:59] Process Exited: Process Name - w3wp.exe Process ID - 644 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:11:24] New process found: Process Name - w3wp.exe Process ID - 9484 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:11:24] Process Exited: Process Name - w3wp.exe Process ID - 4212 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:11:56] Process Exited: Process Name - conhost.exe Process ID - 10340 [03-10-2024 17:11:57] Process Exited: Process Name - w3wp.exe Process ID - 12256 Web application pool name - pnacademy.acwits.in [03-10-2024 17:12:08] Process Exited: Process Name - w3wp.exe Process ID - 3284 Web application pool name - galaxytools.in [03-10-2024 17:12:20] New process found: Process Name - w3wp.exe Process ID - 2748 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 17:13:12] Process Exited: Process Name - conhost.exe Process ID - 1220 [03-10-2024 17:13:12] Process Exited: Process Name - w3wp.exe Process ID - 13184 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 17:13:20] New process found: Process Name - SIHClient.exe Process ID - 10984 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:13:20] New process found: Process Name - conhost.exe Process ID - 12336 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:13:21] Process Exited: Process Name - SIHClient.exe Process ID - 10984 [03-10-2024 17:13:21] Process Exited: Process Name - conhost.exe Process ID - 12336 [03-10-2024 17:13:55] Process Exited: Process Name - w3wp.exe Process ID - 6640 Web application pool name - kdbps.edu.in [03-10-2024 17:13:55] Process Exited: Process Name - conhost.exe Process ID - 8332 [03-10-2024 17:15:01] New process found: Process Name - w3wp.exe Process ID - 10568 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:15:08] New process found: Process Name - w3wp.exe Process ID - 13180 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 17:15:08] New process found: Process Name - conhost.exe Process ID - 10900 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 17:15:57] Process Exited: Process Name - conhost.exe Process ID - 10468 [03-10-2024 17:15:57] Process Exited: Process Name - w3wp.exe Process ID - 11224 Web application pool name - csr.bmvfragrances.com [03-10-2024 17:16:26] New process found: Process Name - w3wp.exe Process ID - 11556 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:16:26] Process Exited: Process Name - w3wp.exe Process ID - 9484 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9608 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9124 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:17:49] New process found: Process Name - w3wp.exe Process ID - 10076 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:17:49] New process found: Process Name - conhost.exe Process ID - 9932 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 17:17:58] New process found: Process Name - conhost.exe Process ID - 1704 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [03-10-2024 17:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9124 [03-10-2024 17:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9608 [03-10-2024 17:18:21] Process Exited: Process Name - w3wp.exe Process ID - 2748 Web application pool name - adminportal.galaxytools.in [03-10-2024 17:18:59] New process found: Process Name - w3wp.exe Process ID - 1788 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 17:19:31] New process found: Process Name - w3wp.exe Process ID - 10788 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 17:21:20] New process found: Process Name - w3wp.exe Process ID - 12784 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:21:20] New process found: Process Name - where.exe Process ID - 9412 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:21:20] New process found: Process Name - conhost.exe Process ID - 8676 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:21:21] New process found: Process Name - conhost.exe Process ID - 684 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:21:21] Process Exited: Process Name - conhost.exe Process ID - 8676 [03-10-2024 17:21:21] Process Exited: Process Name - where.exe Process ID - 9412 [03-10-2024 17:22:03] Process Exited: Process Name - w3wp.exe Process ID - 10568 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:23:28] New process found: Process Name - w3wp.exe Process ID - 11044 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:23:28] Process Exited: Process Name - conhost.exe Process ID - 1704 [03-10-2024 17:23:28] Process Exited: Process Name - w3wp.exe Process ID - 11556 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:23:52] Process Exited: Process Name - conhost.exe Process ID - 9932 [03-10-2024 17:23:52] Process Exited: Process Name - w3wp.exe Process ID - 10076 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:25:02] Process Exited: Process Name - w3wp.exe Process ID - 1788 Web application pool name - galaxytools.in [03-10-2024 17:25:34] Process Exited: Process Name - w3wp.exe Process ID - 10788 Web application pool name - shop.galaxytools.in [03-10-2024 17:26:41] New process found: Process Name - WmiPrvSE.exe Process ID - 6304 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12964 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:27:22] Process Exited: Process Name - conhost.exe Process ID - 684 [03-10-2024 17:27:22] Process Exited: Process Name - w3wp.exe Process ID - 12784 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6304 [03-10-2024 17:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12964 [03-10-2024 17:28:30] New process found: Process Name - w3wp.exe Process ID - 2732 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:28:30] Process Exited: Process Name - w3wp.exe Process ID - 11044 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:28:31] Process Exited: Process Name - w3wp.exe Process ID - 8432 Web application pool name - DefaultAppPool [03-10-2024 17:29:25] New process found: Process Name - w3wp.exe Process ID - 9456 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 17:29:52] New process found: Process Name - w3wp.exe Process ID - 11684 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 17:30:58] New process found: Process Name - w3wp.exe Process ID - 10748 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 17:31:01] New process found: Process Name - conhost.exe Process ID - 8724 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 17:31:19] New process found: Process Name - w3wp.exe Process ID - 12664 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 17:32:24] New process found: Process Name - w3wp.exe Process ID - 7820 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:32:24] New process found: Process Name - conhost.exe Process ID - 3812 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:33:31] New process found: Process Name - w3wp.exe Process ID - 12216 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:33:31] Process Exited: Process Name - w3wp.exe Process ID - 2732 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:35:54] Process Exited: Process Name - w3wp.exe Process ID - 11684 Web application pool name - prathabypriyal.com [03-10-2024 17:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11040 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12844 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:37:22] Process Exited: Process Name - w3wp.exe Process ID - 12664 Web application pool name - adminportal.galaxytools.in [03-10-2024 17:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11040 [03-10-2024 17:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12844 [03-10-2024 17:38:26] Process Exited: Process Name - conhost.exe Process ID - 3812 [03-10-2024 17:38:26] Process Exited: Process Name - w3wp.exe Process ID - 7820 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:38:32] New process found: Process Name - w3wp.exe Process ID - 6960 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:38:32] Process Exited: Process Name - w3wp.exe Process ID - 12216 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:39:00] New process found: Process Name - w3wp.exe Process ID - 12888 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:39:00] New process found: Process Name - conhost.exe Process ID - 11672 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 17:39:00] Process Exited: Process Name - conhost.exe Process ID - 8724 [03-10-2024 17:39:00] Process Exited: Process Name - w3wp.exe Process ID - 10748 Web application pool name - taxtribute.com [03-10-2024 17:41:19] Process Exited: Process Name - w3wp.exe Process ID - 10640 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 17:41:19] Process Exited: Process Name - conhost.exe Process ID - 11716 [03-10-2024 17:41:20] New process found: Process Name - w3wp.exe Process ID - 3372 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 17:42:38] New process found: Process Name - w3wp.exe Process ID - 7984 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:42:38] New process found: Process Name - conhost.exe Process ID - 9972 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 17:43:34] New process found: Process Name - w3wp.exe Process ID - 6816 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:43:34] New process found: Process Name - w3wp.exe Process ID - 5940 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 17:43:34] New process found: Process Name - conhost.exe Process ID - 5712 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 17:43:34] Process Exited: Process Name - w3wp.exe Process ID - 6960 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:45:37] New process found: Process Name - w3wp.exe Process ID - 4772 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 17:45:37] New process found: Process Name - conhost.exe Process ID - 8696 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 17:46:02] Process Exited: Process Name - conhost.exe Process ID - 11672 [03-10-2024 17:46:02] Process Exited: Process Name - w3wp.exe Process ID - 12888 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:46:27] Process Exited: Process Name - w3wp.exe Process ID - 9456 Web application pool name - DefaultAppPool [03-10-2024 17:46:41] New process found: Process Name - WmiPrvSE.exe Process ID - 6364 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9744 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:47:01] New process found: Process Name - w3wp.exe Process ID - 8432 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 17:47:02] New process found: Process Name - w3wp.exe Process ID - 11628 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 17:47:22] Process Exited: Process Name - w3wp.exe Process ID - 3372 Web application pool name - adminportal.galaxytools.in [03-10-2024 17:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6364 [03-10-2024 17:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9744 [03-10-2024 17:48:15] New process found: Process Name - w3wp.exe Process ID - 12756 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 17:48:15] New process found: Process Name - php-cgi.exe Process ID - 8640 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 17:48:35] New process found: Process Name - w3wp.exe Process ID - 3740 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:48:35] Process Exited: Process Name - w3wp.exe Process ID - 6816 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:49:40] Process Exited: Process Name - w3wp.exe Process ID - 7984 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:49:40] Process Exited: Process Name - conhost.exe Process ID - 9972 [03-10-2024 17:51:20] New process found: Process Name - w3wp.exe Process ID - 1540 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 17:51:20] New process found: Process Name - conhost.exe Process ID - 868 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 17:52:10] Process Exited: Process Name - conhost.exe Process ID - 10900 [03-10-2024 17:52:10] Process Exited: Process Name - w3wp.exe Process ID - 13180 Web application pool name - kdbps.edu.in [03-10-2024 17:52:39] Process Exited: Process Name - w3wp.exe Process ID - 4772 Web application pool name - taxtribute.com [03-10-2024 17:52:39] Process Exited: Process Name - conhost.exe Process ID - 8696 [03-10-2024 17:52:53] New process found: Process Name - w3wp.exe Process ID - 5520 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 17:52:54] New process found: Process Name - conhost.exe Process ID - 12828 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 17:53:04] Process Exited: Process Name - w3wp.exe Process ID - 11628 Web application pool name - galaxytools.in [03-10-2024 17:53:19] New process found: Process Name - w3wp.exe Process ID - 8212 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 17:53:36] New process found: Process Name - w3wp.exe Process ID - 13236 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:53:36] Process Exited: Process Name - w3wp.exe Process ID - 3740 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:54:35] Process Exited: Process Name - conhost.exe Process ID - 5712 [03-10-2024 17:54:35] Process Exited: Process Name - w3wp.exe Process ID - 5940 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 17:55:04] Process Exited: Process Name - w3wp.exe Process ID - 8432 Web application pool name - DefaultAppPool [03-10-2024 17:55:15] New process found: Process Name - w3wp.exe Process ID - 12708 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 17:55:38] New process found: Process Name - w3wp.exe Process ID - 7160 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 17:56:05] New process found: Process Name - w3wp.exe Process ID - 11792 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 17:56:05] New process found: Process Name - where.exe Process ID - 2156 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 17:56:05] New process found: Process Name - conhost.exe Process ID - 11924 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 17:56:06] New process found: Process Name - conhost.exe Process ID - 9456 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 17:56:06] Process Exited: Process Name - where.exe Process ID - 2156 [03-10-2024 17:56:06] Process Exited: Process Name - conhost.exe Process ID - 11924 [03-10-2024 17:56:25] New process found: Process Name - w3wp.exe Process ID - 10056 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [03-10-2024 17:56:25] New process found: Process Name - conhost.exe Process ID - 5792 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [03-10-2024 17:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 4136 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 17:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12900 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 17:57:22] Process Exited: Process Name - conhost.exe Process ID - 868 [03-10-2024 17:57:22] Process Exited: Process Name - w3wp.exe Process ID - 1540 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 17:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4136 [03-10-2024 17:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12900 [03-10-2024 17:58:34] New process found: Process Name - w3wp.exe Process ID - 12848 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 17:58:35] New process found: Process Name - conhost.exe Process ID - 8684 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 17:58:37] New process found: Process Name - w3wp.exe Process ID - 12128 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:58:37] Process Exited: Process Name - w3wp.exe Process ID - 13236 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 17:58:57] New process found: Process Name - w3wp.exe Process ID - 3192 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 17:58:57] New process found: Process Name - conhost.exe Process ID - 1672 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 17:59:21] Process Exited: Process Name - w3wp.exe Process ID - 8212 Web application pool name - galaxytools.in [03-10-2024 18:01:16] Process Exited: Process Name - w3wp.exe Process ID - 12708 Web application pool name - DefaultAppPool [03-10-2024 18:01:41] Process Exited: Process Name - w3wp.exe Process ID - 7160 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 18:02:08] Process Exited: Process Name - conhost.exe Process ID - 9456 [03-10-2024 18:02:08] Process Exited: Process Name - w3wp.exe Process ID - 11792 Web application pool name - taxtribute.com [03-10-2024 18:02:41] New process found: Process Name - w3wp.exe Process ID - 5584 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 18:03:18] New process found: Process Name - w3wp.exe Process ID - 3648 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:03:39] New process found: Process Name - w3wp.exe Process ID - 5816 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:03:39] Process Exited: Process Name - w3wp.exe Process ID - 12128 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:04:27] Process Exited: Process Name - conhost.exe Process ID - 5792 [03-10-2024 18:04:27] Process Exited: Process Name - w3wp.exe Process ID - 10056 Web application pool name - schoolerp.taxtribute.com [03-10-2024 18:04:59] Process Exited: Process Name - conhost.exe Process ID - 1672 [03-10-2024 18:04:59] Process Exited: Process Name - w3wp.exe Process ID - 3192 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:05:41] New process found: Process Name - w3wp.exe Process ID - 11276 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 18:05:43] New process found: Process Name - conhost.exe Process ID - 1960 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 18:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9928 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12136 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9928 [03-10-2024 18:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12136 [03-10-2024 18:08:40] New process found: Process Name - w3wp.exe Process ID - 448 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:08:40] Process Exited: Process Name - w3wp.exe Process ID - 5816 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:08:44] Process Exited: Process Name - w3wp.exe Process ID - 5584 Web application pool name - adminportal.galaxytools.in [03-10-2024 18:09:20] Process Exited: Process Name - w3wp.exe Process ID - 3648 Web application pool name - DefaultAppPool [03-10-2024 18:11:43] Process Exited: Process Name - conhost.exe Process ID - 1960 [03-10-2024 18:11:43] Process Exited: Process Name - w3wp.exe Process ID - 11276 Web application pool name - taxtribute.com [03-10-2024 18:12:07] New process found: Process Name - w3wp.exe Process ID - 1192 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:12:07] New process found: Process Name - conhost.exe Process ID - 11312 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 18:12:08] New process found: Process Name - w3wp.exe Process ID - 10348 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 18:12:08] New process found: Process Name - where.exe Process ID - 10768 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 18:12:08] New process found: Process Name - conhost.exe Process ID - 12224 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 18:12:09] New process found: Process Name - conhost.exe Process ID - 736 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 18:12:09] Process Exited: Process Name - where.exe Process ID - 10768 [03-10-2024 18:12:09] Process Exited: Process Name - conhost.exe Process ID - 12224 [03-10-2024 18:13:22] New process found: Process Name - w3wp.exe Process ID - 10536 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 18:13:41] New process found: Process Name - w3wp.exe Process ID - 8784 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:13:41] Process Exited: Process Name - w3wp.exe Process ID - 448 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:14:02] New process found: Process Name - w3wp.exe Process ID - 6008 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 18:15:38] New process found: Process Name - w3wp.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 18:15:38] New process found: Process Name - conhost.exe Process ID - 8292 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 18:16:03] New process found: Process Name - w3wp.exe Process ID - 284 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:16:36] Process Exited: Process Name - conhost.exe Process ID - 8684 [03-10-2024 18:16:36] Process Exited: Process Name - w3wp.exe Process ID - 12848 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 18:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12476 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2268 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:18:10] Process Exited: Process Name - w3wp.exe Process ID - 1192 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:18:10] Process Exited: Process Name - conhost.exe Process ID - 11312 [03-10-2024 18:18:11] Process Exited: Process Name - conhost.exe Process ID - 736 [03-10-2024 18:18:11] Process Exited: Process Name - w3wp.exe Process ID - 10348 Web application pool name - taxtribute.com [03-10-2024 18:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2268 [03-10-2024 18:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12476 [03-10-2024 18:18:42] New process found: Process Name - w3wp.exe Process ID - 11400 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:18:42] Process Exited: Process Name - w3wp.exe Process ID - 8784 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:20:04] Process Exited: Process Name - w3wp.exe Process ID - 6008 Web application pool name - adminportal.galaxytools.in [03-10-2024 18:21:40] Process Exited: Process Name - conhost.exe Process ID - 8292 [03-10-2024 18:21:40] Process Exited: Process Name - w3wp.exe Process ID - 11856 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 18:21:48] New process found: Process Name - w3wp.exe Process ID - 11284 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 18:23:44] New process found: Process Name - w3wp.exe Process ID - 12992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:23:44] Process Exited: Process Name - w3wp.exe Process ID - 11400 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:24:05] Process Exited: Process Name - w3wp.exe Process ID - 284 Web application pool name - DefaultAppPool [03-10-2024 18:24:13] New process found: Process Name - w3wp.exe Process ID - 12900 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 18:24:40] New process found: Process Name - w3wp.exe Process ID - 1544 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:25:24] New process found: Process Name - w3wp.exe Process ID - 4508 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:25:25] New process found: Process Name - conhost.exe Process ID - 10856 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 18:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10888 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11908 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:27:24] Process Exited: Process Name - w3wp.exe Process ID - 10536 Web application pool name - galaxytools.in [03-10-2024 18:27:50] Process Exited: Process Name - w3wp.exe Process ID - 11284 Web application pool name - shop.galaxytools.in [03-10-2024 18:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10888 [03-10-2024 18:28:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11908 [03-10-2024 18:28:12] New process found: Process Name - w3wp.exe Process ID - 13256 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 18:28:12] New process found: Process Name - where.exe Process ID - 12020 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:28:12] New process found: Process Name - conhost.exe Process ID - 3028 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:28:13] New process found: Process Name - conhost.exe Process ID - 1304 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:28:13] Process Exited: Process Name - conhost.exe Process ID - 3028 [03-10-2024 18:28:13] Process Exited: Process Name - where.exe Process ID - 12020 [03-10-2024 18:28:44] New process found: Process Name - w3wp.exe Process ID - 3160 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:28:44] Process Exited: Process Name - w3wp.exe Process ID - 12992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:28:56] Process Exited: Process Name - w3wp.exe Process ID - 5520 Web application pool name - kdbps.edu.in [03-10-2024 18:28:56] Process Exited: Process Name - conhost.exe Process ID - 12828 [03-10-2024 18:29:39] New process found: Process Name - w3wp.exe Process ID - 8560 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 18:29:52] New process found: Process Name - w3wp.exe Process ID - 11168 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 18:29:52] New process found: Process Name - conhost.exe Process ID - 1616 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 18:30:15] Process Exited: Process Name - w3wp.exe Process ID - 12900 Web application pool name - edtribute.com [03-10-2024 18:31:27] Process Exited: Process Name - w3wp.exe Process ID - 4508 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:31:27] Process Exited: Process Name - conhost.exe Process ID - 10856 [03-10-2024 18:33:46] New process found: Process Name - w3wp.exe Process ID - 5656 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:33:46] Process Exited: Process Name - w3wp.exe Process ID - 3160 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:34:15] Process Exited: Process Name - conhost.exe Process ID - 1304 [03-10-2024 18:34:15] Process Exited: Process Name - w3wp.exe Process ID - 13256 Web application pool name - csr.bmvfragrances.com [03-10-2024 18:34:44] New process found: Process Name - w3wp.exe Process ID - 12772 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 18:34:45] New process found: Process Name - conhost.exe Process ID - 12432 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 18:35:41] Process Exited: Process Name - w3wp.exe Process ID - 8560 Web application pool name - shop.galaxytools.in [03-10-2024 18:35:54] Process Exited: Process Name - conhost.exe Process ID - 1616 [03-10-2024 18:35:54] Process Exited: Process Name - w3wp.exe Process ID - 11168 Web application pool name - kdbps.edu.in [03-10-2024 18:36:21] New process found: Process Name - php-cgi.exe Process ID - 13104 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 18:36:21] New process found: Process Name - php-cgi.exe Process ID - 9628 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 18:36:21] New process found: Process Name - php-cgi.exe Process ID - 8248 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 18:36:33] New process found: Process Name - w3wp.exe Process ID - 10128 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 18:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 9696 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 10816 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9696 [03-10-2024 18:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10816 [03-10-2024 18:38:18] New process found: Process Name - w3wp.exe Process ID - 7776 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 18:38:23] New process found: Process Name - w3wp.exe Process ID - 11660 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 18:38:47] New process found: Process Name - w3wp.exe Process ID - 12668 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:38:47] Process Exited: Process Name - w3wp.exe Process ID - 5656 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:41:38] New process found: Process Name - w3wp.exe Process ID - 1256 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 18:41:39] New process found: Process Name - conhost.exe Process ID - 448 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 18:42:42] Process Exited: Process Name - w3wp.exe Process ID - 1544 Web application pool name - DefaultAppPool [03-10-2024 18:43:04] New process found: Process Name - w3wp.exe Process ID - 10292 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:43:48] New process found: Process Name - w3wp.exe Process ID - 11340 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:43:48] Process Exited: Process Name - w3wp.exe Process ID - 12668 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:44:25] Process Exited: Process Name - w3wp.exe Process ID - 11660 Web application pool name - adminportal.galaxytools.in [03-10-2024 18:45:21] Process Exited: Process Name - w3wp.exe Process ID - 7776 Web application pool name - shop.galaxytools.in [03-10-2024 18:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13148 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7040 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:48:11] New process found: Process Name - w3wp.exe Process ID - 1872 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:48:11] New process found: Process Name - conhost.exe Process ID - 776 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 18:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7040 [03-10-2024 18:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13148 [03-10-2024 18:48:50] New process found: Process Name - w3wp.exe Process ID - 9100 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:48:50] Process Exited: Process Name - w3wp.exe Process ID - 11340 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:48:58] New process found: Process Name - w3wp.exe Process ID - 10892 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 18:48:58] New process found: Process Name - conhost.exe Process ID - 4608 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) [03-10-2024 18:49:06] New process found: Process Name - w3wp.exe Process ID - 9848 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:49:45] Process Exited: Process Name - conhost.exe Process ID - 12432 [03-10-2024 18:49:45] Process Exited: Process Name - w3wp.exe Process ID - 12772 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 18:50:06] Process Exited: Process Name - w3wp.exe Process ID - 10292 Web application pool name - DefaultAppPool [03-10-2024 18:51:00] New process found: Process Name - w3wp.exe Process ID - 10052 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:51:35] Process Exited: Process Name - w3wp.exe Process ID - 10128 Web application pool name - galaxytools.in [03-10-2024 18:52:17] New process found: Process Name - w3wp.exe Process ID - 7040 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 18:52:18] New process found: Process Name - conhost.exe Process ID - 11776 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 18:53:51] New process found: Process Name - w3wp.exe Process ID - 7456 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:53:51] Process Exited: Process Name - w3wp.exe Process ID - 9100 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:54:13] Process Exited: Process Name - conhost.exe Process ID - 776 [03-10-2024 18:54:13] Process Exited: Process Name - w3wp.exe Process ID - 1872 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:55:00] Process Exited: Process Name - conhost.exe Process ID - 4608 [03-10-2024 18:55:00] Process Exited: Process Name - w3wp.exe Process ID - 10892 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 18:56:12] New process found: Process Name - w3wp.exe Process ID - 1072 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 18:56:14] New process found: Process Name - w3wp.exe Process ID - 12148 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 18:56:14] New process found: Process Name - where.exe Process ID - 10364 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:56:14] New process found: Process Name - conhost.exe Process ID - 7008 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:56:15] New process found: Process Name - conhost.exe Process ID - 8316 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 18:56:15] Process Exited: Process Name - conhost.exe Process ID - 7008 [03-10-2024 18:56:15] Process Exited: Process Name - where.exe Process ID - 10364 [03-10-2024 18:56:31] New process found: Process Name - w3wp.exe Process ID - 11804 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 18:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8596 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 18:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 1704 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 18:57:02] Process Exited: Process Name - w3wp.exe Process ID - 10052 Web application pool name - DefaultAppPool [03-10-2024 18:57:44] New process found: Process Name - w3wp.exe Process ID - 1476 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 18:57:44] New process found: Process Name - where.exe Process ID - 528 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 18:57:44] New process found: Process Name - conhost.exe Process ID - 9636 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 18:57:45] New process found: Process Name - conhost.exe Process ID - 12916 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 18:57:45] Process Exited: Process Name - where.exe Process ID - 528 [03-10-2024 18:57:45] Process Exited: Process Name - conhost.exe Process ID - 9636 [03-10-2024 18:58:05] New process found: Process Name - w3wp.exe Process ID - 88 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 18:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1704 [03-10-2024 18:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8596 [03-10-2024 18:58:19] Process Exited: Process Name - w3wp.exe Process ID - 7040 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 18:58:19] Process Exited: Process Name - conhost.exe Process ID - 11776 [03-10-2024 18:58:35] New process found: Process Name - conhost.exe Process ID - 9436 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 18:58:52] New process found: Process Name - w3wp.exe Process ID - 8320 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:58:52] Process Exited: Process Name - w3wp.exe Process ID - 7456 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 18:59:25] New process found: Process Name - w3wp.exe Process ID - 9340 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 18:59:29] New process found: Process Name - w3wp.exe Process ID - 9664 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 18:59:30] New process found: Process Name - conhost.exe Process ID - 2328 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 19:00:13] New process found: Process Name - w3wp.exe Process ID - 11020 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [03-10-2024 19:00:14] New process found: Process Name - conhost.exe Process ID - 13012 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [03-10-2024 19:01:09] Process Exited: Process Name - w3wp.exe Process ID - 9848 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:02:16] New process found: Process Name - w3wp.exe Process ID - 5808 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:02:16] New process found: Process Name - where.exe Process ID - 10812 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:02:16] New process found: Process Name - conhost.exe Process ID - 13020 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:02:17] New process found: Process Name - conhost.exe Process ID - 6888 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:02:17] Process Exited: Process Name - conhost.exe Process ID - 8316 [03-10-2024 19:02:17] Process Exited: Process Name - where.exe Process ID - 10812 [03-10-2024 19:02:17] Process Exited: Process Name - w3wp.exe Process ID - 12148 Web application pool name - csr.bmvfragrances.com [03-10-2024 19:02:17] Process Exited: Process Name - conhost.exe Process ID - 13020 [03-10-2024 19:02:57] New process found: Process Name - w3wp.exe Process ID - 9384 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 19:03:53] New process found: Process Name - w3wp.exe Process ID - 9856 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:03:53] Process Exited: Process Name - w3wp.exe Process ID - 8320 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:04:07] Process Exited: Process Name - w3wp.exe Process ID - 88 Web application pool name - DefaultAppPool [03-10-2024 19:04:13] New process found: Process Name - w3wp.exe Process ID - 12352 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 19:04:14] New process found: Process Name - conhost.exe Process ID - 2252 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 19:04:47] Process Exited: Process Name - w3wp.exe Process ID - 1476 Web application pool name - schoolerp.edtribute.com [03-10-2024 19:04:47] Process Exited: Process Name - conhost.exe Process ID - 12916 [03-10-2024 19:05:30] Process Exited: Process Name - w3wp.exe Process ID - 9664 Web application pool name - adminportal.galaxytools.in [03-10-2024 19:05:41] New process found: Process Name - w3wp.exe Process ID - 3216 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 19:05:41] Process Exited: Process Name - conhost.exe Process ID - 448 [03-10-2024 19:05:41] Process Exited: Process Name - w3wp.exe Process ID - 1256 Web application pool name - kdbps.edu.in [03-10-2024 19:06:11] New process found: Process Name - w3wp.exe Process ID - 12752 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 19:06:11] New process found: Process Name - conhost.exe Process ID - 7776 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 19:06:16] Process Exited: Process Name - w3wp.exe Process ID - 11020 Web application pool name - schoolerp.taxtribute.com [03-10-2024 19:06:16] Process Exited: Process Name - conhost.exe Process ID - 13012 [03-10-2024 19:06:27] Process Exited: Process Name - conhost.exe Process ID - 2328 [03-10-2024 19:06:27] Process Exited: Process Name - w3wp.exe Process ID - 9340 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9580 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9532 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:07:00] New process found: Process Name - w3wp.exe Process ID - 2012 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 19:07:00] New process found: Process Name - where.exe Process ID - 12704 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 19:07:00] New process found: Process Name - conhost.exe Process ID - 3720 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 19:07:01] New process found: Process Name - conhost.exe Process ID - 13172 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 19:07:01] Process Exited: Process Name - conhost.exe Process ID - 3720 [03-10-2024 19:07:01] Process Exited: Process Name - where.exe Process ID - 12704 [03-10-2024 19:07:14] Process Exited: Process Name - w3wp.exe Process ID - 1072 Web application pool name - taxtribute.com [03-10-2024 19:07:14] Process Exited: Process Name - conhost.exe Process ID - 9436 [03-10-2024 19:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9532 [03-10-2024 19:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9580 [03-10-2024 19:08:19] Process Exited: Process Name - w3wp.exe Process ID - 5808 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:08:19] Process Exited: Process Name - conhost.exe Process ID - 6888 [03-10-2024 19:08:22] New process found: Process Name - w3wp.exe Process ID - 7208 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 19:08:55] New process found: Process Name - w3wp.exe Process ID - 6896 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:08:55] Process Exited: Process Name - w3wp.exe Process ID - 9856 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:08:59] Process Exited: Process Name - w3wp.exe Process ID - 9384 Web application pool name - prathabypriyal.com [03-10-2024 19:09:34] Process Exited: Process Name - w3wp.exe Process ID - 11804 Web application pool name - galaxytools.in [03-10-2024 19:09:46] New process found: Process Name - w3wp.exe Process ID - 9736 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 19:11:15] Process Exited: Process Name - conhost.exe Process ID - 2252 [03-10-2024 19:11:15] Process Exited: Process Name - w3wp.exe Process ID - 12352 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 19:11:42] New process found: Process Name - w3wp.exe Process ID - 8292 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 19:11:42] Process Exited: Process Name - w3wp.exe Process ID - 3216 Web application pool name - edtribute.com [03-10-2024 19:11:43] New process found: Process Name - conhost.exe Process ID - 7104 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 19:12:17] New process found: Process Name - w3wp.exe Process ID - 13100 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:12:17] New process found: Process Name - where.exe Process ID - 10376 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:12:17] New process found: Process Name - conhost.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:12:18] New process found: Process Name - conhost.exe Process ID - 13268 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:12:18] Process Exited: Process Name - conhost.exe Process ID - 5304 [03-10-2024 19:12:18] Process Exited: Process Name - where.exe Process ID - 10376 [03-10-2024 19:13:02] Process Exited: Process Name - w3wp.exe Process ID - 2012 Web application pool name - schoolerp.edtribute.com [03-10-2024 19:13:02] Process Exited: Process Name - conhost.exe Process ID - 13172 [03-10-2024 19:13:56] New process found: Process Name - w3wp.exe Process ID - 9120 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:13:56] Process Exited: Process Name - w3wp.exe Process ID - 6896 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:15:48] Process Exited: Process Name - w3wp.exe Process ID - 9736 Web application pool name - prathabypriyal.com [03-10-2024 19:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5532 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5824 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:17:44] Process Exited: Process Name - conhost.exe Process ID - 7104 [03-10-2024 19:17:44] Process Exited: Process Name - w3wp.exe Process ID - 8292 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 19:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5532 [03-10-2024 19:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5824 [03-10-2024 19:18:57] New process found: Process Name - w3wp.exe Process ID - 13048 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:18:57] Process Exited: Process Name - w3wp.exe Process ID - 9120 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:20:19] Process Exited: Process Name - w3wp.exe Process ID - 13100 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:20:19] Process Exited: Process Name - conhost.exe Process ID - 13268 [03-10-2024 19:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 7932 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 10548 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:22:12] New process found: Process Name - w3wp.exe Process ID - 7404 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 19:23:46] New process found: Process Name - w3wp.exe Process ID - 8820 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:23:47] New process found: Process Name - conhost.exe Process ID - 9368 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 19:23:58] New process found: Process Name - w3wp.exe Process ID - 11588 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:23:58] Process Exited: Process Name - w3wp.exe Process ID - 13048 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:24:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 7932 [03-10-2024 19:24:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 10548 [03-10-2024 19:26:41] New process found: Process Name - WmiPrvSE.exe Process ID - 11892 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11336 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:26:52] New process found: Process Name - w3wp.exe Process ID - 11328 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:26:52] New process found: Process Name - where.exe Process ID - 3372 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:26:52] New process found: Process Name - conhost.exe Process ID - 1172 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:26:53] New process found: Process Name - conhost.exe Process ID - 9676 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:26:53] Process Exited: Process Name - conhost.exe Process ID - 1172 [03-10-2024 19:26:53] Process Exited: Process Name - where.exe Process ID - 3372 [03-10-2024 19:27:12] Process Exited: Process Name - conhost.exe Process ID - 7776 [03-10-2024 19:27:12] Process Exited: Process Name - w3wp.exe Process ID - 12752 Web application pool name - kdbps.edu.in [03-10-2024 19:27:27] New process found: Process Name - w3wp.exe Process ID - 3812 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 19:27:28] New process found: Process Name - conhost.exe Process ID - 11044 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 19:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11336 [03-10-2024 19:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11892 [03-10-2024 19:28:15] Process Exited: Process Name - w3wp.exe Process ID - 7404 Web application pool name - galaxytools.in [03-10-2024 19:29:00] New process found: Process Name - w3wp.exe Process ID - 7400 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:29:00] Process Exited: Process Name - w3wp.exe Process ID - 11588 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:29:47] New process found: Process Name - w3wp.exe Process ID - 6364 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:29:58] New process found: Process Name - w3wp.exe Process ID - 12848 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 19:29:58] New process found: Process Name - conhost.exe Process ID - 5620 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 19:31:49] New process found: Process Name - w3wp.exe Process ID - 5688 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 19:32:55] Process Exited: Process Name - conhost.exe Process ID - 9676 [03-10-2024 19:32:55] Process Exited: Process Name - w3wp.exe Process ID - 11328 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:34:01] New process found: Process Name - w3wp.exe Process ID - 1784 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:34:01] Process Exited: Process Name - w3wp.exe Process ID - 7400 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:35:50] Process Exited: Process Name - w3wp.exe Process ID - 6364 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:36:01] Process Exited: Process Name - conhost.exe Process ID - 5620 [03-10-2024 19:36:01] Process Exited: Process Name - w3wp.exe Process ID - 12848 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 19:36:40] New process found: Process Name - w3wp.exe Process ID - 11560 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:36:40] New process found: Process Name - conhost.exe Process ID - 9108 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5584 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:36:48] Process Exited: Process Name - w3wp.exe Process ID - 8820 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:36:48] Process Exited: Process Name - conhost.exe Process ID - 9368 [03-10-2024 19:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11584 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:37:27] New process found: Process Name - conhost.exe Process ID - 9680 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 19:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5584 [03-10-2024 19:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11584 [03-10-2024 19:38:17] New process found: Process Name - w3wp.exe Process ID - 12616 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:39:02] New process found: Process Name - w3wp.exe Process ID - 12920 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:39:02] Process Exited: Process Name - w3wp.exe Process ID - 1784 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:39:04] New process found: Process Name - w3wp.exe Process ID - 12392 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 19:40:00] New process found: Process Name - w3wp.exe Process ID - 12244 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 19:42:42] Process Exited: Process Name - conhost.exe Process ID - 9108 [03-10-2024 19:42:42] Process Exited: Process Name - w3wp.exe Process ID - 11560 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:42:51] Process Exited: Process Name - w3wp.exe Process ID - 5688 Web application pool name - taxtribute.com [03-10-2024 19:42:51] Process Exited: Process Name - conhost.exe Process ID - 9680 [03-10-2024 19:44:04] New process found: Process Name - w3wp.exe Process ID - 12644 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:44:04] Process Exited: Process Name - w3wp.exe Process ID - 12920 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:44:11] New process found: Process Name - w3wp.exe Process ID - 8836 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [03-10-2024 19:44:11] New process found: Process Name - where.exe Process ID - 3616 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [03-10-2024 19:44:11] New process found: Process Name - conhost.exe Process ID - 5920 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [03-10-2024 19:44:12] New process found: Process Name - conhost.exe Process ID - 12432 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [03-10-2024 19:44:12] Process Exited: Process Name - where.exe Process ID - 3616 [03-10-2024 19:44:12] Process Exited: Process Name - conhost.exe Process ID - 5920 [03-10-2024 19:44:19] Process Exited: Process Name - w3wp.exe Process ID - 12616 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 19:45:07] Process Exited: Process Name - w3wp.exe Process ID - 12392 Web application pool name - shop.galaxytools.in [03-10-2024 19:46:02] Process Exited: Process Name - w3wp.exe Process ID - 12244 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 19:46:40] New process found: Process Name - w3wp.exe Process ID - 8412 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:46:41] New process found: Process Name - conhost.exe Process ID - 7856 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10320 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11492 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:47:13] New process found: Process Name - w3wp.exe Process ID - 11756 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 19:47:16] New process found: Process Name - conhost.exe Process ID - 11400 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 19:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10320 [03-10-2024 19:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11492 [03-10-2024 19:48:14] Process Exited: Process Name - php-cgi.exe Process ID - 8640 [03-10-2024 19:49:04] New process found: Process Name - w3wp.exe Process ID - 10528 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:49:04] Process Exited: Process Name - w3wp.exe Process ID - 12644 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:49:46] New process found: Process Name - w3wp.exe Process ID - 8756 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 19:50:14] Process Exited: Process Name - w3wp.exe Process ID - 8836 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [03-10-2024 19:50:14] Process Exited: Process Name - conhost.exe Process ID - 12432 [03-10-2024 19:50:42] New process found: Process Name - w3wp.exe Process ID - 356 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 19:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 13196 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 9008 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:52:42] Process Exited: Process Name - conhost.exe Process ID - 7856 [03-10-2024 19:52:42] Process Exited: Process Name - w3wp.exe Process ID - 8412 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:53:16] Process Exited: Process Name - conhost.exe Process ID - 11400 [03-10-2024 19:53:16] Process Exited: Process Name - w3wp.exe Process ID - 11756 Web application pool name - taxtribute.com [03-10-2024 19:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 9008 [03-10-2024 19:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 13196 [03-10-2024 19:54:06] New process found: Process Name - w3wp.exe Process ID - 11296 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:54:06] Process Exited: Process Name - w3wp.exe Process ID - 10528 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:55:03] New process found: Process Name - w3wp.exe Process ID - 944 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 19:55:03] New process found: Process Name - conhost.exe Process ID - 1544 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 19:55:24] Process Exited: Process Name - w3wp.exe Process ID - 7208 Web application pool name - DefaultAppPool [03-10-2024 19:55:48] Process Exited: Process Name - w3wp.exe Process ID - 8756 Web application pool name - shop.galaxytools.in [03-10-2024 19:56:41] New process found: Process Name - WmiPrvSE.exe Process ID - 8712 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 19:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11776 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 19:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8712 [03-10-2024 19:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11776 [03-10-2024 19:59:07] New process found: Process Name - w3wp.exe Process ID - 4072 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:59:07] Process Exited: Process Name - w3wp.exe Process ID - 11296 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 19:59:21] New process found: Process Name - w3wp.exe Process ID - 10052 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 20:01:02] New process found: Process Name - w3wp.exe Process ID - 5516 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:01:02] New process found: Process Name - conhost.exe Process ID - 5684 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 20:01:05] Process Exited: Process Name - w3wp.exe Process ID - 944 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 20:01:05] Process Exited: Process Name - conhost.exe Process ID - 1544 [03-10-2024 20:01:35] New process found: Process Name - w3wp.exe Process ID - 11456 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 20:04:08] New process found: Process Name - w3wp.exe Process ID - 5236 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:04:08] Process Exited: Process Name - w3wp.exe Process ID - 4072 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:05:23] Process Exited: Process Name - w3wp.exe Process ID - 10052 Web application pool name - edtribute.com [03-10-2024 20:06:22] Process Exited: Process Name - php-cgi.exe Process ID - 8248 [03-10-2024 20:06:22] Process Exited: Process Name - php-cgi.exe Process ID - 13104 [03-10-2024 20:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11796 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:06:44] New process found: Process Name - w3wp.exe Process ID - 2880 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 20:06:44] New process found: Process Name - conhost.exe Process ID - 10848 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 20:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7884 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7884 [03-10-2024 20:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11796 [03-10-2024 20:08:38] New process found: Process Name - w3wp.exe Process ID - 1788 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 20:09:10] New process found: Process Name - w3wp.exe Process ID - 948 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:09:10] Process Exited: Process Name - w3wp.exe Process ID - 5236 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:09:44] Process Exited: Process Name - w3wp.exe Process ID - 356 Web application pool name - galaxytools.in [03-10-2024 20:11:37] Process Exited: Process Name - w3wp.exe Process ID - 11456 Web application pool name - DefaultAppPool [03-10-2024 20:12:21] New process found: Process Name - w3wp.exe Process ID - 8244 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 20:12:21] New process found: Process Name - conhost.exe Process ID - 13060 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 20:12:46] Process Exited: Process Name - w3wp.exe Process ID - 2880 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 20:12:46] Process Exited: Process Name - conhost.exe Process ID - 10848 [03-10-2024 20:13:38] New process found: Process Name - w3wp.exe Process ID - 10360 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 20:14:11] New process found: Process Name - w3wp.exe Process ID - 9456 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:14:11] Process Exited: Process Name - w3wp.exe Process ID - 948 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:14:16] Process Exited: Process Name - php-cgi.exe Process ID - 9628 [03-10-2024 20:14:17] Process Exited: Process Name - w3wp.exe Process ID - 12756 Web application pool name - PleskControlPanel [03-10-2024 20:14:28] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 20:14:40] Process Exited: Process Name - w3wp.exe Process ID - 1788 Web application pool name - adminportal.galaxytools.in [03-10-2024 20:15:17] New process found: Process Name - w3wp.exe Process ID - 9316 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 20:16:10] New process found: Process Name - w3wp.exe Process ID - 12620 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 20:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11172 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12456 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:17:29] New process found: Process Name - w3wp.exe Process ID - 6272 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 20:17:29] New process found: Process Name - conhost.exe Process ID - 3776 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) [03-10-2024 20:18:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11172 [03-10-2024 20:18:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12456 [03-10-2024 20:18:24] Process Exited: Process Name - w3wp.exe Process ID - 8244 Web application pool name - taxtribute.com [03-10-2024 20:18:24] Process Exited: Process Name - conhost.exe Process ID - 13060 [03-10-2024 20:18:58] New process found: Process Name - w3wp.exe Process ID - 12004 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 20:19:03] Process Exited: Process Name - w3wp.exe Process ID - 5516 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:19:03] Process Exited: Process Name - conhost.exe Process ID - 5684 [03-10-2024 20:19:12] New process found: Process Name - w3wp.exe Process ID - 10984 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:19:12] Process Exited: Process Name - w3wp.exe Process ID - 9456 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:19:41] Process Exited: Process Name - w3wp.exe Process ID - 10360 Web application pool name - shop.galaxytools.in [03-10-2024 20:20:35] New process found: Process Name - w3wp.exe Process ID - 13212 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 20:20:35] New process found: Process Name - conhost.exe Process ID - 624 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 20:21:19] Process Exited: Process Name - w3wp.exe Process ID - 9316 Web application pool name - prathabypriyal.com [03-10-2024 20:22:12] Process Exited: Process Name - w3wp.exe Process ID - 12620 Web application pool name - adminportal.galaxytools.in [03-10-2024 20:23:11] New process found: Process Name - w3wp.exe Process ID - 6364 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 20:23:32] Process Exited: Process Name - conhost.exe Process ID - 3776 [03-10-2024 20:23:32] Process Exited: Process Name - w3wp.exe Process ID - 6272 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [03-10-2024 20:24:13] New process found: Process Name - w3wp.exe Process ID - 6240 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:24:13] Process Exited: Process Name - w3wp.exe Process ID - 10984 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:24:35] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 20:26:05] New process found: Process Name - w3wp.exe Process ID - 6596 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:26:05] New process found: Process Name - where.exe Process ID - 8696 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 20:26:05] New process found: Process Name - conhost.exe Process ID - 5608 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 20:26:06] New process found: Process Name - conhost.exe Process ID - 11536 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 20:26:06] Process Exited: Process Name - conhost.exe Process ID - 5608 [03-10-2024 20:26:06] Process Exited: Process Name - where.exe Process ID - 8696 [03-10-2024 20:26:17] New process found: Process Name - w3wp.exe Process ID - 9032 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:26:35] Process Exited: Process Name - conhost.exe Process ID - 624 [03-10-2024 20:26:35] Process Exited: Process Name - w3wp.exe Process ID - 13212 Web application pool name - taxtribute.com [03-10-2024 20:26:41] New process found: Process Name - WmiPrvSE.exe Process ID - 10056 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 9744 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9744 [03-10-2024 20:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10056 [03-10-2024 20:29:15] New process found: Process Name - w3wp.exe Process ID - 11128 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:29:15] Process Exited: Process Name - w3wp.exe Process ID - 6240 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:31:00] Process Exited: Process Name - w3wp.exe Process ID - 12004 Web application pool name - galaxytools.in [03-10-2024 20:32:19] Process Exited: Process Name - w3wp.exe Process ID - 9032 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:32:35] New process found: Process Name - w3wp.exe Process ID - 1840 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 20:32:48] New process found: Process Name - w3wp.exe Process ID - 12076 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 20:32:48] New process found: Process Name - php-cgi.exe Process ID - 8656 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 20:33:07] Process Exited: Process Name - w3wp.exe Process ID - 6596 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:33:07] Process Exited: Process Name - conhost.exe Process ID - 11536 [03-10-2024 20:33:55] New process found: Process Name - w3wp.exe Process ID - 10476 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 20:33:55] New process found: Process Name - conhost.exe Process ID - 6852 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 20:33:57] New process found: Process Name - csrss.exe Process ID - 2356 Process Identity - SYSTEM [03-10-2024 20:33:57] New process found: Process Name - winlogon.exe Process ID - 12500 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:33:58] New process found: Process Name - LogonUI.exe Process ID - 1992 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:33:58] New process found: Process Name - dwm.exe Process ID - 9432 Process Identity - Window Manager\DWM-4 [03-10-2024 20:33:58] Service state changed: Service Name - ScDeviceEnum Process ID - 460 Current State - SERVICE_RUNNING [03-10-2024 20:34:02] New process found: Process Name - TSTheme.exe Process ID - 11992 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:34:02] New process found: Process Name - taskhostw.exe Process ID - 3056 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:34:02] New process found: Process Name - dllhost.exe Process ID - 2364 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:34:02] Process Exited: Process Name - LogonUI.exe Process ID - 1992 [03-10-2024 20:34:02] Process Exited: Process Name - csrss.exe Process ID - 2356 [03-10-2024 20:34:02] Process Exited: Process Name - dwm.exe Process ID - 9432 [03-10-2024 20:34:02] Process Exited: Process Name - winlogon.exe Process ID - 12500 [03-10-2024 20:34:04] Process Exited: Process Name - notepad.exe Process ID - 12284 [03-10-2024 20:34:04] Service state changed: Service Name - DsmSvc Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 20:34:05] New process found: Process Name - svchost.exe Process ID - 9892 Process Identity - SYSTEM [03-10-2024 20:34:05] New process found: Process Name - InstallAgent.exe Process ID - 5516 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:34:05] Service state changed: Service Name - AppXSvc Process ID - 9892 Current State - SERVICE_RUNNING [03-10-2024 20:34:08] Process Exited: Process Name - TSTheme.exe Process ID - 11992 [03-10-2024 20:34:12] Process Exited: Process Name - InstallAgent.exe Process ID - 5516 [03-10-2024 20:34:16] New process found: Process Name - w3wp.exe Process ID - 380 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:34:16] Process Exited: Process Name - w3wp.exe Process ID - 11128 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:34:32] New process found: Process Name - wlrmdr.exe Process ID - 11340 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:34:32] New process found: Process Name - audiodg.exe Process ID - 3364 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:34:32] Process Exited: Process Name - taskhostw.exe Process ID - 3056 [03-10-2024 20:34:37] Process Exited: Process Name - dllhost.exe Process ID - 2364 [03-10-2024 20:34:38] Process Exited: Process Name - wlrmdr.exe Process ID - 11340 [03-10-2024 20:35:00] Service state changed: Service Name - DsmSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 20:35:38] New process found: Process Name - w3wp.exe Process ID - 12352 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 20:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10280 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 824 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:37:14] New process found: Process Name - WinRAR.exe Process ID - 12912 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:37:16] Process Exited: Process Name - WinRAR.exe Process ID - 12912 [03-10-2024 20:38:03] New process found: Process Name - dllhost.exe Process ID - 676 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:38:08] Process Exited: Process Name - dllhost.exe Process ID - 676 [03-10-2024 20:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 824 [03-10-2024 20:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10280 [03-10-2024 20:38:14] New process found: Process Name - w3wp.exe Process ID - 13068 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 20:38:14] Process Exited: Process Name - w3wp.exe Process ID - 6364 Web application pool name - DefaultAppPool [03-10-2024 20:38:16] Process Exited: Process Name - conhost.exe Process ID - 6852 [03-10-2024 20:38:16] Process Exited: Process Name - w3wp.exe Process ID - 10476 Web application pool name - taxtribute.com [03-10-2024 20:39:03] New process found: Process Name - conhost.exe Process ID - 9508 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 20:39:07] Process Exited: Process Name - svchost.exe Process ID - 9892 [03-10-2024 20:39:07] Service state changed: Service Name - AppXSvc Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 20:39:17] New process found: Process Name - w3wp.exe Process ID - 12112 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:39:17] Process Exited: Process Name - w3wp.exe Process ID - 380 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:39:37] Process Exited: Process Name - audiodg.exe Process ID - 3364 [03-10-2024 20:40:36] Process Exited: Process Name - w3wp.exe Process ID - 1840 Web application pool name - galaxytools.in [03-10-2024 20:40:38] New process found: Process Name - TSTheme.exe Process ID - 7532 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 20:40:44] Process Exited: Process Name - TSTheme.exe Process ID - 7532 [03-10-2024 20:41:40] Process Exited: Process Name - w3wp.exe Process ID - 12352 Web application pool name - tools.taxtribute.com [03-10-2024 20:41:40] Service state changed: Service Name - ScDeviceEnum Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 20:41:58] New process found: Process Name - w3wp.exe Process ID - 13268 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 20:43:39] New process found: Process Name - w3wp.exe Process ID - 6892 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 20:44:18] New process found: Process Name - w3wp.exe Process ID - 11908 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:44:18] Process Exited: Process Name - w3wp.exe Process ID - 12112 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:45:03] New process found: Process Name - w3wp.exe Process ID - 2008 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:45:03] New process found: Process Name - conhost.exe Process ID - 12992 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 20:45:16] Process Exited: Process Name - conhost.exe Process ID - 9508 [03-10-2024 20:45:16] Process Exited: Process Name - w3wp.exe Process ID - 13068 Web application pool name - taxtribute.com [03-10-2024 20:45:33] New process found: Process Name - w3wp.exe Process ID - 12668 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 20:45:33] New process found: Process Name - conhost.exe Process ID - 12040 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 20:46:17] New process found: Process Name - w3wp.exe Process ID - 8096 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 20:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12468 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12220 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:48:01] New process found: Process Name - w3wp.exe Process ID - 1340 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 20:48:02] New process found: Process Name - conhost.exe Process ID - 12148 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 20:48:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12220 [03-10-2024 20:48:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12468 [03-10-2024 20:49:00] Process Exited: Process Name - w3wp.exe Process ID - 13268 Web application pool name - shop.galaxytools.in [03-10-2024 20:49:20] New process found: Process Name - w3wp.exe Process ID - 3256 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:49:20] Process Exited: Process Name - w3wp.exe Process ID - 11908 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:49:42] Process Exited: Process Name - w3wp.exe Process ID - 6892 Web application pool name - galaxytools.in [03-10-2024 20:49:51] New process found: Process Name - w3wp.exe Process ID - 188 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 20:50:41] New process found: Process Name - w3wp.exe Process ID - 9744 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 20:50:42] New process found: Process Name - conhost.exe Process ID - 3772 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 20:51:35] Process Exited: Process Name - conhost.exe Process ID - 12040 [03-10-2024 20:51:35] Process Exited: Process Name - w3wp.exe Process ID - 12668 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 20:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11048 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 9432 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:52:00] New process found: Process Name - w3wp.exe Process ID - 8592 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [03-10-2024 20:52:00] New process found: Process Name - conhost.exe Process ID - 9812 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [03-10-2024 20:52:12] New process found: Process Name - w3wp.exe Process ID - 8244 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:52:20] Process Exited: Process Name - w3wp.exe Process ID - 8096 Web application pool name - DefaultAppPool [03-10-2024 20:53:16] New process found: Process Name - w3wp.exe Process ID - 9368 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 20:53:16] New process found: Process Name - conhost.exe Process ID - 13276 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 20:53:20] New process found: Process Name - conhost.exe Process ID - 8784 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [03-10-2024 20:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 9432 [03-10-2024 20:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11048 [03-10-2024 20:54:04] Process Exited: Process Name - w3wp.exe Process ID - 1340 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 20:54:04] Process Exited: Process Name - conhost.exe Process ID - 12148 [03-10-2024 20:55:33] New process found: Process Name - w3wp.exe Process ID - 6364 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 20:55:54] Process Exited: Process Name - w3wp.exe Process ID - 188 Web application pool name - galaxytools.in [03-10-2024 20:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13168 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 20:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3936 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 20:58:03] Process Exited: Process Name - w3wp.exe Process ID - 8592 Web application pool name - schoolerp.taxtribute.com [03-10-2024 20:58:03] Process Exited: Process Name - conhost.exe Process ID - 9812 [03-10-2024 20:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3936 [03-10-2024 20:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13168 [03-10-2024 20:58:14] Process Exited: Process Name - w3wp.exe Process ID - 8244 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 20:59:21] New process found: Process Name - w3wp.exe Process ID - 8676 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:59:21] Process Exited: Process Name - w3wp.exe Process ID - 3256 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 20:59:21] Process Exited: Process Name - conhost.exe Process ID - 8784 [03-10-2024 21:00:18] New process found: Process Name - w3wp.exe Process ID - 8212 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:01:35] Process Exited: Process Name - w3wp.exe Process ID - 6364 Web application pool name - DefaultAppPool [03-10-2024 21:02:19] Process Exited: Process Name - w3wp.exe Process ID - 9368 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:02:19] Process Exited: Process Name - conhost.exe Process ID - 13276 [03-10-2024 21:03:22] New process found: Process Name - w3wp.exe Process ID - 13040 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:03:22] New process found: Process Name - where.exe Process ID - 10712 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 21:03:22] New process found: Process Name - conhost.exe Process ID - 11332 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 21:03:23] New process found: Process Name - conhost.exe Process ID - 8820 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 21:03:23] Process Exited: Process Name - where.exe Process ID - 10712 [03-10-2024 21:03:23] Process Exited: Process Name - conhost.exe Process ID - 11332 [03-10-2024 21:03:49] Process Exited: Process Name - php-cgi.exe Process ID - 8656 [03-10-2024 21:03:51] Process Exited: Process Name - w3wp.exe Process ID - 12076 Web application pool name - PleskControlPanel [03-10-2024 21:04:22] New process found: Process Name - w3wp.exe Process ID - 12780 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:04:22] Process Exited: Process Name - w3wp.exe Process ID - 8676 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:05:09] New process found: Process Name - w3wp.exe Process ID - 6208 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 21:06:20] Process Exited: Process Name - w3wp.exe Process ID - 8212 Web application pool name - galaxytools.in [03-10-2024 21:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11312 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:06:44] Process Exited: Process Name - conhost.exe Process ID - 3772 [03-10-2024 21:06:44] Process Exited: Process Name - w3wp.exe Process ID - 9744 Web application pool name - taxtribute.com [03-10-2024 21:06:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 1480 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:06:48] New process found: Process Name - SearchFilterHost.exe Process ID - 828 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 5712 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:07:14] New process found: Process Name - w3wp.exe Process ID - 12744 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 21:07:21] New process found: Process Name - where.exe Process ID - 11644 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 21:07:21] New process found: Process Name - conhost.exe Process ID - 2172 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 21:07:22] New process found: Process Name - conhost.exe Process ID - 5896 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 21:07:22] Process Exited: Process Name - conhost.exe Process ID - 2172 [03-10-2024 21:07:22] Process Exited: Process Name - where.exe Process ID - 11644 [03-10-2024 21:07:45] New process found: Process Name - w3wp.exe Process ID - 3720 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:07:45] New process found: Process Name - conhost.exe Process ID - 12704 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:07:59] New process found: Process Name - w3wp.exe Process ID - 12936 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:08:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 828 [03-10-2024 21:08:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 1480 [03-10-2024 21:08:03] New process found: Process Name - w3wp.exe Process ID - 5868 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:08:03] New process found: Process Name - conhost.exe Process ID - 10380 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 21:08:05] Process Exited: Process Name - w3wp.exe Process ID - 2008 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:08:05] Process Exited: Process Name - conhost.exe Process ID - 12992 [03-10-2024 21:08:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11312 [03-10-2024 21:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5712 [03-10-2024 21:09:24] New process found: Process Name - w3wp.exe Process ID - 3772 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:09:24] Process Exited: Process Name - w3wp.exe Process ID - 12780 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:10:26] New process found: Process Name - w3wp.exe Process ID - 11556 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:10:26] New process found: Process Name - conhost.exe Process ID - 8592 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 21:12:14] New process found: Process Name - w3wp.exe Process ID - 11564 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 21:12:14] New process found: Process Name - php-cgi.exe Process ID - 7248 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 21:13:47] Process Exited: Process Name - w3wp.exe Process ID - 3720 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:13:47] Process Exited: Process Name - conhost.exe Process ID - 12704 [03-10-2024 21:14:02] Process Exited: Process Name - w3wp.exe Process ID - 12936 Web application pool name - galaxytools.in [03-10-2024 21:14:05] Process Exited: Process Name - w3wp.exe Process ID - 5868 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:14:05] Process Exited: Process Name - conhost.exe Process ID - 10380 [03-10-2024 21:14:24] New process found: Process Name - w3wp.exe Process ID - 5936 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:14:24] Process Exited: Process Name - w3wp.exe Process ID - 3772 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:14:33] New process found: Process Name - w3wp.exe Process ID - 5816 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:14:33] New process found: Process Name - conhost.exe Process ID - 3976 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:15:24] Process Exited: Process Name - conhost.exe Process ID - 8820 [03-10-2024 21:15:24] Process Exited: Process Name - w3wp.exe Process ID - 13040 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10768 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3024 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:17:23] New process found: Process Name - w3wp.exe Process ID - 10940 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:17:25] New process found: Process Name - w3wp.exe Process ID - 8124 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 21:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3024 [03-10-2024 21:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10768 [03-10-2024 21:18:17] Process Exited: Process Name - conhost.exe Process ID - 5896 [03-10-2024 21:18:17] Process Exited: Process Name - w3wp.exe Process ID - 12744 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 21:18:28] Process Exited: Process Name - conhost.exe Process ID - 8592 [03-10-2024 21:18:28] Process Exited: Process Name - w3wp.exe Process ID - 11556 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:18:57] New process found: Process Name - w3wp.exe Process ID - 9924 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:19:26] New process found: Process Name - w3wp.exe Process ID - 10612 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:19:26] Process Exited: Process Name - w3wp.exe Process ID - 5936 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:23:25] Process Exited: Process Name - w3wp.exe Process ID - 10940 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:23:27] Process Exited: Process Name - w3wp.exe Process ID - 8124 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 21:24:28] New process found: Process Name - w3wp.exe Process ID - 9636 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:24:28] Process Exited: Process Name - w3wp.exe Process ID - 10612 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:25:09] New process found: Process Name - w3wp.exe Process ID - 212 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:25:13] New process found: Process Name - conhost.exe Process ID - 10956 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 21:25:36] Process Exited: Process Name - conhost.exe Process ID - 3976 [03-10-2024 21:25:36] Process Exited: Process Name - w3wp.exe Process ID - 5816 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:26:04] New process found: Process Name - w3wp.exe Process ID - 5968 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 21:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5328 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11280 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:27:59] Process Exited: Process Name - w3wp.exe Process ID - 9924 Web application pool name - galaxytools.in [03-10-2024 21:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5328 [03-10-2024 21:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11280 [03-10-2024 21:29:28] New process found: Process Name - w3wp.exe Process ID - 11300 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:29:28] Process Exited: Process Name - w3wp.exe Process ID - 9636 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:29:39] New process found: Process Name - w3wp.exe Process ID - 1692 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:29:39] New process found: Process Name - where.exe Process ID - 12732 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:29:39] New process found: Process Name - conhost.exe Process ID - 11800 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:29:40] New process found: Process Name - conhost.exe Process ID - 12000 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:29:40] Process Exited: Process Name - conhost.exe Process ID - 11800 [03-10-2024 21:29:40] Process Exited: Process Name - where.exe Process ID - 12732 [03-10-2024 21:30:35] New process found: Process Name - w3wp.exe Process ID - 5336 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:30:58] New process found: Process Name - w3wp.exe Process ID - 8416 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 21:30:58] New process found: Process Name - conhost.exe Process ID - 9880 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 21:31:10] Process Exited: Process Name - w3wp.exe Process ID - 212 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:31:10] Process Exited: Process Name - conhost.exe Process ID - 10956 [03-10-2024 21:32:07] Process Exited: Process Name - w3wp.exe Process ID - 5968 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 21:32:20] New process found: Process Name - w3wp.exe Process ID - 7596 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:32:31] New process found: Process Name - w3wp.exe Process ID - 9816 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 21:32:31] New process found: Process Name - conhost.exe Process ID - 13168 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 21:34:30] New process found: Process Name - w3wp.exe Process ID - 1004 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:34:30] Process Exited: Process Name - w3wp.exe Process ID - 11300 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:35:42] Process Exited: Process Name - w3wp.exe Process ID - 1692 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:35:42] Process Exited: Process Name - conhost.exe Process ID - 12000 [03-10-2024 21:35:49] New process found: Process Name - w3wp.exe Process ID - 736 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:35:50] New process found: Process Name - conhost.exe Process ID - 1612 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 21:36:27] New process found: Process Name - w3wp.exe Process ID - 1824 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:36:27] New process found: Process Name - conhost.exe Process ID - 12828 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:36:38] Process Exited: Process Name - w3wp.exe Process ID - 5336 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6996 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2560 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:37:00] Process Exited: Process Name - w3wp.exe Process ID - 8416 Web application pool name - taxtribute.com [03-10-2024 21:37:00] Process Exited: Process Name - conhost.exe Process ID - 9880 [03-10-2024 21:37:11] Process Exited: Process Name - w3wp.exe Process ID - 6208 Web application pool name - DefaultAppPool [03-10-2024 21:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2560 [03-10-2024 21:38:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6996 [03-10-2024 21:38:21] Process Exited: Process Name - w3wp.exe Process ID - 7596 Web application pool name - galaxytools.in [03-10-2024 21:38:31] Process Exited: Process Name - w3wp.exe Process ID - 9816 Web application pool name - csr.bmvfragrances.com [03-10-2024 21:38:31] Process Exited: Process Name - conhost.exe Process ID - 13168 [03-10-2024 21:39:02] New process found: Process Name - w3wp.exe Process ID - 11224 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 21:39:02] New process found: Process Name - conhost.exe Process ID - 12908 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 21:39:30] Process Exited: Process Name - w3wp.exe Process ID - 3812 Web application pool name - kdbps.edu.in [03-10-2024 21:39:30] Process Exited: Process Name - conhost.exe Process ID - 11044 [03-10-2024 21:39:31] New process found: Process Name - w3wp.exe Process ID - 2056 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:39:31] Process Exited: Process Name - w3wp.exe Process ID - 1004 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:40:10] New process found: Process Name - w3wp.exe Process ID - 11584 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 21:40:29] New process found: Process Name - w3wp.exe Process ID - 10156 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [03-10-2024 21:40:29] New process found: Process Name - conhost.exe Process ID - 12440 Process Identity - IIS APPPOOL\tools.taxtribute.com [03-10-2024 21:40:55] New process found: Process Name - w3wp.exe Process ID - 9760 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:41:02] New process found: Process Name - w3wp.exe Process ID - 10964 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 21:41:02] New process found: Process Name - conhost.exe Process ID - 7088 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 21:41:51] Process Exited: Process Name - w3wp.exe Process ID - 736 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 21:41:51] Process Exited: Process Name - conhost.exe Process ID - 1612 [03-10-2024 21:43:14] Process Exited: Process Name - php-cgi.exe Process ID - 7248 [03-10-2024 21:43:16] Process Exited: Process Name - w3wp.exe Process ID - 11564 Web application pool name - PleskControlPanel [03-10-2024 21:43:42] New process found: Process Name - w3wp.exe Process ID - 13084 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 21:43:42] New process found: Process Name - where.exe Process ID - 12804 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 21:43:42] New process found: Process Name - conhost.exe Process ID - 12028 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 21:43:43] New process found: Process Name - conhost.exe Process ID - 11436 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 21:43:43] Process Exited: Process Name - conhost.exe Process ID - 12028 [03-10-2024 21:43:43] Process Exited: Process Name - where.exe Process ID - 12804 [03-10-2024 21:44:32] New process found: Process Name - w3wp.exe Process ID - 6832 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:44:32] Process Exited: Process Name - w3wp.exe Process ID - 2056 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:45:04] Process Exited: Process Name - w3wp.exe Process ID - 11224 Web application pool name - taxtribute.com [03-10-2024 21:45:04] Process Exited: Process Name - conhost.exe Process ID - 12908 [03-10-2024 21:46:12] Process Exited: Process Name - w3wp.exe Process ID - 11584 Web application pool name - shop.galaxytools.in [03-10-2024 21:46:30] Process Exited: Process Name - w3wp.exe Process ID - 10156 Web application pool name - tools.taxtribute.com [03-10-2024 21:46:30] Process Exited: Process Name - conhost.exe Process ID - 12440 [03-10-2024 21:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 448 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1612 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:46:58] Process Exited: Process Name - w3wp.exe Process ID - 9760 Web application pool name - galaxytools.in [03-10-2024 21:47:30] Process Exited: Process Name - w3wp.exe Process ID - 1824 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:47:30] Process Exited: Process Name - conhost.exe Process ID - 12828 [03-10-2024 21:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 448 [03-10-2024 21:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1612 [03-10-2024 21:49:17] New process found: Process Name - w3wp.exe Process ID - 11296 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 21:49:34] New process found: Process Name - w3wp.exe Process ID - 4440 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:49:34] Process Exited: Process Name - w3wp.exe Process ID - 6832 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:54:18] New process found: Process Name - w3wp.exe Process ID - 10124 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 21:54:35] New process found: Process Name - w3wp.exe Process ID - 8464 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:54:35] Process Exited: Process Name - w3wp.exe Process ID - 4440 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:54:45] Process Exited: Process Name - conhost.exe Process ID - 11436 [03-10-2024 21:54:45] Process Exited: Process Name - w3wp.exe Process ID - 13084 Web application pool name - masteradmin.taxtribute.com [03-10-2024 21:56:40] New process found: Process Name - w3wp.exe Process ID - 12804 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 21:56:40] New process found: Process Name - php-cgi.exe Process ID - 12260 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 21:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12612 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 21:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9456 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 21:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9456 [03-10-2024 21:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12612 [03-10-2024 21:58:21] New process found: Process Name - w3wp.exe Process ID - 12084 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 21:58:34] New process found: Process Name - w3wp.exe Process ID - 9724 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 21:58:35] New process found: Process Name - where.exe Process ID - 820 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:58:35] New process found: Process Name - conhost.exe Process ID - 9820 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:58:36] New process found: Process Name - conhost.exe Process ID - 8756 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 21:58:36] Process Exited: Process Name - where.exe Process ID - 820 [03-10-2024 21:58:36] Process Exited: Process Name - conhost.exe Process ID - 9820 [03-10-2024 21:59:24] New process found: Process Name - w3wp.exe Process ID - 11632 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) Web application pool name - legal.acwits.in(domain)(4.0)(pool) [03-10-2024 21:59:24] New process found: Process Name - conhost.exe Process ID - 10356 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) [03-10-2024 21:59:36] New process found: Process Name - w3wp.exe Process ID - 4548 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 21:59:36] Process Exited: Process Name - w3wp.exe Process ID - 8464 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:00:00] New process found: Process Name - cmd.exe Process ID - 8832 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:00:00] New process found: Process Name - conhost.exe Process ID - 12164 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:00:00] New process found: Process Name - runtask.exe Process ID - 6852 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:00:00] New process found: Process Name - php.exe Process ID - 10184 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 22:00:00] New process found: Process Name - conhost.exe Process ID - 13104 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 22:00:03] Process Exited: Process Name - runtask.exe Process ID - 6852 [03-10-2024 22:00:03] Process Exited: Process Name - cmd.exe Process ID - 8832 [03-10-2024 22:00:03] Process Exited: Process Name - php.exe Process ID - 10184 [03-10-2024 22:00:03] Process Exited: Process Name - conhost.exe Process ID - 12164 [03-10-2024 22:00:03] Process Exited: Process Name - conhost.exe Process ID - 13104 [03-10-2024 22:02:19] Process Exited: Process Name - w3wp.exe Process ID - 10124 Web application pool name - galaxytools.in [03-10-2024 22:02:33] New process found: Process Name - w3wp.exe Process ID - 5856 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 22:02:33] New process found: Process Name - conhost.exe Process ID - 6072 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 22:04:20] Process Exited: Process Name - w3wp.exe Process ID - 11296 Web application pool name - DefaultAppPool [03-10-2024 22:04:23] Process Exited: Process Name - w3wp.exe Process ID - 12084 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:04:36] New process found: Process Name - w3wp.exe Process ID - 9376 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 22:04:36] Process Exited: Process Name - conhost.exe Process ID - 8756 [03-10-2024 22:04:36] Process Exited: Process Name - w3wp.exe Process ID - 9724 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:04:37] New process found: Process Name - w3wp.exe Process ID - 8976 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:04:37] Process Exited: Process Name - w3wp.exe Process ID - 4548 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:04:43] New process found: Process Name - w3wp.exe Process ID - 12024 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:05:26] Process Exited: Process Name - conhost.exe Process ID - 10356 [03-10-2024 22:05:26] Process Exited: Process Name - w3wp.exe Process ID - 11632 Web application pool name - legal.acwits.in(domain)(4.0)(pool) [03-10-2024 22:05:47] New process found: Process Name - w3wp.exe Process ID - 7856 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:05:47] New process found: Process Name - conhost.exe Process ID - 1048 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 22:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5160 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 6560 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5160 [03-10-2024 22:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6560 [03-10-2024 22:08:13] New process found: Process Name - w3wp.exe Process ID - 12400 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:08:39] New process found: Process Name - w3wp.exe Process ID - 7492 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 22:08:40] New process found: Process Name - conhost.exe Process ID - 8200 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 22:09:39] New process found: Process Name - w3wp.exe Process ID - 544 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:09:39] Process Exited: Process Name - w3wp.exe Process ID - 8976 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:10:38] Process Exited: Process Name - w3wp.exe Process ID - 9376 Web application pool name - edtribute.com [03-10-2024 22:10:45] Process Exited: Process Name - w3wp.exe Process ID - 12024 Web application pool name - DefaultAppPool [03-10-2024 22:11:50] Process Exited: Process Name - conhost.exe Process ID - 1048 [03-10-2024 22:11:50] Process Exited: Process Name - w3wp.exe Process ID - 7856 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:12:35] Process Exited: Process Name - w3wp.exe Process ID - 5856 Web application pool name - taxtribute.com [03-10-2024 22:12:35] Process Exited: Process Name - conhost.exe Process ID - 6072 [03-10-2024 22:14:28] New process found: Process Name - w3wp.exe Process ID - 12052 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:14:39] New process found: Process Name - w3wp.exe Process ID - 13096 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:14:39] Process Exited: Process Name - w3wp.exe Process ID - 544 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:16:40] Process Exited: Process Name - w3wp.exe Process ID - 7492 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 22:16:40] Process Exited: Process Name - conhost.exe Process ID - 8200 [03-10-2024 22:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10588 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9892 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9892 [03-10-2024 22:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10588 [03-10-2024 22:18:28] New process found: Process Name - w3wp.exe Process ID - 11224 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [03-10-2024 22:18:28] New process found: Process Name - conhost.exe Process ID - 716 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [03-10-2024 22:18:39] New process found: Process Name - w3wp.exe Process ID - 9436 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:18:39] New process found: Process Name - conhost.exe Process ID - 2272 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 22:19:41] New process found: Process Name - w3wp.exe Process ID - 11308 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:19:41] Process Exited: Process Name - w3wp.exe Process ID - 13096 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:21:30] Process Exited: Process Name - w3wp.exe Process ID - 12052 Web application pool name - DefaultAppPool [03-10-2024 22:22:15] Process Exited: Process Name - w3wp.exe Process ID - 12400 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:22:17] New process found: Process Name - w3wp.exe Process ID - 9880 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:22:40] New process found: Process Name - w3wp.exe Process ID - 9124 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 22:23:22] New process found: Process Name - w3wp.exe Process ID - 4596 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:24:31] Process Exited: Process Name - conhost.exe Process ID - 716 [03-10-2024 22:24:31] Process Exited: Process Name - w3wp.exe Process ID - 11224 Web application pool name - schoolerp.edtribute.com [03-10-2024 22:24:42] New process found: Process Name - w3wp.exe Process ID - 5884 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:24:42] Process Exited: Process Name - w3wp.exe Process ID - 11308 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9324 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6312 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:27:41] Process Exited: Process Name - php-cgi.exe Process ID - 12260 [03-10-2024 22:27:42] Process Exited: Process Name - w3wp.exe Process ID - 12804 Web application pool name - PleskControlPanel [03-10-2024 22:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6312 [03-10-2024 22:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9324 [03-10-2024 22:28:43] Process Exited: Process Name - w3wp.exe Process ID - 9124 Web application pool name - galaxytools.in [03-10-2024 22:29:24] Process Exited: Process Name - w3wp.exe Process ID - 4596 Web application pool name - DefaultAppPool [03-10-2024 22:29:43] New process found: Process Name - w3wp.exe Process ID - 12656 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:29:43] Process Exited: Process Name - w3wp.exe Process ID - 5884 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:32:04] Process Exited: Process Name - conhost.exe Process ID - 7088 [03-10-2024 22:32:04] Process Exited: Process Name - w3wp.exe Process ID - 10964 Web application pool name - kdbps.edu.in [03-10-2024 22:33:00] New process found: Process Name - w3wp.exe Process ID - 10816 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:33:08] New process found: Process Name - w3wp.exe Process ID - 11984 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 22:33:08] New process found: Process Name - conhost.exe Process ID - 13260 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 22:34:20] Process Exited: Process Name - w3wp.exe Process ID - 9880 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:34:45] New process found: Process Name - w3wp.exe Process ID - 8644 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:34:45] Process Exited: Process Name - w3wp.exe Process ID - 12656 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:35:02] New process found: Process Name - w3wp.exe Process ID - 12584 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 22:35:02] New process found: Process Name - conhost.exe Process ID - 9212 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 22:36:41] Process Exited: Process Name - conhost.exe Process ID - 2272 [03-10-2024 22:36:41] Process Exited: Process Name - w3wp.exe Process ID - 9436 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12720 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 6864 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:37:00] New process found: Process Name - w3wp.exe Process ID - 9644 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:37:02] New process found: Process Name - conhost.exe Process ID - 11660 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 22:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6864 [03-10-2024 22:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12720 [03-10-2024 22:39:46] New process found: Process Name - w3wp.exe Process ID - 1784 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:39:46] Process Exited: Process Name - w3wp.exe Process ID - 8644 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:39:57] New process found: Process Name - w3wp.exe Process ID - 11276 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 22:43:02] Process Exited: Process Name - w3wp.exe Process ID - 10816 Web application pool name - DefaultAppPool [03-10-2024 22:43:05] New process found: Process Name - w3wp.exe Process ID - 12700 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 22:43:06] New process found: Process Name - conhost.exe Process ID - 11604 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 22:44:47] New process found: Process Name - w3wp.exe Process ID - 12332 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:44:47] Process Exited: Process Name - w3wp.exe Process ID - 1784 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:45:59] Process Exited: Process Name - w3wp.exe Process ID - 11276 Web application pool name - galaxytools.in [03-10-2024 22:46:05] New process found: Process Name - w3wp.exe Process ID - 7328 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11680 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12252 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:47:18] New process found: Process Name - w3wp.exe Process ID - 10384 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [03-10-2024 22:47:18] New process found: Process Name - conhost.exe Process ID - 13212 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [03-10-2024 22:47:40] New process found: Process Name - w3wp.exe Process ID - 13088 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 22:47:44] New process found: Process Name - w3wp.exe Process ID - 1576 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 22:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11680 [03-10-2024 22:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12252 [03-10-2024 22:49:08] Process Exited: Process Name - conhost.exe Process ID - 11604 [03-10-2024 22:49:08] Process Exited: Process Name - w3wp.exe Process ID - 12700 Web application pool name - taxtribute.com [03-10-2024 22:49:45] New process found: Process Name - w3wp.exe Process ID - 3028 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 22:49:48] New process found: Process Name - w3wp.exe Process ID - 7756 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:49:48] Process Exited: Process Name - w3wp.exe Process ID - 12332 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:53:20] Process Exited: Process Name - conhost.exe Process ID - 13212 [03-10-2024 22:53:21] Process Exited: Process Name - w3wp.exe Process ID - 10384 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [03-10-2024 22:53:42] Process Exited: Process Name - w3wp.exe Process ID - 13088 Web application pool name - shop.galaxytools.in [03-10-2024 22:53:46] Process Exited: Process Name - w3wp.exe Process ID - 1576 Web application pool name - adminportal.galaxytools.in [03-10-2024 22:54:03] Process Exited: Process Name - w3wp.exe Process ID - 9644 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:54:03] Process Exited: Process Name - conhost.exe Process ID - 11660 [03-10-2024 22:54:09] Process Exited: Process Name - w3wp.exe Process ID - 7328 Web application pool name - DefaultAppPool [03-10-2024 22:54:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11560 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:54:42] New process found: Process Name - w3wp.exe Process ID - 11316 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 22:54:44] New process found: Process Name - conhost.exe Process ID - 7932 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 22:54:50] New process found: Process Name - w3wp.exe Process ID - 1540 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:54:50] Process Exited: Process Name - w3wp.exe Process ID - 7756 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:55:47] New process found: Process Name - w3wp.exe Process ID - 9984 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 22:55:47] Process Exited: Process Name - w3wp.exe Process ID - 3028 Web application pool name - galaxytools.in [03-10-2024 22:55:55] New process found: Process Name - w3wp.exe Process ID - 2248 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 22:55:55] New process found: Process Name - conhost.exe Process ID - 11288 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 22:56:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11560 [03-10-2024 22:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13236 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 22:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4652 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 22:57:12] New process found: Process Name - w3wp.exe Process ID - 11040 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 22:58:09] Process Exited: Process Name - w3wp.exe Process ID - 11984 Web application pool name - kdbps.edu.in [03-10-2024 22:58:09] Process Exited: Process Name - conhost.exe Process ID - 13260 [03-10-2024 22:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4652 [03-10-2024 22:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13236 [03-10-2024 22:59:13] New process found: Process Name - w3wp.exe Process ID - 9360 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 22:59:14] New process found: Process Name - conhost.exe Process ID - 6316 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 22:59:20] New process found: Process Name - w3wp.exe Process ID - 2280 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 22:59:23] New process found: Process Name - w3wp.exe Process ID - 6720 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) Web application pool name - legal.acwits.in(domain)(4.0)(pool) [03-10-2024 22:59:24] New process found: Process Name - conhost.exe Process ID - 10076 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) [03-10-2024 22:59:50] New process found: Process Name - w3wp.exe Process ID - 5348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 22:59:50] Process Exited: Process Name - w3wp.exe Process ID - 1540 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:00:45] Process Exited: Process Name - conhost.exe Process ID - 7932 [03-10-2024 23:00:45] Process Exited: Process Name - w3wp.exe Process ID - 11316 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:01:12] New process found: Process Name - w3wp.exe Process ID - 8700 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 23:01:29] New process found: Process Name - w3wp.exe Process ID - 9856 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 23:01:50] Process Exited: Process Name - w3wp.exe Process ID - 9984 Web application pool name - adminportal.galaxytools.in [03-10-2024 23:01:58] Process Exited: Process Name - w3wp.exe Process ID - 2248 Web application pool name - taxtribute.com [03-10-2024 23:01:58] Process Exited: Process Name - conhost.exe Process ID - 11288 [03-10-2024 23:02:06] New process found: Process Name - InstallAgent.exe Process ID - 9040 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 23:02:06] New process found: Process Name - InstallAgent.exe Process ID - 9720 Process Identity - KSHITIJSINGHAL-\Administrator [03-10-2024 23:02:06] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [03-10-2024 23:02:11] Process Exited: Process Name - InstallAgent.exe Process ID - 9040 [03-10-2024 23:02:11] Process Exited: Process Name - InstallAgent.exe Process ID - 9720 [03-10-2024 23:02:19] New process found: Process Name - w3wp.exe Process ID - 4544 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [03-10-2024 23:02:20] New process found: Process Name - conhost.exe Process ID - 4156 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [03-10-2024 23:03:04] Process Exited: Process Name - conhost.exe Process ID - 9212 [03-10-2024 23:03:04] Process Exited: Process Name - w3wp.exe Process ID - 12584 Web application pool name - masteradmin.taxtribute.com [03-10-2024 23:04:52] New process found: Process Name - w3wp.exe Process ID - 12212 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:04:52] Process Exited: Process Name - w3wp.exe Process ID - 5348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:05:26] New process found: Process Name - w3wp.exe Process ID - 1016 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:05:26] New process found: Process Name - conhost.exe Process ID - 3648 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 23:05:26] Process Exited: Process Name - w3wp.exe Process ID - 6720 Web application pool name - legal.acwits.in(domain)(4.0)(pool) [03-10-2024 23:05:26] Process Exited: Process Name - conhost.exe Process ID - 10076 [03-10-2024 23:05:30] New process found: Process Name - w3wp.exe Process ID - 11476 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 23:06:41] New process found: Process Name - WmiPrvSE.exe Process ID - 9248 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:06:42] New process found: Process Name - w3wp.exe Process ID - 4548 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 23:06:42] New process found: Process Name - conhost.exe Process ID - 9456 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [03-10-2024 23:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 4528 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:07:00] New process found: Process Name - cmd.exe Process ID - 9000 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:07:00] New process found: Process Name - conhost.exe Process ID - 6180 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:07:00] New process found: Process Name - runtask.exe Process ID - 10460 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:07:00] New process found: Process Name - php.exe Process ID - 924 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 23:07:00] New process found: Process Name - conhost.exe Process ID - 12540 Process Identity - KSHITIJSINGHAL-\psaadm [03-10-2024 23:07:03] Process Exited: Process Name - php.exe Process ID - 924 [03-10-2024 23:07:03] Process Exited: Process Name - conhost.exe Process ID - 6180 [03-10-2024 23:07:03] Process Exited: Process Name - cmd.exe Process ID - 9000 [03-10-2024 23:07:03] Process Exited: Process Name - runtask.exe Process ID - 10460 [03-10-2024 23:07:03] Process Exited: Process Name - conhost.exe Process ID - 12540 [03-10-2024 23:07:14] Process Exited: Process Name - w3wp.exe Process ID - 8700 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [03-10-2024 23:08:22] Process Exited: Process Name - conhost.exe Process ID - 4156 [03-10-2024 23:08:22] Process Exited: Process Name - w3wp.exe Process ID - 4544 Web application pool name - csr.bmvfragrances.com [03-10-2024 23:08:33] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4528 [03-10-2024 23:08:33] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9248 [03-10-2024 23:09:15] Process Exited: Process Name - w3wp.exe Process ID - 11040 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:09:53] New process found: Process Name - w3wp.exe Process ID - 9868 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:09:53] Process Exited: Process Name - w3wp.exe Process ID - 12212 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:10:23] Process Exited: Process Name - w3wp.exe Process ID - 2280 Web application pool name - DefaultAppPool [03-10-2024 23:11:28] New process found: Process Name - w3wp.exe Process ID - 10092 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 23:11:32] Process Exited: Process Name - w3wp.exe Process ID - 11476 Web application pool name - shop.galaxytools.in [03-10-2024 23:12:16] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [03-10-2024 23:12:31] Process Exited: Process Name - w3wp.exe Process ID - 9856 Web application pool name - galaxytools.in [03-10-2024 23:12:44] Process Exited: Process Name - w3wp.exe Process ID - 4548 Web application pool name - chotareliance.in(domain)(4.0)(pool) [03-10-2024 23:12:44] Process Exited: Process Name - conhost.exe Process ID - 9456 [03-10-2024 23:13:52] New process found: Process Name - w3wp.exe Process ID - 4324 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [03-10-2024 23:13:56] New process found: Process Name - php-cgi.exe Process ID - 3760 Process Identity - IIS APPPOOL\PleskControlPanel [03-10-2024 23:14:25] New process found: Process Name - w3wp.exe Process ID - 12684 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [03-10-2024 23:14:55] New process found: Process Name - w3wp.exe Process ID - 9720 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:14:55] Process Exited: Process Name - w3wp.exe Process ID - 9868 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:15:56] New process found: Process Name - w3wp.exe Process ID - 1228 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 23:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12608 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4308 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:17:30] Process Exited: Process Name - w3wp.exe Process ID - 10092 Web application pool name - DefaultAppPool [03-10-2024 23:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4308 [03-10-2024 23:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12608 [03-10-2024 23:19:56] New process found: Process Name - w3wp.exe Process ID - 10164 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:19:56] Process Exited: Process Name - w3wp.exe Process ID - 9720 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:20:28] Process Exited: Process Name - w3wp.exe Process ID - 12684 Web application pool name - shop.galaxytools.in [03-10-2024 23:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 6852 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 13184 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:21:58] Process Exited: Process Name - w3wp.exe Process ID - 1228 Web application pool name - galaxytools.in [03-10-2024 23:22:42] New process found: Process Name - w3wp.exe Process ID - 3216 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 23:24:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 6852 [03-10-2024 23:24:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 13184 [03-10-2024 23:24:29] Process Exited: Process Name - w3wp.exe Process ID - 1016 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:24:29] Process Exited: Process Name - conhost.exe Process ID - 3648 [03-10-2024 23:24:57] New process found: Process Name - w3wp.exe Process ID - 13244 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 23:24:57] New process found: Process Name - w3wp.exe Process ID - 12004 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:24:57] Process Exited: Process Name - w3wp.exe Process ID - 10164 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5344 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3112 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3112 [03-10-2024 23:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5344 [03-10-2024 23:29:49] New process found: Process Name - w3wp.exe Process ID - 5684 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 23:29:49] New process found: Process Name - where.exe Process ID - 6720 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 23:29:49] New process found: Process Name - conhost.exe Process ID - 7348 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 23:29:50] New process found: Process Name - conhost.exe Process ID - 12012 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 23:29:50] Process Exited: Process Name - where.exe Process ID - 6720 [03-10-2024 23:29:50] Process Exited: Process Name - conhost.exe Process ID - 7348 [03-10-2024 23:29:58] New process found: Process Name - w3wp.exe Process ID - 10992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:29:58] Process Exited: Process Name - w3wp.exe Process ID - 12004 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:30:44] Process Exited: Process Name - w3wp.exe Process ID - 3216 Web application pool name - DefaultAppPool [03-10-2024 23:30:59] Process Exited: Process Name - w3wp.exe Process ID - 13244 Web application pool name - galaxytools.in [03-10-2024 23:31:18] New process found: Process Name - w3wp.exe Process ID - 12124 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 23:31:40] New process found: Process Name - w3wp.exe Process ID - 10888 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 23:32:26] New process found: Process Name - w3wp.exe Process ID - 10036 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:32:26] New process found: Process Name - conhost.exe Process ID - 8288 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [03-10-2024 23:32:29] New process found: Process Name - w3wp.exe Process ID - 12296 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:32:30] New process found: Process Name - conhost.exe Process ID - 5844 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [03-10-2024 23:34:59] New process found: Process Name - w3wp.exe Process ID - 11880 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:34:59] Process Exited: Process Name - w3wp.exe Process ID - 10992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:35:52] Process Exited: Process Name - w3wp.exe Process ID - 5684 Web application pool name - taxtribute.com [03-10-2024 23:35:52] Process Exited: Process Name - conhost.exe Process ID - 12012 [03-10-2024 23:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 6180 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:36:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 12188 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:36:48] New process found: Process Name - SearchFilterHost.exe Process ID - 13028 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 8596 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:37:02] New process found: Process Name - w3wp.exe Process ID - 11720 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:37:02] New process found: Process Name - conhost.exe Process ID - 928 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 23:38:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 12188 [03-10-2024 23:38:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 13028 [03-10-2024 23:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6180 [03-10-2024 23:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8596 [03-10-2024 23:38:28] New process found: Process Name - w3wp.exe Process ID - 12760 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 23:38:28] Process Exited: Process Name - conhost.exe Process ID - 8288 [03-10-2024 23:38:28] Process Exited: Process Name - w3wp.exe Process ID - 10036 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:38:32] Process Exited: Process Name - conhost.exe Process ID - 5844 [03-10-2024 23:38:32] Process Exited: Process Name - w3wp.exe Process ID - 12296 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:38:42] Process Exited: Process Name - w3wp.exe Process ID - 10888 Web application pool name - galaxytools.in [03-10-2024 23:40:01] New process found: Process Name - w3wp.exe Process ID - 7924 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:40:01] Process Exited: Process Name - w3wp.exe Process ID - 11880 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:42:30] New process found: Process Name - w3wp.exe Process ID - 12540 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 23:42:30] New process found: Process Name - conhost.exe Process ID - 12572 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 23:43:04] Process Exited: Process Name - conhost.exe Process ID - 928 [03-10-2024 23:43:04] Process Exited: Process Name - w3wp.exe Process ID - 11720 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:43:16] Process Exited: Process Name - conhost.exe Process ID - 6316 [03-10-2024 23:43:16] Process Exited: Process Name - w3wp.exe Process ID - 9360 Web application pool name - kdbps.edu.in [03-10-2024 23:43:32] New process found: Process Name - w3wp.exe Process ID - 9464 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:43:32] New process found: Process Name - conhost.exe Process ID - 9004 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [03-10-2024 23:44:19] Process Exited: Process Name - w3wp.exe Process ID - 12124 Web application pool name - DefaultAppPool [03-10-2024 23:44:20] New process found: Process Name - w3wp.exe Process ID - 7172 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [03-10-2024 23:44:29] Process Exited: Process Name - w3wp.exe Process ID - 12760 Web application pool name - edtribute.com [03-10-2024 23:44:54] Process Exited: Process Name - php-cgi.exe Process ID - 3760 [03-10-2024 23:44:56] Process Exited: Process Name - w3wp.exe Process ID - 4324 Web application pool name - PleskControlPanel [03-10-2024 23:45:02] New process found: Process Name - w3wp.exe Process ID - 5820 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:45:02] Process Exited: Process Name - w3wp.exe Process ID - 7924 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:45:14] New process found: Process Name - w3wp.exe Process ID - 8024 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:45:14] New process found: Process Name - conhost.exe Process ID - 8448 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [03-10-2024 23:45:44] New process found: Process Name - w3wp.exe Process ID - 8456 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 23:45:44] New process found: Process Name - conhost.exe Process ID - 9992 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 23:46:17] New process found: Process Name - w3wp.exe Process ID - 1012 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2732 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:46:47] New process found: Process Name - w3wp.exe Process ID - 4512 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [03-10-2024 23:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3996 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:47:15] New process found: Process Name - w3wp.exe Process ID - 11228 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [03-10-2024 23:47:42] New process found: Process Name - w3wp.exe Process ID - 7508 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 23:47:47] New process found: Process Name - where.exe Process ID - 11964 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 23:47:47] New process found: Process Name - conhost.exe Process ID - 10496 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 23:47:48] New process found: Process Name - conhost.exe Process ID - 6520 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [03-10-2024 23:47:48] Process Exited: Process Name - conhost.exe Process ID - 10496 [03-10-2024 23:47:48] Process Exited: Process Name - where.exe Process ID - 11964 [03-10-2024 23:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2732 [03-10-2024 23:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3996 [03-10-2024 23:48:31] Process Exited: Process Name - w3wp.exe Process ID - 12540 Web application pool name - masteradmin.taxtribute.com [03-10-2024 23:48:31] Process Exited: Process Name - conhost.exe Process ID - 12572 [03-10-2024 23:48:38] New process found: Process Name - w3wp.exe Process ID - 2268 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 23:49:06] New process found: Process Name - w3wp.exe Process ID - 10796 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [03-10-2024 23:49:11] New process found: Process Name - w3wp.exe Process ID - 6600 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [03-10-2024 23:50:03] New process found: Process Name - w3wp.exe Process ID - 10208 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:50:03] Process Exited: Process Name - w3wp.exe Process ID - 5820 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:50:53] New process found: Process Name - w3wp.exe Process ID - 2280 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [03-10-2024 23:50:53] New process found: Process Name - conhost.exe Process ID - 8292 Process Identity - IIS APPPOOL\taxtribute.com [03-10-2024 23:51:16] Process Exited: Process Name - w3wp.exe Process ID - 8024 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:51:16] Process Exited: Process Name - conhost.exe Process ID - 8448 [03-10-2024 23:51:30] New process found: Process Name - w3wp.exe Process ID - 11940 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [03-10-2024 23:51:30] New process found: Process Name - conhost.exe Process ID - 11348 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [03-10-2024 23:52:50] Process Exited: Process Name - w3wp.exe Process ID - 4512 Web application pool name - edtribute.com [03-10-2024 23:53:17] Process Exited: Process Name - w3wp.exe Process ID - 11228 Web application pool name - galaxytools.in [03-10-2024 23:54:35] Process Exited: Process Name - conhost.exe Process ID - 9004 [03-10-2024 23:54:35] Process Exited: Process Name - w3wp.exe Process ID - 9464 Web application pool name - perfectbread.com(domain)(4.0)(pool) [03-10-2024 23:54:41] Process Exited: Process Name - w3wp.exe Process ID - 2268 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [03-10-2024 23:54:44] Process Exited: Process Name - conhost.exe Process ID - 6520 [03-10-2024 23:54:44] Process Exited: Process Name - w3wp.exe Process ID - 7508 Web application pool name - justprewedding.com(domain)(4.0)(pool) [03-10-2024 23:54:45] Process Exited: Process Name - w3wp.exe Process ID - 8456 Web application pool name - kdbps.edu.in [03-10-2024 23:54:45] Process Exited: Process Name - conhost.exe Process ID - 9992 [03-10-2024 23:55:05] New process found: Process Name - w3wp.exe Process ID - 5620 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:55:05] Process Exited: Process Name - w3wp.exe Process ID - 10208 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [03-10-2024 23:55:09] Process Exited: Process Name - w3wp.exe Process ID - 10796 Web application pool name - prathabypriyal.com [03-10-2024 23:55:14] Process Exited: Process Name - w3wp.exe Process ID - 6600 Web application pool name - adminportal.galaxytools.in [03-10-2024 23:56:19] Process Exited: Process Name - w3wp.exe Process ID - 1012 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [03-10-2024 23:56:34] New process found: Process Name - w3wp.exe Process ID - 10140 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [03-10-2024 23:56:34] New process found: Process Name - conhost.exe Process ID - 9736 Process Identity - IIS APPPOOL\kdbps.edu.in [03-10-2024 23:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8676 Process Identity - NT AUTHORITY\LOCAL SERVICE [03-10-2024 23:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 5684 Process Identity - NT AUTHORITY\SYSTEM [03-10-2024 23:57:31] Process Exited: Process Name - conhost.exe Process ID - 11348 [03-10-2024 23:57:31] Process Exited: Process Name - w3wp.exe Process ID - 11940 Web application pool name - masteradmin.taxtribute.com [03-10-2024 23:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5684 [03-10-2024 23:58:11] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8676 [03-10-2024 23:58:22] Process Exited: Process Name - w3wp.exe Process ID - 7172 Web application pool name - DefaultAppPool [04-10-2024] New process found: Process Name - php.exe Process ID - 3620 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024] New process found: Process Name - conhost.exe Process ID - 12984 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:00:04] Process Exited: Process Name - php.exe Process ID - 3620 [04-10-2024 00:00:04] Process Exited: Process Name - conhost.exe Process ID - 12984 [04-10-2024 00:00:06] New process found: Process Name - w3wp.exe Process ID - 11888 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:00:06] Process Exited: Process Name - w3wp.exe Process ID - 5620 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:01:31] New process found: Process Name - w3wp.exe Process ID - 6820 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 00:01:31] New process found: Process Name - w3wp.exe Process ID - 12540 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 00:01:31] New process found: Process Name - php-cgi.exe Process ID - 10036 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 00:01:40] New process found: Process Name - w3wp.exe Process ID - 9120 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:01:40] New process found: Process Name - conhost.exe Process ID - 3056 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 00:03:04] New process found: Process Name - w3wp.exe Process ID - 2636 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:03:04] New process found: Process Name - conhost.exe Process ID - 5440 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:04:33] New process found: Process Name - w3wp.exe Process ID - 8624 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 00:05:08] New process found: Process Name - w3wp.exe Process ID - 3000 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:05:08] Process Exited: Process Name - w3wp.exe Process ID - 11888 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6888 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12560 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:07:42] Process Exited: Process Name - conhost.exe Process ID - 3056 [04-10-2024 00:07:42] Process Exited: Process Name - w3wp.exe Process ID - 9120 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6888 [04-10-2024 00:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12560 [04-10-2024 00:08:56] Process Exited: Process Name - w3wp.exe Process ID - 2280 Web application pool name - taxtribute.com [04-10-2024 00:08:56] Process Exited: Process Name - conhost.exe Process ID - 8292 [04-10-2024 00:10:06] Process Exited: Process Name - w3wp.exe Process ID - 2636 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:10:06] Process Exited: Process Name - conhost.exe Process ID - 5440 [04-10-2024 00:10:08] New process found: Process Name - w3wp.exe Process ID - 10796 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:10:08] Process Exited: Process Name - w3wp.exe Process ID - 3000 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:10:36] Process Exited: Process Name - w3wp.exe Process ID - 8624 Web application pool name - shop.galaxytools.in [04-10-2024 00:10:56] New process found: Process Name - w3wp.exe Process ID - 7088 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 00:11:10] New process found: Process Name - w3wp.exe Process ID - 12820 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:11:10] New process found: Process Name - where.exe Process ID - 3996 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:11:10] New process found: Process Name - conhost.exe Process ID - 6776 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:11:11] New process found: Process Name - conhost.exe Process ID - 11224 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:11:11] Process Exited: Process Name - where.exe Process ID - 3996 [04-10-2024 00:11:11] Process Exited: Process Name - conhost.exe Process ID - 6776 [04-10-2024 00:12:33] Process Exited: Process Name - w3wp.exe Process ID - 6820 Web application pool name - DefaultAppPool [04-10-2024 00:14:37] Process Exited: Process Name - conhost.exe Process ID - 9736 [04-10-2024 00:14:37] Process Exited: Process Name - w3wp.exe Process ID - 10140 Web application pool name - kdbps.edu.in [04-10-2024 00:15:10] New process found: Process Name - w3wp.exe Process ID - 5176 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:15:10] Process Exited: Process Name - w3wp.exe Process ID - 10796 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13128 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2636 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:16:58] Process Exited: Process Name - w3wp.exe Process ID - 7088 Web application pool name - adminportal.galaxytools.in [04-10-2024 00:17:09] New process found: Process Name - w3wp.exe Process ID - 5964 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 00:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2636 [04-10-2024 00:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13128 [04-10-2024 00:18:23] New process found: Process Name - w3wp.exe Process ID - 3356 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:18:23] New process found: Process Name - conhost.exe Process ID - 12392 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:19:13] Process Exited: Process Name - conhost.exe Process ID - 11224 [04-10-2024 00:19:13] Process Exited: Process Name - w3wp.exe Process ID - 12820 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:20:11] New process found: Process Name - w3wp.exe Process ID - 12020 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:20:11] Process Exited: Process Name - w3wp.exe Process ID - 5176 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:20:31] New process found: Process Name - w3wp.exe Process ID - 8044 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:20:50] New process found: Process Name - w3wp.exe Process ID - 8708 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 00:20:52] New process found: Process Name - conhost.exe Process ID - 11484 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 00:23:12] Process Exited: Process Name - w3wp.exe Process ID - 5964 Web application pool name - DefaultAppPool [04-10-2024 00:24:51] New process found: Process Name - w3wp.exe Process ID - 12284 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 00:25:12] New process found: Process Name - w3wp.exe Process ID - 2732 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:25:12] Process Exited: Process Name - w3wp.exe Process ID - 12020 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:26:26] Process Exited: Process Name - w3wp.exe Process ID - 3356 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:26:26] Process Exited: Process Name - conhost.exe Process ID - 12392 [04-10-2024 00:26:34] Process Exited: Process Name - w3wp.exe Process ID - 8044 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5848 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6316 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:27:19] New process found: Process Name - w3wp.exe Process ID - 592 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 00:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5848 [04-10-2024 00:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6316 [04-10-2024 00:29:52] Process Exited: Process Name - w3wp.exe Process ID - 8708 Web application pool name - kdbps.edu.in [04-10-2024 00:29:52] Process Exited: Process Name - conhost.exe Process ID - 11484 [04-10-2024 00:30:07] New process found: Process Name - w3wp.exe Process ID - 5908 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 00:30:11] New process found: Process Name - conhost.exe Process ID - 5344 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 00:30:13] New process found: Process Name - w3wp.exe Process ID - 13280 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:30:13] Process Exited: Process Name - w3wp.exe Process ID - 2732 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:30:33] New process found: Process Name - w3wp.exe Process ID - 2008 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:30:33] New process found: Process Name - conhost.exe Process ID - 376 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 00:30:44] New process found: Process Name - w3wp.exe Process ID - 6292 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:30:46] New process found: Process Name - conhost.exe Process ID - 12116 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:32:00] Process Exited: Process Name - conhost.exe Process ID - 5720 [04-10-2024 00:32:00] Process Exited: Process Name - w3wp.exe Process ID - 6672 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:32:40] New process found: Process Name - w3wp.exe Process ID - 12252 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 00:32:42] New process found: Process Name - w3wp.exe Process ID - 6320 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:32:42] New process found: Process Name - conhost.exe Process ID - 8032 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 00:32:50] New process found: Process Name - conhost.exe Process ID - 912 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 00:33:22] Process Exited: Process Name - w3wp.exe Process ID - 592 Web application pool name - galaxytools.in [04-10-2024 00:33:54] New process found: Process Name - w3wp.exe Process ID - 12836 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:33:54] Process Exited: Process Name - w3wp.exe Process ID - 12284 Web application pool name - DefaultAppPool [04-10-2024 00:35:15] New process found: Process Name - w3wp.exe Process ID - 12452 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:35:15] Process Exited: Process Name - w3wp.exe Process ID - 13280 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:36:10] Process Exited: Process Name - conhost.exe Process ID - 5344 [04-10-2024 00:36:10] Process Exited: Process Name - w3wp.exe Process ID - 5908 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 00:36:35] Process Exited: Process Name - conhost.exe Process ID - 376 [04-10-2024 00:36:35] Process Exited: Process Name - w3wp.exe Process ID - 2008 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13308 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:36:47] Process Exited: Process Name - w3wp.exe Process ID - 6292 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:36:47] Process Exited: Process Name - conhost.exe Process ID - 12116 [04-10-2024 00:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6720 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6720 [04-10-2024 00:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13308 [04-10-2024 00:38:32] Process Exited: Process Name - php-cgi.exe Process ID - 10036 [04-10-2024 00:38:33] Process Exited: Process Name - w3wp.exe Process ID - 12540 Web application pool name - PleskControlPanel [04-10-2024 00:38:53] New process found: Process Name - w3wp.exe Process ID - 8144 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 00:40:13] New process found: Process Name - w3wp.exe Process ID - 1672 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:40:13] New process found: Process Name - where.exe Process ID - 7008 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:40:13] New process found: Process Name - conhost.exe Process ID - 10964 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:40:14] New process found: Process Name - conhost.exe Process ID - 6232 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:40:14] Process Exited: Process Name - where.exe Process ID - 7008 [04-10-2024 00:40:14] Process Exited: Process Name - conhost.exe Process ID - 10964 [04-10-2024 00:40:16] New process found: Process Name - w3wp.exe Process ID - 11300 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:40:16] Process Exited: Process Name - w3wp.exe Process ID - 12452 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:40:42] Process Exited: Process Name - conhost.exe Process ID - 912 [04-10-2024 00:40:42] Process Exited: Process Name - w3wp.exe Process ID - 12252 Web application pool name - kdbps.edu.in [04-10-2024 00:40:56] Process Exited: Process Name - w3wp.exe Process ID - 12836 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:41:48] New process found: Process Name - w3wp.exe Process ID - 6660 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:41:48] New process found: Process Name - conhost.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 00:42:44] New process found: Process Name - w3wp.exe Process ID - 11360 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:42:44] New process found: Process Name - conhost.exe Process ID - 4528 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:43:27] New process found: Process Name - w3wp.exe Process ID - 10096 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 00:45:17] New process found: Process Name - w3wp.exe Process ID - 5536 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:45:17] Process Exited: Process Name - w3wp.exe Process ID - 11300 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:46:15] Process Exited: Process Name - w3wp.exe Process ID - 1672 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:46:15] Process Exited: Process Name - conhost.exe Process ID - 6232 [04-10-2024 00:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11232 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 5956 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:47:50] Process Exited: Process Name - conhost.exe Process ID - 5304 [04-10-2024 00:47:50] Process Exited: Process Name - w3wp.exe Process ID - 6660 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:47:59] New process found: Process Name - w3wp.exe Process ID - 10504 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 00:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5956 [04-10-2024 00:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11232 [04-10-2024 00:48:44] Process Exited: Process Name - w3wp.exe Process ID - 6320 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:48:44] Process Exited: Process Name - conhost.exe Process ID - 8032 [04-10-2024 00:49:30] Process Exited: Process Name - w3wp.exe Process ID - 10096 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 00:49:45] Process Exited: Process Name - conhost.exe Process ID - 4528 [04-10-2024 00:49:45] Process Exited: Process Name - w3wp.exe Process ID - 11360 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:50:07] New process found: Process Name - w3wp.exe Process ID - 13112 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:50:07] New process found: Process Name - conhost.exe Process ID - 12688 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 00:50:19] New process found: Process Name - w3wp.exe Process ID - 12352 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:50:19] Process Exited: Process Name - w3wp.exe Process ID - 5536 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:50:53] New process found: Process Name - w3wp.exe Process ID - 1008 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 00:50:53] New process found: Process Name - conhost.exe Process ID - 1096 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 00:51:14] New process found: Process Name - w3wp.exe Process ID - 4144 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:51:55] Process Exited: Process Name - w3wp.exe Process ID - 8144 Web application pool name - galaxytools.in [04-10-2024 00:52:11] New process found: Process Name - w3wp.exe Process ID - 9988 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:52:12] New process found: Process Name - conhost.exe Process ID - 11284 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 00:52:18] New process found: Process Name - w3wp.exe Process ID - 5436 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:52:19] New process found: Process Name - conhost.exe Process ID - 10604 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 00:54:40] New process found: Process Name - w3wp.exe Process ID - 12712 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 00:55:19] New process found: Process Name - w3wp.exe Process ID - 916 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:55:19] Process Exited: Process Name - w3wp.exe Process ID - 12352 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 00:56:41] New process found: Process Name - WmiPrvSE.exe Process ID - 12596 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 00:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 00:57:02] Process Exited: Process Name - w3wp.exe Process ID - 10504 Web application pool name - DefaultAppPool [04-10-2024 00:57:16] Process Exited: Process Name - w3wp.exe Process ID - 4144 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 00:58:12] Process Exited: Process Name - w3wp.exe Process ID - 9988 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:58:12] Process Exited: Process Name - conhost.exe Process ID - 11284 [04-10-2024 00:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12460 [04-10-2024 00:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12596 [04-10-2024 00:58:20] Process Exited: Process Name - w3wp.exe Process ID - 5436 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 00:58:20] Process Exited: Process Name - conhost.exe Process ID - 10604 [04-10-2024 00:59:24] New process found: Process Name - w3wp.exe Process ID - 12888 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 00:59:26] New process found: Process Name - conhost.exe Process ID - 12052 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 01:00:21] New process found: Process Name - w3wp.exe Process ID - 1572 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:00:21] Process Exited: Process Name - w3wp.exe Process ID - 916 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:00:55] Process Exited: Process Name - w3wp.exe Process ID - 1008 Web application pool name - kdbps.edu.in [04-10-2024 01:00:55] Process Exited: Process Name - conhost.exe Process ID - 1096 [04-10-2024 01:02:15] New process found: Process Name - w3wp.exe Process ID - 12348 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 01:02:16] New process found: Process Name - conhost.exe Process ID - 5684 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 01:02:21] New process found: Process Name - w3wp.exe Process ID - 13056 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 01:02:42] Process Exited: Process Name - w3wp.exe Process ID - 12712 Web application pool name - galaxytools.in [04-10-2024 01:03:04] New process found: Process Name - w3wp.exe Process ID - 10668 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 01:04:34] New process found: Process Name - w3wp.exe Process ID - 10568 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 01:04:34] New process found: Process Name - conhost.exe Process ID - 4324 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 01:04:52] New process found: Process Name - w3wp.exe Process ID - 376 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 01:04:53] New process found: Process Name - conhost.exe Process ID - 1872 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 01:05:22] New process found: Process Name - w3wp.exe Process ID - 8144 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:05:22] Process Exited: Process Name - w3wp.exe Process ID - 1572 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:05:26] Process Exited: Process Name - conhost.exe Process ID - 12052 [04-10-2024 01:05:26] Process Exited: Process Name - w3wp.exe Process ID - 12888 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 01:06:31] New process found: Process Name - w3wp.exe Process ID - 2352 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 01:06:33] New process found: Process Name - conhost.exe Process ID - 11184 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 01:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7400 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12296 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7400 [04-10-2024 01:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12296 [04-10-2024 01:08:24] Process Exited: Process Name - w3wp.exe Process ID - 13056 Web application pool name - adminportal.galaxytools.in [04-10-2024 01:08:54] New process found: Process Name - w3wp.exe Process ID - 1788 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 01:09:59] New process found: Process Name - w3wp.exe Process ID - 2328 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 01:10:23] New process found: Process Name - w3wp.exe Process ID - 4652 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:10:23] New process found: Process Name - w3wp.exe Process ID - 3968 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 01:10:23] Process Exited: Process Name - w3wp.exe Process ID - 8144 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:10:37] Process Exited: Process Name - conhost.exe Process ID - 4324 [04-10-2024 01:10:37] Process Exited: Process Name - w3wp.exe Process ID - 10568 Web application pool name - schoolerp.edtribute.com [04-10-2024 01:10:53] Process Exited: Process Name - w3wp.exe Process ID - 376 Web application pool name - csr.bmvfragrances.com [04-10-2024 01:10:53] Process Exited: Process Name - conhost.exe Process ID - 1872 [04-10-2024 01:11:46] New process found: Process Name - w3wp.exe Process ID - 9072 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 01:12:34] Process Exited: Process Name - w3wp.exe Process ID - 2352 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 01:12:34] Process Exited: Process Name - conhost.exe Process ID - 11184 [04-10-2024 01:14:57] Process Exited: Process Name - w3wp.exe Process ID - 1788 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 01:15:25] New process found: Process Name - w3wp.exe Process ID - 7324 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:15:25] Process Exited: Process Name - w3wp.exe Process ID - 4652 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:16:02] Process Exited: Process Name - w3wp.exe Process ID - 2328 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 01:16:26] Process Exited: Process Name - w3wp.exe Process ID - 3968 Web application pool name - prathabypriyal.com [04-10-2024 01:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7172 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12412 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:17:39] New process found: Process Name - w3wp.exe Process ID - 5680 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 01:17:48] Process Exited: Process Name - w3wp.exe Process ID - 9072 Web application pool name - galaxytools.in [04-10-2024 01:18:06] Process Exited: Process Name - w3wp.exe Process ID - 10668 Web application pool name - DefaultAppPool [04-10-2024 01:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7172 [04-10-2024 01:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12412 [04-10-2024 01:19:13] New process found: Process Name - w3wp.exe Process ID - 1304 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 01:20:26] New process found: Process Name - w3wp.exe Process ID - 344 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:20:26] Process Exited: Process Name - w3wp.exe Process ID - 7324 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:21:54] New process found: Process Name - w3wp.exe Process ID - 11284 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 01:23:42] Process Exited: Process Name - w3wp.exe Process ID - 5680 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 01:25:16] Process Exited: Process Name - w3wp.exe Process ID - 1304 Web application pool name - galaxytools.in [04-10-2024 01:25:27] New process found: Process Name - w3wp.exe Process ID - 10708 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:25:27] Process Exited: Process Name - w3wp.exe Process ID - 344 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:26:17] Process Exited: Process Name - conhost.exe Process ID - 5684 [04-10-2024 01:26:17] Process Exited: Process Name - w3wp.exe Process ID - 12348 Web application pool name - kdbps.edu.in [04-10-2024 01:26:41] New process found: Process Name - WmiPrvSE.exe Process ID - 12568 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 11152 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11152 [04-10-2024 01:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12568 [04-10-2024 01:30:28] New process found: Process Name - w3wp.exe Process ID - 13048 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:30:28] Process Exited: Process Name - w3wp.exe Process ID - 10708 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:30:57] Process Exited: Process Name - w3wp.exe Process ID - 11284 Web application pool name - DefaultAppPool [04-10-2024 01:34:06] New process found: Process Name - w3wp.exe Process ID - 5732 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 01:34:57] New process found: Process Name - w3wp.exe Process ID - 328 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 01:35:13] New process found: Process Name - w3wp.exe Process ID - 11148 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 01:35:13] New process found: Process Name - where.exe Process ID - 11984 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 01:35:13] New process found: Process Name - conhost.exe Process ID - 7840 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 01:35:14] New process found: Process Name - conhost.exe Process ID - 11880 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 01:35:14] Process Exited: Process Name - conhost.exe Process ID - 7840 [04-10-2024 01:35:14] Process Exited: Process Name - where.exe Process ID - 11984 [04-10-2024 01:35:29] New process found: Process Name - w3wp.exe Process ID - 11628 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:35:29] Process Exited: Process Name - w3wp.exe Process ID - 13048 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:35:43] New process found: Process Name - w3wp.exe Process ID - 12040 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 01:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5900 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11328 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5900 [04-10-2024 01:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11328 [04-10-2024 01:40:09] Process Exited: Process Name - w3wp.exe Process ID - 5732 Web application pool name - adminportal.galaxytools.in [04-10-2024 01:40:31] New process found: Process Name - w3wp.exe Process ID - 676 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:40:31] Process Exited: Process Name - w3wp.exe Process ID - 11628 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:40:37] New process found: Process Name - w3wp.exe Process ID - 12756 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 01:40:37] New process found: Process Name - php-cgi.exe Process ID - 8756 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 01:40:59] Process Exited: Process Name - w3wp.exe Process ID - 328 Web application pool name - DefaultAppPool [04-10-2024 01:41:15] Process Exited: Process Name - w3wp.exe Process ID - 11148 Web application pool name - taxtribute.com [04-10-2024 01:41:15] Process Exited: Process Name - conhost.exe Process ID - 11880 [04-10-2024 01:41:45] Process Exited: Process Name - w3wp.exe Process ID - 12040 Web application pool name - galaxytools.in [04-10-2024 01:45:05] New process found: Process Name - w3wp.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 01:45:22] New process found: Process Name - w3wp.exe Process ID - 2404 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 01:45:32] New process found: Process Name - w3wp.exe Process ID - 572 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:45:32] Process Exited: Process Name - w3wp.exe Process ID - 676 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1840 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12792 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1840 [04-10-2024 01:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12792 [04-10-2024 01:49:30] New process found: Process Name - w3wp.exe Process ID - 364 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 01:49:30] New process found: Process Name - conhost.exe Process ID - 11672 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 01:50:33] New process found: Process Name - w3wp.exe Process ID - 5336 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:50:33] Process Exited: Process Name - w3wp.exe Process ID - 572 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:51:07] Process Exited: Process Name - w3wp.exe Process ID - 8564 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 01:55:15] New process found: Process Name - w3wp.exe Process ID - 7040 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 01:55:15] New process found: Process Name - conhost.exe Process ID - 6176 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 01:55:33] Process Exited: Process Name - w3wp.exe Process ID - 364 Web application pool name - taxtribute.com [04-10-2024 01:55:33] Process Exited: Process Name - conhost.exe Process ID - 11672 [04-10-2024 01:55:35] New process found: Process Name - w3wp.exe Process ID - 12348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:55:35] Process Exited: Process Name - w3wp.exe Process ID - 5336 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 01:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10884 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 01:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5936 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 01:57:44] New process found: Process Name - w3wp.exe Process ID - 12008 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 01:57:45] New process found: Process Name - w3wp.exe Process ID - 8200 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 01:57:48] New process found: Process Name - w3wp.exe Process ID - 11868 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 01:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5936 [04-10-2024 01:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10884 [04-10-2024 01:58:27] New process found: Process Name - w3wp.exe Process ID - 11288 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 01:58:27] New process found: Process Name - conhost.exe Process ID - 12680 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 02:00:35] New process found: Process Name - w3wp.exe Process ID - 11860 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:00:35] Process Exited: Process Name - w3wp.exe Process ID - 12348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:02:08] New process found: Process Name - w3wp.exe Process ID - 9644 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 02:02:09] New process found: Process Name - conhost.exe Process ID - 3284 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 02:03:17] Process Exited: Process Name - conhost.exe Process ID - 6176 [04-10-2024 02:03:17] Process Exited: Process Name - w3wp.exe Process ID - 7040 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 02:03:24] Process Exited: Process Name - w3wp.exe Process ID - 2404 Web application pool name - DefaultAppPool [04-10-2024 02:03:48] Process Exited: Process Name - w3wp.exe Process ID - 8200 Web application pool name - shop.galaxytools.in [04-10-2024 02:04:29] Process Exited: Process Name - w3wp.exe Process ID - 11288 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:04:29] Process Exited: Process Name - conhost.exe Process ID - 12680 [04-10-2024 02:05:37] New process found: Process Name - w3wp.exe Process ID - 8728 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:05:37] Process Exited: Process Name - w3wp.exe Process ID - 11860 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:05:50] Process Exited: Process Name - w3wp.exe Process ID - 11868 Web application pool name - adminportal.galaxytools.in [04-10-2024 02:06:03] New process found: Process Name - w3wp.exe Process ID - 4100 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 02:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 4092 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 1016 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1016 [04-10-2024 02:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4092 [04-10-2024 02:10:39] New process found: Process Name - w3wp.exe Process ID - 9972 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:10:39] Process Exited: Process Name - w3wp.exe Process ID - 8728 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:12:08] Process Exited: Process Name - conhost.exe Process ID - 12688 [04-10-2024 02:12:08] Process Exited: Process Name - w3wp.exe Process ID - 13112 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:12:10] Process Exited: Process Name - conhost.exe Process ID - 3284 [04-10-2024 02:12:10] Process Exited: Process Name - w3wp.exe Process ID - 9644 Web application pool name - kdbps.edu.in [04-10-2024 02:12:36] New process found: Process Name - w3wp.exe Process ID - 12360 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:12:36] New process found: Process Name - conhost.exe Process ID - 12832 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 02:12:39] Process Exited: Process Name - php-cgi.exe Process ID - 8756 [04-10-2024 02:12:40] Process Exited: Process Name - w3wp.exe Process ID - 12756 Web application pool name - PleskControlPanel [04-10-2024 02:12:57] New process found: Process Name - w3wp.exe Process ID - 12300 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:12:57] New process found: Process Name - conhost.exe Process ID - 9656 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 02:14:14] New process found: Process Name - w3wp.exe Process ID - 9500 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:14:14] New process found: Process Name - where.exe Process ID - 2788 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:14:14] New process found: Process Name - conhost.exe Process ID - 11476 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:14:15] New process found: Process Name - conhost.exe Process ID - 1288 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:14:15] Process Exited: Process Name - where.exe Process ID - 2788 [04-10-2024 02:14:15] Process Exited: Process Name - conhost.exe Process ID - 11476 [04-10-2024 02:14:45] New process found: Process Name - w3wp.exe Process ID - 12592 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 02:14:45] New process found: Process Name - php-cgi.exe Process ID - 4140 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 02:14:47] New process found: Process Name - w3wp.exe Process ID - 1340 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 02:14:47] New process found: Process Name - conhost.exe Process ID - 1560 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 02:14:49] New process found: Process Name - w3wp.exe Process ID - 732 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 02:15:06] New process found: Process Name - w3wp.exe Process ID - 6536 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 02:15:06] Process Exited: Process Name - w3wp.exe Process ID - 4100 Web application pool name - DefaultAppPool [04-10-2024 02:15:37] New process found: Process Name - w3wp.exe Process ID - 12864 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 02:15:39] New process found: Process Name - w3wp.exe Process ID - 2572 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:15:39] Process Exited: Process Name - w3wp.exe Process ID - 9972 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:15:47] Process Exited: Process Name - w3wp.exe Process ID - 12008 Web application pool name - galaxytools.in [04-10-2024 02:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12764 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:16:45] New process found: Process Name - w3wp.exe Process ID - 9968 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 02:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2028 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2028 [04-10-2024 02:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12764 [04-10-2024 02:20:17] Process Exited: Process Name - conhost.exe Process ID - 1288 [04-10-2024 02:20:17] Process Exited: Process Name - w3wp.exe Process ID - 9500 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:20:19] New process found: Process Name - w3wp.exe Process ID - 12012 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:20:38] Process Exited: Process Name - w3wp.exe Process ID - 12360 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:20:38] Process Exited: Process Name - conhost.exe Process ID - 12832 [04-10-2024 02:20:41] New process found: Process Name - w3wp.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:20:41] Process Exited: Process Name - w3wp.exe Process ID - 2572 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:20:45] New process found: Process Name - conhost.exe Process ID - 10200 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 02:20:51] Process Exited: Process Name - w3wp.exe Process ID - 732 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 02:21:39] Process Exited: Process Name - w3wp.exe Process ID - 12864 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 02:24:32] New process found: Process Name - w3wp.exe Process ID - 13008 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:24:32] New process found: Process Name - conhost.exe Process ID - 13232 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 02:24:47] Process Exited: Process Name - w3wp.exe Process ID - 9968 Web application pool name - galaxytools.in [04-10-2024 02:25:17] New process found: Process Name - w3wp.exe Process ID - 10264 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 02:25:41] New process found: Process Name - w3wp.exe Process ID - 5848 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:25:41] Process Exited: Process Name - w3wp.exe Process ID - 176 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:26:21] Process Exited: Process Name - conhost.exe Process ID - 10200 [04-10-2024 02:26:21] Process Exited: Process Name - w3wp.exe Process ID - 12012 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10716 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4652 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4652 [04-10-2024 02:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10716 [04-10-2024 02:30:27] New process found: Process Name - w3wp.exe Process ID - 9032 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 02:30:27] New process found: Process Name - where.exe Process ID - 6476 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 02:30:27] New process found: Process Name - conhost.exe Process ID - 728 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 02:30:28] New process found: Process Name - conhost.exe Process ID - 12584 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 02:30:28] Process Exited: Process Name - conhost.exe Process ID - 728 [04-10-2024 02:30:28] Process Exited: Process Name - where.exe Process ID - 6476 [04-10-2024 02:30:34] Process Exited: Process Name - w3wp.exe Process ID - 13008 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:30:34] Process Exited: Process Name - conhost.exe Process ID - 13232 [04-10-2024 02:30:43] New process found: Process Name - w3wp.exe Process ID - 11120 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:30:43] Process Exited: Process Name - w3wp.exe Process ID - 5848 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:31:00] New process found: Process Name - cmd.exe Process ID - 11968 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:31:00] New process found: Process Name - conhost.exe Process ID - 12084 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:31:00] New process found: Process Name - runtask.exe Process ID - 3344 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:31:00] New process found: Process Name - php.exe Process ID - 6604 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 02:31:00] New process found: Process Name - conhost.exe Process ID - 8704 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 02:31:08] Process Exited: Process Name - runtask.exe Process ID - 3344 [04-10-2024 02:31:08] Process Exited: Process Name - php.exe Process ID - 6604 [04-10-2024 02:31:08] Process Exited: Process Name - conhost.exe Process ID - 8704 [04-10-2024 02:31:08] Process Exited: Process Name - cmd.exe Process ID - 11968 [04-10-2024 02:31:08] Process Exited: Process Name - conhost.exe Process ID - 12084 [04-10-2024 02:31:19] Process Exited: Process Name - w3wp.exe Process ID - 10264 Web application pool name - galaxytools.in [04-10-2024 02:32:10] New process found: Process Name - w3wp.exe Process ID - 10536 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:32:15] New process found: Process Name - conhost.exe Process ID - 9724 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 02:33:29] New process found: Process Name - w3wp.exe Process ID - 11436 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 02:33:29] New process found: Process Name - where.exe Process ID - 2012 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 02:33:29] New process found: Process Name - conhost.exe Process ID - 12396 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 02:33:30] New process found: Process Name - conhost.exe Process ID - 1564 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 02:33:30] Process Exited: Process Name - where.exe Process ID - 2012 [04-10-2024 02:33:30] Process Exited: Process Name - conhost.exe Process ID - 12396 [04-10-2024 02:34:08] Process Exited: Process Name - w3wp.exe Process ID - 6536 Web application pool name - DefaultAppPool [04-10-2024 02:35:14] New process found: Process Name - w3wp.exe Process ID - 4544 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 02:35:45] New process found: Process Name - w3wp.exe Process ID - 12028 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:35:45] Process Exited: Process Name - w3wp.exe Process ID - 11120 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:36:30] Process Exited: Process Name - w3wp.exe Process ID - 9032 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 02:36:30] Process Exited: Process Name - conhost.exe Process ID - 12584 [04-10-2024 02:36:34] New process found: Process Name - w3wp.exe Process ID - 6840 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9508 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 84 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:36:50] New process found: Process Name - w3wp.exe Process ID - 11888 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 02:37:10] New process found: Process Name - w3wp.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\IWPD_56(acwits) Web application pool name - cameraonrent.acwits.in(domain)(4.0)(pool) [04-10-2024 02:37:20] New process found: Process Name - w3wp.exe Process ID - 5608 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [04-10-2024 02:37:20] New process found: Process Name - conhost.exe Process ID - 10116 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [04-10-2024 02:37:32] New process found: Process Name - w3wp.exe Process ID - 10752 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 02:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 84 [04-10-2024 02:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9508 [04-10-2024 02:38:48] New process found: Process Name - w3wp.exe Process ID - 12348 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:38:49] Process Exited: Process Name - w3wp.exe Process ID - 1340 Web application pool name - kdbps.edu.in [04-10-2024 02:38:49] Process Exited: Process Name - conhost.exe Process ID - 1560 [04-10-2024 02:38:53] New process found: Process Name - conhost.exe Process ID - 7012 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 02:39:32] Process Exited: Process Name - conhost.exe Process ID - 1564 [04-10-2024 02:39:32] Process Exited: Process Name - w3wp.exe Process ID - 11436 Web application pool name - taxtribute.com [04-10-2024 02:40:00] New process found: Process Name - cmd.exe Process ID - 9580 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:40:00] New process found: Process Name - conhost.exe Process ID - 11280 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:40:00] New process found: Process Name - runtask.exe Process ID - 10884 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:40:00] New process found: Process Name - php.exe Process ID - 12004 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 02:40:00] New process found: Process Name - conhost.exe Process ID - 10128 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 02:40:15] Process Exited: Process Name - cmd.exe Process ID - 9580 [04-10-2024 02:40:15] Process Exited: Process Name - conhost.exe Process ID - 10128 [04-10-2024 02:40:15] Process Exited: Process Name - runtask.exe Process ID - 10884 [04-10-2024 02:40:15] Process Exited: Process Name - conhost.exe Process ID - 11280 [04-10-2024 02:40:15] Process Exited: Process Name - php.exe Process ID - 12004 [04-10-2024 02:40:45] New process found: Process Name - w3wp.exe Process ID - 2744 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:40:45] Process Exited: Process Name - w3wp.exe Process ID - 12028 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:41:13] Process Exited: Process Name - conhost.exe Process ID - 9724 [04-10-2024 02:41:13] Process Exited: Process Name - w3wp.exe Process ID - 10536 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:42:52] Process Exited: Process Name - w3wp.exe Process ID - 11888 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 02:43:04] New process found: Process Name - w3wp.exe Process ID - 8720 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 02:43:12] Process Exited: Process Name - w3wp.exe Process ID - 11856 Web application pool name - cameraonrent.acwits.in(domain)(4.0)(pool) [04-10-2024 02:43:35] Process Exited: Process Name - w3wp.exe Process ID - 10752 Web application pool name - galaxytools.in [04-10-2024 02:44:43] New process found: Process Name - w3wp.exe Process ID - 11704 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:44:43] New process found: Process Name - conhost.exe Process ID - 7004 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 02:44:51] Process Exited: Process Name - conhost.exe Process ID - 7012 [04-10-2024 02:44:51] Process Exited: Process Name - w3wp.exe Process ID - 12348 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:45:22] Process Exited: Process Name - w3wp.exe Process ID - 5608 Web application pool name - schoolerp.taxtribute.com [04-10-2024 02:45:22] Process Exited: Process Name - conhost.exe Process ID - 10116 [04-10-2024 02:45:47] New process found: Process Name - w3wp.exe Process ID - 12668 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:45:47] Process Exited: Process Name - w3wp.exe Process ID - 2744 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:46:36] Process Exited: Process Name - w3wp.exe Process ID - 6840 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 328 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 10780 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:48:03] New process found: Process Name - w3wp.exe Process ID - 3628 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 02:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 328 [04-10-2024 02:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10780 [04-10-2024 02:49:06] Process Exited: Process Name - w3wp.exe Process ID - 8720 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 02:49:11] New process found: Process Name - w3wp.exe Process ID - 7596 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 02:49:11] New process found: Process Name - conhost.exe Process ID - 8596 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 02:49:25] New process found: Process Name - w3wp.exe Process ID - 2272 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 02:49:41] New process found: Process Name - w3wp.exe Process ID - 5032 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:50:30] New process found: Process Name - w3wp.exe Process ID - 3812 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 02:50:48] New process found: Process Name - w3wp.exe Process ID - 5520 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:50:48] Process Exited: Process Name - w3wp.exe Process ID - 12668 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:50:54] New process found: Process Name - w3wp.exe Process ID - 6992 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:50:54] New process found: Process Name - where.exe Process ID - 12140 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:50:54] New process found: Process Name - conhost.exe Process ID - 10092 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:50:55] New process found: Process Name - conhost.exe Process ID - 9988 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 02:50:55] Process Exited: Process Name - conhost.exe Process ID - 10092 [04-10-2024 02:50:55] Process Exited: Process Name - where.exe Process ID - 12140 [04-10-2024 02:51:38] New process found: Process Name - w3wp.exe Process ID - 10380 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 02:51:39] New process found: Process Name - conhost.exe Process ID - 7212 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 02:54:05] Process Exited: Process Name - w3wp.exe Process ID - 3628 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 02:55:04] New process found: Process Name - w3wp.exe Process ID - 12564 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 02:55:04] New process found: Process Name - where.exe Process ID - 11492 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 02:55:05] New process found: Process Name - conhost.exe Process ID - 284 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 02:55:05] Process Exited: Process Name - where.exe Process ID - 11492 [04-10-2024 02:55:13] Process Exited: Process Name - w3wp.exe Process ID - 7596 Web application pool name - kdbps.edu.in [04-10-2024 02:55:13] Process Exited: Process Name - conhost.exe Process ID - 8596 [04-10-2024 02:55:27] Process Exited: Process Name - w3wp.exe Process ID - 2272 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 02:55:43] Process Exited: Process Name - w3wp.exe Process ID - 5032 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:55:50] New process found: Process Name - w3wp.exe Process ID - 6408 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:55:50] Process Exited: Process Name - w3wp.exe Process ID - 5520 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 02:56:33] Process Exited: Process Name - w3wp.exe Process ID - 3812 Web application pool name - galaxytools.in [04-10-2024 02:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11224 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 02:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6232 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 02:56:57] Process Exited: Process Name - w3wp.exe Process ID - 6992 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 02:56:57] Process Exited: Process Name - conhost.exe Process ID - 9988 [04-10-2024 02:57:35] New process found: Process Name - w3wp.exe Process ID - 7248 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 02:57:35] New process found: Process Name - where.exe Process ID - 13224 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 02:57:35] New process found: Process Name - conhost.exe Process ID - 6568 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 02:57:36] New process found: Process Name - conhost.exe Process ID - 9820 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 02:57:36] Process Exited: Process Name - conhost.exe Process ID - 6568 [04-10-2024 02:57:36] Process Exited: Process Name - where.exe Process ID - 13224 [04-10-2024 02:57:54] New process found: Process Name - w3wp.exe Process ID - 1212 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 02:57:55] New process found: Process Name - w3wp.exe Process ID - 10616 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 02:57:55] New process found: Process Name - conhost.exe Process ID - 2764 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 02:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6232 [04-10-2024 02:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11224 [04-10-2024 02:59:16] Process Exited: Process Name - w3wp.exe Process ID - 4544 Web application pool name - DefaultAppPool [04-10-2024 02:59:40] Process Exited: Process Name - conhost.exe Process ID - 7212 [04-10-2024 02:59:40] Process Exited: Process Name - w3wp.exe Process ID - 10380 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 02:59:50] New process found: Process Name - w3wp.exe Process ID - 3984 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 02:59:50] New process found: Process Name - conhost.exe Process ID - 7508 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 03:00:50] New process found: Process Name - w3wp.exe Process ID - 3348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:00:50] Process Exited: Process Name - w3wp.exe Process ID - 6408 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:01:06] Process Exited: Process Name - conhost.exe Process ID - 284 [04-10-2024 03:01:06] Process Exited: Process Name - w3wp.exe Process ID - 12564 Web application pool name - taxtribute.com [04-10-2024 03:02:26] New process found: Process Name - w3wp.exe Process ID - 1180 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 03:03:38] Process Exited: Process Name - w3wp.exe Process ID - 7248 Web application pool name - csr.bmvfragrances.com [04-10-2024 03:03:38] Process Exited: Process Name - conhost.exe Process ID - 9820 [04-10-2024 03:03:57] Process Exited: Process Name - w3wp.exe Process ID - 1212 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 03:05:52] New process found: Process Name - w3wp.exe Process ID - 11568 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:05:52] Process Exited: Process Name - w3wp.exe Process ID - 3348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5644 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3572 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:06:54] New process found: Process Name - w3wp.exe Process ID - 7444 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 03:07:16] New process found: Process Name - w3wp.exe Process ID - 13280 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 03:07:16] New process found: Process Name - conhost.exe Process ID - 1856 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 03:07:50] New process found: Process Name - w3wp.exe Process ID - 9888 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 03:07:57] Process Exited: Process Name - conhost.exe Process ID - 2764 [04-10-2024 03:07:57] Process Exited: Process Name - w3wp.exe Process ID - 10616 Web application pool name - kdbps.edu.in [04-10-2024 03:07:58] New process found: Process Name - w3wp.exe Process ID - 12880 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 03:08:12] New process found: Process Name - w3wp.exe Process ID - 12324 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 03:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3572 [04-10-2024 03:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5644 [04-10-2024 03:09:45] Process Exited: Process Name - conhost.exe Process ID - 7004 [04-10-2024 03:09:45] Process Exited: Process Name - w3wp.exe Process ID - 11704 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:09:53] Process Exited: Process Name - w3wp.exe Process ID - 3984 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:09:53] Process Exited: Process Name - conhost.exe Process ID - 7508 [04-10-2024 03:10:53] New process found: Process Name - w3wp.exe Process ID - 9992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:10:53] Process Exited: Process Name - w3wp.exe Process ID - 11568 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:12:57] Process Exited: Process Name - w3wp.exe Process ID - 7444 Web application pool name - adminportal.galaxytools.in [04-10-2024 03:13:18] Process Exited: Process Name - conhost.exe Process ID - 1856 [04-10-2024 03:13:18] Process Exited: Process Name - w3wp.exe Process ID - 13280 Web application pool name - tools.taxtribute.com [04-10-2024 03:13:53] Process Exited: Process Name - w3wp.exe Process ID - 9888 Web application pool name - edtribute.com [04-10-2024 03:14:00] Process Exited: Process Name - w3wp.exe Process ID - 12880 Web application pool name - shop.galaxytools.in [04-10-2024 03:14:15] Process Exited: Process Name - w3wp.exe Process ID - 12324 Web application pool name - galaxytools.in [04-10-2024 03:14:28] Process Exited: Process Name - w3wp.exe Process ID - 1180 Web application pool name - DefaultAppPool [04-10-2024 03:15:54] New process found: Process Name - w3wp.exe Process ID - 5884 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:15:54] Process Exited: Process Name - w3wp.exe Process ID - 9992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8656 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9820 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:17:15] New process found: Process Name - w3wp.exe Process ID - 10012 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 03:17:43] New process found: Process Name - w3wp.exe Process ID - 5292 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8656 [04-10-2024 03:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9820 [04-10-2024 03:18:46] New process found: Process Name - conhost.exe Process ID - 5608 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:20:31] New process found: Process Name - w3wp.exe Process ID - 10612 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 03:20:41] New process found: Process Name - w3wp.exe Process ID - 10600 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 03:20:41] New process found: Process Name - conhost.exe Process ID - 10536 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 03:20:56] New process found: Process Name - w3wp.exe Process ID - 11296 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:20:56] Process Exited: Process Name - w3wp.exe Process ID - 5884 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:21:16] New process found: Process Name - w3wp.exe Process ID - 5728 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 03:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 12036 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 4604 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:23:36] New process found: Process Name - w3wp.exe Process ID - 1244 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 03:23:36] New process found: Process Name - where.exe Process ID - 1996 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 03:23:36] New process found: Process Name - conhost.exe Process ID - 1044 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 03:23:38] New process found: Process Name - conhost.exe Process ID - 5984 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 03:23:38] Process Exited: Process Name - conhost.exe Process ID - 1044 [04-10-2024 03:23:38] Process Exited: Process Name - where.exe Process ID - 1996 [04-10-2024 03:24:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 4604 [04-10-2024 03:24:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 12036 [04-10-2024 03:24:17] Process Exited: Process Name - w3wp.exe Process ID - 10012 Web application pool name - acme-challenge [04-10-2024 03:24:46] Process Exited: Process Name - w3wp.exe Process ID - 5292 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:24:46] Process Exited: Process Name - conhost.exe Process ID - 5608 [04-10-2024 03:25:29] New process found: Process Name - w3wp.exe Process ID - 4148 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:25:29] New process found: Process Name - conhost.exe Process ID - 6280 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 03:25:57] New process found: Process Name - w3wp.exe Process ID - 592 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:25:57] Process Exited: Process Name - w3wp.exe Process ID - 11296 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2872 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:26:43] Process Exited: Process Name - conhost.exe Process ID - 10536 [04-10-2024 03:26:43] Process Exited: Process Name - w3wp.exe Process ID - 10600 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 03:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11276 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2872 [04-10-2024 03:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11276 [04-10-2024 03:29:39] Process Exited: Process Name - w3wp.exe Process ID - 1244 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 03:29:39] Process Exited: Process Name - conhost.exe Process ID - 5984 [04-10-2024 03:30:58] New process found: Process Name - w3wp.exe Process ID - 9948 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:30:58] Process Exited: Process Name - w3wp.exe Process ID - 592 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:31:30] Process Exited: Process Name - w3wp.exe Process ID - 4148 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:31:30] Process Exited: Process Name - conhost.exe Process ID - 6280 [04-10-2024 03:32:19] Process Exited: Process Name - w3wp.exe Process ID - 5728 Web application pool name - galaxytools.in [04-10-2024 03:32:50] New process found: Process Name - w3wp.exe Process ID - 12748 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:32:51] New process found: Process Name - where.exe Process ID - 5592 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:32:51] New process found: Process Name - conhost.exe Process ID - 11760 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:32:52] New process found: Process Name - conhost.exe Process ID - 10660 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:32:52] Process Exited: Process Name - where.exe Process ID - 5592 [04-10-2024 03:32:52] Process Exited: Process Name - conhost.exe Process ID - 11760 [04-10-2024 03:33:53] New process found: Process Name - w3wp.exe Process ID - 5720 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 03:35:59] New process found: Process Name - w3wp.exe Process ID - 10648 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:35:59] Process Exited: Process Name - w3wp.exe Process ID - 9948 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:36:21] New process found: Process Name - w3wp.exe Process ID - 1076 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:36:21] New process found: Process Name - where.exe Process ID - 12928 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 03:36:21] New process found: Process Name - conhost.exe Process ID - 10336 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 03:36:22] New process found: Process Name - conhost.exe Process ID - 9360 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 03:36:22] Process Exited: Process Name - conhost.exe Process ID - 10336 [04-10-2024 03:36:22] Process Exited: Process Name - where.exe Process ID - 12928 [04-10-2024 03:36:33] Process Exited: Process Name - w3wp.exe Process ID - 10612 Web application pool name - DefaultAppPool [04-10-2024 03:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 10748 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12672 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10748 [04-10-2024 03:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12672 [04-10-2024 03:38:52] Process Exited: Process Name - conhost.exe Process ID - 10660 [04-10-2024 03:38:52] Process Exited: Process Name - w3wp.exe Process ID - 12748 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:39:55] Process Exited: Process Name - w3wp.exe Process ID - 5720 Web application pool name - galaxytools.in [04-10-2024 03:40:36] New process found: Process Name - w3wp.exe Process ID - 6996 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:40:37] New process found: Process Name - conhost.exe Process ID - 10508 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:41:01] New process found: Process Name - w3wp.exe Process ID - 12692 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:41:01] Process Exited: Process Name - w3wp.exe Process ID - 10648 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:42:23] Process Exited: Process Name - w3wp.exe Process ID - 1076 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:42:23] Process Exited: Process Name - conhost.exe Process ID - 9360 [04-10-2024 03:43:37] New process found: Process Name - w3wp.exe Process ID - 2016 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 03:45:15] New process found: Process Name - w3wp.exe Process ID - 10164 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 03:46:02] New process found: Process Name - w3wp.exe Process ID - 3616 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:46:02] Process Exited: Process Name - w3wp.exe Process ID - 12692 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:46:38] Process Exited: Process Name - w3wp.exe Process ID - 6996 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:46:38] Process Exited: Process Name - conhost.exe Process ID - 10508 [04-10-2024 03:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12700 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12936 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:46:59] Process Exited: Process Name - conhost.exe Process ID - 9656 [04-10-2024 03:46:59] Process Exited: Process Name - w3wp.exe Process ID - 12300 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:47:47] New process found: Process Name - w3wp.exe Process ID - 8320 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 03:47:47] New process found: Process Name - conhost.exe Process ID - 10660 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 03:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12700 [04-10-2024 03:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12936 [04-10-2024 03:48:39] New process found: Process Name - w3wp.exe Process ID - 12456 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:48:39] New process found: Process Name - conhost.exe Process ID - 8988 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 03:49:06] New process found: Process Name - w3wp.exe Process ID - 4296 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 03:51:03] New process found: Process Name - w3wp.exe Process ID - 12912 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:51:03] Process Exited: Process Name - w3wp.exe Process ID - 3616 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:51:47] New process found: Process Name - w3wp.exe Process ID - 9824 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:51:47] New process found: Process Name - conhost.exe Process ID - 11980 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 03:51:49] New process found: Process Name - SearchProtocolHost.exe Process ID - 11616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:51:49] New process found: Process Name - SearchFilterHost.exe Process ID - 12772 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:52:55] New process found: Process Name - DeviceCensus.exe Process ID - 3284 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:52:55] New process found: Process Name - conhost.exe Process ID - 1564 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:52:55] New process found: Process Name - WmiPrvSE.exe Process ID - 776 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:52:55] New process found: Process Name - sppsvc.exe Process ID - 10508 Process Identity - SYSTEM [04-10-2024 03:52:55] Service state changed: Service Name - sppsvc Process ID - 10508 Current State - SERVICE_RUNNING [04-10-2024 03:52:56] Process Exited: Process Name - conhost.exe Process ID - 1564 [04-10-2024 03:52:56] Process Exited: Process Name - DeviceCensus.exe Process ID - 3284 [04-10-2024 03:53:23] New process found: Process Name - w3wp.exe Process ID - 12840 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 03:53:23] New process found: Process Name - conhost.exe Process ID - 13040 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 03:53:26] Process Exited: Process Name - sppsvc.exe Process ID - 10508 [04-10-2024 03:53:26] Service state changed: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 03:54:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11616 [04-10-2024 03:54:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 12772 [04-10-2024 03:54:25] Process Exited: Process Name - WmiPrvSE.exe Process ID - 776 [04-10-2024 03:55:08] Process Exited: Process Name - w3wp.exe Process ID - 4296 Web application pool name - acme-challenge [04-10-2024 03:55:12] New process found: Process Name - w3wp.exe Process ID - 1760 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 03:56:04] New process found: Process Name - w3wp.exe Process ID - 9712 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:56:04] Process Exited: Process Name - w3wp.exe Process ID - 12912 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 03:56:14] New process found: Process Name - w3wp.exe Process ID - 2356 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:56:14] New process found: Process Name - conhost.exe Process ID - 12868 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 03:56:17] Process Exited: Process Name - w3wp.exe Process ID - 10164 Web application pool name - galaxytools.in [04-10-2024 03:56:41] Process Exited: Process Name - conhost.exe Process ID - 8988 [04-10-2024 03:56:41] Process Exited: Process Name - w3wp.exe Process ID - 12456 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 03:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11780 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 03:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7104 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 03:57:49] Process Exited: Process Name - w3wp.exe Process ID - 8320 Web application pool name - kdbps.edu.in [04-10-2024 03:57:49] Process Exited: Process Name - conhost.exe Process ID - 10660 [04-10-2024 03:57:50] Process Exited: Process Name - w3wp.exe Process ID - 9824 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 03:57:50] Process Exited: Process Name - conhost.exe Process ID - 11980 [04-10-2024 03:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7104 [04-10-2024 03:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11780 [04-10-2024 03:59:25] Process Exited: Process Name - w3wp.exe Process ID - 12840 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 03:59:25] Process Exited: Process Name - conhost.exe Process ID - 13040 [04-10-2024 03:59:50] New process found: Process Name - w3wp.exe Process ID - 7492 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 04:00:37] New process found: Process Name - w3wp.exe Process ID - 12772 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:00:37] New process found: Process Name - conhost.exe Process ID - 6240 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 04:01:06] New process found: Process Name - w3wp.exe Process ID - 11756 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:01:06] Process Exited: Process Name - w3wp.exe Process ID - 9712 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:01:14] Process Exited: Process Name - w3wp.exe Process ID - 1760 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 04:02:16] Process Exited: Process Name - w3wp.exe Process ID - 2356 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:02:16] Process Exited: Process Name - conhost.exe Process ID - 12868 [04-10-2024 04:03:36] New process found: Process Name - w3wp.exe Process ID - 5532 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 04:03:36] New process found: Process Name - conhost.exe Process ID - 7032 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 04:03:43] New process found: Process Name - w3wp.exe Process ID - 13204 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:03:43] New process found: Process Name - where.exe Process ID - 7540 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:03:43] New process found: Process Name - conhost.exe Process ID - 12216 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:03:44] New process found: Process Name - conhost.exe Process ID - 10700 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:03:44] Process Exited: Process Name - where.exe Process ID - 7540 [04-10-2024 04:03:44] Process Exited: Process Name - conhost.exe Process ID - 12216 [04-10-2024 04:04:28] New process found: Process Name - w3wp.exe Process ID - 13080 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:05:01] New process found: Process Name - cmd.exe Process ID - 8976 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:05:01] New process found: Process Name - conhost.exe Process ID - 10788 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:05:01] New process found: Process Name - runtask.exe Process ID - 1012 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:05:01] New process found: Process Name - php.exe Process ID - 10940 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:05:01] New process found: Process Name - conhost.exe Process ID - 12780 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:05:04] New process found: Process Name - crontabmng.exe Process ID - 392 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:05:04] New process found: Process Name - conhost.exe Process ID - 6616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:05:05] Process Exited: Process Name - crontabmng.exe Process ID - 392 [04-10-2024 04:05:05] Process Exited: Process Name - conhost.exe Process ID - 6616 [04-10-2024 04:05:16] Process Exited: Process Name - runtask.exe Process ID - 1012 [04-10-2024 04:05:16] Process Exited: Process Name - cmd.exe Process ID - 8976 [04-10-2024 04:05:16] Process Exited: Process Name - conhost.exe Process ID - 10788 [04-10-2024 04:05:16] Process Exited: Process Name - php.exe Process ID - 10940 [04-10-2024 04:05:16] Process Exited: Process Name - conhost.exe Process ID - 12780 [04-10-2024 04:05:26] New process found: Process Name - w3wp.exe Process ID - 9384 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 04:05:52] Process Exited: Process Name - w3wp.exe Process ID - 7492 Web application pool name - adminportal.galaxytools.in [04-10-2024 04:06:04] New process found: Process Name - w3wp.exe Process ID - 12672 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:06:04] New process found: Process Name - conhost.exe Process ID - 12692 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 04:06:07] New process found: Process Name - w3wp.exe Process ID - 12588 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:06:07] Process Exited: Process Name - w3wp.exe Process ID - 11756 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:06:33] New process found: Process Name - w3wp.exe Process ID - 12932 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:06:33] New process found: Process Name - conhost.exe Process ID - 10988 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 04:06:40] Process Exited: Process Name - conhost.exe Process ID - 6240 [04-10-2024 04:06:40] Process Exited: Process Name - w3wp.exe Process ID - 12772 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5164 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8200 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5164 [04-10-2024 04:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8200 [04-10-2024 04:08:17] New process found: Process Name - w3wp.exe Process ID - 10612 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 04:08:17] New process found: Process Name - conhost.exe Process ID - 6364 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 04:09:46] Process Exited: Process Name - conhost.exe Process ID - 10700 [04-10-2024 04:09:46] Process Exited: Process Name - w3wp.exe Process ID - 13204 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:10:30] Process Exited: Process Name - w3wp.exe Process ID - 13080 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:10:56] New process found: Process Name - w3wp.exe Process ID - 3192 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:10:56] New process found: Process Name - w3wp.exe Process ID - 10628 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:10:56] New process found: Process Name - where.exe Process ID - 5644 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:10:56] New process found: Process Name - conhost.exe Process ID - 1476 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:10:57] New process found: Process Name - conhost.exe Process ID - 13072 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:10:57] Process Exited: Process Name - conhost.exe Process ID - 1476 [04-10-2024 04:10:57] Process Exited: Process Name - where.exe Process ID - 5644 [04-10-2024 04:11:08] New process found: Process Name - w3wp.exe Process ID - 12460 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:11:08] Process Exited: Process Name - w3wp.exe Process ID - 12588 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:11:28] Process Exited: Process Name - w3wp.exe Process ID - 9384 Web application pool name - galaxytools.in [04-10-2024 04:12:34] Process Exited: Process Name - conhost.exe Process ID - 10988 [04-10-2024 04:12:34] Process Exited: Process Name - w3wp.exe Process ID - 12932 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:12:36] New process found: Process Name - w3wp.exe Process ID - 1200 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 04:14:01] New process found: Process Name - cmd.exe Process ID - 11796 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:01] New process found: Process Name - conhost.exe Process ID - 452 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:01] New process found: Process Name - runtask.exe Process ID - 3340 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:01] New process found: Process Name - dllhost.exe Process ID - 1044 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:01] New process found: Process Name - web_statistics_executor.exe Process ID - 7172 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:01] New process found: Process Name - conhost.exe Process ID - 5608 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:01] New process found: Process Name - perl.exe Process ID - 2516 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:01] New process found: Process Name - conhost.exe Process ID - 11756 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:03] New process found: Process Name - SearchProtocolHost.exe Process ID - 4448 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:03] New process found: Process Name - SearchFilterHost.exe Process ID - 10508 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:14:03] New process found: Process Name - perl.exe Process ID - 12632 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:03] New process found: Process Name - conhost.exe Process ID - 8288 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:03] Process Exited: Process Name - perl.exe Process ID - 2516 [04-10-2024 04:14:03] Process Exited: Process Name - conhost.exe Process ID - 11756 [04-10-2024 04:14:04] New process found: Process Name - perl.exe Process ID - 11680 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:04] New process found: Process Name - conhost.exe Process ID - 9748 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:04] Process Exited: Process Name - conhost.exe Process ID - 8288 [04-10-2024 04:14:04] Process Exited: Process Name - perl.exe Process ID - 12632 [04-10-2024 04:14:05] New process found: Process Name - perl.exe Process ID - 5768 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:05] New process found: Process Name - conhost.exe Process ID - 10604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:05] Process Exited: Process Name - conhost.exe Process ID - 9748 [04-10-2024 04:14:05] Process Exited: Process Name - perl.exe Process ID - 11680 [04-10-2024 04:14:06] New process found: Process Name - perl.exe Process ID - 12168 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:06] New process found: Process Name - conhost.exe Process ID - 1560 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:06] Process Exited: Process Name - dllhost.exe Process ID - 1044 [04-10-2024 04:14:06] Process Exited: Process Name - perl.exe Process ID - 5768 [04-10-2024 04:14:06] Process Exited: Process Name - conhost.exe Process ID - 10604 [04-10-2024 04:14:07] New process found: Process Name - perl.exe Process ID - 2356 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:07] New process found: Process Name - conhost.exe Process ID - 12408 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:07] Process Exited: Process Name - conhost.exe Process ID - 1560 [04-10-2024 04:14:07] Process Exited: Process Name - perl.exe Process ID - 12168 [04-10-2024 04:14:08] New process found: Process Name - perl.exe Process ID - 11128 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:08] New process found: Process Name - conhost.exe Process ID - 1856 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:08] Process Exited: Process Name - perl.exe Process ID - 2356 [04-10-2024 04:14:08] Process Exited: Process Name - conhost.exe Process ID - 12408 [04-10-2024 04:14:09] New process found: Process Name - perl.exe Process ID - 8296 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:09] New process found: Process Name - conhost.exe Process ID - 12972 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:09] Process Exited: Process Name - conhost.exe Process ID - 1856 [04-10-2024 04:14:09] Process Exited: Process Name - perl.exe Process ID - 11128 [04-10-2024 04:14:10] New process found: Process Name - perl.exe Process ID - 8728 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:10] New process found: Process Name - conhost.exe Process ID - 6260 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:10] Process Exited: Process Name - perl.exe Process ID - 8296 [04-10-2024 04:14:10] Process Exited: Process Name - conhost.exe Process ID - 12972 [04-10-2024 04:14:11] New process found: Process Name - perl.exe Process ID - 7404 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:11] New process found: Process Name - conhost.exe Process ID - 13188 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:11] Process Exited: Process Name - conhost.exe Process ID - 6260 [04-10-2024 04:14:11] Process Exited: Process Name - perl.exe Process ID - 8728 [04-10-2024 04:14:12] New process found: Process Name - perl.exe Process ID - 9900 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:12] New process found: Process Name - conhost.exe Process ID - 11564 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:12] Process Exited: Process Name - perl.exe Process ID - 7404 [04-10-2024 04:14:12] Process Exited: Process Name - conhost.exe Process ID - 13188 [04-10-2024 04:14:13] New process found: Process Name - perl.exe Process ID - 10384 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:13] New process found: Process Name - conhost.exe Process ID - 12876 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:13] Process Exited: Process Name - perl.exe Process ID - 9900 [04-10-2024 04:14:13] Process Exited: Process Name - conhost.exe Process ID - 11564 [04-10-2024 04:14:14] New process found: Process Name - perl.exe Process ID - 11668 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:14] New process found: Process Name - conhost.exe Process ID - 2348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:14] Process Exited: Process Name - perl.exe Process ID - 10384 [04-10-2024 04:14:14] Process Exited: Process Name - conhost.exe Process ID - 12876 [04-10-2024 04:14:15] New process found: Process Name - perl.exe Process ID - 12444 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:15] New process found: Process Name - conhost.exe Process ID - 10748 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:15] Process Exited: Process Name - conhost.exe Process ID - 2348 [04-10-2024 04:14:15] Process Exited: Process Name - perl.exe Process ID - 11668 [04-10-2024 04:14:16] New process found: Process Name - perl.exe Process ID - 7764 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:16] New process found: Process Name - conhost.exe Process ID - 2360 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:16] Process Exited: Process Name - conhost.exe Process ID - 10748 [04-10-2024 04:14:16] Process Exited: Process Name - perl.exe Process ID - 12444 [04-10-2024 04:14:17] New process found: Process Name - perl.exe Process ID - 8572 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:17] New process found: Process Name - conhost.exe Process ID - 9832 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:17] Process Exited: Process Name - conhost.exe Process ID - 2360 [04-10-2024 04:14:17] Process Exited: Process Name - perl.exe Process ID - 7764 [04-10-2024 04:14:18] New process found: Process Name - perl.exe Process ID - 11232 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:18] New process found: Process Name - conhost.exe Process ID - 10884 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:18] Process Exited: Process Name - perl.exe Process ID - 8572 [04-10-2024 04:14:18] Process Exited: Process Name - conhost.exe Process ID - 9832 [04-10-2024 04:14:19] New process found: Process Name - perl.exe Process ID - 9984 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:19] New process found: Process Name - conhost.exe Process ID - 5892 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:19] Process Exited: Process Name - conhost.exe Process ID - 6364 [04-10-2024 04:14:19] Process Exited: Process Name - w3wp.exe Process ID - 10612 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 04:14:19] Process Exited: Process Name - conhost.exe Process ID - 10884 [04-10-2024 04:14:19] Process Exited: Process Name - perl.exe Process ID - 11232 [04-10-2024 04:14:20] New process found: Process Name - perl.exe Process ID - 8072 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:20] New process found: Process Name - conhost.exe Process ID - 6216 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:20] Process Exited: Process Name - conhost.exe Process ID - 5892 [04-10-2024 04:14:20] Process Exited: Process Name - perl.exe Process ID - 9984 [04-10-2024 04:14:21] New process found: Process Name - perl.exe Process ID - 1240 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:21] New process found: Process Name - conhost.exe Process ID - 1540 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:21] Process Exited: Process Name - conhost.exe Process ID - 6216 [04-10-2024 04:14:21] Process Exited: Process Name - perl.exe Process ID - 8072 [04-10-2024 04:14:22] New process found: Process Name - perl.exe Process ID - 12780 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:22] New process found: Process Name - conhost.exe Process ID - 10128 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:22] Process Exited: Process Name - perl.exe Process ID - 1240 [04-10-2024 04:14:22] Process Exited: Process Name - conhost.exe Process ID - 1540 [04-10-2024 04:14:23] New process found: Process Name - perl.exe Process ID - 11032 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:23] New process found: Process Name - conhost.exe Process ID - 1180 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:23] Process Exited: Process Name - conhost.exe Process ID - 10128 [04-10-2024 04:14:23] Process Exited: Process Name - perl.exe Process ID - 12780 [04-10-2024 04:14:24] New process found: Process Name - perl.exe Process ID - 2320 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:24] New process found: Process Name - conhost.exe Process ID - 4320 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:24] Process Exited: Process Name - conhost.exe Process ID - 1180 [04-10-2024 04:14:24] Process Exited: Process Name - perl.exe Process ID - 11032 [04-10-2024 04:14:25] New process found: Process Name - perl.exe Process ID - 11992 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:25] New process found: Process Name - conhost.exe Process ID - 10464 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:25] Process Exited: Process Name - perl.exe Process ID - 2320 [04-10-2024 04:14:25] Process Exited: Process Name - conhost.exe Process ID - 4320 [04-10-2024 04:14:26] New process found: Process Name - perl.exe Process ID - 11756 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:26] New process found: Process Name - conhost.exe Process ID - 8804 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:26] Process Exited: Process Name - conhost.exe Process ID - 10464 [04-10-2024 04:14:26] Process Exited: Process Name - perl.exe Process ID - 11992 [04-10-2024 04:14:27] New process found: Process Name - perl.exe Process ID - 12016 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:27] New process found: Process Name - conhost.exe Process ID - 12572 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:27] Process Exited: Process Name - conhost.exe Process ID - 8804 [04-10-2024 04:14:27] Process Exited: Process Name - perl.exe Process ID - 11756 [04-10-2024 04:14:28] New process found: Process Name - perl.exe Process ID - 3632 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:28] New process found: Process Name - conhost.exe Process ID - 6536 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:28] Process Exited: Process Name - perl.exe Process ID - 12016 [04-10-2024 04:14:28] Process Exited: Process Name - conhost.exe Process ID - 12572 [04-10-2024 04:14:29] New process found: Process Name - perl.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:29] New process found: Process Name - conhost.exe Process ID - 5696 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:29] Process Exited: Process Name - perl.exe Process ID - 3632 [04-10-2024 04:14:29] Process Exited: Process Name - conhost.exe Process ID - 6536 [04-10-2024 04:14:30] New process found: Process Name - perl.exe Process ID - 1808 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:30] New process found: Process Name - conhost.exe Process ID - 732 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:30] Process Exited: Process Name - conhost.exe Process ID - 5696 [04-10-2024 04:14:30] Process Exited: Process Name - perl.exe Process ID - 8460 [04-10-2024 04:14:31] New process found: Process Name - perl.exe Process ID - 12300 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:31] New process found: Process Name - conhost.exe Process ID - 11128 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:31] Process Exited: Process Name - conhost.exe Process ID - 732 [04-10-2024 04:14:31] Process Exited: Process Name - perl.exe Process ID - 1808 [04-10-2024 04:14:32] New process found: Process Name - perl.exe Process ID - 1572 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:32] New process found: Process Name - conhost.exe Process ID - 2648 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:32] Process Exited: Process Name - conhost.exe Process ID - 11128 [04-10-2024 04:14:32] Process Exited: Process Name - perl.exe Process ID - 12300 [04-10-2024 04:14:33] New process found: Process Name - perl.exe Process ID - 10568 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:33] New process found: Process Name - conhost.exe Process ID - 820 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:33] Process Exited: Process Name - perl.exe Process ID - 1572 [04-10-2024 04:14:33] Process Exited: Process Name - conhost.exe Process ID - 2648 [04-10-2024 04:14:34] New process found: Process Name - perl.exe Process ID - 11484 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:34] New process found: Process Name - conhost.exe Process ID - 9724 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:34] Process Exited: Process Name - conhost.exe Process ID - 820 [04-10-2024 04:14:34] Process Exited: Process Name - perl.exe Process ID - 10568 [04-10-2024 04:14:35] New process found: Process Name - perl.exe Process ID - 10860 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:35] New process found: Process Name - conhost.exe Process ID - 10164 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:35] Process Exited: Process Name - conhost.exe Process ID - 9724 [04-10-2024 04:14:35] Process Exited: Process Name - perl.exe Process ID - 11484 [04-10-2024 04:14:36] New process found: Process Name - perl.exe Process ID - 10900 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:36] New process found: Process Name - conhost.exe Process ID - 9500 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:36] Process Exited: Process Name - conhost.exe Process ID - 10164 [04-10-2024 04:14:36] Process Exited: Process Name - perl.exe Process ID - 10860 [04-10-2024 04:14:37] New process found: Process Name - perl.exe Process ID - 5816 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:37] New process found: Process Name - conhost.exe Process ID - 5476 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:37] Process Exited: Process Name - conhost.exe Process ID - 9500 [04-10-2024 04:14:37] Process Exited: Process Name - perl.exe Process ID - 10900 [04-10-2024 04:14:38] New process found: Process Name - perl.exe Process ID - 9484 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:38] New process found: Process Name - conhost.exe Process ID - 5824 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:38] Process Exited: Process Name - conhost.exe Process ID - 5476 [04-10-2024 04:14:38] Process Exited: Process Name - perl.exe Process ID - 5816 [04-10-2024 04:14:39] New process found: Process Name - perl.exe Process ID - 10500 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:39] New process found: Process Name - conhost.exe Process ID - 11372 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:39] Process Exited: Process Name - w3wp.exe Process ID - 5532 Web application pool name - kdbps.edu.in [04-10-2024 04:14:39] Process Exited: Process Name - conhost.exe Process ID - 5824 [04-10-2024 04:14:39] Process Exited: Process Name - conhost.exe Process ID - 7032 [04-10-2024 04:14:39] Process Exited: Process Name - perl.exe Process ID - 9484 [04-10-2024 04:14:40] Process Exited: Process Name - perl.exe Process ID - 10500 [04-10-2024 04:14:40] Process Exited: Process Name - conhost.exe Process ID - 11372 [04-10-2024 04:14:41] New process found: Process Name - perl.exe Process ID - 6312 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:41] New process found: Process Name - conhost.exe Process ID - 11456 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:42] New process found: Process Name - perl.exe Process ID - 2684 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:42] New process found: Process Name - conhost.exe Process ID - 9796 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:42] Process Exited: Process Name - perl.exe Process ID - 6312 [04-10-2024 04:14:42] Process Exited: Process Name - conhost.exe Process ID - 11456 [04-10-2024 04:14:43] New process found: Process Name - perl.exe Process ID - 12512 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:43] New process found: Process Name - conhost.exe Process ID - 9248 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:43] Process Exited: Process Name - perl.exe Process ID - 2684 [04-10-2024 04:14:43] Process Exited: Process Name - conhost.exe Process ID - 9796 [04-10-2024 04:14:44] New process found: Process Name - perl.exe Process ID - 624 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:44] New process found: Process Name - conhost.exe Process ID - 8836 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:44] Process Exited: Process Name - conhost.exe Process ID - 9248 [04-10-2024 04:14:44] Process Exited: Process Name - perl.exe Process ID - 12512 [04-10-2024 04:14:45] New process found: Process Name - perl.exe Process ID - 7996 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:45] New process found: Process Name - conhost.exe Process ID - 9712 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:45] Process Exited: Process Name - perl.exe Process ID - 624 [04-10-2024 04:14:45] Process Exited: Process Name - conhost.exe Process ID - 8836 [04-10-2024 04:14:46] New process found: Process Name - perl.exe Process ID - 13096 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:46] New process found: Process Name - conhost.exe Process ID - 5836 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:46] Process Exited: Process Name - perl.exe Process ID - 7996 [04-10-2024 04:14:46] Process Exited: Process Name - conhost.exe Process ID - 9712 [04-10-2024 04:14:47] New process found: Process Name - perl.exe Process ID - 12356 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:47] New process found: Process Name - conhost.exe Process ID - 5648 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:47] Process Exited: Process Name - conhost.exe Process ID - 5836 [04-10-2024 04:14:47] Process Exited: Process Name - perl.exe Process ID - 13096 [04-10-2024 04:14:48] New process found: Process Name - perl.exe Process ID - 10940 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:48] New process found: Process Name - conhost.exe Process ID - 11720 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:48] Process Exited: Process Name - conhost.exe Process ID - 5648 [04-10-2024 04:14:48] Process Exited: Process Name - perl.exe Process ID - 12356 [04-10-2024 04:14:49] New process found: Process Name - perl.exe Process ID - 12280 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:49] New process found: Process Name - conhost.exe Process ID - 7868 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:49] Process Exited: Process Name - perl.exe Process ID - 10940 [04-10-2024 04:14:49] Process Exited: Process Name - conhost.exe Process ID - 11720 [04-10-2024 04:14:50] Process Exited: Process Name - conhost.exe Process ID - 7868 [04-10-2024 04:14:50] Process Exited: Process Name - perl.exe Process ID - 12280 [04-10-2024 04:14:51] New process found: Process Name - perl.exe Process ID - 5720 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:51] New process found: Process Name - conhost.exe Process ID - 6992 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:52] New process found: Process Name - perl.exe Process ID - 6056 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:52] New process found: Process Name - conhost.exe Process ID - 9032 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:52] Process Exited: Process Name - perl.exe Process ID - 5720 [04-10-2024 04:14:52] Process Exited: Process Name - conhost.exe Process ID - 6992 [04-10-2024 04:14:53] New process found: Process Name - perl.exe Process ID - 4584 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:53] New process found: Process Name - conhost.exe Process ID - 8828 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:53] Process Exited: Process Name - perl.exe Process ID - 6056 [04-10-2024 04:14:53] Process Exited: Process Name - conhost.exe Process ID - 9032 [04-10-2024 04:14:54] New process found: Process Name - perl.exe Process ID - 10604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:54] New process found: Process Name - conhost.exe Process ID - 11252 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:54] Process Exited: Process Name - perl.exe Process ID - 4584 [04-10-2024 04:14:54] Process Exited: Process Name - conhost.exe Process ID - 8828 [04-10-2024 04:14:55] New process found: Process Name - perl.exe Process ID - 6208 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:55] New process found: Process Name - conhost.exe Process ID - 1780 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:55] Process Exited: Process Name - perl.exe Process ID - 10604 [04-10-2024 04:14:55] Process Exited: Process Name - conhost.exe Process ID - 11252 [04-10-2024 04:14:56] New process found: Process Name - perl.exe Process ID - 5644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:56] New process found: Process Name - conhost.exe Process ID - 12360 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:56] Process Exited: Process Name - conhost.exe Process ID - 1780 [04-10-2024 04:14:56] Process Exited: Process Name - perl.exe Process ID - 6208 [04-10-2024 04:14:57] New process found: Process Name - perl.exe Process ID - 12120 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:57] New process found: Process Name - conhost.exe Process ID - 8656 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:57] Process Exited: Process Name - perl.exe Process ID - 5644 [04-10-2024 04:14:57] Process Exited: Process Name - conhost.exe Process ID - 12360 [04-10-2024 04:14:58] New process found: Process Name - perl.exe Process ID - 5712 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:58] New process found: Process Name - conhost.exe Process ID - 11020 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:58] Process Exited: Process Name - conhost.exe Process ID - 8656 [04-10-2024 04:14:58] Process Exited: Process Name - perl.exe Process ID - 12120 [04-10-2024 04:14:59] New process found: Process Name - perl.exe Process ID - 12940 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:59] New process found: Process Name - conhost.exe Process ID - 12536 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:14:59] Process Exited: Process Name - perl.exe Process ID - 5712 [04-10-2024 04:14:59] Process Exited: Process Name - conhost.exe Process ID - 11020 [04-10-2024 04:15:00] Process Exited: Process Name - conhost.exe Process ID - 12536 [04-10-2024 04:15:00] Process Exited: Process Name - perl.exe Process ID - 12940 [04-10-2024 04:15:01] New process found: Process Name - perl.exe Process ID - 11400 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:01] New process found: Process Name - conhost.exe Process ID - 11312 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:02] New process found: Process Name - perl.exe Process ID - 4604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:02] New process found: Process Name - conhost.exe Process ID - 7460 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:02] Process Exited: Process Name - conhost.exe Process ID - 11312 [04-10-2024 04:15:02] Process Exited: Process Name - perl.exe Process ID - 11400 [04-10-2024 04:15:03] New process found: Process Name - w3wp.exe Process ID - 12376 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 04:15:03] New process found: Process Name - conhost.exe Process ID - 8000 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 04:15:03] New process found: Process Name - perl.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:03] New process found: Process Name - conhost.exe Process ID - 12492 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:03] Process Exited: Process Name - perl.exe Process ID - 4604 [04-10-2024 04:15:03] Process Exited: Process Name - conhost.exe Process ID - 7460 [04-10-2024 04:15:04] New process found: Process Name - perl.exe Process ID - 10404 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:04] New process found: Process Name - conhost.exe Process ID - 10856 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:04] Process Exited: Process Name - conhost.exe Process ID - 12492 [04-10-2024 04:15:04] Process Exited: Process Name - perl.exe Process ID - 12728 [04-10-2024 04:15:05] New process found: Process Name - perl.exe Process ID - 3344 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:05] New process found: Process Name - conhost.exe Process ID - 11196 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:05] Process Exited: Process Name - perl.exe Process ID - 10404 [04-10-2024 04:15:05] Process Exited: Process Name - conhost.exe Process ID - 10856 [04-10-2024 04:15:06] New process found: Process Name - perl.exe Process ID - 6272 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:06] New process found: Process Name - conhost.exe Process ID - 10768 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:06] Process Exited: Process Name - perl.exe Process ID - 3344 [04-10-2024 04:15:06] Process Exited: Process Name - conhost.exe Process ID - 11196 [04-10-2024 04:15:07] New process found: Process Name - perl.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:07] New process found: Process Name - conhost.exe Process ID - 10116 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:07] Process Exited: Process Name - perl.exe Process ID - 6272 [04-10-2024 04:15:07] Process Exited: Process Name - conhost.exe Process ID - 10768 [04-10-2024 04:15:08] New process found: Process Name - perl.exe Process ID - 13192 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:08] New process found: Process Name - conhost.exe Process ID - 7764 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:08] Process Exited: Process Name - conhost.exe Process ID - 10116 [04-10-2024 04:15:08] Process Exited: Process Name - perl.exe Process ID - 11768 [04-10-2024 04:15:09] New process found: Process Name - perl.exe Process ID - 6320 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:09] New process found: Process Name - conhost.exe Process ID - 6616 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:09] Process Exited: Process Name - conhost.exe Process ID - 7764 [04-10-2024 04:15:09] Process Exited: Process Name - perl.exe Process ID - 13192 [04-10-2024 04:15:10] New process found: Process Name - perl.exe Process ID - 12884 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:10] New process found: Process Name - conhost.exe Process ID - 6864 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:10] Process Exited: Process Name - perl.exe Process ID - 6320 [04-10-2024 04:15:10] Process Exited: Process Name - conhost.exe Process ID - 6616 [04-10-2024 04:15:11] New process found: Process Name - perl.exe Process ID - 12932 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:11] New process found: Process Name - conhost.exe Process ID - 12348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:11] Process Exited: Process Name - conhost.exe Process ID - 6864 [04-10-2024 04:15:11] Process Exited: Process Name - perl.exe Process ID - 12884 [04-10-2024 04:15:12] New process found: Process Name - perl.exe Process ID - 9696 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:12] New process found: Process Name - conhost.exe Process ID - 6292 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:12] Process Exited: Process Name - conhost.exe Process ID - 12348 [04-10-2024 04:15:12] Process Exited: Process Name - perl.exe Process ID - 12932 [04-10-2024 04:15:13] New process found: Process Name - perl.exe Process ID - 10612 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:13] New process found: Process Name - conhost.exe Process ID - 4144 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:13] Process Exited: Process Name - conhost.exe Process ID - 6292 [04-10-2024 04:15:13] Process Exited: Process Name - perl.exe Process ID - 9696 [04-10-2024 04:15:14] New process found: Process Name - perl.exe Process ID - 11860 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:14] New process found: Process Name - conhost.exe Process ID - 6476 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:14] Process Exited: Process Name - conhost.exe Process ID - 4144 [04-10-2024 04:15:14] Process Exited: Process Name - perl.exe Process ID - 10612 [04-10-2024 04:15:15] New process found: Process Name - perl.exe Process ID - 11552 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:15] New process found: Process Name - conhost.exe Process ID - 6672 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:15] Process Exited: Process Name - conhost.exe Process ID - 6476 [04-10-2024 04:15:15] Process Exited: Process Name - perl.exe Process ID - 11860 [04-10-2024 04:15:16] New process found: Process Name - perl.exe Process ID - 7212 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:16] New process found: Process Name - conhost.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:16] Process Exited: Process Name - conhost.exe Process ID - 6672 [04-10-2024 04:15:16] Process Exited: Process Name - perl.exe Process ID - 11552 [04-10-2024 04:15:17] New process found: Process Name - perl.exe Process ID - 2332 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:17] New process found: Process Name - conhost.exe Process ID - 1524 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:17] Process Exited: Process Name - conhost.exe Process ID - 176 [04-10-2024 04:15:17] Process Exited: Process Name - perl.exe Process ID - 7212 [04-10-2024 04:15:18] New process found: Process Name - perl.exe Process ID - 12680 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:18] New process found: Process Name - conhost.exe Process ID - 11904 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:18] Process Exited: Process Name - conhost.exe Process ID - 1524 [04-10-2024 04:15:18] Process Exited: Process Name - perl.exe Process ID - 2332 [04-10-2024 04:15:19] New process found: Process Name - perl.exe Process ID - 1836 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:19] New process found: Process Name - conhost.exe Process ID - 10012 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:19] Process Exited: Process Name - conhost.exe Process ID - 11904 [04-10-2024 04:15:19] Process Exited: Process Name - perl.exe Process ID - 12680 [04-10-2024 04:15:20] New process found: Process Name - perl.exe Process ID - 8804 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:20] New process found: Process Name - conhost.exe Process ID - 11756 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:20] Process Exited: Process Name - perl.exe Process ID - 1836 [04-10-2024 04:15:20] Process Exited: Process Name - conhost.exe Process ID - 10012 [04-10-2024 04:15:21] New process found: Process Name - perl.exe Process ID - 9916 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:21] New process found: Process Name - conhost.exe Process ID - 12612 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:21] Process Exited: Process Name - perl.exe Process ID - 8804 [04-10-2024 04:15:21] Process Exited: Process Name - conhost.exe Process ID - 11756 [04-10-2024 04:15:22] New process found: Process Name - perl.exe Process ID - 11432 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:22] New process found: Process Name - conhost.exe Process ID - 10604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:22] Process Exited: Process Name - perl.exe Process ID - 9916 [04-10-2024 04:15:22] Process Exited: Process Name - conhost.exe Process ID - 12612 [04-10-2024 04:15:23] New process found: Process Name - perl.exe Process ID - 9736 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:23] New process found: Process Name - conhost.exe Process ID - 8784 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:23] Process Exited: Process Name - conhost.exe Process ID - 10604 [04-10-2024 04:15:23] Process Exited: Process Name - perl.exe Process ID - 11432 [04-10-2024 04:15:24] New process found: Process Name - perl.exe Process ID - 5644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:24] New process found: Process Name - conhost.exe Process ID - 12360 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:24] Process Exited: Process Name - conhost.exe Process ID - 8784 [04-10-2024 04:15:24] Process Exited: Process Name - perl.exe Process ID - 9736 [04-10-2024 04:15:25] New process found: Process Name - perl.exe Process ID - 5108 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:25] New process found: Process Name - conhost.exe Process ID - 10328 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:25] Process Exited: Process Name - perl.exe Process ID - 5644 [04-10-2024 04:15:25] Process Exited: Process Name - conhost.exe Process ID - 12360 [04-10-2024 04:15:26] New process found: Process Name - perl.exe Process ID - 7676 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:26] New process found: Process Name - conhost.exe Process ID - 12432 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:26] Process Exited: Process Name - perl.exe Process ID - 5108 [04-10-2024 04:15:26] Process Exited: Process Name - conhost.exe Process ID - 10328 [04-10-2024 04:15:27] New process found: Process Name - perl.exe Process ID - 376 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:27] New process found: Process Name - conhost.exe Process ID - 820 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:27] Process Exited: Process Name - perl.exe Process ID - 7676 [04-10-2024 04:15:27] Process Exited: Process Name - conhost.exe Process ID - 12432 [04-10-2024 04:15:28] New process found: Process Name - perl.exe Process ID - 10200 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:28] New process found: Process Name - conhost.exe Process ID - 10956 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:28] Process Exited: Process Name - perl.exe Process ID - 376 [04-10-2024 04:15:28] Process Exited: Process Name - conhost.exe Process ID - 820 [04-10-2024 04:15:29] New process found: Process Name - perl.exe Process ID - 7460 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:29] New process found: Process Name - conhost.exe Process ID - 4604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:29] Process Exited: Process Name - perl.exe Process ID - 10200 [04-10-2024 04:15:29] Process Exited: Process Name - conhost.exe Process ID - 10956 [04-10-2024 04:15:30] New process found: Process Name - perl.exe Process ID - 12472 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:30] New process found: Process Name - conhost.exe Process ID - 11332 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:30] Process Exited: Process Name - conhost.exe Process ID - 4604 [04-10-2024 04:15:30] Process Exited: Process Name - perl.exe Process ID - 7460 [04-10-2024 04:15:31] New process found: Process Name - perl.exe Process ID - 11196 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:31] New process found: Process Name - conhost.exe Process ID - 2004 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:31] Process Exited: Process Name - conhost.exe Process ID - 11332 [04-10-2024 04:15:31] Process Exited: Process Name - perl.exe Process ID - 12472 [04-10-2024 04:15:32] New process found: Process Name - perl.exe Process ID - 10768 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:32] New process found: Process Name - conhost.exe Process ID - 11148 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:32] Process Exited: Process Name - conhost.exe Process ID - 2004 [04-10-2024 04:15:32] Process Exited: Process Name - perl.exe Process ID - 11196 [04-10-2024 04:15:33] New process found: Process Name - perl.exe Process ID - 12644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:33] New process found: Process Name - conhost.exe Process ID - 9616 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:33] Process Exited: Process Name - perl.exe Process ID - 10768 [04-10-2024 04:15:33] Process Exited: Process Name - conhost.exe Process ID - 11148 [04-10-2024 04:15:34] New process found: Process Name - perl.exe Process ID - 9508 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:34] New process found: Process Name - conhost.exe Process ID - 13192 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:34] Process Exited: Process Name - conhost.exe Process ID - 9616 [04-10-2024 04:15:34] Process Exited: Process Name - perl.exe Process ID - 12644 [04-10-2024 04:15:35] New process found: Process Name - perl.exe Process ID - 5344 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:35] New process found: Process Name - conhost.exe Process ID - 1004 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:35] Process Exited: Process Name - perl.exe Process ID - 9508 [04-10-2024 04:15:35] Process Exited: Process Name - conhost.exe Process ID - 13192 [04-10-2024 04:15:36] New process found: Process Name - perl.exe Process ID - 12932 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:36] New process found: Process Name - conhost.exe Process ID - 12348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:36] Process Exited: Process Name - conhost.exe Process ID - 1004 [04-10-2024 04:15:36] Process Exited: Process Name - perl.exe Process ID - 5344 [04-10-2024 04:15:37] New process found: Process Name - perl.exe Process ID - 868 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:37] New process found: Process Name - conhost.exe Process ID - 2200 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:37] Process Exited: Process Name - conhost.exe Process ID - 12348 [04-10-2024 04:15:37] Process Exited: Process Name - perl.exe Process ID - 12932 [04-10-2024 04:15:38] New process found: Process Name - perl.exe Process ID - 11408 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:38] New process found: Process Name - conhost.exe Process ID - 12584 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:38] Process Exited: Process Name - perl.exe Process ID - 868 [04-10-2024 04:15:38] Process Exited: Process Name - conhost.exe Process ID - 2200 [04-10-2024 04:15:39] New process found: Process Name - perl.exe Process ID - 11644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:39] New process found: Process Name - conhost.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:39] Process Exited: Process Name - perl.exe Process ID - 11408 [04-10-2024 04:15:39] Process Exited: Process Name - conhost.exe Process ID - 12584 [04-10-2024 04:15:40] New process found: Process Name - perl.exe Process ID - 11608 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:40] New process found: Process Name - conhost.exe Process ID - 11628 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:40] Process Exited: Process Name - conhost.exe Process ID - 8564 [04-10-2024 04:15:40] Process Exited: Process Name - perl.exe Process ID - 11644 [04-10-2024 04:15:41] New process found: Process Name - perl.exe Process ID - 6316 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:41] New process found: Process Name - conhost.exe Process ID - 84 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:41] Process Exited: Process Name - perl.exe Process ID - 11608 [04-10-2024 04:15:41] Process Exited: Process Name - conhost.exe Process ID - 11628 [04-10-2024 04:15:42] New process found: Process Name - perl.exe Process ID - 432 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:42] New process found: Process Name - conhost.exe Process ID - 12260 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:42] Process Exited: Process Name - conhost.exe Process ID - 84 [04-10-2024 04:15:42] Process Exited: Process Name - perl.exe Process ID - 6316 [04-10-2024 04:15:43] New process found: Process Name - perl.exe Process ID - 12752 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:43] New process found: Process Name - conhost.exe Process ID - 2564 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:43] Process Exited: Process Name - perl.exe Process ID - 432 [04-10-2024 04:15:43] Process Exited: Process Name - conhost.exe Process ID - 12260 [04-10-2024 04:15:44] New process found: Process Name - perl.exe Process ID - 12688 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:44] New process found: Process Name - conhost.exe Process ID - 9032 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:44] Process Exited: Process Name - conhost.exe Process ID - 2564 [04-10-2024 04:15:44] Process Exited: Process Name - perl.exe Process ID - 12752 [04-10-2024 04:15:45] New process found: Process Name - perl.exe Process ID - 12328 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:45] New process found: Process Name - conhost.exe Process ID - 8828 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:45] Process Exited: Process Name - conhost.exe Process ID - 9032 [04-10-2024 04:15:45] Process Exited: Process Name - perl.exe Process ID - 12688 [04-10-2024 04:15:46] New process found: Process Name - perl.exe Process ID - 12220 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:46] New process found: Process Name - conhost.exe Process ID - 4544 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:46] Process Exited: Process Name - conhost.exe Process ID - 8828 [04-10-2024 04:15:46] Process Exited: Process Name - perl.exe Process ID - 12328 [04-10-2024 04:15:47] New process found: Process Name - perl.exe Process ID - 5956 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:47] New process found: Process Name - conhost.exe Process ID - 12204 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:47] Process Exited: Process Name - conhost.exe Process ID - 4544 [04-10-2024 04:15:47] Process Exited: Process Name - perl.exe Process ID - 12220 [04-10-2024 04:15:48] New process found: Process Name - perl.exe Process ID - 5696 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:48] New process found: Process Name - conhost.exe Process ID - 8380 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:48] Process Exited: Process Name - perl.exe Process ID - 5956 [04-10-2024 04:15:48] Process Exited: Process Name - conhost.exe Process ID - 12204 [04-10-2024 04:15:49] Process Exited: Process Name - perl.exe Process ID - 5696 [04-10-2024 04:15:49] Process Exited: Process Name - conhost.exe Process ID - 8380 [04-10-2024 04:15:50] New process found: Process Name - perl.exe Process ID - 6348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:50] New process found: Process Name - conhost.exe Process ID - 12800 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:51] New process found: Process Name - perl.exe Process ID - 136 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:51] New process found: Process Name - conhost.exe Process ID - 5236 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:51] Process Exited: Process Name - perl.exe Process ID - 6348 [04-10-2024 04:15:51] Process Exited: Process Name - conhost.exe Process ID - 12800 [04-10-2024 04:15:52] New process found: Process Name - perl.exe Process ID - 12272 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:52] New process found: Process Name - conhost.exe Process ID - 12744 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:52] Process Exited: Process Name - perl.exe Process ID - 136 [04-10-2024 04:15:52] Process Exited: Process Name - conhost.exe Process ID - 5236 [04-10-2024 04:15:53] New process found: Process Name - perl.exe Process ID - 12140 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:53] New process found: Process Name - conhost.exe Process ID - 5536 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:53] Process Exited: Process Name - perl.exe Process ID - 12272 [04-10-2024 04:15:53] Process Exited: Process Name - conhost.exe Process ID - 12744 [04-10-2024 04:15:54] New process found: Process Name - perl.exe Process ID - 344 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:54] New process found: Process Name - conhost.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:54] Process Exited: Process Name - conhost.exe Process ID - 5536 [04-10-2024 04:15:54] Process Exited: Process Name - perl.exe Process ID - 12140 [04-10-2024 04:15:55] New process found: Process Name - perl.exe Process ID - 13108 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:55] New process found: Process Name - conhost.exe Process ID - 12848 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:55] Process Exited: Process Name - perl.exe Process ID - 344 [04-10-2024 04:15:55] Process Exited: Process Name - conhost.exe Process ID - 12728 [04-10-2024 04:15:56] New process found: Process Name - perl.exe Process ID - 2004 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:56] New process found: Process Name - conhost.exe Process ID - 12444 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:56] Process Exited: Process Name - conhost.exe Process ID - 12848 [04-10-2024 04:15:56] Process Exited: Process Name - perl.exe Process ID - 13108 [04-10-2024 04:15:57] New process found: Process Name - perl.exe Process ID - 9096 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:57] New process found: Process Name - conhost.exe Process ID - 12616 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:57] Process Exited: Process Name - perl.exe Process ID - 2004 [04-10-2024 04:15:57] Process Exited: Process Name - conhost.exe Process ID - 12444 [04-10-2024 04:15:58] New process found: Process Name - perl.exe Process ID - 9616 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:58] New process found: Process Name - conhost.exe Process ID - 1760 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:58] Process Exited: Process Name - perl.exe Process ID - 9096 [04-10-2024 04:15:58] Process Exited: Process Name - conhost.exe Process ID - 12616 [04-10-2024 04:15:59] New process found: Process Name - perl.exe Process ID - 8996 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:59] New process found: Process Name - conhost.exe Process ID - 6616 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:15:59] Process Exited: Process Name - conhost.exe Process ID - 1760 [04-10-2024 04:15:59] Process Exited: Process Name - perl.exe Process ID - 9616 [04-10-2024 04:16:00] New process found: Process Name - perl.exe Process ID - 736 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:00] New process found: Process Name - conhost.exe Process ID - 3380 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:00] Process Exited: Process Name - conhost.exe Process ID - 6616 [04-10-2024 04:16:00] Process Exited: Process Name - perl.exe Process ID - 8996 [04-10-2024 04:16:01] New process found: Process Name - perl.exe Process ID - 712 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:01] New process found: Process Name - conhost.exe Process ID - 13144 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:01] Process Exited: Process Name - perl.exe Process ID - 736 [04-10-2024 04:16:01] Process Exited: Process Name - conhost.exe Process ID - 3380 [04-10-2024 04:16:02] New process found: Process Name - perl.exe Process ID - 10612 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:02] New process found: Process Name - SearchFilterHost.exe Process ID - 7104 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:16:02] New process found: Process Name - conhost.exe Process ID - 6216 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:02] Process Exited: Process Name - perl.exe Process ID - 712 [04-10-2024 04:16:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 10508 [04-10-2024 04:16:02] Process Exited: Process Name - conhost.exe Process ID - 13144 [04-10-2024 04:16:03] New process found: Process Name - perl.exe Process ID - 11644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:03] New process found: Process Name - conhost.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:03] Process Exited: Process Name - conhost.exe Process ID - 6216 [04-10-2024 04:16:03] Process Exited: Process Name - perl.exe Process ID - 10612 [04-10-2024 04:16:04] New process found: Process Name - perl.exe Process ID - 12020 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:04] New process found: Process Name - conhost.exe Process ID - 5648 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:04] Process Exited: Process Name - conhost.exe Process ID - 8564 [04-10-2024 04:16:04] Process Exited: Process Name - perl.exe Process ID - 11644 [04-10-2024 04:16:05] New process found: Process Name - perl.exe Process ID - 11536 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:05] New process found: Process Name - conhost.exe Process ID - 6660 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:05] Process Exited: Process Name - conhost.exe Process ID - 5648 [04-10-2024 04:16:05] Process Exited: Process Name - perl.exe Process ID - 12020 [04-10-2024 04:16:06] New process found: Process Name - perl.exe Process ID - 1180 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:06] Process Exited: Process Name - conhost.exe Process ID - 6660 [04-10-2024 04:16:06] Process Exited: Process Name - perl.exe Process ID - 11536 [04-10-2024 04:16:06] Process Exited: Process Name - w3wp.exe Process ID - 12672 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:16:06] Process Exited: Process Name - conhost.exe Process ID - 12692 [04-10-2024 04:16:07] New process found: Process Name - perl.exe Process ID - 11604 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:07] New process found: Process Name - conhost.exe Process ID - 1872 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:07] Process Exited: Process Name - perl.exe Process ID - 1180 [04-10-2024 04:16:08] New process found: Process Name - perl.exe Process ID - 8592 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:08] New process found: Process Name - conhost.exe Process ID - 12296 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:08] Process Exited: Process Name - conhost.exe Process ID - 1872 [04-10-2024 04:16:08] Process Exited: Process Name - perl.exe Process ID - 11604 [04-10-2024 04:16:09] New process found: Process Name - w3wp.exe Process ID - 8828 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:16:09] New process found: Process Name - perl.exe Process ID - 5820 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:09] New process found: Process Name - conhost.exe Process ID - 5804 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:09] Process Exited: Process Name - perl.exe Process ID - 8592 [04-10-2024 04:16:09] Process Exited: Process Name - conhost.exe Process ID - 12296 [04-10-2024 04:16:09] Process Exited: Process Name - w3wp.exe Process ID - 12460 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:16:10] New process found: Process Name - perl.exe Process ID - 12016 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:10] New process found: Process Name - conhost.exe Process ID - 12204 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:10] Process Exited: Process Name - conhost.exe Process ID - 5804 [04-10-2024 04:16:10] Process Exited: Process Name - perl.exe Process ID - 5820 [04-10-2024 04:16:11] New process found: Process Name - perl.exe Process ID - 6816 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:11] New process found: Process Name - conhost.exe Process ID - 12168 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:11] Process Exited: Process Name - perl.exe Process ID - 12016 [04-10-2024 04:16:11] Process Exited: Process Name - conhost.exe Process ID - 12204 [04-10-2024 04:16:13] New process found: Process Name - perl.exe Process ID - 3964 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:13] New process found: Process Name - conhost.exe Process ID - 8720 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:13] Process Exited: Process Name - perl.exe Process ID - 6816 [04-10-2024 04:16:13] Process Exited: Process Name - conhost.exe Process ID - 12168 [04-10-2024 04:16:14] New process found: Process Name - perl.exe Process ID - 12940 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:14] New process found: Process Name - conhost.exe Process ID - 12092 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:14] Process Exited: Process Name - perl.exe Process ID - 3964 [04-10-2024 04:16:14] Process Exited: Process Name - conhost.exe Process ID - 8720 [04-10-2024 04:16:15] New process found: Process Name - perl.exe Process ID - 9516 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:15] New process found: Process Name - conhost.exe Process ID - 6492 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:15] Process Exited: Process Name - conhost.exe Process ID - 12092 [04-10-2024 04:16:15] Process Exited: Process Name - perl.exe Process ID - 12940 [04-10-2024 04:16:16] New process found: Process Name - perl.exe Process ID - 8300 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:16] New process found: Process Name - conhost.exe Process ID - 4512 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:16] Process Exited: Process Name - conhost.exe Process ID - 6492 [04-10-2024 04:16:16] Process Exited: Process Name - perl.exe Process ID - 9516 [04-10-2024 04:16:17] New process found: Process Name - perl.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:17] New process found: Process Name - conhost.exe Process ID - 12856 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:17] Process Exited: Process Name - conhost.exe Process ID - 4512 [04-10-2024 04:16:17] Process Exited: Process Name - perl.exe Process ID - 8300 [04-10-2024 04:16:18] New process found: Process Name - perl.exe Process ID - 2348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:18] New process found: Process Name - conhost.exe Process ID - 4152 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:18] Process Exited: Process Name - perl.exe Process ID - 5304 [04-10-2024 04:16:18] Process Exited: Process Name - conhost.exe Process ID - 12856 [04-10-2024 04:16:19] New process found: Process Name - perl.exe Process ID - 9772 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:19] New process found: Process Name - conhost.exe Process ID - 12284 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:19] Process Exited: Process Name - perl.exe Process ID - 2348 [04-10-2024 04:16:19] Process Exited: Process Name - conhost.exe Process ID - 4152 [04-10-2024 04:16:20] New process found: Process Name - perl.exe Process ID - 13304 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:20] New process found: Process Name - conhost.exe Process ID - 8780 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:20] Process Exited: Process Name - perl.exe Process ID - 9772 [04-10-2024 04:16:20] Process Exited: Process Name - conhost.exe Process ID - 12284 [04-10-2024 04:16:21] New process found: Process Name - perl.exe Process ID - 10116 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:21] New process found: Process Name - conhost.exe Process ID - 11372 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:21] Process Exited: Process Name - conhost.exe Process ID - 8780 [04-10-2024 04:16:21] Process Exited: Process Name - perl.exe Process ID - 13304 [04-10-2024 04:16:22] New process found: Process Name - perl.exe Process ID - 2360 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:22] New process found: Process Name - conhost.exe Process ID - 4480 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:22] Process Exited: Process Name - perl.exe Process ID - 10116 [04-10-2024 04:16:22] Process Exited: Process Name - conhost.exe Process ID - 11372 [04-10-2024 04:16:23] New process found: Process Name - perl.exe Process ID - 11392 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:23] New process found: Process Name - conhost.exe Process ID - 12480 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:23] Process Exited: Process Name - perl.exe Process ID - 2360 [04-10-2024 04:16:23] Process Exited: Process Name - conhost.exe Process ID - 4480 [04-10-2024 04:16:24] New process found: Process Name - perl.exe Process ID - 7840 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:24] New process found: Process Name - conhost.exe Process ID - 11896 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:24] Process Exited: Process Name - perl.exe Process ID - 11392 [04-10-2024 04:16:24] Process Exited: Process Name - conhost.exe Process ID - 12480 [04-10-2024 04:16:25] New process found: Process Name - perl.exe Process ID - 13176 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:25] New process found: Process Name - conhost.exe Process ID - 10936 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:25] Process Exited: Process Name - perl.exe Process ID - 7840 [04-10-2024 04:16:25] Process Exited: Process Name - conhost.exe Process ID - 11896 [04-10-2024 04:16:26] New process found: Process Name - perl.exe Process ID - 11084 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:26] New process found: Process Name - conhost.exe Process ID - 3112 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:26] Process Exited: Process Name - conhost.exe Process ID - 10936 [04-10-2024 04:16:26] Process Exited: Process Name - perl.exe Process ID - 13176 [04-10-2024 04:16:27] New process found: Process Name - perl.exe Process ID - 5440 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:27] New process found: Process Name - conhost.exe Process ID - 11488 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:27] Process Exited: Process Name - conhost.exe Process ID - 3112 [04-10-2024 04:16:27] Process Exited: Process Name - perl.exe Process ID - 11084 [04-10-2024 04:16:28] New process found: Process Name - perl.exe Process ID - 6888 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:28] New process found: Process Name - conhost.exe Process ID - 7212 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:28] Process Exited: Process Name - perl.exe Process ID - 5440 [04-10-2024 04:16:28] Process Exited: Process Name - conhost.exe Process ID - 11488 [04-10-2024 04:16:29] New process found: Process Name - perl.exe Process ID - 3772 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:29] New process found: Process Name - conhost.exe Process ID - 11720 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:29] Process Exited: Process Name - perl.exe Process ID - 6888 [04-10-2024 04:16:29] Process Exited: Process Name - conhost.exe Process ID - 7212 [04-10-2024 04:16:30] New process found: Process Name - perl.exe Process ID - 8752 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:30] New process found: Process Name - conhost.exe Process ID - 10092 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:30] Process Exited: Process Name - perl.exe Process ID - 3772 [04-10-2024 04:16:30] Process Exited: Process Name - conhost.exe Process ID - 11720 [04-10-2024 04:16:31] New process found: Process Name - perl.exe Process ID - 12628 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:31] New process found: Process Name - conhost.exe Process ID - 12200 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:31] Process Exited: Process Name - perl.exe Process ID - 8752 [04-10-2024 04:16:31] Process Exited: Process Name - conhost.exe Process ID - 10092 [04-10-2024 04:16:32] New process found: Process Name - perl.exe Process ID - 10600 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:32] New process found: Process Name - conhost.exe Process ID - 12280 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:32] Process Exited: Process Name - conhost.exe Process ID - 12200 [04-10-2024 04:16:32] Process Exited: Process Name - perl.exe Process ID - 12628 [04-10-2024 04:16:33] New process found: Process Name - perl.exe Process ID - 2024 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:33] New process found: Process Name - conhost.exe Process ID - 6488 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:33] Process Exited: Process Name - perl.exe Process ID - 10600 [04-10-2024 04:16:33] Process Exited: Process Name - conhost.exe Process ID - 12280 [04-10-2024 04:16:34] New process found: Process Name - perl.exe Process ID - 6304 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:34] New process found: Process Name - conhost.exe Process ID - 10192 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:34] Process Exited: Process Name - perl.exe Process ID - 2024 [04-10-2024 04:16:34] Process Exited: Process Name - conhost.exe Process ID - 6488 [04-10-2024 04:16:35] New process found: Process Name - perl.exe Process ID - 12968 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:35] New process found: Process Name - conhost.exe Process ID - 8696 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:35] Process Exited: Process Name - perl.exe Process ID - 6304 [04-10-2024 04:16:35] Process Exited: Process Name - conhost.exe Process ID - 10192 [04-10-2024 04:16:36] New process found: Process Name - perl.exe Process ID - 5804 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:36] New process found: Process Name - conhost.exe Process ID - 5720 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:36] Process Exited: Process Name - conhost.exe Process ID - 8696 [04-10-2024 04:16:36] Process Exited: Process Name - perl.exe Process ID - 12968 [04-10-2024 04:16:37] New process found: Process Name - perl.exe Process ID - 9980 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:37] New process found: Process Name - conhost.exe Process ID - 9940 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:37] Process Exited: Process Name - conhost.exe Process ID - 5720 [04-10-2024 04:16:37] Process Exited: Process Name - perl.exe Process ID - 5804 [04-10-2024 04:16:38] New process found: Process Name - perl.exe Process ID - 5644 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:38] New process found: Process Name - conhost.exe Process ID - 10556 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:38] Process Exited: Process Name - conhost.exe Process ID - 9940 [04-10-2024 04:16:38] Process Exited: Process Name - perl.exe Process ID - 9980 [04-10-2024 04:16:39] New process found: Process Name - perl.exe Process ID - 7072 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:39] New process found: Process Name - conhost.exe Process ID - 8656 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:39] Process Exited: Process Name - perl.exe Process ID - 5644 [04-10-2024 04:16:39] Process Exited: Process Name - conhost.exe Process ID - 10556 [04-10-2024 04:16:40] New process found: Process Name - perl.exe Process ID - 3160 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:40] New process found: Process Name - conhost.exe Process ID - 3576 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:40] Process Exited: Process Name - perl.exe Process ID - 7072 [04-10-2024 04:16:40] Process Exited: Process Name - conhost.exe Process ID - 8656 [04-10-2024 04:16:41] New process found: Process Name - perl.exe Process ID - 12608 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:41] New process found: Process Name - conhost.exe Process ID - 12424 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:41] Process Exited: Process Name - perl.exe Process ID - 3160 [04-10-2024 04:16:41] Process Exited: Process Name - conhost.exe Process ID - 3576 [04-10-2024 04:16:42] New process found: Process Name - perl.exe Process ID - 11224 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11400 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:16:42] New process found: Process Name - conhost.exe Process ID - 10348 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:42] Process Exited: Process Name - conhost.exe Process ID - 12424 [04-10-2024 04:16:42] Process Exited: Process Name - perl.exe Process ID - 12608 [04-10-2024 04:16:43] New process found: Process Name - perl.exe Process ID - 12040 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:43] New process found: Process Name - conhost.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:43] Process Exited: Process Name - conhost.exe Process ID - 10348 [04-10-2024 04:16:43] Process Exited: Process Name - perl.exe Process ID - 11224 [04-10-2024 04:16:44] New process found: Process Name - perl.exe Process ID - 7540 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:44] New process found: Process Name - conhost.exe Process ID - 13108 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:44] Process Exited: Process Name - perl.exe Process ID - 12040 [04-10-2024 04:16:44] Process Exited: Process Name - conhost.exe Process ID - 12728 [04-10-2024 04:16:45] New process found: Process Name - perl.exe Process ID - 2004 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:45] New process found: Process Name - conhost.exe Process ID - 9760 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:45] Process Exited: Process Name - perl.exe Process ID - 7540 [04-10-2024 04:16:45] Process Exited: Process Name - conhost.exe Process ID - 13108 [04-10-2024 04:16:46] New process found: Process Name - perl.exe Process ID - 11580 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:46] New process found: Process Name - conhost.exe Process ID - 5900 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:46] Process Exited: Process Name - perl.exe Process ID - 2004 [04-10-2024 04:16:46] Process Exited: Process Name - conhost.exe Process ID - 9760 [04-10-2024 04:16:47] New process found: Process Name - perl.exe Process ID - 12068 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:47] New process found: Process Name - conhost.exe Process ID - 9808 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:47] Process Exited: Process Name - conhost.exe Process ID - 5900 [04-10-2024 04:16:47] Process Exited: Process Name - perl.exe Process ID - 11580 [04-10-2024 04:16:48] New process found: Process Name - perl.exe Process ID - 7856 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:48] New process found: Process Name - conhost.exe Process ID - 9392 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:48] Process Exited: Process Name - conhost.exe Process ID - 9808 [04-10-2024 04:16:48] Process Exited: Process Name - perl.exe Process ID - 12068 [04-10-2024 04:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11456 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:16:49] New process found: Process Name - perl.exe Process ID - 10244 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:49] New process found: Process Name - conhost.exe Process ID - 7840 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:49] Process Exited: Process Name - perl.exe Process ID - 7856 [04-10-2024 04:16:49] Process Exited: Process Name - conhost.exe Process ID - 9392 [04-10-2024 04:16:50] New process found: Process Name - perl.exe Process ID - 12036 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:50] New process found: Process Name - conhost.exe Process ID - 1852 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:50] Process Exited: Process Name - conhost.exe Process ID - 7840 [04-10-2024 04:16:50] Process Exited: Process Name - perl.exe Process ID - 10244 [04-10-2024 04:16:51] New process found: Process Name - perl.exe Process ID - 10296 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:51] New process found: Process Name - conhost.exe Process ID - 11408 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:51] Process Exited: Process Name - conhost.exe Process ID - 1852 [04-10-2024 04:16:51] Process Exited: Process Name - perl.exe Process ID - 12036 [04-10-2024 04:16:52] New process found: Process Name - perl.exe Process ID - 11324 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:52] New process found: Process Name - conhost.exe Process ID - 11716 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:52] Process Exited: Process Name - perl.exe Process ID - 10296 [04-10-2024 04:16:52] Process Exited: Process Name - conhost.exe Process ID - 11408 [04-10-2024 04:16:53] New process found: Process Name - perl.exe Process ID - 10640 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:53] New process found: Process Name - conhost.exe Process ID - 5228 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:53] Process Exited: Process Name - perl.exe Process ID - 11324 [04-10-2024 04:16:53] Process Exited: Process Name - conhost.exe Process ID - 11716 [04-10-2024 04:16:54] Process Exited: Process Name - conhost.exe Process ID - 5228 [04-10-2024 04:16:54] Process Exited: Process Name - perl.exe Process ID - 10640 [04-10-2024 04:16:55] New process found: Process Name - perl.exe Process ID - 8648 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:55] New process found: Process Name - conhost.exe Process ID - 10360 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:56] New process found: Process Name - perl.exe Process ID - 1048 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:56] New process found: Process Name - conhost.exe Process ID - 7984 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:56] Process Exited: Process Name - perl.exe Process ID - 8648 [04-10-2024 04:16:56] Process Exited: Process Name - conhost.exe Process ID - 10360 [04-10-2024 04:16:57] New process found: Process Name - perl.exe Process ID - 11100 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:57] New process found: Process Name - conhost.exe Process ID - 4092 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:57] Process Exited: Process Name - perl.exe Process ID - 1048 [04-10-2024 04:16:57] Process Exited: Process Name - conhost.exe Process ID - 7984 [04-10-2024 04:16:58] New process found: Process Name - perl.exe Process ID - 11992 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:58] New process found: Process Name - conhost.exe Process ID - 8356 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:16:58] Process Exited: Process Name - w3wp.exe Process ID - 3192 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:16:58] Process Exited: Process Name - conhost.exe Process ID - 4092 [04-10-2024 04:16:58] Process Exited: Process Name - perl.exe Process ID - 11100 [04-10-2024 04:16:59] Process Exited: Process Name - conhost.exe Process ID - 8356 [04-10-2024 04:16:59] Process Exited: Process Name - w3wp.exe Process ID - 10628 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:16:59] Process Exited: Process Name - perl.exe Process ID - 11992 [04-10-2024 04:16:59] Process Exited: Process Name - conhost.exe Process ID - 13072 [04-10-2024 04:17:00] New process found: Process Name - perl.exe Process ID - 8696 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:00] New process found: Process Name - conhost.exe Process ID - 4584 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:01] New process found: Process Name - perl.exe Process ID - 10964 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:01] New process found: Process Name - conhost.exe Process ID - 11384 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:01] Process Exited: Process Name - conhost.exe Process ID - 4584 [04-10-2024 04:17:01] Process Exited: Process Name - perl.exe Process ID - 8696 [04-10-2024 04:17:02] New process found: Process Name - perl.exe Process ID - 9736 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:02] New process found: Process Name - conhost.exe Process ID - 3952 Process Identity - KSHITIJSINGHAL-\Plesk Administrator [04-10-2024 04:17:02] Process Exited: Process Name - perl.exe Process ID - 10964 [04-10-2024 04:17:02] Process Exited: Process Name - conhost.exe Process ID - 11384 [04-10-2024 04:17:03] Process Exited: Process Name - conhost.exe Process ID - 3952 [04-10-2024 04:17:03] Process Exited: Process Name - perl.exe Process ID - 9736 [04-10-2024 04:17:04] Process Exited: Process Name - conhost.exe Process ID - 452 [04-10-2024 04:17:04] Process Exited: Process Name - runtask.exe Process ID - 3340 [04-10-2024 04:17:04] Process Exited: Process Name - conhost.exe Process ID - 5608 [04-10-2024 04:17:04] Process Exited: Process Name - web_statistics_executor.exe Process ID - 7172 [04-10-2024 04:17:04] Process Exited: Process Name - cmd.exe Process ID - 11796 [04-10-2024 04:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11400 [04-10-2024 04:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11456 [04-10-2024 04:18:39] Process Exited: Process Name - w3wp.exe Process ID - 1200 Web application pool name - shop.galaxytools.in [04-10-2024 04:19:40] Process Exited: Process Name - w3wp.exe Process ID - 2016 Web application pool name - DefaultAppPool [04-10-2024 04:19:59] New process found: Process Name - w3wp.exe Process ID - 11640 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 04:20:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 4448 [04-10-2024 04:20:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 7104 [04-10-2024 04:21:10] New process found: Process Name - w3wp.exe Process ID - 8836 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:21:10] Process Exited: Process Name - w3wp.exe Process ID - 8828 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 6600 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 13168 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:22:16] New process found: Process Name - w3wp.exe Process ID - 9700 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:22:24] New process found: Process Name - w3wp.exe Process ID - 432 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:22:25] New process found: Process Name - conhost.exe Process ID - 752 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 04:22:47] Service state changed: Service Name - wlidsvc Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 04:23:45] New process found: Process Name - w3wp.exe Process ID - 1560 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:23:45] New process found: Process Name - conhost.exe Process ID - 10796 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 04:24:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 6600 [04-10-2024 04:24:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 13168 [04-10-2024 04:24:34] New process found: Process Name - w3wp.exe Process ID - 10956 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:24:35] New process found: Process Name - conhost.exe Process ID - 11792 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 04:25:01] New process found: Process Name - cmd.exe Process ID - 12640 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:25:01] New process found: Process Name - conhost.exe Process ID - 12836 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:25:01] New process found: Process Name - runtask.exe Process ID - 12764 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:25:01] New process found: Process Name - php.exe Process ID - 7136 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:25:01] New process found: Process Name - conhost.exe Process ID - 12536 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:25:16] New process found: Process Name - w3wp.exe Process ID - 11660 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 04:25:16] New process found: Process Name - conhost.exe Process ID - 7928 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 04:25:40] New process found: Process Name - w3wp.exe Process ID - 8476 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 04:25:40] New process found: Process Name - w3wp.exe Process ID - 13296 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 04:26:06] New process found: Process Name - w3wp.exe Process ID - 6216 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 04:26:12] New process found: Process Name - w3wp.exe Process ID - 5228 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:26:12] Process Exited: Process Name - w3wp.exe Process ID - 8836 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12732 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:26:43] New process found: Process Name - conhost.exe Process ID - 8804 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [04-10-2024 04:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7400 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:26:56] Process Exited: Process Name - php.exe Process ID - 7136 [04-10-2024 04:26:56] Process Exited: Process Name - conhost.exe Process ID - 12536 [04-10-2024 04:26:56] Process Exited: Process Name - cmd.exe Process ID - 12640 [04-10-2024 04:26:56] Process Exited: Process Name - runtask.exe Process ID - 12764 [04-10-2024 04:26:56] Process Exited: Process Name - conhost.exe Process ID - 12836 [04-10-2024 04:26:57] New process found: Process Name - php-cgi.exe Process ID - 13300 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 04:27:52] Service state changed: Service Name - wlidsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 04:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7400 [04-10-2024 04:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12732 [04-10-2024 04:28:19] Process Exited: Process Name - w3wp.exe Process ID - 9700 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:30:06] Process Exited: Process Name - conhost.exe Process ID - 8000 [04-10-2024 04:30:06] Process Exited: Process Name - w3wp.exe Process ID - 12376 Web application pool name - kdbps.edu.in [04-10-2024 04:30:28] Process Exited: Process Name - w3wp.exe Process ID - 432 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:30:28] Process Exited: Process Name - conhost.exe Process ID - 752 [04-10-2024 04:31:13] New process found: Process Name - w3wp.exe Process ID - 1784 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:31:13] Process Exited: Process Name - w3wp.exe Process ID - 5228 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:31:16] New process found: Process Name - w3wp.exe Process ID - 2484 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 04:31:16] New process found: Process Name - conhost.exe Process ID - 12608 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 04:31:18] New process found: Process Name - w3wp.exe Process ID - 1000 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:31:18] New process found: Process Name - conhost.exe Process ID - 10616 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:31:18] Process Exited: Process Name - conhost.exe Process ID - 7928 [04-10-2024 04:31:18] Process Exited: Process Name - w3wp.exe Process ID - 11660 Web application pool name - csr.bmvfragrances.com [04-10-2024 04:31:36] Process Exited: Process Name - w3wp.exe Process ID - 10956 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:31:36] Process Exited: Process Name - conhost.exe Process ID - 11792 [04-10-2024 04:31:43] Process Exited: Process Name - w3wp.exe Process ID - 13296 Web application pool name - acme-challenge [04-10-2024 04:31:46] Process Exited: Process Name - w3wp.exe Process ID - 1560 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:31:46] Process Exited: Process Name - conhost.exe Process ID - 10796 [04-10-2024 04:32:09] Process Exited: Process Name - w3wp.exe Process ID - 6216 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 04:33:33] New process found: Process Name - w3wp.exe Process ID - 8432 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:33:33] New process found: Process Name - conhost.exe Process ID - 9316 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 04:35:01] Process Exited: Process Name - w3wp.exe Process ID - 11640 Web application pool name - DefaultAppPool [04-10-2024 04:35:55] New process found: Process Name - w3wp.exe Process ID - 1576 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:35:55] New process found: Process Name - conhost.exe Process ID - 2216 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 04:36:00] New process found: Process Name - cmd.exe Process ID - 9456 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:00] New process found: Process Name - conhost.exe Process ID - 5992 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:00] New process found: Process Name - runtask.exe Process ID - 8832 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:00] New process found: Process Name - php.exe Process ID - 11536 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:36:00] New process found: Process Name - conhost.exe Process ID - 6848 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:36:03] New process found: Process Name - task-manager-agent.exe Process ID - 7276 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:03] New process found: Process Name - php.exe Process ID - 620 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:03] New process found: Process Name - conhost.exe Process ID - 7912 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:03] Process Exited: Process Name - conhost.exe Process ID - 5992 [04-10-2024 04:36:03] Process Exited: Process Name - conhost.exe Process ID - 6848 [04-10-2024 04:36:03] Process Exited: Process Name - runtask.exe Process ID - 8832 [04-10-2024 04:36:03] Process Exited: Process Name - cmd.exe Process ID - 9456 [04-10-2024 04:36:03] Process Exited: Process Name - php.exe Process ID - 11536 [04-10-2024 04:36:04] New process found: Process Name - ai.exe Process ID - 1212 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:04] New process found: Process Name - conhost.exe Process ID - 944 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:14] New process found: Process Name - w3wp.exe Process ID - 1872 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:36:14] Process Exited: Process Name - w3wp.exe Process ID - 1784 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:36:15] New process found: Process Name - ai.exe Process ID - 7084 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:15] New process found: Process Name - conhost.exe Process ID - 11576 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:15] Process Exited: Process Name - conhost.exe Process ID - 944 [04-10-2024 04:36:15] Process Exited: Process Name - ai.exe Process ID - 1212 [04-10-2024 04:36:25] New process found: Process Name - task-manager-agent.exe Process ID - 1552 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:25] New process found: Process Name - php.exe Process ID - 3340 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:25] New process found: Process Name - conhost.exe Process ID - 1016 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:25] Process Exited: Process Name - php.exe Process ID - 620 [04-10-2024 04:36:25] Process Exited: Process Name - ai.exe Process ID - 7084 [04-10-2024 04:36:25] Process Exited: Process Name - task-manager-agent.exe Process ID - 7276 [04-10-2024 04:36:25] Process Exited: Process Name - conhost.exe Process ID - 7912 [04-10-2024 04:36:25] Process Exited: Process Name - conhost.exe Process ID - 11576 [04-10-2024 04:36:26] New process found: Process Name - task-manager-agent.exe Process ID - 11776 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:26] New process found: Process Name - php.exe Process ID - 8412 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:26] New process found: Process Name - conhost.exe Process ID - 900 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:26] Process Exited: Process Name - conhost.exe Process ID - 1016 [04-10-2024 04:36:26] Process Exited: Process Name - task-manager-agent.exe Process ID - 1552 [04-10-2024 04:36:26] Process Exited: Process Name - php.exe Process ID - 3340 [04-10-2024 04:36:27] New process found: Process Name - task-manager-agent.exe Process ID - 9796 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:27] New process found: Process Name - php.exe Process ID - 3616 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:27] New process found: Process Name - conhost.exe Process ID - 1244 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:27] Process Exited: Process Name - conhost.exe Process ID - 900 [04-10-2024 04:36:27] Process Exited: Process Name - php.exe Process ID - 8412 [04-10-2024 04:36:27] Process Exited: Process Name - task-manager-agent.exe Process ID - 11776 [04-10-2024 04:36:30] New process found: Process Name - task-manager-agent.exe Process ID - 11032 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:30] New process found: Process Name - php.exe Process ID - 7436 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:30] New process found: Process Name - conhost.exe Process ID - 9928 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:30] Process Exited: Process Name - conhost.exe Process ID - 1244 [04-10-2024 04:36:30] Process Exited: Process Name - php.exe Process ID - 3616 [04-10-2024 04:36:30] Process Exited: Process Name - task-manager-agent.exe Process ID - 9796 [04-10-2024 04:36:34] New process found: Process Name - filemng.exe Process ID - 2620 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:35] New process found: Process Name - filemng.exe Process ID - 12308 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:35] New process found: Process Name - conhost.exe Process ID - 11996 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:35] Process Exited: Process Name - filemng.exe Process ID - 2620 [04-10-2024 04:36:36] Process Exited: Process Name - conhost.exe Process ID - 11996 [04-10-2024 04:36:36] Process Exited: Process Name - filemng.exe Process ID - 12308 [04-10-2024 04:36:38] New process found: Process Name - task-manager-agent.exe Process ID - 9712 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:38] New process found: Process Name - php.exe Process ID - 5712 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:38] New process found: Process Name - conhost.exe Process ID - 9004 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:38] New process found: Process Name - cmd.exe Process ID - 7492 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:38] New process found: Process Name - php.exe Process ID - 11192 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:36:38] Process Exited: Process Name - php.exe Process ID - 7436 [04-10-2024 04:36:38] Process Exited: Process Name - conhost.exe Process ID - 9928 [04-10-2024 04:36:38] Process Exited: Process Name - task-manager-agent.exe Process ID - 11032 [04-10-2024 04:36:41] New process found: Process Name - WmiPrvSE.exe Process ID - 544 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:36:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 9984 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:48] New process found: Process Name - SearchFilterHost.exe Process ID - 8844 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 8592 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:53] New process found: Process Name - websrvmng.exe Process ID - 10656 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:53] New process found: Process Name - conhost.exe Process ID - 10236 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:55] Process Exited: Process Name - conhost.exe Process ID - 10236 [04-10-2024 04:36:55] Process Exited: Process Name - websrvmng.exe Process ID - 10656 [04-10-2024 04:36:56] New process found: Process Name - filemng.exe Process ID - 12392 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:36:56] New process found: Process Name - conhost.exe Process ID - 2012 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:00] New process found: Process Name - filemng.exe Process ID - 1696 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:00] New process found: Process Name - conhost.exe Process ID - 2432 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:00] Process Exited: Process Name - conhost.exe Process ID - 2012 [04-10-2024 04:37:00] Process Exited: Process Name - filemng.exe Process ID - 12392 [04-10-2024 04:37:01] New process found: Process Name - filemng.exe Process ID - 4536 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:01] New process found: Process Name - conhost.exe Process ID - 12168 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:01] Process Exited: Process Name - filemng.exe Process ID - 1696 [04-10-2024 04:37:01] Process Exited: Process Name - conhost.exe Process ID - 2432 [04-10-2024 04:37:02] New process found: Process Name - cmd.exe Process ID - 5788 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:02] New process found: Process Name - php.exe Process ID - 572 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:02] Process Exited: Process Name - filemng.exe Process ID - 4536 [04-10-2024 04:37:02] Process Exited: Process Name - cmd.exe Process ID - 7492 [04-10-2024 04:37:02] Process Exited: Process Name - php.exe Process ID - 11192 [04-10-2024 04:37:02] Process Exited: Process Name - conhost.exe Process ID - 12168 [04-10-2024 04:37:03] New process found: Process Name - cmd.exe Process ID - 8516 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:03] New process found: Process Name - php.exe Process ID - 12328 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:03] Process Exited: Process Name - php.exe Process ID - 572 [04-10-2024 04:37:03] Process Exited: Process Name - cmd.exe Process ID - 5788 [04-10-2024 04:37:04] New process found: Process Name - cmd.exe Process ID - 13064 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:04] New process found: Process Name - php.exe Process ID - 12556 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:04] Process Exited: Process Name - cmd.exe Process ID - 8516 [04-10-2024 04:37:04] Process Exited: Process Name - php.exe Process ID - 12328 [04-10-2024 04:37:06] New process found: Process Name - cmd.exe Process ID - 13232 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:06] New process found: Process Name - php.exe Process ID - 5476 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:06] Process Exited: Process Name - php.exe Process ID - 12556 [04-10-2024 04:37:06] Process Exited: Process Name - cmd.exe Process ID - 13064 [04-10-2024 04:37:07] New process found: Process Name - cmd.exe Process ID - 11228 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:07] New process found: Process Name - php.exe Process ID - 9888 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:07] New process found: Process Name - cmd.exe Process ID - 11316 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:07] New process found: Process Name - python.exe Process ID - 11024 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:07] Process Exited: Process Name - php.exe Process ID - 5476 [04-10-2024 04:37:07] Process Exited: Process Name - cmd.exe Process ID - 13232 [04-10-2024 04:37:18] Process Exited: Process Name - w3wp.exe Process ID - 2484 Web application pool name - kdbps.edu.in [04-10-2024 04:37:18] Process Exited: Process Name - conhost.exe Process ID - 12608 [04-10-2024 04:37:20] New process found: Process Name - cmd.exe Process ID - 10244 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:20] New process found: Process Name - php.exe Process ID - 11896 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:20] Process Exited: Process Name - w3wp.exe Process ID - 1000 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:37:20] Process Exited: Process Name - php.exe Process ID - 9888 [04-10-2024 04:37:20] Process Exited: Process Name - conhost.exe Process ID - 10616 [04-10-2024 04:37:20] Process Exited: Process Name - python.exe Process ID - 11024 [04-10-2024 04:37:20] Process Exited: Process Name - cmd.exe Process ID - 11228 [04-10-2024 04:37:20] Process Exited: Process Name - cmd.exe Process ID - 11316 [04-10-2024 04:37:21] New process found: Process Name - cmd.exe Process ID - 7144 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:21] New process found: Process Name - php.exe Process ID - 6096 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:21] Process Exited: Process Name - cmd.exe Process ID - 10244 [04-10-2024 04:37:21] Process Exited: Process Name - php.exe Process ID - 11896 [04-10-2024 04:37:24] New process found: Process Name - cmd.exe Process ID - 10072 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:24] New process found: Process Name - php.exe Process ID - 12300 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:24] Process Exited: Process Name - php.exe Process ID - 6096 [04-10-2024 04:37:24] Process Exited: Process Name - cmd.exe Process ID - 7144 [04-10-2024 04:37:26] New process found: Process Name - filemng.exe Process ID - 1980 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:26] New process found: Process Name - conhost.exe Process ID - 10840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:28] New process found: Process Name - filemng.exe Process ID - 5216 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:28] New process found: Process Name - conhost.exe Process ID - 32 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:28] Process Exited: Process Name - filemng.exe Process ID - 1980 [04-10-2024 04:37:28] Process Exited: Process Name - conhost.exe Process ID - 10840 [04-10-2024 04:37:29] New process found: Process Name - filemng.exe Process ID - 12920 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:29] New process found: Process Name - conhost.exe Process ID - 6996 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:29] Process Exited: Process Name - conhost.exe Process ID - 32 [04-10-2024 04:37:29] Process Exited: Process Name - filemng.exe Process ID - 5216 [04-10-2024 04:37:30] New process found: Process Name - cmd.exe Process ID - 10480 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:30] New process found: Process Name - php.exe Process ID - 9696 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:30] Process Exited: Process Name - conhost.exe Process ID - 6996 [04-10-2024 04:37:30] Process Exited: Process Name - cmd.exe Process ID - 10072 [04-10-2024 04:37:30] Process Exited: Process Name - php.exe Process ID - 12300 [04-10-2024 04:37:30] Process Exited: Process Name - filemng.exe Process ID - 12920 [04-10-2024 04:37:32] New process found: Process Name - cmd.exe Process ID - 12360 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:32] New process found: Process Name - php.exe Process ID - 10924 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:32] Process Exited: Process Name - php.exe Process ID - 9696 [04-10-2024 04:37:32] Process Exited: Process Name - cmd.exe Process ID - 10480 [04-10-2024 04:37:33] New process found: Process Name - cmd.exe Process ID - 11576 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:33] New process found: Process Name - php.exe Process ID - 10312 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:33] Process Exited: Process Name - php.exe Process ID - 10924 [04-10-2024 04:37:33] Process Exited: Process Name - cmd.exe Process ID - 12360 [04-10-2024 04:37:34] New process found: Process Name - cmd.exe Process ID - 4376 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:34] New process found: Process Name - php.exe Process ID - 12568 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:34] Process Exited: Process Name - php.exe Process ID - 10312 [04-10-2024 04:37:34] Process Exited: Process Name - cmd.exe Process ID - 11576 [04-10-2024 04:37:36] New process found: Process Name - task-manager-agent.exe Process ID - 452 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:36] New process found: Process Name - php.exe Process ID - 5128 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:36] New process found: Process Name - conhost.exe Process ID - 10504 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:36] Process Exited: Process Name - cmd.exe Process ID - 4376 [04-10-2024 04:37:36] Process Exited: Process Name - php.exe Process ID - 5712 [04-10-2024 04:37:36] Process Exited: Process Name - conhost.exe Process ID - 9004 [04-10-2024 04:37:36] Process Exited: Process Name - task-manager-agent.exe Process ID - 9712 [04-10-2024 04:37:36] Process Exited: Process Name - php.exe Process ID - 12568 [04-10-2024 04:37:37] New process found: Process Name - mailmng.exe Process ID - 11724 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:37] New process found: Process Name - conhost.exe Process ID - 4148 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:38] New process found: Process Name - task-manager-agent.exe Process ID - 5648 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:38] New process found: Process Name - php.exe Process ID - 9608 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:38] New process found: Process Name - conhost.exe Process ID - 11408 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:37:38] Process Exited: Process Name - task-manager-agent.exe Process ID - 452 [04-10-2024 04:37:38] Process Exited: Process Name - conhost.exe Process ID - 4148 [04-10-2024 04:37:38] Process Exited: Process Name - php.exe Process ID - 5128 [04-10-2024 04:37:38] Process Exited: Process Name - conhost.exe Process ID - 10504 [04-10-2024 04:37:38] Process Exited: Process Name - mailmng.exe Process ID - 11724 [04-10-2024 04:37:39] New process found: Process Name - statistics.exe Process ID - 7368 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:39] New process found: Process Name - conhost.exe Process ID - 12680 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:39] New process found: Process Name - php.exe Process ID - 6216 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:40] New process found: Process Name - statistics_collector.exe Process ID - 9924 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:37:40] New process found: Process Name - conhost.exe Process ID - 13224 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:38:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 8844 [04-10-2024 04:38:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 9984 [04-10-2024 04:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 544 [04-10-2024 04:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8592 [04-10-2024 04:38:16] New process found: Process Name - w3wp.exe Process ID - 6924 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [04-10-2024 04:38:16] New process found: Process Name - conhost.exe Process ID - 10516 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [04-10-2024 04:38:20] Process Exited: Process Name - statistics_collector.exe Process ID - 9924 [04-10-2024 04:38:20] Process Exited: Process Name - conhost.exe Process ID - 13224 [04-10-2024 04:38:23] New process found: Process Name - task-manager-agent.exe Process ID - 11164 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:23] New process found: Process Name - php.exe Process ID - 13260 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:23] New process found: Process Name - conhost.exe Process ID - 11284 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:23] Process Exited: Process Name - task-manager-agent.exe Process ID - 5648 [04-10-2024 04:38:23] Process Exited: Process Name - php.exe Process ID - 6216 [04-10-2024 04:38:23] Process Exited: Process Name - statistics.exe Process ID - 7368 [04-10-2024 04:38:23] Process Exited: Process Name - php.exe Process ID - 9608 [04-10-2024 04:38:23] Process Exited: Process Name - conhost.exe Process ID - 11408 [04-10-2024 04:38:23] Process Exited: Process Name - conhost.exe Process ID - 12680 [04-10-2024 04:38:25] New process found: Process Name - task-manager-agent.exe Process ID - 7676 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - php.exe Process ID - 11040 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - conhost.exe Process ID - 7460 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - task-manager-agent.exe Process ID - 13136 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - php.exe Process ID - 10944 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - conhost.exe Process ID - 1200 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:25] New process found: Process Name - filemng.exe Process ID - 9484 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:38:25] New process found: Process Name - conhost.exe Process ID - 2360 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:38:25] Process Exited: Process Name - task-manager-agent.exe Process ID - 11164 [04-10-2024 04:38:25] Process Exited: Process Name - conhost.exe Process ID - 11284 [04-10-2024 04:38:25] Process Exited: Process Name - php.exe Process ID - 13260 [04-10-2024 04:38:26] New process found: Process Name - cmd.exe Process ID - 12672 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:26] New process found: Process Name - php.exe Process ID - 10316 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:26] Process Exited: Process Name - conhost.exe Process ID - 2360 [04-10-2024 04:38:26] Process Exited: Process Name - conhost.exe Process ID - 7460 [04-10-2024 04:38:26] Process Exited: Process Name - task-manager-agent.exe Process ID - 7676 [04-10-2024 04:38:26] Process Exited: Process Name - filemng.exe Process ID - 9484 [04-10-2024 04:38:26] Process Exited: Process Name - php.exe Process ID - 11040 [04-10-2024 04:38:28] New process found: Process Name - task-manager-agent.exe Process ID - 11372 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:28] New process found: Process Name - php.exe Process ID - 84 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:28] New process found: Process Name - conhost.exe Process ID - 1808 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:28] New process found: Process Name - cmd.exe Process ID - 12708 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:28] New process found: Process Name - php.exe Process ID - 6312 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:28] Process Exited: Process Name - conhost.exe Process ID - 1200 [04-10-2024 04:38:28] Process Exited: Process Name - php.exe Process ID - 10316 [04-10-2024 04:38:28] Process Exited: Process Name - php.exe Process ID - 10944 [04-10-2024 04:38:28] Process Exited: Process Name - cmd.exe Process ID - 12672 [04-10-2024 04:38:28] Process Exited: Process Name - task-manager-agent.exe Process ID - 13136 [04-10-2024 04:38:29] New process found: Process Name - task-manager-agent.exe Process ID - 3980 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:29] New process found: Process Name - php.exe Process ID - 10636 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:29] New process found: Process Name - conhost.exe Process ID - 1540 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:29] Process Exited: Process Name - php.exe Process ID - 84 [04-10-2024 04:38:29] Process Exited: Process Name - conhost.exe Process ID - 1808 [04-10-2024 04:38:29] Process Exited: Process Name - php.exe Process ID - 6312 [04-10-2024 04:38:29] Process Exited: Process Name - task-manager-agent.exe Process ID - 11372 [04-10-2024 04:38:29] Process Exited: Process Name - cmd.exe Process ID - 12708 [04-10-2024 04:38:30] New process found: Process Name - task-manager-agent.exe Process ID - 2688 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:30] New process found: Process Name - php.exe Process ID - 5820 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:30] New process found: Process Name - conhost.exe Process ID - 9940 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:30] Process Exited: Process Name - conhost.exe Process ID - 1540 [04-10-2024 04:38:30] Process Exited: Process Name - task-manager-agent.exe Process ID - 3980 [04-10-2024 04:38:30] Process Exited: Process Name - php.exe Process ID - 10636 [04-10-2024 04:38:32] New process found: Process Name - task-manager-agent.exe Process ID - 12036 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - php.exe Process ID - 13244 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - conhost.exe Process ID - 9116 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - task-manager-agent.exe Process ID - 9936 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - php.exe Process ID - 712 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - conhost.exe Process ID - 9780 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - cmd.exe Process ID - 12660 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] New process found: Process Name - php.exe Process ID - 1716 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:32] Process Exited: Process Name - task-manager-agent.exe Process ID - 2688 [04-10-2024 04:38:32] Process Exited: Process Name - php.exe Process ID - 5820 [04-10-2024 04:38:32] Process Exited: Process Name - conhost.exe Process ID - 9940 [04-10-2024 04:38:33] New process found: Process Name - task-manager-agent.exe Process ID - 9788 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:33] New process found: Process Name - php.exe Process ID - 11128 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:33] New process found: Process Name - conhost.exe Process ID - 12360 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:33] Process Exited: Process Name - php.exe Process ID - 712 [04-10-2024 04:38:33] Process Exited: Process Name - php.exe Process ID - 1716 [04-10-2024 04:38:33] Process Exited: Process Name - conhost.exe Process ID - 9116 [04-10-2024 04:38:33] Process Exited: Process Name - conhost.exe Process ID - 9780 [04-10-2024 04:38:33] Process Exited: Process Name - task-manager-agent.exe Process ID - 9936 [04-10-2024 04:38:33] Process Exited: Process Name - task-manager-agent.exe Process ID - 12036 [04-10-2024 04:38:33] Process Exited: Process Name - cmd.exe Process ID - 12660 [04-10-2024 04:38:33] Process Exited: Process Name - php.exe Process ID - 13244 [04-10-2024 04:38:34] New process found: Process Name - task-manager-agent.exe Process ID - 7912 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:34] New process found: Process Name - php.exe Process ID - 5228 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:34] New process found: Process Name - conhost.exe Process ID - 12192 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:34] Process Exited: Process Name - task-manager-agent.exe Process ID - 9788 [04-10-2024 04:38:34] Process Exited: Process Name - php.exe Process ID - 11128 [04-10-2024 04:38:34] Process Exited: Process Name - conhost.exe Process ID - 12360 [04-10-2024 04:38:35] New process found: Process Name - task-manager-agent.exe Process ID - 7324 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:35] New process found: Process Name - php.exe Process ID - 12504 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:35] New process found: Process Name - conhost.exe Process ID - 10796 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:38:35] Process Exited: Process Name - php.exe Process ID - 5228 [04-10-2024 04:38:35] Process Exited: Process Name - task-manager-agent.exe Process ID - 7912 [04-10-2024 04:38:35] Process Exited: Process Name - conhost.exe Process ID - 12192 [04-10-2024 04:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 9748 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:01] New process found: Process Name - php.exe Process ID - 8544 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:01] New process found: Process Name - conhost.exe Process ID - 9040 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 824 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:02] New process found: Process Name - php.exe Process ID - 5788 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:02] New process found: Process Name - conhost.exe Process ID - 9684 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:02] Process Exited: Process Name - php.exe Process ID - 8544 [04-10-2024 04:39:02] Process Exited: Process Name - conhost.exe Process ID - 9040 [04-10-2024 04:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 9748 [04-10-2024 04:39:04] Process Exited: Process Name - task-manager-agent.exe Process ID - 824 [04-10-2024 04:39:04] Process Exited: Process Name - php.exe Process ID - 5788 [04-10-2024 04:39:04] Process Exited: Process Name - conhost.exe Process ID - 9684 [04-10-2024 04:39:20] New process found: Process Name - w3wp.exe Process ID - 5948 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:39:20] New process found: Process Name - where.exe Process ID - 10488 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:39:20] New process found: Process Name - conhost.exe Process ID - 1768 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:39:21] New process found: Process Name - conhost.exe Process ID - 5116 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 04:39:21] Process Exited: Process Name - conhost.exe Process ID - 1768 [04-10-2024 04:39:21] Process Exited: Process Name - where.exe Process ID - 10488 [04-10-2024 04:39:24] New process found: Process Name - w3wp.exe Process ID - 2764 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:39:24] New process found: Process Name - conhost.exe Process ID - 5680 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 04:39:35] Process Exited: Process Name - conhost.exe Process ID - 9316 [04-10-2024 04:39:36] Process Exited: Process Name - w3wp.exe Process ID - 8432 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:39:43] Process Exited: Process Name - w3wp.exe Process ID - 8476 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 04:39:43] Process Exited: Process Name - conhost.exe Process ID - 8804 [04-10-2024 04:39:54] New process found: Process Name - task-manager-agent.exe Process ID - 7632 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:54] New process found: Process Name - php.exe Process ID - 7928 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:54] New process found: Process Name - conhost.exe Process ID - 11232 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:54] Process Exited: Process Name - task-manager-agent.exe Process ID - 7324 [04-10-2024 04:39:54] Process Exited: Process Name - conhost.exe Process ID - 10796 [04-10-2024 04:39:54] Process Exited: Process Name - php.exe Process ID - 12504 [04-10-2024 04:39:55] New process found: Process Name - task-manager-agent.exe Process ID - 5304 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:55] New process found: Process Name - php.exe Process ID - 10236 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:55] New process found: Process Name - conhost.exe Process ID - 13248 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 04:39:55] Process Exited: Process Name - task-manager-agent.exe Process ID - 7632 [04-10-2024 04:39:55] Process Exited: Process Name - php.exe Process ID - 7928 [04-10-2024 04:39:55] Process Exited: Process Name - conhost.exe Process ID - 11232 [04-10-2024 04:39:56] Process Exited: Process Name - task-manager-agent.exe Process ID - 5304 [04-10-2024 04:39:56] Process Exited: Process Name - php.exe Process ID - 10236 [04-10-2024 04:39:56] Process Exited: Process Name - conhost.exe Process ID - 13248 [04-10-2024 04:41:15] New process found: Process Name - w3wp.exe Process ID - 3952 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:41:15] Process Exited: Process Name - w3wp.exe Process ID - 1872 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:41:33] New process found: Process Name - w3wp.exe Process ID - 4596 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:41:57] Process Exited: Process Name - w3wp.exe Process ID - 1576 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:41:57] Process Exited: Process Name - conhost.exe Process ID - 2216 [04-10-2024 04:42:45] New process found: Process Name - w3wp.exe Process ID - 12684 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:42:45] New process found: Process Name - where.exe Process ID - 9968 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 04:42:45] New process found: Process Name - conhost.exe Process ID - 2352 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 04:42:46] New process found: Process Name - conhost.exe Process ID - 4536 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 04:42:46] Process Exited: Process Name - conhost.exe Process ID - 2352 [04-10-2024 04:42:46] Process Exited: Process Name - where.exe Process ID - 9968 [04-10-2024 04:44:01] New process found: Process Name - cmd.exe Process ID - 10852 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:44:01] New process found: Process Name - conhost.exe Process ID - 4152 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:44:01] New process found: Process Name - runtask.exe Process ID - 5532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:44:01] New process found: Process Name - php.exe Process ID - 12212 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:44:01] New process found: Process Name - conhost.exe Process ID - 5344 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:44:02] Process Exited: Process Name - conhost.exe Process ID - 4152 [04-10-2024 04:44:02] Process Exited: Process Name - conhost.exe Process ID - 5344 [04-10-2024 04:44:02] Process Exited: Process Name - runtask.exe Process ID - 5532 [04-10-2024 04:44:02] Process Exited: Process Name - cmd.exe Process ID - 10852 [04-10-2024 04:44:02] Process Exited: Process Name - php.exe Process ID - 12212 [04-10-2024 04:44:19] Process Exited: Process Name - w3wp.exe Process ID - 6924 Web application pool name - schoolerp.taxtribute.com [04-10-2024 04:44:19] Process Exited: Process Name - conhost.exe Process ID - 10516 [04-10-2024 04:44:50] New process found: Process Name - w3wp.exe Process ID - 8032 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 04:45:23] Process Exited: Process Name - conhost.exe Process ID - 5116 [04-10-2024 04:45:23] Process Exited: Process Name - w3wp.exe Process ID - 5948 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:45:26] Process Exited: Process Name - w3wp.exe Process ID - 2764 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:45:26] Process Exited: Process Name - conhost.exe Process ID - 5680 [04-10-2024 04:46:01] New process found: Process Name - cmd.exe Process ID - 12312 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:46:01] New process found: Process Name - conhost.exe Process ID - 11632 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:46:01] New process found: Process Name - runtask.exe Process ID - 8096 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:46:01] New process found: Process Name - php.exe Process ID - 2016 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:46:01] New process found: Process Name - conhost.exe Process ID - 10940 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 04:46:02] Process Exited: Process Name - php.exe Process ID - 2016 [04-10-2024 04:46:02] Process Exited: Process Name - runtask.exe Process ID - 8096 [04-10-2024 04:46:02] Process Exited: Process Name - conhost.exe Process ID - 10940 [04-10-2024 04:46:02] Process Exited: Process Name - conhost.exe Process ID - 11632 [04-10-2024 04:46:02] Process Exited: Process Name - cmd.exe Process ID - 12312 [04-10-2024 04:46:17] New process found: Process Name - w3wp.exe Process ID - 11312 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:46:17] Process Exited: Process Name - w3wp.exe Process ID - 3952 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12920 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1476 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:46:57] New process found: Process Name - w3wp.exe Process ID - 10384 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 04:47:03] New process found: Process Name - w3wp.exe Process ID - 3588 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:47:11] New process found: Process Name - InstallAgent.exe Process ID - 1500 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 04:47:11] New process found: Process Name - InstallAgent.exe Process ID - 12552 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 04:47:13] New process found: Process Name - conhost.exe Process ID - 3284 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 04:47:16] Process Exited: Process Name - InstallAgent.exe Process ID - 1500 [04-10-2024 04:47:16] Process Exited: Process Name - InstallAgent.exe Process ID - 12552 [04-10-2024 04:47:36] Process Exited: Process Name - w3wp.exe Process ID - 4596 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1476 [04-10-2024 04:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12920 [04-10-2024 04:48:16] New process found: Process Name - w3wp.exe Process ID - 7916 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 04:48:48] Process Exited: Process Name - conhost.exe Process ID - 4536 [04-10-2024 04:48:48] Process Exited: Process Name - w3wp.exe Process ID - 12684 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:48:58] New process found: Process Name - w3wp.exe Process ID - 9736 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:50:52] Process Exited: Process Name - w3wp.exe Process ID - 8032 Web application pool name - adminportal.galaxytools.in [04-10-2024 04:50:57] New process found: Process Name - w3wp.exe Process ID - 9500 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 04:51:18] New process found: Process Name - w3wp.exe Process ID - 8252 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:51:18] Process Exited: Process Name - w3wp.exe Process ID - 11312 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:51:49] New process found: Process Name - SearchProtocolHost.exe Process ID - 11164 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:51:49] New process found: Process Name - SearchFilterHost.exe Process ID - 10048 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:53:05] Process Exited: Process Name - conhost.exe Process ID - 3284 [04-10-2024 04:53:05] Process Exited: Process Name - w3wp.exe Process ID - 3588 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 04:53:22] New process found: Process Name - w3wp.exe Process ID - 11624 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 04:53:22] New process found: Process Name - conhost.exe Process ID - 10912 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 04:54:00] Process Exited: Process Name - w3wp.exe Process ID - 10384 Web application pool name - DefaultAppPool [04-10-2024 04:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 10048 [04-10-2024 04:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11164 [04-10-2024 04:54:07] New process found: Process Name - w3wp.exe Process ID - 11128 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 04:54:08] New process found: Process Name - conhost.exe Process ID - 7012 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 04:54:16] New process found: Process Name - w3wp.exe Process ID - 11752 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 04:54:19] Process Exited: Process Name - w3wp.exe Process ID - 7916 Web application pool name - galaxytools.in [04-10-2024 04:55:00] Process Exited: Process Name - w3wp.exe Process ID - 9736 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:55:31] New process found: Process Name - w3wp.exe Process ID - 1000 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 04:55:31] New process found: Process Name - conhost.exe Process ID - 1476 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 04:56:19] New process found: Process Name - w3wp.exe Process ID - 12580 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:56:19] Process Exited: Process Name - w3wp.exe Process ID - 8252 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 04:56:39] New process found: Process Name - w3wp.exe Process ID - 8000 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 04:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11388 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 04:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 10752 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 04:56:58] Process Exited: Process Name - w3wp.exe Process ID - 9500 Web application pool name - adminportal.galaxytools.in [04-10-2024 04:57:23] New process found: Process Name - w3wp.exe Process ID - 2364 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 04:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10752 [04-10-2024 04:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11388 [04-10-2024 04:58:15] New process found: Process Name - w3wp.exe Process ID - 2564 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 04:59:10] New process found: Process Name - w3wp.exe Process ID - 3364 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 04:59:11] New process found: Process Name - conhost.exe Process ID - 3800 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 04:59:27] New process found: Process Name - w3wp.exe Process ID - 9096 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 04:59:58] New process found: Process Name - w3wp.exe Process ID - 5032 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 04:59:58] New process found: Process Name - conhost.exe Process ID - 5900 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 05:00:10] Process Exited: Process Name - conhost.exe Process ID - 7012 [04-10-2024 05:00:10] Process Exited: Process Name - w3wp.exe Process ID - 11128 Web application pool name - taxtribute.com [04-10-2024 05:00:19] Process Exited: Process Name - w3wp.exe Process ID - 11752 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 05:01:21] New process found: Process Name - w3wp.exe Process ID - 12600 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:01:21] Process Exited: Process Name - w3wp.exe Process ID - 12580 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:02:32] New process found: Process Name - w3wp.exe Process ID - 3668 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 05:02:32] New process found: Process Name - conhost.exe Process ID - 9108 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [04-10-2024 05:02:55] New process found: Process Name - w3wp.exe Process ID - 3248 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 05:03:25] Process Exited: Process Name - w3wp.exe Process ID - 2364 Web application pool name - galaxytools.in [04-10-2024 05:03:33] Process Exited: Process Name - w3wp.exe Process ID - 1000 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:03:33] Process Exited: Process Name - conhost.exe Process ID - 1476 [04-10-2024 05:03:36] New process found: Process Name - w3wp.exe Process ID - 5660 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 05:03:41] Process Exited: Process Name - w3wp.exe Process ID - 8000 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:04:16] Process Exited: Process Name - w3wp.exe Process ID - 2564 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 05:05:01] New process found: Process Name - cmd.exe Process ID - 10768 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:05:01] New process found: Process Name - conhost.exe Process ID - 5476 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:05:01] New process found: Process Name - runtask.exe Process ID - 1836 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:05:01] New process found: Process Name - php.exe Process ID - 12788 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:05:01] New process found: Process Name - conhost.exe Process ID - 6044 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:05:03] Process Exited: Process Name - runtask.exe Process ID - 1836 [04-10-2024 05:05:03] Process Exited: Process Name - conhost.exe Process ID - 5476 [04-10-2024 05:05:03] Process Exited: Process Name - conhost.exe Process ID - 6044 [04-10-2024 05:05:03] Process Exited: Process Name - cmd.exe Process ID - 10768 [04-10-2024 05:05:03] Process Exited: Process Name - php.exe Process ID - 12788 [04-10-2024 05:05:11] Process Exited: Process Name - w3wp.exe Process ID - 3364 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 05:05:11] Process Exited: Process Name - conhost.exe Process ID - 3800 [04-10-2024 05:06:00] Process Exited: Process Name - w3wp.exe Process ID - 5032 Web application pool name - tools.taxtribute.com [04-10-2024 05:06:00] Process Exited: Process Name - conhost.exe Process ID - 5900 [04-10-2024 05:06:22] New process found: Process Name - w3wp.exe Process ID - 8248 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:06:22] Process Exited: Process Name - w3wp.exe Process ID - 12600 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:06:40] New process found: Process Name - w3wp.exe Process ID - 12904 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:06:40] New process found: Process Name - where.exe Process ID - 6180 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 05:06:40] New process found: Process Name - conhost.exe Process ID - 5180 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 05:06:41] New process found: Process Name - conhost.exe Process ID - 7904 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 05:06:41] Process Exited: Process Name - conhost.exe Process ID - 5180 [04-10-2024 05:06:41] Process Exited: Process Name - where.exe Process ID - 6180 [04-10-2024 05:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9816 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:06:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 2984 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:06:48] New process found: Process Name - SearchFilterHost.exe Process ID - 2748 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9940 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:08:01] New process found: Process Name - w3wp.exe Process ID - 12604 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 05:08:01] New process found: Process Name - conhost.exe Process ID - 11704 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 05:08:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 2748 [04-10-2024 05:08:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 2984 [04-10-2024 05:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9816 [04-10-2024 05:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9940 [04-10-2024 05:08:29] Process Exited: Process Name - w3wp.exe Process ID - 9096 Web application pool name - DefaultAppPool [04-10-2024 05:08:34] Process Exited: Process Name - w3wp.exe Process ID - 3668 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 05:08:34] Process Exited: Process Name - conhost.exe Process ID - 9108 [04-10-2024 05:08:47] New process found: Process Name - w3wp.exe Process ID - 1200 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 05:08:58] Process Exited: Process Name - w3wp.exe Process ID - 3248 Web application pool name - edtribute.com [04-10-2024 05:11:23] New process found: Process Name - w3wp.exe Process ID - 13072 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:11:23] Process Exited: Process Name - w3wp.exe Process ID - 8248 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:13:24] New process found: Process Name - w3wp.exe Process ID - 10820 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:13:24] New process found: Process Name - conhost.exe Process ID - 12136 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 05:13:24] Process Exited: Process Name - conhost.exe Process ID - 10912 [04-10-2024 05:13:24] Process Exited: Process Name - w3wp.exe Process ID - 11624 Web application pool name - kdbps.edu.in [04-10-2024 05:13:40] New process found: Process Name - w3wp.exe Process ID - 10488 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:13:41] New process found: Process Name - conhost.exe Process ID - 11908 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:14:03] Process Exited: Process Name - conhost.exe Process ID - 11704 [04-10-2024 05:14:03] Process Exited: Process Name - w3wp.exe Process ID - 12604 Web application pool name - taxtribute.com [04-10-2024 05:14:39] Process Exited: Process Name - w3wp.exe Process ID - 5660 Web application pool name - galaxytools.in [04-10-2024 05:14:42] Process Exited: Process Name - conhost.exe Process ID - 7904 [04-10-2024 05:14:42] Process Exited: Process Name - w3wp.exe Process ID - 12904 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:14:59] New process found: Process Name - w3wp.exe Process ID - 5728 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 05:14:59] New process found: Process Name - conhost.exe Process ID - 13196 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 05:15:00] New process found: Process Name - w3wp.exe Process ID - 11796 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:16:24] New process found: Process Name - w3wp.exe Process ID - 5992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:16:24] Process Exited: Process Name - w3wp.exe Process ID - 13072 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6292 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6488 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:16:50] New process found: Process Name - w3wp.exe Process ID - 944 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 05:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6292 [04-10-2024 05:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6488 [04-10-2024 05:19:25] Process Exited: Process Name - w3wp.exe Process ID - 10820 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:19:25] Process Exited: Process Name - conhost.exe Process ID - 12136 [04-10-2024 05:19:41] Process Exited: Process Name - w3wp.exe Process ID - 10488 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:19:41] Process Exited: Process Name - conhost.exe Process ID - 11908 [04-10-2024 05:20:24] New process found: Process Name - w3wp.exe Process ID - 12540 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 05:20:24] New process found: Process Name - conhost.exe Process ID - 8416 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [04-10-2024 05:21:17] New process found: Process Name - w3wp.exe Process ID - 12304 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 05:21:17] New process found: Process Name - conhost.exe Process ID - 2484 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 05:21:26] New process found: Process Name - w3wp.exe Process ID - 9892 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:21:26] Process Exited: Process Name - w3wp.exe Process ID - 5992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:22:56] New process found: Process Name - w3wp.exe Process ID - 2600 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:22:56] New process found: Process Name - conhost.exe Process ID - 13080 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 05:23:57] New process found: Process Name - w3wp.exe Process ID - 828 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:24:02] Process Exited: Process Name - w3wp.exe Process ID - 11796 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:24:05] New process found: Process Name - conhost.exe Process ID - 11548 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:24:11] New process found: Process Name - w3wp.exe Process ID - 10528 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 05:25:00] New process found: Process Name - cmd.exe Process ID - 11092 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:00] New process found: Process Name - conhost.exe Process ID - 1208 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:00] New process found: Process Name - runtask.exe Process ID - 10272 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:00] New process found: Process Name - php.exe Process ID - 7952 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:25:00] New process found: Process Name - conhost.exe Process ID - 3828 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:25:04] Process Exited: Process Name - conhost.exe Process ID - 1208 [04-10-2024 05:25:04] Process Exited: Process Name - conhost.exe Process ID - 3828 [04-10-2024 05:25:04] Process Exited: Process Name - php.exe Process ID - 7952 [04-10-2024 05:25:04] Process Exited: Process Name - runtask.exe Process ID - 10272 [04-10-2024 05:25:04] Process Exited: Process Name - cmd.exe Process ID - 11092 [04-10-2024 05:25:42] New process found: Process Name - w3wp.exe Process ID - 7172 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:25:43] New process found: Process Name - conhost.exe Process ID - 10012 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 712 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 10468 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 12760 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 5440 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 136 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] New process found: Process Name - updater.exe Process ID - 12512 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:25:49] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 12760 Current State - SERVICE_RUNNING [04-10-2024 05:25:49] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 136 Current State - SERVICE_RUNNING [04-10-2024 05:26:14] New process found: Process Name - 129.0.6668.90_129.0.6668.89_chrome_updater.exe Process ID - 6048 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:15] New process found: Process Name - setup.exe Process ID - 11128 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:15] New process found: Process Name - setup.exe Process ID - 11372 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:25] Process Exited: Process Name - conhost.exe Process ID - 8416 [04-10-2024 05:26:25] Process Exited: Process Name - w3wp.exe Process ID - 12540 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 05:26:26] New process found: Process Name - w3wp.exe Process ID - 8984 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:26:26] Process Exited: Process Name - w3wp.exe Process ID - 9892 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:26:26] Process Exited: Process Name - setup.exe Process ID - 11128 [04-10-2024 05:26:26] Process Exited: Process Name - setup.exe Process ID - 11372 [04-10-2024 05:26:27] Process Exited: Process Name - updater.exe Process ID - 712 [04-10-2024 05:26:27] Process Exited: Process Name - 129.0.6668.90_129.0.6668.89_chrome_updater.exe Process ID - 6048 [04-10-2024 05:26:27] Process Exited: Process Name - updater.exe Process ID - 10468 [04-10-2024 05:26:31] New process found: Process Name - SearchProtocolHost.exe Process ID - 7912 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:31] New process found: Process Name - SearchFilterHost.exe Process ID - 7676 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:36] Process Exited: Process Name - ShellExperienceHost.exe Process ID - 7228 [04-10-2024 05:26:36] Process Exited: Process Name - ShellExperienceHost.exe Process ID - 10308 [04-10-2024 05:26:37] Process Exited: Process Name - updater.exe Process ID - 136 [04-10-2024 05:26:37] Process Exited: Process Name - updater.exe Process ID - 5440 [04-10-2024 05:26:37] Process Exited: Process Name - updater.exe Process ID - 12512 [04-10-2024 05:26:37] Process Exited: Process Name - updater.exe Process ID - 12760 [04-10-2024 05:26:37] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 05:26:37] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 05:26:38] New process found: Process Name - ShellExperienceHost.exe Process ID - 5900 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 05:26:38] New process found: Process Name - ShellExperienceHost.exe Process ID - 12952 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 05:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7692 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:26:48] New process found: Process Name - WmiPrvSE.exe Process ID - 1672 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:26:54] New process found: Process Name - w3wp.exe Process ID - 8072 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 05:27:20] Process Exited: Process Name - conhost.exe Process ID - 2484 [04-10-2024 05:27:20] Process Exited: Process Name - w3wp.exe Process ID - 12304 Web application pool name - csr.bmvfragrances.com [04-10-2024 05:27:52] Process Exited: Process Name - w3wp.exe Process ID - 944 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 05:28:01] Process Exited: Process Name - w3wp.exe Process ID - 5728 Web application pool name - kdbps.edu.in [04-10-2024 05:28:01] Process Exited: Process Name - conhost.exe Process ID - 13196 [04-10-2024 05:28:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 7676 [04-10-2024 05:28:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 7912 [04-10-2024 05:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1672 [04-10-2024 05:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7692 [04-10-2024 05:29:29] New process found: Process Name - w3wp.exe Process ID - 6048 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [04-10-2024 05:29:29] New process found: Process Name - where.exe Process ID - 8176 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 05:29:29] New process found: Process Name - conhost.exe Process ID - 10580 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 05:29:30] New process found: Process Name - conhost.exe Process ID - 10708 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 05:29:30] Process Exited: Process Name - where.exe Process ID - 8176 [04-10-2024 05:29:30] Process Exited: Process Name - conhost.exe Process ID - 10580 [04-10-2024 05:29:50] New process found: Process Name - w3wp.exe Process ID - 12480 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:29:50] New process found: Process Name - conhost.exe Process ID - 9500 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 05:29:59] Process Exited: Process Name - w3wp.exe Process ID - 828 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:29:59] Process Exited: Process Name - conhost.exe Process ID - 11548 [04-10-2024 05:30:14] Process Exited: Process Name - w3wp.exe Process ID - 10528 Web application pool name - adminportal.galaxytools.in [04-10-2024 05:30:51] New process found: Process Name - w3wp.exe Process ID - 13164 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:30:58] Process Exited: Process Name - w3wp.exe Process ID - 2600 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:30:58] Process Exited: Process Name - conhost.exe Process ID - 13080 [04-10-2024 05:31:28] New process found: Process Name - w3wp.exe Process ID - 12000 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:31:28] Process Exited: Process Name - w3wp.exe Process ID - 8984 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:31:44] Process Exited: Process Name - w3wp.exe Process ID - 7172 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:31:44] Process Exited: Process Name - conhost.exe Process ID - 10012 [04-10-2024 05:32:15] New process found: Process Name - w3wp.exe Process ID - 5696 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 05:32:20] New process found: Process Name - w3wp.exe Process ID - 5680 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 05:32:20] New process found: Process Name - conhost.exe Process ID - 12628 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 05:33:43] New process found: Process Name - w3wp.exe Process ID - 8544 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:33:54] New process found: Process Name - conhost.exe Process ID - 10252 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:35:31] Process Exited: Process Name - w3wp.exe Process ID - 6048 Web application pool name - masteradmin.taxtribute.com [04-10-2024 05:35:31] Process Exited: Process Name - conhost.exe Process ID - 10708 [04-10-2024 05:35:52] Process Exited: Process Name - conhost.exe Process ID - 9500 [04-10-2024 05:35:52] Process Exited: Process Name - w3wp.exe Process ID - 12480 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:35:56] Process Exited: Process Name - w3wp.exe Process ID - 8072 Web application pool name - galaxytools.in [04-10-2024 05:36:17] New process found: Process Name - w3wp.exe Process ID - 9108 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 05:36:29] New process found: Process Name - w3wp.exe Process ID - 2460 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:36:29] Process Exited: Process Name - w3wp.exe Process ID - 12000 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10220 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9596 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:37:04] New process found: Process Name - w3wp.exe Process ID - 11232 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:37:04] New process found: Process Name - conhost.exe Process ID - 7820 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 05:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9596 [04-10-2024 05:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10220 [04-10-2024 05:38:18] Process Exited: Process Name - w3wp.exe Process ID - 5696 Web application pool name - prathabypriyal.com [04-10-2024 05:38:45] New process found: Process Name - w3wp.exe Process ID - 10892 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 05:38:47] New process found: Process Name - conhost.exe Process ID - 2668 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 05:39:00] New process found: Process Name - cmd.exe Process ID - 6052 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:39:00] New process found: Process Name - conhost.exe Process ID - 6476 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:39:00] New process found: Process Name - runtask.exe Process ID - 7176 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:39:00] New process found: Process Name - php.exe Process ID - 8432 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:39:00] New process found: Process Name - conhost.exe Process ID - 7276 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 05:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 12400 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 05:39:01] New process found: Process Name - php.exe Process ID - 11724 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 05:39:01] New process found: Process Name - conhost.exe Process ID - 10820 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 05:39:01] Process Exited: Process Name - cmd.exe Process ID - 6052 [04-10-2024 05:39:01] Process Exited: Process Name - conhost.exe Process ID - 6476 [04-10-2024 05:39:01] Process Exited: Process Name - runtask.exe Process ID - 7176 [04-10-2024 05:39:01] Process Exited: Process Name - conhost.exe Process ID - 7276 [04-10-2024 05:39:01] Process Exited: Process Name - php.exe Process ID - 8432 [04-10-2024 05:39:02] Process Exited: Process Name - conhost.exe Process ID - 10820 [04-10-2024 05:39:02] Process Exited: Process Name - php.exe Process ID - 11724 [04-10-2024 05:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 12400 [04-10-2024 05:39:44] Process Exited: Process Name - w3wp.exe Process ID - 8544 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:39:44] Process Exited: Process Name - conhost.exe Process ID - 10252 [04-10-2024 05:40:32] New process found: Process Name - w3wp.exe Process ID - 11912 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:40:53] Process Exited: Process Name - w3wp.exe Process ID - 13164 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:41:02] New process found: Process Name - conhost.exe Process ID - 2844 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:41:31] New process found: Process Name - w3wp.exe Process ID - 6492 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:41:31] Process Exited: Process Name - w3wp.exe Process ID - 2460 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:42:19] Process Exited: Process Name - w3wp.exe Process ID - 9108 Web application pool name - edtribute.com [04-10-2024 05:43:22] Process Exited: Process Name - w3wp.exe Process ID - 5680 Web application pool name - taxtribute.com [04-10-2024 05:43:22] Process Exited: Process Name - conhost.exe Process ID - 12628 [04-10-2024 05:44:07] New process found: Process Name - w3wp.exe Process ID - 11092 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:44:07] New process found: Process Name - conhost.exe Process ID - 2464 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 05:44:14] New process found: Process Name - w3wp.exe Process ID - 2032 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:44:45] Process Exited: Process Name - php-cgi.exe Process ID - 4140 [04-10-2024 05:45:03] New process found: Process Name - w3wp.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 05:45:03] New process found: Process Name - conhost.exe Process ID - 12360 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 05:45:05] Process Exited: Process Name - conhost.exe Process ID - 7820 [04-10-2024 05:45:05] Process Exited: Process Name - w3wp.exe Process ID - 11232 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:45:49] Process Exited: Process Name - w3wp.exe Process ID - 1200 Web application pool name - DefaultAppPool [04-10-2024 05:46:00] New process found: Process Name - cmd.exe Process ID - 11280 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:46:00] New process found: Process Name - conhost.exe Process ID - 12024 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:46:00] New process found: Process Name - runtask.exe Process ID - 11440 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:46:01] Process Exited: Process Name - cmd.exe Process ID - 11280 [04-10-2024 05:46:01] Process Exited: Process Name - runtask.exe Process ID - 11440 [04-10-2024 05:46:01] Process Exited: Process Name - conhost.exe Process ID - 12024 [04-10-2024 05:46:32] New process found: Process Name - w3wp.exe Process ID - 3616 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:46:32] Process Exited: Process Name - w3wp.exe Process ID - 6492 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9700 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2648 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:47:34] Process Exited: Process Name - conhost.exe Process ID - 2844 [04-10-2024 05:47:34] Process Exited: Process Name - w3wp.exe Process ID - 11912 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2648 [04-10-2024 05:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9700 [04-10-2024 05:48:50] New process found: Process Name - w3wp.exe Process ID - 9900 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 05:49:20] New process found: Process Name - w3wp.exe Process ID - 4180 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 05:49:21] New process found: Process Name - w3wp.exe Process ID - 10384 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 05:49:47] Process Exited: Process Name - conhost.exe Process ID - 2668 [04-10-2024 05:49:47] Process Exited: Process Name - w3wp.exe Process ID - 10892 Web application pool name - kdbps.edu.in [04-10-2024 05:50:09] Process Exited: Process Name - conhost.exe Process ID - 2464 [04-10-2024 05:50:09] Process Exited: Process Name - w3wp.exe Process ID - 11092 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:50:16] Process Exited: Process Name - w3wp.exe Process ID - 2032 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 05:51:33] New process found: Process Name - w3wp.exe Process ID - 10008 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:51:33] Process Exited: Process Name - w3wp.exe Process ID - 3616 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11904 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 1996 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:53:58] New process found: Process Name - w3wp.exe Process ID - 12476 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 05:54:01] New process found: Process Name - w3wp.exe Process ID - 9116 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 05:54:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 1996 [04-10-2024 05:54:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11904 [04-10-2024 05:54:55] New process found: Process Name - w3wp.exe Process ID - 4556 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:55:21] Process Exited: Process Name - w3wp.exe Process ID - 4180 Web application pool name - galaxytools.in [04-10-2024 05:55:23] Process Exited: Process Name - w3wp.exe Process ID - 10384 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 05:56:34] New process found: Process Name - w3wp.exe Process ID - 3936 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:56:34] Process Exited: Process Name - w3wp.exe Process ID - 10008 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 05:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8448 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 05:56:48] New process found: Process Name - WmiPrvSE.exe Process ID - 10660 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 05:57:02] New process found: Process Name - w3wp.exe Process ID - 5860 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 05:57:02] New process found: Process Name - where.exe Process ID - 8636 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 05:57:02] New process found: Process Name - conhost.exe Process ID - 10604 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 05:57:04] New process found: Process Name - conhost.exe Process ID - 11080 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 05:57:04] Process Exited: Process Name - where.exe Process ID - 8636 [04-10-2024 05:57:04] Process Exited: Process Name - conhost.exe Process ID - 10604 [04-10-2024 05:57:48] New process found: Process Name - w3wp.exe Process ID - 12192 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 05:58:05] New process found: Process Name - w3wp.exe Process ID - 10296 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 05:58:12] New process found: Process Name - w3wp.exe Process ID - 9392 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:58:12] New process found: Process Name - conhost.exe Process ID - 11168 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 05:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8448 [04-10-2024 05:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10660 [04-10-2024 05:58:35] New process found: Process Name - w3wp.exe Process ID - 3980 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 05:58:35] New process found: Process Name - conhost.exe Process ID - 6856 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 05:58:49] New process found: Process Name - w3wp.exe Process ID - 8832 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 05:58:49] New process found: Process Name - where.exe Process ID - 6468 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:58:49] New process found: Process Name - conhost.exe Process ID - 11552 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:58:50] New process found: Process Name - conhost.exe Process ID - 11992 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 05:58:50] Process Exited: Process Name - where.exe Process ID - 6468 [04-10-2024 05:58:50] Process Exited: Process Name - conhost.exe Process ID - 11552 [04-10-2024 05:59:05] Process Exited: Process Name - w3wp.exe Process ID - 11856 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 05:59:05] Process Exited: Process Name - conhost.exe Process ID - 12360 [04-10-2024 06:00:00] Process Exited: Process Name - w3wp.exe Process ID - 12476 Web application pool name - acme-challenge [04-10-2024 06:00:58] Process Exited: Process Name - w3wp.exe Process ID - 4556 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:01:04] Process Exited: Process Name - w3wp.exe Process ID - 9116 Web application pool name - edtribute.com [04-10-2024 06:01:35] New process found: Process Name - w3wp.exe Process ID - 6792 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:01:35] Process Exited: Process Name - w3wp.exe Process ID - 3936 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:01:36] New process found: Process Name - w3wp.exe Process ID - 2200 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 06:01:36] New process found: Process Name - conhost.exe Process ID - 10276 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:03:05] Process Exited: Process Name - w3wp.exe Process ID - 5860 Web application pool name - taxtribute.com [04-10-2024 06:03:05] Process Exited: Process Name - conhost.exe Process ID - 11080 [04-10-2024 06:03:49] Process Exited: Process Name - w3wp.exe Process ID - 12192 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 06:04:07] Process Exited: Process Name - w3wp.exe Process ID - 10296 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 06:04:14] Process Exited: Process Name - w3wp.exe Process ID - 9392 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:04:14] Process Exited: Process Name - conhost.exe Process ID - 11168 [04-10-2024 06:04:38] Process Exited: Process Name - w3wp.exe Process ID - 3980 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:04:38] Process Exited: Process Name - conhost.exe Process ID - 6856 [04-10-2024 06:04:52] Process Exited: Process Name - w3wp.exe Process ID - 8832 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 06:04:52] Process Exited: Process Name - conhost.exe Process ID - 11992 [04-10-2024 06:05:01] New process found: Process Name - cmd.exe Process ID - 508 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:05:01] New process found: Process Name - conhost.exe Process ID - 12868 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:05:01] New process found: Process Name - runtask.exe Process ID - 5372 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:05:01] New process found: Process Name - php.exe Process ID - 13296 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:05:01] New process found: Process Name - conhost.exe Process ID - 360 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:05:08] Process Exited: Process Name - conhost.exe Process ID - 360 [04-10-2024 06:05:08] Process Exited: Process Name - cmd.exe Process ID - 508 [04-10-2024 06:05:08] Process Exited: Process Name - runtask.exe Process ID - 5372 [04-10-2024 06:05:08] Process Exited: Process Name - conhost.exe Process ID - 12868 [04-10-2024 06:05:08] Process Exited: Process Name - php.exe Process ID - 13296 [04-10-2024 06:06:37] New process found: Process Name - w3wp.exe Process ID - 6096 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:06:37] Process Exited: Process Name - w3wp.exe Process ID - 6792 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8464 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 3592 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:07:09] New process found: Process Name - w3wp.exe Process ID - 3964 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 06:07:11] New process found: Process Name - w3wp.exe Process ID - 5356 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 06:07:11] New process found: Process Name - conhost.exe Process ID - 5660 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 06:07:39] Process Exited: Process Name - w3wp.exe Process ID - 2200 Web application pool name - kdbps.edu.in [04-10-2024 06:07:39] Process Exited: Process Name - conhost.exe Process ID - 10276 [04-10-2024 06:08:01] New process found: Process Name - w3wp.exe Process ID - 10032 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 06:08:01] New process found: Process Name - where.exe Process ID - 1048 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:08:01] New process found: Process Name - conhost.exe Process ID - 12980 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:08:02] New process found: Process Name - conhost.exe Process ID - 4148 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:08:02] Process Exited: Process Name - where.exe Process ID - 1048 [04-10-2024 06:08:02] Process Exited: Process Name - conhost.exe Process ID - 12980 [04-10-2024 06:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3592 [04-10-2024 06:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8464 [04-10-2024 06:08:37] New process found: Process Name - w3wp.exe Process ID - 9324 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:08:37] New process found: Process Name - conhost.exe Process ID - 12072 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:09:27] New process found: Process Name - w3wp.exe Process ID - 11956 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 06:09:27] New process found: Process Name - conhost.exe Process ID - 11196 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 06:10:33] New process found: Process Name - w3wp.exe Process ID - 7468 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:10:33] New process found: Process Name - where.exe Process ID - 4028 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 06:10:33] New process found: Process Name - conhost.exe Process ID - 3732 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 06:10:34] New process found: Process Name - conhost.exe Process ID - 220 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 06:10:34] Process Exited: Process Name - conhost.exe Process ID - 3732 [04-10-2024 06:10:34] Process Exited: Process Name - where.exe Process ID - 4028 [04-10-2024 06:11:16] New process found: Process Name - w3wp.exe Process ID - 508 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 06:11:38] New process found: Process Name - w3wp.exe Process ID - 10272 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:11:38] Process Exited: Process Name - w3wp.exe Process ID - 6096 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:12:13] New process found: Process Name - w3wp.exe Process ID - 6792 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:12:13] New process found: Process Name - conhost.exe Process ID - 3588 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 06:12:59] New process found: Process Name - w3wp.exe Process ID - 188 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 06:12:59] New process found: Process Name - where.exe Process ID - 824 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 06:12:59] New process found: Process Name - conhost.exe Process ID - 12792 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 06:13:00] New process found: Process Name - conhost.exe Process ID - 3380 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 06:13:00] Process Exited: Process Name - where.exe Process ID - 824 [04-10-2024 06:13:00] Process Exited: Process Name - conhost.exe Process ID - 12792 [04-10-2024 06:13:11] Process Exited: Process Name - w3wp.exe Process ID - 3964 Web application pool name - galaxytools.in [04-10-2024 06:13:13] Process Exited: Process Name - w3wp.exe Process ID - 5356 Web application pool name - tools.taxtribute.com [04-10-2024 06:13:13] Process Exited: Process Name - conhost.exe Process ID - 5660 [04-10-2024 06:14:03] New process found: Process Name - w3wp.exe Process ID - 5620 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 06:14:03] New process found: Process Name - conhost.exe Process ID - 424 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 06:14:40] Process Exited: Process Name - w3wp.exe Process ID - 9324 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:14:40] Process Exited: Process Name - conhost.exe Process ID - 12072 [04-10-2024 06:15:30] Process Exited: Process Name - conhost.exe Process ID - 11196 [04-10-2024 06:15:30] Process Exited: Process Name - w3wp.exe Process ID - 11956 Web application pool name - csr.bmvfragrances.com [04-10-2024 06:15:34] New process found: Process Name - w3wp.exe Process ID - 2484 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:15:34] New process found: Process Name - conhost.exe Process ID - 7916 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 06:16:01] New process found: Process Name - w3wp.exe Process ID - 9280 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 06:16:01] New process found: Process Name - conhost.exe Process ID - 8684 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 06:16:18] New process found: Process Name - w3wp.exe Process ID - 7236 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:16:18] New process found: Process Name - conhost.exe Process ID - 11636 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:16:36] Process Exited: Process Name - conhost.exe Process ID - 220 [04-10-2024 06:16:36] Process Exited: Process Name - w3wp.exe Process ID - 7468 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:16:39] New process found: Process Name - w3wp.exe Process ID - 10364 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:16:39] Process Exited: Process Name - w3wp.exe Process ID - 10272 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9464 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 7304 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:17:15] New process found: Process Name - w3wp.exe Process ID - 10728 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 06:17:19] Process Exited: Process Name - w3wp.exe Process ID - 508 Web application pool name - adminportal.galaxytools.in [04-10-2024 06:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7304 [04-10-2024 06:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9464 [04-10-2024 06:18:14] Process Exited: Process Name - conhost.exe Process ID - 3588 [04-10-2024 06:18:14] Process Exited: Process Name - w3wp.exe Process ID - 6792 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:18:52] Process Exited: Process Name - w3wp.exe Process ID - 9900 Web application pool name - DefaultAppPool [04-10-2024 06:19:02] Process Exited: Process Name - w3wp.exe Process ID - 188 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 06:19:02] Process Exited: Process Name - conhost.exe Process ID - 3380 [04-10-2024 06:19:30] New process found: Process Name - w3wp.exe Process ID - 12768 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 06:20:05] Process Exited: Process Name - conhost.exe Process ID - 424 [04-10-2024 06:20:05] Process Exited: Process Name - w3wp.exe Process ID - 5620 Web application pool name - tools.taxtribute.com [04-10-2024 06:21:17] New process found: Process Name - w3wp.exe Process ID - 10912 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 06:21:36] Process Exited: Process Name - w3wp.exe Process ID - 2484 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:21:36] Process Exited: Process Name - conhost.exe Process ID - 7916 [04-10-2024 06:21:41] New process found: Process Name - w3wp.exe Process ID - 10668 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:21:41] Process Exited: Process Name - w3wp.exe Process ID - 10364 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:21:54] New process found: Process Name - w3wp.exe Process ID - 11656 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 06:22:04] Process Exited: Process Name - conhost.exe Process ID - 8684 [04-10-2024 06:22:04] Process Exited: Process Name - w3wp.exe Process ID - 9280 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 06:22:17] New process found: Process Name - w3wp.exe Process ID - 9324 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:22:20] Process Exited: Process Name - w3wp.exe Process ID - 7236 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:22:20] Process Exited: Process Name - conhost.exe Process ID - 11636 [04-10-2024 06:23:04] Process Exited: Process Name - conhost.exe Process ID - 4148 [04-10-2024 06:23:04] Process Exited: Process Name - w3wp.exe Process ID - 10032 Web application pool name - kdbps.edu.in [04-10-2024 06:25:00] New process found: Process Name - cmd.exe Process ID - 13296 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:00] New process found: Process Name - conhost.exe Process ID - 13036 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:00] New process found: Process Name - runtask.exe Process ID - 2560 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:00] New process found: Process Name - php.exe Process ID - 1784 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:25:00] New process found: Process Name - conhost.exe Process ID - 13072 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:25:04] Process Exited: Process Name - php.exe Process ID - 1784 [04-10-2024 06:25:04] Process Exited: Process Name - runtask.exe Process ID - 2560 [04-10-2024 06:25:04] Process Exited: Process Name - conhost.exe Process ID - 13036 [04-10-2024 06:25:04] Process Exited: Process Name - conhost.exe Process ID - 13072 [04-10-2024 06:25:04] Process Exited: Process Name - cmd.exe Process ID - 13296 [04-10-2024 06:25:49] New process found: Process Name - updater.exe Process ID - 12708 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:49] New process found: Process Name - updater.exe Process ID - 6316 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:49] New process found: Process Name - updater.exe Process ID - 1704 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:49] New process found: Process Name - updater.exe Process ID - 3820 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:49] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_START_PENDING [04-10-2024 06:25:50] New process found: Process Name - updater.exe Process ID - 12868 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:50] New process found: Process Name - updater.exe Process ID - 920 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:25:50] Process Exited: Process Name - updater.exe Process ID - 6316 [04-10-2024 06:25:50] Process Exited: Process Name - updater.exe Process ID - 12708 [04-10-2024 06:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 1704 Current State - SERVICE_RUNNING [04-10-2024 06:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 12868 Current State - SERVICE_RUNNING [04-10-2024 06:26:00] Process Exited: Process Name - updater.exe Process ID - 920 [04-10-2024 06:26:00] Process Exited: Process Name - updater.exe Process ID - 1704 [04-10-2024 06:26:00] Process Exited: Process Name - updater.exe Process ID - 3820 [04-10-2024 06:26:00] Process Exited: Process Name - updater.exe Process ID - 12868 [04-10-2024 06:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 06:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 06:26:12] New process found: Process Name - w3wp.exe Process ID - 10340 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:26:42] New process found: Process Name - w3wp.exe Process ID - 9268 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6408 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:26:42] Process Exited: Process Name - w3wp.exe Process ID - 10668 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11568 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:27:20] Process Exited: Process Name - w3wp.exe Process ID - 10912 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 06:27:28] New process found: Process Name - w3wp.exe Process ID - 12636 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 06:27:28] New process found: Process Name - where.exe Process ID - 12348 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 06:27:28] New process found: Process Name - conhost.exe Process ID - 9460 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 06:27:29] New process found: Process Name - conhost.exe Process ID - 9320 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 06:27:29] Process Exited: Process Name - conhost.exe Process ID - 9460 [04-10-2024 06:27:29] Process Exited: Process Name - where.exe Process ID - 12348 [04-10-2024 06:27:56] Process Exited: Process Name - w3wp.exe Process ID - 11656 Web application pool name - adminportal.galaxytools.in [04-10-2024 06:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6408 [04-10-2024 06:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11568 [04-10-2024 06:28:16] New process found: Process Name - w3wp.exe Process ID - 12036 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 06:28:16] New process found: Process Name - where.exe Process ID - 10388 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:28:16] New process found: Process Name - conhost.exe Process ID - 1008 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:28:17] New process found: Process Name - conhost.exe Process ID - 11152 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:28:17] Process Exited: Process Name - conhost.exe Process ID - 1008 [04-10-2024 06:28:17] Process Exited: Process Name - where.exe Process ID - 10388 [04-10-2024 06:28:32] Process Exited: Process Name - w3wp.exe Process ID - 12768 Web application pool name - DefaultAppPool [04-10-2024 06:28:47] Process Exited: Process Name - php-cgi.exe Process ID - 13300 [04-10-2024 06:28:48] Process Exited: Process Name - w3wp.exe Process ID - 12592 Web application pool name - PleskControlPanel [04-10-2024 06:29:59] New process found: Process Name - w3wp.exe Process ID - 11392 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 06:30:00] New process found: Process Name - php-cgi.exe Process ID - 9108 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 06:31:19] Process Exited: Process Name - w3wp.exe Process ID - 9324 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:31:43] New process found: Process Name - w3wp.exe Process ID - 1768 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:31:43] Process Exited: Process Name - w3wp.exe Process ID - 9268 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:32:15] Process Exited: Process Name - w3wp.exe Process ID - 10340 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:33:31] Process Exited: Process Name - conhost.exe Process ID - 9320 [04-10-2024 06:33:31] Process Exited: Process Name - w3wp.exe Process ID - 12636 Web application pool name - taxtribute.com [04-10-2024 06:33:51] New process found: Process Name - w3wp.exe Process ID - 7484 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 06:33:51] New process found: Process Name - conhost.exe Process ID - 9832 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 06:35:00] New process found: Process Name - w3wp.exe Process ID - 12712 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 06:35:00] New process found: Process Name - conhost.exe Process ID - 10968 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 06:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9360 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:36:44] New process found: Process Name - w3wp.exe Process ID - 3592 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:36:44] Process Exited: Process Name - w3wp.exe Process ID - 1768 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 84 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:36:50] New process found: Process Name - w3wp.exe Process ID - 7204 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 06:37:33] New process found: Process Name - w3wp.exe Process ID - 1804 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 06:37:58] New process found: Process Name - w3wp.exe Process ID - 8476 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:37:58] New process found: Process Name - where.exe Process ID - 10900 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:37:58] New process found: Process Name - conhost.exe Process ID - 12544 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:37:59] New process found: Process Name - conhost.exe Process ID - 832 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:37:59] Process Exited: Process Name - where.exe Process ID - 10900 [04-10-2024 06:37:59] Process Exited: Process Name - conhost.exe Process ID - 12544 [04-10-2024 06:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 84 [04-10-2024 06:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9360 [04-10-2024 06:38:18] Process Exited: Process Name - w3wp.exe Process ID - 10728 Web application pool name - galaxytools.in [04-10-2024 06:38:19] New process found: Process Name - w3wp.exe Process ID - 12924 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 06:38:34] New process found: Process Name - w3wp.exe Process ID - 13220 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:39:00] New process found: Process Name - cmd.exe Process ID - 12872 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:39:00] New process found: Process Name - conhost.exe Process ID - 10780 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:39:00] New process found: Process Name - runtask.exe Process ID - 9940 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:39:00] New process found: Process Name - php.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:39:00] New process found: Process Name - conhost.exe Process ID - 10100 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 12960 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 06:39:01] New process found: Process Name - php.exe Process ID - 12632 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 06:39:01] New process found: Process Name - conhost.exe Process ID - 5660 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 06:39:01] Process Exited: Process Name - php.exe Process ID - 176 [04-10-2024 06:39:01] Process Exited: Process Name - runtask.exe Process ID - 9940 [04-10-2024 06:39:01] Process Exited: Process Name - conhost.exe Process ID - 10100 [04-10-2024 06:39:01] Process Exited: Process Name - conhost.exe Process ID - 10780 [04-10-2024 06:39:01] Process Exited: Process Name - cmd.exe Process ID - 12872 [04-10-2024 06:39:02] Process Exited: Process Name - conhost.exe Process ID - 5660 [04-10-2024 06:39:02] Process Exited: Process Name - php.exe Process ID - 12632 [04-10-2024 06:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 12960 [04-10-2024 06:39:52] Process Exited: Process Name - w3wp.exe Process ID - 7484 Web application pool name - schoolerp.edtribute.com [04-10-2024 06:39:52] Process Exited: Process Name - conhost.exe Process ID - 9832 [04-10-2024 06:41:02] Process Exited: Process Name - conhost.exe Process ID - 10968 [04-10-2024 06:41:02] Process Exited: Process Name - w3wp.exe Process ID - 12712 Web application pool name - taxtribute.com [04-10-2024 06:41:46] New process found: Process Name - w3wp.exe Process ID - 7032 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:41:46] Process Exited: Process Name - w3wp.exe Process ID - 3592 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:42:17] New process found: Process Name - w3wp.exe Process ID - 924 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 06:43:19] Process Exited: Process Name - conhost.exe Process ID - 11152 [04-10-2024 06:43:19] Process Exited: Process Name - w3wp.exe Process ID - 12036 Web application pool name - kdbps.edu.in [04-10-2024 06:43:35] Process Exited: Process Name - w3wp.exe Process ID - 1804 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 06:44:01] Process Exited: Process Name - conhost.exe Process ID - 832 [04-10-2024 06:44:01] Process Exited: Process Name - w3wp.exe Process ID - 8476 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:44:22] Process Exited: Process Name - w3wp.exe Process ID - 12924 Web application pool name - tools.taxtribute.com [04-10-2024 06:44:37] Process Exited: Process Name - w3wp.exe Process ID - 13220 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:46:00] New process found: Process Name - cmd.exe Process ID - 3028 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:46:00] New process found: Process Name - conhost.exe Process ID - 10100 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:46:00] New process found: Process Name - runtask.exe Process ID - 9940 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:46:00] New process found: Process Name - php.exe Process ID - 12692 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:46:00] New process found: Process Name - conhost.exe Process ID - 11476 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 06:46:01] Process Exited: Process Name - cmd.exe Process ID - 3028 [04-10-2024 06:46:01] Process Exited: Process Name - runtask.exe Process ID - 9940 [04-10-2024 06:46:01] Process Exited: Process Name - conhost.exe Process ID - 10100 [04-10-2024 06:46:01] Process Exited: Process Name - conhost.exe Process ID - 11476 [04-10-2024 06:46:01] Process Exited: Process Name - php.exe Process ID - 12692 [04-10-2024 06:46:38] New process found: Process Name - w3wp.exe Process ID - 11100 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 06:46:38] New process found: Process Name - conhost.exe Process ID - 12188 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9252 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:46:46] New process found: Process Name - w3wp.exe Process ID - 9748 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:46:46] Process Exited: Process Name - w3wp.exe Process ID - 7032 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:46:48] New process found: Process Name - WmiPrvSE.exe Process ID - 7820 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7820 [04-10-2024 06:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9252 [04-10-2024 06:51:17] New process found: Process Name - w3wp.exe Process ID - 4712 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 06:51:17] New process found: Process Name - conhost.exe Process ID - 13288 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 06:51:48] New process found: Process Name - w3wp.exe Process ID - 12392 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:51:48] Process Exited: Process Name - w3wp.exe Process ID - 9748 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:52:03] New process found: Process Name - w3wp.exe Process ID - 12192 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 06:52:15] New process found: Process Name - w3wp.exe Process ID - 9500 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 06:52:40] Process Exited: Process Name - w3wp.exe Process ID - 11100 Web application pool name - kdbps.edu.in [04-10-2024 06:52:40] Process Exited: Process Name - conhost.exe Process ID - 12188 [04-10-2024 06:53:04] New process found: Process Name - w3wp.exe Process ID - 12264 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 06:53:05] New process found: Process Name - conhost.exe Process ID - 2280 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 06:53:19] Process Exited: Process Name - w3wp.exe Process ID - 924 Web application pool name - galaxytools.in [04-10-2024 06:54:08] New process found: Process Name - w3wp.exe Process ID - 10364 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 06:54:08] New process found: Process Name - conhost.exe Process ID - 4544 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 06:54:34] New process found: Process Name - w3wp.exe Process ID - 4732 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:54:34] New process found: Process Name - conhost.exe Process ID - 11316 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 06:54:53] New process found: Process Name - w3wp.exe Process ID - 12324 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 06:54:55] New process found: Process Name - conhost.exe Process ID - 12908 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 06:56:07] New process found: Process Name - w3wp.exe Process ID - 12020 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 06:56:07] New process found: Process Name - where.exe Process ID - 748 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:56:07] New process found: Process Name - conhost.exe Process ID - 12280 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:56:08] New process found: Process Name - conhost.exe Process ID - 736 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 06:56:08] Process Exited: Process Name - where.exe Process ID - 748 [04-10-2024 06:56:08] Process Exited: Process Name - conhost.exe Process ID - 12280 [04-10-2024 06:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9036 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 06:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7152 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 06:56:50] New process found: Process Name - w3wp.exe Process ID - 7420 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:56:50] Process Exited: Process Name - w3wp.exe Process ID - 12392 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 06:56:59] New process found: Process Name - w3wp.exe Process ID - 11516 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 06:56:59] New process found: Process Name - conhost.exe Process ID - 12632 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 06:57:20] Process Exited: Process Name - w3wp.exe Process ID - 4712 Web application pool name - csr.bmvfragrances.com [04-10-2024 06:57:20] Process Exited: Process Name - conhost.exe Process ID - 13288 [04-10-2024 06:57:55] New process found: Process Name - w3wp.exe Process ID - 12704 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 06:57:56] New process found: Process Name - conhost.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 06:58:05] Process Exited: Process Name - w3wp.exe Process ID - 12192 Web application pool name - prathabypriyal.com [04-10-2024 06:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7152 [04-10-2024 06:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9036 [04-10-2024 06:58:17] Process Exited: Process Name - w3wp.exe Process ID - 9500 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 06:59:07] Process Exited: Process Name - conhost.exe Process ID - 2280 [04-10-2024 06:59:07] Process Exited: Process Name - w3wp.exe Process ID - 12264 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 07:00:36] Process Exited: Process Name - w3wp.exe Process ID - 4732 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:00:36] Process Exited: Process Name - conhost.exe Process ID - 11316 [04-10-2024 07:00:55] Process Exited: Process Name - w3wp.exe Process ID - 12324 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 07:00:55] Process Exited: Process Name - conhost.exe Process ID - 12908 [04-10-2024 07:01:05] New process found: Process Name - w3wp.exe Process ID - 9448 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 07:01:05] New process found: Process Name - conhost.exe Process ID - 5772 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 07:01:24] New process found: Process Name - w3wp.exe Process ID - 10660 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:01:24] New process found: Process Name - conhost.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 07:01:49] New process found: Process Name - w3wp.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\IWPD_56(acwits) Web application pool name - cameraonrent.acwits.in(domain)(4.0)(pool) [04-10-2024 07:01:50] New process found: Process Name - w3wp.exe Process ID - 5476 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:01:50] Process Exited: Process Name - w3wp.exe Process ID - 7420 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:03:01] Process Exited: Process Name - w3wp.exe Process ID - 11516 Web application pool name - taxtribute.com [04-10-2024 07:03:01] Process Exited: Process Name - conhost.exe Process ID - 12632 [04-10-2024 07:03:11] Process Exited: Process Name - conhost.exe Process ID - 4544 [04-10-2024 07:03:11] Process Exited: Process Name - w3wp.exe Process ID - 10364 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:03:58] Process Exited: Process Name - conhost.exe Process ID - 176 [04-10-2024 07:03:58] Process Exited: Process Name - w3wp.exe Process ID - 12704 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:04:09] New process found: Process Name - w3wp.exe Process ID - 13304 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 07:04:09] New process found: Process Name - where.exe Process ID - 12580 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:04:09] New process found: Process Name - conhost.exe Process ID - 11176 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:04:09] Process Exited: Process Name - conhost.exe Process ID - 736 [04-10-2024 07:04:09] Process Exited: Process Name - w3wp.exe Process ID - 12020 Web application pool name - kdbps.edu.in [04-10-2024 07:04:10] New process found: Process Name - conhost.exe Process ID - 1444 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:04:10] Process Exited: Process Name - conhost.exe Process ID - 11176 [04-10-2024 07:04:10] Process Exited: Process Name - where.exe Process ID - 12580 [04-10-2024 07:04:45] New process found: Process Name - w3wp.exe Process ID - 7040 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 07:04:52] Process Exited: Process Name - w3wp.exe Process ID - 7204 Web application pool name - DefaultAppPool [04-10-2024 07:04:59] New process found: Process Name - w3wp.exe Process ID - 12372 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:05:01] New process found: Process Name - cmd.exe Process ID - 4000 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:05:01] New process found: Process Name - conhost.exe Process ID - 10184 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:05:01] New process found: Process Name - runtask.exe Process ID - 7468 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:05:01] New process found: Process Name - php.exe Process ID - 3720 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:05:01] New process found: Process Name - conhost.exe Process ID - 11508 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:05:01] New process found: Process Name - conhost.exe Process ID - 1784 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 07:05:06] Process Exited: Process Name - php.exe Process ID - 3720 [04-10-2024 07:05:06] Process Exited: Process Name - cmd.exe Process ID - 4000 [04-10-2024 07:05:06] Process Exited: Process Name - runtask.exe Process ID - 7468 [04-10-2024 07:05:06] Process Exited: Process Name - conhost.exe Process ID - 10184 [04-10-2024 07:05:06] Process Exited: Process Name - conhost.exe Process ID - 11508 [04-10-2024 07:06:32] New process found: Process Name - w3wp.exe Process ID - 13276 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 07:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12828 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7928 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:06:51] New process found: Process Name - w3wp.exe Process ID - 10632 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:06:51] Process Exited: Process Name - w3wp.exe Process ID - 5476 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:07:07] Process Exited: Process Name - conhost.exe Process ID - 5772 [04-10-2024 07:07:07] Process Exited: Process Name - w3wp.exe Process ID - 9448 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 07:07:27] Process Exited: Process Name - w3wp.exe Process ID - 10660 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:07:27] Process Exited: Process Name - conhost.exe Process ID - 12728 [04-10-2024 07:07:33] New process found: Process Name - w3wp.exe Process ID - 11900 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 07:07:51] Process Exited: Process Name - w3wp.exe Process ID - 5304 Web application pool name - cameraonrent.acwits.in(domain)(4.0)(pool) [04-10-2024 07:07:53] New process found: Process Name - w3wp.exe Process ID - 4596 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 07:07:53] New process found: Process Name - conhost.exe Process ID - 10796 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) [04-10-2024 07:08:11] New process found: Process Name - w3wp.exe Process ID - 7872 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 07:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7928 [04-10-2024 07:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12828 [04-10-2024 07:09:21] New process found: Process Name - w3wp.exe Process ID - 11544 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 07:09:21] New process found: Process Name - conhost.exe Process ID - 2880 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 07:09:33] New process found: Process Name - w3wp.exe Process ID - 11256 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 07:09:33] New process found: Process Name - conhost.exe Process ID - 12612 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:10:48] Process Exited: Process Name - w3wp.exe Process ID - 7040 Web application pool name - acme-challenge [04-10-2024 07:11:53] New process found: Process Name - w3wp.exe Process ID - 11152 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:11:53] Process Exited: Process Name - w3wp.exe Process ID - 10632 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:12:34] Process Exited: Process Name - w3wp.exe Process ID - 13276 Web application pool name - DefaultAppPool [04-10-2024 07:13:46] New process found: Process Name - conhost.exe Process ID - 7596 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [04-10-2024 07:13:55] Process Exited: Process Name - w3wp.exe Process ID - 4596 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 07:13:55] Process Exited: Process Name - conhost.exe Process ID - 10796 [04-10-2024 07:14:14] Process Exited: Process Name - w3wp.exe Process ID - 7872 Web application pool name - prathabypriyal.com [04-10-2024 07:15:21] Process Exited: Process Name - conhost.exe Process ID - 2880 [04-10-2024 07:15:21] Process Exited: Process Name - w3wp.exe Process ID - 11544 Web application pool name - csr.bmvfragrances.com [04-10-2024 07:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11460 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10648 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:16:55] New process found: Process Name - w3wp.exe Process ID - 3248 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:16:55] Process Exited: Process Name - w3wp.exe Process ID - 11152 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:17:16] New process found: Process Name - w3wp.exe Process ID - 10548 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 07:18:02] Process Exited: Process Name - conhost.exe Process ID - 1784 [04-10-2024 07:18:02] Process Exited: Process Name - w3wp.exe Process ID - 12372 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10648 [04-10-2024 07:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11460 [04-10-2024 07:19:17] New process found: Process Name - w3wp.exe Process ID - 9620 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:19:34] Process Exited: Process Name - w3wp.exe Process ID - 11256 Web application pool name - taxtribute.com [04-10-2024 07:19:34] Process Exited: Process Name - conhost.exe Process ID - 12612 [04-10-2024 07:19:57] New process found: Process Name - w3wp.exe Process ID - 3964 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 07:19:57] New process found: Process Name - conhost.exe Process ID - 4520 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:20:12] New process found: Process Name - w3wp.exe Process ID - 12880 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 07:20:20] New process found: Process Name - w3wp.exe Process ID - 10188 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:20:20] New process found: Process Name - where.exe Process ID - 9988 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 07:20:20] New process found: Process Name - conhost.exe Process ID - 11672 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 07:20:21] New process found: Process Name - conhost.exe Process ID - 932 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 07:20:21] Process Exited: Process Name - where.exe Process ID - 9988 [04-10-2024 07:20:21] Process Exited: Process Name - conhost.exe Process ID - 11672 [04-10-2024 07:21:55] New process found: Process Name - w3wp.exe Process ID - 11152 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:21:55] Process Exited: Process Name - w3wp.exe Process ID - 3248 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:22:34] Process Exited: Process Name - conhost.exe Process ID - 7596 [04-10-2024 07:22:34] Process Exited: Process Name - w3wp.exe Process ID - 11900 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 07:22:51] New process found: Process Name - w3wp.exe Process ID - 10476 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:22:51] New process found: Process Name - conhost.exe Process ID - 1500 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 07:23:18] Process Exited: Process Name - w3wp.exe Process ID - 10548 Web application pool name - galaxytools.in [04-10-2024 07:23:39] New process found: Process Name - w3wp.exe Process ID - 10312 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 07:25:01] New process found: Process Name - cmd.exe Process ID - 3668 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:01] New process found: Process Name - conhost.exe Process ID - 11544 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:01] New process found: Process Name - runtask.exe Process ID - 3692 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:01] New process found: Process Name - php.exe Process ID - 1564 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:25:01] New process found: Process Name - conhost.exe Process ID - 10060 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:25:04] Process Exited: Process Name - php.exe Process ID - 1564 [04-10-2024 07:25:04] Process Exited: Process Name - cmd.exe Process ID - 3668 [04-10-2024 07:25:04] Process Exited: Process Name - runtask.exe Process ID - 3692 [04-10-2024 07:25:04] Process Exited: Process Name - conhost.exe Process ID - 10060 [04-10-2024 07:25:04] Process Exited: Process Name - conhost.exe Process ID - 11544 [04-10-2024 07:25:19] Process Exited: Process Name - w3wp.exe Process ID - 9620 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:25:50] New process found: Process Name - updater.exe Process ID - 6236 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:50] New process found: Process Name - updater.exe Process ID - 4124 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:50] New process found: Process Name - updater.exe Process ID - 2556 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:50] New process found: Process Name - updater.exe Process ID - 5828 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 6236 Current State - SERVICE_RUNNING [04-10-2024 07:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 2556 Current State - SERVICE_RUNNING [04-10-2024 07:26:00] Process Exited: Process Name - updater.exe Process ID - 2556 [04-10-2024 07:26:00] Process Exited: Process Name - updater.exe Process ID - 4124 [04-10-2024 07:26:00] Process Exited: Process Name - updater.exe Process ID - 5828 [04-10-2024 07:26:00] Process Exited: Process Name - updater.exe Process ID - 6236 [04-10-2024 07:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 07:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 07:26:12] New process found: Process Name - w3wp.exe Process ID - 7040 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:26:12] New process found: Process Name - conhost.exe Process ID - 328 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 07:26:23] Process Exited: Process Name - conhost.exe Process ID - 932 [04-10-2024 07:26:23] Process Exited: Process Name - w3wp.exe Process ID - 10188 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:26:33] New process found: Process Name - w3wp.exe Process ID - 12732 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 07:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10972 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1244 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:26:57] New process found: Process Name - w3wp.exe Process ID - 13032 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:26:57] Process Exited: Process Name - w3wp.exe Process ID - 11152 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:26:58] Process Exited: Process Name - w3wp.exe Process ID - 3964 Web application pool name - taxtribute.com [04-10-2024 07:26:58] Process Exited: Process Name - conhost.exe Process ID - 4520 [04-10-2024 07:27:58] New process found: Process Name - w3wp.exe Process ID - 12284 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:27:59] New process found: Process Name - conhost.exe Process ID - 7204 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 07:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1244 [04-10-2024 07:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10972 [04-10-2024 07:28:53] Process Exited: Process Name - conhost.exe Process ID - 1500 [04-10-2024 07:28:54] Process Exited: Process Name - w3wp.exe Process ID - 10476 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:31:58] New process found: Process Name - w3wp.exe Process ID - 12396 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:31:58] Process Exited: Process Name - w3wp.exe Process ID - 13032 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:32:14] Process Exited: Process Name - conhost.exe Process ID - 328 [04-10-2024 07:32:14] Process Exited: Process Name - w3wp.exe Process ID - 7040 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:34:00] Process Exited: Process Name - conhost.exe Process ID - 7204 [04-10-2024 07:34:00] Process Exited: Process Name - w3wp.exe Process ID - 12284 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 07:35:16] New process found: Process Name - w3wp.exe Process ID - 2332 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:35:16] New process found: Process Name - conhost.exe Process ID - 12712 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 07:35:35] New process found: Process Name - w3wp.exe Process ID - 13236 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 07:36:41] Process Exited: Process Name - w3wp.exe Process ID - 10312 Web application pool name - galaxytools.in [04-10-2024 07:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5704 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 2460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:36:59] New process found: Process Name - w3wp.exe Process ID - 3980 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:36:59] Process Exited: Process Name - w3wp.exe Process ID - 12396 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:37:15] New process found: Process Name - w3wp.exe Process ID - 9500 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2460 [04-10-2024 07:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5704 [04-10-2024 07:38:16] New process found: Process Name - w3wp.exe Process ID - 2872 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 07:38:16] New process found: Process Name - conhost.exe Process ID - 11944 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 07:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 12392 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:01] New process found: Process Name - php.exe Process ID - 13196 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:01] New process found: Process Name - conhost.exe Process ID - 5992 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 11756 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:02] New process found: Process Name - php.exe Process ID - 13084 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:02] New process found: Process Name - conhost.exe Process ID - 1228 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 07:39:02] Process Exited: Process Name - conhost.exe Process ID - 5992 [04-10-2024 07:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 12392 [04-10-2024 07:39:02] Process Exited: Process Name - php.exe Process ID - 13196 [04-10-2024 07:39:03] Process Exited: Process Name - conhost.exe Process ID - 1228 [04-10-2024 07:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 11756 [04-10-2024 07:39:03] Process Exited: Process Name - php.exe Process ID - 13084 [04-10-2024 07:39:08] New process found: Process Name - w3wp.exe Process ID - 9092 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 07:39:12] Process Exited: Process Name - conhost.exe Process ID - 1444 [04-10-2024 07:39:12] Process Exited: Process Name - w3wp.exe Process ID - 13304 Web application pool name - kdbps.edu.in [04-10-2024 07:39:26] New process found: Process Name - w3wp.exe Process ID - 3364 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 07:39:36] Process Exited: Process Name - w3wp.exe Process ID - 12732 Web application pool name - shop.galaxytools.in [04-10-2024 07:39:40] New process found: Process Name - w3wp.exe Process ID - 7084 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 07:40:15] Process Exited: Process Name - w3wp.exe Process ID - 12880 Web application pool name - DefaultAppPool [04-10-2024 07:40:34] New process found: Process Name - w3wp.exe Process ID - 4148 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 07:41:18] Process Exited: Process Name - w3wp.exe Process ID - 2332 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:41:18] Process Exited: Process Name - conhost.exe Process ID - 12712 [04-10-2024 07:41:38] Process Exited: Process Name - w3wp.exe Process ID - 13236 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 07:41:57] New process found: Process Name - w3wp.exe Process ID - 8144 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:41:57] New process found: Process Name - where.exe Process ID - 7204 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 07:41:57] New process found: Process Name - conhost.exe Process ID - 4372 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 07:41:58] New process found: Process Name - conhost.exe Process ID - 13080 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 07:41:58] Process Exited: Process Name - conhost.exe Process ID - 4372 [04-10-2024 07:41:58] Process Exited: Process Name - where.exe Process ID - 7204 [04-10-2024 07:42:00] New process found: Process Name - w3wp.exe Process ID - 12700 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:42:00] Process Exited: Process Name - w3wp.exe Process ID - 3980 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:43:20] New process found: Process Name - w3wp.exe Process ID - 12252 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 07:43:20] New process found: Process Name - where.exe Process ID - 7296 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:43:20] New process found: Process Name - conhost.exe Process ID - 12672 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:43:21] New process found: Process Name - conhost.exe Process ID - 3732 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:43:21] Process Exited: Process Name - where.exe Process ID - 7296 [04-10-2024 07:43:21] Process Exited: Process Name - conhost.exe Process ID - 12672 [04-10-2024 07:44:00] New process found: Process Name - cmd.exe Process ID - 780 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:44:00] New process found: Process Name - conhost.exe Process ID - 12564 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:44:00] New process found: Process Name - runtask.exe Process ID - 12616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:44:00] New process found: Process Name - php.exe Process ID - 6316 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:44:00] New process found: Process Name - conhost.exe Process ID - 4708 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:44:01] Process Exited: Process Name - cmd.exe Process ID - 780 [04-10-2024 07:44:01] Process Exited: Process Name - conhost.exe Process ID - 4708 [04-10-2024 07:44:01] Process Exited: Process Name - php.exe Process ID - 6316 [04-10-2024 07:44:01] Process Exited: Process Name - conhost.exe Process ID - 12564 [04-10-2024 07:44:01] Process Exited: Process Name - runtask.exe Process ID - 12616 [04-10-2024 07:44:17] Process Exited: Process Name - w3wp.exe Process ID - 9500 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:44:18] Process Exited: Process Name - w3wp.exe Process ID - 2872 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 07:44:18] Process Exited: Process Name - conhost.exe Process ID - 11944 [04-10-2024 07:44:36] New process found: Process Name - w3wp.exe Process ID - 4596 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 07:45:10] Process Exited: Process Name - w3wp.exe Process ID - 9092 Web application pool name - adminportal.galaxytools.in [04-10-2024 07:45:28] Process Exited: Process Name - w3wp.exe Process ID - 3364 Web application pool name - prathabypriyal.com [04-10-2024 07:46:01] New process found: Process Name - cmd.exe Process ID - 10880 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:46:01] New process found: Process Name - conhost.exe Process ID - 12468 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:46:01] New process found: Process Name - runtask.exe Process ID - 7268 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:46:01] New process found: Process Name - php.exe Process ID - 7820 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:46:01] New process found: Process Name - conhost.exe Process ID - 9268 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:46:01] Process Exited: Process Name - php-cgi.exe Process ID - 9108 [04-10-2024 07:46:02] Process Exited: Process Name - runtask.exe Process ID - 7268 [04-10-2024 07:46:02] Process Exited: Process Name - php.exe Process ID - 7820 [04-10-2024 07:46:02] Process Exited: Process Name - conhost.exe Process ID - 9268 [04-10-2024 07:46:02] Process Exited: Process Name - cmd.exe Process ID - 10880 [04-10-2024 07:46:02] Process Exited: Process Name - w3wp.exe Process ID - 11392 Web application pool name - PleskControlPanel [04-10-2024 07:46:02] Process Exited: Process Name - conhost.exe Process ID - 12468 [04-10-2024 07:46:06] New process found: Process Name - w3wp.exe Process ID - 12708 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:46:06] New process found: Process Name - conhost.exe Process ID - 13136 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 07:46:36] Process Exited: Process Name - w3wp.exe Process ID - 4148 Web application pool name - DefaultAppPool [04-10-2024 07:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5228 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12960 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:47:02] New process found: Process Name - w3wp.exe Process ID - 352 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:47:02] Process Exited: Process Name - w3wp.exe Process ID - 12700 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:47:42] Process Exited: Process Name - w3wp.exe Process ID - 7084 Web application pool name - galaxytools.in [04-10-2024 07:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5228 [04-10-2024 07:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12960 [04-10-2024 07:48:29] New process found: Process Name - w3wp.exe Process ID - 12768 Process Identity - KSHITIJSINGHAL-\IWPD_12(acwits) Web application pool name - procurementnew.acwits.in(domain)(4.0)(pool) [04-10-2024 07:48:30] New process found: Process Name - conhost.exe Process ID - 8716 Process Identity - KSHITIJSINGHAL-\IWPD_12(acwits) [04-10-2024 07:48:52] New process found: Process Name - w3wp.exe Process ID - 12220 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 07:48:57] New process found: Process Name - w3wp.exe Process ID - 7840 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 07:48:57] New process found: Process Name - where.exe Process ID - 5436 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:48:57] New process found: Process Name - conhost.exe Process ID - 1564 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:48:58] New process found: Process Name - conhost.exe Process ID - 1044 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:48:58] Process Exited: Process Name - conhost.exe Process ID - 1564 [04-10-2024 07:48:58] Process Exited: Process Name - where.exe Process ID - 5436 [04-10-2024 07:49:00] Process Exited: Process Name - w3wp.exe Process ID - 8144 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:49:00] Process Exited: Process Name - conhost.exe Process ID - 13080 [04-10-2024 07:49:23] Process Exited: Process Name - conhost.exe Process ID - 3732 [04-10-2024 07:49:23] Process Exited: Process Name - w3wp.exe Process ID - 12252 Web application pool name - kdbps.edu.in [04-10-2024 07:50:13] New process found: Process Name - w3wp.exe Process ID - 6992 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 07:50:38] Process Exited: Process Name - w3wp.exe Process ID - 4596 Web application pool name - edtribute.com [04-10-2024 07:51:17] New process found: Process Name - w3wp.exe Process ID - 11552 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:51:17] New process found: Process Name - conhost.exe Process ID - 6208 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 07:51:46] New process found: Process Name - w3wp.exe Process ID - 7084 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 07:51:46] New process found: Process Name - php-cgi.exe Process ID - 1872 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 07:52:00] New process found: Process Name - cmd.exe Process ID - 13192 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:52:00] New process found: Process Name - conhost.exe Process ID - 12956 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:52:00] New process found: Process Name - runtask.exe Process ID - 4528 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:52:00] New process found: Process Name - php.exe Process ID - 6832 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:52:00] New process found: Process Name - conhost.exe Process ID - 4492 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 07:52:01] Process Exited: Process Name - conhost.exe Process ID - 4492 [04-10-2024 07:52:01] Process Exited: Process Name - runtask.exe Process ID - 4528 [04-10-2024 07:52:01] Process Exited: Process Name - php.exe Process ID - 6832 [04-10-2024 07:52:01] Process Exited: Process Name - conhost.exe Process ID - 12956 [04-10-2024 07:52:01] Process Exited: Process Name - cmd.exe Process ID - 13192 [04-10-2024 07:52:03] New process found: Process Name - w3wp.exe Process ID - 3812 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:52:03] Process Exited: Process Name - w3wp.exe Process ID - 352 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:52:07] Process Exited: Process Name - w3wp.exe Process ID - 12708 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:52:07] Process Exited: Process Name - conhost.exe Process ID - 13136 [04-10-2024 07:52:32] New process found: Process Name - w3wp.exe Process ID - 5236 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 07:52:32] New process found: Process Name - where.exe Process ID - 11876 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:52:32] New process found: Process Name - conhost.exe Process ID - 10624 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:52:33] New process found: Process Name - conhost.exe Process ID - 12848 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 07:52:33] Process Exited: Process Name - conhost.exe Process ID - 10624 [04-10-2024 07:52:33] Process Exited: Process Name - where.exe Process ID - 11876 [04-10-2024 07:52:55] New process found: Process Name - w3wp.exe Process ID - 2004 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:52:55] New process found: Process Name - conhost.exe Process ID - 11016 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 07:54:31] Process Exited: Process Name - conhost.exe Process ID - 8716 [04-10-2024 07:54:31] Process Exited: Process Name - w3wp.exe Process ID - 12768 Web application pool name - procurementnew.acwits.in(domain)(4.0)(pool) [04-10-2024 07:54:55] Process Exited: Process Name - w3wp.exe Process ID - 12220 Web application pool name - DefaultAppPool [04-10-2024 07:55:00] Process Exited: Process Name - conhost.exe Process ID - 1044 [04-10-2024 07:55:00] Process Exited: Process Name - w3wp.exe Process ID - 7840 Web application pool name - taxtribute.com [04-10-2024 07:56:16] Process Exited: Process Name - w3wp.exe Process ID - 6992 Web application pool name - prathabypriyal.com [04-10-2024 07:56:38] New process found: Process Name - w3wp.exe Process ID - 5360 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 07:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9432 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 07:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12100 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 07:57:04] New process found: Process Name - w3wp.exe Process ID - 4092 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:57:04] Process Exited: Process Name - w3wp.exe Process ID - 3812 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 07:57:19] Process Exited: Process Name - conhost.exe Process ID - 6208 [04-10-2024 07:57:19] Process Exited: Process Name - w3wp.exe Process ID - 11552 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 07:57:51] New process found: Process Name - w3wp.exe Process ID - 4156 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 07:57:51] New process found: Process Name - conhost.exe Process ID - 13108 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 07:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9432 [04-10-2024 07:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12100 [04-10-2024 08:00:38] New process found: Process Name - w3wp.exe Process ID - 5584 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 08:00:57] New process found: Process Name - conhost.exe Process ID - 9628 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 08:01:16] New process found: Process Name - w3wp.exe Process ID - 5984 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:01:17] New process found: Process Name - conhost.exe Process ID - 10200 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 08:02:06] New process found: Process Name - w3wp.exe Process ID - 3284 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:02:06] Process Exited: Process Name - w3wp.exe Process ID - 4092 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:02:12] New process found: Process Name - w3wp.exe Process ID - 10936 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 08:02:41] Process Exited: Process Name - w3wp.exe Process ID - 5360 Web application pool name - galaxytools.in [04-10-2024 08:02:58] Process Exited: Process Name - w3wp.exe Process ID - 2004 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:02:58] Process Exited: Process Name - conhost.exe Process ID - 11016 [04-10-2024 08:05:01] New process found: Process Name - cmd.exe Process ID - 2764 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:05:01] New process found: Process Name - conhost.exe Process ID - 3592 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:05:01] New process found: Process Name - runtask.exe Process ID - 5608 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:05:01] New process found: Process Name - php.exe Process ID - 3632 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:05:01] New process found: Process Name - conhost.exe Process ID - 2736 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:05:04] Process Exited: Process Name - conhost.exe Process ID - 2736 [04-10-2024 08:05:04] Process Exited: Process Name - cmd.exe Process ID - 2764 [04-10-2024 08:05:04] Process Exited: Process Name - conhost.exe Process ID - 3592 [04-10-2024 08:05:04] Process Exited: Process Name - php.exe Process ID - 3632 [04-10-2024 08:05:04] Process Exited: Process Name - runtask.exe Process ID - 5608 [04-10-2024 08:05:56] New process found: Process Name - w3wp.exe Process ID - 11580 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:05:56] New process found: Process Name - conhost.exe Process ID - 10020 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 08:06:40] Process Exited: Process Name - w3wp.exe Process ID - 5584 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 08:06:40] Process Exited: Process Name - conhost.exe Process ID - 9628 [04-10-2024 08:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12636 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11040 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:07:06] New process found: Process Name - w3wp.exe Process ID - 5516 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:07:06] Process Exited: Process Name - w3wp.exe Process ID - 3284 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:07:19] Process Exited: Process Name - w3wp.exe Process ID - 5984 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:07:19] Process Exited: Process Name - conhost.exe Process ID - 10200 [04-10-2024 08:08:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11040 [04-10-2024 08:08:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12636 [04-10-2024 08:08:15] Process Exited: Process Name - w3wp.exe Process ID - 10936 Web application pool name - DefaultAppPool [04-10-2024 08:09:27] New process found: Process Name - w3wp.exe Process ID - 10972 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:09:53] Process Exited: Process Name - w3wp.exe Process ID - 4156 Web application pool name - taxtribute.com [04-10-2024 08:09:53] Process Exited: Process Name - conhost.exe Process ID - 13108 [04-10-2024 08:12:04] New process found: Process Name - w3wp.exe Process ID - 4064 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 08:12:08] New process found: Process Name - w3wp.exe Process ID - 13196 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:12:08] Process Exited: Process Name - w3wp.exe Process ID - 5516 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:12:19] New process found: Process Name - w3wp.exe Process ID - 11904 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 08:12:48] New process found: Process Name - w3wp.exe Process ID - 9480 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 08:12:48] New process found: Process Name - conhost.exe Process ID - 6260 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 08:13:53] New process found: Process Name - conhost.exe Process ID - 2348 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 08:14:07] New process found: Process Name - conhost.exe Process ID - 7308 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [04-10-2024 08:14:59] Process Exited: Process Name - conhost.exe Process ID - 10020 [04-10-2024 08:14:59] Process Exited: Process Name - w3wp.exe Process ID - 11580 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10668 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7144 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:16:49] New process found: Process Name - w3wp.exe Process ID - 1996 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:16:51] New process found: Process Name - conhost.exe Process ID - 7248 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 08:16:58] New process found: Process Name - w3wp.exe Process ID - 4184 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 08:17:39] New process found: Process Name - w3wp.exe Process ID - 8320 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:17:39] New process found: Process Name - conhost.exe Process ID - 9120 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 08:18:06] Process Exited: Process Name - w3wp.exe Process ID - 4064 Web application pool name - DefaultAppPool [04-10-2024 08:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7144 [04-10-2024 08:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10668 [04-10-2024 08:18:25] New process found: Process Name - w3wp.exe Process ID - 8064 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 08:18:25] New process found: Process Name - conhost.exe Process ID - 624 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 08:18:29] Process Exited: Process Name - w3wp.exe Process ID - 10972 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:19:10] New process found: Process Name - w3wp.exe Process ID - 13220 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:19:10] Process Exited: Process Name - conhost.exe Process ID - 7308 [04-10-2024 08:19:10] Process Exited: Process Name - w3wp.exe Process ID - 13196 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:20:50] Process Exited: Process Name - conhost.exe Process ID - 6260 [04-10-2024 08:20:50] Process Exited: Process Name - w3wp.exe Process ID - 9480 Web application pool name - taxtribute.com [04-10-2024 08:22:48] Process Exited: Process Name - php-cgi.exe Process ID - 1872 [04-10-2024 08:22:49] Process Exited: Process Name - w3wp.exe Process ID - 7084 Web application pool name - PleskControlPanel [04-10-2024 08:22:51] Process Exited: Process Name - w3wp.exe Process ID - 1996 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:22:51] Process Exited: Process Name - conhost.exe Process ID - 7248 [04-10-2024 08:23:01] Process Exited: Process Name - w3wp.exe Process ID - 4184 Web application pool name - galaxytools.in [04-10-2024 08:23:20] Process Exited: Process Name - conhost.exe Process ID - 2348 [04-10-2024 08:23:20] Process Exited: Process Name - w3wp.exe Process ID - 11904 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 08:23:40] New process found: Process Name - w3wp.exe Process ID - 8516 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 08:23:41] Process Exited: Process Name - w3wp.exe Process ID - 8320 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:23:41] Process Exited: Process Name - conhost.exe Process ID - 9120 [04-10-2024 08:24:12] New process found: Process Name - w3wp.exe Process ID - 12752 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:24:12] Process Exited: Process Name - w3wp.exe Process ID - 13220 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:24:27] Process Exited: Process Name - conhost.exe Process ID - 624 [04-10-2024 08:24:27] Process Exited: Process Name - w3wp.exe Process ID - 8064 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 08:25:01] New process found: Process Name - cmd.exe Process ID - 11768 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:01] New process found: Process Name - conhost.exe Process ID - 12644 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:01] New process found: Process Name - runtask.exe Process ID - 13052 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:01] New process found: Process Name - php.exe Process ID - 1552 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:25:01] New process found: Process Name - conhost.exe Process ID - 12284 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:25:03] Process Exited: Process Name - php.exe Process ID - 1552 [04-10-2024 08:25:03] Process Exited: Process Name - cmd.exe Process ID - 11768 [04-10-2024 08:25:03] Process Exited: Process Name - conhost.exe Process ID - 12284 [04-10-2024 08:25:03] Process Exited: Process Name - conhost.exe Process ID - 12644 [04-10-2024 08:25:03] Process Exited: Process Name - runtask.exe Process ID - 13052 [04-10-2024 08:25:23] New process found: Process Name - w3wp.exe Process ID - 10424 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 08:25:50] New process found: Process Name - updater.exe Process ID - 2872 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:50] New process found: Process Name - updater.exe Process ID - 12400 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:50] New process found: Process Name - updater.exe Process ID - 9312 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:50] New process found: Process Name - updater.exe Process ID - 11508 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 2872 Current State - SERVICE_RUNNING [04-10-2024 08:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 9312 Current State - SERVICE_RUNNING [04-10-2024 08:26:00] Process Exited: Process Name - updater.exe Process ID - 2872 [04-10-2024 08:26:00] Process Exited: Process Name - updater.exe Process ID - 9312 [04-10-2024 08:26:00] Process Exited: Process Name - updater.exe Process ID - 11508 [04-10-2024 08:26:00] Process Exited: Process Name - updater.exe Process ID - 12400 [04-10-2024 08:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 08:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 08:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11460 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5852 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:27:20] New process found: Process Name - w3wp.exe Process ID - 5876 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 08:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5852 [04-10-2024 08:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11460 [04-10-2024 08:29:12] New process found: Process Name - w3wp.exe Process ID - 5032 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:29:12] Process Exited: Process Name - w3wp.exe Process ID - 12752 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:29:43] Process Exited: Process Name - w3wp.exe Process ID - 8516 Web application pool name - DefaultAppPool [04-10-2024 08:30:07] New process found: Process Name - w3wp.exe Process ID - 3364 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 08:30:08] New process found: Process Name - conhost.exe Process ID - 12308 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 08:30:47] New process found: Process Name - w3wp.exe Process ID - 3356 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 08:31:02] New process found: Process Name - w3wp.exe Process ID - 13144 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 08:31:05] New process found: Process Name - w3wp.exe Process ID - 7304 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 08:31:50] New process found: Process Name - w3wp.exe Process ID - 11892 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:31:50] New process found: Process Name - where.exe Process ID - 11616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 08:31:51] New process found: Process Name - conhost.exe Process ID - 11224 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 08:31:51] Process Exited: Process Name - where.exe Process ID - 11616 [04-10-2024 08:33:23] Process Exited: Process Name - w3wp.exe Process ID - 5876 Web application pool name - shop.galaxytools.in [04-10-2024 08:34:01] New process found: Process Name - w3wp.exe Process ID - 6468 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:34:01] New process found: Process Name - conhost.exe Process ID - 11368 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 08:34:14] New process found: Process Name - w3wp.exe Process ID - 228 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:34:14] Process Exited: Process Name - w3wp.exe Process ID - 5032 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:36:09] Process Exited: Process Name - w3wp.exe Process ID - 3364 Web application pool name - taxtribute.com [04-10-2024 08:36:09] Process Exited: Process Name - conhost.exe Process ID - 12308 [04-10-2024 08:36:24] New process found: Process Name - w3wp.exe Process ID - 12508 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 08:36:24] New process found: Process Name - php-cgi.exe Process ID - 11548 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 08:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11604 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:36:48] New process found: Process Name - WmiPrvSE.exe Process ID - 7772 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:37:08] Process Exited: Process Name - w3wp.exe Process ID - 7304 Web application pool name - edtribute.com [04-10-2024 08:38:04] Process Exited: Process Name - w3wp.exe Process ID - 13144 Web application pool name - acme-challenge [04-10-2024 08:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7772 [04-10-2024 08:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11604 [04-10-2024 08:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 9968 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:01] New process found: Process Name - php.exe Process ID - 8712 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:01] New process found: Process Name - conhost.exe Process ID - 8992 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 1716 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:02] New process found: Process Name - php.exe Process ID - 11964 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:02] New process found: Process Name - conhost.exe Process ID - 12652 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 08:39:02] Process Exited: Process Name - php.exe Process ID - 8712 [04-10-2024 08:39:02] Process Exited: Process Name - conhost.exe Process ID - 8992 [04-10-2024 08:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 9968 [04-10-2024 08:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 1716 [04-10-2024 08:39:03] Process Exited: Process Name - php.exe Process ID - 11964 [04-10-2024 08:39:03] Process Exited: Process Name - conhost.exe Process ID - 12652 [04-10-2024 08:39:15] New process found: Process Name - w3wp.exe Process ID - 7764 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:39:15] Process Exited: Process Name - w3wp.exe Process ID - 228 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:39:25] Process Exited: Process Name - w3wp.exe Process ID - 10424 Web application pool name - galaxytools.in [04-10-2024 08:40:03] Process Exited: Process Name - w3wp.exe Process ID - 6468 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:40:03] Process Exited: Process Name - conhost.exe Process ID - 11368 [04-10-2024 08:43:26] New process found: Process Name - w3wp.exe Process ID - 1736 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 08:43:26] New process found: Process Name - conhost.exe Process ID - 10828 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 08:43:32] New process found: Process Name - w3wp.exe Process ID - 7004 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 08:43:32] New process found: Process Name - conhost.exe Process ID - 12820 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 08:44:00] New process found: Process Name - cmd.exe Process ID - 5228 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:44:00] New process found: Process Name - conhost.exe Process ID - 6304 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:44:00] New process found: Process Name - runtask.exe Process ID - 6840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:44:00] New process found: Process Name - php.exe Process ID - 12652 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:44:00] New process found: Process Name - conhost.exe Process ID - 11964 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 08:44:01] Process Exited: Process Name - cmd.exe Process ID - 5228 [04-10-2024 08:44:01] Process Exited: Process Name - conhost.exe Process ID - 6304 [04-10-2024 08:44:01] Process Exited: Process Name - runtask.exe Process ID - 6840 [04-10-2024 08:44:01] Process Exited: Process Name - conhost.exe Process ID - 11964 [04-10-2024 08:44:01] Process Exited: Process Name - php.exe Process ID - 12652 [04-10-2024 08:44:17] New process found: Process Name - w3wp.exe Process ID - 11568 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:44:17] Process Exited: Process Name - w3wp.exe Process ID - 7764 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:44:53] Process Exited: Process Name - conhost.exe Process ID - 11224 [04-10-2024 08:44:53] Process Exited: Process Name - w3wp.exe Process ID - 11892 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:46:27] New process found: Process Name - w3wp.exe Process ID - 10844 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5584 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12900 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5584 [04-10-2024 08:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12900 [04-10-2024 08:49:17] New process found: Process Name - w3wp.exe Process ID - 7856 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:49:17] Process Exited: Process Name - w3wp.exe Process ID - 11568 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:49:27] Process Exited: Process Name - w3wp.exe Process ID - 1736 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 08:49:27] Process Exited: Process Name - conhost.exe Process ID - 10828 [04-10-2024 08:49:35] Process Exited: Process Name - w3wp.exe Process ID - 7004 Web application pool name - taxtribute.com [04-10-2024 08:49:35] Process Exited: Process Name - conhost.exe Process ID - 12820 [04-10-2024 08:50:22] New process found: Process Name - w3wp.exe Process ID - 9384 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:50:22] New process found: Process Name - conhost.exe Process ID - 12856 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 08:52:29] Process Exited: Process Name - w3wp.exe Process ID - 10844 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:53:48] New process found: Process Name - w3wp.exe Process ID - 13216 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 08:54:02] New process found: Process Name - w3wp.exe Process ID - 9684 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:54:19] New process found: Process Name - w3wp.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:54:19] Process Exited: Process Name - w3wp.exe Process ID - 7856 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:54:45] New process found: Process Name - w3wp.exe Process ID - 10304 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 08:56:25] Process Exited: Process Name - w3wp.exe Process ID - 9384 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 08:56:25] Process Exited: Process Name - conhost.exe Process ID - 12856 [04-10-2024 08:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7868 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 08:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2016 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 08:56:49] Process Exited: Process Name - w3wp.exe Process ID - 3356 Web application pool name - DefaultAppPool [04-10-2024 08:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2016 [04-10-2024 08:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7868 [04-10-2024 08:59:21] New process found: Process Name - w3wp.exe Process ID - 7456 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:59:21] Process Exited: Process Name - w3wp.exe Process ID - 8460 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 08:59:43] New process found: Process Name - w3wp.exe Process ID - 12372 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 08:59:44] New process found: Process Name - conhost.exe Process ID - 9264 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 09:00:01] New process found: Process Name - wacs.exe Process ID - 5196 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:00:01] New process found: Process Name - conhost.exe Process ID - 10496 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:00:01] New process found: Process Name - MpCmdRun.exe Process ID - 2040 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 09:00:02] Process Exited: Process Name - MpCmdRun.exe Process ID - 2040 [04-10-2024 09:00:02] Service state changed: Service Name - wlidsvc Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 09:00:04] Process Exited: Process Name - w3wp.exe Process ID - 9684 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:00:10] Process Exited: Process Name - wacs.exe Process ID - 5196 [04-10-2024 09:00:10] Process Exited: Process Name - conhost.exe Process ID - 10496 [04-10-2024 09:00:38] New process found: Process Name - w3wp.exe Process ID - 12860 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 09:00:47] Process Exited: Process Name - w3wp.exe Process ID - 10304 Web application pool name - galaxytools.in [04-10-2024 09:00:51] Process Exited: Process Name - w3wp.exe Process ID - 13216 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 09:03:03] Service state changed: Service Name - wlidsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 09:04:21] New process found: Process Name - w3wp.exe Process ID - 2268 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:04:21] Process Exited: Process Name - w3wp.exe Process ID - 7456 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:05:00] New process found: Process Name - cmd.exe Process ID - 9696 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:05:00] New process found: Process Name - conhost.exe Process ID - 8460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:05:00] New process found: Process Name - runtask.exe Process ID - 9000 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:05:01] New process found: Process Name - php.exe Process ID - 12652 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:05:01] New process found: Process Name - conhost.exe Process ID - 12260 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:05:02] Process Exited: Process Name - conhost.exe Process ID - 8460 [04-10-2024 09:05:02] Process Exited: Process Name - runtask.exe Process ID - 9000 [04-10-2024 09:05:02] Process Exited: Process Name - cmd.exe Process ID - 9696 [04-10-2024 09:05:02] Process Exited: Process Name - conhost.exe Process ID - 12260 [04-10-2024 09:05:02] Process Exited: Process Name - php.exe Process ID - 12652 [04-10-2024 09:05:31] New process found: Process Name - w3wp.exe Process ID - 2356 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8212 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:06:48] New process found: Process Name - WmiPrvSE.exe Process ID - 3792 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:07:32] New process found: Process Name - w3wp.exe Process ID - 8268 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 09:07:34] New process found: Process Name - w3wp.exe Process ID - 12064 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 09:07:34] New process found: Process Name - where.exe Process ID - 776 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:07:34] New process found: Process Name - conhost.exe Process ID - 7656 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:07:34] Process Exited: Process Name - w3wp.exe Process ID - 5236 Web application pool name - kdbps.edu.in [04-10-2024 09:07:34] Process Exited: Process Name - conhost.exe Process ID - 12848 [04-10-2024 09:07:35] New process found: Process Name - conhost.exe Process ID - 12248 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:07:35] Process Exited: Process Name - where.exe Process ID - 776 [04-10-2024 09:07:35] Process Exited: Process Name - conhost.exe Process ID - 7656 [04-10-2024 09:07:41] New process found: Process Name - w3wp.exe Process ID - 5308 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:07:41] New process found: Process Name - conhost.exe Process ID - 13288 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 09:07:44] New process found: Process Name - w3wp.exe Process ID - 12824 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:07:44] New process found: Process Name - conhost.exe Process ID - 11272 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 09:08:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3792 [04-10-2024 09:08:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8212 [04-10-2024 09:09:23] New process found: Process Name - w3wp.exe Process ID - 6720 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:09:23] Process Exited: Process Name - w3wp.exe Process ID - 2268 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:11:34] Process Exited: Process Name - w3wp.exe Process ID - 2356 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:12:17] New process found: Process Name - w3wp.exe Process ID - 12044 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:12:46] New process found: Process Name - w3wp.exe Process ID - 12208 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:12:46] New process found: Process Name - conhost.exe Process ID - 7392 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 09:13:35] Process Exited: Process Name - w3wp.exe Process ID - 8268 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 09:13:43] New process found: Process Name - w3wp.exe Process ID - 9124 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 09:13:43] New process found: Process Name - where.exe Process ID - 4028 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 09:13:43] New process found: Process Name - conhost.exe Process ID - 11196 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 09:13:43] Process Exited: Process Name - w3wp.exe Process ID - 5308 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:13:43] Process Exited: Process Name - conhost.exe Process ID - 13288 [04-10-2024 09:13:44] New process found: Process Name - conhost.exe Process ID - 4008 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 09:13:44] Process Exited: Process Name - where.exe Process ID - 4028 [04-10-2024 09:13:44] Process Exited: Process Name - conhost.exe Process ID - 11196 [04-10-2024 09:13:45] Process Exited: Process Name - conhost.exe Process ID - 11272 [04-10-2024 09:13:45] Process Exited: Process Name - w3wp.exe Process ID - 12824 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:14:24] New process found: Process Name - w3wp.exe Process ID - 5732 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:14:24] Process Exited: Process Name - w3wp.exe Process ID - 6720 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:15:45] Process Exited: Process Name - conhost.exe Process ID - 9264 [04-10-2024 09:15:45] Process Exited: Process Name - w3wp.exe Process ID - 12372 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:15:51] New process found: Process Name - w3wp.exe Process ID - 8264 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 09:15:51] New process found: Process Name - conhost.exe Process ID - 10840 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 09:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2320 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5968 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:18:00] New process found: Process Name - w3wp.exe Process ID - 3356 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:18:00] New process found: Process Name - conhost.exe Process ID - 13180 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 09:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2320 [04-10-2024 09:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5968 [04-10-2024 09:18:37] Process Exited: Process Name - w3wp.exe Process ID - 12064 Web application pool name - kdbps.edu.in [04-10-2024 09:18:37] Process Exited: Process Name - conhost.exe Process ID - 12248 [04-10-2024 09:18:40] Process Exited: Process Name - w3wp.exe Process ID - 12860 Web application pool name - DefaultAppPool [04-10-2024 09:18:48] Process Exited: Process Name - conhost.exe Process ID - 7392 [04-10-2024 09:18:48] Process Exited: Process Name - w3wp.exe Process ID - 12208 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:19:25] New process found: Process Name - w3wp.exe Process ID - 13104 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:19:25] Process Exited: Process Name - w3wp.exe Process ID - 5732 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:19:41] New process found: Process Name - w3wp.exe Process ID - 12580 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 09:19:54] New process found: Process Name - w3wp.exe Process ID - 12892 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:19:54] New process found: Process Name - conhost.exe Process ID - 9368 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 09:21:01] New process found: Process Name - w3wp.exe Process ID - 9776 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 09:21:01] New process found: Process Name - conhost.exe Process ID - 10012 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:21:52] New process found: Process Name - w3wp.exe Process ID - 3068 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 09:21:52] Process Exited: Process Name - w3wp.exe Process ID - 8264 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 09:21:52] Process Exited: Process Name - conhost.exe Process ID - 10840 [04-10-2024 09:22:45] Process Exited: Process Name - conhost.exe Process ID - 4008 [04-10-2024 09:22:45] Process Exited: Process Name - w3wp.exe Process ID - 9124 Web application pool name - taxtribute.com [04-10-2024 09:23:06] New process found: Process Name - w3wp.exe Process ID - 10316 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:23:06] New process found: Process Name - conhost.exe Process ID - 1996 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 09:23:20] Process Exited: Process Name - w3wp.exe Process ID - 12044 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:24:02] Process Exited: Process Name - w3wp.exe Process ID - 3356 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:24:02] Process Exited: Process Name - conhost.exe Process ID - 13180 [04-10-2024 09:24:27] New process found: Process Name - w3wp.exe Process ID - 12112 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:24:27] Process Exited: Process Name - w3wp.exe Process ID - 13104 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:25:01] New process found: Process Name - cmd.exe Process ID - 13016 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:01] New process found: Process Name - conhost.exe Process ID - 11764 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:01] New process found: Process Name - runtask.exe Process ID - 13172 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:01] New process found: Process Name - php.exe Process ID - 10476 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:25:01] New process found: Process Name - conhost.exe Process ID - 10668 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:25:04] Process Exited: Process Name - php.exe Process ID - 10476 [04-10-2024 09:25:04] Process Exited: Process Name - conhost.exe Process ID - 10668 [04-10-2024 09:25:04] Process Exited: Process Name - conhost.exe Process ID - 11764 [04-10-2024 09:25:04] Process Exited: Process Name - cmd.exe Process ID - 13016 [04-10-2024 09:25:04] Process Exited: Process Name - runtask.exe Process ID - 13172 [04-10-2024 09:25:43] Process Exited: Process Name - w3wp.exe Process ID - 12580 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 09:25:50] New process found: Process Name - updater.exe Process ID - 7300 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:50] New process found: Process Name - updater.exe Process ID - 2600 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:50] New process found: Process Name - updater.exe Process ID - 8460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:50] New process found: Process Name - updater.exe Process ID - 1804 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 7300 Current State - SERVICE_RUNNING [04-10-2024 09:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 8460 Current State - SERVICE_RUNNING [04-10-2024 09:26:00] Process Exited: Process Name - updater.exe Process ID - 1804 [04-10-2024 09:26:00] Process Exited: Process Name - updater.exe Process ID - 2600 [04-10-2024 09:26:00] Process Exited: Process Name - updater.exe Process ID - 7300 [04-10-2024 09:26:00] Process Exited: Process Name - updater.exe Process ID - 8460 [04-10-2024 09:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 09:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 09:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12480 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 13264 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:27:03] Process Exited: Process Name - w3wp.exe Process ID - 9776 Web application pool name - kdbps.edu.in [04-10-2024 09:27:03] Process Exited: Process Name - conhost.exe Process ID - 10012 [04-10-2024 09:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12480 [04-10-2024 09:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13264 [04-10-2024 09:29:05] New process found: Process Name - w3wp.exe Process ID - 424 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 09:29:05] New process found: Process Name - where.exe Process ID - 7996 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:29:05] New process found: Process Name - conhost.exe Process ID - 2056 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:29:06] New process found: Process Name - conhost.exe Process ID - 1480 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:29:06] Process Exited: Process Name - conhost.exe Process ID - 2056 [04-10-2024 09:29:06] Process Exited: Process Name - where.exe Process ID - 7996 [04-10-2024 09:29:08] Process Exited: Process Name - conhost.exe Process ID - 1996 [04-10-2024 09:29:08] Process Exited: Process Name - w3wp.exe Process ID - 10316 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:29:27] New process found: Process Name - w3wp.exe Process ID - 7236 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:29:27] Process Exited: Process Name - w3wp.exe Process ID - 12112 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:29:37] New process found: Process Name - w3wp.exe Process ID - 7912 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 09:29:56] Process Exited: Process Name - conhost.exe Process ID - 9368 [04-10-2024 09:29:56] Process Exited: Process Name - w3wp.exe Process ID - 12892 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:31:44] New process found: Process Name - w3wp.exe Process ID - 12528 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:31:45] New process found: Process Name - conhost.exe Process ID - 12192 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 09:34:29] New process found: Process Name - w3wp.exe Process ID - 7304 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:34:29] Process Exited: Process Name - w3wp.exe Process ID - 7236 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:35:40] Process Exited: Process Name - w3wp.exe Process ID - 7912 Web application pool name - galaxytools.in [04-10-2024 09:36:08] Process Exited: Process Name - w3wp.exe Process ID - 424 Web application pool name - kdbps.edu.in [04-10-2024 09:36:08] Process Exited: Process Name - conhost.exe Process ID - 1480 [04-10-2024 09:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2248 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10104 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2248 [04-10-2024 09:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10104 [04-10-2024 09:38:30] New process found: Process Name - w3wp.exe Process ID - 8656 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 09:38:30] New process found: Process Name - where.exe Process ID - 8516 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:38:30] New process found: Process Name - conhost.exe Process ID - 9020 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:38:31] New process found: Process Name - conhost.exe Process ID - 10264 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 09:38:31] Process Exited: Process Name - where.exe Process ID - 8516 [04-10-2024 09:38:31] Process Exited: Process Name - conhost.exe Process ID - 9020 [04-10-2024 09:39:00] New process found: Process Name - cmd.exe Process ID - 8412 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:39:00] New process found: Process Name - conhost.exe Process ID - 11028 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:39:00] New process found: Process Name - runtask.exe Process ID - 7420 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:39:00] New process found: Process Name - php.exe Process ID - 11676 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:39:00] New process found: Process Name - conhost.exe Process ID - 8356 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 8668 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 09:39:01] New process found: Process Name - php.exe Process ID - 13292 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 09:39:01] New process found: Process Name - conhost.exe Process ID - 11128 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 09:39:01] Process Exited: Process Name - runtask.exe Process ID - 7420 [04-10-2024 09:39:01] Process Exited: Process Name - conhost.exe Process ID - 8356 [04-10-2024 09:39:01] Process Exited: Process Name - cmd.exe Process ID - 8412 [04-10-2024 09:39:01] Process Exited: Process Name - conhost.exe Process ID - 11028 [04-10-2024 09:39:01] Process Exited: Process Name - php.exe Process ID - 11676 [04-10-2024 09:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 8668 [04-10-2024 09:39:02] Process Exited: Process Name - conhost.exe Process ID - 11128 [04-10-2024 09:39:02] Process Exited: Process Name - php.exe Process ID - 13292 [04-10-2024 09:39:27] New process found: Process Name - w3wp.exe Process ID - 11400 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:39:27] New process found: Process Name - where.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 09:39:27] New process found: Process Name - conhost.exe Process ID - 9792 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 09:39:28] New process found: Process Name - conhost.exe Process ID - 10124 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 09:39:28] Process Exited: Process Name - where.exe Process ID - 8460 [04-10-2024 09:39:28] Process Exited: Process Name - conhost.exe Process ID - 9792 [04-10-2024 09:39:30] New process found: Process Name - w3wp.exe Process ID - 4312 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:39:30] Process Exited: Process Name - w3wp.exe Process ID - 7304 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:40:56] New process found: Process Name - w3wp.exe Process ID - 928 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:40:56] New process found: Process Name - conhost.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 09:41:16] New process found: Process Name - w3wp.exe Process ID - 1800 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 09:41:29] New process found: Process Name - w3wp.exe Process ID - 1540 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 09:41:46] New process found: Process Name - w3wp.exe Process ID - 7772 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:41:47] New process found: Process Name - conhost.exe Process ID - 3828 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 09:44:31] New process found: Process Name - w3wp.exe Process ID - 13040 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:44:31] Process Exited: Process Name - w3wp.exe Process ID - 4312 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:44:46] Process Exited: Process Name - conhost.exe Process ID - 12192 [04-10-2024 09:44:46] Process Exited: Process Name - w3wp.exe Process ID - 12528 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:45:30] Process Exited: Process Name - conhost.exe Process ID - 10124 [04-10-2024 09:45:30] Process Exited: Process Name - w3wp.exe Process ID - 11400 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:46:00] New process found: Process Name - cmd.exe Process ID - 11720 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:46:00] New process found: Process Name - conhost.exe Process ID - 2656 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:46:00] New process found: Process Name - runtask.exe Process ID - 12784 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:46:00] New process found: Process Name - php.exe Process ID - 868 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:46:00] New process found: Process Name - conhost.exe Process ID - 1192 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 09:46:01] Process Exited: Process Name - php.exe Process ID - 868 [04-10-2024 09:46:01] Process Exited: Process Name - conhost.exe Process ID - 1192 [04-10-2024 09:46:01] Process Exited: Process Name - conhost.exe Process ID - 2656 [04-10-2024 09:46:01] Process Exited: Process Name - cmd.exe Process ID - 11720 [04-10-2024 09:46:01] Process Exited: Process Name - runtask.exe Process ID - 12784 [04-10-2024 09:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7420 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6392 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:46:56] Process Exited: Process Name - w3wp.exe Process ID - 928 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:46:56] Process Exited: Process Name - conhost.exe Process ID - 12728 [04-10-2024 09:47:49] Process Exited: Process Name - conhost.exe Process ID - 3828 [04-10-2024 09:47:49] Process Exited: Process Name - w3wp.exe Process ID - 7772 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6392 [04-10-2024 09:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7420 [04-10-2024 09:48:16] New process found: Process Name - w3wp.exe Process ID - 1220 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:48:17] New process found: Process Name - conhost.exe Process ID - 776 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 09:49:33] New process found: Process Name - w3wp.exe Process ID - 8292 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:49:33] Process Exited: Process Name - w3wp.exe Process ID - 13040 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:50:19] Process Exited: Process Name - w3wp.exe Process ID - 1800 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 09:50:39] New process found: Process Name - wermgr.exe Process ID - 9504 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:50:40] Process Exited: Process Name - wermgr.exe Process ID - 9504 [04-10-2024 09:54:33] New process found: Process Name - w3wp.exe Process ID - 9940 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:54:33] Process Exited: Process Name - w3wp.exe Process ID - 8292 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:55:55] Process Exited: Process Name - w3wp.exe Process ID - 3068 Web application pool name - DefaultAppPool [04-10-2024 09:56:37] New process found: Process Name - w3wp.exe Process ID - 6928 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 09:56:37] New process found: Process Name - conhost.exe Process ID - 10612 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 09:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1192 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 09:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12792 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 09:57:45] New process found: Process Name - w3wp.exe Process ID - 13252 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 09:57:45] New process found: Process Name - conhost.exe Process ID - 12180 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 09:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1192 [04-10-2024 09:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12792 [04-10-2024 09:59:17] Process Exited: Process Name - conhost.exe Process ID - 776 [04-10-2024 09:59:17] Process Exited: Process Name - w3wp.exe Process ID - 1220 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 09:59:35] New process found: Process Name - w3wp.exe Process ID - 13232 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 09:59:35] Process Exited: Process Name - w3wp.exe Process ID - 9940 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:00:16] New process found: Process Name - w3wp.exe Process ID - 1008 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 10:00:18] New process found: Process Name - conhost.exe Process ID - 12264 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 10:00:22] New process found: Process Name - w3wp.exe Process ID - 10556 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:00:22] New process found: Process Name - conhost.exe Process ID - 6260 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:01:31] Process Exited: Process Name - w3wp.exe Process ID - 1540 Web application pool name - galaxytools.in [04-10-2024 10:02:22] New process found: Process Name - w3wp.exe Process ID - 9504 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:02:23] New process found: Process Name - conhost.exe Process ID - 7916 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 10:02:39] Process Exited: Process Name - w3wp.exe Process ID - 6928 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:02:39] Process Exited: Process Name - conhost.exe Process ID - 10612 [04-10-2024 10:03:29] New process found: Process Name - w3wp.exe Process ID - 10248 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:03:29] New process found: Process Name - conhost.exe Process ID - 13248 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 10:03:47] New process found: Process Name - w3wp.exe Process ID - 5344 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 10:03:47] Process Exited: Process Name - conhost.exe Process ID - 12180 [04-10-2024 10:03:47] Process Exited: Process Name - w3wp.exe Process ID - 13252 Web application pool name - taxtribute.com [04-10-2024 10:04:11] New process found: Process Name - w3wp.exe Process ID - 8728 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 10:04:36] New process found: Process Name - w3wp.exe Process ID - 2016 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:04:36] Process Exited: Process Name - w3wp.exe Process ID - 13232 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:05:01] New process found: Process Name - cmd.exe Process ID - 10552 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:05:01] New process found: Process Name - conhost.exe Process ID - 9320 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:05:01] New process found: Process Name - runtask.exe Process ID - 5292 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:05:01] New process found: Process Name - php.exe Process ID - 8048 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:05:01] New process found: Process Name - conhost.exe Process ID - 4204 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:05:03] Process Exited: Process Name - conhost.exe Process ID - 4204 [04-10-2024 10:05:03] Process Exited: Process Name - runtask.exe Process ID - 5292 [04-10-2024 10:05:03] Process Exited: Process Name - php.exe Process ID - 8048 [04-10-2024 10:05:03] Process Exited: Process Name - conhost.exe Process ID - 9320 [04-10-2024 10:05:03] Process Exited: Process Name - cmd.exe Process ID - 10552 [04-10-2024 10:05:33] Process Exited: Process Name - w3wp.exe Process ID - 8656 Web application pool name - kdbps.edu.in [04-10-2024 10:05:33] Process Exited: Process Name - conhost.exe Process ID - 10264 [04-10-2024 10:06:06] New process found: Process Name - w3wp.exe Process ID - 3380 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 10:06:19] Process Exited: Process Name - w3wp.exe Process ID - 1008 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 10:06:19] Process Exited: Process Name - conhost.exe Process ID - 12264 [04-10-2024 10:06:24] Process Exited: Process Name - conhost.exe Process ID - 6260 [04-10-2024 10:06:24] Process Exited: Process Name - w3wp.exe Process ID - 10556 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5860 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9712 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5860 [04-10-2024 10:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9712 [04-10-2024 10:09:30] Process Exited: Process Name - w3wp.exe Process ID - 10248 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:09:30] Process Exited: Process Name - conhost.exe Process ID - 13248 [04-10-2024 10:09:38] New process found: Process Name - w3wp.exe Process ID - 10348 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:09:38] Process Exited: Process Name - w3wp.exe Process ID - 2016 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:10:00] New process found: Process Name - w3wp.exe Process ID - 4072 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:10:00] New process found: Process Name - conhost.exe Process ID - 10816 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:10:14] Process Exited: Process Name - w3wp.exe Process ID - 8728 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 10:10:25] Process Exited: Process Name - conhost.exe Process ID - 7916 [04-10-2024 10:10:25] Process Exited: Process Name - w3wp.exe Process ID - 9504 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:11:04] New process found: Process Name - w3wp.exe Process ID - 9776 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 10:11:04] New process found: Process Name - conhost.exe Process ID - 11552 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 10:16:41] New process found: Process Name - w3wp.exe Process ID - 5832 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 10:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7536 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:16:48] New process found: Process Name - WmiPrvSE.exe Process ID - 12944 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:16:49] New process found: Process Name - w3wp.exe Process ID - 10508 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:16:49] New process found: Process Name - conhost.exe Process ID - 9680 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 10:17:01] Process Exited: Process Name - w3wp.exe Process ID - 4072 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:17:01] Process Exited: Process Name - conhost.exe Process ID - 10816 [04-10-2024 10:17:33] New process found: Process Name - w3wp.exe Process ID - 688 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:17:33] New process found: Process Name - where.exe Process ID - 2040 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 10:17:33] New process found: Process Name - conhost.exe Process ID - 780 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 10:17:34] New process found: Process Name - conhost.exe Process ID - 12592 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 10:17:34] Process Exited: Process Name - conhost.exe Process ID - 780 [04-10-2024 10:17:34] Process Exited: Process Name - where.exe Process ID - 2040 [04-10-2024 10:17:40] New process found: Process Name - w3wp.exe Process ID - 9864 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:17:40] Process Exited: Process Name - w3wp.exe Process ID - 10348 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7536 [04-10-2024 10:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12944 [04-10-2024 10:19:54] New process found: Process Name - w3wp.exe Process ID - 12492 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 10:20:33] New process found: Process Name - w3wp.exe Process ID - 5808 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 10:20:33] New process found: Process Name - conhost.exe Process ID - 6312 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 10:21:54] New process found: Process Name - w3wp.exe Process ID - 2356 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 10:21:54] New process found: Process Name - conhost.exe Process ID - 11168 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 10:22:41] New process found: Process Name - w3wp.exe Process ID - 11896 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:22:41] Process Exited: Process Name - w3wp.exe Process ID - 9864 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:22:44] Process Exited: Process Name - w3wp.exe Process ID - 5832 Web application pool name - shop.galaxytools.in [04-10-2024 10:22:49] Process Exited: Process Name - w3wp.exe Process ID - 5344 Web application pool name - galaxytools.in [04-10-2024 10:22:52] Process Exited: Process Name - conhost.exe Process ID - 9680 [04-10-2024 10:22:52] Process Exited: Process Name - w3wp.exe Process ID - 10508 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:22:56] New process found: Process Name - w3wp.exe Process ID - 10640 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 10:23:35] Process Exited: Process Name - w3wp.exe Process ID - 688 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:23:35] Process Exited: Process Name - conhost.exe Process ID - 12592 [04-10-2024 10:24:08] Process Exited: Process Name - w3wp.exe Process ID - 3380 Web application pool name - DefaultAppPool [04-10-2024 10:24:32] New process found: Process Name - w3wp.exe Process ID - 4296 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:24:32] New process found: Process Name - conhost.exe Process ID - 6772 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 10:24:52] New process found: Process Name - w3wp.exe Process ID - 188 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 10:25:01] New process found: Process Name - cmd.exe Process ID - 9000 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:01] New process found: Process Name - conhost.exe Process ID - 11716 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:01] New process found: Process Name - runtask.exe Process ID - 12440 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:01] New process found: Process Name - php.exe Process ID - 12200 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:25:01] New process found: Process Name - conhost.exe Process ID - 1692 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:25:04] Process Exited: Process Name - conhost.exe Process ID - 1692 [04-10-2024 10:25:04] Process Exited: Process Name - cmd.exe Process ID - 9000 [04-10-2024 10:25:04] Process Exited: Process Name - conhost.exe Process ID - 11716 [04-10-2024 10:25:04] Process Exited: Process Name - php.exe Process ID - 12200 [04-10-2024 10:25:04] Process Exited: Process Name - runtask.exe Process ID - 12440 [04-10-2024 10:25:49] New process found: Process Name - w3wp.exe Process ID - 11400 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 10:25:50] New process found: Process Name - conhost.exe Process ID - 5116 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 11088 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 11104 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 9680 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 11384 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 6688 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] New process found: Process Name - updater.exe Process ID - 11316 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 9680 Current State - SERVICE_RUNNING [04-10-2024 10:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 6688 Current State - SERVICE_RUNNING [04-10-2024 10:25:57] Process Exited: Process Name - w3wp.exe Process ID - 12492 Web application pool name - prathabypriyal.com [04-10-2024 10:26:13] New process found: Process Name - w3wp.exe Process ID - 8048 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 10:26:34] Process Exited: Process Name - w3wp.exe Process ID - 5808 Web application pool name - schoolerp.edtribute.com [04-10-2024 10:26:34] Process Exited: Process Name - conhost.exe Process ID - 6312 [04-10-2024 10:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1688 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:27:02] New process found: Process Name - w3wp.exe Process ID - 6488 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:27:21] New process found: Process Name - w3wp.exe Process ID - 12608 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 10:27:21] New process found: Process Name - conhost.exe Process ID - 12192 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 10:27:26] Process Exited: Process Name - updater.exe Process ID - 11088 [04-10-2024 10:27:26] Process Exited: Process Name - updater.exe Process ID - 11104 [04-10-2024 10:27:36] Process Exited: Process Name - updater.exe Process ID - 6688 [04-10-2024 10:27:36] Process Exited: Process Name - updater.exe Process ID - 9680 [04-10-2024 10:27:36] Process Exited: Process Name - updater.exe Process ID - 11316 [04-10-2024 10:27:36] Process Exited: Process Name - updater.exe Process ID - 11384 [04-10-2024 10:27:36] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 10:27:36] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 10:27:42] New process found: Process Name - w3wp.exe Process ID - 8000 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:27:42] Process Exited: Process Name - w3wp.exe Process ID - 11896 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:27:57] Process Exited: Process Name - w3wp.exe Process ID - 2356 Web application pool name - taxtribute.com [04-10-2024 10:27:57] Process Exited: Process Name - conhost.exe Process ID - 11168 [04-10-2024 10:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1688 [04-10-2024 10:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11532 [04-10-2024 10:28:59] Process Exited: Process Name - w3wp.exe Process ID - 10640 Web application pool name - adminportal.galaxytools.in [04-10-2024 10:31:54] New process found: Process Name - w3wp.exe Process ID - 11368 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 10:31:54] New process found: Process Name - conhost.exe Process ID - 2560 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 10:32:44] New process found: Process Name - w3wp.exe Process ID - 9720 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:32:44] Process Exited: Process Name - w3wp.exe Process ID - 8000 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:33:05] Process Exited: Process Name - w3wp.exe Process ID - 6488 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:33:09] New process found: Process Name - w3wp.exe Process ID - 932 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 10:33:23] Process Exited: Process Name - conhost.exe Process ID - 12192 [04-10-2024 10:33:23] Process Exited: Process Name - w3wp.exe Process ID - 12608 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 10:33:33] Process Exited: Process Name - w3wp.exe Process ID - 4296 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:33:33] Process Exited: Process Name - conhost.exe Process ID - 6772 [04-10-2024 10:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 452 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9808 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:37:44] New process found: Process Name - w3wp.exe Process ID - 11564 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 10:37:45] New process found: Process Name - w3wp.exe Process ID - 10892 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:37:45] Process Exited: Process Name - w3wp.exe Process ID - 9720 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:37:54] Process Exited: Process Name - w3wp.exe Process ID - 188 Web application pool name - DefaultAppPool [04-10-2024 10:37:55] Process Exited: Process Name - conhost.exe Process ID - 2560 [04-10-2024 10:37:55] Process Exited: Process Name - w3wp.exe Process ID - 11368 Web application pool name - csr.bmvfragrances.com [04-10-2024 10:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 452 [04-10-2024 10:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9808 [04-10-2024 10:39:01] New process found: Process Name - cmd.exe Process ID - 5716 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:39:01] New process found: Process Name - conhost.exe Process ID - 11560 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:39:01] New process found: Process Name - runtask.exe Process ID - 7456 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:39:01] New process found: Process Name - php.exe Process ID - 12568 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:39:01] New process found: Process Name - conhost.exe Process ID - 12444 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 9804 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 10:39:02] New process found: Process Name - php.exe Process ID - 4376 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 10:39:02] New process found: Process Name - conhost.exe Process ID - 7420 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 10:39:02] Process Exited: Process Name - cmd.exe Process ID - 5716 [04-10-2024 10:39:02] Process Exited: Process Name - runtask.exe Process ID - 7456 [04-10-2024 10:39:02] Process Exited: Process Name - conhost.exe Process ID - 11560 [04-10-2024 10:39:02] Process Exited: Process Name - conhost.exe Process ID - 12444 [04-10-2024 10:39:02] Process Exited: Process Name - php.exe Process ID - 12568 [04-10-2024 10:39:03] Process Exited: Process Name - php.exe Process ID - 4376 [04-10-2024 10:39:03] Process Exited: Process Name - conhost.exe Process ID - 7420 [04-10-2024 10:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 9804 [04-10-2024 10:39:11] Process Exited: Process Name - w3wp.exe Process ID - 932 Web application pool name - edtribute.com [04-10-2024 10:40:20] New process found: Process Name - w3wp.exe Process ID - 10780 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:40:20] New process found: Process Name - conhost.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 10:42:46] New process found: Process Name - w3wp.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:42:46] Process Exited: Process Name - w3wp.exe Process ID - 10892 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:43:47] Process Exited: Process Name - w3wp.exe Process ID - 11564 Web application pool name - shop.galaxytools.in [04-10-2024 10:44:00] New process found: Process Name - cmd.exe Process ID - 3588 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:44:00] New process found: Process Name - conhost.exe Process ID - 11512 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:44:00] New process found: Process Name - runtask.exe Process ID - 9132 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:44:00] New process found: Process Name - php.exe Process ID - 10956 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:44:00] New process found: Process Name - conhost.exe Process ID - 9796 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:44:01] Process Exited: Process Name - cmd.exe Process ID - 3588 [04-10-2024 10:44:01] Process Exited: Process Name - runtask.exe Process ID - 9132 [04-10-2024 10:44:01] Process Exited: Process Name - conhost.exe Process ID - 9796 [04-10-2024 10:44:01] Process Exited: Process Name - php.exe Process ID - 10956 [04-10-2024 10:44:01] Process Exited: Process Name - conhost.exe Process ID - 11512 [04-10-2024 10:44:15] Process Exited: Process Name - w3wp.exe Process ID - 8048 Web application pool name - galaxytools.in [04-10-2024 10:44:52] New process found: Process Name - w3wp.exe Process ID - 9412 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 10:45:15] New process found: Process Name - w3wp.exe Process ID - 11140 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:45:15] New process found: Process Name - where.exe Process ID - 6072 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:45:15] New process found: Process Name - conhost.exe Process ID - 12156 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:45:16] New process found: Process Name - conhost.exe Process ID - 10884 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:45:16] Process Exited: Process Name - where.exe Process ID - 6072 [04-10-2024 10:45:16] Process Exited: Process Name - conhost.exe Process ID - 12156 [04-10-2024 10:45:20] New process found: Process Name - conhost.exe Process ID - 9212 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [04-10-2024 10:46:01] New process found: Process Name - cmd.exe Process ID - 12888 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:46:01] New process found: Process Name - conhost.exe Process ID - 8696 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:46:01] New process found: Process Name - runtask.exe Process ID - 12292 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:46:01] New process found: Process Name - php.exe Process ID - 3616 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:46:01] New process found: Process Name - conhost.exe Process ID - 10304 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:46:02] Process Exited: Process Name - php.exe Process ID - 3616 [04-10-2024 10:46:02] Process Exited: Process Name - conhost.exe Process ID - 8696 [04-10-2024 10:46:02] Process Exited: Process Name - conhost.exe Process ID - 10304 [04-10-2024 10:46:02] Process Exited: Process Name - runtask.exe Process ID - 12292 [04-10-2024 10:46:02] Process Exited: Process Name - cmd.exe Process ID - 12888 [04-10-2024 10:46:12] New process found: Process Name - w3wp.exe Process ID - 5860 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 10:46:22] Process Exited: Process Name - conhost.exe Process ID - 8564 [04-10-2024 10:46:22] Process Exited: Process Name - w3wp.exe Process ID - 10780 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7992 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4480 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:47:07] New process found: Process Name - w3wp.exe Process ID - 11016 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 10:47:07] New process found: Process Name - where.exe Process ID - 12284 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 10:47:07] New process found: Process Name - conhost.exe Process ID - 9280 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 10:47:08] New process found: Process Name - conhost.exe Process ID - 1552 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 10:47:08] Process Exited: Process Name - conhost.exe Process ID - 9280 [04-10-2024 10:47:08] Process Exited: Process Name - where.exe Process ID - 12284 [04-10-2024 10:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4480 [04-10-2024 10:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7992 [04-10-2024 10:49:07] New process found: Process Name - w3wp.exe Process ID - 12552 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 10:49:07] New process found: Process Name - conhost.exe Process ID - 12140 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 10:49:49] New process found: Process Name - w3wp.exe Process ID - 5676 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:49:49] New process found: Process Name - conhost.exe Process ID - 12492 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 10:50:48] New process found: Process Name - w3wp.exe Process ID - 748 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:50:48] Process Exited: Process Name - w3wp.exe Process ID - 5304 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:50:48] Process Exited: Process Name - conhost.exe Process ID - 9212 [04-10-2024 10:51:16] Process Exited: Process Name - conhost.exe Process ID - 10884 [04-10-2024 10:51:16] Process Exited: Process Name - w3wp.exe Process ID - 11140 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:52:01] New process found: Process Name - cmd.exe Process ID - 12692 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:52:01] New process found: Process Name - conhost.exe Process ID - 1616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:52:01] New process found: Process Name - runtask.exe Process ID - 10776 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:52:01] New process found: Process Name - php.exe Process ID - 6928 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:52:01] New process found: Process Name - conhost.exe Process ID - 12836 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 10:52:02] Process Exited: Process Name - conhost.exe Process ID - 1616 [04-10-2024 10:52:02] Process Exited: Process Name - php.exe Process ID - 6928 [04-10-2024 10:52:02] Process Exited: Process Name - runtask.exe Process ID - 10776 [04-10-2024 10:52:02] Process Exited: Process Name - cmd.exe Process ID - 12692 [04-10-2024 10:52:02] Process Exited: Process Name - conhost.exe Process ID - 12836 [04-10-2024 10:54:23] New process found: Process Name - w3wp.exe Process ID - 3160 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 10:54:23] New process found: Process Name - where.exe Process ID - 13244 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 10:54:23] New process found: Process Name - conhost.exe Process ID - 11132 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 10:54:24] New process found: Process Name - conhost.exe Process ID - 9948 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 10:54:24] Process Exited: Process Name - conhost.exe Process ID - 11132 [04-10-2024 10:54:24] Process Exited: Process Name - where.exe Process ID - 13244 [04-10-2024 10:55:10] Process Exited: Process Name - conhost.exe Process ID - 12140 [04-10-2024 10:55:10] Process Exited: Process Name - w3wp.exe Process ID - 12552 Web application pool name - taxtribute.com [04-10-2024 10:55:43] New process found: Process Name - w3wp.exe Process ID - 12344 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:55:50] New process found: Process Name - w3wp.exe Process ID - 3628 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:55:50] Process Exited: Process Name - w3wp.exe Process ID - 748 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 10:55:51] Process Exited: Process Name - w3wp.exe Process ID - 5676 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:55:51] Process Exited: Process Name - conhost.exe Process ID - 12492 [04-10-2024 10:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10556 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 10:56:47] New process found: Process Name - w3wp.exe Process ID - 11176 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 10:56:47] New process found: Process Name - conhost.exe Process ID - 448 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 10:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10396 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 10:57:13] New process found: Process Name - w3wp.exe Process ID - 13296 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 10:57:14] New process found: Process Name - conhost.exe Process ID - 360 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 10:57:45] New process found: Process Name - w3wp.exe Process ID - 1444 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 10:57:45] New process found: Process Name - conhost.exe Process ID - 8564 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 10:57:51] Process Exited: Process Name - conhost.exe Process ID - 5116 [04-10-2024 10:57:51] Process Exited: Process Name - w3wp.exe Process ID - 11400 Web application pool name - pnacademy.acwits.in [04-10-2024 10:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10396 [04-10-2024 10:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10556 [04-10-2024 10:58:55] Process Exited: Process Name - w3wp.exe Process ID - 9412 Web application pool name - DefaultAppPool [04-10-2024 11:00:04] New process found: Process Name - InstallAgent.exe Process ID - 9832 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 11:00:04] New process found: Process Name - InstallAgent.exe Process ID - 7184 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 11:00:09] Process Exited: Process Name - InstallAgent.exe Process ID - 7184 [04-10-2024 11:00:09] Process Exited: Process Name - InstallAgent.exe Process ID - 9832 [04-10-2024 11:00:15] Process Exited: Process Name - w3wp.exe Process ID - 5860 Web application pool name - galaxytools.in [04-10-2024 11:00:51] New process found: Process Name - w3wp.exe Process ID - 1068 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:00:51] Process Exited: Process Name - w3wp.exe Process ID - 3628 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:01:26] Process Exited: Process Name - w3wp.exe Process ID - 3160 Web application pool name - schoolerp.edtribute.com [04-10-2024 11:01:26] Process Exited: Process Name - conhost.exe Process ID - 9948 [04-10-2024 11:01:48] New process found: Process Name - w3wp.exe Process ID - 9472 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 11:01:56] New process found: Process Name - MpCmdRun.exe Process ID - 6668 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 11:01:56] New process found: Process Name - MpCmdRun.exe Process ID - 4072 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:01:56] New process found: Process Name - conhost.exe Process ID - 7532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:01:56] New process found: Process Name - MpCmdRun.exe Process ID - 12260 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 11:01:56] Process Exited: Process Name - MpCmdRun.exe Process ID - 11188 [04-10-2024 11:01:56] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 11:02:07] Service state changed: Service Name - BITS Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 11:02:45] Process Exited: Process Name - w3wp.exe Process ID - 12344 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:02:49] Process Exited: Process Name - conhost.exe Process ID - 448 [04-10-2024 11:02:49] Process Exited: Process Name - w3wp.exe Process ID - 11176 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:02:50] New process found: Process Name - w3wp.exe Process ID - 10924 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 11:03:14] Process Exited: Process Name - conhost.exe Process ID - 360 [04-10-2024 11:03:14] Process Exited: Process Name - w3wp.exe Process ID - 13296 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 11:03:19] New process found: Process Name - wuauclt.exe Process ID - 12284 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:03:19] New process found: Process Name - AM_Delta_Patch_1.419.322.0.exe Process ID - 6960 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:03:19] New process found: Process Name - MpSigStub.exe Process ID - 11856 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:03:30] Process Exited: Process Name - MpCmdRun.exe Process ID - 4072 [04-10-2024 11:03:30] Process Exited: Process Name - MpCmdRun.exe Process ID - 6668 [04-10-2024 11:03:30] Process Exited: Process Name - AM_Delta_Patch_1.419.322.0.exe Process ID - 6960 [04-10-2024 11:03:30] Process Exited: Process Name - conhost.exe Process ID - 7532 [04-10-2024 11:03:30] Process Exited: Process Name - MpSigStub.exe Process ID - 11856 [04-10-2024 11:03:30] Process Exited: Process Name - wuauclt.exe Process ID - 12284 [04-10-2024 11:03:47] Process Exited: Process Name - w3wp.exe Process ID - 1444 Web application pool name - taxtribute.com [04-10-2024 11:03:47] Process Exited: Process Name - conhost.exe Process ID - 8564 [04-10-2024 11:05:01] New process found: Process Name - cmd.exe Process ID - 11912 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:05:01] New process found: Process Name - conhost.exe Process ID - 12608 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:05:01] New process found: Process Name - runtask.exe Process ID - 6928 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:05:01] New process found: Process Name - php.exe Process ID - 6216 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:05:01] New process found: Process Name - conhost.exe Process ID - 12804 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:05:10] Process Exited: Process Name - conhost.exe Process ID - 1552 [04-10-2024 11:05:10] Process Exited: Process Name - w3wp.exe Process ID - 11016 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:05:14] New process found: Process Name - w3wp.exe Process ID - 344 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 11:05:23] Process Exited: Process Name - php.exe Process ID - 6216 [04-10-2024 11:05:23] Process Exited: Process Name - runtask.exe Process ID - 6928 [04-10-2024 11:05:23] Process Exited: Process Name - cmd.exe Process ID - 11912 [04-10-2024 11:05:23] Process Exited: Process Name - conhost.exe Process ID - 12608 [04-10-2024 11:05:23] Process Exited: Process Name - conhost.exe Process ID - 12804 [04-10-2024 11:05:23] Service state changed: Service Name - BITS Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 11:05:34] New process found: Process Name - w3wp.exe Process ID - 10120 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:05:34] New process found: Process Name - conhost.exe Process ID - 9948 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 11:05:53] New process found: Process Name - w3wp.exe Process ID - 12700 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:05:53] Process Exited: Process Name - w3wp.exe Process ID - 1068 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:06:18] New process found: Process Name - w3wp.exe Process ID - 12644 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:06:18] New process found: Process Name - conhost.exe Process ID - 11720 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 11:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9844 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:06:50] New process found: Process Name - WmiPrvSE.exe Process ID - 1480 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:07:47] New process found: Process Name - w3wp.exe Process ID - 3068 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 11:07:47] New process found: Process Name - conhost.exe Process ID - 9140 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:08:34] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1480 [04-10-2024 11:08:34] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9844 [04-10-2024 11:10:19] New process found: Process Name - w3wp.exe Process ID - 7996 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 11:10:19] New process found: Process Name - conhost.exe Process ID - 10780 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 11:10:53] New process found: Process Name - w3wp.exe Process ID - 10404 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:10:53] Process Exited: Process Name - w3wp.exe Process ID - 12700 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:11:16] Process Exited: Process Name - w3wp.exe Process ID - 344 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 11:12:51] Process Exited: Process Name - w3wp.exe Process ID - 9472 Web application pool name - galaxytools.in [04-10-2024 11:13:04] New process found: Process Name - w3wp.exe Process ID - 5620 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 11:13:37] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 11:13:49] Process Exited: Process Name - w3wp.exe Process ID - 3068 Web application pool name - taxtribute.com [04-10-2024 11:13:49] Process Exited: Process Name - conhost.exe Process ID - 9140 [04-10-2024 11:14:20] Process Exited: Process Name - conhost.exe Process ID - 11720 [04-10-2024 11:14:20] Process Exited: Process Name - w3wp.exe Process ID - 12644 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:15:36] Process Exited: Process Name - conhost.exe Process ID - 9948 [04-10-2024 11:15:36] Process Exited: Process Name - w3wp.exe Process ID - 10120 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:15:44] New process found: Process Name - w3wp.exe Process ID - 2308 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:15:50] New process found: Process Name - w3wp.exe Process ID - 6772 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:15:50] New process found: Process Name - conhost.exe Process ID - 13016 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 11:15:54] New process found: Process Name - w3wp.exe Process ID - 7184 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:15:54] Process Exited: Process Name - w3wp.exe Process ID - 10404 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:16:11] New process found: Process Name - w3wp.exe Process ID - 8636 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:16:11] New process found: Process Name - conhost.exe Process ID - 5960 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 11:16:21] Process Exited: Process Name - w3wp.exe Process ID - 7996 Web application pool name - schoolerp.edtribute.com [04-10-2024 11:16:21] Process Exited: Process Name - conhost.exe Process ID - 10780 [04-10-2024 11:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5908 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10964 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:18:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5908 [04-10-2024 11:18:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10964 [04-10-2024 11:19:08] New process found: Process Name - w3wp.exe Process ID - 9704 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 11:19:08] New process found: Process Name - conhost.exe Process ID - 8596 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:19:26] New process found: Process Name - w3wp.exe Process ID - 2360 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 11:19:26] New process found: Process Name - where.exe Process ID - 10656 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 11:19:26] New process found: Process Name - conhost.exe Process ID - 12188 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 11:19:27] New process found: Process Name - conhost.exe Process ID - 9072 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 11:19:27] Process Exited: Process Name - where.exe Process ID - 10656 [04-10-2024 11:19:27] Process Exited: Process Name - conhost.exe Process ID - 12188 [04-10-2024 11:20:56] New process found: Process Name - w3wp.exe Process ID - 3720 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:20:56] Process Exited: Process Name - w3wp.exe Process ID - 7184 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:21:47] Process Exited: Process Name - w3wp.exe Process ID - 2308 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:21:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 7884 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:21:48] New process found: Process Name - SearchFilterHost.exe Process ID - 8740 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:21:52] Process Exited: Process Name - w3wp.exe Process ID - 6772 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:21:52] Process Exited: Process Name - conhost.exe Process ID - 13016 [04-10-2024 11:22:06] Process Exited: Process Name - w3wp.exe Process ID - 5620 Web application pool name - galaxytools.in [04-10-2024 11:23:33] New process found: Process Name - w3wp.exe Process ID - 11092 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:23:33] New process found: Process Name - conhost.exe Process ID - 1008 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 11:24:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 7884 [04-10-2024 11:24:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 8740 [04-10-2024 11:24:46] New process found: Process Name - w3wp.exe Process ID - 5936 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:24:47] New process found: Process Name - conhost.exe Process ID - 12056 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 11:25:00] New process found: Process Name - cmd.exe Process ID - 7392 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:00] New process found: Process Name - conhost.exe Process ID - 13172 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:00] New process found: Process Name - runtask.exe Process ID - 9392 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:00] New process found: Process Name - php.exe Process ID - 956 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:25:00] New process found: Process Name - conhost.exe Process ID - 6816 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:25:08] Process Exited: Process Name - conhost.exe Process ID - 8596 [04-10-2024 11:25:08] Process Exited: Process Name - w3wp.exe Process ID - 9704 Web application pool name - taxtribute.com [04-10-2024 11:25:13] Process Exited: Process Name - php.exe Process ID - 956 [04-10-2024 11:25:13] Process Exited: Process Name - conhost.exe Process ID - 6816 [04-10-2024 11:25:13] Process Exited: Process Name - cmd.exe Process ID - 7392 [04-10-2024 11:25:13] Process Exited: Process Name - runtask.exe Process ID - 9392 [04-10-2024 11:25:13] Process Exited: Process Name - conhost.exe Process ID - 13172 [04-10-2024 11:25:19] New process found: Process Name - w3wp.exe Process ID - 10648 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 11:25:20] New process found: Process Name - where.exe Process ID - 9220 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 11:25:20] New process found: Process Name - conhost.exe Process ID - 9860 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 11:25:21] New process found: Process Name - conhost.exe Process ID - 5648 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 11:25:21] Process Exited: Process Name - where.exe Process ID - 9220 [04-10-2024 11:25:21] Process Exited: Process Name - conhost.exe Process ID - 9860 [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 11324 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 5820 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 8840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 13040 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 4512 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] New process found: Process Name - updater.exe Process ID - 9592 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 8840 Current State - SERVICE_RUNNING [04-10-2024 11:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 4512 Current State - SERVICE_RUNNING [04-10-2024 11:25:51] Process Exited: Process Name - updater.exe Process ID - 5820 [04-10-2024 11:25:51] Process Exited: Process Name - updater.exe Process ID - 11324 [04-10-2024 11:25:57] New process found: Process Name - w3wp.exe Process ID - 12992 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:25:57] Process Exited: Process Name - w3wp.exe Process ID - 3720 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:26:00] Process Exited: Process Name - updater.exe Process ID - 4512 [04-10-2024 11:26:00] Process Exited: Process Name - updater.exe Process ID - 8840 [04-10-2024 11:26:00] Process Exited: Process Name - updater.exe Process ID - 9592 [04-10-2024 11:26:00] Process Exited: Process Name - updater.exe Process ID - 13040 [04-10-2024 11:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 11:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 11:26:26] New process found: Process Name - taskhostw.exe Process ID - 7884 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 11:26:26] New process found: Process Name - sppsvc.exe Process ID - 12564 Process Identity - SYSTEM [04-10-2024 11:26:26] Service state changed: Service Name - sppsvc Process ID - 12564 Current State - SERVICE_RUNNING [04-10-2024 11:26:27] Process Exited: Process Name - taskhostw.exe Process ID - 7884 [04-10-2024 11:26:42] New process found: Process Name - SppExtComObj.Exe Process ID - 176 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 11:26:42] New process found: Process Name - slui.exe Process ID - 6996 Process Identity - NT AUTHORITY\NETWORK SERVICE [04-10-2024 11:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10232 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:26:44] Process Exited: Process Name - slui.exe Process ID - 6996 [04-10-2024 11:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5372 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:27:14] Process Exited: Process Name - SppExtComObj.Exe Process ID - 176 [04-10-2024 11:27:14] Process Exited: Process Name - sppsvc.exe Process ID - 12564 [04-10-2024 11:27:14] Service state changed: Service Name - sppsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 11:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5372 [04-10-2024 11:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10232 [04-10-2024 11:28:45] New process found: Process Name - w3wp.exe Process ID - 7984 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 11:28:49] New process found: Process Name - w3wp.exe Process ID - 8264 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 11:29:14] Process Exited: Process Name - conhost.exe Process ID - 5960 [04-10-2024 11:29:14] Process Exited: Process Name - w3wp.exe Process ID - 8636 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:29:35] Process Exited: Process Name - conhost.exe Process ID - 1008 [04-10-2024 11:29:35] Process Exited: Process Name - w3wp.exe Process ID - 11092 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:30:13] New process found: Process Name - w3wp.exe Process ID - 3720 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 11:30:13] New process found: Process Name - where.exe Process ID - 12068 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 11:30:13] New process found: Process Name - conhost.exe Process ID - 4512 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 11:30:14] New process found: Process Name - conhost.exe Process ID - 10912 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 11:30:14] Process Exited: Process Name - conhost.exe Process ID - 4512 [04-10-2024 11:30:14] Process Exited: Process Name - where.exe Process ID - 12068 [04-10-2024 11:30:46] New process found: Process Name - w3wp.exe Process ID - 8356 Process Identity - KSHITIJSINGHAL-\IWPD_77(acwits) Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 11:30:48] Process Exited: Process Name - w3wp.exe Process ID - 5936 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:30:48] Process Exited: Process Name - conhost.exe Process ID - 12056 [04-10-2024 11:30:58] New process found: Process Name - w3wp.exe Process ID - 2024 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:30:58] Process Exited: Process Name - w3wp.exe Process ID - 12992 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:31:20] Process Exited: Process Name - conhost.exe Process ID - 5648 [04-10-2024 11:31:20] Process Exited: Process Name - w3wp.exe Process ID - 10648 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 11:31:41] New process found: Process Name - w3wp.exe Process ID - 11168 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 11:33:20] New process found: Process Name - w3wp.exe Process ID - 10340 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:33:20] New process found: Process Name - conhost.exe Process ID - 7928 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 11:34:18] New process found: Process Name - w3wp.exe Process ID - 2332 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:34:18] New process found: Process Name - conhost.exe Process ID - 9760 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 11:35:51] Process Exited: Process Name - w3wp.exe Process ID - 8264 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 11:35:53] Process Exited: Process Name - w3wp.exe Process ID - 10924 Web application pool name - DefaultAppPool [04-10-2024 11:35:59] New process found: Process Name - w3wp.exe Process ID - 332 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:35:59] Process Exited: Process Name - w3wp.exe Process ID - 2024 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:36:15] Process Exited: Process Name - w3wp.exe Process ID - 3720 Web application pool name - tools.taxtribute.com [04-10-2024 11:36:15] Process Exited: Process Name - conhost.exe Process ID - 10912 [04-10-2024 11:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6264 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:36:46] New process found: Process Name - w3wp.exe Process ID - 11384 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 11:36:47] New process found: Process Name - conhost.exe Process ID - 10648 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:36:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 11608 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:36:48] New process found: Process Name - SearchFilterHost.exe Process ID - 4308 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11448 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:36:49] Process Exited: Process Name - w3wp.exe Process ID - 8356 Web application pool name - kdb.acwits.in(domain)(4.0)(pool) [04-10-2024 11:37:22] New process found: Process Name - w3wp.exe Process ID - 1672 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:37:22] New process found: Process Name - where.exe Process ID - 6516 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 11:37:22] New process found: Process Name - conhost.exe Process ID - 5228 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 11:37:23] New process found: Process Name - conhost.exe Process ID - 12824 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 11:37:23] Process Exited: Process Name - conhost.exe Process ID - 5228 [04-10-2024 11:37:23] Process Exited: Process Name - where.exe Process ID - 6516 [04-10-2024 11:37:25] New process found: Process Name - w3wp.exe Process ID - 6512 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:37:25] New process found: Process Name - conhost.exe Process ID - 2024 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 11:37:44] Process Exited: Process Name - w3wp.exe Process ID - 11168 Web application pool name - prathabypriyal.com [04-10-2024 11:38:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 4308 [04-10-2024 11:38:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 11608 [04-10-2024 11:38:05] New process found: Process Name - w3wp.exe Process ID - 12992 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 11:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6264 [04-10-2024 11:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11448 [04-10-2024 11:39:01] New process found: Process Name - cmd.exe Process ID - 7436 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:39:01] New process found: Process Name - conhost.exe Process ID - 12276 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:39:01] New process found: Process Name - runtask.exe Process ID - 10880 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:39:01] New process found: Process Name - php.exe Process ID - 7472 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:39:01] New process found: Process Name - conhost.exe Process ID - 9320 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:39:05] New process found: Process Name - task-manager-agent.exe Process ID - 11196 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:05] New process found: Process Name - php.exe Process ID - 2600 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:05] New process found: Process Name - conhost.exe Process ID - 3588 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:05] Process Exited: Process Name - cmd.exe Process ID - 7436 [04-10-2024 11:39:05] Process Exited: Process Name - php.exe Process ID - 7472 [04-10-2024 11:39:05] Process Exited: Process Name - conhost.exe Process ID - 9320 [04-10-2024 11:39:05] Process Exited: Process Name - runtask.exe Process ID - 10880 [04-10-2024 11:39:05] Process Exited: Process Name - conhost.exe Process ID - 12276 [04-10-2024 11:39:06] New process found: Process Name - task-manager-agent.exe Process ID - 916 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:06] New process found: Process Name - php.exe Process ID - 3284 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:06] New process found: Process Name - conhost.exe Process ID - 9684 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 11:39:06] Process Exited: Process Name - php.exe Process ID - 2600 [04-10-2024 11:39:06] Process Exited: Process Name - conhost.exe Process ID - 3588 [04-10-2024 11:39:06] Process Exited: Process Name - task-manager-agent.exe Process ID - 11196 [04-10-2024 11:39:07] Process Exited: Process Name - task-manager-agent.exe Process ID - 916 [04-10-2024 11:39:07] Process Exited: Process Name - php.exe Process ID - 3284 [04-10-2024 11:39:07] Process Exited: Process Name - conhost.exe Process ID - 9684 [04-10-2024 11:41:01] New process found: Process Name - w3wp.exe Process ID - 12356 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:41:01] Process Exited: Process Name - w3wp.exe Process ID - 332 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:42:47] Process Exited: Process Name - w3wp.exe Process ID - 7984 Web application pool name - galaxytools.in [04-10-2024 11:43:25] Process Exited: Process Name - w3wp.exe Process ID - 1672 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:43:25] Process Exited: Process Name - conhost.exe Process ID - 12824 [04-10-2024 11:43:28] Process Exited: Process Name - conhost.exe Process ID - 2024 [04-10-2024 11:43:28] Process Exited: Process Name - w3wp.exe Process ID - 6512 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:44:00] New process found: Process Name - cmd.exe Process ID - 7456 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:44:00] New process found: Process Name - conhost.exe Process ID - 13180 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:44:01] Process Exited: Process Name - cmd.exe Process ID - 7456 [04-10-2024 11:44:01] Process Exited: Process Name - conhost.exe Process ID - 13180 [04-10-2024 11:44:07] Process Exited: Process Name - w3wp.exe Process ID - 12992 Web application pool name - DefaultAppPool [04-10-2024 11:46:01] New process found: Process Name - cmd.exe Process ID - 11484 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:46:01] New process found: Process Name - conhost.exe Process ID - 3356 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:46:01] New process found: Process Name - runtask.exe Process ID - 9272 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:46:01] New process found: Process Name - php.exe Process ID - 12552 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:46:01] New process found: Process Name - conhost.exe Process ID - 12156 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:46:02] Process Exited: Process Name - conhost.exe Process ID - 3356 [04-10-2024 11:46:02] Process Exited: Process Name - runtask.exe Process ID - 9272 [04-10-2024 11:46:02] Process Exited: Process Name - cmd.exe Process ID - 11484 [04-10-2024 11:46:02] Process Exited: Process Name - conhost.exe Process ID - 12156 [04-10-2024 11:46:02] Process Exited: Process Name - php.exe Process ID - 12552 [04-10-2024 11:46:03] New process found: Process Name - w3wp.exe Process ID - 9980 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:46:03] Process Exited: Process Name - w3wp.exe Process ID - 12356 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9584 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9736 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:46:49] Process Exited: Process Name - conhost.exe Process ID - 10648 [04-10-2024 11:46:49] Process Exited: Process Name - w3wp.exe Process ID - 11384 Web application pool name - taxtribute.com [04-10-2024 11:47:02] New process found: Process Name - w3wp.exe Process ID - 11512 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 11:47:02] New process found: Process Name - where.exe Process ID - 6280 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:47:02] New process found: Process Name - conhost.exe Process ID - 9876 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:47:03] New process found: Process Name - conhost.exe Process ID - 11028 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 11:47:03] Process Exited: Process Name - where.exe Process ID - 6280 [04-10-2024 11:47:03] Process Exited: Process Name - conhost.exe Process ID - 9876 [04-10-2024 11:47:08] New process found: Process Name - w3wp.exe Process ID - 4556 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 11:47:57] New process found: Process Name - w3wp.exe Process ID - 8368 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 11:48:06] New process found: Process Name - w3wp.exe Process ID - 9124 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 11:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9584 [04-10-2024 11:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9736 [04-10-2024 11:49:22] Process Exited: Process Name - conhost.exe Process ID - 7928 [04-10-2024 11:49:22] Process Exited: Process Name - w3wp.exe Process ID - 10340 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:49:28] New process found: Process Name - w3wp.exe Process ID - 336 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 11:49:28] New process found: Process Name - conhost.exe Process ID - 11904 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 11:49:28] Process Exited: Process Name - w3wp.exe Process ID - 2360 Web application pool name - pnacademy.acwits.in [04-10-2024 11:49:28] Process Exited: Process Name - conhost.exe Process ID - 9072 [04-10-2024 11:50:49] New process found: Process Name - w3wp.exe Process ID - 3668 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 11:50:49] New process found: Process Name - conhost.exe Process ID - 11800 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 11:51:03] New process found: Process Name - w3wp.exe Process ID - 9940 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:51:03] Process Exited: Process Name - w3wp.exe Process ID - 9980 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:51:07] New process found: Process Name - w3wp.exe Process ID - 10668 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:51:07] New process found: Process Name - conhost.exe Process ID - 7328 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 11:51:20] Process Exited: Process Name - w3wp.exe Process ID - 2332 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:51:20] Process Exited: Process Name - conhost.exe Process ID - 9760 [04-10-2024 11:51:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 10076 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:51:48] New process found: Process Name - SearchFilterHost.exe Process ID - 13036 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:52:00] New process found: Process Name - cmd.exe Process ID - 3592 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:52:00] New process found: Process Name - conhost.exe Process ID - 5520 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:52:00] New process found: Process Name - runtask.exe Process ID - 4732 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:52:00] New process found: Process Name - php.exe Process ID - 11544 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:52:00] New process found: Process Name - conhost.exe Process ID - 10532 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 11:52:01] Process Exited: Process Name - cmd.exe Process ID - 3592 [04-10-2024 11:52:01] Process Exited: Process Name - runtask.exe Process ID - 4732 [04-10-2024 11:52:01] Process Exited: Process Name - conhost.exe Process ID - 5520 [04-10-2024 11:52:01] Process Exited: Process Name - conhost.exe Process ID - 10532 [04-10-2024 11:52:01] Process Exited: Process Name - php.exe Process ID - 11544 [04-10-2024 11:52:44] New process found: Process Name - w3wp.exe Process ID - 4376 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 11:53:05] Process Exited: Process Name - conhost.exe Process ID - 11028 [04-10-2024 11:53:05] Process Exited: Process Name - w3wp.exe Process ID - 11512 Web application pool name - taxtribute.com [04-10-2024 11:53:11] Process Exited: Process Name - w3wp.exe Process ID - 4556 Web application pool name - DefaultAppPool [04-10-2024 11:53:59] Process Exited: Process Name - w3wp.exe Process ID - 8368 Web application pool name - galaxytools.in [04-10-2024 11:54:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 10076 [04-10-2024 11:54:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 13036 [04-10-2024 11:54:08] Process Exited: Process Name - w3wp.exe Process ID - 9124 Web application pool name - shop.galaxytools.in [04-10-2024 11:55:06] Process Exited: Process Name - w3wp.exe Process ID - 9776 Web application pool name - kdbps.edu.in [04-10-2024 11:55:06] Process Exited: Process Name - conhost.exe Process ID - 11552 [04-10-2024 11:55:12] New process found: Process Name - w3wp.exe Process ID - 11908 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 11:55:13] New process found: Process Name - conhost.exe Process ID - 7236 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 11:55:51] New process found: Process Name - w3wp.exe Process ID - 12612 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:55:51] New process found: Process Name - conhost.exe Process ID - 12824 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 11:56:05] New process found: Process Name - w3wp.exe Process ID - 12560 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:56:05] Process Exited: Process Name - w3wp.exe Process ID - 9940 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 11:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2012 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 11:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 11:57:10] Process Exited: Process Name - conhost.exe Process ID - 7328 [04-10-2024 11:57:10] Process Exited: Process Name - w3wp.exe Process ID - 10668 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:57:50] Process Exited: Process Name - w3wp.exe Process ID - 3668 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 11:57:50] Process Exited: Process Name - conhost.exe Process ID - 11800 [04-10-2024 11:57:58] New process found: Process Name - conhost.exe Process ID - 12316 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 11:58:04] New process found: Process Name - w3wp.exe Process ID - 212 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 11:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2012 [04-10-2024 11:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9532 [04-10-2024 11:58:21] New process found: Process Name - w3wp.exe Process ID - 1788 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 11:58:22] New process found: Process Name - conhost.exe Process ID - 10900 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 11:58:39] New process found: Process Name - w3wp.exe Process ID - 11328 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 12:00:29] New process found: Process Name - w3wp.exe Process ID - 11448 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 12:01:06] New process found: Process Name - w3wp.exe Process ID - 6520 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:01:06] Process Exited: Process Name - w3wp.exe Process ID - 12560 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:01:15] Process Exited: Process Name - conhost.exe Process ID - 7236 [04-10-2024 12:01:15] Process Exited: Process Name - w3wp.exe Process ID - 11908 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 12:01:17] New process found: Process Name - w3wp.exe Process ID - 9780 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:01:18] New process found: Process Name - where.exe Process ID - 944 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:01:18] New process found: Process Name - conhost.exe Process ID - 3372 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:01:19] New process found: Process Name - conhost.exe Process ID - 10388 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:01:19] Process Exited: Process Name - where.exe Process ID - 944 [04-10-2024 12:01:19] Process Exited: Process Name - conhost.exe Process ID - 3372 [04-10-2024 12:01:53] Process Exited: Process Name - w3wp.exe Process ID - 12612 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:01:53] Process Exited: Process Name - conhost.exe Process ID - 12824 [04-10-2024 12:02:04] New process found: Process Name - w3wp.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 12:03:15] New process found: Process Name - w3wp.exe Process ID - 7368 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:03:15] New process found: Process Name - where.exe Process ID - 11544 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:03:15] New process found: Process Name - conhost.exe Process ID - 9464 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:03:16] New process found: Process Name - conhost.exe Process ID - 12704 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:03:16] Process Exited: Process Name - conhost.exe Process ID - 9464 [04-10-2024 12:03:16] Process Exited: Process Name - where.exe Process ID - 11544 [04-10-2024 12:03:46] Process Exited: Process Name - w3wp.exe Process ID - 4376 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:03:46] Process Exited: Process Name - conhost.exe Process ID - 12316 [04-10-2024 12:04:41] Process Exited: Process Name - w3wp.exe Process ID - 11328 Web application pool name - galaxytools.in [04-10-2024 12:05:00] New process found: Process Name - cmd.exe Process ID - 10864 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:05:00] New process found: Process Name - conhost.exe Process ID - 10300 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:05:00] New process found: Process Name - runtask.exe Process ID - 11304 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:05:00] New process found: Process Name - php.exe Process ID - 7088 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:05:00] New process found: Process Name - conhost.exe Process ID - 3192 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:05:03] Process Exited: Process Name - conhost.exe Process ID - 3192 [04-10-2024 12:05:03] Process Exited: Process Name - php.exe Process ID - 7088 [04-10-2024 12:05:03] Process Exited: Process Name - conhost.exe Process ID - 10300 [04-10-2024 12:05:03] Process Exited: Process Name - cmd.exe Process ID - 10864 [04-10-2024 12:05:03] Process Exited: Process Name - runtask.exe Process ID - 11304 [04-10-2024 12:06:08] New process found: Process Name - w3wp.exe Process ID - 4732 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:06:08] Process Exited: Process Name - w3wp.exe Process ID - 6520 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8300 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9844 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:08:07] Process Exited: Process Name - w3wp.exe Process ID - 11768 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 12:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8300 [04-10-2024 12:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9844 [04-10-2024 12:08:19] Process Exited: Process Name - w3wp.exe Process ID - 9780 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:08:19] Process Exited: Process Name - conhost.exe Process ID - 10388 [04-10-2024 12:09:16] New process found: Process Name - w3wp.exe Process ID - 5116 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 12:09:18] Process Exited: Process Name - w3wp.exe Process ID - 7368 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:09:18] Process Exited: Process Name - conhost.exe Process ID - 12704 [04-10-2024 12:10:41] New process found: Process Name - w3wp.exe Process ID - 11892 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:10:41] New process found: Process Name - conhost.exe Process ID - 4148 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:11:08] New process found: Process Name - w3wp.exe Process ID - 9980 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:11:08] Process Exited: Process Name - w3wp.exe Process ID - 4732 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:11:24] Process Exited: Process Name - w3wp.exe Process ID - 1788 Web application pool name - kdbps.edu.in [04-10-2024 12:11:24] Process Exited: Process Name - conhost.exe Process ID - 10900 [04-10-2024 12:11:26] New process found: Process Name - w3wp.exe Process ID - 11164 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:11:26] New process found: Process Name - conhost.exe Process ID - 944 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:11:49] New process found: Process Name - w3wp.exe Process ID - 9532 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:11:49] New process found: Process Name - where.exe Process ID - 7492 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:11:49] New process found: Process Name - conhost.exe Process ID - 7332 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:11:50] New process found: Process Name - conhost.exe Process ID - 11208 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:11:50] Process Exited: Process Name - conhost.exe Process ID - 7332 [04-10-2024 12:11:50] Process Exited: Process Name - where.exe Process ID - 7492 [04-10-2024 12:11:56] Process Exited: Process Name - MpCmdRun.exe Process ID - 12260 [04-10-2024 12:12:30] Process Exited: Process Name - w3wp.exe Process ID - 11448 Web application pool name - DefaultAppPool [04-10-2024 12:12:35] New process found: Process Name - w3wp.exe Process ID - 6316 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 12:13:13] New process found: Process Name - conhost.exe Process ID - 12312 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 12:13:23] New process found: Process Name - w3wp.exe Process ID - 9820 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 12:13:23] New process found: Process Name - conhost.exe Process ID - 9644 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 12:15:18] Process Exited: Process Name - w3wp.exe Process ID - 5116 Web application pool name - prathabypriyal.com [04-10-2024 12:16:10] New process found: Process Name - w3wp.exe Process ID - 4596 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:16:10] Process Exited: Process Name - w3wp.exe Process ID - 9980 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 876 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:16:43] Process Exited: Process Name - conhost.exe Process ID - 4148 [04-10-2024 12:16:43] Process Exited: Process Name - w3wp.exe Process ID - 11892 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2572 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:17:27] Process Exited: Process Name - conhost.exe Process ID - 944 [04-10-2024 12:17:27] Process Exited: Process Name - w3wp.exe Process ID - 11164 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:17:52] Process Exited: Process Name - w3wp.exe Process ID - 9532 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:17:52] Process Exited: Process Name - conhost.exe Process ID - 11208 [04-10-2024 12:18:07] New process found: Process Name - w3wp.exe Process ID - 1528 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 12:18:07] New process found: Process Name - w3wp.exe Process ID - 8992 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:18:07] New process found: Process Name - conhost.exe Process ID - 12444 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 876 [04-10-2024 12:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2572 [04-10-2024 12:20:31] Process Exited: Process Name - w3wp.exe Process ID - 336 Web application pool name - pnacademy.acwits.in [04-10-2024 12:20:31] Process Exited: Process Name - conhost.exe Process ID - 11904 [04-10-2024 12:21:01] New process found: Process Name - w3wp.exe Process ID - 13168 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:21:01] New process found: Process Name - where.exe Process ID - 3732 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:21:01] New process found: Process Name - conhost.exe Process ID - 5360 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:21:02] New process found: Process Name - conhost.exe Process ID - 5520 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:21:02] Process Exited: Process Name - where.exe Process ID - 3732 [04-10-2024 12:21:02] Process Exited: Process Name - conhost.exe Process ID - 5360 [04-10-2024 12:21:11] New process found: Process Name - w3wp.exe Process ID - 9340 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:21:11] Process Exited: Process Name - w3wp.exe Process ID - 4596 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:22:42] New process found: Process Name - w3wp.exe Process ID - 3380 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 12:24:23] Process Exited: Process Name - conhost.exe Process ID - 9644 [04-10-2024 12:24:23] Process Exited: Process Name - w3wp.exe Process ID - 9820 Web application pool name - taxtribute.com [04-10-2024 12:24:38] New process found: Process Name - w3wp.exe Process ID - 12660 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 12:24:38] New process found: Process Name - conhost.exe Process ID - 1120 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 12:25:01] New process found: Process Name - cmd.exe Process ID - 11408 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:01] New process found: Process Name - conhost.exe Process ID - 4460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:01] New process found: Process Name - runtask.exe Process ID - 10536 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:01] New process found: Process Name - php.exe Process ID - 6596 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:25:01] New process found: Process Name - conhost.exe Process ID - 1564 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:25:04] New process found: Process Name - w3wp.exe Process ID - 12712 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 12:25:04] Process Exited: Process Name - conhost.exe Process ID - 1564 [04-10-2024 12:25:04] Process Exited: Process Name - conhost.exe Process ID - 4460 [04-10-2024 12:25:04] Process Exited: Process Name - php.exe Process ID - 6596 [04-10-2024 12:25:04] Process Exited: Process Name - runtask.exe Process ID - 10536 [04-10-2024 12:25:04] Process Exited: Process Name - cmd.exe Process ID - 11408 [04-10-2024 12:25:06] New process found: Process Name - conhost.exe Process ID - 12580 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 12:25:33] New process found: Process Name - w3wp.exe Process ID - 8268 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:25:33] New process found: Process Name - conhost.exe Process ID - 7368 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:25:50] New process found: Process Name - updater.exe Process ID - 11908 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:50] New process found: Process Name - updater.exe Process ID - 12768 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:50] New process found: Process Name - updater.exe Process ID - 6860 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:50] New process found: Process Name - updater.exe Process ID - 8252 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 11908 Current State - SERVICE_RUNNING [04-10-2024 12:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 6860 Current State - SERVICE_RUNNING [04-10-2024 12:26:00] Process Exited: Process Name - updater.exe Process ID - 6860 [04-10-2024 12:26:00] Process Exited: Process Name - updater.exe Process ID - 8252 [04-10-2024 12:26:00] Process Exited: Process Name - updater.exe Process ID - 11908 [04-10-2024 12:26:00] Process Exited: Process Name - updater.exe Process ID - 12768 [04-10-2024 12:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 12:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 12:26:12] New process found: Process Name - w3wp.exe Process ID - 11304 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:26:12] Process Exited: Process Name - w3wp.exe Process ID - 9340 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7480 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4676 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:27:03] Process Exited: Process Name - conhost.exe Process ID - 5520 [04-10-2024 12:27:03] Process Exited: Process Name - w3wp.exe Process ID - 13168 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:27:06] Process Exited: Process Name - w3wp.exe Process ID - 212 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:27:09] Process Exited: Process Name - w3wp.exe Process ID - 1528 Web application pool name - galaxytools.in [04-10-2024 12:27:43] New process found: Process Name - w3wp.exe Process ID - 6452 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:27:43] New process found: Process Name - conhost.exe Process ID - 13080 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 12:27:54] New process found: Process Name - w3wp.exe Process ID - 3784 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 12:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4676 [04-10-2024 12:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7480 [04-10-2024 12:28:21] New process found: Process Name - w3wp.exe Process ID - 3192 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 12:28:21] New process found: Process Name - conhost.exe Process ID - 2744 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 12:31:06] Process Exited: Process Name - conhost.exe Process ID - 12580 [04-10-2024 12:31:06] Process Exited: Process Name - w3wp.exe Process ID - 12712 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 12:31:13] New process found: Process Name - w3wp.exe Process ID - 11308 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:31:13] Process Exited: Process Name - w3wp.exe Process ID - 11304 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:31:35] Process Exited: Process Name - conhost.exe Process ID - 7368 [04-10-2024 12:31:35] Process Exited: Process Name - w3wp.exe Process ID - 8268 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:33:02] New process found: Process Name - w3wp.exe Process ID - 2620 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:33:02] New process found: Process Name - where.exe Process ID - 5164 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:33:02] New process found: Process Name - conhost.exe Process ID - 732 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:33:03] New process found: Process Name - conhost.exe Process ID - 9620 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:33:03] Process Exited: Process Name - conhost.exe Process ID - 732 [04-10-2024 12:33:03] Process Exited: Process Name - where.exe Process ID - 5164 [04-10-2024 12:33:39] New process found: Process Name - w3wp.exe Process ID - 11544 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:33:40] New process found: Process Name - conhost.exe Process ID - 9008 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:33:56] Process Exited: Process Name - w3wp.exe Process ID - 3784 Web application pool name - galaxytools.in [04-10-2024 12:34:08] Process Exited: Process Name - w3wp.exe Process ID - 8992 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:34:08] Process Exited: Process Name - conhost.exe Process ID - 12444 [04-10-2024 12:34:21] Process Exited: Process Name - conhost.exe Process ID - 2744 [04-10-2024 12:34:21] Process Exited: Process Name - w3wp.exe Process ID - 3192 Web application pool name - taxtribute.com [04-10-2024 12:35:00] New process found: Process Name - sshost.exe Process ID - 9880 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - sshost.exe Process ID - 4060 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - conhost.exe Process ID - 7136 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - conhost.exe Process ID - 3268 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - mysqldump.exe Process ID - 12428 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - conhost.exe Process ID - 1288 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - websrvmng.exe Process ID - 8316 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:00] New process found: Process Name - conhost.exe Process ID - 2484 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:01] Process Exited: Process Name - conhost.exe Process ID - 2484 [04-10-2024 12:35:01] Process Exited: Process Name - conhost.exe Process ID - 3268 [04-10-2024 12:35:01] Process Exited: Process Name - websrvmng.exe Process ID - 8316 [04-10-2024 12:35:01] Process Exited: Process Name - sshost.exe Process ID - 9880 [04-10-2024 12:35:09] New process found: Process Name - mysqldump.exe Process ID - 12944 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:09] New process found: Process Name - conhost.exe Process ID - 3588 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:35:09] Process Exited: Process Name - conhost.exe Process ID - 1288 [04-10-2024 12:35:09] Process Exited: Process Name - mysqldump.exe Process ID - 12428 [04-10-2024 12:35:10] Process Exited: Process Name - conhost.exe Process ID - 3588 [04-10-2024 12:35:10] Process Exited: Process Name - sshost.exe Process ID - 4060 [04-10-2024 12:35:10] Process Exited: Process Name - conhost.exe Process ID - 7136 [04-10-2024 12:35:10] Process Exited: Process Name - mysqldump.exe Process ID - 12944 [04-10-2024 12:36:15] New process found: Process Name - w3wp.exe Process ID - 8304 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:36:15] Process Exited: Process Name - w3wp.exe Process ID - 11308 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 824 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:36:46] Process Exited: Process Name - w3wp.exe Process ID - 6452 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:36:46] Process Exited: Process Name - conhost.exe Process ID - 13080 [04-10-2024 12:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9824 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:37:20] New process found: Process Name - w3wp.exe Process ID - 5956 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 12:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 824 [04-10-2024 12:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9824 [04-10-2024 12:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 2656 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:01] New process found: Process Name - php.exe Process ID - 11720 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:01] New process found: Process Name - conhost.exe Process ID - 10884 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 7296 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:02] New process found: Process Name - php.exe Process ID - 11552 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:02] New process found: Process Name - conhost.exe Process ID - 10580 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 12:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 2656 [04-10-2024 12:39:02] Process Exited: Process Name - conhost.exe Process ID - 10884 [04-10-2024 12:39:02] Process Exited: Process Name - php.exe Process ID - 11720 [04-10-2024 12:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 7296 [04-10-2024 12:39:03] Process Exited: Process Name - conhost.exe Process ID - 10580 [04-10-2024 12:39:03] Process Exited: Process Name - php.exe Process ID - 11552 [04-10-2024 12:39:05] Process Exited: Process Name - w3wp.exe Process ID - 2620 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:39:05] Process Exited: Process Name - conhost.exe Process ID - 9620 [04-10-2024 12:40:08] New process found: Process Name - w3wp.exe Process ID - 4016 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 12:40:24] New process found: Process Name - w3wp.exe Process ID - 6104 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:40:24] New process found: Process Name - conhost.exe Process ID - 7032 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 12:41:09] New process found: Process Name - w3wp.exe Process ID - 12068 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:41:09] New process found: Process Name - conhost.exe Process ID - 10124 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 12:41:16] New process found: Process Name - w3wp.exe Process ID - 8880 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:41:16] Process Exited: Process Name - w3wp.exe Process ID - 8304 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:41:44] Process Exited: Process Name - w3wp.exe Process ID - 3380 Web application pool name - DefaultAppPool [04-10-2024 12:42:24] New process found: Process Name - w3wp.exe Process ID - 776 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:42:25] New process found: Process Name - conhost.exe Process ID - 10508 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:43:23] Process Exited: Process Name - w3wp.exe Process ID - 5956 Web application pool name - galaxytools.in [04-10-2024 12:43:46] New process found: Process Name - w3wp.exe Process ID - 7480 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 12:44:01] New process found: Process Name - cmd.exe Process ID - 9844 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:44:01] New process found: Process Name - conhost.exe Process ID - 8992 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:44:01] New process found: Process Name - runtask.exe Process ID - 1012 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:44:01] New process found: Process Name - php.exe Process ID - 13068 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:44:01] New process found: Process Name - conhost.exe Process ID - 4184 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 12:44:02] Process Exited: Process Name - runtask.exe Process ID - 1012 [04-10-2024 12:44:02] Process Exited: Process Name - conhost.exe Process ID - 4184 [04-10-2024 12:44:02] Process Exited: Process Name - conhost.exe Process ID - 8992 [04-10-2024 12:44:02] Process Exited: Process Name - cmd.exe Process ID - 9844 [04-10-2024 12:44:02] Process Exited: Process Name - php.exe Process ID - 13068 [04-10-2024 12:44:31] New process found: Process Name - w3wp.exe Process ID - 10884 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:44:42] Process Exited: Process Name - conhost.exe Process ID - 9008 [04-10-2024 12:44:42] Process Exited: Process Name - w3wp.exe Process ID - 11544 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:45:47] New process found: Process Name - w3wp.exe Process ID - 2328 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:45:47] New process found: Process Name - conhost.exe Process ID - 6616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 12:46:11] Process Exited: Process Name - w3wp.exe Process ID - 4016 Web application pool name - shop.galaxytools.in [04-10-2024 12:46:17] New process found: Process Name - w3wp.exe Process ID - 7484 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:46:17] Process Exited: Process Name - w3wp.exe Process ID - 8880 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:46:26] Process Exited: Process Name - w3wp.exe Process ID - 6104 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:46:26] Process Exited: Process Name - conhost.exe Process ID - 7032 [04-10-2024 12:46:38] Process Exited: Process Name - w3wp.exe Process ID - 6316 Web application pool name - kdbps.edu.in [04-10-2024 12:46:38] Process Exited: Process Name - conhost.exe Process ID - 12312 [04-10-2024 12:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10036 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12432 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:47:11] Process Exited: Process Name - conhost.exe Process ID - 10124 [04-10-2024 12:47:12] Process Exited: Process Name - w3wp.exe Process ID - 12068 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:47:19] New process found: Process Name - w3wp.exe Process ID - 11288 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 12:48:04] New process found: Process Name - w3wp.exe Process ID - 11256 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 12:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10036 [04-10-2024 12:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12432 [04-10-2024 12:48:27] Process Exited: Process Name - w3wp.exe Process ID - 776 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:48:27] Process Exited: Process Name - conhost.exe Process ID - 10508 [04-10-2024 12:49:35] New process found: Process Name - w3wp.exe Process ID - 10388 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 12:49:35] New process found: Process Name - conhost.exe Process ID - 10512 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 12:50:33] Process Exited: Process Name - w3wp.exe Process ID - 10884 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:51:18] New process found: Process Name - w3wp.exe Process ID - 9644 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:51:18] Process Exited: Process Name - w3wp.exe Process ID - 7484 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:51:49] Process Exited: Process Name - w3wp.exe Process ID - 2328 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 12:51:49] Process Exited: Process Name - conhost.exe Process ID - 6616 [04-10-2024 12:52:55] New process found: Process Name - w3wp.exe Process ID - 10340 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:52:55] New process found: Process Name - where.exe Process ID - 7416 Process Identity - SYSTEM [04-10-2024 12:52:55] New process found: Process Name - conhost.exe Process ID - 12464 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:52:56] New process found: Process Name - conhost.exe Process ID - 9008 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 12:52:56] Process Exited: Process Name - where.exe Process ID - 7416 [04-10-2024 12:52:56] Process Exited: Process Name - conhost.exe Process ID - 12464 [04-10-2024 12:53:22] Process Exited: Process Name - w3wp.exe Process ID - 11288 Web application pool name - edtribute.com [04-10-2024 12:53:26] Process Exited: Process Name - php-cgi.exe Process ID - 11548 [04-10-2024 12:53:27] Process Exited: Process Name - w3wp.exe Process ID - 12508 Web application pool name - PleskControlPanel [04-10-2024 12:54:00] New process found: Process Name - w3wp.exe Process ID - 13208 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 12:55:35] New process found: Process Name - w3wp.exe Process ID - 3800 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 12:55:35] New process found: Process Name - conhost.exe Process ID - 12804 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 12:55:36] Process Exited: Process Name - w3wp.exe Process ID - 10388 Web application pool name - kdbps.edu.in [04-10-2024 12:55:36] Process Exited: Process Name - conhost.exe Process ID - 10512 [04-10-2024 12:55:39] New process found: Process Name - w3wp.exe Process ID - 7928 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 12:55:39] New process found: Process Name - php-cgi.exe Process ID - 5960 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 12:56:12] New process found: Process Name - w3wp.exe Process ID - 7856 Process Identity - IIS APPPOOL\schoolerp.edtribute.com Web application pool name - schoolerp.edtribute.com [04-10-2024 12:56:12] New process found: Process Name - where.exe Process ID - 736 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 12:56:12] New process found: Process Name - conhost.exe Process ID - 6720 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 12:56:13] New process found: Process Name - conhost.exe Process ID - 7436 Process Identity - IIS APPPOOL\schoolerp.edtribute.com [04-10-2024 12:56:13] Process Exited: Process Name - where.exe Process ID - 736 [04-10-2024 12:56:13] Process Exited: Process Name - conhost.exe Process ID - 6720 [04-10-2024 12:56:20] New process found: Process Name - w3wp.exe Process ID - 11388 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:56:20] Process Exited: Process Name - w3wp.exe Process ID - 9644 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 12:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12356 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 12:56:46] New process found: Process Name - w3wp.exe Process ID - 11656 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 12:56:46] New process found: Process Name - where.exe Process ID - 10476 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 12:56:46] New process found: Process Name - conhost.exe Process ID - 4024 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 12:56:47] New process found: Process Name - conhost.exe Process ID - 2308 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 12:56:47] Process Exited: Process Name - conhost.exe Process ID - 4024 [04-10-2024 12:56:47] Process Exited: Process Name - where.exe Process ID - 10476 [04-10-2024 12:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11168 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 12:58:07] Process Exited: Process Name - w3wp.exe Process ID - 11256 Web application pool name - adminportal.galaxytools.in [04-10-2024 12:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11168 [04-10-2024 12:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12356 [04-10-2024 12:58:58] Process Exited: Process Name - conhost.exe Process ID - 9008 [04-10-2024 12:58:58] Process Exited: Process Name - w3wp.exe Process ID - 10340 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 12:59:19] New process found: Process Name - w3wp.exe Process ID - 5928 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 12:59:19] New process found: Process Name - where.exe Process ID - 12000 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 12:59:19] New process found: Process Name - conhost.exe Process ID - 4372 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 12:59:20] New process found: Process Name - conhost.exe Process ID - 13000 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 12:59:20] Process Exited: Process Name - conhost.exe Process ID - 4372 [04-10-2024 12:59:20] Process Exited: Process Name - where.exe Process ID - 12000 [04-10-2024 13:00:02] Process Exited: Process Name - w3wp.exe Process ID - 13208 Web application pool name - galaxytools.in [04-10-2024 13:00:23] New process found: Process Name - w3wp.exe Process ID - 1992 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 13:00:48] Process Exited: Process Name - w3wp.exe Process ID - 7480 Web application pool name - DefaultAppPool [04-10-2024 13:01:20] New process found: Process Name - w3wp.exe Process ID - 9788 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:01:20] Process Exited: Process Name - w3wp.exe Process ID - 11388 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:01:37] Process Exited: Process Name - w3wp.exe Process ID - 3800 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:01:37] Process Exited: Process Name - conhost.exe Process ID - 12804 [04-10-2024 13:02:08] New process found: Process Name - w3wp.exe Process ID - 4324 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 13:03:15] Process Exited: Process Name - conhost.exe Process ID - 7436 [04-10-2024 13:03:15] Process Exited: Process Name - w3wp.exe Process ID - 7856 Web application pool name - schoolerp.edtribute.com [04-10-2024 13:04:05] New process found: Process Name - w3wp.exe Process ID - 2332 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 13:04:45] New process found: Process Name - w3wp.exe Process ID - 12280 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [04-10-2024 13:04:45] New process found: Process Name - where.exe Process ID - 4608 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 13:04:45] New process found: Process Name - conhost.exe Process ID - 10220 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 13:04:46] New process found: Process Name - conhost.exe Process ID - 1552 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 13:04:46] Process Exited: Process Name - where.exe Process ID - 4608 [04-10-2024 13:04:46] Process Exited: Process Name - conhost.exe Process ID - 10220 [04-10-2024 13:04:48] New process found: Process Name - w3wp.exe Process ID - 336 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 13:05:01] New process found: Process Name - cmd.exe Process ID - 11388 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:05:01] New process found: Process Name - conhost.exe Process ID - 13304 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:05:01] New process found: Process Name - runtask.exe Process ID - 10908 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:05:01] New process found: Process Name - php.exe Process ID - 8472 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:05:01] New process found: Process Name - conhost.exe Process ID - 2880 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:05:05] Process Exited: Process Name - conhost.exe Process ID - 2880 [04-10-2024 13:05:05] Process Exited: Process Name - php.exe Process ID - 8472 [04-10-2024 13:05:05] Process Exited: Process Name - runtask.exe Process ID - 10908 [04-10-2024 13:05:05] Process Exited: Process Name - cmd.exe Process ID - 11388 [04-10-2024 13:05:05] Process Exited: Process Name - conhost.exe Process ID - 13304 [04-10-2024 13:05:09] New process found: Process Name - w3wp.exe Process ID - 11332 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:05:09] New process found: Process Name - where.exe Process ID - 6996 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:05:09] New process found: Process Name - conhost.exe Process ID - 8836 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:05:10] New process found: Process Name - conhost.exe Process ID - 12616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:05:10] Process Exited: Process Name - where.exe Process ID - 6996 [04-10-2024 13:05:10] Process Exited: Process Name - conhost.exe Process ID - 8836 [04-10-2024 13:05:22] Process Exited: Process Name - w3wp.exe Process ID - 5928 Web application pool name - taxtribute.com [04-10-2024 13:05:22] Process Exited: Process Name - conhost.exe Process ID - 13000 [04-10-2024 13:05:31] New process found: Process Name - w3wp.exe Process ID - 832 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 13:06:15] New process found: Process Name - w3wp.exe Process ID - 1296 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:06:15] New process found: Process Name - where.exe Process ID - 4196 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 13:06:15] New process found: Process Name - conhost.exe Process ID - 10984 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 13:06:16] New process found: Process Name - conhost.exe Process ID - 10020 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 13:06:16] Process Exited: Process Name - where.exe Process ID - 4196 [04-10-2024 13:06:16] Process Exited: Process Name - conhost.exe Process ID - 10984 [04-10-2024 13:06:22] New process found: Process Name - w3wp.exe Process ID - 2980 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:06:22] Process Exited: Process Name - w3wp.exe Process ID - 9788 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:06:26] Process Exited: Process Name - w3wp.exe Process ID - 1992 Web application pool name - galaxytools.in [04-10-2024 13:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9812 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:06:44] New process found: Process Name - w3wp.exe Process ID - 7692 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 13:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 920 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:08:11] Process Exited: Process Name - w3wp.exe Process ID - 4324 Web application pool name - prathabypriyal.com [04-10-2024 13:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 920 [04-10-2024 13:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9812 [04-10-2024 13:08:40] Process Exited: Process Name - conhost.exe Process ID - 1120 [04-10-2024 13:08:40] Process Exited: Process Name - w3wp.exe Process ID - 12660 Web application pool name - pnacademy.acwits.in [04-10-2024 13:09:35] New process found: Process Name - w3wp.exe Process ID - 12528 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:11:23] New process found: Process Name - w3wp.exe Process ID - 6516 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:11:23] Process Exited: Process Name - w3wp.exe Process ID - 2980 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:11:34] Process Exited: Process Name - w3wp.exe Process ID - 832 Web application pool name - acme-challenge [04-10-2024 13:11:49] New process found: Process Name - w3wp.exe Process ID - 1840 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com Web application pool name - schoolerp.taxtribute.com [04-10-2024 13:11:49] New process found: Process Name - conhost.exe Process ID - 13084 Process Identity - IIS APPPOOL\schoolerp.taxtribute.com [04-10-2024 13:12:18] Process Exited: Process Name - w3wp.exe Process ID - 1296 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:12:18] Process Exited: Process Name - conhost.exe Process ID - 10020 [04-10-2024 13:12:21] New process found: Process Name - w3wp.exe Process ID - 6320 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 13:12:32] New process found: Process Name - w3wp.exe Process ID - 11548 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 13:12:32] New process found: Process Name - conhost.exe Process ID - 1480 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 13:13:50] Process Exited: Process Name - w3wp.exe Process ID - 336 Web application pool name - DefaultAppPool [04-10-2024 13:14:34] New process found: Process Name - w3wp.exe Process ID - 9048 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:14:35] New process found: Process Name - conhost.exe Process ID - 9968 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 13:15:36] Process Exited: Process Name - w3wp.exe Process ID - 12528 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:15:49] Process Exited: Process Name - conhost.exe Process ID - 2308 [04-10-2024 13:15:49] Process Exited: Process Name - w3wp.exe Process ID - 11656 Web application pool name - kdbps.edu.in [04-10-2024 13:16:12] Process Exited: Process Name - w3wp.exe Process ID - 11332 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:16:12] Process Exited: Process Name - conhost.exe Process ID - 12616 [04-10-2024 13:16:25] New process found: Process Name - w3wp.exe Process ID - 5436 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:16:25] Process Exited: Process Name - w3wp.exe Process ID - 6516 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 7248 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 13232 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:17:07] Process Exited: Process Name - w3wp.exe Process ID - 2332 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 13:17:48] Process Exited: Process Name - conhost.exe Process ID - 1552 [04-10-2024 13:17:48] Process Exited: Process Name - w3wp.exe Process ID - 12280 Web application pool name - masteradmin.taxtribute.com [04-10-2024 13:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7248 [04-10-2024 13:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13232 [04-10-2024 13:18:24] Process Exited: Process Name - w3wp.exe Process ID - 6320 Web application pool name - shop.galaxytools.in [04-10-2024 13:18:33] New process found: Process Name - w3wp.exe Process ID - 11304 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 13:18:33] New process found: Process Name - conhost.exe Process ID - 5724 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 13:18:51] Process Exited: Process Name - w3wp.exe Process ID - 1840 Web application pool name - schoolerp.taxtribute.com [04-10-2024 13:18:51] Process Exited: Process Name - conhost.exe Process ID - 13084 [04-10-2024 13:19:35] New process found: Process Name - w3wp.exe Process ID - 9368 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:19:39] New process found: Process Name - w3wp.exe Process ID - 11896 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:19:39] New process found: Process Name - conhost.exe Process ID - 1528 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:21:25] New process found: Process Name - w3wp.exe Process ID - 10076 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:21:25] Process Exited: Process Name - w3wp.exe Process ID - 5436 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:22:09] New process found: Process Name - w3wp.exe Process ID - 10596 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 13:22:09] New process found: Process Name - conhost.exe Process ID - 952 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 13:24:37] Process Exited: Process Name - w3wp.exe Process ID - 9048 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:24:37] Process Exited: Process Name - conhost.exe Process ID - 9968 [04-10-2024 13:24:56] New process found: Process Name - w3wp.exe Process ID - 1220 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:24:56] New process found: Process Name - where.exe Process ID - 11164 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 13:24:56] New process found: Process Name - conhost.exe Process ID - 11644 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 13:24:57] New process found: Process Name - conhost.exe Process ID - 7492 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 13:24:57] Process Exited: Process Name - where.exe Process ID - 11164 [04-10-2024 13:24:57] Process Exited: Process Name - conhost.exe Process ID - 11644 [04-10-2024 13:24:59] New process found: Process Name - w3wp.exe Process ID - 4000 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 13:24:59] New process found: Process Name - conhost.exe Process ID - 7260 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 13:25:01] New process found: Process Name - cmd.exe Process ID - 12388 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:01] New process found: Process Name - conhost.exe Process ID - 11460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:01] New process found: Process Name - runtask.exe Process ID - 9768 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:01] New process found: Process Name - php.exe Process ID - 8072 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:25:01] New process found: Process Name - conhost.exe Process ID - 10156 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:25:04] Process Exited: Process Name - php.exe Process ID - 8072 [04-10-2024 13:25:04] Process Exited: Process Name - runtask.exe Process ID - 9768 [04-10-2024 13:25:04] Process Exited: Process Name - conhost.exe Process ID - 10156 [04-10-2024 13:25:04] Process Exited: Process Name - conhost.exe Process ID - 11460 [04-10-2024 13:25:04] Process Exited: Process Name - cmd.exe Process ID - 12388 [04-10-2024 13:25:09] New process found: Process Name - w3wp.exe Process ID - 9720 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 13:25:37] Process Exited: Process Name - w3wp.exe Process ID - 9368 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:25:41] Process Exited: Process Name - conhost.exe Process ID - 1528 [04-10-2024 13:25:41] Process Exited: Process Name - w3wp.exe Process ID - 11896 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:25:50] New process found: Process Name - updater.exe Process ID - 6800 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:50] New process found: Process Name - updater.exe Process ID - 1524 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:50] New process found: Process Name - updater.exe Process ID - 8640 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:50] New process found: Process Name - updater.exe Process ID - 9480 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 6800 Current State - SERVICE_RUNNING [04-10-2024 13:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 8640 Current State - SERVICE_RUNNING [04-10-2024 13:26:00] Process Exited: Process Name - updater.exe Process ID - 1524 [04-10-2024 13:26:00] Process Exited: Process Name - updater.exe Process ID - 6800 [04-10-2024 13:26:00] Process Exited: Process Name - updater.exe Process ID - 8640 [04-10-2024 13:26:00] Process Exited: Process Name - updater.exe Process ID - 9480 [04-10-2024 13:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 13:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 13:26:27] New process found: Process Name - w3wp.exe Process ID - 9032 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:26:27] Process Exited: Process Name - w3wp.exe Process ID - 10076 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2056 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7984 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:28:07] New process found: Process Name - w3wp.exe Process ID - 11920 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com Web application pool name - masteradmin.taxtribute.com [04-10-2024 13:28:07] New process found: Process Name - conhost.exe Process ID - 2572 Process Identity - IIS APPPOOL\masteradmin.taxtribute.com [04-10-2024 13:28:11] Process Exited: Process Name - conhost.exe Process ID - 952 [04-10-2024 13:28:11] Process Exited: Process Name - w3wp.exe Process ID - 10596 Web application pool name - taxtribute.com [04-10-2024 13:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2056 [04-10-2024 13:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7984 [04-10-2024 13:28:34] Process Exited: Process Name - conhost.exe Process ID - 1480 [04-10-2024 13:28:34] Process Exited: Process Name - w3wp.exe Process ID - 11548 Web application pool name - pnacademy.acwits.in [04-10-2024 13:30:01] New process found: Process Name - w3wp.exe Process ID - 8168 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 13:30:59] Process Exited: Process Name - w3wp.exe Process ID - 1220 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:30:59] Process Exited: Process Name - conhost.exe Process ID - 7492 [04-10-2024 13:31:00] Process Exited: Process Name - w3wp.exe Process ID - 4000 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 13:31:00] Process Exited: Process Name - conhost.exe Process ID - 7260 [04-10-2024 13:31:28] New process found: Process Name - w3wp.exe Process ID - 11232 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:31:28] Process Exited: Process Name - w3wp.exe Process ID - 9032 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:32:03] New process found: Process Name - w3wp.exe Process ID - 8476 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 13:32:56] New process found: Process Name - w3wp.exe Process ID - 13100 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:32:56] New process found: Process Name - conhost.exe Process ID - 6740 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:35:11] Process Exited: Process Name - w3wp.exe Process ID - 9720 Web application pool name - DefaultAppPool [04-10-2024 13:36:04] Process Exited: Process Name - w3wp.exe Process ID - 8168 Web application pool name - acme-challenge [04-10-2024 13:36:30] New process found: Process Name - w3wp.exe Process ID - 8144 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:36:30] Process Exited: Process Name - w3wp.exe Process ID - 11232 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:36:32] New process found: Process Name - w3wp.exe Process ID - 8828 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:36:32] New process found: Process Name - conhost.exe Process ID - 9340 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 13:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11360 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10596 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:38:05] Process Exited: Process Name - w3wp.exe Process ID - 8476 Web application pool name - prathabypriyal.com [04-10-2024 13:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10596 [04-10-2024 13:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11360 [04-10-2024 13:38:57] Process Exited: Process Name - conhost.exe Process ID - 6740 [04-10-2024 13:38:57] Process Exited: Process Name - w3wp.exe Process ID - 13100 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 9460 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:01] New process found: Process Name - php.exe Process ID - 6032 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:01] New process found: Process Name - conhost.exe Process ID - 9584 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 1172 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:02] New process found: Process Name - php.exe Process ID - 11064 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:02] New process found: Process Name - conhost.exe Process ID - 12828 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 13:39:02] Process Exited: Process Name - php.exe Process ID - 6032 [04-10-2024 13:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 9460 [04-10-2024 13:39:02] Process Exited: Process Name - conhost.exe Process ID - 9584 [04-10-2024 13:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 1172 [04-10-2024 13:39:03] Process Exited: Process Name - php.exe Process ID - 11064 [04-10-2024 13:39:03] Process Exited: Process Name - conhost.exe Process ID - 12828 [04-10-2024 13:39:41] New process found: Process Name - w3wp.exe Process ID - 12324 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 13:39:42] New process found: Process Name - conhost.exe Process ID - 10812 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 13:39:46] Process Exited: Process Name - w3wp.exe Process ID - 7692 Web application pool name - galaxytools.in [04-10-2024 13:39:50] New process found: Process Name - w3wp.exe Process ID - 1804 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 13:40:40] New process found: Process Name - w3wp.exe Process ID - 1048 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:40:40] New process found: Process Name - where.exe Process ID - 344 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:40:40] New process found: Process Name - conhost.exe Process ID - 11200 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:40:41] New process found: Process Name - conhost.exe Process ID - 4032 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:40:41] Process Exited: Process Name - where.exe Process ID - 344 [04-10-2024 13:40:41] Process Exited: Process Name - conhost.exe Process ID - 11200 [04-10-2024 13:41:30] New process found: Process Name - w3wp.exe Process ID - 9592 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:41:30] Process Exited: Process Name - w3wp.exe Process ID - 8144 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:42:17] New process found: Process Name - w3wp.exe Process ID - 12304 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 13:42:34] Process Exited: Process Name - w3wp.exe Process ID - 8828 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 13:42:34] Process Exited: Process Name - conhost.exe Process ID - 9340 [04-10-2024 13:42:56] New process found: Process Name - w3wp.exe Process ID - 11680 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 13:43:05] New process found: Process Name - w3wp.exe Process ID - 11876 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 13:44:01] New process found: Process Name - cmd.exe Process ID - 4016 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:44:01] New process found: Process Name - conhost.exe Process ID - 5876 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:44:01] New process found: Process Name - runtask.exe Process ID - 7468 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:44:01] New process found: Process Name - php.exe Process ID - 11604 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:44:01] New process found: Process Name - conhost.exe Process ID - 9616 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 13:44:02] Process Exited: Process Name - cmd.exe Process ID - 4016 [04-10-2024 13:44:02] Process Exited: Process Name - conhost.exe Process ID - 5876 [04-10-2024 13:44:02] Process Exited: Process Name - runtask.exe Process ID - 7468 [04-10-2024 13:44:02] Process Exited: Process Name - conhost.exe Process ID - 9616 [04-10-2024 13:44:02] Process Exited: Process Name - php.exe Process ID - 11604 [04-10-2024 13:45:43] Process Exited: Process Name - conhost.exe Process ID - 10812 [04-10-2024 13:45:43] Process Exited: Process Name - w3wp.exe Process ID - 12324 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 13:45:53] Process Exited: Process Name - w3wp.exe Process ID - 1804 Web application pool name - galaxytools.in [04-10-2024 13:46:32] New process found: Process Name - w3wp.exe Process ID - 10552 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:46:32] Process Exited: Process Name - w3wp.exe Process ID - 9592 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12736 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:46:43] Process Exited: Process Name - w3wp.exe Process ID - 1048 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:46:43] Process Exited: Process Name - conhost.exe Process ID - 4032 [04-10-2024 13:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 360 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:47:16] New process found: Process Name - w3wp.exe Process ID - 1692 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 13:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 360 [04-10-2024 13:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12736 [04-10-2024 13:48:20] Process Exited: Process Name - w3wp.exe Process ID - 12304 Web application pool name - shop.galaxytools.in [04-10-2024 13:48:29] New process found: Process Name - w3wp.exe Process ID - 8476 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:48:29] New process found: Process Name - conhost.exe Process ID - 12200 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 13:48:42] New process found: Process Name - w3wp.exe Process ID - 4536 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 13:48:42] New process found: Process Name - conhost.exe Process ID - 10156 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 13:49:08] Process Exited: Process Name - w3wp.exe Process ID - 11876 Web application pool name - acme-challenge [04-10-2024 13:49:41] New process found: Process Name - w3wp.exe Process ID - 12828 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 13:51:11] New process found: Process Name - w3wp.exe Process ID - 8112 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:51:33] New process found: Process Name - w3wp.exe Process ID - 7240 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:51:33] Process Exited: Process Name - w3wp.exe Process ID - 10552 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:54:31] Process Exited: Process Name - w3wp.exe Process ID - 8476 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:54:31] Process Exited: Process Name - conhost.exe Process ID - 12200 [04-10-2024 13:55:19] Process Exited: Process Name - w3wp.exe Process ID - 1692 Web application pool name - galaxytools.in [04-10-2024 13:55:36] Process Exited: Process Name - conhost.exe Process ID - 5724 [04-10-2024 13:55:36] Process Exited: Process Name - w3wp.exe Process ID - 11304 Web application pool name - kdbps.edu.in [04-10-2024 13:55:42] New process found: Process Name - w3wp.exe Process ID - 12320 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 13:55:43] Process Exited: Process Name - w3wp.exe Process ID - 12828 Web application pool name - acme-challenge [04-10-2024 13:56:35] New process found: Process Name - w3wp.exe Process ID - 12400 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:56:35] Process Exited: Process Name - w3wp.exe Process ID - 7240 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 13:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11780 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 13:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12356 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 13:56:51] New process found: Process Name - w3wp.exe Process ID - 8596 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:56:51] New process found: Process Name - conhost.exe Process ID - 1192 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 13:57:13] Process Exited: Process Name - w3wp.exe Process ID - 8112 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 13:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11780 [04-10-2024 13:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12356 [04-10-2024 13:58:35] New process found: Process Name - w3wp.exe Process ID - 4180 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 13:58:35] New process found: Process Name - where.exe Process ID - 3984 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 13:58:35] New process found: Process Name - conhost.exe Process ID - 12752 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 13:58:36] New process found: Process Name - conhost.exe Process ID - 12772 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 13:58:36] Process Exited: Process Name - where.exe Process ID - 3984 [04-10-2024 13:58:36] Process Exited: Process Name - conhost.exe Process ID - 12752 [04-10-2024 13:58:44] Process Exited: Process Name - w3wp.exe Process ID - 4536 Web application pool name - taxtribute.com [04-10-2024 13:58:44] Process Exited: Process Name - conhost.exe Process ID - 10156 [04-10-2024 13:59:58] Process Exited: Process Name - w3wp.exe Process ID - 11680 Web application pool name - DefaultAppPool [04-10-2024 14:01:36] New process found: Process Name - w3wp.exe Process ID - 11172 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:01:36] Process Exited: Process Name - w3wp.exe Process ID - 12400 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:02:53] Process Exited: Process Name - conhost.exe Process ID - 1192 [04-10-2024 14:02:53] Process Exited: Process Name - w3wp.exe Process ID - 8596 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:03:27] New process found: Process Name - w3wp.exe Process ID - 10008 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 14:04:54] New process found: Process Name - w3wp.exe Process ID - 2460 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 14:05:01] New process found: Process Name - cmd.exe Process ID - 12692 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:05:01] New process found: Process Name - conhost.exe Process ID - 9268 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:05:01] New process found: Process Name - runtask.exe Process ID - 6312 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:05:01] New process found: Process Name - php.exe Process ID - 12376 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 14:05:01] New process found: Process Name - conhost.exe Process ID - 10384 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 14:05:03] Process Exited: Process Name - runtask.exe Process ID - 6312 [04-10-2024 14:05:03] Process Exited: Process Name - conhost.exe Process ID - 9268 [04-10-2024 14:05:03] Process Exited: Process Name - conhost.exe Process ID - 10384 [04-10-2024 14:05:03] Process Exited: Process Name - php.exe Process ID - 12376 [04-10-2024 14:05:03] Process Exited: Process Name - cmd.exe Process ID - 12692 [04-10-2024 14:05:12] New process found: Process Name - w3wp.exe Process ID - 13228 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 14:05:12] New process found: Process Name - conhost.exe Process ID - 2984 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 14:05:26] New process found: Process Name - w3wp.exe Process ID - 3576 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:05:26] New process found: Process Name - conhost.exe Process ID - 10364 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:06:07] New process found: Process Name - w3wp.exe Process ID - 432 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:06:07] New process found: Process Name - conhost.exe Process ID - 12512 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 14:06:37] New process found: Process Name - w3wp.exe Process ID - 13268 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:06:37] Process Exited: Process Name - w3wp.exe Process ID - 11172 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10852 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4012 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:08:02] New process found: Process Name - w3wp.exe Process ID - 7932 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 14:08:02] New process found: Process Name - conhost.exe Process ID - 11736 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) [04-10-2024 14:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4012 [04-10-2024 14:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10852 [04-10-2024 14:08:25] New process found: Process Name - w3wp.exe Process ID - 12984 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:08:38] New process found: Process Name - w3wp.exe Process ID - 9696 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 14:08:39] New process found: Process Name - conhost.exe Process ID - 10532 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 14:08:40] New process found: Process Name - w3wp.exe Process ID - 1208 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:08:40] New process found: Process Name - conhost.exe Process ID - 7612 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 14:08:45] Process Exited: Process Name - w3wp.exe Process ID - 12320 Web application pool name - galaxytools.in [04-10-2024 14:09:30] Process Exited: Process Name - w3wp.exe Process ID - 10008 Web application pool name - DefaultAppPool [04-10-2024 14:10:56] Process Exited: Process Name - w3wp.exe Process ID - 2460 Web application pool name - edtribute.com [04-10-2024 14:11:14] New process found: Process Name - w3wp.exe Process ID - 10712 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 14:11:14] New process found: Process Name - conhost.exe Process ID - 2556 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 14:11:15] Process Exited: Process Name - conhost.exe Process ID - 2984 [04-10-2024 14:11:15] Process Exited: Process Name - w3wp.exe Process ID - 13228 Web application pool name - taxtribute.com [04-10-2024 14:11:26] New process found: Process Name - w3wp.exe Process ID - 820 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 14:11:28] Process Exited: Process Name - w3wp.exe Process ID - 3576 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:11:28] Process Exited: Process Name - conhost.exe Process ID - 10364 [04-10-2024 14:11:38] New process found: Process Name - w3wp.exe Process ID - 8700 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:11:38] Process Exited: Process Name - w3wp.exe Process ID - 13268 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:11:46] New process found: Process Name - w3wp.exe Process ID - 4196 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:11:47] New process found: Process Name - where.exe Process ID - 5832 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:11:47] New process found: Process Name - conhost.exe Process ID - 2172 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:11:48] New process found: Process Name - conhost.exe Process ID - 10668 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:11:48] Process Exited: Process Name - conhost.exe Process ID - 2172 [04-10-2024 14:11:48] Process Exited: Process Name - where.exe Process ID - 5832 [04-10-2024 14:14:04] Process Exited: Process Name - w3wp.exe Process ID - 7932 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 14:14:04] Process Exited: Process Name - conhost.exe Process ID - 11736 [04-10-2024 14:14:08] Process Exited: Process Name - w3wp.exe Process ID - 432 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:14:08] Process Exited: Process Name - conhost.exe Process ID - 12512 [04-10-2024 14:14:10] New process found: Process Name - w3wp.exe Process ID - 5740 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 14:14:10] New process found: Process Name - where.exe Process ID - 9032 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 14:14:10] New process found: Process Name - conhost.exe Process ID - 1716 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 14:14:11] New process found: Process Name - conhost.exe Process ID - 10836 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 14:14:11] Process Exited: Process Name - conhost.exe Process ID - 1716 [04-10-2024 14:14:11] Process Exited: Process Name - where.exe Process ID - 9032 [04-10-2024 14:14:27] Process Exited: Process Name - w3wp.exe Process ID - 12984 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:14:40] Process Exited: Process Name - w3wp.exe Process ID - 9696 Web application pool name - csr.bmvfragrances.com [04-10-2024 14:14:40] Process Exited: Process Name - conhost.exe Process ID - 10532 [04-10-2024 14:15:38] New process found: Process Name - w3wp.exe Process ID - 13268 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 14:15:38] New process found: Process Name - conhost.exe Process ID - 8024 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 14:16:24] New process found: Process Name - w3wp.exe Process ID - 1200 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:16:40] New process found: Process Name - w3wp.exe Process ID - 7932 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:16:40] Process Exited: Process Name - w3wp.exe Process ID - 8700 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:16:41] Process Exited: Process Name - w3wp.exe Process ID - 1208 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:16:41] Process Exited: Process Name - conhost.exe Process ID - 7612 [04-10-2024 14:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13040 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4376 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:17:16] Process Exited: Process Name - conhost.exe Process ID - 2556 [04-10-2024 14:17:16] Process Exited: Process Name - w3wp.exe Process ID - 10712 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 14:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4376 [04-10-2024 14:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13040 [04-10-2024 14:18:18] New process found: Process Name - w3wp.exe Process ID - 12904 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 14:18:28] New process found: Process Name - w3wp.exe Process ID - 13016 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:18:28] New process found: Process Name - conhost.exe Process ID - 5556 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 14:19:48] Process Exited: Process Name - w3wp.exe Process ID - 4196 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:19:48] Process Exited: Process Name - conhost.exe Process ID - 10668 [04-10-2024 14:21:29] Process Exited: Process Name - w3wp.exe Process ID - 820 Web application pool name - DefaultAppPool [04-10-2024 14:21:41] New process found: Process Name - w3wp.exe Process ID - 1704 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:21:41] Process Exited: Process Name - w3wp.exe Process ID - 7932 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:21:53] New process found: Process Name - w3wp.exe Process ID - 10848 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:21:53] New process found: Process Name - conhost.exe Process ID - 13220 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:21:57] New process found: Process Name - w3wp.exe Process ID - 7496 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:21:57] New process found: Process Name - conhost.exe Process ID - 1576 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 14:23:18] New process found: Process Name - w3wp.exe Process ID - 9788 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 14:23:26] Process Exited: Process Name - w3wp.exe Process ID - 1200 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:24:20] Process Exited: Process Name - w3wp.exe Process ID - 12904 Web application pool name - galaxytools.in [04-10-2024 14:25:01] New process found: Process Name - cmd.exe Process ID - 10712 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:01] New process found: Process Name - conhost.exe Process ID - 1840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:01] New process found: Process Name - runtask.exe Process ID - 9688 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:01] New process found: Process Name - php.exe Process ID - 13232 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 14:25:01] New process found: Process Name - conhost.exe Process ID - 8096 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 14:25:04] Process Exited: Process Name - conhost.exe Process ID - 1840 [04-10-2024 14:25:04] Process Exited: Process Name - conhost.exe Process ID - 8096 [04-10-2024 14:25:04] Process Exited: Process Name - runtask.exe Process ID - 9688 [04-10-2024 14:25:04] Process Exited: Process Name - cmd.exe Process ID - 10712 [04-10-2024 14:25:04] Process Exited: Process Name - php.exe Process ID - 13232 [04-10-2024 14:25:30] Process Exited: Process Name - conhost.exe Process ID - 5556 [04-10-2024 14:25:30] Process Exited: Process Name - w3wp.exe Process ID - 13016 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:25:40] Process Exited: Process Name - conhost.exe Process ID - 8024 [04-10-2024 14:25:40] Process Exited: Process Name - w3wp.exe Process ID - 13268 Web application pool name - taxtribute.com [04-10-2024 14:25:47] New process found: Process Name - w3wp.exe Process ID - 11956 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 14:25:47] New process found: Process Name - conhost.exe Process ID - 11768 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 14:25:50] New process found: Process Name - updater.exe Process ID - 5532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:50] New process found: Process Name - updater.exe Process ID - 11836 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:50] New process found: Process Name - updater.exe Process ID - 2924 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:50] New process found: Process Name - updater.exe Process ID - 12644 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 5532 Current State - SERVICE_RUNNING [04-10-2024 14:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 2924 Current State - SERVICE_RUNNING [04-10-2024 14:26:00] Process Exited: Process Name - updater.exe Process ID - 2924 [04-10-2024 14:26:00] Process Exited: Process Name - updater.exe Process ID - 5532 [04-10-2024 14:26:00] Process Exited: Process Name - updater.exe Process ID - 11836 [04-10-2024 14:26:00] Process Exited: Process Name - updater.exe Process ID - 12644 [04-10-2024 14:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 14:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 14:26:23] New process found: Process Name - w3wp.exe Process ID - 1808 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 14:26:42] New process found: Process Name - w3wp.exe Process ID - 11320 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6740 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:26:42] Process Exited: Process Name - w3wp.exe Process ID - 1704 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 12616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:27:51] New process found: Process Name - w3wp.exe Process ID - 1092 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 14:27:52] New process found: Process Name - w3wp.exe Process ID - 11876 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:27:53] New process found: Process Name - conhost.exe Process ID - 11032 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 14:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6740 [04-10-2024 14:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12616 [04-10-2024 14:29:05] New process found: Process Name - w3wp.exe Process ID - 7240 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 14:29:20] Process Exited: Process Name - w3wp.exe Process ID - 9788 Web application pool name - DefaultAppPool [04-10-2024 14:29:32] New process found: Process Name - w3wp.exe Process ID - 12996 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:29:32] New process found: Process Name - conhost.exe Process ID - 12564 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 14:29:59] Process Exited: Process Name - conhost.exe Process ID - 1576 [04-10-2024 14:29:59] Process Exited: Process Name - w3wp.exe Process ID - 7496 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:31:15] New process found: Process Name - w3wp.exe Process ID - 9720 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 14:31:15] New process found: Process Name - conhost.exe Process ID - 12448 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 14:31:43] New process found: Process Name - w3wp.exe Process ID - 3776 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:31:43] Process Exited: Process Name - w3wp.exe Process ID - 11320 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:31:51] New process found: Process Name - w3wp.exe Process ID - 6056 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:32:09] Process Exited: Process Name - conhost.exe Process ID - 2572 [04-10-2024 14:32:09] Process Exited: Process Name - w3wp.exe Process ID - 11920 Web application pool name - masteradmin.taxtribute.com [04-10-2024 14:32:09] Service state changed: Service Name - wisvc Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 14:32:09] Service state changed: Service Name - wuauserv Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 14:32:25] Process Exited: Process Name - w3wp.exe Process ID - 1808 Web application pool name - edtribute.com [04-10-2024 14:32:54] Process Exited: Process Name - w3wp.exe Process ID - 10848 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:32:54] Process Exited: Process Name - conhost.exe Process ID - 13220 [04-10-2024 14:32:57] New process found: Process Name - w3wp.exe Process ID - 11100 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 14:33:08] Service state changed: Service Name - wisvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 14:33:53] Process Exited: Process Name - w3wp.exe Process ID - 1092 Web application pool name - galaxytools.in [04-10-2024 14:34:49] Process Exited: Process Name - conhost.exe Process ID - 11768 [04-10-2024 14:34:49] Process Exited: Process Name - w3wp.exe Process ID - 11956 Web application pool name - taxtribute.com [04-10-2024 14:36:08] Process Exited: Process Name - w3wp.exe Process ID - 7240 Web application pool name - acme-challenge [04-10-2024 14:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 4296 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:36:45] New process found: Process Name - w3wp.exe Process ID - 12596 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:36:45] Process Exited: Process Name - w3wp.exe Process ID - 3776 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8076 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:37:17] Process Exited: Process Name - w3wp.exe Process ID - 9720 Web application pool name - csr.bmvfragrances.com [04-10-2024 14:37:17] Process Exited: Process Name - conhost.exe Process ID - 12448 [04-10-2024 14:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4296 [04-10-2024 14:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8076 [04-10-2024 14:39:00] Process Exited: Process Name - w3wp.exe Process ID - 11100 Web application pool name - DefaultAppPool [04-10-2024 14:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 13216 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 14:39:01] New process found: Process Name - php.exe Process ID - 8596 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 14:39:01] New process found: Process Name - conhost.exe Process ID - 11624 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 14:39:02] Process Exited: Process Name - php.exe Process ID - 8596 [04-10-2024 14:39:02] Process Exited: Process Name - conhost.exe Process ID - 11624 [04-10-2024 14:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 13216 [04-10-2024 14:39:34] New process found: Process Name - w3wp.exe Process ID - 9852 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 14:39:54] Process Exited: Process Name - conhost.exe Process ID - 11032 [04-10-2024 14:39:54] Process Exited: Process Name - w3wp.exe Process ID - 11876 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:40:18] New process found: Process Name - w3wp.exe Process ID - 11292 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 14:40:26] New process found: Process Name - w3wp.exe Process ID - 6096 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 14:40:54] Process Exited: Process Name - w3wp.exe Process ID - 6056 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:41:36] New process found: Process Name - w3wp.exe Process ID - 10008 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 14:41:46] New process found: Process Name - w3wp.exe Process ID - 12120 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:41:46] Process Exited: Process Name - w3wp.exe Process ID - 12596 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:42:19] Service state changed: Service Name - wuauserv Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 14:43:01] New process found: Process Name - w3wp.exe Process ID - 1836 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 14:45:36] Process Exited: Process Name - w3wp.exe Process ID - 9852 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 14:46:28] Process Exited: Process Name - w3wp.exe Process ID - 6096 Web application pool name - edtribute.com [04-10-2024 14:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2200 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:46:47] New process found: Process Name - w3wp.exe Process ID - 11800 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:46:47] Process Exited: Process Name - w3wp.exe Process ID - 12120 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10192 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:47:18] New process found: Process Name - w3wp.exe Process ID - 13228 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 14:47:37] Process Exited: Process Name - w3wp.exe Process ID - 4180 Web application pool name - kdbps.edu.in [04-10-2024 14:47:37] Process Exited: Process Name - conhost.exe Process ID - 12772 [04-10-2024 14:48:01] New process found: Process Name - w3wp.exe Process ID - 9668 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 14:48:02] New process found: Process Name - conhost.exe Process ID - 12020 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 14:48:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2200 [04-10-2024 14:48:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10192 [04-10-2024 14:48:19] New process found: Process Name - w3wp.exe Process ID - 13192 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:48:19] New process found: Process Name - conhost.exe Process ID - 10712 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:49:03] Process Exited: Process Name - w3wp.exe Process ID - 1836 Web application pool name - prathabypriyal.com [04-10-2024 14:50:21] Process Exited: Process Name - w3wp.exe Process ID - 11292 Web application pool name - galaxytools.in [04-10-2024 14:50:33] New process found: Process Name - w3wp.exe Process ID - 12260 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 14:51:48] New process found: Process Name - w3wp.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:51:48] Process Exited: Process Name - w3wp.exe Process ID - 11800 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:53:21] Process Exited: Process Name - w3wp.exe Process ID - 13228 Web application pool name - edtribute.com [04-10-2024 14:53:40] Process Exited: Process Name - php-cgi.exe Process ID - 5960 [04-10-2024 14:53:41] Process Exited: Process Name - w3wp.exe Process ID - 7928 Web application pool name - PleskControlPanel [04-10-2024 14:53:46] New process found: Process Name - w3wp.exe Process ID - 1836 Process Identity - KSHITIJSINGHAL-\IWPD_50(acwits) Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 14:54:20] Process Exited: Process Name - conhost.exe Process ID - 10712 [04-10-2024 14:54:20] Process Exited: Process Name - w3wp.exe Process ID - 13192 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:55:24] New process found: Process Name - w3wp.exe Process ID - 7916 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:55:34] New process found: Process Name - w3wp.exe Process ID - 8412 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 14:55:34] New process found: Process Name - conhost.exe Process ID - 13268 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 14:56:29] New process found: Process Name - w3wp.exe Process ID - 11172 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 14:56:29] New process found: Process Name - conhost.exe Process ID - 6516 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 14:56:36] Process Exited: Process Name - w3wp.exe Process ID - 12260 Web application pool name - galaxytools.in [04-10-2024 14:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13300 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 14:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10128 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 14:56:50] New process found: Process Name - w3wp.exe Process ID - 5712 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:56:50] Process Exited: Process Name - w3wp.exe Process ID - 11768 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 14:56:56] New process found: Process Name - w3wp.exe Process ID - 868 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 14:57:11] New process found: Process Name - w3wp.exe Process ID - 12100 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 14:57:11] New process found: Process Name - conhost.exe Process ID - 9852 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 14:58:02] New process found: Process Name - w3wp.exe Process ID - 10996 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 14:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10128 [04-10-2024 14:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13300 [04-10-2024 14:58:17] New process found: Process Name - w3wp.exe Process ID - 4012 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 14:58:18] New process found: Process Name - conhost.exe Process ID - 8728 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 14:59:32] New process found: Process Name - w3wp.exe Process ID - 12396 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 14:59:48] Process Exited: Process Name - w3wp.exe Process ID - 1836 Web application pool name - adminmain.acwits.in(domain)(4.0)(pool) [04-10-2024 15:00:37] Process Exited: Process Name - w3wp.exe Process ID - 10008 Web application pool name - DefaultAppPool [04-10-2024 15:01:34] Process Exited: Process Name - w3wp.exe Process ID - 8412 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 15:01:34] Process Exited: Process Name - conhost.exe Process ID - 13268 [04-10-2024 15:01:50] New process found: Process Name - w3wp.exe Process ID - 10048 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:01:50] Process Exited: Process Name - w3wp.exe Process ID - 5712 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:02:31] Process Exited: Process Name - conhost.exe Process ID - 6516 [04-10-2024 15:02:31] Process Exited: Process Name - w3wp.exe Process ID - 11172 Web application pool name - taxtribute.com [04-10-2024 15:02:34] New process found: Process Name - w3wp.exe Process ID - 9356 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 15:02:34] New process found: Process Name - conhost.exe Process ID - 8044 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 15:03:58] Process Exited: Process Name - w3wp.exe Process ID - 868 Web application pool name - galaxytools.in [04-10-2024 15:04:13] New process found: Process Name - w3wp.exe Process ID - 8412 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 15:04:20] Process Exited: Process Name - w3wp.exe Process ID - 4012 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:04:20] Process Exited: Process Name - conhost.exe Process ID - 8728 [04-10-2024 15:05:01] New process found: Process Name - cmd.exe Process ID - 6840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:05:01] New process found: Process Name - conhost.exe Process ID - 12596 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:05:01] New process found: Process Name - runtask.exe Process ID - 8456 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:05:01] New process found: Process Name - php.exe Process ID - 12188 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:05:01] New process found: Process Name - conhost.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:05:03] Process Exited: Process Name - cmd.exe Process ID - 6840 [04-10-2024 15:05:03] Process Exited: Process Name - runtask.exe Process ID - 8456 [04-10-2024 15:05:03] Process Exited: Process Name - conhost.exe Process ID - 11768 [04-10-2024 15:05:03] Process Exited: Process Name - php.exe Process ID - 12188 [04-10-2024 15:05:03] Process Exited: Process Name - conhost.exe Process ID - 12596 [04-10-2024 15:05:13] Process Exited: Process Name - conhost.exe Process ID - 9852 [04-10-2024 15:05:13] Process Exited: Process Name - w3wp.exe Process ID - 12100 Web application pool name - csr.bmvfragrances.com [04-10-2024 15:05:23] New process found: Process Name - w3wp.exe Process ID - 12652 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:05:23] New process found: Process Name - conhost.exe Process ID - 952 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 15:05:35] Process Exited: Process Name - w3wp.exe Process ID - 12396 Web application pool name - acme-challenge [04-10-2024 15:06:03] New process found: Process Name - w3wp.exe Process ID - 12284 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 15:06:26] Process Exited: Process Name - w3wp.exe Process ID - 7916 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 6512 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:06:48] New process found: Process Name - SearchProtocolHost.exe Process ID - 7612 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:06:48] New process found: Process Name - SearchFilterHost.exe Process ID - 9916 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11232 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:06:52] New process found: Process Name - w3wp.exe Process ID - 6304 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:06:52] Process Exited: Process Name - w3wp.exe Process ID - 10048 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:08:02] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 7612 [04-10-2024 15:08:02] Process Exited: Process Name - SearchFilterHost.exe Process ID - 9916 [04-10-2024 15:08:04] Process Exited: Process Name - w3wp.exe Process ID - 10996 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 15:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6512 [04-10-2024 15:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11232 [04-10-2024 15:11:04] Process Exited: Process Name - w3wp.exe Process ID - 9668 Web application pool name - kdbps.edu.in [04-10-2024 15:11:04] Process Exited: Process Name - conhost.exe Process ID - 12020 [04-10-2024 15:11:22] New process found: Process Name - w3wp.exe Process ID - 2308 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:11:22] New process found: Process Name - conhost.exe Process ID - 11880 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 15:11:25] Process Exited: Process Name - conhost.exe Process ID - 952 [04-10-2024 15:11:25] Process Exited: Process Name - w3wp.exe Process ID - 12652 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:11:53] New process found: Process Name - w3wp.exe Process ID - 1120 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:11:53] Process Exited: Process Name - w3wp.exe Process ID - 6304 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:12:34] New process found: Process Name - w3wp.exe Process ID - 10524 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 15:12:34] New process found: Process Name - conhost.exe Process ID - 12180 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 15:13:36] Process Exited: Process Name - conhost.exe Process ID - 8044 [04-10-2024 15:13:36] Process Exited: Process Name - w3wp.exe Process ID - 9356 Web application pool name - taxtribute.com [04-10-2024 15:16:43] New process found: Process Name - WmiPrvSE.exe Process ID - 7348 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8184 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:16:55] New process found: Process Name - w3wp.exe Process ID - 11088 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:16:55] Process Exited: Process Name - w3wp.exe Process ID - 1120 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:17:05] Process Exited: Process Name - w3wp.exe Process ID - 12284 Web application pool name - galaxytools.in [04-10-2024 15:17:25] Process Exited: Process Name - w3wp.exe Process ID - 2308 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:17:25] Process Exited: Process Name - conhost.exe Process ID - 11880 [04-10-2024 15:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7348 [04-10-2024 15:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8184 [04-10-2024 15:18:16] New process found: Process Name - w3wp.exe Process ID - 1736 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 15:18:16] New process found: Process Name - where.exe Process ID - 12572 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:18:16] New process found: Process Name - conhost.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:18:17] New process found: Process Name - conhost.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:18:17] Process Exited: Process Name - conhost.exe Process ID - 11856 [04-10-2024 15:18:17] Process Exited: Process Name - where.exe Process ID - 12572 [04-10-2024 15:19:16] New process found: Process Name - w3wp.exe Process ID - 12036 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 15:20:37] New process found: Process Name - w3wp.exe Process ID - 4024 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:20:37] New process found: Process Name - conhost.exe Process ID - 11128 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 15:21:00] New process found: Process Name - w3wp.exe Process ID - 7480 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 15:21:00] New process found: Process Name - conhost.exe Process ID - 7868 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 15:21:56] New process found: Process Name - w3wp.exe Process ID - 12772 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:21:56] Process Exited: Process Name - w3wp.exe Process ID - 11088 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:22:20] New process found: Process Name - w3wp.exe Process ID - 11036 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 15:22:21] New process found: Process Name - w3wp.exe Process ID - 8292 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:22:21] New process found: Process Name - conhost.exe Process ID - 10864 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 15:23:52] New process found: Process Name - w3wp.exe Process ID - 12904 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:24:29] New process found: Process Name - w3wp.exe Process ID - 12320 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 15:25:01] New process found: Process Name - cmd.exe Process ID - 2172 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:01] New process found: Process Name - conhost.exe Process ID - 12444 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:01] New process found: Process Name - runtask.exe Process ID - 1288 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:01] New process found: Process Name - php.exe Process ID - 11812 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:25:01] New process found: Process Name - conhost.exe Process ID - 9448 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:25:04] Process Exited: Process Name - runtask.exe Process ID - 1288 [04-10-2024 15:25:04] Process Exited: Process Name - cmd.exe Process ID - 2172 [04-10-2024 15:25:04] Process Exited: Process Name - conhost.exe Process ID - 9448 [04-10-2024 15:25:04] Process Exited: Process Name - php.exe Process ID - 11812 [04-10-2024 15:25:04] Process Exited: Process Name - conhost.exe Process ID - 12444 [04-10-2024 15:25:19] Process Exited: Process Name - w3wp.exe Process ID - 12036 Web application pool name - galaxytools.in [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 11984 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 5164 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 7136 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 8656 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 6520 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] New process found: Process Name - updater.exe Process ID - 12740 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 7136 Current State - SERVICE_RUNNING [04-10-2024 15:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 6520 Current State - SERVICE_RUNNING [04-10-2024 15:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1200 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1192 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:26:57] New process found: Process Name - w3wp.exe Process ID - 11880 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:26:57] Process Exited: Process Name - w3wp.exe Process ID - 12772 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:27:02] Process Exited: Process Name - w3wp.exe Process ID - 7480 Web application pool name - taxtribute.com [04-10-2024 15:27:02] Process Exited: Process Name - conhost.exe Process ID - 7868 [04-10-2024 15:27:09] Process Exited: Process Name - updater.exe Process ID - 5164 [04-10-2024 15:27:09] Process Exited: Process Name - updater.exe Process ID - 11984 [04-10-2024 15:27:19] Process Exited: Process Name - updater.exe Process ID - 6520 [04-10-2024 15:27:19] Process Exited: Process Name - updater.exe Process ID - 7136 [04-10-2024 15:27:19] Process Exited: Process Name - updater.exe Process ID - 8656 [04-10-2024 15:27:19] Process Exited: Process Name - updater.exe Process ID - 12740 [04-10-2024 15:27:19] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 15:27:19] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 15:27:39] Process Exited: Process Name - w3wp.exe Process ID - 4024 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:27:39] Process Exited: Process Name - conhost.exe Process ID - 11128 [04-10-2024 15:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1192 [04-10-2024 15:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1200 [04-10-2024 15:28:23] Process Exited: Process Name - w3wp.exe Process ID - 8292 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:28:23] Process Exited: Process Name - conhost.exe Process ID - 10864 [04-10-2024 15:28:23] Process Exited: Process Name - w3wp.exe Process ID - 11036 Web application pool name - acme-challenge [04-10-2024 15:29:55] Process Exited: Process Name - w3wp.exe Process ID - 12904 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:30:29] New process found: Process Name - w3wp.exe Process ID - 8320 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 15:30:31] Process Exited: Process Name - w3wp.exe Process ID - 12320 Web application pool name - shop.galaxytools.in [04-10-2024 15:31:19] Process Exited: Process Name - conhost.exe Process ID - 176 [04-10-2024 15:31:19] Process Exited: Process Name - w3wp.exe Process ID - 1736 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 15:31:59] New process found: Process Name - w3wp.exe Process ID - 12652 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:31:59] Process Exited: Process Name - w3wp.exe Process ID - 11880 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:32:34] Process Exited: Process Name - conhost.exe Process ID - 12564 [04-10-2024 15:32:34] Process Exited: Process Name - w3wp.exe Process ID - 12996 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:34:12] Process Exited: Process Name - w3wp.exe Process ID - 5740 Web application pool name - pnacademy.acwits.in [04-10-2024 15:34:12] Process Exited: Process Name - conhost.exe Process ID - 10836 [04-10-2024 15:34:16] New process found: Process Name - w3wp.exe Process ID - 9320 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:34:16] New process found: Process Name - where.exe Process ID - 8640 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 15:34:16] New process found: Process Name - conhost.exe Process ID - 13288 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 15:34:17] New process found: Process Name - conhost.exe Process ID - 5304 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 15:34:17] Process Exited: Process Name - where.exe Process ID - 8640 [04-10-2024 15:34:17] Process Exited: Process Name - conhost.exe Process ID - 13288 [04-10-2024 15:34:21] New process found: Process Name - w3wp.exe Process ID - 5720 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:34:24] New process found: Process Name - conhost.exe Process ID - 11384 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 15:36:15] New process found: Process Name - w3wp.exe Process ID - 10988 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:36:31] Process Exited: Process Name - w3wp.exe Process ID - 8320 Web application pool name - galaxytools.in [04-10-2024 15:36:43] New process found: Process Name - WmiPrvSE.exe Process ID - 3772 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:36:43] New process found: Process Name - w3wp.exe Process ID - 10572 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 15:36:44] New process found: Process Name - where.exe Process ID - 3068 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 15:36:44] New process found: Process Name - conhost.exe Process ID - 8700 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 15:36:45] New process found: Process Name - conhost.exe Process ID - 12564 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 15:36:45] Process Exited: Process Name - where.exe Process ID - 3068 [04-10-2024 15:36:45] Process Exited: Process Name - conhost.exe Process ID - 8700 [04-10-2024 15:36:50] New process found: Process Name - WmiPrvSE.exe Process ID - 1692 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:37:00] New process found: Process Name - w3wp.exe Process ID - 10124 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:37:00] Process Exited: Process Name - w3wp.exe Process ID - 12652 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1692 [04-10-2024 15:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3772 [04-10-2024 15:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 5672 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:01] New process found: Process Name - php.exe Process ID - 5592 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:01] New process found: Process Name - conhost.exe Process ID - 1612 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 12068 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:02] New process found: Process Name - php.exe Process ID - 10700 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:02] New process found: Process Name - conhost.exe Process ID - 9224 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 15:39:02] Process Exited: Process Name - conhost.exe Process ID - 1612 [04-10-2024 15:39:02] Process Exited: Process Name - php.exe Process ID - 5592 [04-10-2024 15:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 5672 [04-10-2024 15:39:03] Process Exited: Process Name - conhost.exe Process ID - 9224 [04-10-2024 15:39:03] Process Exited: Process Name - php.exe Process ID - 10700 [04-10-2024 15:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 12068 [04-10-2024 15:40:19] Process Exited: Process Name - conhost.exe Process ID - 5304 [04-10-2024 15:40:19] Process Exited: Process Name - w3wp.exe Process ID - 9320 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:40:22] Process Exited: Process Name - w3wp.exe Process ID - 5720 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 15:40:22] Process Exited: Process Name - conhost.exe Process ID - 11384 [04-10-2024 15:40:43] New process found: Process Name - w3wp.exe Process ID - 10176 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 15:40:43] New process found: Process Name - conhost.exe Process ID - 11672 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 15:41:17] New process found: Process Name - w3wp.exe Process ID - 12648 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 15:41:27] New process found: Process Name - w3wp.exe Process ID - 11508 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:41:27] New process found: Process Name - conhost.exe Process ID - 912 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 15:42:00] New process found: Process Name - w3wp.exe Process ID - 9464 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:42:00] Process Exited: Process Name - w3wp.exe Process ID - 10124 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:42:01] New process found: Process Name - w3wp.exe Process ID - 9724 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 15:42:01] New process found: Process Name - where.exe Process ID - 13152 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:42:01] New process found: Process Name - conhost.exe Process ID - 5436 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:42:02] New process found: Process Name - conhost.exe Process ID - 12148 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 15:42:02] Process Exited: Process Name - conhost.exe Process ID - 5436 [04-10-2024 15:42:02] Process Exited: Process Name - where.exe Process ID - 13152 [04-10-2024 15:42:19] New process found: Process Name - w3wp.exe Process ID - 12876 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:42:19] New process found: Process Name - conhost.exe Process ID - 10588 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 15:42:45] Process Exited: Process Name - w3wp.exe Process ID - 10572 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 15:42:45] Process Exited: Process Name - conhost.exe Process ID - 12564 [04-10-2024 15:44:01] New process found: Process Name - cmd.exe Process ID - 1304 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:44:01] New process found: Process Name - conhost.exe Process ID - 8732 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:44:01] New process found: Process Name - runtask.exe Process ID - 9840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:44:01] New process found: Process Name - php.exe Process ID - 11148 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:44:01] New process found: Process Name - conhost.exe Process ID - 876 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 15:44:02] Process Exited: Process Name - conhost.exe Process ID - 876 [04-10-2024 15:44:02] Process Exited: Process Name - cmd.exe Process ID - 1304 [04-10-2024 15:44:02] Process Exited: Process Name - conhost.exe Process ID - 8732 [04-10-2024 15:44:02] Process Exited: Process Name - runtask.exe Process ID - 9840 [04-10-2024 15:44:02] Process Exited: Process Name - php.exe Process ID - 11148 [04-10-2024 15:44:16] Process Exited: Process Name - w3wp.exe Process ID - 8412 Web application pool name - DefaultAppPool [04-10-2024 15:45:02] New process found: Process Name - w3wp.exe Process ID - 10736 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 15:45:02] New process found: Process Name - conhost.exe Process ID - 11748 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 15:46:18] Process Exited: Process Name - w3wp.exe Process ID - 10988 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:46:36] Process Exited: Process Name - w3wp.exe Process ID - 10524 Web application pool name - kdbps.edu.in [04-10-2024 15:46:36] Process Exited: Process Name - conhost.exe Process ID - 12180 [04-10-2024 15:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10004 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7324 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:47:02] New process found: Process Name - w3wp.exe Process ID - 824 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:47:02] Process Exited: Process Name - w3wp.exe Process ID - 9464 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:47:23] New process found: Process Name - w3wp.exe Process ID - 2576 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 15:47:23] New process found: Process Name - where.exe Process ID - 9508 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 15:47:23] New process found: Process Name - conhost.exe Process ID - 11668 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 15:47:24] New process found: Process Name - conhost.exe Process ID - 10900 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 15:47:24] Process Exited: Process Name - where.exe Process ID - 9508 [04-10-2024 15:47:24] Process Exited: Process Name - conhost.exe Process ID - 11668 [04-10-2024 15:47:29] Process Exited: Process Name - conhost.exe Process ID - 912 [04-10-2024 15:47:29] Process Exited: Process Name - w3wp.exe Process ID - 11508 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7324 [04-10-2024 15:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10004 [04-10-2024 15:48:21] Process Exited: Process Name - conhost.exe Process ID - 10588 [04-10-2024 15:48:21] Process Exited: Process Name - w3wp.exe Process ID - 12876 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:48:45] Process Exited: Process Name - w3wp.exe Process ID - 10176 Web application pool name - taxtribute.com [04-10-2024 15:48:45] Process Exited: Process Name - conhost.exe Process ID - 11672 [04-10-2024 15:49:16] New process found: Process Name - w3wp.exe Process ID - 12892 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 15:50:53] New process found: Process Name - w3wp.exe Process ID - 5528 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 15:50:53] New process found: Process Name - conhost.exe Process ID - 12940 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 15:52:03] New process found: Process Name - w3wp.exe Process ID - 12184 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:52:03] Process Exited: Process Name - w3wp.exe Process ID - 824 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 15:52:46] New process found: Process Name - w3wp.exe Process ID - 5908 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:52:46] New process found: Process Name - conhost.exe Process ID - 9940 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 15:53:14] New process found: Process Name - w3wp.exe Process ID - 728 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:53:14] New process found: Process Name - conhost.exe Process ID - 6512 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 15:54:52] New process found: Process Name - conhost.exe Process ID - 2268 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) [04-10-2024 15:56:20] New process found: Process Name - w3wp.exe Process ID - 5236 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2360 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 15:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6996 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 15:56:55] Process Exited: Process Name - w3wp.exe Process ID - 5528 Web application pool name - taxtribute.com [04-10-2024 15:56:55] Process Exited: Process Name - conhost.exe Process ID - 12940 [04-10-2024 15:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2360 [04-10-2024 15:58:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6996 [04-10-2024 15:58:48] Process Exited: Process Name - w3wp.exe Process ID - 5908 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:58:48] Process Exited: Process Name - conhost.exe Process ID - 9940 [04-10-2024 15:59:16] Process Exited: Process Name - w3wp.exe Process ID - 728 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 15:59:16] Process Exited: Process Name - conhost.exe Process ID - 6512 [04-10-2024 16:00:06] New process found: Process Name - w3wp.exe Process ID - 4652 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:00:06] Process Exited: Process Name - conhost.exe Process ID - 2268 [04-10-2024 16:00:06] Process Exited: Process Name - w3wp.exe Process ID - 12184 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:01:04] Process Exited: Process Name - w3wp.exe Process ID - 9724 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 16:01:04] Process Exited: Process Name - conhost.exe Process ID - 12148 [04-10-2024 16:01:38] New process found: Process Name - w3wp.exe Process ID - 5712 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) Web application pool name - pharmacy.acwits.in(domain)(4.0)(pool) [04-10-2024 16:01:41] Process Exited: Process Name - conhost.exe Process ID - 6368 [04-10-2024 16:01:41] Process Exited: Process Name - w3wp.exe Process ID - 7684 Web application pool name - pharmacy.acwits.in(domain)(4.0)(pool) [04-10-2024 16:02:13] New process found: Process Name - w3wp.exe Process ID - 11124 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 16:02:23] Process Exited: Process Name - w3wp.exe Process ID - 5236 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:02:24] New process found: Process Name - w3wp.exe Process ID - 12584 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 16:03:19] Process Exited: Process Name - w3wp.exe Process ID - 12648 Web application pool name - galaxytools.in [04-10-2024 16:04:01] New process found: Process Name - w3wp.exe Process ID - 13244 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:04:01] New process found: Process Name - conhost.exe Process ID - 12800 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 16:04:56] New process found: Process Name - w3wp.exe Process ID - 10088 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 16:05:01] New process found: Process Name - cmd.exe Process ID - 8048 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:05:01] New process found: Process Name - conhost.exe Process ID - 11868 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:05:01] New process found: Process Name - runtask.exe Process ID - 9364 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:05:01] New process found: Process Name - php.exe Process ID - 9356 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:05:01] New process found: Process Name - conhost.exe Process ID - 8252 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:05:04] Process Exited: Process Name - cmd.exe Process ID - 8048 [04-10-2024 16:05:04] Process Exited: Process Name - conhost.exe Process ID - 8252 [04-10-2024 16:05:04] Process Exited: Process Name - php.exe Process ID - 9356 [04-10-2024 16:05:04] Process Exited: Process Name - runtask.exe Process ID - 9364 [04-10-2024 16:05:04] Process Exited: Process Name - conhost.exe Process ID - 11868 [04-10-2024 16:05:07] New process found: Process Name - w3wp.exe Process ID - 7184 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:05:07] Process Exited: Process Name - w3wp.exe Process ID - 4652 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:05:19] Process Exited: Process Name - w3wp.exe Process ID - 12892 Web application pool name - DefaultAppPool [04-10-2024 16:05:21] New process found: Process Name - w3wp.exe Process ID - 912 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 16:05:21] New process found: Process Name - conhost.exe Process ID - 13136 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 16:05:27] New process found: Process Name - w3wp.exe Process ID - 1528 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 16:06:41] Process Exited: Process Name - w3wp.exe Process ID - 5712 Web application pool name - pharmacy.acwits.in(domain)(4.0)(pool) [04-10-2024 16:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2744 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9648 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2744 [04-10-2024 16:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9648 [04-10-2024 16:08:27] Process Exited: Process Name - w3wp.exe Process ID - 12584 Web application pool name - shop.galaxytools.in [04-10-2024 16:10:03] Process Exited: Process Name - conhost.exe Process ID - 12800 [04-10-2024 16:10:03] Process Exited: Process Name - w3wp.exe Process ID - 13244 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:10:08] New process found: Process Name - w3wp.exe Process ID - 8644 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:10:08] Process Exited: Process Name - w3wp.exe Process ID - 7184 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:11:22] Process Exited: Process Name - w3wp.exe Process ID - 912 Web application pool name - csr.bmvfragrances.com [04-10-2024 16:11:22] Process Exited: Process Name - conhost.exe Process ID - 13136 [04-10-2024 16:12:33] New process found: Process Name - w3wp.exe Process ID - 4528 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 16:13:17] New process found: Process Name - w3wp.exe Process ID - 10884 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 16:13:17] New process found: Process Name - conhost.exe Process ID - 8604 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 16:15:09] New process found: Process Name - w3wp.exe Process ID - 5708 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:15:09] Process Exited: Process Name - w3wp.exe Process ID - 8644 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:15:25] New process found: Process Name - w3wp.exe Process ID - 8200 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 16:15:25] New process found: Process Name - conhost.exe Process ID - 9936 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 16:15:56] New process found: Process Name - w3wp.exe Process ID - 10656 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) Web application pool name - medblinkit.com(domain)(4.0)(pool) [04-10-2024 16:15:58] Process Exited: Process Name - w3wp.exe Process ID - 11060 Web application pool name - medblinkit.com(domain)(4.0)(pool) [04-10-2024 16:15:58] Process Exited: Process Name - conhost.exe Process ID - 11096 [04-10-2024 16:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11072 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8652 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:18:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8652 [04-10-2024 16:18:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11072 [04-10-2024 16:18:36] Process Exited: Process Name - w3wp.exe Process ID - 4528 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 16:19:05] New process found: Process Name - w3wp.exe Process ID - 2572 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 16:19:05] New process found: Process Name - conhost.exe Process ID - 9752 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 16:20:11] New process found: Process Name - w3wp.exe Process ID - 4000 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:20:11] Process Exited: Process Name - w3wp.exe Process ID - 5708 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:20:19] Process Exited: Process Name - conhost.exe Process ID - 8604 [04-10-2024 16:20:19] Process Exited: Process Name - w3wp.exe Process ID - 10884 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 16:20:58] Process Exited: Process Name - w3wp.exe Process ID - 10088 Web application pool name - galaxytools.in [04-10-2024 16:20:59] Process Exited: Process Name - w3wp.exe Process ID - 10656 Web application pool name - medblinkit.com(domain)(4.0)(pool) [04-10-2024 16:21:27] Process Exited: Process Name - w3wp.exe Process ID - 8200 Web application pool name - taxtribute.com [04-10-2024 16:21:27] Process Exited: Process Name - conhost.exe Process ID - 9936 [04-10-2024 16:21:29] Process Exited: Process Name - w3wp.exe Process ID - 1528 Web application pool name - DefaultAppPool [04-10-2024 16:21:40] New process found: Process Name - w3wp.exe Process ID - 11276 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 16:21:54] New process found: Process Name - w3wp.exe Process ID - 3364 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:22:18] New process found: Process Name - w3wp.exe Process ID - 11920 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 16:25:01] New process found: Process Name - cmd.exe Process ID - 11120 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:01] New process found: Process Name - conhost.exe Process ID - 6648 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:01] New process found: Process Name - runtask.exe Process ID - 6644 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:01] New process found: Process Name - php.exe Process ID - 8532 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:25:01] New process found: Process Name - conhost.exe Process ID - 13004 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:25:05] Process Exited: Process Name - runtask.exe Process ID - 6644 [04-10-2024 16:25:05] Process Exited: Process Name - conhost.exe Process ID - 6648 [04-10-2024 16:25:05] Process Exited: Process Name - php.exe Process ID - 8532 [04-10-2024 16:25:05] Process Exited: Process Name - cmd.exe Process ID - 11120 [04-10-2024 16:25:05] Process Exited: Process Name - conhost.exe Process ID - 13004 [04-10-2024 16:25:08] Process Exited: Process Name - w3wp.exe Process ID - 2572 Web application pool name - csr.bmvfragrances.com [04-10-2024 16:25:08] Process Exited: Process Name - conhost.exe Process ID - 9752 [04-10-2024 16:25:09] New process found: Process Name - w3wp.exe Process ID - 6368 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:25:09] New process found: Process Name - conhost.exe Process ID - 11312 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 16:25:12] New process found: Process Name - w3wp.exe Process ID - 11768 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:25:12] Process Exited: Process Name - w3wp.exe Process ID - 4000 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:25:25] New process found: Process Name - w3wp.exe Process ID - 1752 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 16:25:25] New process found: Process Name - conhost.exe Process ID - 2980 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 16:25:50] New process found: Process Name - updater.exe Process ID - 12540 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:50] New process found: Process Name - updater.exe Process ID - 1992 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:50] New process found: Process Name - updater.exe Process ID - 10376 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:50] New process found: Process Name - updater.exe Process ID - 7436 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 12540 Current State - SERVICE_RUNNING [04-10-2024 16:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 10376 Current State - SERVICE_RUNNING [04-10-2024 16:26:00] Process Exited: Process Name - updater.exe Process ID - 1992 [04-10-2024 16:26:00] Process Exited: Process Name - updater.exe Process ID - 7436 [04-10-2024 16:26:00] Process Exited: Process Name - updater.exe Process ID - 10376 [04-10-2024 16:26:00] Process Exited: Process Name - updater.exe Process ID - 12540 [04-10-2024 16:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 16:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 16:26:27] New process found: Process Name - w3wp.exe Process ID - 12208 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:26:28] New process found: Process Name - conhost.exe Process ID - 8536 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 16:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 3340 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10892 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:27:42] Process Exited: Process Name - w3wp.exe Process ID - 11276 Web application pool name - DefaultAppPool [04-10-2024 16:27:49] New process found: Process Name - w3wp.exe Process ID - 2572 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) Web application pool name - pharmacy.acwits.in(domain)(4.0)(pool) [04-10-2024 16:27:49] New process found: Process Name - where.exe Process ID - 3720 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) [04-10-2024 16:27:49] New process found: Process Name - conhost.exe Process ID - 9788 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) [04-10-2024 16:27:50] New process found: Process Name - conhost.exe Process ID - 732 Process Identity - KSHITIJSINGHAL-\IWPD_80(acwits) [04-10-2024 16:27:50] Process Exited: Process Name - where.exe Process ID - 3720 [04-10-2024 16:27:50] Process Exited: Process Name - conhost.exe Process ID - 9788 [04-10-2024 16:27:56] Process Exited: Process Name - w3wp.exe Process ID - 3364 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 3340 [04-10-2024 16:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10892 [04-10-2024 16:29:03] New process found: Process Name - w3wp.exe Process ID - 6996 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 16:29:03] New process found: Process Name - conhost.exe Process ID - 8308 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 16:29:04] New process found: Process Name - w3wp.exe Process ID - 8460 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 16:29:04] New process found: Process Name - conhost.exe Process ID - 12412 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 16:29:29] New process found: Process Name - w3wp.exe Process ID - 12684 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 16:30:13] New process found: Process Name - w3wp.exe Process ID - 11908 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:30:13] Process Exited: Process Name - w3wp.exe Process ID - 11768 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:30:15] New process found: Process Name - php-cgi.exe Process ID - 10292 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 16:31:01] New process found: Process Name - cmd.exe Process ID - 11200 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:31:01] New process found: Process Name - conhost.exe Process ID - 10892 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:31:01] New process found: Process Name - runtask.exe Process ID - 7840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:31:01] New process found: Process Name - php.exe Process ID - 12628 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:31:01] New process found: Process Name - conhost.exe Process ID - 10388 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:31:10] Process Exited: Process Name - w3wp.exe Process ID - 6368 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:31:10] Process Exited: Process Name - conhost.exe Process ID - 11312 [04-10-2024 16:31:27] Process Exited: Process Name - w3wp.exe Process ID - 1752 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 16:31:27] Process Exited: Process Name - conhost.exe Process ID - 2980 [04-10-2024 16:32:21] Process Exited: Process Name - w3wp.exe Process ID - 11920 Web application pool name - galaxytools.in [04-10-2024 16:32:23] Process Exited: Process Name - runtask.exe Process ID - 7840 [04-10-2024 16:32:23] Process Exited: Process Name - conhost.exe Process ID - 10388 [04-10-2024 16:32:23] Process Exited: Process Name - conhost.exe Process ID - 10892 [04-10-2024 16:32:23] Process Exited: Process Name - cmd.exe Process ID - 11200 [04-10-2024 16:32:23] Process Exited: Process Name - php.exe Process ID - 12628 [04-10-2024 16:33:07] New process found: Process Name - w3wp.exe Process ID - 12984 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) Web application pool name - medblinkit.com(domain)(4.0)(pool) [04-10-2024 16:33:07] New process found: Process Name - conhost.exe Process ID - 6644 Process Identity - KSHITIJSINGHAL-\IWPD_78(medblink) [04-10-2024 16:33:29] Process Exited: Process Name - conhost.exe Process ID - 8536 [04-10-2024 16:33:29] Process Exited: Process Name - w3wp.exe Process ID - 12208 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:33:42] New process found: Process Name - w3wp.exe Process ID - 4556 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:34:10] New process found: Process Name - w3wp.exe Process ID - 2620 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 16:35:04] Process Exited: Process Name - w3wp.exe Process ID - 10736 Web application pool name - pnacademy.acwits.in [04-10-2024 16:35:04] Process Exited: Process Name - conhost.exe Process ID - 11748 [04-10-2024 16:35:05] Process Exited: Process Name - w3wp.exe Process ID - 6996 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 16:35:05] Process Exited: Process Name - conhost.exe Process ID - 8308 [04-10-2024 16:35:06] Process Exited: Process Name - w3wp.exe Process ID - 8460 Web application pool name - csr.bmvfragrances.com [04-10-2024 16:35:06] Process Exited: Process Name - conhost.exe Process ID - 12412 [04-10-2024 16:35:14] New process found: Process Name - w3wp.exe Process ID - 10892 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:35:14] Process Exited: Process Name - w3wp.exe Process ID - 11908 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:35:31] Process Exited: Process Name - w3wp.exe Process ID - 12684 Web application pool name - DefaultAppPool [04-10-2024 16:35:41] New process found: Process Name - w3wp.exe Process ID - 7368 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 16:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1092 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 7404 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:38:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1092 [04-10-2024 16:38:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 7404 [04-10-2024 16:39:01] New process found: Process Name - cmd.exe Process ID - 10860 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:39:01] New process found: Process Name - conhost.exe Process ID - 6280 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:39:01] New process found: Process Name - runtask.exe Process ID - 11800 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:39:01] New process found: Process Name - php.exe Process ID - 5540 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:39:01] New process found: Process Name - conhost.exe Process ID - 8840 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 12064 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 16:39:02] New process found: Process Name - php.exe Process ID - 1564 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 16:39:02] New process found: Process Name - conhost.exe Process ID - 7332 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 16:39:02] Process Exited: Process Name - php.exe Process ID - 5540 [04-10-2024 16:39:02] Process Exited: Process Name - conhost.exe Process ID - 6280 [04-10-2024 16:39:02] Process Exited: Process Name - conhost.exe Process ID - 8840 [04-10-2024 16:39:02] Process Exited: Process Name - cmd.exe Process ID - 10860 [04-10-2024 16:39:02] Process Exited: Process Name - runtask.exe Process ID - 11800 [04-10-2024 16:39:03] Process Exited: Process Name - php.exe Process ID - 1564 [04-10-2024 16:39:03] Process Exited: Process Name - conhost.exe Process ID - 7332 [04-10-2024 16:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 12064 [04-10-2024 16:40:16] New process found: Process Name - w3wp.exe Process ID - 3344 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:40:16] Process Exited: Process Name - w3wp.exe Process ID - 10892 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:40:37] New process found: Process Name - w3wp.exe Process ID - 8640 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 16:40:59] New process found: Process Name - w3wp.exe Process ID - 9048 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 16:41:00] New process found: Process Name - where.exe Process ID - 12632 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 16:41:00] New process found: Process Name - conhost.exe Process ID - 4268 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 16:41:01] New process found: Process Name - conhost.exe Process ID - 9120 Process Identity - KSHITIJSINGHAL-\IWPD_71(acwits) [04-10-2024 16:41:01] Process Exited: Process Name - conhost.exe Process ID - 4268 [04-10-2024 16:41:01] Process Exited: Process Name - where.exe Process ID - 12632 [04-10-2024 16:41:12] New process found: Process Name - w3wp.exe Process ID - 3192 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 16:41:12] New process found: Process Name - conhost.exe Process ID - 528 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 16:41:43] Process Exited: Process Name - w3wp.exe Process ID - 7368 Web application pool name - prathabypriyal.com [04-10-2024 16:41:50] New process found: Process Name - w3wp.exe Process ID - 7852 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 16:41:55] New process found: Process Name - w3wp.exe Process ID - 6272 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:42:11] New process found: Process Name - conhost.exe Process ID - 12148 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 16:42:55] New process found: Process Name - w3wp.exe Process ID - 11584 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 16:42:55] New process found: Process Name - conhost.exe Process ID - 11016 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 16:43:44] Process Exited: Process Name - w3wp.exe Process ID - 4556 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:44:00] New process found: Process Name - cmd.exe Process ID - 6292 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:44:00] New process found: Process Name - conhost.exe Process ID - 544 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:44:00] New process found: Process Name - runtask.exe Process ID - 4616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:44:01] Process Exited: Process Name - conhost.exe Process ID - 544 [04-10-2024 16:44:01] Process Exited: Process Name - runtask.exe Process ID - 4616 [04-10-2024 16:44:01] Process Exited: Process Name - cmd.exe Process ID - 6292 [04-10-2024 16:44:12] Process Exited: Process Name - w3wp.exe Process ID - 2620 Web application pool name - galaxytools.in [04-10-2024 16:44:28] New process found: Process Name - w3wp.exe Process ID - 13300 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:45:17] New process found: Process Name - w3wp.exe Process ID - 10564 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:45:17] Process Exited: Process Name - w3wp.exe Process ID - 3344 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:45:19] New process found: Process Name - w3wp.exe Process ID - 13096 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) Web application pool name - legal.acwits.in(domain)(4.0)(pool) [04-10-2024 16:45:20] New process found: Process Name - conhost.exe Process ID - 3356 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) [04-10-2024 16:45:26] Process Exited: Process Name - w3wp.exe Process ID - 2576 Web application pool name - kdbps.edu.in [04-10-2024 16:45:26] Process Exited: Process Name - conhost.exe Process ID - 10900 [04-10-2024 16:45:43] New process found: Process Name - w3wp.exe Process ID - 7404 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 16:45:48] New process found: Process Name - w3wp.exe Process ID - 6468 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 16:46:01] New process found: Process Name - cmd.exe Process ID - 228 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:46:01] New process found: Process Name - conhost.exe Process ID - 10892 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:46:01] New process found: Process Name - runtask.exe Process ID - 9648 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:46:01] New process found: Process Name - php.exe Process ID - 11628 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:46:01] New process found: Process Name - conhost.exe Process ID - 5868 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:46:02] Process Exited: Process Name - cmd.exe Process ID - 228 [04-10-2024 16:46:02] Process Exited: Process Name - conhost.exe Process ID - 5868 [04-10-2024 16:46:02] Process Exited: Process Name - runtask.exe Process ID - 9648 [04-10-2024 16:46:02] Process Exited: Process Name - conhost.exe Process ID - 10892 [04-10-2024 16:46:02] Process Exited: Process Name - php.exe Process ID - 11628 [04-10-2024 16:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5724 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9532 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:46:57] New process found: Process Name - w3wp.exe Process ID - 8844 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 16:46:57] New process found: Process Name - conhost.exe Process ID - 8380 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 16:47:02] Process Exited: Process Name - w3wp.exe Process ID - 9048 Web application pool name - pharmablog.acwits.in(domain)(4.0)(pool) [04-10-2024 16:47:02] Process Exited: Process Name - conhost.exe Process ID - 9120 [04-10-2024 16:47:13] Process Exited: Process Name - conhost.exe Process ID - 528 [04-10-2024 16:47:13] Process Exited: Process Name - w3wp.exe Process ID - 3192 Web application pool name - pnacademy.acwits.in [04-10-2024 16:47:52] Process Exited: Process Name - w3wp.exe Process ID - 7852 Web application pool name - tools.taxtribute.com [04-10-2024 16:47:57] Process Exited: Process Name - w3wp.exe Process ID - 6272 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:47:57] Process Exited: Process Name - conhost.exe Process ID - 12148 [04-10-2024 16:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5724 [04-10-2024 16:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9532 [04-10-2024 16:49:41] New process found: Process Name - w3wp.exe Process ID - 12636 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 16:49:57] New process found: Process Name - w3wp.exe Process ID - 11044 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 16:49:57] New process found: Process Name - conhost.exe Process ID - 4596 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 16:50:18] New process found: Process Name - w3wp.exe Process ID - 1552 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:50:18] Process Exited: Process Name - w3wp.exe Process ID - 10564 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:51:21] Process Exited: Process Name - conhost.exe Process ID - 3356 [04-10-2024 16:51:21] Process Exited: Process Name - w3wp.exe Process ID - 13096 Web application pool name - legal.acwits.in(domain)(4.0)(pool) [04-10-2024 16:51:45] Process Exited: Process Name - w3wp.exe Process ID - 7404 Web application pool name - shop.galaxytools.in [04-10-2024 16:52:01] New process found: Process Name - cmd.exe Process ID - 12064 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:52:01] New process found: Process Name - conhost.exe Process ID - 12980 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:52:01] New process found: Process Name - runtask.exe Process ID - 1288 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:52:01] New process found: Process Name - php.exe Process ID - 11344 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:52:01] New process found: Process Name - conhost.exe Process ID - 5664 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 16:52:02] Process Exited: Process Name - runtask.exe Process ID - 1288 [04-10-2024 16:52:02] Process Exited: Process Name - conhost.exe Process ID - 5664 [04-10-2024 16:52:02] Process Exited: Process Name - php.exe Process ID - 11344 [04-10-2024 16:52:02] Process Exited: Process Name - cmd.exe Process ID - 12064 [04-10-2024 16:52:02] Process Exited: Process Name - conhost.exe Process ID - 12980 [04-10-2024 16:52:40] Process Exited: Process Name - w3wp.exe Process ID - 8640 Web application pool name - DefaultAppPool [04-10-2024 16:52:57] Process Exited: Process Name - conhost.exe Process ID - 11016 [04-10-2024 16:52:57] Process Exited: Process Name - w3wp.exe Process ID - 11584 Web application pool name - csr.bmvfragrances.com [04-10-2024 16:53:34] New process found: Process Name - w3wp.exe Process ID - 7424 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 16:53:34] New process found: Process Name - conhost.exe Process ID - 1980 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 16:54:26] New process found: Process Name - w3wp.exe Process ID - 9940 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 16:55:03] New process found: Process Name - w3wp.exe Process ID - 11476 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) Web application pool name - legal.acwits.in(domain)(4.0)(pool) [04-10-2024 16:55:03] New process found: Process Name - conhost.exe Process ID - 11040 Process Identity - KSHITIJSINGHAL-\IWPD_47(acwits) [04-10-2024 16:55:14] New process found: Process Name - w3wp.exe Process ID - 12616 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:55:14] New process found: Process Name - conhost.exe Process ID - 2364 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 16:55:19] New process found: Process Name - w3wp.exe Process ID - 9520 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:55:19] Process Exited: Process Name - w3wp.exe Process ID - 1552 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 16:55:29] Process Exited: Process Name - w3wp.exe Process ID - 13300 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:55:31] New process found: Process Name - w3wp.exe Process ID - 7240 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 16:55:43] Process Exited: Process Name - w3wp.exe Process ID - 12636 Web application pool name - prathabypriyal.com [04-10-2024 16:55:57] New process found: Process Name - w3wp.exe Process ID - 7684 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 16:56:11] New process found: Process Name - w3wp.exe Process ID - 10376 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 16:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 2460 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 16:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10644 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 16:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2460 [04-10-2024 16:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10644 [04-10-2024 16:59:18] New process found: Process Name - w3wp.exe Process ID - 1048 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 16:59:36] Process Exited: Process Name - conhost.exe Process ID - 1980 [04-10-2024 16:59:36] Process Exited: Process Name - w3wp.exe Process ID - 7424 Web application pool name - taxtribute.com [04-10-2024 17:00:21] New process found: Process Name - w3wp.exe Process ID - 11128 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:00:21] Process Exited: Process Name - w3wp.exe Process ID - 9520 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:00:34] New process found: Process Name - w3wp.exe Process ID - 11920 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 17:00:34] New process found: Process Name - conhost.exe Process ID - 3732 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 17:01:14] Process Exited: Process Name - php-cgi.exe Process ID - 10292 [04-10-2024 17:01:15] Process Exited: Process Name - w3wp.exe Process ID - 11124 Web application pool name - PleskControlPanel [04-10-2024 17:01:16] Process Exited: Process Name - conhost.exe Process ID - 2364 [04-10-2024 17:01:16] Process Exited: Process Name - w3wp.exe Process ID - 12616 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:01:34] Process Exited: Process Name - w3wp.exe Process ID - 7240 Web application pool name - shop.galaxytools.in [04-10-2024 17:02:00] Process Exited: Process Name - w3wp.exe Process ID - 7684 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 17:02:50] Process Exited: Process Name - w3wp.exe Process ID - 6468 Web application pool name - galaxytools.in [04-10-2024 17:02:59] Process Exited: Process Name - conhost.exe Process ID - 8380 [04-10-2024 17:02:59] Process Exited: Process Name - w3wp.exe Process ID - 8844 Web application pool name - kdbps.edu.in [04-10-2024 17:03:05] Process Exited: Process Name - conhost.exe Process ID - 11040 [04-10-2024 17:03:05] Process Exited: Process Name - w3wp.exe Process ID - 11476 Web application pool name - legal.acwits.in(domain)(4.0)(pool) [04-10-2024 17:03:59] Process Exited: Process Name - conhost.exe Process ID - 4596 [04-10-2024 17:03:59] Process Exited: Process Name - w3wp.exe Process ID - 11044 Web application pool name - pnacademy.acwits.in [04-10-2024 17:04:13] Process Exited: Process Name - w3wp.exe Process ID - 10376 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:04:30] New process found: Process Name - w3wp.exe Process ID - 12148 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 17:05:01] New process found: Process Name - cmd.exe Process ID - 9120 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:05:01] New process found: Process Name - conhost.exe Process ID - 12300 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:05:01] New process found: Process Name - runtask.exe Process ID - 13040 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:05:01] New process found: Process Name - php.exe Process ID - 11640 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:05:01] New process found: Process Name - conhost.exe Process ID - 12744 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:05:02] New process found: Process Name - crontabmng.exe Process ID - 11204 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:05:02] New process found: Process Name - conhost.exe Process ID - 5920 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:05:03] Process Exited: Process Name - conhost.exe Process ID - 5920 [04-10-2024 17:05:03] Process Exited: Process Name - crontabmng.exe Process ID - 11204 [04-10-2024 17:05:04] Process Exited: Process Name - cmd.exe Process ID - 9120 [04-10-2024 17:05:04] Process Exited: Process Name - php.exe Process ID - 11640 [04-10-2024 17:05:04] Process Exited: Process Name - conhost.exe Process ID - 12300 [04-10-2024 17:05:04] Process Exited: Process Name - conhost.exe Process ID - 12744 [04-10-2024 17:05:04] Process Exited: Process Name - runtask.exe Process ID - 13040 [04-10-2024 17:05:19] New process found: Process Name - w3wp.exe Process ID - 4008 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 17:05:19] New process found: Process Name - conhost.exe Process ID - 9604 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 17:05:20] Process Exited: Process Name - w3wp.exe Process ID - 1048 Web application pool name - acme-challenge [04-10-2024 17:05:22] New process found: Process Name - w3wp.exe Process ID - 8596 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:05:22] Process Exited: Process Name - w3wp.exe Process ID - 11128 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:05:28] New process found: Process Name - w3wp.exe Process ID - 12084 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:05:28] New process found: Process Name - conhost.exe Process ID - 1256 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 17:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10032 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6468 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:07:07] New process found: Process Name - w3wp.exe Process ID - 4124 Process Identity - IIS APPPOOL\PleskControlPanel Web application pool name - PleskControlPanel [04-10-2024 17:07:07] New process found: Process Name - php-cgi.exe Process ID - 11880 Process Identity - IIS APPPOOL\PleskControlPanel [04-10-2024 17:07:22] New process found: Process Name - w3wp.exe Process ID - 6320 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 17:07:22] New process found: Process Name - conhost.exe Process ID - 10712 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 17:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6468 [04-10-2024 17:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10032 [04-10-2024 17:10:24] New process found: Process Name - w3wp.exe Process ID - 12564 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:10:24] Process Exited: Process Name - w3wp.exe Process ID - 8596 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:10:32] Process Exited: Process Name - w3wp.exe Process ID - 12148 Web application pool name - shop.galaxytools.in [04-10-2024 17:11:04] New process found: Process Name - w3wp.exe Process ID - 11064 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:11:30] Process Exited: Process Name - conhost.exe Process ID - 1256 [04-10-2024 17:11:30] Process Exited: Process Name - w3wp.exe Process ID - 12084 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:11:36] Process Exited: Process Name - conhost.exe Process ID - 3732 [04-10-2024 17:11:36] Process Exited: Process Name - w3wp.exe Process ID - 11920 Web application pool name - taxtribute.com [04-10-2024 17:13:29] Process Exited: Process Name - w3wp.exe Process ID - 9940 Web application pool name - DefaultAppPool [04-10-2024 17:14:59] New process found: Process Name - w3wp.exe Process ID - 10908 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 17:14:59] New process found: Process Name - conhost.exe Process ID - 2880 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 17:15:09] New process found: Process Name - InstallAgent.exe Process ID - 5844 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 17:15:09] New process found: Process Name - InstallAgent.exe Process ID - 12816 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 17:15:14] Process Exited: Process Name - InstallAgent.exe Process ID - 5844 [04-10-2024 17:15:14] Process Exited: Process Name - InstallAgent.exe Process ID - 12816 [04-10-2024 17:15:22] New process found: Process Name - w3wp.exe Process ID - 10360 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 17:15:22] New process found: Process Name - conhost.exe Process ID - 7900 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 17:15:24] New process found: Process Name - w3wp.exe Process ID - 576 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:15:24] Process Exited: Process Name - w3wp.exe Process ID - 12564 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:16:05] New process found: Process Name - w3wp.exe Process ID - 12832 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 17:16:20] New process found: Process Name - w3wp.exe Process ID - 2364 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 17:16:21] New process found: Process Name - conhost.exe Process ID - 11868 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) [04-10-2024 17:16:27] New process found: Process Name - w3wp.exe Process ID - 12376 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:16:27] New process found: Process Name - conhost.exe Process ID - 1072 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 17:16:33] New process found: Process Name - w3wp.exe Process ID - 11920 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 17:16:35] New process found: Process Name - conhost.exe Process ID - 10624 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 17:16:43] New process found: Process Name - WmiPrvSE.exe Process ID - 12072 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:16:50] New process found: Process Name - WmiPrvSE.exe Process ID - 13088 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:17:06] Process Exited: Process Name - w3wp.exe Process ID - 11064 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12072 [04-10-2024 17:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13088 [04-10-2024 17:20:26] New process found: Process Name - w3wp.exe Process ID - 5936 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:20:26] Process Exited: Process Name - w3wp.exe Process ID - 576 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:20:47] New process found: Process Name - w3wp.exe Process ID - 8308 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 17:20:54] New process found: Process Name - conhost.exe Process ID - 592 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 17:21:01] Process Exited: Process Name - conhost.exe Process ID - 2880 [04-10-2024 17:21:01] Process Exited: Process Name - w3wp.exe Process ID - 10908 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 17:21:20] Process Exited: Process Name - w3wp.exe Process ID - 4008 Web application pool name - kdbps.edu.in [04-10-2024 17:21:20] Process Exited: Process Name - conhost.exe Process ID - 9604 [04-10-2024 17:21:24] Process Exited: Process Name - conhost.exe Process ID - 7900 [04-10-2024 17:21:24] Process Exited: Process Name - w3wp.exe Process ID - 10360 Web application pool name - taxtribute.com [04-10-2024 17:22:23] Process Exited: Process Name - w3wp.exe Process ID - 2364 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 17:22:23] Process Exited: Process Name - conhost.exe Process ID - 11868 [04-10-2024 17:22:44] New process found: Process Name - w3wp.exe Process ID - 5500 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:22:44] New process found: Process Name - conhost.exe Process ID - 12272 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 17:24:30] Process Exited: Process Name - conhost.exe Process ID - 1072 [04-10-2024 17:24:30] Process Exited: Process Name - w3wp.exe Process ID - 12376 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:25:01] New process found: Process Name - cmd.exe Process ID - 9120 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:01] New process found: Process Name - conhost.exe Process ID - 12996 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:01] New process found: Process Name - runtask.exe Process ID - 9036 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:01] New process found: Process Name - php.exe Process ID - 2308 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:25:01] New process found: Process Name - conhost.exe Process ID - 10284 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:25:04] Process Exited: Process Name - php.exe Process ID - 2308 [04-10-2024 17:25:04] Process Exited: Process Name - runtask.exe Process ID - 9036 [04-10-2024 17:25:04] Process Exited: Process Name - cmd.exe Process ID - 9120 [04-10-2024 17:25:04] Process Exited: Process Name - conhost.exe Process ID - 10284 [04-10-2024 17:25:04] Process Exited: Process Name - conhost.exe Process ID - 12996 [04-10-2024 17:25:24] Process Exited: Process Name - w3wp.exe Process ID - 6320 Web application pool name - pnacademy.acwits.in [04-10-2024 17:25:24] Process Exited: Process Name - conhost.exe Process ID - 10712 [04-10-2024 17:25:27] New process found: Process Name - w3wp.exe Process ID - 8472 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:25:27] Process Exited: Process Name - w3wp.exe Process ID - 5936 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:25:50] New process found: Process Name - updater.exe Process ID - 8184 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:50] New process found: Process Name - updater.exe Process ID - 2436 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:50] New process found: Process Name - updater.exe Process ID - 9316 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:50] New process found: Process Name - updater.exe Process ID - 8544 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 8184 Current State - SERVICE_RUNNING [04-10-2024 17:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 9316 Current State - SERVICE_RUNNING [04-10-2024 17:26:00] Process Exited: Process Name - updater.exe Process ID - 2436 [04-10-2024 17:26:00] Process Exited: Process Name - updater.exe Process ID - 8184 [04-10-2024 17:26:00] Process Exited: Process Name - updater.exe Process ID - 8544 [04-10-2024 17:26:00] Process Exited: Process Name - updater.exe Process ID - 9316 [04-10-2024 17:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 17:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 17:26:05] New process found: Process Name - w3wp.exe Process ID - 11900 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 17:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1048 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4248 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:26:50] Process Exited: Process Name - conhost.exe Process ID - 592 [04-10-2024 17:26:50] Process Exited: Process Name - w3wp.exe Process ID - 8308 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 17:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1048 [04-10-2024 17:28:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4248 [04-10-2024 17:28:35] Process Exited: Process Name - conhost.exe Process ID - 10624 [04-10-2024 17:28:35] Process Exited: Process Name - w3wp.exe Process ID - 11920 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 17:28:46] Process Exited: Process Name - w3wp.exe Process ID - 5500 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:28:46] Process Exited: Process Name - conhost.exe Process ID - 12272 [04-10-2024 17:29:08] Process Exited: Process Name - w3wp.exe Process ID - 12832 Web application pool name - galaxytools.in [04-10-2024 17:29:41] New process found: Process Name - w3wp.exe Process ID - 12384 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 17:30:28] New process found: Process Name - w3wp.exe Process ID - 2308 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:30:28] Process Exited: Process Name - w3wp.exe Process ID - 8472 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:30:29] New process found: Process Name - w3wp.exe Process ID - 5476 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 17:30:29] New process found: Process Name - conhost.exe Process ID - 5308 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 17:30:54] New process found: Process Name - w3wp.exe Process ID - 11392 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 17:32:28] New process found: Process Name - w3wp.exe Process ID - 11984 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 17:32:29] New process found: Process Name - conhost.exe Process ID - 10168 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 17:35:29] New process found: Process Name - w3wp.exe Process ID - 5716 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:35:29] Process Exited: Process Name - w3wp.exe Process ID - 2308 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:35:39] New process found: Process Name - w3wp.exe Process ID - 2016 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:35:39] New process found: Process Name - where.exe Process ID - 10832 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 17:35:39] New process found: Process Name - conhost.exe Process ID - 2172 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 17:35:40] New process found: Process Name - conhost.exe Process ID - 10948 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 17:35:40] Process Exited: Process Name - conhost.exe Process ID - 2172 [04-10-2024 17:35:40] Process Exited: Process Name - where.exe Process ID - 10832 [04-10-2024 17:35:42] Process Exited: Process Name - w3wp.exe Process ID - 12384 Web application pool name - acme-challenge [04-10-2024 17:36:19] New process found: Process Name - w3wp.exe Process ID - 1124 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 17:36:43] New process found: Process Name - w3wp.exe Process ID - 8564 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:36:43] New process found: Process Name - WmiPrvSE.exe Process ID - 12996 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:36:43] New process found: Process Name - conhost.exe Process ID - 6320 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 17:36:49] New process found: Process Name - SearchProtocolHost.exe Process ID - 2748 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:36:49] New process found: Process Name - SearchFilterHost.exe Process ID - 5840 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:36:50] New process found: Process Name - WmiPrvSE.exe Process ID - 12956 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:36:56] Process Exited: Process Name - w3wp.exe Process ID - 11392 Web application pool name - galaxytools.in [04-10-2024 17:38:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 2748 [04-10-2024 17:38:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 5840 [04-10-2024 17:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12956 [04-10-2024 17:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12996 [04-10-2024 17:38:31] Process Exited: Process Name - conhost.exe Process ID - 5308 [04-10-2024 17:38:31] Process Exited: Process Name - w3wp.exe Process ID - 5476 Web application pool name - kdbps.edu.in [04-10-2024 17:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 8432 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:01] New process found: Process Name - php.exe Process ID - 4708 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:01] New process found: Process Name - conhost.exe Process ID - 10052 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 2576 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:02] New process found: Process Name - php.exe Process ID - 1564 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:02] New process found: Process Name - conhost.exe Process ID - 11672 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 17:39:02] Process Exited: Process Name - php.exe Process ID - 4708 [04-10-2024 17:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 8432 [04-10-2024 17:39:02] Process Exited: Process Name - conhost.exe Process ID - 10052 [04-10-2024 17:39:03] Process Exited: Process Name - php.exe Process ID - 1564 [04-10-2024 17:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 2576 [04-10-2024 17:39:03] Process Exited: Process Name - conhost.exe Process ID - 11672 [04-10-2024 17:39:32] New process found: Process Name - w3wp.exe Process ID - 2268 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 17:39:54] New process found: Process Name - w3wp.exe Process ID - 12740 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 17:39:55] New process found: Process Name - conhost.exe Process ID - 12272 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 17:40:31] New process found: Process Name - w3wp.exe Process ID - 7436 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:40:31] Process Exited: Process Name - w3wp.exe Process ID - 5716 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:41:41] Process Exited: Process Name - w3wp.exe Process ID - 2016 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:41:41] Process Exited: Process Name - conhost.exe Process ID - 10948 [04-10-2024 17:42:20] Process Exited: Process Name - w3wp.exe Process ID - 1124 Web application pool name - edtribute.com [04-10-2024 17:43:08] New process found: Process Name - w3wp.exe Process ID - 4460 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 17:43:09] New process found: Process Name - conhost.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\IWPD_75(acwits) [04-10-2024 17:43:31] Process Exited: Process Name - conhost.exe Process ID - 10168 [04-10-2024 17:43:31] Process Exited: Process Name - w3wp.exe Process ID - 11984 Web application pool name - pnacademy.acwits.in [04-10-2024 17:44:01] New process found: Process Name - cmd.exe Process ID - 12348 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:44:01] New process found: Process Name - conhost.exe Process ID - 5360 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:44:01] New process found: Process Name - runtask.exe Process ID - 4616 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:44:01] New process found: Process Name - php.exe Process ID - 5816 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:44:01] New process found: Process Name - conhost.exe Process ID - 2032 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:44:02] Process Exited: Process Name - conhost.exe Process ID - 2032 [04-10-2024 17:44:02] Process Exited: Process Name - runtask.exe Process ID - 4616 [04-10-2024 17:44:02] Process Exited: Process Name - conhost.exe Process ID - 5360 [04-10-2024 17:44:02] Process Exited: Process Name - php.exe Process ID - 5816 [04-10-2024 17:44:02] Process Exited: Process Name - cmd.exe Process ID - 12348 [04-10-2024 17:44:21] New process found: Process Name - w3wp.exe Process ID - 6600 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:45:02] New process found: Process Name - w3wp.exe Process ID - 10508 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 17:45:02] New process found: Process Name - conhost.exe Process ID - 12080 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 17:45:32] New process found: Process Name - w3wp.exe Process ID - 7508 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:45:32] Process Exited: Process Name - w3wp.exe Process ID - 7436 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:45:34] Process Exited: Process Name - w3wp.exe Process ID - 2268 Web application pool name - galaxytools.in [04-10-2024 17:45:56] Process Exited: Process Name - conhost.exe Process ID - 12272 [04-10-2024 17:45:56] Process Exited: Process Name - w3wp.exe Process ID - 12740 Web application pool name - kdbps.edu.in [04-10-2024 17:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5656 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:46:44] Process Exited: Process Name - conhost.exe Process ID - 6320 [04-10-2024 17:46:44] Process Exited: Process Name - w3wp.exe Process ID - 8564 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2464 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:47:21] New process found: Process Name - w3wp.exe Process ID - 10824 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 17:47:21] New process found: Process Name - conhost.exe Process ID - 5840 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 17:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2464 [04-10-2024 17:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5656 [04-10-2024 17:49:09] Process Exited: Process Name - w3wp.exe Process ID - 4460 Web application pool name - organicdisruption.acwits.in(domain)(4.0)(pool) [04-10-2024 17:49:09] Process Exited: Process Name - conhost.exe Process ID - 8460 [04-10-2024 17:49:25] New process found: Process Name - w3wp.exe Process ID - 10344 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 17:49:25] New process found: Process Name - conhost.exe Process ID - 12092 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 17:50:34] New process found: Process Name - w3wp.exe Process ID - 9480 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:50:34] Process Exited: Process Name - w3wp.exe Process ID - 7508 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:52:01] New process found: Process Name - cmd.exe Process ID - 7656 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:52:01] New process found: Process Name - conhost.exe Process ID - 8740 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:52:01] New process found: Process Name - runtask.exe Process ID - 2748 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:52:01] New process found: Process Name - php.exe Process ID - 7540 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:52:01] New process found: Process Name - conhost.exe Process ID - 11168 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 17:52:02] Process Exited: Process Name - runtask.exe Process ID - 2748 [04-10-2024 17:52:02] Process Exited: Process Name - php.exe Process ID - 7540 [04-10-2024 17:52:02] Process Exited: Process Name - cmd.exe Process ID - 7656 [04-10-2024 17:52:02] Process Exited: Process Name - conhost.exe Process ID - 8740 [04-10-2024 17:52:02] Process Exited: Process Name - conhost.exe Process ID - 11168 [04-10-2024 17:52:34] New process found: Process Name - w3wp.exe Process ID - 7264 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 17:53:04] New process found: Process Name - w3wp.exe Process ID - 13240 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 17:53:04] New process found: Process Name - conhost.exe Process ID - 11400 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 17:53:23] Process Exited: Process Name - conhost.exe Process ID - 5840 [04-10-2024 17:53:23] Process Exited: Process Name - w3wp.exe Process ID - 10824 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 17:55:34] New process found: Process Name - w3wp.exe Process ID - 11956 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:55:34] Process Exited: Process Name - w3wp.exe Process ID - 9480 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 17:56:04] Process Exited: Process Name - w3wp.exe Process ID - 10508 Web application pool name - pnacademy.acwits.in [04-10-2024 17:56:04] Process Exited: Process Name - conhost.exe Process ID - 12080 [04-10-2024 17:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 13232 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 17:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 9516 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 17:57:54] New process found: Process Name - w3wp.exe Process ID - 3772 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 17:57:54] New process found: Process Name - conhost.exe Process ID - 1128 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 17:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9516 [04-10-2024 17:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 13232 [04-10-2024 17:58:24] New process found: Process Name - w3wp.exe Process ID - 11208 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 17:58:24] Process Exited: Process Name - w3wp.exe Process ID - 6600 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 17:58:28] Process Exited: Process Name - w3wp.exe Process ID - 10344 Web application pool name - taxtribute.com [04-10-2024 17:58:28] Process Exited: Process Name - conhost.exe Process ID - 12092 [04-10-2024 17:59:09] New process found: Process Name - w3wp.exe Process ID - 11232 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:00:36] New process found: Process Name - w3wp.exe Process ID - 8708 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:00:36] Process Exited: Process Name - w3wp.exe Process ID - 11956 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:01:07] Process Exited: Process Name - w3wp.exe Process ID - 11900 Web application pool name - DefaultAppPool [04-10-2024 18:01:15] New process found: Process Name - w3wp.exe Process ID - 12700 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 18:03:09] New process found: Process Name - w3wp.exe Process ID - 11552 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 18:03:09] New process found: Process Name - conhost.exe Process ID - 11640 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 18:03:40] New process found: Process Name - w3wp.exe Process ID - 1716 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:03:40] New process found: Process Name - conhost.exe Process ID - 1532 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 18:04:27] Process Exited: Process Name - w3wp.exe Process ID - 11208 Web application pool name - shop.galaxytools.in [04-10-2024 18:05:01] New process found: Process Name - cmd.exe Process ID - 5860 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:05:01] New process found: Process Name - conhost.exe Process ID - 10092 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:05:01] New process found: Process Name - runtask.exe Process ID - 7756 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:05:01] New process found: Process Name - php.exe Process ID - 12764 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 18:05:01] New process found: Process Name - conhost.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 18:05:03] Process Exited: Process Name - cmd.exe Process ID - 5860 [04-10-2024 18:05:03] Process Exited: Process Name - runtask.exe Process ID - 7756 [04-10-2024 18:05:03] Process Exited: Process Name - conhost.exe Process ID - 10092 [04-10-2024 18:05:03] Process Exited: Process Name - conhost.exe Process ID - 11856 [04-10-2024 18:05:03] Process Exited: Process Name - php.exe Process ID - 12764 [04-10-2024 18:05:11] Process Exited: Process Name - w3wp.exe Process ID - 11232 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:05:37] New process found: Process Name - w3wp.exe Process ID - 10600 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:05:37] Process Exited: Process Name - w3wp.exe Process ID - 8708 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:05:55] New process found: Process Name - w3wp.exe Process ID - 12184 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 18:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 1576 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 5620 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:07:13] New process found: Process Name - w3wp.exe Process ID - 13232 Process Identity - KSHITIJSINGHAL-\IWPD_57(chotareli_v) Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 18:07:18] Process Exited: Process Name - w3wp.exe Process ID - 12700 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 18:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1576 [04-10-2024 18:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5620 [04-10-2024 18:09:42] Process Exited: Process Name - conhost.exe Process ID - 1532 [04-10-2024 18:09:42] Process Exited: Process Name - w3wp.exe Process ID - 1716 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:10:06] Process Exited: Process Name - conhost.exe Process ID - 11400 [04-10-2024 18:10:06] Process Exited: Process Name - w3wp.exe Process ID - 13240 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:10:35] Process Exited: Process Name - w3wp.exe Process ID - 7264 Web application pool name - galaxytools.in [04-10-2024 18:10:38] New process found: Process Name - w3wp.exe Process ID - 12744 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:10:38] Process Exited: Process Name - w3wp.exe Process ID - 10600 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:13:15] Process Exited: Process Name - w3wp.exe Process ID - 13232 Web application pool name - chotareliance.in(domain)(4.0)(pool) [04-10-2024 18:14:04] New process found: Process Name - w3wp.exe Process ID - 10120 Process Identity - IIS APPPOOL\shop.galaxytools.in Web application pool name - shop.galaxytools.in [04-10-2024 18:14:59] New process found: Process Name - w3wp.exe Process ID - 12728 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:14:59] New process found: Process Name - where.exe Process ID - 8496 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 18:14:59] New process found: Process Name - conhost.exe Process ID - 7824 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 18:15:00] New process found: Process Name - conhost.exe Process ID - 13096 Process Identity - KSHITIJSINGHAL-\IWPD_14(perfectbrea) [04-10-2024 18:15:00] Process Exited: Process Name - conhost.exe Process ID - 7824 [04-10-2024 18:15:00] Process Exited: Process Name - where.exe Process ID - 8496 [04-10-2024 18:15:14] New process found: Process Name - w3wp.exe Process ID - 13052 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 18:15:39] New process found: Process Name - w3wp.exe Process ID - 9220 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:15:39] Process Exited: Process Name - w3wp.exe Process ID - 12744 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:15:56] Process Exited: Process Name - conhost.exe Process ID - 1128 [04-10-2024 18:15:56] Process Exited: Process Name - w3wp.exe Process ID - 3772 Web application pool name - pnacademy.acwits.in [04-10-2024 18:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12164 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1672 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:16:54] New process found: Process Name - w3wp.exe Process ID - 13288 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:18:03] New process found: Process Name - w3wp.exe Process ID - 11492 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 18:18:03] New process found: Process Name - conhost.exe Process ID - 7284 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 18:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1672 [04-10-2024 18:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12164 [04-10-2024 18:20:41] New process found: Process Name - w3wp.exe Process ID - 9316 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:20:41] Process Exited: Process Name - w3wp.exe Process ID - 9220 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:21:02] Process Exited: Process Name - w3wp.exe Process ID - 12728 Web application pool name - adminportal.perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:21:02] Process Exited: Process Name - conhost.exe Process ID - 13096 [04-10-2024 18:21:17] Process Exited: Process Name - w3wp.exe Process ID - 13052 Web application pool name - galaxytools.in [04-10-2024 18:22:10] New process found: Process Name - w3wp.exe Process ID - 352 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 18:22:11] Process Exited: Process Name - w3wp.exe Process ID - 11552 Web application pool name - kdbps.edu.in [04-10-2024 18:22:11] Process Exited: Process Name - conhost.exe Process ID - 11640 [04-10-2024 18:22:36] New process found: Process Name - w3wp.exe Process ID - 12768 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:22:36] New process found: Process Name - where.exe Process ID - 4460 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:22:36] New process found: Process Name - conhost.exe Process ID - 8460 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:22:37] New process found: Process Name - conhost.exe Process ID - 7332 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:22:37] Process Exited: Process Name - where.exe Process ID - 4460 [04-10-2024 18:22:37] Process Exited: Process Name - conhost.exe Process ID - 8460 [04-10-2024 18:22:43] New process found: Process Name - w3wp.exe Process ID - 1692 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:22:43] New process found: Process Name - conhost.exe Process ID - 11680 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 18:22:56] Process Exited: Process Name - w3wp.exe Process ID - 13288 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:22:57] Process Exited: Process Name - w3wp.exe Process ID - 12184 Web application pool name - DefaultAppPool [04-10-2024 18:22:59] New process found: Process Name - w3wp.exe Process ID - 10532 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 18:23:00] New process found: Process Name - conhost.exe Process ID - 9604 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 18:23:06] Process Exited: Process Name - w3wp.exe Process ID - 10120 Web application pool name - shop.galaxytools.in [04-10-2024 18:24:06] Process Exited: Process Name - conhost.exe Process ID - 7284 [04-10-2024 18:24:06] Process Exited: Process Name - w3wp.exe Process ID - 11492 Web application pool name - pnacademy.acwits.in [04-10-2024 18:25:01] New process found: Process Name - cmd.exe Process ID - 736 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:01] New process found: Process Name - conhost.exe Process ID - 6320 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:01] New process found: Process Name - runtask.exe Process ID - 7008 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:01] New process found: Process Name - php.exe Process ID - 10504 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 18:25:01] New process found: Process Name - conhost.exe Process ID - 12892 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 18:25:03] Process Exited: Process Name - cmd.exe Process ID - 736 [04-10-2024 18:25:03] Process Exited: Process Name - conhost.exe Process ID - 6320 [04-10-2024 18:25:03] Process Exited: Process Name - runtask.exe Process ID - 7008 [04-10-2024 18:25:03] Process Exited: Process Name - php.exe Process ID - 10504 [04-10-2024 18:25:03] Process Exited: Process Name - conhost.exe Process ID - 12892 [04-10-2024 18:25:24] New process found: Process Name - w3wp.exe Process ID - 12344 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 18:25:42] New process found: Process Name - w3wp.exe Process ID - 8368 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:25:42] Process Exited: Process Name - w3wp.exe Process ID - 9316 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:25:49] New process found: Process Name - updater.exe Process ID - 12368 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:49] New process found: Process Name - updater.exe Process ID - 11488 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:50] New process found: Process Name - updater.exe Process ID - 6348 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:50] New process found: Process Name - updater.exe Process ID - 10512 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:50] New process found: Process Name - updater.exe Process ID - 12732 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:50] New process found: Process Name - updater.exe Process ID - 10476 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:25:50] Process Exited: Process Name - updater.exe Process ID - 11488 [04-10-2024 18:25:50] Process Exited: Process Name - updater.exe Process ID - 12368 [04-10-2024 18:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 6348 Current State - SERVICE_RUNNING [04-10-2024 18:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 12732 Current State - SERVICE_RUNNING [04-10-2024 18:26:00] Process Exited: Process Name - updater.exe Process ID - 6348 [04-10-2024 18:26:00] Process Exited: Process Name - updater.exe Process ID - 10476 [04-10-2024 18:26:00] Process Exited: Process Name - updater.exe Process ID - 10512 [04-10-2024 18:26:00] Process Exited: Process Name - updater.exe Process ID - 12732 [04-10-2024 18:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 18:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 18:26:42] New process found: Process Name - WmiPrvSE.exe Process ID - 10388 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4460 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4460 [04-10-2024 18:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10388 [04-10-2024 18:28:37] New process found: Process Name - w3wp.exe Process ID - 13112 Process Identity - KSHITIJSINGHAL-\IWPD_76(organicdisr) Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 18:28:38] Process Exited: Process Name - conhost.exe Process ID - 7332 [04-10-2024 18:28:38] Process Exited: Process Name - w3wp.exe Process ID - 12768 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:28:54] New process found: Process Name - w3wp.exe Process ID - 9740 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 18:28:54] New process found: Process Name - conhost.exe Process ID - 9588 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 18:30:43] New process found: Process Name - w3wp.exe Process ID - 1084 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:30:43] Process Exited: Process Name - w3wp.exe Process ID - 8368 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:30:45] Process Exited: Process Name - w3wp.exe Process ID - 1692 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:30:45] Process Exited: Process Name - conhost.exe Process ID - 11680 [04-10-2024 18:31:26] Process Exited: Process Name - w3wp.exe Process ID - 12344 Web application pool name - DefaultAppPool [04-10-2024 18:31:49] New process found: Process Name - w3wp.exe Process ID - 9872 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:31:49] New process found: Process Name - conhost.exe Process ID - 10396 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 18:33:21] New process found: Process Name - w3wp.exe Process ID - 13284 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 18:33:41] New process found: Process Name - w3wp.exe Process ID - 7492 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:33:41] New process found: Process Name - conhost.exe Process ID - 10036 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:34:39] Process Exited: Process Name - w3wp.exe Process ID - 13112 Web application pool name - organicdisruption.org(domain)(4.0)(pool) [04-10-2024 18:34:49] New process found: Process Name - w3wp.exe Process ID - 10444 Process Identity - KSHITIJSINGHAL-\IWPD_7(cies) Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 18:35:45] New process found: Process Name - w3wp.exe Process ID - 6536 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:35:45] Process Exited: Process Name - w3wp.exe Process ID - 1084 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 8016 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 10292 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:37:11] New process found: Process Name - w3wp.exe Process ID - 8596 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:37:12] Process Exited: Process Name - w3wp.exe Process ID - 352 Web application pool name - galaxytools.in [04-10-2024 18:37:13] New process found: Process Name - conhost.exe Process ID - 6044 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 18:37:41] New process found: Process Name - w3wp.exe Process ID - 9484 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 18:38:06] New process found: Process Name - w3wp.exe Process ID - 13152 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 18:38:08] Process Exited: Process Name - php-cgi.exe Process ID - 11880 [04-10-2024 18:38:09] Process Exited: Process Name - w3wp.exe Process ID - 4124 Web application pool name - PleskControlPanel [04-10-2024 18:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8016 [04-10-2024 18:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 10292 [04-10-2024 18:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 12000 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:01] New process found: Process Name - php.exe Process ID - 12904 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:01] New process found: Process Name - conhost.exe Process ID - 11372 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 11580 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:02] New process found: Process Name - php.exe Process ID - 10556 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:02] New process found: Process Name - conhost.exe Process ID - 8496 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 18:39:02] Process Exited: Process Name - conhost.exe Process ID - 11372 [04-10-2024 18:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 12000 [04-10-2024 18:39:02] Process Exited: Process Name - php.exe Process ID - 12904 [04-10-2024 18:39:03] Process Exited: Process Name - conhost.exe Process ID - 8496 [04-10-2024 18:39:03] Process Exited: Process Name - php.exe Process ID - 10556 [04-10-2024 18:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 11580 [04-10-2024 18:39:23] Process Exited: Process Name - w3wp.exe Process ID - 13284 Web application pool name - edtribute.com [04-10-2024 18:39:40] New process found: Process Name - w3wp.exe Process ID - 8252 Process Identity - KSHITIJSINGHAL-\IWPD_66(acwits) Web application pool name - 20fpsweb.acwits.in(domain)(4.0)(pool) [04-10-2024 18:39:41] New process found: Process Name - conhost.exe Process ID - 11312 Process Identity - KSHITIJSINGHAL-\IWPD_66(acwits) [04-10-2024 18:39:43] Process Exited: Process Name - w3wp.exe Process ID - 7492 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:39:43] Process Exited: Process Name - conhost.exe Process ID - 10036 [04-10-2024 18:40:01] Process Exited: Process Name - conhost.exe Process ID - 9604 [04-10-2024 18:40:01] Process Exited: Process Name - w3wp.exe Process ID - 10532 Web application pool name - kdbps.edu.in [04-10-2024 18:40:10] New process found: Process Name - w3wp.exe Process ID - 10948 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:40:10] New process found: Process Name - where.exe Process ID - 5740 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 18:40:10] New process found: Process Name - conhost.exe Process ID - 7932 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 18:40:11] New process found: Process Name - conhost.exe Process ID - 7240 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 18:40:11] Process Exited: Process Name - where.exe Process ID - 5740 [04-10-2024 18:40:11] Process Exited: Process Name - conhost.exe Process ID - 7932 [04-10-2024 18:40:45] New process found: Process Name - w3wp.exe Process ID - 5920 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:40:45] Process Exited: Process Name - w3wp.exe Process ID - 6536 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:40:51] Process Exited: Process Name - w3wp.exe Process ID - 9872 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:40:51] Process Exited: Process Name - conhost.exe Process ID - 10396 [04-10-2024 18:40:51] Process Exited: Process Name - w3wp.exe Process ID - 10444 Web application pool name - adminportal.cies.org.in(domain)(4.0)(pool) [04-10-2024 18:41:17] New process found: Process Name - w3wp.exe Process ID - 4460 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:41:18] New process found: Process Name - conhost.exe Process ID - 11288 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 18:43:13] Process Exited: Process Name - conhost.exe Process ID - 6044 [04-10-2024 18:43:13] Process Exited: Process Name - w3wp.exe Process ID - 8596 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:43:44] Process Exited: Process Name - w3wp.exe Process ID - 9484 Web application pool name - DefaultAppPool [04-10-2024 18:44:09] Process Exited: Process Name - w3wp.exe Process ID - 13152 Web application pool name - galaxytools.in [04-10-2024 18:44:15] New process found: Process Name - w3wp.exe Process ID - 5440 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 18:45:42] Process Exited: Process Name - w3wp.exe Process ID - 8252 Web application pool name - 20fpsweb.acwits.in(domain)(4.0)(pool) [04-10-2024 18:45:42] Process Exited: Process Name - conhost.exe Process ID - 11312 [04-10-2024 18:45:47] New process found: Process Name - w3wp.exe Process ID - 12184 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:45:47] Process Exited: Process Name - w3wp.exe Process ID - 5920 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:45:56] New process found: Process Name - w3wp.exe Process ID - 544 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:46:13] Process Exited: Process Name - conhost.exe Process ID - 7240 [04-10-2024 18:46:13] Process Exited: Process Name - w3wp.exe Process ID - 10948 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:46:42] New process found: Process Name - WmiPrvSE.exe Process ID - 5820 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:46:49] New process found: Process Name - WmiPrvSE.exe Process ID - 11096 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:47:08] New process found: Process Name - w3wp.exe Process ID - 1560 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:47:08] New process found: Process Name - conhost.exe Process ID - 4584 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 18:47:19] Process Exited: Process Name - w3wp.exe Process ID - 4460 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:47:19] Process Exited: Process Name - conhost.exe Process ID - 11288 [04-10-2024 18:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 5820 [04-10-2024 18:48:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11096 [04-10-2024 18:48:13] New process found: Process Name - w3wp.exe Process ID - 8880 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:48:13] New process found: Process Name - conhost.exe Process ID - 5824 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 18:48:27] New process found: Process Name - w3wp.exe Process ID - 12948 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 18:48:27] New process found: Process Name - conhost.exe Process ID - 11980 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 18:50:24] New process found: Process Name - w3wp.exe Process ID - 9684 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 18:50:32] New process found: Process Name - conhost.exe Process ID - 11080 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 18:50:48] New process found: Process Name - w3wp.exe Process ID - 8832 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:50:48] Process Exited: Process Name - w3wp.exe Process ID - 12184 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:51:59] Process Exited: Process Name - w3wp.exe Process ID - 544 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:52:03] New process found: Process Name - w3wp.exe Process ID - 10468 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 18:52:58] New process found: Process Name - w3wp.exe Process ID - 11972 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:52:58] New process found: Process Name - where.exe Process ID - 4312 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:52:58] New process found: Process Name - conhost.exe Process ID - 13076 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:52:59] New process found: Process Name - conhost.exe Process ID - 2464 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 18:52:59] Process Exited: Process Name - where.exe Process ID - 4312 [04-10-2024 18:52:59] Process Exited: Process Name - conhost.exe Process ID - 13076 [04-10-2024 18:53:05] New process found: Process Name - w3wp.exe Process ID - 11984 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 18:54:14] Process Exited: Process Name - conhost.exe Process ID - 5824 [04-10-2024 18:54:14] Process Exited: Process Name - w3wp.exe Process ID - 8880 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:55:49] New process found: Process Name - w3wp.exe Process ID - 7840 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:55:49] Process Exited: Process Name - w3wp.exe Process ID - 8832 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 18:56:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12728 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 18:56:49] New process found: Process Name - WmiPrvSE.exe Process ID - 2156 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 18:57:11] Process Exited: Process Name - w3wp.exe Process ID - 1560 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:57:11] Process Exited: Process Name - conhost.exe Process ID - 4584 [04-10-2024 18:58:05] Process Exited: Process Name - w3wp.exe Process ID - 10468 Web application pool name - acme-challenge [04-10-2024 18:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 2156 [04-10-2024 18:58:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12728 [04-10-2024 18:58:40] New process found: Process Name - w3wp.exe Process ID - 1060 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:58:40] New process found: Process Name - conhost.exe Process ID - 3296 Process Identity - KSHITIJSINGHAL-\IWPD_43(capitalbook) [04-10-2024 18:58:43] New process found: Process Name - w3wp.exe Process ID - 11036 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:58:43] New process found: Process Name - where.exe Process ID - 7992 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 18:58:43] New process found: Process Name - conhost.exe Process ID - 10776 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 18:58:44] New process found: Process Name - conhost.exe Process ID - 10568 Process Identity - KSHITIJSINGHAL-\IWPD_41(capitalbook) [04-10-2024 18:58:44] Process Exited: Process Name - where.exe Process ID - 7992 [04-10-2024 18:58:44] Process Exited: Process Name - conhost.exe Process ID - 10776 [04-10-2024 18:58:50] New process found: Process Name - w3wp.exe Process ID - 11908 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 18:59:01] Process Exited: Process Name - conhost.exe Process ID - 2464 [04-10-2024 18:59:01] Process Exited: Process Name - w3wp.exe Process ID - 11972 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 18:59:07] Process Exited: Process Name - w3wp.exe Process ID - 11984 Web application pool name - prathabypriyal.com [04-10-2024 18:59:41] New process found: Process Name - conhost.exe Process ID - 11764 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 19:00:26] Process Exited: Process Name - w3wp.exe Process ID - 9684 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 19:00:26] Process Exited: Process Name - conhost.exe Process ID - 11080 [04-10-2024 19:00:51] New process found: Process Name - w3wp.exe Process ID - 11856 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:00:51] Process Exited: Process Name - w3wp.exe Process ID - 7840 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:00:56] Process Exited: Process Name - conhost.exe Process ID - 9588 [04-10-2024 19:00:56] Process Exited: Process Name - w3wp.exe Process ID - 9740 Web application pool name - pnacademy.acwits.in [04-10-2024 19:01:17] Process Exited: Process Name - w3wp.exe Process ID - 5440 Web application pool name - DefaultAppPool [04-10-2024 19:01:26] New process found: Process Name - w3wp.exe Process ID - 9852 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 19:02:57] New process found: Process Name - w3wp.exe Process ID - 3636 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:02:57] New process found: Process Name - conhost.exe Process ID - 13304 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 19:03:32] New process found: Process Name - w3wp.exe Process ID - 13188 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 19:03:32] New process found: Process Name - conhost.exe Process ID - 8760 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 19:04:23] New process found: Process Name - w3wp.exe Process ID - 2332 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 19:04:23] New process found: Process Name - conhost.exe Process ID - 12832 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 19:04:46] Process Exited: Process Name - conhost.exe Process ID - 10568 [04-10-2024 19:04:46] Process Exited: Process Name - w3wp.exe Process ID - 11036 Web application pool name - adminportal.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:04:52] New process found: Process Name - csrss.exe Process ID - 5976 Process Identity - SYSTEM [04-10-2024 19:04:52] New process found: Process Name - winlogon.exe Process ID - 7472 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:04:52] New process found: Process Name - LogonUI.exe Process ID - 9260 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:04:52] New process found: Process Name - dwm.exe Process ID - 12024 Process Identity - Window Manager\DWM-4 [04-10-2024 19:04:52] Process Exited: Process Name - conhost.exe Process ID - 11764 [04-10-2024 19:04:52] Process Exited: Process Name - w3wp.exe Process ID - 11908 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:04:52] Service state changed: Service Name - ScDeviceEnum Process ID - 460 Current State - SERVICE_RUNNING [04-10-2024 19:04:55] New process found: Process Name - TSTheme.exe Process ID - 5832 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:04:55] Process Exited: Process Name - csrss.exe Process ID - 5976 [04-10-2024 19:04:55] Process Exited: Process Name - winlogon.exe Process ID - 7472 [04-10-2024 19:04:55] Process Exited: Process Name - LogonUI.exe Process ID - 9260 [04-10-2024 19:04:55] Process Exited: Process Name - dwm.exe Process ID - 12024 [04-10-2024 19:04:56] New process found: Process Name - taskhostw.exe Process ID - 12292 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:04:56] New process found: Process Name - dllhost.exe Process ID - 10668 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:04:59] New process found: Process Name - svchost.exe Process ID - 13096 Process Identity - SYSTEM [04-10-2024 19:04:59] New process found: Process Name - InstallAgent.exe Process ID - 11584 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:04:59] New process found: Process Name - InstallAgentUserBroker.exe Process ID - 11476 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:04:59] Service state changed: Service Name - AppXSvc Process ID - 13096 Current State - SERVICE_RUNNING [04-10-2024 19:04:59] Service state changed: Service Name - DsmSvc Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 19:05:01] New process found: Process Name - cmd.exe Process ID - 10964 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:05:01] New process found: Process Name - conhost.exe Process ID - 12684 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:05:01] New process found: Process Name - runtask.exe Process ID - 5788 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:05:01] New process found: Process Name - php.exe Process ID - 9268 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 19:05:01] New process found: Process Name - conhost.exe Process ID - 452 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 19:05:01] Process Exited: Process Name - TSTheme.exe Process ID - 5832 [04-10-2024 19:05:04] Process Exited: Process Name - conhost.exe Process ID - 452 [04-10-2024 19:05:04] Process Exited: Process Name - runtask.exe Process ID - 5788 [04-10-2024 19:05:04] Process Exited: Process Name - php.exe Process ID - 9268 [04-10-2024 19:05:04] Process Exited: Process Name - cmd.exe Process ID - 10964 [04-10-2024 19:05:04] Process Exited: Process Name - conhost.exe Process ID - 12684 [04-10-2024 19:05:05] Process Exited: Process Name - InstallAgentUserBroker.exe Process ID - 11476 [04-10-2024 19:05:07] Process Exited: Process Name - InstallAgent.exe Process ID - 11584 [04-10-2024 19:05:25] New process found: Process Name - wlrmdr.exe Process ID - 1708 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:05:25] New process found: Process Name - audiodg.exe Process ID - 9768 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:05:26] Process Exited: Process Name - taskhostw.exe Process ID - 12292 [04-10-2024 19:05:29] New process found: Process Name - w3wp.exe Process ID - 1580 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 19:05:29] New process found: Process Name - conhost.exe Process ID - 5560 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 19:05:31] Process Exited: Process Name - dllhost.exe Process ID - 10668 [04-10-2024 19:05:32] Process Exited: Process Name - wlrmdr.exe Process ID - 1708 [04-10-2024 19:05:42] Process Exited: Process Name - w3wp.exe Process ID - 1060 Web application pool name - cp.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:05:42] Process Exited: Process Name - conhost.exe Process ID - 3296 [04-10-2024 19:05:52] New process found: Process Name - w3wp.exe Process ID - 10396 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:05:52] Process Exited: Process Name - w3wp.exe Process ID - 11856 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:05:52] Service state changed: Service Name - DsmSvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:06:42] New process found: Process Name - WmiPrvSE.exe Process ID - 11252 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:06:49] New process found: Process Name - WmiPrvSE.exe Process ID - 4152 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:07:14] New process found: Process Name - w3wp.exe Process ID - 4380 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 19:07:29] Process Exited: Process Name - w3wp.exe Process ID - 9852 Web application pool name - DefaultAppPool [04-10-2024 19:07:33] New process found: Process Name - dllhost.exe Process ID - 10860 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:07:36] New process found: Process Name - notepad.exe Process ID - 10504 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:07:38] Process Exited: Process Name - dllhost.exe Process ID - 10860 [04-10-2024 19:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 4152 [04-10-2024 19:08:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 11252 [04-10-2024 19:08:59] Process Exited: Process Name - w3wp.exe Process ID - 3636 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:08:59] Process Exited: Process Name - conhost.exe Process ID - 13304 [04-10-2024 19:10:02] Process Exited: Process Name - svchost.exe Process ID - 13096 [04-10-2024 19:10:02] Service state changed: Service Name - AppXSvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:10:31] Process Exited: Process Name - audiodg.exe Process ID - 9768 [04-10-2024 19:10:53] New process found: Process Name - w3wp.exe Process ID - 10360 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:10:53] Process Exited: Process Name - w3wp.exe Process ID - 10396 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:11:34] New process found: Process Name - w3wp.exe Process ID - 12336 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 19:11:41] New process found: Process Name - w3wp.exe Process ID - 7464 Process Identity - IIS APPPOOL\taxtribute.com Web application pool name - taxtribute.com [04-10-2024 19:11:41] New process found: Process Name - conhost.exe Process ID - 7844 Process Identity - IIS APPPOOL\taxtribute.com [04-10-2024 19:12:31] Process Exited: Process Name - w3wp.exe Process ID - 1580 Web application pool name - tools.taxtribute.com [04-10-2024 19:12:31] Process Exited: Process Name - conhost.exe Process ID - 5560 [04-10-2024 19:13:35] Process Exited: Process Name - conhost.exe Process ID - 8760 [04-10-2024 19:13:35] Process Exited: Process Name - w3wp.exe Process ID - 13188 Web application pool name - csr.bmvfragrances.com [04-10-2024 19:14:08] New process found: Process Name - w3wp.exe Process ID - 9448 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:14:08] New process found: Process Name - conhost.exe Process ID - 7496 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 19:14:10] New process found: Process Name - w3wp.exe Process ID - 12688 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 19:14:10] New process found: Process Name - conhost.exe Process ID - 7028 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 19:14:59] New process found: Process Name - w3wp.exe Process ID - 7904 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 19:14:59] New process found: Process Name - where.exe Process ID - 11280 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 19:14:59] New process found: Process Name - conhost.exe Process ID - 3820 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 19:15:00] New process found: Process Name - conhost.exe Process ID - 7872 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 19:15:00] Process Exited: Process Name - conhost.exe Process ID - 3820 [04-10-2024 19:15:00] Process Exited: Process Name - where.exe Process ID - 11280 [04-10-2024 19:15:54] New process found: Process Name - w3wp.exe Process ID - 5816 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:15:54] Process Exited: Process Name - w3wp.exe Process ID - 10360 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:16:21] New process found: Process Name - w3wp.exe Process ID - 10992 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 19:16:25] Process Exited: Process Name - w3wp.exe Process ID - 2332 Web application pool name - pnacademy.acwits.in [04-10-2024 19:16:25] Process Exited: Process Name - conhost.exe Process ID - 12832 [04-10-2024 19:16:42] New process found: Process Name - WmiPrvSE.exe Process ID - 12252 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:16:49] New process found: Process Name - WmiPrvSE.exe Process ID - 6960 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:16:52] New process found: Process Name - w3wp.exe Process ID - 8308 Process Identity - IIS APPPOOL\pnacademy.acwits.in Web application pool name - pnacademy.acwits.in [04-10-2024 19:16:52] New process found: Process Name - where.exe Process ID - 5868 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 19:16:52] New process found: Process Name - conhost.exe Process ID - 4584 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 19:16:53] New process found: Process Name - conhost.exe Process ID - 2580 Process Identity - IIS APPPOOL\pnacademy.acwits.in [04-10-2024 19:16:53] Process Exited: Process Name - conhost.exe Process ID - 4584 [04-10-2024 19:16:53] Process Exited: Process Name - where.exe Process ID - 5868 [04-10-2024 19:17:26] Process Exited: Process Name - notepad.exe Process ID - 10504 [04-10-2024 19:17:51] New process found: Process Name - WinRAR.exe Process ID - 1824 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:17:57] Process Exited: Process Name - WinRAR.exe Process ID - 1824 [04-10-2024 19:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 6960 [04-10-2024 19:18:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 12252 [04-10-2024 19:18:14] New process found: Process Name - notepad.exe Process ID - 11340 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:18:16] Process Exited: Process Name - w3wp.exe Process ID - 4380 Web application pool name - galaxytools.in [04-10-2024 19:18:21] Process Exited: Process Name - notepad.exe Process ID - 11340 [04-10-2024 19:18:32] New process found: Process Name - w3wp.exe Process ID - 11312 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 19:18:32] New process found: Process Name - conhost.exe Process ID - 11720 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 19:19:26] New process found: Process Name - notepad.exe Process ID - 1144 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:20:11] Process Exited: Process Name - conhost.exe Process ID - 7496 [04-10-2024 19:20:11] Process Exited: Process Name - w3wp.exe Process ID - 9448 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:20:12] Process Exited: Process Name - conhost.exe Process ID - 7028 [04-10-2024 19:20:12] Process Exited: Process Name - w3wp.exe Process ID - 12688 Web application pool name - csr.bmvfragrances.com [04-10-2024 19:20:20] New process found: Process Name - w3wp.exe Process ID - 540 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:20:20] New process found: Process Name - conhost.exe Process ID - 2656 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 19:20:56] New process found: Process Name - w3wp.exe Process ID - 1064 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:20:56] Process Exited: Process Name - w3wp.exe Process ID - 5816 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:21:38] New process found: Process Name - w3wp.exe Process ID - 748 Process Identity - IIS APPPOOL\galaxytools.in Web application pool name - galaxytools.in [04-10-2024 19:21:49] New process found: Process Name - SearchProtocolHost.exe Process ID - 12192 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:21:49] New process found: Process Name - SearchFilterHost.exe Process ID - 4180 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:22:23] Process Exited: Process Name - w3wp.exe Process ID - 10992 Web application pool name - acme-challenge [04-10-2024 19:22:44] Process Exited: Process Name - w3wp.exe Process ID - 7464 Web application pool name - taxtribute.com [04-10-2024 19:22:44] Process Exited: Process Name - conhost.exe Process ID - 7844 [04-10-2024 19:22:47] New process found: Process Name - w3wp.exe Process ID - 8992 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:22:47] New process found: Process Name - conhost.exe Process ID - 10476 Process Identity - KSHITIJSINGHAL-\IWPD_42(capitalbook) [04-10-2024 19:22:55] Process Exited: Process Name - conhost.exe Process ID - 2580 [04-10-2024 19:22:55] Process Exited: Process Name - w3wp.exe Process ID - 8308 Web application pool name - pnacademy.acwits.in [04-10-2024 19:22:57] New process found: Process Name - w3wp.exe Process ID - 5592 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:24:03] Process Exited: Process Name - SearchFilterHost.exe Process ID - 4180 [04-10-2024 19:24:03] Process Exited: Process Name - SearchProtocolHost.exe Process ID - 12192 [04-10-2024 19:24:35] Process Exited: Process Name - w3wp.exe Process ID - 11312 Web application pool name - tools.taxtribute.com [04-10-2024 19:24:35] Process Exited: Process Name - conhost.exe Process ID - 11720 [04-10-2024 19:24:36] Process Exited: Process Name - w3wp.exe Process ID - 12336 Web application pool name - DefaultAppPool [04-10-2024 19:25:01] New process found: Process Name - cmd.exe Process ID - 10276 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:01] New process found: Process Name - conhost.exe Process ID - 12836 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:01] New process found: Process Name - runtask.exe Process ID - 7536 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:01] New process found: Process Name - php.exe Process ID - 10208 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 19:25:01] New process found: Process Name - conhost.exe Process ID - 6032 Process Identity - KSHITIJSINGHAL-\psaadm [04-10-2024 19:25:03] Process Exited: Process Name - conhost.exe Process ID - 6032 [04-10-2024 19:25:03] Process Exited: Process Name - runtask.exe Process ID - 7536 [04-10-2024 19:25:03] Process Exited: Process Name - php.exe Process ID - 10208 [04-10-2024 19:25:03] Process Exited: Process Name - cmd.exe Process ID - 10276 [04-10-2024 19:25:03] Process Exited: Process Name - conhost.exe Process ID - 12836 [04-10-2024 19:25:18] New process found: Process Name - w3wp.exe Process ID - 8028 Process Identity - IIS APPPOOL\DefaultAppPool Web application pool name - DefaultAppPool [04-10-2024 19:25:28] Process Exited: Process Name - conhost.exe Process ID - 11980 [04-10-2024 19:25:28] Process Exited: Process Name - w3wp.exe Process ID - 12948 Web application pool name - kdbps.edu.in [04-10-2024 19:25:49] New process found: Process Name - updater.exe Process ID - 11964 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:49] New process found: Process Name - updater.exe Process ID - 8252 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:50] New process found: Process Name - updater.exe Process ID - 10832 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:50] New process found: Process Name - updater.exe Process ID - 1500 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:50] New process found: Process Name - updater.exe Process ID - 13008 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:50] New process found: Process Name - updater.exe Process ID - 1980 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:25:50] Process Exited: Process Name - updater.exe Process ID - 8252 [04-10-2024 19:25:50] Process Exited: Process Name - updater.exe Process ID - 11964 [04-10-2024 19:25:50] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 10832 Current State - SERVICE_RUNNING [04-10-2024 19:25:50] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 13008 Current State - SERVICE_RUNNING [04-10-2024 19:25:56] New process found: Process Name - w3wp.exe Process ID - 10996 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:25:56] Process Exited: Process Name - w3wp.exe Process ID - 1064 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:26:00] Process Exited: Process Name - updater.exe Process ID - 1500 [04-10-2024 19:26:00] Process Exited: Process Name - updater.exe Process ID - 1980 [04-10-2024 19:26:00] Process Exited: Process Name - updater.exe Process ID - 10832 [04-10-2024 19:26:00] Process Exited: Process Name - updater.exe Process ID - 13008 [04-10-2024 19:26:00] Service state changed: Service Name - GoogleUpdaterInternalService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:26:00] Service state changed: Service Name - GoogleUpdaterService130.0.6679.0 Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:26:43] New process found: Process Name - WmiPrvSE.exe Process ID - 8300 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:26:49] New process found: Process Name - WmiPrvSE.exe Process ID - 8072 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:27:02] New process found: Process Name - w3wp.exe Process ID - 12520 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 19:27:02] New process found: Process Name - conhost.exe Process ID - 3996 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 19:27:02] Process Exited: Process Name - conhost.exe Process ID - 7872 [04-10-2024 19:27:02] Process Exited: Process Name - w3wp.exe Process ID - 7904 Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 19:27:22] Process Exited: Process Name - w3wp.exe Process ID - 540 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:27:22] Process Exited: Process Name - conhost.exe Process ID - 2656 [04-10-2024 19:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8072 [04-10-2024 19:28:13] Process Exited: Process Name - WmiPrvSE.exe Process ID - 8300 [04-10-2024 19:29:00] Process Exited: Process Name - w3wp.exe Process ID - 5592 Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:29:26] New process found: Process Name - w3wp.exe Process ID - 13088 Process Identity - IIS APPPOOL\adminportal.galaxytools.in Web application pool name - adminportal.galaxytools.in [04-10-2024 19:29:41] Process Exited: Process Name - w3wp.exe Process ID - 748 Web application pool name - galaxytools.in [04-10-2024 19:29:42] New process found: Process Name - w3wp.exe Process ID - 10200 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:29:44] New process found: Process Name - conhost.exe Process ID - 12948 Process Identity - KSHITIJSINGHAL-\IWPD_67(justprew_2v) [04-10-2024 19:30:58] New process found: Process Name - w3wp.exe Process ID - 11940 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:30:58] Process Exited: Process Name - w3wp.exe Process ID - 10996 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:32:00] Process Exited: Process Name - notepad.exe Process ID - 1144 [04-10-2024 19:32:27] New process found: Process Name - w3wp.exe Process ID - 3800 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 19:32:27] New process found: Process Name - conhost.exe Process ID - 7428 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 19:32:49] Process Exited: Process Name - w3wp.exe Process ID - 8992 Web application pool name - cb.capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:32:49] Process Exited: Process Name - conhost.exe Process ID - 10476 [04-10-2024 19:32:54] New process found: Process Name - notepad.exe Process ID - 6624 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:33:02] New process found: Process Name - w3wp.exe Process ID - 1800 Process Identity - IIS APPPOOL\kdbps.edu.in Web application pool name - kdbps.edu.in [04-10-2024 19:33:03] Process Exited: Process Name - conhost.exe Process ID - 3996 [04-10-2024 19:33:03] Process Exited: Process Name - w3wp.exe Process ID - 12520 Web application pool name - csr.bmvfragrances.com [04-10-2024 19:33:04] New process found: Process Name - conhost.exe Process ID - 8656 Process Identity - IIS APPPOOL\kdbps.edu.in [04-10-2024 19:33:10] New process found: Process Name - w3wp.exe Process ID - 1668 Process Identity - IIS APPPOOL\csr.bmvfragrances.com Web application pool name - csr.bmvfragrances.com [04-10-2024 19:33:11] New process found: Process Name - conhost.exe Process ID - 10364 Process Identity - IIS APPPOOL\csr.bmvfragrances.com [04-10-2024 19:33:42] New process found: Process Name - w3wp.exe Process ID - 11440 Process Identity - IIS APPPOOL\acme-challenge Web application pool name - acme-challenge [04-10-2024 19:35:45] Process Exited: Process Name - w3wp.exe Process ID - 10200 Web application pool name - justprewedding.com(domain)(4.0)(pool) [04-10-2024 19:35:45] Process Exited: Process Name - conhost.exe Process ID - 12948 [04-10-2024 19:36:00] New process found: Process Name - w3wp.exe Process ID - 5908 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:36:00] Process Exited: Process Name - w3wp.exe Process ID - 11940 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:36:01] New process found: Process Name - dllhost.exe Process ID - 12200 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:36:01] New process found: Process Name - dllhost.exe Process ID - 1980 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:36:05] New process found: Process Name - SystemPropertiesAdvanced.exe Process ID - 12568 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:36:10] Process Exited: Process Name - dllhost.exe Process ID - 12200 [04-10-2024 19:36:42] New process found: Process Name - WmiPrvSE.exe Process ID - 9872 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:36:49] New process found: Process Name - WmiPrvSE.exe Process ID - 1228 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:36:55] New process found: Process Name - audiodg.exe Process ID - 392 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:36:59] Process Exited: Process Name - SystemPropertiesAdvanced.exe Process ID - 12568 [04-10-2024 19:37:22] New process found: Process Name - w3wp.exe Process ID - 5308 Process Identity - KSHITIJSINGHAL-\IWPD_38(capitalbook) Web application pool name - capitalbooks-publishing.com(domain)(4.0)(pool) [04-10-2024 19:37:47] New process found: Process Name - w3wp.exe Process ID - 176 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) Web application pool name - perfectbread.com(domain)(4.0)(pool) [04-10-2024 19:37:48] New process found: Process Name - conhost.exe Process ID - 11392 Process Identity - KSHITIJSINGHAL-\IWPD_13(perfectbrea) [04-10-2024 19:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 1228 [04-10-2024 19:38:12] Process Exited: Process Name - WmiPrvSE.exe Process ID - 9872 [04-10-2024 19:38:30] Process Exited: Process Name - w3wp.exe Process ID - 3800 Web application pool name - tools.taxtribute.com [04-10-2024 19:38:30] Process Exited: Process Name - conhost.exe Process ID - 7428 [04-10-2024 19:39:01] New process found: Process Name - task-manager-agent.exe Process ID - 6600 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:01] New process found: Process Name - php.exe Process ID - 12216 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:01] New process found: Process Name - conhost.exe Process ID - 12020 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:02] New process found: Process Name - task-manager-agent.exe Process ID - 4596 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:02] New process found: Process Name - php.exe Process ID - 7276 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:02] New process found: Process Name - conhost.exe Process ID - 12828 Process Identity - NT SERVICE\PleskTaskManager [04-10-2024 19:39:02] Process Exited: Process Name - task-manager-agent.exe Process ID - 6600 [04-10-2024 19:39:02] Process Exited: Process Name - conhost.exe Process ID - 12020 [04-10-2024 19:39:02] Process Exited: Process Name - php.exe Process ID - 12216 [04-10-2024 19:39:03] Process Exited: Process Name - task-manager-agent.exe Process ID - 4596 [04-10-2024 19:39:03] Process Exited: Process Name - php.exe Process ID - 7276 [04-10-2024 19:39:03] Process Exited: Process Name - conhost.exe Process ID - 12828 [04-10-2024 19:39:12] Process Exited: Process Name - w3wp.exe Process ID - 1668 Web application pool name - csr.bmvfragrances.com [04-10-2024 19:39:12] Process Exited: Process Name - conhost.exe Process ID - 10364 [04-10-2024 19:39:13] New process found: Process Name - w3wp.exe Process ID - 928 Process Identity - IIS APPPOOL\edtribute.com Web application pool name - edtribute.com [04-10-2024 19:39:44] Process Exited: Process Name - w3wp.exe Process ID - 11440 Web application pool name - acme-challenge [04-10-2024 19:40:17] New process found: Process Name - w3wp.exe Process ID - 12464 Process Identity - IIS APPPOOL\prathabypriyal.com Web application pool name - prathabypriyal.com [04-10-2024 19:40:21] Process Exited: Process Name - notepad.exe Process ID - 6624 [04-10-2024 19:40:27] New process found: Process Name - w3wp.exe Process ID - 1836 Process Identity - IIS APPPOOL\tools.taxtribute.com Web application pool name - tools.taxtribute.com [04-10-2024 19:40:27] New process found: Process Name - conhost.exe Process ID - 952 Process Identity - IIS APPPOOL\tools.taxtribute.com [04-10-2024 19:40:50] New process found: Process Name - notepad.exe Process ID - 3248 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:41:01] New process found: Process Name - w3wp.exe Process ID - 13084 Process Identity - KSHITIJSINGHAL-\IWPD_72(acwits) Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:41:01] Process Exited: Process Name - w3wp.exe Process ID - 5908 Web application pool name - justprewed.acwits.in(domain)(4.0)(pool) [04-10-2024 19:41:21] Process Exited: Process Name - w3wp.exe Process ID - 8028 Web application pool name - DefaultAppPool [04-10-2024 19:41:59] Process Exited: Process Name - audiodg.exe Process ID - 392 [04-10-2024 19:42:24] Process Exited: Process Name - notepad.exe Process ID - 3248 [04-10-2024 19:42:26] Process Exited: Process Name - InetMgr.exe Process ID - 8384 [04-10-2024 19:42:29] New process found: Process Name - dllhost.exe Process ID - 108 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:42:34] New process found: Process Name - LogonUI.exe Process ID - 5772 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:42:34] New process found: Process Name - audiodg.exe Process ID - 8316 Process Identity - NT AUTHORITY\LOCAL SERVICE [04-10-2024 19:42:34] New process found: Process Name - svchost.exe Process ID - 10272 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:42:34] Process Exited: Process Name - dllhost.exe Process ID - 108 [04-10-2024 19:42:34] Process Exited: Process Name - dllhost.exe Process ID - 1980 [04-10-2024 19:42:34] Process Exited: Process Name - rdpclip.exe Process ID - 2820 [04-10-2024 19:42:34] Process Exited: Process Name - ComboCleaner.exe Process ID - 5548 [04-10-2024 19:42:34] Process Exited: Process Name - rundll32.exe Process ID - 6916 [04-10-2024 19:42:34] Process Exited: Process Name - traymonitor.exe Process ID - 7784 [04-10-2024 19:42:34] Process Exited: Process Name - METray.exe Process ID - 7888 [04-10-2024 19:42:34] Process Exited: Process Name - Malwarebytes.exe Process ID - 9172 [04-10-2024 19:42:34] Process Exited: Process Name - ShellExperienceHost.exe Process ID - 12952 [04-10-2024 19:42:34] Service state changed: Service Name - WerSvc Process ID - 10272 Current State - SERVICE_RUNNING [04-10-2024 19:42:39] New process found: Process Name - svchost.exe Process ID - 11268 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:42:39] New process found: Process Name - WerFault.exe Process ID - 8668 Process Identity - KSHITIJSINGHAL-\Administrator [04-10-2024 19:42:39] New process found: Process Name - SearchProtocolHost.exe Process ID - 11704 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:42:39] New process found: Process Name - SearchFilterHost.exe Process ID - 13264 Process Identity - NT AUTHORITY\SYSTEM [04-10-2024 19:42:39] Process Exited: Process Name - svchost.exe Process ID - 2128 [04-10-2024 19:42:39] Process Exited: Process Name - ComboCleaner.WinService.exe Process ID - 2144 [04-10-2024 19:42:39] Process Exited: Process Name - RuntimeBroker.exe Process ID - 3640 [04-10-2024 19:42:39] Process Exited: Process Name - ApplicationFrameHost.exe Process ID - 4364 [04-10-2024 19:42:39] Process Exited: Process Name - dwm.exe Process ID - 4764 [04-10-2024 19:42:39] Process Exited: Process Name - winlogon.exe Process ID - 5220 [04-10-2024 19:42:39] Process Exited: Process Name - rdpclip.exe Process ID - 5604 [04-10-2024 19:42:39] Process Exited: Process Name - LogonUI.exe Process ID - 5772 [04-10-2024 19:42:39] Process Exited: Process Name - ShellExperienceHost.exe Process ID - 5900 [04-10-2024 19:42:39] Process Exited: Process Name - explorer.exe Process ID - 5924 [04-10-2024 19:42:39] Process Exited: Process Name - wlrmdr.exe Process ID - 6400 [04-10-2024 19:42:39] Process Exited: Process Name - winlogon.exe Process ID - 6552 [04-10-2024 19:42:39] Process Exited: Process Name - dwm.exe Process ID - 6676 [04-10-2024 19:42:39] Process Exited: Process Name - sihost.exe Process ID - 6880 [04-10-2024 19:42:39] Process Exited: Process Name - SearchUI.exe Process ID - 7316 [04-10-2024 19:42:39] Process Exited: Process Name - RuntimeBroker.exe Process ID - 7376 [04-10-2024 19:42:39] Process Exited: Process Name - taskhostw.exe Process ID - 7524 [04-10-2024 19:42:39] Process Exited: Process Name - ServerManager.exe Process ID - 8492 [04-10-2024 19:42:39] Process Exited: Process Name - ComboCleaner.exe Process ID - 9148 [04-10-2024 19:42:39] Process Exited: Process Name - sihost.exe Process ID - 9692 [04-10-2024 19:42:39] Process Exited: Process Name - Malwarebytes.exe Process ID - 9716 [04-10-2024 19:42:39] Process Exited: Process Name - svchost.exe Process ID - 9908 [04-10-2024 19:42:39] Process Exited: Process Name - ComboCleaner.Guard.exe Process ID - 9920 [04-10-2024 19:42:39] Process Exited: Process Name - taskhostw.exe Process ID - 10472 [04-10-2024 19:42:39] Process Exited: Process Name - SearchUI.exe Process ID - 10492 [04-10-2024 19:42:39] Process Exited: Process Name - traymonitor.exe Process ID - 10704 [04-10-2024 19:42:39] Process Exited: Process Name - explorer.exe Process ID - 10772 [04-10-2024 19:42:39] Process Exited: Process Name - METray.exe Process ID - 11844 [04-10-2024 19:42:39] Service state changed: Service Name - ComboCleaner.Guard Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - ComboCleaner.WinService Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - DiagTrack Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - gpsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - MBAMService Process ID - 2660 Current State - SERVICE_STOP_PENDING [04-10-2024 19:42:39] Service state changed: Service Name - StorSvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - tiledatamodelsvc Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - UALSVC Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - wlidsvc Process ID - 992 Current State - SERVICE_RUNNING [04-10-2024 19:42:39] Service state changed: Service Name - CDPUserSvc_4edcb Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:39] Service state changed: Service Name - OneSyncSvc_4edcb Process ID - 7944 Current State - SERVICE_STOP_PENDING [04-10-2024 19:42:40] Process Exited: Process Name - MBAMService.exe Process ID - 2660 [04-10-2024 19:42:40] Service state changed: Service Name - MBAMService Process ID - 0 Current State - SERVICE_STOPPED [04-10-2024 19:42:40] Service state changed: Service Name - WdiSystemHost Process ID - 460 Current State - SERVICE_RUNNING ControlTrace API failed to stop the ETW tracing session. Error Returned from API - 0x00001069 [04-10-2024 19:42:40] DbgSVC stopped