Running Processes
| Top |
| 0 | [System Process] | | | | 0 | 8 | 0 | | | | | | 8,192 | | |
| 4 | System | | | | 0 | 263 | 8 | | | | | | 2,826,240 | | |
| 72 | Secure System | | | | 4 | 0 | 8 | | | | | | 47,534,080 | | |
| 132 | Registry | | | | 4 | 4 | 8 | | | | | | 93,257,728 | | |
| 444 | services.exe | 10.0.19041.1 | Services and Controller app / Microsoft® Windows® Operating System | 64-bit | 956 | 11 | 9 | | | | | | 10,473,472 | C:\Windows\System32\services.exe | |
| 492 | smss.exe | 10.0.19041.1 | Windows Session Manager / Microsoft® Windows® Operating System | 64-bit | 4 | 2 | 11 | | | | | | 999,424 | C:\Windows\System32\smss.exe | |
| 548 | LsaIso.exe | 10.0.19041.1 | Credential Guard & Key Guard / Microsoft® Windows® Operating System | 64-bit | 956 | 3 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 3,325,952 | C:\Windows\System32\LsaIso.exe | |
| 560 | lsass.exe | 10.0.19041.1 | Local Security Authority Process / Microsoft® Windows® Operating System | 64-bit | 956 | 11 | 9 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 09m 13s | 0h 11m 35s | 23,707,648 | C:\Windows\System32\lsass.exe | C:\WINDOWS\system32\lsass.exe |
| 792 | SearchIndexer.exe | 7.0.19041.153 | Microsoft Windows Search Indexer / Windows® Search | 64-bit | 444 | 21 | 8 | | 2020-03-19 19:30:06 (Thursday, March 19, 2020) | 4d 17h 54m 19s | 0h 01m 20s | 0h 05m 00s | 54,620,160 | C:\Windows\System32\SearchIndexer.exe | C:\WINDOWS\system32\SearchIndexer.exe /Embedding |
| 808 | csrss.exe | 10.0.19041.1 | Client Server Runtime Process / Microsoft® Windows® Operating System | 64-bit | 612 | 13 | 13 | | | | | | 3,407,872 | C:\Windows\System32\csrss.exe | |
| 956 | wininit.exe | 10.0.19041.1 | Windows Start-Up Application / Microsoft® Windows® Operating System | 64-bit | 612 | 3 | 13 | | | | | | 4,227,072 | C:\Windows\System32\wininit.exe | |
| 976 | csrss.exe | 10.0.19041.1 | Client Server Runtime Process / Microsoft® Windows® Operating System | 64-bit | 948 | 20 | 13 | | | | | | 5,451,776 | C:\Windows\System32\csrss.exe | |
| 1060 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 2,879,488 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s PlugPlay |
| 1072 | OfficeClickToRun.exe | 16.0.12527.20242 | Microsoft Office Click-to-Run (SxS) / Microsoft Office | 64-bit | 444 | 19 | 8 | | 2020-03-17 14:46:57 (Tuesday, March 17, 2020) | 6d 22h 37m 28s | 0h 00m 20s | 0h 00m 15s | 32,628,736 | C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe | "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service |
| 1088 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 25 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 02m 25s | 0h 01m 45s | 36,052,992 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p |
| 1096 | fontdrvhost.exe | 10.0.19041.1 | Usermode Font Driver Host / Microsoft® Windows® Operating System | 64-bit | 956 | 5 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 2,023,424 | C:\Windows\System32\fontdrvhost.exe | "fontdrvhost.exe" |
| 1116 | mRemoteNG.exe | 1.76.20.24669 | mRemoteNG | 32-bit | 9868 | 37 | 8 | mRemoteNG - C:\utils\mremoreng\confCons.xml - BuildCenter | 2020-03-19 23:47:17 (Thursday, March 19, 2020) | 4d 13h 37m 08s | 0h 07m 27s | 0h 06m 04s | 85,491,712 | C:\utils\mremoreng\mRemoteNG.exe | "C:\utils\mremoreng\mRemoteNG.exe" |
| 1144 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 19 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 09s | 0h 00m 14s | 12,361,728 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-9377ebc9-f3fc-443a-b7e4-01ca0cd84b96 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-73e15d1c-e96e-4c5c-9ff2-05505de285c2 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-04ccd672-ab8e-4b16-81b2-c35bf20be441 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c009a279-1e62-4109-b616-23cd0f92dd82 -LifetimeId:519ec823-ea3a-4970-ab6d-51233a4c22aa -DeviceGroupId:WudfDefaultDevicePool -HostArg:0 |
| 1212 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 13 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 12s | 0h 00m 06s | 10,301,440 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e465f32a-2db6-4b9f-a51e-e24f5ed3b094 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-718f05b5-d52b-4528-9aec-8c21534077e7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-16b84781-96a9-4a15-bdf8-d4fde7e63bba -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c86f06d6-012b-4802-b56d-3a50baa4bc98 -LifetimeId:49262541-7b21-4856-aec8-03492a50b624 -DeviceGroupId: -HostArg:0 |
| 1268 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 16 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 03m 05s | 0h 05m 44s | 27,095,040 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k RPCSS -p |
| 1320 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 6 | 8 | | 2020-03-17 14:46:11 (Tuesday, March 17, 2020) | 6d 22h 38m 13s | 0h 00m 21s | 0h 00m 22s | 7,163,904 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM |
| 1412 | winlogon.exe | 10.0.19041.1 | Windows Logon Application / Microsoft® Windows® Operating System | 64-bit | 948 | 6 | 13 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 04s | 0h 00m 00s | 8,806,400 | C:\Windows\System32\winlogon.exe | winlogon.exe |
| 1468 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 3,805,184 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-363b9f54-d7cc-41e4-9880-466f169820a6 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2c3ae7c7-fe36-4f4c-a746-4a9885f4fa5c -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1cdca7a4-7649-484d-a1bf-2cdeeab55e08 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0570f2d7-1175-4b1a-b728-439347482bfa -LifetimeId:e2c6c3bc-64da-4ccd-a10a-9bc23cd434a0 -DeviceGroupId: -HostArg:0 |
| 1476 | SkypeApp.exe | 8.56.0.102 | SkypeApp / Microsoft Skype | 64-bit | 1088 | 47 | 8 | | 2020-03-17 15:16:18 (Tuesday, March 17, 2020) | 6d 22h 08m 07s | 0h 00m 04s | 0h 00m 07s | 4,661,248 | C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe | "C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca |
| 1512 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | | | | | 18,128,896 | C:\Windows\System32\svchost.exe | |
| 1516 | fontdrvhost.exe | 10.0.19041.1 | Usermode Font Driver Host / Microsoft® Windows® Operating System | 64-bit | 1412 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 12s | 0h 00m 14s | 9,367,552 | C:\Windows\System32\fontdrvhost.exe | "fontdrvhost.exe" |
| 1620 | dwm.exe | 10.0.19041.1 | Desktop Window Manager / Microsoft® Windows® Operating System | 64-bit | 1412 | 16 | 13 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 27m 43s | 1h 08m 28s | 119,480,320 | C:\Windows\System32\dwm.exe | "dwm.exe" |
| 1652 | TextInputHost.exe | 1907.3183.0.11830 | Microsoft® Windows® Operating System | 64-bit | 1088 | 12 | 8 | Microsoft Text Input Application | 2020-03-17 14:46:32 (Tuesday, March 17, 2020) | 6d 22h 37m 53s | 0h 00m 15s | 0h 00m 14s | 18,317,312 | C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe | "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca |
| 1672 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 63 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 17m 49s | 0h 08m 09s | 11,898,880 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k NetworkService -s TermService |
| 1684 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 01s | 0h 00m 00s | 4,530,176 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s XboxGipSvc |
| 1696 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 03s | 0h 00m 00s | 5,996,544 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BDESVC |
| 1736 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 4,272,128 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts |
| 1764 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 3,751,936 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s HvHost |
| 1788 | Taskmgr.exe | 10.0.19041.84 | Task Manager / Microsoft® Windows® Operating System | 64-bit | 9868 | 16 | 8 | | 2020-03-17 14:46:47 (Tuesday, March 17, 2020) | 6d 22h 37m 38s | 0h 17m 39s | 0h 08m 17s | 29,966,336 | C:\Windows\System32\Taskmgr.exe | "C:\Windows\System32\Taskmgr.exe" |
| 1816 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 10s | 0h 00m 14s | 8,118,272 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi |
| 1836 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 5,210,112 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -s BTAGService |
| 1848 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 13 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 04m 50s | 0h 08m 52s | 11,808,768 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s bthserv |
| 1880 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 33s | 0h 00m 29s | 6,946,816 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p |
| 1900 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 6 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 28s | 0h 00m 21s | 7,950,336 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc |
| 1936 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 6,504,448 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc |
| 1944 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 17s | 0h 00m 09s | 7,135,232 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService |
| 2152 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 14 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 22s | 0h 00m 10s | 12,677,120 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule |
| 2208 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 10 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 28s | 0h 00m 15s | 9,199,616 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc |
| 2280 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 7,868,416 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc |
| 2288 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 4,521,984 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s PhoneSvc |
| 2312 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 01s | 0h 00m 02s | 4,431,872 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p |
| 2344 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 6,291,456 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService |
| 2472 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 03s | 0h 00m 01s | 4,837,376 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv |
| 2484 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 4,837,376 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s UmRdpService |
| 2500 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 20s | 0h 00m 20s | 6,213,632 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp |
| 2556 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 31s | 0h 00m 17s | 8,200,192 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager |
| 2684 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 10 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 5,754,880 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SensrSvc |
| 2720 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 5,152,768 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SensorService |
| 2788 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 5,287,936 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService |
| 2876 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 9 | 8 | | | | | | 8,970,240 | C:\Windows\System32\svchost.exe | |
| 2880 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 40s | 0h 00m 35s | 14,770,176 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog |
| 2884 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 24m 03s | 0h 10m 48s | 8,450,048 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-35f5b8fe-c2b7-4f85-a6fd-89bc7ae0ef0d -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-77f84a38-7370-477c-8838-5dcc45d733b0 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7872324c-b996-4f97-a027-76dec44f6d59 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cf42f6cf-d8a3-4d00-a3ee-8cc4055468f0 -LifetimeId:2cef4c6e-48c8-4947-a065-43f79f5ffb84 -DeviceGroupId: -HostArg:0 |
| 2888 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 3,788,800 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc |
| 3288 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 45s | 0h 00m 18s | 5,701,632 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc |
| 3328 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 39s | 0h 02m 56s | 20,369,408 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository |
| 3344 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 37 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 29s | 0h 01m 00s | 22,806,528 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt |
| 3376 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 00s | 0h 00m 00s | 7,065,600 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -s CertPropSvc |
| 3460 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 35s | 0h 00m 12s | 9,986,048 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc |
| 3492 | vmms.exe | 10.0.19041.153 | Virtual Machine Management Service / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:12 (Tuesday, March 17, 2020) | 6d 22h 38m 12s | 0h 00m 05s | 0h 00m 02s | 23,396,352 | C:\Windows\System32\vmms.exe | C:\WINDOWS\system32\vmms.exe |
| 3508 | ONENOTEM.EXE | 16.0.12527.20278 | Send to OneNote Tool / Microsoft OneNote | 32-bit | 9868 | 2 | 8 | | 2020-03-17 14:46:47 (Tuesday, March 17, 2020) | 6d 22h 37m 38s | 0h 00m 00s | 0h 00m 00s | 1,122,304 | C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE | "C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE" sr |
| 3548 | Dropbox.exe | 93.4.273.0 | Dropbox | 32-bit | 12744 | 6 | 8 | | 2020-03-20 18:51:14 (Friday, March 20, 2020) | 3d 18h 33m 11s | 0h 00m 00s | 0h 00m 00s | 9,027,584 | C:\Program Files (x86)\Dropbox\Client\Dropbox.exe | "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:crashpad-handler --no-upload-gzip --no-rate-limit --capture-python --no-identify-client-via-url --database=C:\Users\gtopa\AppData\Local\Dropbox\Crashpad --metrics-dir=0 --url=https://d.dropbox.com/report_crashpad_minidump --https-pin=0x23,0xf2,0xed,0xff,0x3e,0xde,0x90,0x25,0x9a,0x9e,0x30,0xf4,0xa,0xf8,0xf9,0x12,0xa5,0xe5,0xb3,0x69,0x4e,0x69,0x38,0x44,0x3,0x41,0xf6,0x6,0xe,0x1,0x4f,0xfa --https-pin=0xaf,0xf9,0x88,0x90,0x6d,0xde,0x12,0x95,0x5d,0x9b,0xeb,0xbf,0x92,0x8f,0xdc,0xc3,0x1c,0xce,0x32,0x8d,0x5b,0x93,0x84,0xf2,0x1c,0x89,0x41,0xca,0x26,0xe2,0x3,0x91 --https-pin=0x5a,0x88,0x96,0x47,0x22,0xe,0x54,0xd6,0xbd,0x8a,0x16,0x81,0x72,0x24,0x52,0xb,0xb5,0xc7,0x8e,0x58,0x98,0x4b,0xd5,0x70,0x50,0x63,0x88,0xb9,0xde,0xf,0x7,0x5f --https-pin=0xfe,0xa2,0xb7,0xd6,0x45,0xfb,0xa7,0x3d,0x75,0x3c,0x1e,0xc9,0xa7,0x87,0xc,0x40,0xe1,0xf7,0xb0,0xc5,0x61,0xe9,0x27,0xb9,0x85,0xbf,0x71,0x18,0x66,0xe3,0x6f,0x22 --https-pin=0x76,0xee,0x85,0x90,0x37,0x4c,0x71,0x54,0x37,0xbb,0xca,0x6b,0xba,0x60,0x28,0xea,0xdd,0xe2,0xdc,0x6d,0xbb,0xb8,0xc3,0xf6,0x10,0xe8,0x51,0xf1,0x1d,0x1a,0xb7,0xf5 --https-pin=0x6d,0xbf,0xae,0x0,0xd3,0x7b,0x9c,0xd7,0x3f,0x8f,0xb4,0x7d,0xe6,0x59,0x17,0xaf,0x0,0xe0,0xdd,0xdf,0x42,0xdb,0xce,0xac,0x20,0xc1,0x7c,0x2,0x75,0xee,0x20,0x95 --https-pin=0x1e,0xa3,0xc5,0xe4,0x3e,0xd6,0x6c,0x2d,0xa2,0x98,0x3a,0x42,0xa4,0xa7,0x9b,0x1e,0x90,0x67,0x86,0xce,0x9f,0x1b,0x58,0x62,0x14,0x19,0xa0,0x4,0x63,0xa8,0x7d,0x38 --https-pin=0x87,0xaf,0x34,0xd6,0x6f,0xb3,0xf2,0xfd,0xf3,0x6e,0x9,0x11,0x1e,0x9a,0xba,0x2f,0x6f,0x44,0xb2,0x7,0xf3,0x86,0x3f,0x3d,0xb,0x54,0xb2,0x50,0x23,0x90,0x9a,0xa5 --https-pin=0xbc,0xfb,0x44,0xaa,0xb9,0xad,0x2,0x10,0x15,0x70,0x6b,0x41,0x21,0xea,0x76,0x1c,0x81,0xc9,0xe8,0x89,0x67,0x59,0xf,0x6f,0x94,0xae,0x74,0x4d,0xc8,0x8b,0x78,0xfb --https-pin=0xab,0x98,0x49,0x52,0x76,0xad,0xf1,0xec,0xaf,0xf2,0x8f,0x35,0xc5,0x30,0x48,0x78,0x1e,0x5c,0x17,0x18,0xda,0xb9,0xc8,0xe6,0x7a,0x50,0x4f,0x4f,0x6a,0x51,0x32,0x8f --https-pin=0x49,0x5,0x46,0x66,0x23,0xab,0x41,0x78,0xbe,0x92,0xac,0x5c,0xbd,0x65,0x84,0xf7,0xa1,0xe1,0x7f,0x27,0x65,0x2d,0x5a,0x85,0xaf,0x89,0x50,0x4e,0xa2,0x39,0xaa,0xaa --https-pin=0x56,0x32,0xd9,0x7b,0xfa,0x77,0x5b,0xf3,0xc9,0x9d,0xde,0xa5,0x2f,0xc2,0x55,0x34,0x10,0x86,0x40,0x16,0x72,0x9c,0x52,0xdd,0x65,0x24,0xc8,0xa9,0xc3,0xb4,0x48,0x9f --https-pin=0x2a,0x8f,0x2d,0x8a,0xf0,0xeb,0x12,0x38,0x98,0xf7,0x4c,0x86,0x6a,0xc3,0xfa,0x66,0x90,0x54,0xe2,0x3c,0x17,0xbc,0x7a,0x95,0xbd,0x2,0x34,0x19,0x2d,0xc6,0x35,0xd0 --https-pin=0x32,0xb6,0x4b,0x66,0x72,0x7a,0x20,0x63,0xe4,0x6,0x6f,0x3b,0x95,0x8c,0xb0,0xaa,0xee,0x57,0x6a,0x5e,0xce,0xfd,0x95,0x33,0x99,0xbb,0x88,0x74,0x73,0x1d,0x95,0x87 --https-pin=0xf5,0x3c,0x22,0x5,0x98,0x17,0xdd,0x96,0xf4,0x0,0x65,0x16,0x39,0xd2,0xf8,0x57,0xe2,0x10,0x70,0xa5,0x9a,0xbe,0xd9,0x7,0x94,0x0,0xd9,0xf6,0x95,0x50,0x69,0x0 --https-pin=0x67,0xdc,0x4f,0x32,0xfa,0x10,0xe7,0xd0,0x1a,0x79,0xa0,0x73,0xaa,0xc,0x9e,0x2,0x12,0xec,0x2f,0xfc,0x3d,0x77,0x9e,0xa,0xa7,0xf9,0xc0,0xf0,0xe1,0xc2,0xc8,0x93 --https-pin=0x19,0x6,0xc6,0x12,0x4d,0xbb,0x43,0x85,0x78,0xd0,0xe,0x6,0x6d,0x50,0x54,0xc6,0xc3,0x7f,0xf,0xa6,0x2,0x8c,0x5,0x54,0x5e,0x9,0x94,0xed,0xda,0xec,0x86,0x29 --https-pin=0x1d,0x75,0xd0,0x83,0x1b,0x9e,0x8,0x85,0x39,0x4d,0x32,0xc7,0xa1,0xbf,0xdb,0x3d,0xbc,0x1c,0x28,0xe2,0xb0,0xe8,0x39,0x1f,0xb1,0x35,0x98,0x1d,0xbc,0x5b,0xa9,0x36 --annotation=host_int_account1_boot=34345911360 --annotation=machine_id=b1519b9f-bb6e-4227-8eb7-e99d19dda9b1 --annotation=platform=win "--annotation=platform_version=10 2004" --initial-client-data=0x234,0x23c,0x240,0x198,0x244,0x6fbe0560,0x6fbe0588,0x6fbe0570 |
| 3616 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 03m 13s | 0h 01m 25s | 8,331,264 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache |
| 3652 | NVDisplay.Container.exe | 1.2.0.0 | NVIDIA Container | 64-bit | 444 | 10 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 03s | 0h 00m 08s | 7,970,816 | C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe | "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 |
| 3748 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 13 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 02m 15s | 0h 01m 51s | 13,717,504 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm |
| 3756 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 01s | 0h 00m 01s | 6,598,656 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem |
| 3768 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 6 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 10m 45s | 0h 00m 35s | 8,814,592 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain |
| 3812 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 02s | 0h 00m 01s | 3,985,408 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes |
| 3844 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 03m 36s | 0h 03m 18s | 5,124,096 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation |
| 3880 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 01s | 0h 00m 00s | 6,373,376 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p |
| 3888 | Memory Compression | | | | 4 | 102 | 8 | | | | | | 990,769,152 | | |
| 3984 | NVDisplay.Container.exe | 1.2.0.0 | NVIDIA Container | 64-bit | 3652 | 22 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 24s | 0h 00m 26s | 18,485,248 | C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe | "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c |
| 4020 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 00s | 0h 00m 00s | 6,889,472 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS |
| 4076 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 10 | 13 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 06m 59s | 0h 08m 27s | 7,467,008 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-eb160f2e-84e7-47d4-bf1b-1788fdb2d599 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2ec9bb7d-19e7-4435-865c-b9ff98a6eea7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e57c1805-2723-437d-a026-4cd95468ab3a -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-345e2b44-7b58-400e-930f-c84624526285 -LifetimeId:49850cba-5665-4a03-86e9-31ac11c17a0f -DeviceGroupId:WudfDefaultDevicePoolPriorityHigh -HostArg:0 |
| 4100 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 04s | 0h 00m 00s | 6,467,584 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder |
| 4116 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 07s | 0h 00m 08s | 6,094,848 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache |
| 4176 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 01s | 7,856,128 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc |
| 4180 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 00s | 0h 00m 00s | 5,853,184 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SessionEnv |
| 4188 | smartscreen.exe | 10.0.19041.84 | Windows Defender SmartScreen / Microsoft® Windows® Operating System | 64-bit | 1088 | 16 | 8 | | 2020-03-23 17:38:21 (Monday, March 23, 2020) | 0d 19h 46m 04s | 0h 00m 10s | 0h 00m 15s | 36,433,920 | C:\Windows\System32\smartscreen.exe | C:\Windows\System32\smartscreen.exe -Embedding |
| 4244 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 02s | 0h 00m 00s | 5,050,368 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService |
| 4272 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:47:36 (Tuesday, March 17, 2020) | 6d 22h 36m 49s | 0h 00m 01s | 0h 00m 01s | 15,953,920 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p |
| 4320 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 13 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 03m 55s | 0h 00m 56s | 9,269,248 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k NetSvcs -p -s hns |
| 4452 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 00s | 0h 00m 00s | 4,046,848 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s fdPHost |
| 4504 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 00s | 0h 00m 00s | 5,197,824 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k NetSvcs -s nvagent |
| 4596 | armsvc.exe | 1.824.36.9436 | Adobe Acrobat Update Service | 32-bit | 444 | 2 | 8 | | 2020-03-19 19:30:09 (Thursday, March 19, 2020) | 4d 17h 54m 16s | 0h 00m 00s | 0h 00m 00s | 3,489,792 | C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe | "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" |
| 4600 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 05s | 0h 00m 07s | 6,414,336 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s FDResPub |
| 4620 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:20 (Tuesday, March 17, 2020) | 6d 22h 38m 05s | 0h 00m 00s | 0h 00m 01s | 6,340,608 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc |
| 4632 | TOTALCMD64.EXE | 9.5.0.0 | Total Commander | 64-bit | 9868 | 29 | 8 | Total Commander (x64) 9.50 - Gabriel Topala | 2020-03-23 16:39:23 (Monday, March 23, 2020) | 0d 20h 45m 02s | 0h 01m 27s | 0h 00m 30s | 62,504,960 | C:\totalcmd\TOTALCMD64.EXE | "C:\totalcmd\TOTALCMD64.EXE" |
| 4712 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 14 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 30s | 0h 00m 30s | 15,507,456 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p |
| 4820 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 14s | 0h 00m 07s | 12,013,568 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p |
| 4856 | QtWebEngineProcess.exe | 5.13.2.0 | Qt Qtwebengineprocess / Qt5 | 32-bit | 12744 | 17 | 4 | | 2020-03-20 18:51:23 (Friday, March 20, 2020) | 3d 18h 33m 02s | 0h 01m 00s | 0h 01m 08s | 67,198,976 | C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe | "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=5643575549165785889 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=5643575549165785889 --renderer-client-id=3 --mojo-platform-channel-handle=7088 /prefetch:1 |
| 5080 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:13 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 18s | 0h 00m 04s | 4,812,800 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p |
| 5172 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 13 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 01m 10s | 0h 01m 03s | 14,319,616 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p |
| 5220 | SkypeBackgroundHost.exe | 8.56.0.102 | | 64-bit | 1088 | 4 | 8 | | 2020-03-17 15:16:18 (Tuesday, March 17, 2020) | 6d 22h 08m 07s | 0h 00m 00s | 0h 00m 00s | 2,347,008 | C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe | "C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost |
| 5308 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 00s | 6,209,536 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SharedAccess |
| 5324 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 08s | 0h 00m 03s | 10,727,424 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection |
| 5448 | SurfaceUsbHubFwUpdateService.exe | 1.16.136.0 | Surface Usb Hub Firmware Update Service / Surface | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 3,850,240 | C:\Windows\System32\SurfaceUsbHubFwUpdateService.exe | C:\WINDOWS\System32\SurfaceUsbHubFwUpdateService.exe |
| 5456 | spoolsv.exe | 10.0.19041.1 | Spooler SubSystem App / Microsoft® Windows® Operating System | 64-bit | 444 | 16 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 03s | 0h 00m 03s | 16,855,040 | C:\Windows\System32\spoolsv.exe | C:\WINDOWS\System32\spoolsv.exe |
| 5492 | vmcompute.exe | 10.0.19041.153 | Hyper-V Host Compute Service / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 5,382,144 | C:\Windows\System32\vmcompute.exe | C:\WINDOWS\system32\vmcompute.exe |
| 5516 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:48:17 (Tuesday, March 17, 2020) | 6d 22h 36m 08s | 0h 00m 00s | 0h 00m 00s | 14,548,992 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup |
| 5604 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-20 12:47:13 (Friday, March 20, 2020) | 4d 00h 37m 12s | 0h 00m 00s | 0h 00m 00s | 8,859,648 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e2bc04a4-687d-4b9c-af44-218044b1d637 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7d6e66ce-b1e4-487e-9e71-e6763f5c3e3c -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-71ae7c9e-f847-4b6f-bdcc-6b1b2e63915f -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-bfa10ff2-0730-4b3e-91af-f814fed6f769 -LifetimeId:307b8484-982b-4121-a4e3-85ab93e0c72b -DeviceGroupId:WpdFsGroup -HostArg:0 |
| 5664 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 4,288,512 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s CmService |
| 5672 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 12s | 0h 00m 31s | 181,325,824 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc |
| 5724 | dasHost.exe | 10.0.19041.1 | Device Association Framework Provider Host / Microsoft® Windows® Operating System | 64-bit | 4244 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 29s | 0h 00m 32s | 12,656,640 | C:\Windows\System32\dasHost.exe | dashost.exe {84faf3b5-2e17-4ddb-8d91209b83d4998b} |
| 5792 | IntelCpHDCPSvc.exe | 25.20.100.6472 | Intel HD Graphics Drivers for Windows(R) | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 4,382,720 | C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe | C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe |
| 5824 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 15s | 0h 00m 07s | 14,602,240 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc |
| 5836 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 18 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 49s | 0h 00m 46s | 30,134,272 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k utcsvc -p |
| 5864 | esif_uf.exe | 8.3.10207.5567 | Intel(R) Dynamic Platform and Thermal Framework | 64-bit | 444 | 3 | 13 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 4,083,712 | C:\Windows\System32\Intel\DPTF\esif_uf.exe | C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe |
| 5880 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 19 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 06m 15s | 0h 05m 03s | 39,055,360 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS |
| 6064 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 3,731,456 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc |
| 6072 | SurfaceColorService.exe | 2.0.366.0 | Surface Color Profile Service / Surface | 64-bit | 444 | 1 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 4,440,064 | C:\Windows\System32\SurfaceColorService.exe | C:\WINDOWS\System32\SurfaceColorService.exe |
| 6100 | SurfaceDtxService.exe | 3.32.139.0 | Surface DTX Service / Surface | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 00s | 3,747,840 | C:\Windows\System32\SurfaceDtxService.exe | C:\WINDOWS\system32\SurfaceDtxService.exe |
| 6140 | SurfaceService.exe | 4.14.139.0 | Surface Service / Surface | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 00s | 5,337,088 | C:\Windows\System32\SurfaceService.exe | C:\WINDOWS\System32\SurfaceService.exe |
| 6152 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 4,173,824 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks |
| 6180 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 02s | 0h 00m 03s | 10,731,520 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k imgsvc |
| 6196 | dptf_helper.exe | 8.3.10207.5567 | Intel(R) Dynamic Platform and Thermal Framework Utility Application | 64-bit | 5864 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 29s | 0h 00m 13s | 3,125,248 | C:\Windows\System32\Intel\DPTF\dptf_helper.exe | "C:\WINDOWS\system32\Intel\DPTF\dptf_helper.exe" |
| 6204 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 01s | 0h 00m 01s | 6,483,968 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer |
| 6232 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 7 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 02s | 0h 00m 02s | 16,703,488 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService |
| 6332 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:15 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 00s | 7,860,224 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs |
| 6484 | siw64.exe | | | 64-bit | 4632 | 164 | 8 | SIW 2020 64-bit v10.2.0322 (Licensed To Gabriel Topala) - running on \\BOOK2-GABI | 2020-03-24 13:22:28 (Tuesday, March 24, 2020) | 0d 00h 01m 57s | 0h 01m 14s | 0h 00m 19s | 114,266,112 | \\dell8700\share\siw_test\siw\new\siw64.exe | "\\dell8700\share\siw_test\siw\new\siw64.exe" |
| 6820 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 21:06:02 (Tuesday, March 17, 2020) | 6d 16h 18m 23s | 0h 00m 00s | 0h 00m 00s | 6,000,640 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s QWAVE |
| 6836 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 10 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 34s | 0h 00m 59s | 6,549,504 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV |
| 6856 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 4 | 8 | | 2020-03-17 15:55:53 (Tuesday, March 17, 2020) | 6d 21h 28m 32s | 0h 00m 03s | 0h 00m 02s | 25,710,592 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 6892 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:14 (Tuesday, March 17, 2020) | 6d 22h 38m 11s | 0h 00m 00s | 0h 00m 00s | 3,837,952 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost |
| 6932 | rundll32.exe | 10.0.19041.1 | Windows host process (Rundll32) / Microsoft® Windows® Operating System | 64-bit | 1088 | 6 | 8 | | 2020-03-17 14:46:15 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 01s | 0h 00m 00s | 8,826,880 | C:\Windows\System32\rundll32.exe | C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding |
| 7032 | IntelCpHeciSvc.exe | 9.1.1.1117 | IntelCpHeciSvc Executable | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:15 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 00s | 0h 00m 00s | 5,459,968 | C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe | C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe |
| 7224 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:15 (Tuesday, March 17, 2020) | 6d 22h 38m 10s | 0h 00m 04s | 0h 00m 02s | 5,926,912 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent |
| 7400 | dasHost.exe | 10.0.19041.1 | Device Association Framework Provider Host / Microsoft® Windows® Operating System | 64-bit | 4244 | 1 | 8 | | 2020-03-17 14:46:16 (Tuesday, March 17, 2020) | 6d 22h 38m 09s | 0h 00m 00s | 0h 00m 00s | 3,231,744 | C:\Windows\System32\dasHost.exe | dashost.exe {b08a263e-2e6b-4fed-84ee8d01f60f5f74} |
| 7748 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 12 | 8 | | 2020-03-17 14:46:16 (Tuesday, March 17, 2020) | 6d 22h 38m 09s | 0h 00m 03s | 0h 00m 01s | 15,400,960 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc |
| 7960 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 4 | 8 | | 2020-03-24 02:48:55 (Tuesday, March 24, 2020) | 0d 10h 35m 30s | 0h 00m 00s | 0h 00m 00s | 18,468,864 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 8280 | sihost.exe | 10.0.19041.1 | Shell Infrastructure Host / Microsoft® Windows® Operating System | 64-bit | 2556 | 12 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 43s | 0h 00m 25s | 26,710,016 | C:\Windows\System32\sihost.exe | sihost.exe |
| 8304 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 11 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 04m 29s | 0h 03m 31s | 24,649,728 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc |
| 8312 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 06s | 0h 00m 03s | 5,758,976 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p -s BluetoothUserService |
| 8384 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-18 01:32:24 (Wednesday, March 18, 2020) | 6d 11h 52m 01s | 0h 00m 00s | 0h 00m 00s | 6,397,952 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc |
| 8388 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 16 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 41s | 0h 01m 11s | 38,236,160 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService |
| 8516 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 10 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 01m 37s | 0h 03m 49s | 15,884,288 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker |
| 8536 | DropboxUpdate.exe | 1.3.27.73 | Dropbox Update | 32-bit | 2152 | 3 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 01s | 0h 00m 00s | 2,084,864 | C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe | "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /c |
| 8548 | SettingSyncHost.exe | 10.0.19041.1 | Host Process for Setting Synchronization / Microsoft® Windows® Operating System | 64-bit | 1088 | 7 | 6 | | 2020-03-17 14:46:18 (Tuesday, March 17, 2020) | 6d 22h 38m 07s | 0h 01m 00s | 0h 00m 35s | 8,339,456 | C:\Windows\System32\SettingSyncHost.exe | C:\WINDOWS\system32\SettingSyncHost.exe -Embedding |
| 8576 | taskhostw.exe | 10.0.19041.1 | Host Process for Windows Tasks / Microsoft® Windows® Operating System | 64-bit | 2152 | 10 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 23s | 0h 00m 19s | 19,107,840 | C:\Windows\System32\taskhostw.exe | taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} |
| 8596 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 2 | 8 | | 2020-03-17 14:46:20 (Tuesday, March 17, 2020) | 6d 22h 38m 05s | 0h 00m 00s | 0h 00m 00s | 5,591,040 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc |
| 8604 | SurfaceColorTracker.exe | 2.0.366.0 | Surface Color Profile Tracker / Surface | 64-bit | 2152 | 1 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 04s | 0h 00m 00s | 1,818,624 | C:\Windows\System32\SurfaceColorTracker.exe | C:\WINDOWS\System32\SurfaceColorTracker.exe |
| 8668 | QtWebEngineProcess.exe | 5.13.2.0 | Qt Qtwebengineprocess / Qt5 | 32-bit | 12744 | 16 | 4 | | 2020-03-20 18:51:23 (Friday, March 20, 2020) | 3d 18h 33m 02s | 0h 00m 00s | 0h 00m 00s | 39,948,288 | C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe | "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=16129899374287304221 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=16129899374287304221 --renderer-client-id=4 --mojo-platform-channel-handle=7352 /prefetch:1 |
| 8776 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:20 (Tuesday, March 17, 2020) | 6d 22h 38m 05s | 0h 00m 05s | 0h 00m 06s | 28,590,080 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc |
| 8984 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 00m 47s | 0h 00m 18s | 15,220,736 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvc |
| 9096 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 9 | 8 | | 2020-03-17 14:46:17 (Tuesday, March 17, 2020) | 6d 22h 38m 08s | 0h 01m 02s | 0h 01m 53s | 15,687,680 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc |
| 9428 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:48:14 (Tuesday, March 17, 2020) | 6d 22h 36m 11s | 0h 00m 53s | 0h 00m 21s | 14,368,768 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc |
| 9620 | AcrobatNotificationClient.exe | | | 32-bit | 1088 | 13 | 8 | | 2020-03-21 17:29:24 (Saturday, March 21, 2020) | 2d 19h 55m 01s | 0h 00m 00s | 0h 00m 00s | 3,584,000 | C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe | "C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe" -ServerName:App.AppX9n879r3et3x3b24eqasexpgc3412rn2m.mca |
| 9780 | StartMenuExperienceHost.exe | | | 64-bit | 1088 | 14 | 8 | Start | 2020-03-17 14:46:22 (Tuesday, March 17, 2020) | 6d 22h 38m 03s | 0h 00m 28s | 0h 01m 02s | 82,890,752 | C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe | "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca |
| 9868 | explorer.exe | 10.0.19041.153 | Windows Explorer / Microsoft® Windows® Operating System | 64-bit | 9804 | 78 | 8 | Program Manager | 2020-03-17 14:46:20 (Tuesday, March 17, 2020) | 6d 22h 38m 05s | 0h 20m 06s | 0h 10m 03s | 132,182,016 | C:\Windows\explorer.exe | C:\WINDOWS\Explorer.EXE |
| 10024 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 2 | 8 | | 2020-03-17 15:16:18 (Tuesday, March 17, 2020) | 6d 22h 08m 07s | 0h 00m 01s | 0h 00m 01s | 15,351,808 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 10068 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-17 14:46:20 (Tuesday, March 17, 2020) | 6d 22h 38m 05s | 0h 00m 15s | 0h 00m 13s | 6,287,360 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc |
| 10300 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 4 | 8 | | 2020-03-17 14:46:23 (Tuesday, March 17, 2020) | 6d 22h 38m 02s | 0h 00m 04s | 0h 00m 02s | 19,288,064 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 10440 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 6 | 8 | | 2020-03-17 14:46:24 (Tuesday, March 17, 2020) | 6d 22h 38m 01s | 0h 00m 03s | 0h 00m 03s | 14,692,352 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager |
| 10524 | MsMpEng.exe | | | | 444 | 44 | 8 | | | | | | 151,486,464 | | |
| 10540 | Microsoft.Msn.Weather.exe | 4.36.2003.11004 | | 64-bit | 1088 | 24 | 8 | Weather | 2020-03-24 06:03:14 (Tuesday, March 24, 2020) | 0d 07h 21m 11s | 0h 00m 00s | 0h 00m 00s | 2,383,872 | C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe | "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe" -ServerName:App.AppX2m6wj6jceb8yq7ppx1b3drf7yy51ha6f.mca |
| 10560 | DbxSvc.exe | 1.0.24.0 | Dropbox Service / Dropbox | 64-bit | 444 | 24 | 8 | | 2020-03-20 18:51:03 (Friday, March 20, 2020) | 3d 18h 33m 22s | 0h 00m 00s | 0h 00m 00s | 6,033,408 | C:\Windows\System32\DbxSvc.exe | C:\WINDOWS\system32\DbxSvc.exe |
| 10708 | SearchApp.exe | 10.0.19041.153 | Search application / Microsoft® Windows® Operating System | 64-bit | 1088 | 41 | 8 | Search | 2020-03-17 14:46:23 (Tuesday, March 17, 2020) | 6d 22h 38m 02s | 0h 00m 30s | 0h 01m 14s | 173,080,576 | C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe | "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca |
| 10800 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | 2020-03-17 14:46:30 (Tuesday, March 17, 2020) | 6d 22h 37m 55s | 0h 00m 00s | 0h 00m 00s | 6,430,720 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hvsics |
| 11044 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 15 | 8 | | 2020-03-17 14:46:24 (Tuesday, March 17, 2020) | 6d 22h 38m 01s | 0h 00m 44s | 0h 00m 34s | 42,635,264 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 11172 | QtWebEngineProcess.exe | 5.13.2.0 | Qt Qtwebengineprocess / Qt5 | 32-bit | 12744 | 16 | 4 | | 2020-03-20 18:51:28 (Friday, March 20, 2020) | 3d 18h 32m 57s | 0h 00m 47s | 0h 00m 08s | 54,231,040 | C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe | "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=12202267630609783148 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=12202267630609783148 --renderer-client-id=5 --mojo-platform-channel-handle=16432 /prefetch:1 |
| 11212 | Cloud.Backup.Scheduler.exe | 6.3.0.274 | Online Backup Scheduler | 32-bit | 444 | 16 | 8 | | 2020-03-24 11:41:27 (Tuesday, March 24, 2020) | 0d 01h 42m 58s | 0h 00m 00s | 0h 00m 01s | 59,592,704 | C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe | "C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe" |
| 11336 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 3 | 8 | | 2020-03-17 14:46:25 (Tuesday, March 17, 2020) | 6d 22h 38m 00s | 0h 00m 41s | 0h 00m 29s | 27,238,400 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 11480 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-17 14:46:46 (Tuesday, March 17, 2020) | 6d 22h 37m 39s | 0h 00m 00s | 0h 00m 00s | 7,868,416 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo |
| 11524 | ctfmon.exe | 10.0.19041.1 | CTF Loader / Microsoft® Windows® Operating System | 64-bit | 2788 | 12 | 13 | | 2020-03-17 14:46:26 (Tuesday, March 17, 2020) | 6d 22h 37m 59s | 0h 02m 44s | 0h 01m 11s | 20,414,464 | C:\Windows\System32\ctfmon.exe | "ctfmon.exe" |
| 11536 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-17 14:46:29 (Tuesday, March 17, 2020) | 6d 22h 37m 56s | 0h 00m 04s | 0h 00m 01s | 7,749,632 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalService -p -s WebClient |
| 11556 | TabTip.exe | 10.0.19041.1 | Touch Keyboard and Handwriting Panel / Microsoft® Windows® Operating System | 64-bit | 2788 | 13 | 13 | Touch Keyboard text suggestion | 2020-03-17 14:46:26 (Tuesday, March 17, 2020) | 6d 22h 37m 59s | 0h 00m 17s | 0h 00m 08s | 12,562,432 | C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe | /QuitInfo:0000000000000258;0000000000000254; |
| 11928 | ddm.exe | 1.50.0.1996 | Dell Display Manager | 32-bit | 9868 | 6 | 8 | | 2020-03-17 14:46:45 (Tuesday, March 17, 2020) | 6d 22h 37m 40s | 0h 30m 24s | 0h 03m 19s | 16,576,512 | C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe | "C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe" |
| 11996 | CompPkgSrv.exe | 10.0.19041.1 | Component Package Support Server / Microsoft® Windows® Operating System | 64-bit | 1088 | 1 | 8 | | 2020-03-17 21:37:35 (Tuesday, March 17, 2020) | 6d 15h 46m 50s | 0h 00m 00s | 0h 00m 00s | 7,270,400 | C:\Windows\System32\CompPkgSrv.exe | C:\Windows\System32\CompPkgSrv.exe -Embedding |
| 12292 | MsMpEngCP.exe | 1.1.16627.0 | Antimalware Service Executable Content Process / Microsoft Malware Protection | 64-bit | 10524 | 6 | 8 | | 2020-03-23 21:20:37 (Monday, March 23, 2020) | 0d 16h 03m 48s | 0h 00m 39s | 0h 03m 29s | 132,345,856 | C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe | "C:\ProgramData\Microsoft\Windows Defender\Scans\\MsMpEngCP.exe" "C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C56198BA-780F-422F-B78A-4DA5D9C462E1}\mpengine.dll" ACFCFA1E-538E-433E-8DCE-726ADC631615 S-1-15-2-414658757-1168934989-2622017976-4156097913-1883912072-3505740788-538829988 291c.1d5fec7c7093a33 |
| 12352 | OUTLOOK.EXE | 16.0.12527.20278 | Microsoft Outlook | 32-bit | 9868 | 102 | 8 | Income - [email protected] - Outlook | 2020-03-18 11:46:25 (Wednesday, March 18, 2020) | 6d 01h 38m 00s | 0h 43m 44s | 1h 20m 25s | 427,192,320 | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE | "C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE" |
| 12504 | SgrmBroker.exe | 10.0.19041.84 | System Guard Runtime Monitor Broker Service / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | | | | | 8,839,168 | C:\Windows\System32\SgrmBroker.exe | |
| 12716 | dllhost.exe | 10.0.19041.1 | COM Surrogate / Microsoft® Windows® Operating System | 64-bit | 1088 | 6 | 8 | | 2020-03-17 14:47:55 (Tuesday, March 17, 2020) | 6d 22h 36m 30s | 0h 00m 02s | 0h 00m 00s | 11,259,904 | C:\Windows\System32\dllhost.exe | C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F} |
| 12744 | Dropbox.exe | 93.4.273.0 | Dropbox | 32-bit | 13744 | 139 | 8 | | 2020-03-20 18:51:14 (Friday, March 20, 2020) | 3d 18h 33m 11s | 0h 07m 32s | 0h 15m 32s | 231,440,384 | C:\Program Files (x86)\Dropbox\Client\Dropbox.exe | "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrunupdate 1 /appwasrunning |
| 12872 | SurfaceDTX.exe | 3.32.139.0 | Surface DTX / Surface | 32-bit | 9868 | 13 | 8 | | 2020-03-17 14:46:36 (Tuesday, March 17, 2020) | 6d 22h 37m 49s | 0h 00m 11s | 0h 00m 02s | 29,253,632 | C:\Windows\System32\SurfaceDTX.exe | "C:\Windows\System32\SurfaceDTX.exe" |
| 13176 | vmmem | | | | 12020 | 0 | 8 | | 2020-03-17 14:46:46 (Tuesday, March 17, 2020) | 6d 22h 37m 39s | 0h 00m 00s | 0h 00m 00s | 8,192 | vmmem | |
| 13264 | audiodg.exe | 10.0.19041.84 | Windows Audio Device Graph Isolation / Microsoft® Windows® Operating System | 64-bit | 4820 | 6 | 8 | | 2020-03-24 13:22:26 (Tuesday, March 24, 2020) | 0d 00h 01m 59s | 0h 00m 00s | 0h 00m 00s | 12,746,752 | C:\Windows\System32\audiodg.exe | C:\WINDOWS\system32\AUDIODG.EXE 0x1fc |
| 13380 | WmiPrvSE.exe | 10.0.19041.1 | WMI Provider Host / Microsoft® Windows® Operating System | 64-bit | 1088 | 7 | 8 | | 2020-03-24 11:27:28 (Tuesday, March 24, 2020) | 0d 01h 56m 57s | 0h 00m 03s | 0h 00m 01s | 21,278,720 | C:\Windows\System32\wbem\WmiPrvSE.exe | C:\WINDOWS\system32\wbem\wmiprvse.exe |
| 13388 | NisSrv.exe | | | | 444 | 8 | 8 | | | | | | 14,196,736 | | |
| 13520 | YourPhone.exe | 1.20012.135.0 | | 64-bit | 1088 | 16 | 8 | | 2020-03-24 08:46:09 (Tuesday, March 24, 2020) | 0d 04h 38m 16s | 0h 00m 00s | 0h 00m 00s | 10,526,720 | C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe | "C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca |
| 13756 | dllhost.exe | 10.0.19041.1 | COM Surrogate / Microsoft® Windows® Operating System | 64-bit | 1088 | 5 | 8 | | 2020-03-17 14:47:08 (Tuesday, March 17, 2020) | 6d 22h 37m 17s | 0h 00m 00s | 0h 00m 00s | 8,331,264 | C:\Windows\System32\dllhost.exe | C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} |
| 13876 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 16 | 8 | | 2020-03-17 14:47:16 (Tuesday, March 17, 2020) | 6d 22h 37m 09s | 0h 00m 07s | 0h 00m 08s | 19,562,496 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITS |
| 14192 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 9 | 8 | | 2020-03-17 14:47:31 (Tuesday, March 17, 2020) | 6d 22h 36m 54s | 0h 00m 11s | 0h 00m 04s | 13,324,288 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc |
| 14320 | ApplicationFrameHost.exe | 10.0.19041.1 | Application Frame Host / Microsoft® Windows® Operating System | 64-bit | 1088 | 9 | 8 | Weather | 2020-03-17 14:47:32 (Tuesday, March 17, 2020) | 6d 22h 36m 53s | 0h 00m 13s | 0h 00m 07s | 35,262,464 | C:\Windows\System32\ApplicationFrameHost.exe | C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding |
| 14852 | YourPhoneServer.exe | 1.20012.135.0 | | 64-bit | 1088 | 3 | 8 | | 2020-03-17 14:48:25 (Tuesday, March 17, 2020) | 6d 22h 36m 00s | 0h 00m 00s | 0h 00m 00s | 8,433,664 | C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe | "C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer/YourPhoneServer.exe" -Embedding |
| 14900 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 10 | 8 | | 2020-03-18 02:28:23 (Wednesday, March 18, 2020) | 6d 10h 56m 02s | 0h 00m 31s | 0h 00m 25s | 28,364,800 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 14956 | LockApp.exe | 10.0.19041.1 | LockApp.exe / Microsoft® Windows® Operating System | 64-bit | 1088 | 11 | 8 | Windows Default Lock Screen | 2020-03-18 02:28:23 (Wednesday, March 18, 2020) | 6d 10h 56m 02s | 0h 00m 00s | 0h 00m 01s | 29,372,416 | C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe | "C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca |
| 15112 | Microsoft.Msn.News.exe | 4.36.2003.11004 | | 64-bit | 1088 | 28 | 8 | Microsoft News | 2020-03-24 02:50:33 (Tuesday, March 24, 2020) | 0d 10h 33m 52s | 0h 00m 00s | 0h 00m 00s | 2,461,696 | C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.News.exe | "C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.News.exe" -ServerName:AppexNews.AppX3vz52bd72d0ycrnwe6jysfgn7k1qcv00.mca |
| 15380 | SecurityHealthService.exe | 4.18.1907.16384 | Windows Security Health Service / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | | | | | 10,092,544 | C:\Windows\System32\SecurityHealthService.exe | |
| 15840 | ShellExperienceHost.exe | 10.0.19041.1 | Windows Shell Experience Host / Microsoft® Windows® Operating System | 64-bit | 1088 | 22 | 8 | Volume Control | 2020-03-17 15:55:53 (Tuesday, March 17, 2020) | 6d 21h 28m 32s | 0h 00m 05s | 0h 00m 09s | 53,141,504 | C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe | "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca |
| 15984 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 6 | 8 | | 2020-03-17 14:49:30 (Tuesday, March 17, 2020) | 6d 22h 34m 55s | 0h 04m 41s | 0h 01m 52s | 5,931,008 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvc |
| 16336 | WmiPrvSE.exe | 10.0.19041.1 | WMI Provider Host / Microsoft® Windows® Operating System | 32-bit | 1088 | 5 | 8 | | 2020-03-19 23:47:21 (Thursday, March 19, 2020) | 4d 13h 37m 04s | 0h 00m 03s | 0h 00m 00s | 7,692,288 | C:\Windows\SysWOW64\wbem\WmiPrvSE.exe | C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding |
| 16492 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 5 | 8 | | 2020-03-18 11:44:52 (Wednesday, March 18, 2020) | 6d 01h 39m 33s | 0h 00m 00s | 0h 00m 00s | 5,001,216 | C:\Windows\System32\svchost.exe | C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser |
| 17496 | OneDrive.exe | 19.232.1124.10 | Microsoft OneDrive | 32-bit | 8896 | 29 | 8 | | 2020-03-19 05:38:05 (Thursday, March 19, 2020) | 5d 07h 46m 20s | 0h 01m 15s | 0h 01m 36s | 56,881,152 | C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\OneDrive.exe | /updateInstalled /background |
| 17764 | Dropbox.exe | 93.4.273.0 | Dropbox | 32-bit | 12744 | 6 | 8 | | 2020-03-20 18:51:14 (Friday, March 20, 2020) | 3d 18h 33m 11s | 0h 00m 00s | 0h 00m 00s | 12,427,264 | C:\Program Files (x86)\Dropbox\Client\Dropbox.exe | "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:exit-monitor -method:collectupload -session-token:667e9ed7-30aa-4df2-bc24-4167f87a294d -target-handle:596 -target-shutdown-event:588 -target-restart-event:584 "-target-command-line:\"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe\" /firstrunupdate 1 /appwasrunning" -python-version:3.7.5 -handler-pipe:\\.\pipe\crashpad_12744_LACCLETOVYZQXELE |
| 17836 | taskhostw.exe | 10.0.19041.1 | Host Process for Windows Tasks / Microsoft® Windows® Operating System | 64-bit | 2152 | 6 | 8 | | 2020-03-22 12:53:01 (Sunday, March 22, 2020) | 2d 00h 31m 24s | 0h 00m 00s | 0h 00m 00s | 19,492,864 | C:\Windows\System32\taskhostw.exe | taskhostw.exe |
| 19112 | Microsoft.Photos.exe | 2020.19081.28230.0 | | 64-bit | 1088 | 19 | 8 | | 2020-03-18 16:34:31 (Wednesday, March 18, 2020) | 5d 20h 49m 54s | 0h 00m 37s | 0h 00m 43s | 93,962,240 | C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe | "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca |
| 19216 | SystemSettings.exe | 10.0.19041.1 | Settings / Microsoft® Windows® Operating System | 64-bit | 1088 | 22 | 8 | Settings | 2020-03-23 21:35:47 (Monday, March 23, 2020) | 0d 15h 48m 38s | 0h 00m 00s | 0h 00m 00s | 2,949,120 | C:\Windows\ImmersiveControlPanel\SystemSettings.exe | "C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel |
| 19544 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 11 | 8 | | 2020-03-18 16:34:32 (Wednesday, March 18, 2020) | 5d 20h 49m 53s | 0h 02m 52s | 0h 03m 18s | 38,514,688 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 19912 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 4 | 8 | | | | | | 8,241,152 | C:\Windows\System32\svchost.exe | |
| 20144 | Microsoft.Msn.Money.exe | 4.36.2003.11004 | | 64-bit | 1088 | 27 | 8 | Money | 2020-03-24 02:48:54 (Tuesday, March 24, 2020) | 0d 10h 35m 31s | 0h 00m 00s | 0h 00m 00s | 2,473,984 | C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe | "C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe" -ServerName:AppexFinance.AppX6tep37frvzednpfqt02kdykt0ydv37zc.mca |
| 20240 | FileCoAuth.exe | 19.232.1124.10 | Microsoft OneDriveFile Co-Authoring Executable / Microsoft OneDrive | 32-bit | 1088 | 2 | 8 | | 2020-03-23 14:49:26 (Monday, March 23, 2020) | 0d 22h 34m 59s | 0h 00m 00s | 0h 00m 00s | 16,068,608 | C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\FileCoAuth.exe | C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\FileCoAuth.exe -Embedding |
| 20288 | WUDFHost.exe | 10.0.19041.1 | Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System | 64-bit | 444 | 8 | 8 | | 2020-03-24 13:20:52 (Tuesday, March 24, 2020) | 0d 00h 03m 33s | 0h 00m 00s | 0h 00m 00s | 9,211,904 | C:\Windows\System32\WUDFHost.exe | "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1fa2498a-066d-49d4-a9ca-f15288f92c3f -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-caf30a36-5af8-4f6c-a676-ff1360b46953 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2972b8d3-7278-402c-8d9e-c73eb3133965 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-11d31395-4aa1-4970-a4bc-657c1ad333fb -LifetimeId:3b8a15e7-0777-491f-b190-c8ee20b3a538 -DeviceGroupId: -HostArg:0 |
| 20924 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 6 | 8 | | 2020-03-24 08:46:10 (Tuesday, March 24, 2020) | 0d 04h 38m 15s | 0h 00m 00s | 0h 00m 00s | 17,309,696 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 21652 | svchost.exe | 10.0.19041.1 | Host Process for Windows Services / Microsoft® Windows® Operating System | 64-bit | 444 | 3 | 8 | | 2020-03-22 11:40:31 (Sunday, March 22, 2020) | 2d 01h 43m 54s | 0h 00m 00s | 0h 00m 00s | 6,459,392 | C:\Windows\System32\svchost.exe | C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s AppMgmt |
| 21828 | AdobeCollabSync.exe | 20.6.20042.43423 | Adobe Collaboration Synchronizer 20.6 | 32-bit | 22296 | 17 | 8 | | 2020-03-21 17:29:18 (Saturday, March 21, 2020) | 2d 19h 55m 07s | 0h 00m 51s | 0h 01m 07s | 18,018,304 | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe | "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" -c --type=collab-renderer --proc=22296 |
| 22296 | AdobeCollabSync.exe | 20.6.20042.43423 | Adobe Collaboration Synchronizer 20.6 | 32-bit | 7992 | 8 | 8 | | 2020-03-21 17:29:18 (Saturday, March 21, 2020) | 2d 19h 55m 07s | 0h 00m 00s | 0h 00m 00s | 12,169,216 | C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe | "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" -c |
| 23776 | WmiPrvSE.exe | 10.0.19041.1 | WMI Provider Host / Microsoft® Windows® Operating System | 64-bit | 1088 | 1 | 8 | | 2020-03-24 13:24:23 (Tuesday, March 24, 2020) | 0d 00h 00m 02s | 0h 00m 01s | 0h 00m 00s | 18,968,576 | C:\Windows\System32\wbem\WmiPrvSE.exe | C:\WINDOWS\system32\wbem\wmiprvse.exe |
| 24532 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 11 | 8 | | 2020-03-24 02:50:33 (Tuesday, March 24, 2020) | 0d 10h 33m 52s | 0h 00m 02s | 0h 00m 01s | 21,368,832 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
| 25444 | SIWViewer.exe | 2.0.0.0 | SIWViewer | 32-bit | 4632 | 6 | 8 | SIW Viewer [ siw-xml-report.xml] - \\SURFACEPRO | 2020-03-24 13:22:17 (Tuesday, March 24, 2020) | 0d 00h 02m 08s | 0h 00m 00s | 0h 00m 00s | 42,913,792 | C:\workspace\BuildHelper\Buildcenter\SIWViewer.exe | "C:\workspace\BuildHelper\Buildcenter\SIWViewer.exe" siw-xml-report.xml |
| 26404 | RuntimeBroker.exe | 10.0.19041.1 | Runtime Broker / Microsoft® Windows® Operating System | 64-bit | 1088 | 1 | 8 | | 2020-03-24 06:03:15 (Tuesday, March 24, 2020) | 0d 07h 21m 10s | 0h 00m 00s | 0h 00m 00s | 6,975,488 | C:\Windows\System32\RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe -Embedding |
NT Services
| Top |
| AarSvc | Agent Activation Runtime | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| AdobeARMservice | Adobe Acrobat Update Service | 1.824.36.9436 | Own Process | Running | Auto Start | C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe | Adobe Acrobat Update Service | Adobe Systems | LocalSystem |
| AJRouter | AllJoyn Router Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| ALG | Application Layer Gateway Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\alg.exe | Application Layer Gateway Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| AppIDSvc | Application Identity | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| Appinfo | Application Information | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AppMgmt | Application Management | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AppReadiness | App Readiness | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AppVClient | Microsoft App-V Client | 10.0.19041.84 | Own Process | Stopped | Disabled | C:\Windows\System32\AppVClient.exe | Microsoft Application Virtualization Client Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AppXSvc | AppX Deployment Service (AppXSVC) | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AssignedAccessManagerSvc | AssignedAccessManager Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AudioEndpointBuilder | Windows Audio Endpoint Builder | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Audiosrv | Windows Audio | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| autotimesvc | Cellular Time | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| AxInstSV | ActiveX Installer (AxInstSV) | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| BcastDVRUserService | GameDVR and Broadcast User Service | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| BDESVC | BitLocker Drive Encryption Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| BFE | Base Filtering Engine | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| BITS | Background Intelligent Transfer Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| BluetoothUserService | Bluetooth User Support Service | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| BrokerInfrastructure | Background Tasks Infrastructure Service | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Browser | Computer Browser | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| BTAGService | Bluetooth Audio Gateway Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| BthAvctpSvc | AVCTP service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| bthserv | Bluetooth Support Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| camsvc | Capability Access Manager Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| CaptureService | CaptureService | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| cbdhsvc | Clipboard User Service | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| CDPSvc | Connected Devices Platform Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| CDPUserSvc | Connected Devices Platform User Service | 10.0.19041.1 | Share Process, User Service | Stopped | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| CertPropSvc | Certificate Propagation | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| ClickToRunSvc | Microsoft Office Click-to-Run Service | 16.0.12527.20242 | Own Process | Running | Auto Start | C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe | Microsoft Office Click-to-Run (SxS) / Microsoft Office | Microsoft Corporation | LocalSystem |
| ClipSVC | Client License Service (ClipSVC) | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| CloudBerry Backup Service | CloudBerry Backup Service | 6.3.0.274 | Own Process | Running | Auto Start | C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe | Online Backup Scheduler | CloudBerry Lab Inc. | LocalSystem |
| CmService | Container Manager Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| COMSysApp | COM+ System Application | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\dllhost.exe | COM Surrogate / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| ConsentUxUserSvc | ConsentUX | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| CoreMessagingRegistrar | CoreMessaging | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| cphs | Intel(R) Content Protection HECI Service | 9.1.1.1117 | Own Process | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe | IntelCpHeciSvc Executable | Intel Corporation | LocalSystem |
| cplspcon | Intel(R) Content Protection HDCP Service | 25.20.100.6472 | Own Process | Running | Auto Start | C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe | Intel HD Graphics Drivers for Windows(R) | Intel Corporation | LocalSystem |
| CredentialEnrollmentManagerUserSvc | CredentialEnrollmentManagerUserSvc | 10.0.19041.153 | Own Process, User Service | Stopped | Demand Start | C:\Windows\System32\CredentialEnrollmentManager.exe | Credential Enrollment Manager / Microsoft® Windows® Operating System | Microsoft Corporation | |
| CryptSvc | Cryptographic Services | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\NetworkService |
| CscService | Offline Files | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| dbupdate | Dropbox Update Service (dbupdate) | 1.3.27.73 | Own Process | Stopped | Auto Start | C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe | Dropbox Update | Dropbox, Inc. | LocalSystem |
| dbupdatem | Dropbox Update Service (dbupdatem) | 1.3.27.73 | Own Process | Stopped | Demand Start | C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe | Dropbox Update | Dropbox, Inc. | LocalSystem |
| DbxSvc | DbxSvc | 1.0.24.0 | Own Process | Running | Auto Start | C:\Windows\System32\DbxSvc.exe | Dropbox Service / Dropbox | Dropbox, Inc. | LocalSystem |
| DcomLaunch | DCOM Server Process Launcher | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| defragsvc | Optimize drives | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| DeviceAssociationBrokerSvc | DeviceAssociationBroker | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DeviceAssociationService | Device Association Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DeviceInstall | Device Install Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DevicePickerUserSvc | DevicePicker | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DevicesFlowUserSvc | DevicesFlow | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DevQueryBroker | DevQuery Background Discovery Broker | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Dhcp | DHCP Client | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| diagnosticshub.standardcollector.service | Microsoft (R) Diagnostics Hub Standard Collector Service | 11.0.19041.153 | Own Process | Stopped | Demand Start | C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe | Microsoft (R) Diagnostics Hub Standard Collector / Internet Explorer | Microsoft Corporation | LocalSystem |
| diagsvc | Diagnostic Execution Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DiagTrack | Connected User Experiences and Telemetry | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DispBrokerDesktopSvc | Display Policy Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| DisplayEnhancementService | Display Enhancement Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DmEnrollmentSvc | Device Management Enrollment Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| dmwappushservice | Device Management Wireless Application Protocol (WAP) Push message Routing Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Dnscache | DNS Client | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| DoSvc | Delivery Optimization | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\NetworkService |
| dot3svc | Wired AutoConfig | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| DPS | Diagnostic Policy Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| DsmSvc | Device Setup Manager | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DsSvc | Data Sharing Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| DusmSvc | Data Usage | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| Eaphost | Extensible Authentication Protocol | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| edgeupdate | Microsoft Edge Update Service (edgeupdate) | 1.3.107.13 | Own Process | Stopped | Auto Start | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | Microsoft Edge Update | Microsoft Corporation | LocalSystem |
| edgeupdatem | Microsoft Edge Update Service (edgeupdatem) | 1.3.107.13 | Own Process | Stopped | Demand Start | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | Microsoft Edge Update | Microsoft Corporation | LocalSystem |
| EFS | Encrypting File System (EFS) | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\lsass.exe | Local Security Authority Process / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| embeddedmode | Embedded Mode | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| EntAppSvc | Enterprise App Management Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| esifsvc | Intel(R) Dynamic Platform and Thermal Framework service | 8.3.10207.5567 | Own Process | Running | Auto Start | C:\Windows\System32\Intel\DPTF\esif_uf.exe | Intel(R) Dynamic Platform and Thermal Framework | Intel Corporation | LocalSystem |
| EventLog | Windows Event Log | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| EventSystem | COM+ Event System | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| Fax | Fax | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\FXSSVC.exe | Fax Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| fdPHost | Function Discovery Provider Host | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| FDResPub | Function Discovery Resource Publication | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| fhsvc | File History Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| FontCache | Windows Font Cache Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| FrameServer | Windows Camera Frame Server | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| gcs | Hyper-V Guest Compute Service | 10.0.19041.153 | Own Process | Stopped | Demand Start | C:\Windows\System32\VmComputeAgent.exe | Hyper-V Guest Compute Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| gpsvc | Group Policy Client | 10.0.19041.1 | Own Process, Share Process | Stopped | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| GraphicsPerfSvc | GraphicsPerfSvc | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| HgClientService | Host Guardian Client Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| hidserv | Human Interface Device Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| hns | Host Network Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| HvHost | HV Host Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| hvsics | Application Guard Container Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| icssvc | Windows Mobile Hotspot Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| IKEEXT | IKE and AuthIP IPsec Keying Modules | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| InstallService | Microsoft Store Install Service | 10.0.19041.1 | Own Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Intel(R) Capability Licensing Service TCP IP Interface | Intel(R) Capability Licensing Service TCP IP Interface | 1.48.197.0 | Own Process | Stopped | Demand Start | C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe | Intel(R) Capability Licensing Service TCP IP Interface | Intel(R) Corporation | LocalSystem |
| Intel(R) TPM Provisioning Service | Intel(R) TPM Provisioning Service | 1.48.197.0 | Own Process | Stopped | Auto Start | C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe | Intel(R) TPM Provisioning Service | Intel(R) Corporation | LocalSystem |
| IntelAudioService | Intel(R) Audio Service | 1.0.140.0 | Own Process | Stopped | Auto Start | C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe | IntelAudioService | Intel | LocalSystem |
| iphlpsvc | IP Helper | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| IpxlatCfgSvc | IP Translation Configuration Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| KeyIso | CNG Key Isolation | 10.0.19041.1 | Share Process | Running | Demand Start | C:\Windows\System32\lsass.exe | Local Security Authority Process / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| KtmRm | KtmRm for Distributed Transaction Coordinator | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| LanmanServer | Server | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| LanmanWorkstation | Workstation | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| lfsvc | Geolocation Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| LicenseManager | Windows License Manager Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| lltdsvc | Link-Layer Topology Discovery Mapper | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| lmhosts | TCP/IP NetBIOS Helper | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| LSM | Local Session Manager | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| LxpSvc | Language Experience Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| MapsBroker | Downloaded Maps Manager | 10.0.19041.1 | Own Process | Stopped | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| MessagingService | MessagingService | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| MicrosoftEdgeElevationService | Microsoft Edge Elevation Service | 80.0.361.69 | Own Process | Stopped | Demand Start | C:\Program Files (x86)\Microsoft\Edge\Application\80.0.361.69\elevation_service.exe | Microsoft Edge | Microsoft Corporation | LocalSystem |
| MixedRealityOpenXRSvc | Windows Mixed Reality OpenXR Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| mpssvc | Windows Defender Firewall | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| MSDTC | Distributed Transaction Coordinator | 2001.12.10941.16384 | Own Process | Stopped | Demand Start | C:\Windows\System32\msdtc.exe | Microsoft Distributed Transaction Coordinator Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| MSiSCSI | Microsoft iSCSI Initiator Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| msiserver | Windows Installer | 5.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\msiexec.exe | Windows® installer / Windows Installer - Unicode | Microsoft Corporation | LocalSystem |
| NaturalAuthentication | Natural Authentication | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NcaSvc | Network Connectivity Assistant | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NcbService | Network Connection Broker | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NcdAutoSetup | Network Connected Devices Auto-Setup | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| Netlogon | Netlogon | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\lsass.exe | Local Security Authority Process / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Netman | Network Connections | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| netprofm | Network List Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| NetSetupSvc | Network Setup Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NetTcpPortSharing | Net.Tcp Port Sharing Service | 4.8.4084.0 | Share Process | Stopped | Disabled | C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe | SMSvcHost.exe / Microsoft® .NET Framework | Microsoft Corporation | NT AUTHORITY\LocalService |
| NgcCtnrSvc | Microsoft Passport Container | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| NgcSvc | Microsoft Passport | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NlaSvc | Network Location Awareness | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| nsi | Network Store Interface Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| nvagent | Network Virtualization Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| NVDisplay.ContainerLocalSystem | NVIDIA Display Container LS | 1.2.0.0 | Own Process | Running | Auto Start | C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe | NVIDIA Container | NVIDIA Corporation | LocalSystem |
| OneSyncSvc | Sync Host | 10.0.19041.1 | Share Process, User Service | Stopped | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| ose | Office Source Engine | 16.0.12527.20232 | Own Process | Stopped | Demand Start | C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE | Office Source Engine | Microsoft Corporation | LocalSystem |
| p2pimsvc | Peer Networking Identity Manager | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| p2psvc | Peer Networking Grouping | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| PcaSvc | Program Compatibility Assistant Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PeerDistSvc | BranchCache | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| perceptionsimulation | Windows Perception Simulation Service | 10.0.19041.84 | Own Process | Stopped | Demand Start | C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe | Windows Perception Simulation Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PerfHost | Performance Counter DLL Host | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\SysWOW64\perfhost.exe | x86 Performance Counter Host / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| PhoneSvc | Phone Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| PimIndexMaintenanceSvc | Contact Data | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| pla | Performance Logs & Alerts | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| PlugPlay | Plug and Play | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PNRPAutoReg | PNRP Machine Name Publication Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| PNRPsvc | Peer Name Resolution Protocol | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| PolicyAgent | IPsec Policy Agent | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\NetworkService |
| Power | Power | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PrintNotify | Printer Extensions and Notifications | 10.0.19041.1 | Share Process, Interactive | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PrintWorkflowUserSvc | PrintWorkflow | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| ProfSvc | User Profile Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| PushToInstall | Windows PushToInstall Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| QWAVE | Quality Windows Audio Video Experience | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| RasAuto | Remote Access Auto Connection Manager | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| RasMan | Remote Access Connection Manager | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| RemoteAccess | Routing and Remote Access | 10.0.19041.1 | Share Process | Stopped | Disabled | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| RemoteRegistry | Remote Registry | 10.0.19041.1 | Share Process | Stopped | Disabled | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| RetailDemo | Retail Demo Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| RmSvc | Radio Management Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| RpcEptMapper | RPC Endpoint Mapper | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| RpcLocator | Remote Procedure Call (RPC) Locator | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\Locator.exe | Rpc Locator / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| RpcSs | Remote Procedure Call (RPC) | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| SamSs | Security Accounts Manager | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\lsass.exe | Local Security Authority Process / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SCardSvr | Smart Card | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| ScDeviceEnum | Smart Card Device Enumeration Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Schedule | Task Scheduler | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SCPolicySvc | Smart Card Removal Policy | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SDRSVC | Windows Backup | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| seclogon | Secondary Logon | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SecurityHealthService | Windows Security Service | 4.18.1907.16384 | Own Process | Running | Demand Start | C:\Windows\System32\SecurityHealthService.exe | Windows Security Health Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SEMgrSvc | Payments and NFC/SE Manager | 10.0.19041.1 | Own Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| SENS | System Event Notification Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Sense | Windows Defender Advanced Threat Protection Service | 10.7150.19041.153 | Own Process | Stopped | Demand Start | C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe | Windows Defender Advanced Threat Protection Service Executable / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SensorDataService | Sensor Data Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\SensorDataService.exe | Sensor Data Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SensorService | Sensor Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SensrSvc | Sensor Monitoring Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| SessionEnv | Remote Desktop Configuration | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| SgrmBroker | System Guard Runtime Monitor Broker | 10.0.19041.84 | Own Process | Running | Auto Start | C:\Windows\System32\SgrmBroker.exe | System Guard Runtime Monitor Broker Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SharedAccess | Internet Connection Sharing (ICS) | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SharedRealitySvc | Spatial Data Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| ShellHWDetection | Shell Hardware Detection | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| shpamsvc | Shared PC Account Manager | 10.0.19041.1 | Share Process | Stopped | Disabled | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| smphost | Microsoft Storage Spaces SMP | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| SmsRouter | Microsoft Windows SMS Router Service. | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| SNMPTRAP | SNMP Trap | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\snmptrap.exe | SNMP Trap / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| spectrum | Windows Perception Service | 10.0.19041.153 | Own Process | Stopped | Demand Start | C:\Windows\System32\Spectrum.exe | Windows Perception Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| Spooler | Print Spooler | 10.0.19041.1 | Own Process, Interactive | Running | Auto Start | C:\Windows\System32\spoolsv.exe | Spooler SubSystem App / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| sppsvc | Software Protection | 10.0.19041.153 | Own Process | Stopped | Auto Start | C:\Windows\System32\sppsvc.exe | Microsoft Software Protection Platform Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| SSDPSRV | SSDP Discovery | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| ssh-agent | OpenSSH Authentication Agent | 7.7.2.1 | Own Process | Stopped | Disabled | C:\Windows\System32\OpenSSH\ssh-agent.exe | OpenSSH for Windows | | LocalSystem |
| SstpSvc | Secure Socket Tunneling Protocol Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| StateRepository | State Repository Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| stisvc | Windows Image Acquisition (WIA) | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| StorSvc | Storage Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SurfaceColorService | Surface Display Color Service | 2.0.366.0 | Share Process | Running | Auto Start | C:\Windows\System32\SurfaceColorService.exe | Surface Color Profile Service / Surface | Microsoft Corporation | LocalSystem |
| SurfaceDtxService | Surface DTX Service | 3.32.139.0 | Share Process | Running | Auto Start | C:\Windows\System32\SurfaceDtxService.exe | Surface DTX Service / Surface | Microsoft Corporation | LocalSystem |
| SurfaceService | Surface Integration Service | 4.14.139.0 | Share Process | Running | Auto Start | C:\Windows\System32\SurfaceService.exe | Surface Service / Surface | Microsoft Corporation | LocalSystem |
| SurfaceUsbHubFwUpdateService | Surface USB Hub Firmware Update Service | 1.16.136.0 | Share Process | Running | Auto Start | C:\Windows\System32\SurfaceUsbHubFwUpdateService.exe | Surface Usb Hub Firmware Update Service / Surface | Microsoft Corporation | LocalSystem |
| svsvc | Spot Verifier | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| swprv | Microsoft Software Shadow Copy Provider | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SysMain | SysMain | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| SystemEventsBroker | System Events Broker | 10.0.19041.1 | Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TabletInputService | Touch Keyboard and Handwriting Panel Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TapiSrv | Telephony | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| TermService | Remote Desktop Services | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\NetworkService |
| Themes | Themes | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TieringEngineService | Storage Tiers Management | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\TieringEngineService.exe | Storage Tiers Management / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| TimeBrokerSvc | Time Broker | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| TokenBroker | Web Account Manager | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TrkWks | Distributed Link Tracking Client | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TroubleshootingSvc | Recommended Troubleshooting Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| TrustedInstaller | Windows Modules Installer | 10.0.19041.153 | Own Process | Stopped | Demand Start | C:\Windows\servicing\TrustedInstaller.exe | Windows Modules Installer / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| tzautoupdate | Auto Time Zone Updater | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| UdkUserSvc | Udk User Service | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| UevAgentService | User Experience Virtualization Service | 10.0.19041.1 | Own Process | Stopped | Disabled | C:\Windows\System32\AgentService.exe | AgentService EXE / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| UmRdpService | Remote Desktop Services UserMode Port Redirector | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| UnistoreSvc | User Data Storage | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| upnphost | UPnP Device Host | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| UserDataSvc | User Data Access | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| UserManager | User Manager | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| UsoSvc | Update Orchestrator Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| VacSvc | Volumetric Audio Compositor Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| VaultSvc | Credential Manager | 10.0.19041.1 | Share Process | Running | Demand Start | C:\Windows\System32\lsass.exe | Local Security Authority Process / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vds | Virtual Disk | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\vds.exe | Virtual Disk Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmcompute | Hyper-V Host Compute Service | 10.0.19041.153 | Own Process | Running | Demand Start | C:\Windows\System32\vmcompute.exe | Hyper-V Host Compute Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmicguestinterface | Hyper-V Guest Service Interface | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmicheartbeat | Hyper-V Heartbeat Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmickvpexchange | Hyper-V Data Exchange Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmicrdv | Hyper-V Remote Desktop Virtualization Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmicshutdown | Hyper-V Guest Shutdown Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmictimesync | Hyper-V Time Synchronization Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| vmicvmsession | Hyper-V PowerShell Direct Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmicvss | Hyper-V Volume Shadow Copy Requestor | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| vmms | Hyper-V Virtual Machine Management | 10.0.19041.153 | Own Process | Running | Auto Start | C:\Windows\System32\vmms.exe | Virtual Machine Management Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| VSS | Volume Shadow Copy | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\VSSVC.exe | Microsoft® Volume Shadow Copy Service / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| VSStandardCollectorService150 | Visual Studio Standard Collector Service 150 | 16.1.28901.1 | Own Process | Stopped | Demand Start | C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe | Microsoft (R) Visual Studio Standard Collector / Microsoft® Visual Studio® | Microsoft Corporation | LocalSystem |
| W32Time | Windows Time | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WaaSMedicSvc | Windows Update Medic Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WalletService | WalletService | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WarpJITSvc | WarpJITSvc | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| wbengine | Block Level Backup Engine Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\wbengine.exe | Microsoft® Block Level Backup Engine Service EXE / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| WbioSrvc | Windows Biometric Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| Wcmsvc | Windows Connection Manager | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| wcncsvc | Windows Connect Now - Config Registrar | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WdiServiceHost | Diagnostic Service Host | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WdiSystemHost | Diagnostic System Host | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WdNisSvc | Microsoft Defender Antivirus Network Inspection Service | 4.18.2003.6 | Own Process | Running | Demand Start | C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.6-0\NisSrv.exe | Microsoft Network Realtime Inspection Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WebClient | WebClient | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| Wecsvc | Windows Event Collector | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| WEPHOSTSVC | Windows Encryption Provider Host Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| wercplsupport | Problem Reports Control Panel Support | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| WerSvc | Windows Error Reporting Service | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| WFDSConMgrSvc | Wi-Fi Direct Services Connection Manager Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WiaRpc | Still Image Acquisition Events | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WinDefend | Microsoft Defender Antivirus Service | 4.18.2003.6 | Own Process | Running | Auto Start | C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.6-0\MsMpEng.exe | Antimalware Service Executable / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WinHttpAutoProxySvc | WinHTTP Web Proxy Auto-Discovery Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| Winmgmt | Windows Management Instrumentation | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| WinRM | Windows Remote Management (WS-Management) | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| wisvc | Windows Insider Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WlanSvc | WLAN AutoConfig | 10.0.19041.1 | Own Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| wlidsvc | Microsoft Account Sign-in Assistant | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| wlpasvc | Local Profile Assistant Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT Authority\LocalService |
| WManSvc | Windows Management Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| wmiApSrv | WMI Performance Adapter | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\wbem\WmiApSrv.exe | WMI Performance Reverse Adapter / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| WMPNetworkSvc | Windows Media Player Network Sharing Service | 12.0.19041.1 | Own Process | Stopped | Demand Start | C:\Program Files\Windows Media Player\wmpnetwk.exe | Windows Media Player Network Sharing Service / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\NetworkService |
| workfolderssvc | Work Folders | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WpcMonSvc | Parental Controls | 10.0.19041.1 | Own Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WPDBusEnum | Portable Device Enumerator Service | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WpnService | Windows Push Notifications System Service | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WpnUserService | Windows Push Notifications User Service | 10.0.19041.1 | Share Process, User Service | Stopped | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| wscsvc | Security Center | 10.0.19041.1 | Own Process, Share Process | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | NT AUTHORITY\LocalService |
| WSearch | Windows Search | 7.0.19041.153 | Own Process | Running | Auto Start | C:\Windows\System32\SearchIndexer.exe | Microsoft Windows Search Indexer / Windows® Search | Microsoft Corporation | LocalSystem |
| wuauserv | Windows Update | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| WwanSvc | WWAN AutoConfig | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | localSystem |
| XblAuthManager | Xbox Live Auth Manager | 10.0.19041.1 | Own Process, Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| XblGameSave | Xbox Live Game Save | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| XboxGipSvc | Xbox Accessory Management Service | 10.0.19041.1 | Own Process, Share Process | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| XboxNetApiSvc | Xbox Live Networking Service | 10.0.19041.1 | Share Process | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | LocalSystem |
| AarSvc_84aa9 | AarSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| BcastDVRUserService_84aa9 | BcastDVRUserService_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| BluetoothUserService_84aa9 | BluetoothUserService_84aa9 | 10.0.19041.1 | Own Process, Share Process, User Service | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| CaptureService_84aa9 | CaptureService_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| cbdhsvc_84aa9 | cbdhsvc_84aa9 | 10.0.19041.1 | Own Process, Share Process, User Service | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| CDPUserSvc_84aa9 | CDPUserSvc_84aa9 | 10.0.19041.1 | Own Process, Share Process, User Service | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| ConsentUxUserSvc_84aa9 | ConsentUxUserSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| CredentialEnrollmentManagerUserSvc_84aa9 | CredentialEnrollmentManagerUserSvc_84aa9 | 10.0.19041.153 | Own Process, User Service | Stopped | Demand Start | C:\Windows\System32\CredentialEnrollmentManager.exe | Credential Enrollment Manager / Microsoft® Windows® Operating System | Microsoft Corporation | |
| DeviceAssociationBrokerSvc_84aa9 | DeviceAssociationBrokerSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| DevicePickerUserSvc_84aa9 | DevicePickerUserSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| DevicesFlowUserSvc_84aa9 | DevicesFlowUserSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| MessagingService_84aa9 | MessagingService_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| OneSyncSvc_84aa9 | OneSyncSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| PimIndexMaintenanceSvc_84aa9 | PimIndexMaintenanceSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| PrintWorkflowUserSvc_84aa9 | PrintWorkflowUserSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| UdkUserSvc_84aa9 | UdkUserSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Stopped | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| UnistoreSvc_84aa9 | UnistoreSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| UserDataSvc_84aa9 | UserDataSvc_84aa9 | 10.0.19041.1 | Share Process, User Service | Running | Demand Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
| WpnUserService_84aa9 | WpnUserService_84aa9 | 10.0.19041.1 | Own Process, Share Process, User Service | Running | Auto Start | C:\Windows\System32\svchost.exe | Host Process for Windows Services / Microsoft® Windows® Operating System | Microsoft Corporation | |
Drivers
| Top |
| 1394ohci | 1394 OHCI Compliant Host Controller | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\1394ohci.sys | 1394 OpenHCI Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| 3ware | 3ware | 5.1.0.51 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\3ware.sys | LSI 3ware SCSI Storport Driver / LSI 3ware RAID Controller | LSI |
| ACPI | Microsoft ACPI Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\acpi.sys | ACPI Driver for NT / Microsoft® Windows® Operating System | Microsoft Corporation |
| AcpiDev | ACPI Devices driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\AcpiDev.sys | ACPI Devices Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| acpiex | Microsoft ACPIEx Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\acpiex.sys | ACPIEx Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| acpipagr | ACPI Processor Aggregator Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\acpipagr.sys | ACPI Processor Aggregator Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| AcpiPmi | ACPI Power Meter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\acpipmi.sys | ACPI Power Metering Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| acpitime | ACPI Wake Alarm Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\acpitime.sys | ACPI Wake Alarm / Microsoft® Windows® Operating System | Microsoft Corporation |
| Acx01000 | Acx01000 | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\Acx01000.sys | Audio KMDF Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| ADP80XX | ADP80XX | 1.3.0.10769 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\adp80xx.sys | PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller / PMC-Sierra HBA Controller | PMC-Sierra |
| AFD | Ancillary Function Driver for Winsock | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\afd.sys | Ancillary Function Driver for WinSock / Microsoft® Windows® Operating System | Microsoft Corporation |
| afunix | afunix | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\afunix.sys | AF_UNIX socket provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| ahcache | Application Compatibility Cache | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\ahcache.sys | Application Compatibility Cache / Microsoft® Windows® Operating System | Microsoft Corporation |
| amdgpio2 | AMD GPIO Client Driver | 2.2.0.71 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdgpio2.sys | AMD GPIO Controller Driver | Advanced Micro Devices, Inc |
| amdi2c | AMD I2C Controller Service | 1.2.0.99 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdi2c.sys | AMD I2C Controller Driver | Advanced Micro Devices, Inc |
| AmdK8 | AMD K8 Processor Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdk8.sys | Processor Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| AmdPPM | AMD Processor Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdppm.sys | Processor Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| amdsata | amdsata | 1.1.3.277 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdsata.sys | AHCI 1.3 Device Driver | Advanced Micro Devices |
| amdsbs | amdsbs | 3.7.1540.43 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdsbs.sys | AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform / AMD Technology AHCI Compatible Controller | AMD Technologies Inc. |
| amdxata | amdxata | 1.1.3.277 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\amdxata.sys | Storage Filter Driver | Advanced Micro Devices |
| AppID | AppID Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\appid.sys | AppID Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| applockerfltr | Smartlocker Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\applockerfltr.sys | Applocker Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| AppvStrm | AppvStrm | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\AppVStrm.sys | Microsoft Application Virtualization Streaming Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| AppvVemgr | AppvVemgr | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\AppvVemgr.sys | Microsoft Application Virtualization VE Manager Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| AppvVfs | AppvVfs | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\AppvVfs.sys | Microsoft Application Virtualization VFS Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| arcsas | Adaptec SAS/SATA-II RAID Storport's Miniport Driver | 7.5.0.32048 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\arcsas.sys | Adaptec SAS RAID WS03 Driver / Adaptec RAID Controller | PMC-Sierra, Inc. |
| AsyncMac | RAS Asynchronous Media Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\asyncmac.sys | MS Remote Access serial network driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| atapi | IDE Channel | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\atapi.sys | ATAPI IDE Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| b06bdrv | QLogic Network Adapter VBD | 7.12.31.105 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\bxvbda.sys | QLogic Gigabit Ethernet VBD / QLogic Gigabit Ethernet | QLogic Corporation |
| bam | Background Activity Moderator Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\bam.sys | BAM Kernel Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BasicDisplay | BasicDisplay | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys | Microsoft Basic Display Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BasicRender | BasicRender | 10.0.19041.84 | Kernel Driver | Running | System Start | C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys | Microsoft Basic Render Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| bcmfn2 | bcmfn2 Service | 6.3.9600.17336 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\bcmfn2.sys | BCM Function 2 Device Driver / Windows (R) Win 7 DDK driver | Windows (R) Win 7 DDK provider |
| Beep | Beep | | Kernel Driver | Running | System Start | | | |
| bindflt | Windows Bind Filter Driver | 10.0.19041.1 | File System Driver | Running | Auto Start | C:\Windows\System32\drivers\bindflt.sys | Windows Bind Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| bowser | Browser | 10.0.19041.1 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\bowser.sys | NT Lan Manager Datagram Receiver Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthA2dp | Microsoft Bluetooth A2dp driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\BthA2dp.sys | Bluetooth A2DP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthEnum | Bluetooth Enumerator Service | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\bthenum.sys | Bluetooth Bus Extender / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthHFAud | Microsoft Bluetooth Hands-Free Audio driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\BthHfAud.sys | Bluetooth Hands-free Audio Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthHFEnum | Microsoft Bluetooth Hands-Free Profile driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\BthHfEnum.sys | Bluetooth Hands-Free Audio and Call Control HID Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthLEEnum | Bluetooth Low Energy Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys | Legacy Bluetooth LE Bus Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthMini | Bluetooth Radio Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\BthMini.SYS | Bluetooth Transport Extensibility Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BTHMODEM | Bluetooth Modem Communications Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\bthmodem.sys | Bluetooth Communications Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BthPan | Bluetooth Device (Personal Area Network) | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\bthpan.sys | Bluetooth Personal Area Networking / Microsoft® Windows® Operating System | Microsoft Corporation |
| BTHPORT | Bluetooth Port Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\bthport.sys | Bluetooth Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| BTHUSB | Bluetooth Radio USB Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\BTHUSB.SYS | Bluetooth Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| bttflt | Microsoft Hyper-V VHDPMEM BTT Filter | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\bttflt.sys | VHD BTT Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| buttonconverter | Service for Portable Device Control devices | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\buttonconverter.sys | Button Converter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| CAD | Charge Arbitration Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\CAD.sys | Charge Arbiration Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| cdfs | CD/DVD File System Reader | 10.0.19041.1 | File System Driver | Stopped | Disabled | C:\Windows\System32\drivers\cdfs.sys | CD-ROM File System Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| cdrom | CD-ROM Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\cdrom.sys | SCSI CD-ROM Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| cht4iscsi | cht4iscsi | 6.11.4.100 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\cht4sx64.sys | Chelsio iSCSI VMiniport Driver / Chelsio Communications iSCSI Controller | Chelsio Communications |
| cht4vbd | Chelsio Virtual Bus Driver | 6.11.4.100 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\cht4vx64.sys | Virtual Bus Driver for Chelsio ® T5/T6 Chipset / Chelsio Communications Unified Network I/O Controller | Chelsio Communications |
| CimFS | CimFS | | File System Driver | Running | System Start | | | |
| circlass | Consumer IR Devices | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\circlass.sys | Consumer IR Class Driver for eHome / Microsoft® Windows® Operating System | Microsoft Corporation |
| CldFlt | Windows Cloud Files Filter Driver | 10.0.19041.21 | File System Driver | Running | Auto Start | C:\Windows\System32\drivers\cldflt.sys | Cloud Files Mini Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| CLFS | Common Log (CLFS) | 10.0.19041.84 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\clfs.sys | Common Log File System Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| CmBatt | Microsoft ACPI Control Method Battery Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\CmBatt.sys | Control Method Battery Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| CNG | CNG | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\cng.sys | Kernel Cryptography, Next Generation / Microsoft® Windows® Operating System | Microsoft Corporation |
| cnghwassist | CNG Hardware Assist algorithm provider | 10.0.19041.1 | Kernel Driver | Stopped | Disabled | C:\Windows\System32\drivers\cnghwassist.sys | CNG Hardware Assist algorithm provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| CompositeBus | Composite Bus Enumerator Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys | Multi-Transport Composite Bus Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| condrv | Console Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\condrv.sys | Console Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| COREINFO100 | COREINFO100 | 1.0.0.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\COREINFO100.SYS | Coreinfo processor information utility / Coreinfo | Sysinternals - www.sysinternals.com |
| CSC | Offline Files Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\csc.sys | Windows Client Side Caching Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| CSI2HostControllerDriver | Intel(R) CSI2 Host Controller services | 0.2.5.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\CSI2HostControllerDriver.sys | Intel(R) CSI2 Host Controller | Intel(R) Corporation |
| dam | Desktop Activity Moderator Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\dam.sys | DAM Kernel Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Dfsc | DFS Namespace Client Driver | 10.0.19041.1 | File System Driver | Running | System Start | C:\Windows\System32\drivers\dfsc.sys | DFS Namespace Client Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| disk | Disk Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\disk.sys | PnP Disk Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| dmvsc | dmvsc | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\dmvsc.sys | Dynamic Memory / Microsoft® Windows® Operating System | Microsoft Corporation |
| dptf_acpi | dptf_acpi | 8.3.10207.5567 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\dptf_acpi.sys | DPTF ACPI Device (64-Bit) / Dynamic Platform Thermal Framework | Intel Corporation |
| dptf_cpu | dptf_cpu | 8.3.10207.5567 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\dptf_cpu.sys | DPTF CPU Device (64-Bit) / Dynamic Platform Thermal Framework | Intel Corporation |
| drmkaud | Microsoft Trusted Audio Drivers | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\drmkaud.sys | Microsoft Trusted Audio Drivers / Microsoft® Windows® Operating System | Microsoft Corporation |
| DXGKrnl | LDDM Graphics Subsystem | 10.0.19041.153 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\dxgkrnl.sys | DirectX Graphics Kernel / Microsoft® Windows® Operating System | Microsoft Corporation |
| ebdrv | QLogic 10 Gigabit Ethernet Adapter VBD | 7.13.65.105 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\evbda.sys | QLogic 10 GigE VBD / QLogic 10 GigE | QLogic Corporation |
| EhStorClass | Enhanced Storage Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Boot Start | C:\Windows\System32\drivers\EhStorClass.sys | Enhanced Storage Class driver for IEEE 1667 devices / Microsoft® Windows® Operating System | Microsoft Corporation |
| EhStorTcgDrv | Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\EhStorTcgDrv.sys | Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols / Microsoft® Windows® Operating System | Microsoft Corporation |
| ErrDev | Microsoft Hardware Error Device Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\errdev.sys | Error Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| esif_lf | esif_lf | 8.3.10207.5567 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\esif_lf.sys | DPTF Zone (64-Bit) / Dynamic Platform Thermal Framework | Intel Corporation |
| exfat | exFAT File System Driver | | File System Driver | Stopped | Demand Start | | | |
| fastfat | FAT12/16/32 File System Driver | | File System Driver | Running | Demand Start | | | |
| fdc | Floppy Disk Controller Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\fdc.sys | Floppy Disk Controller Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| FileCrypt | FileCrypt | 10.0.19041.1 | File System Driver | Running | System Start | C:\Windows\System32\drivers\filecrypt.sys | Windows sandboxing and encryption filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| FileInfo | File Information FS MiniFilter | 10.0.19041.1 | File System Driver | Running | Boot Start | C:\Windows\System32\drivers\fileinfo.sys | FileInfo Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Filetrace | Filetrace | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\filetrace.sys | File Trace Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| flpydisk | Floppy Disk Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\flpydisk.sys | Floppy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| FltMgr | FltMgr | 10.0.19041.1 | File System Driver | Running | Boot Start | C:\Windows\System32\drivers\fltMgr.sys | Microsoft Filesystem Filter Manager / Microsoft® Windows® Operating System | Microsoft Corporation |
| FsDepends | File System Dependency Minifilter | 10.0.19041.1 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\fsdepends.sys | File System Dependency Manager Mini Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| fvevol | BitLocker Drive Encryption Filter Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\fvevol.sys | BitLocker Drive Encryption Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| gencounter | Microsoft Hyper-V Generation Counter | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmgencounter.sys | Virtual Machine Generation Counter / Microsoft® Windows® Operating System | Microsoft Corporation |
| genericusbfn | Generic USB Function Class | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys | Generic USB Function Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| GPIOClx0101 | Microsoft GPIO Class Extension Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\msgpioclx.sys | GPIO Class Extension Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| GpuEnergyDrv | GPU Energy Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\gpuenergydrv.sys | GPU Energy Kernel Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HdAudAddService | Microsoft 1.1 UAA Function Driver for High Definition Audio Service | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\HdAudio.sys | High Definition Audio Function Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HDAudBus | Microsoft UAA Bus Driver for High Definition Audio | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hdaudbus.sys | High Definition Audio Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HidBatt | HID UPS Battery Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidbatt.sys | Hid Battery Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HidBth | Microsoft Bluetooth HID Miniport | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidbth.sys | Bluetooth Miniport Driver for HID Devices / Microsoft® Windows® Operating System | Microsoft Corporation |
| hidi2c | Microsoft I2C HID Miniport Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidi2c.sys | I2C HID Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| hidinterrupt | Common Driver for HID Buttons implemented with interrupts | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidinterrupt.sys | HID Button over Interrupt Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HidIr | Microsoft Infrared HID Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidir.sys | Infrared Miniport Driver for Input Devices / Microsoft® Windows® Operating System | Microsoft Corporation |
| hidspi | Microsoft SPI HID Miniport Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hidspi.sys | SPI HID Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HidUsb | Microsoft HID Class Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\hidusb.sys | USB Miniport Driver for Input Devices / Microsoft® Windows® Operating System | Microsoft Corporation |
| HID_PCI | HID PCI Minidriver for ISS | 3.1.0.3524 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\HID_PCI.sys | HID PCI Minidriver for ISS / ISS | Intel |
| hnswfpdriver | HNS WFP Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hnswfpdriver.sys | Network driver for proxying traffic / Microsoft® Windows® Operating System | Microsoft Corporation |
| HpSAMD | HpSAMD | 8.0.4.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\HpSAMD.sys | Smart Array SAS/SATA Controller Media Driver | Hewlett-Packard Company |
| HTTP | HTTP Service | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\http.sys | HTTP Protocol Stack / Microsoft® Windows® Operating System | Microsoft Corporation |
| hvcrash | hvcrash | 10.0.19041.1 | Kernel Driver | Stopped | Disabled | C:\Windows\System32\drivers\hvcrash.sys | Hyper-V Crashdump / Microsoft® Windows® Operating System | Microsoft Corporation |
| hvservice | Hypervisor/Virtual Machine Support Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\hvservice.sys | Hypervisor Boot Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| hvsifltr | Microsoft Defender Application Guard Filter Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\hvsifltr.sys | Microsoft Defender Application Guard Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| hvsocketcontrol | hvsocketcontrol | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\hvsocketcontrol.sys | Microsoft Hyper-V Socket Provider Control Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HwNClx0101 | Microsoft Hardware Notifications Class Extension Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mshwnclx.sys | Hardware Notification Class Extension Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| hwpolicy | Hardware Policy Driver | 10.0.19041.1 | Kernel Driver | Stopped | Boot Start | C:\Windows\System32\drivers\hwpolicy.sys | Hardware Policy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| hyperkbd | hyperkbd | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\hyperkbd.sys | Microsoft VMBus Synthetic Keyboard Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| HyperVideo | HyperVideo | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\HyperVideo.sys | Microsoft VMBus Video Device Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| i8042prt | i8042 Keyboard and PS/2 Mouse Port Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\i8042prt.sys | i8042 Port Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| iacamera64 | Intel(R) AVStream Camera 2500 | 1.0.0.8611 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iacamera64.sys | Intel(R) AVStream Camera Driver | Intel(R) Corporation |
| iactrllogic | Intel(R) Control Logic | 1.0.0.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iactrllogic64.sys | Intel(R) Control Logic | Intel(R) Corporation |
| iagpio | Intel Serial IO GPIO Controller Driver | 1.1.1.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iagpio.sys | Intel(R) Serial IO GPIO Controller Driver | Intel(R) Corporation |
| iai2c | Intel(R) Serial IO I2C Host Controller | 1.1.1.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iai2c.sys | Intel(R) Serial IO I2C Driver | Intel(R) Corporation |
| iaLPSS2i_GPIO2 | Intel(R) Serial IO GPIO Driver v2 | 30.100.1816.3 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys | Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_GPIO2_BXT_P | Intel(R) Serial IO GPIO Driver v2 | 30.100.1816.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys | Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_GPIO2_CNL | Intel(R) Serial IO GPIO Driver v2 | 30.100.1816.3 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys | Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_GPIO2_GLK | Intel(R) Serial IO GPIO Driver v2 | 30.100.1820.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys | Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_I2C | Intel(R) Serial IO I2C Driver v2 | 30.100.1816.3 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_I2C.sys | Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_I2C_BXT_P | Intel(R) Serial IO I2C Driver v2 | 30.100.1816.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys | Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_I2C_CNL | Intel(R) Serial IO I2C Driver v2 | 30.100.1929.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys | Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2i_I2C_GLK | Intel(R) Serial IO I2C Driver v2 | 30.100.1820.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys | Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2_GPIO2 | Intel(R) Serial IO GPIO Driver v2 | 30.100.1725.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys | Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2_I2C | Intel(R) Serial IO I2C Driver v2 | 30.100.1725.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2_I2C.sys | Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2_SPI | Intel(R) Serial IO SPI Driver v2 | 30.100.1713.2 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSS2_SPI.sys | Intel(R) Serial IO SPI Driver v2 / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSS2_UART2 | Intel(R) Serial IO UART Driver v2 | 30.100.1725.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iaLPSS2_UART2.sys | Intel(R) Serial IO UART Driver / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSSi_GPIO | Intel(R) Serial IO GPIO Controller Driver | 1.1.250.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSSi_GPIO.sys | Intel(R) Serial IO GPIO Controller Driver / Intel(R) Serial IO Driver | Intel Corporation |
| iaLPSSi_I2C | Intel(R) Serial IO I2C Controller Driver | 1.1.253.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaLPSSi_I2C.sys | Intel(R) Serial IO I2C Controller Driver / Intel(R) Serial IO Driver | Intel Corporation |
| iaStorAVC | Intel Chipset SATA RAID Controller | 15.44.0.1015 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaStorAVC.sys | Intel(R) Rapid Storage Technology driver (inbox) - x64 / Intel(R) Rapid Storage Technology driver (inbox) | Intel Corporation |
| iaStorV | Intel RAID Controller Windows 7 | 8.6.2.1019 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\iaStorV.sys | Intel Matrix Storage Manager driver - x64 / Intel Matrix Storage Manager driver | Intel Corporation |
| ibbus | Mellanox InfiniBand Bus/AL (Filter Driver) | 5.50.14695.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ibbus.sys | InfiniBand Fabric Bus Driver / OpenFabrics Windows | Mellanox |
| igfx | igfx | 25.20.100.6472 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igdkmd64.sys | Intel Graphics Kernel Mode Driver / Intel HD Graphics Drivers for Windows(R) | Intel Corporation |
| IndirectKmd | Indirect Displays Kernel-Mode Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\IndirectKmd.sys | Indirect displays kernel-mode filter driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| IntcAudioBus | Intel(R) Smart Sound Technology (Intel(R) SST) Bus | 9.21.0.3755 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\IntcAudioBus.sys | Intel® Smart Sound Technology (Intel® SST) Bus | Intel(R) Corporation |
| IntcAzAudAddService | Service for Realtek HD Audio (WDM) | 6.0.1.8242 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\RTKVHD64.sys | Realtek(r) High Definition Audio Function Driver | Realtek Semiconductor Corp. |
| IntcDAud | Intel(R) Display Audio | 10.26.0.4 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_db1a3501f64b55f3\IntcDAud.sys | Intel(R) Display Audio Driver / Intel(R) Display Audio | Intel(R) Corporation |
| IntcOED | Intel(R) Smart Sound Technology (Intel(R) SST) OED | 9.21.0.3755 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\IntcOED.sys | Intel® Smart Sound Technology (Intel® SST) OED | Intel(R) Corporation |
| intelide | intelide | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\intelide.sys | Intel PCI IDE Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| intelpep | Intel(R) Power Engine Plug-in Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\intelpep.sys | Intel Power Engine Plugin / Microsoft® Windows® Operating System | Microsoft Corporation |
| intelpmax | Intel(R) Dynamic Device Peak Power Manager Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\intelpmax.sys | Intel Power Limit Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| intelppm | Intel Processor Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\intelppm.sys | Processor Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| IntTouch | Intel(R) Precise Touch Service | 1.2.0.100 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iaPreciseTouch.sys | Intel(R) Precise Touch Driver | Intel Corporation |
| iorate | Disk I/O Rate Filter Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\iorate.sys | I/O rate control Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| IpFilterDriver | IP Traffic Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ipfltdrv.sys | IP FILTER DRIVER / Microsoft® Windows® Operating System | Microsoft Corporation |
| IPMIDRV | IPMIDRV | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\IPMIDrv.sys | WMI IPMI DRIVER / Microsoft® Windows® Operating System | Microsoft Corporation |
| IPNAT | IP Network Address Translator | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ipnat.sys | IP Network Address Translator / Microsoft® Windows® Operating System | Microsoft Corporation |
| IPT | IPT | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ipt.sys | IPT Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| isapnp | isapnp | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\isapnp.sys | PNP ISA Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| iScsiPrt | iScsiPort Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\msiscsi.sys | Microsoft iSCSI Initiator Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ISH | Intel(R) Integrated Sensor Solution | 3.1.0.3524 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ISH.sys | Intel(R) Integrated Sensor Solution / ISS | Intel |
| ISH_BusDriver | ISS Bus Enumerator | 3.1.0.3524 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ISH_BusDriver.sys | ISS Dynamic Bus Enumerator / ISS | Intel |
| ISODrive | ISO DVD/CD-ROM Device Driver | 3.1.3.579 | File System Driver | Running | System Start | C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys | ISO DVD/CD-ROM Device Driver / ISODrive | EZB Systems, Inc. |
| ItSas35i | ItSas35i | 2.60.94.80 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ItSas35i.sys | Avago SAS Gen3.5 Driver (StorPort) / Windows (R) Win 7 DDK driver | Avago Technologies |
| kbdclass | Keyboard Class Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\kbdclass.sys | Keyboard Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| kbdhid | Keyboard HID Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\kbdhid.sys | HID Keyboard Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| kdnic | Microsoft Kernel Debug Network Miniport (NDIS 6.20) | 6.1.0.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\kdnic.sys | Microsoft Kernel Debugger Network Miniport / Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport) | Microsoft Corporation |
| KeyboardFingerprintIntegration | KeyboardFingerprintIntegration Service | 1.1.610.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\KeyboardFingerprintIntegration.sys | KeyboardFingerprintIntegration / Surface | Microsoft Corporation |
| KSecDD | KSecDD | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\ksecdd.sys | Kernel Security Support Provider Interface / Microsoft® Windows® Operating System | Microsoft Corporation |
| KSecPkg | KSecPkg | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\ksecpkg.sys | Kernel Security Support Provider Interface Packages / Microsoft® Windows® Operating System | Microsoft Corporation |
| ksthunk | Kernel Streaming Thunks | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ksthunk.sys | Kernel Streaming WOW Thunk Service / Microsoft® Windows® Operating System | Microsoft Corporation |
| l2bridge | Bridge Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\l2bridge.sys | Network driver for bridging packets between mbb, wifi, and ethernet networks / Microsoft® Windows® Operating System | Microsoft Corporation |
| lltdio | Link-Layer Topology Discovery Mapper I/O Driver | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\lltdio.sys | Link-Layer Topology Mapper I/O Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| LSI_SAS | LSI_SAS | 1.34.3.83 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\lsi_sas.sys | LSI Fusion-MPT SAS Driver (StorPort) | LSI Corporation |
| LSI_SAS2i | LSI_SAS2i | 2.0.79.82 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\lsi_sas2i.sys | LSI SAS Gen2 Driver (StorPort) / Windows (R) Win 7 DDK driver | LSI Corporation |
| LSI_SAS3i | LSI_SAS3i | 2.51.26.80 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\lsi_sas3i.sys | Avago SAS Gen3 Driver (StorPort) / Windows (R) Win 7 DDK driver | Avago Technologies |
| LSI_SSS | LSI_SSS | 2.10.61.81 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\lsi_sss.sys | LSI SSS PCIe/Flash Driver (StorPort) | LSI Corporation |
| luafv | UAC File Virtualization | 10.0.19041.1 | File System Driver | Running | Auto Start | C:\Windows\System32\drivers\luafv.sys | LUA File Virtualization Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| lunparser | LUN Parser | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\lunparser.sys | lun parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| mausbhost | MA-USB Host Controller Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mausbhost.sys | MA-USB Host Controller Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mausbip | MA-USB IP Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mausbip.sys | MA-USB IP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MaximPowerMeter | Maxim Power Meter Service | 100.0.1.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\MaximPowerMeter.sys | Microsoft Power Meter / Maxim Power Meter | Maxim Integrated |
| MbbCx | MBB Network Adapter Class Extension | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\MbbCx.sys | Windows Mobile Broadband Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| megasas | megasas | 6.706.6.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\megasas.sys | MEGASAS RAID Controller Driver for Windows | Avago Technologies |
| megasas2i | megasas2i | 6.714.20.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\MegaSas2i.sys | MEGASAS RAID Controller Driver for Windows | Avago Technologies |
| megasas35i | megasas35i | 7.710.10.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\megasas35i.sys | MEGASAS RAID Controller Driver for Windows | Avago Technologies |
| megasr | megasr | 15.2.2013.129 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\megasr.sys | LSI MegaRAID Software RAID Driver / MegaRAID Software RAID | LSI Corporation, Inc. |
| MEIx64 | Intel(R) Management Engine Interface | 11.7.0.1057 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\TeeDriverW8x64.sys | Intel(R) Management Engine Interface | Intel Corporation |
| Microsoft_Bluetooth_AvrcpTransport | Microsoft Bluetooth Avrcp Transport Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys | Microsoft Bluetooth Avrcp Transport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mlx4_bus | Mellanox ConnectX Bus Enumerator | 5.50.14695.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mlx4_bus.sys | MLX4 Bus Driver / OpenFabrics Windows | Mellanox |
| MMCSS | Multimedia Class Scheduler | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\mmcss.sys | MMCSS Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Modem | Modem | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\modem.sys | Modem Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| monitor | monitor | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\monitor.sys | Monitor Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mouclass | Mouse Class Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mouclass.sys | Mouse Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mouhid | Mouse HID Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mouhid.sys | HID Mouse Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mountmgr | Mount Point Manager | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\mountmgr.sys | Mount Point Manager / Microsoft® Windows® Operating System | Microsoft Corporation |
| mpsdrv | Windows Defender Firewall Authorization Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mpsdrv.sys | Microsoft Protection Service Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MQAC | MQAC | 5.0.1.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\mqac.sys | Message Queuing Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mrvlpcie8897 | mrvlpcie8897 | 15.68.17017.115 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mrvlpcie8897.sys | Marvell LE Driver for the WiFiCLass Stack / Marvell LE Driver | Marvell Semiconductors Inc. |
| MRxDAV | WebDav Client Redirector Driver | 10.0.19041.1 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\mrxdav.sys | Windows NT WebDav Minirdr / Microsoft® Windows® Operating System | Microsoft Corporation |
| mrxsmb | SMB MiniRedirector Wrapper and Engine | 10.0.19041.153 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\mrxsmb.sys | Windows NT SMB Minirdr / Microsoft® Windows® Operating System | Microsoft Corporation |
| mrxsmb20 | SMB 2.0 MiniRedirector | 10.0.19041.1 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\mrxsmb20.sys | Longhorn SMB 2.0 Redirector / Microsoft® Windows® Operating System | Microsoft Corporation |
| MsBridge | Microsoft MAC Bridge | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\bridge.sys | MAC Bridge Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Msfs | Msfs | | File System Driver | Running | System Start | | | |
| msgpiowin32 | Common Driver for Buttons, DockMode and Laptop/Slate Indicator | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\msgpiowin32.sys | GPIO Button Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mshidkmdf | Pass-through HID to KMDF Filter Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mshidkmdf.sys | Pass-through HID to KMDF Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mshidumdf | Pass-through HID to UMDF Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mshidumdf.sys | Pass-through Driver for HID-UMDF Interface / Microsoft® Windows® Operating System | Microsoft Corporation |
| msisadrv | msisadrv | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\msisadrv.sys | ISA Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MSKSSRV | Microsoft Streaming Service Proxy | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mskssrv.sys | MS KS Server / Microsoft® Windows® Operating System | Microsoft Corporation |
| MsLldp | Microsoft Link-Layer Discovery Protocol | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\mslldp.sys | Microsoft Link-Layer Discovery Protocol Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MSPCLOCK | Microsoft Streaming Clock Proxy | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mspclock.sys | MS Proxy Clock / Microsoft® Windows® Operating System | Microsoft Corporation |
| MSPQM | Microsoft Streaming Quality Manager Proxy | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mspqm.sys | MS Proxy Quality Manager / Microsoft® Windows® Operating System | Microsoft Corporation |
| MsQuic | MsQuic | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\msquic.sys | Windows QUIC Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MsRPC | MsRPC | | Kernel Driver | Stopped | Demand Start | | | |
| MsSecFlt | Microsoft Security Events Component Minifilter | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\mssecflt.sys | Microsoft Security Events Component file system filter driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mssmbios | Microsoft System Management BIOS Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\mssmbios.sys | System Management BIOS Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| MSTEE | Microsoft Streaming Tee/Sink-to-Sink Converter | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mstee.sys | WDM Tee/Communication Transform Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| msux64w10 | Microsoft USB Fast/Gigabit Ethernet NIC NDIS6.40 64-bit Driver | 10.14.117.2020 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\msux64w10.inf_amd64_440fd3d3d9361452\msux64w10.sys | Microsoft USB Fast/Gigabit Ethernet NIC NDIS6.40 64-bit Driver / Surface Ethernet Adapter | Microsoft |
| mt7612US_bc | Xbox Wireless Adapter for Windows | 11524.0.0.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\mt7612US_bc.sys | MT7612U Phoenix Driver / MediaTek Inc. MT7612 Wireless LAN Adapter Driver | MediaTek Inc. |
| MTConfig | Microsoft Input Configuration Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\MTConfig.sys | Microsoft Multi-Touch HID Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Mup | Mup | 10.0.19041.1 | File System Driver | Running | Boot Start | C:\Windows\System32\drivers\mup.sys | Multiple UNC Provider Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| mvumis | mvumis | 1.0.5.1016 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\mvumis.sys | Marvell Flash Controller Driver / Marvell Flash Controller | Marvell Semiconductor, Inc. |
| NativeWifiP | NativeWiFi Filter | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\nwifi.sys | NativeWiFi Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ndfltr | NetworkDirect Service | 5.50.14695.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ndfltr.sys | NetworkDirect Support Filter Driver / OpenFabrics Windows | Mellanox |
| NDIS | NDIS System Driver | 10.0.19041.84 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\ndis.sys | Network Driver Interface Specification (NDIS) / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisCap | Microsoft NDIS Capture | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\ndiscap.sys | Microsoft NDIS Packet Capture Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisImPlatform | Microsoft Network Adapter Multiplexor Protocol | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\NdisImPlatform.sys | Microsoft Network Adapter Multiplexor / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisImPlatformMp | Microsoft Network Adapter Multiplexor Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\NdisImPlatform.sys | Microsoft Network Adapter Multiplexor / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisTapi | Remote Access NDIS TAPI Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ndistapi.sys | NDIS 3.0 connection wrapper driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ndisuio | NDIS Usermode I/O Protocol | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ndisuio.sys | NDIS User mode I/O driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisVirtualBus | Microsoft Virtual Network Adapter Enumerator | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\NdisVirtualBus.sys | Microsoft Virtual Network Adapter Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| NdisWan | Remote Access NDIS WAN Driver | 10.0.19041.153 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ndiswan.sys | MS PPP Framing Driver (Strong Encryption) / Microsoft® Windows® Operating System | Microsoft Corporation |
| ndiswanlegacy | Remote Access LEGACY NDIS WAN Driver | 10.0.19041.153 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ndiswan.sys | MS PPP Framing Driver (Strong Encryption) / Microsoft® Windows® Operating System | Microsoft Corporation |
| NDKPing | NDKPing Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\NDKPing.sys | RDMA Sample Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ndproxy | NDIS Proxy Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ndproxy.sys | NDIS Proxy / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ndu | Windows Network Data Usage Monitoring Driver | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\Ndu.sys | Windows Network Data Usage Monitoring Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| NetAdapterCx | Network Adapter Wdf Class Extension Library | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\NetAdapterCx.sys | Network Adapter Class Extension for WDF / Microsoft® Windows® Operating System | Microsoft Corporation |
| NetBIOS | NetBIOS Interface | 10.0.19041.1 | File System Driver | Running | System Start | C:\Windows\System32\drivers\netbios.sys | NetBIOS interface driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| NetBT | NetBT | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\netbt.sys | MBT Transport driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| netvsc | netvsc | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\netvsc.sys | Virtual NDIS Miniport / Microsoft® Windows® Operating System | Microsoft Corporation |
| Npfs | Npfs | | File System Driver | Running | System Start | | | |
| npsvctrig | Named pipe service trigger provider | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\npsvctrig.sys | Named pipe service triggers / Microsoft® Windows® Operating System | Microsoft Corporation |
| nsiproxy | NSI Proxy Service Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\nsiproxy.sys | NSI Proxy / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ntfs | Ntfs | | File System Driver | Running | Demand Start | | | |
| Null | Null | | Kernel Driver | Running | System Start | | | |
| nvdimm | Microsoft NVDIMM device driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\nvdimm.sys | NVDIMM device driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| nvlddmkm | nvlddmkm | 23.21.13.9140 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvlddmkm.sys | NVIDIA Windows Kernel Mode Driver, Version 391.40 | NVIDIA Corporation |
| nvraid | nvraid | 10.6.0.23 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\nvraid.sys | NVIDIA® nForce(TM) RAID Driver / NVIDIA nForce(TM) RAID Driver | NVIDIA Corporation |
| nvstor | nvstor | 10.6.0.23 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\nvstor.sys | NVIDIA® nForce(TM) Sata Performance Driver / NVIDIA nForce(TM) SATA Driver | NVIDIA Corporation |
| OemShZDigitizerIntegration | Surface1832DigitizerIntegration Service | 1.12.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\Surface1832DigitizerIntegration.sys | Surface1832DigitizerIntegration / Surface | Microsoft Corporation |
| ov5693 | Camera Sensor OV5693 | 1.0.0.8611 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ov5693.sys | Camera Sensor OV5693 | Intel(R) Corporation |
| ov7251 | Camera Sensor OV7251 | 10.0.10011.16384 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ov7251.sys | Camera Sensor OV7251 | Intel Corporation |
| ov8865 | Camera Sensor OV8865 | 10.0.10011.16384 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\ov8865.sys | Camera Sensor OV8865 | Intel Corporation |
| Parport | Parallel port driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\parport.sys | Parallel Port Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| partmgr | Partition driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\partmgr.sys | Partition driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| passthruparser | PassthroughParser | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\passthruparser.sys | Pass thru parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| pci | PCI Bus Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\pci.sys | NT Plug and Play PCI Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| pciide | pciide | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pciide.sys | Generic PCI IDE Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| pcip | PCI Proxy driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pcip.sys | Microsoft PCI Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| pcmcia | pcmcia | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pcmcia.sys | PCMCIA Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| pcw | Performance Counters for Windows Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\pcw.sys | Performance Counters for Windows Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| pdc | pdc | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\pdc.sys | Power Dependency Coordinator Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| PEAUTH | PEAUTH | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\PEAuth.sys | Protected Environment Authentication and Authorization Export Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| percsas2i | percsas2i | 6.805.3.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\percsas2i.sys | MEGASAS RAID Controller Driver for Windows | Avago Technologies |
| percsas3i | percsas3i | 6.604.6.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\percsas3i.sys | MEGASAS RAID Controller Driver for Windows | Avago Technologies |
| PktMon | Packet Monitor Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\PktMon.sys | Packet Monitor Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| pmem | Microsoft persistent memory disk driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pmem.sys | Persistent memory driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| PNPMEM | Microsoft Memory Module Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pnpmem.sys | Plug and Play Memory Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| portcfg | portcfg | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\portcfg.sys | Port Device Class Configuration Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| PptpMiniport | WAN Miniport (PPTP) | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\raspptp.sys | Peer-to-Peer Tunneling Protocol / Microsoft® Windows® Operating System | Microsoft Corporation |
| Processor | Processor Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\processr.sys | Processor Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Psched | QoS Packet Scheduler | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\pacer.sys | QoS Packet Scheduler / Microsoft® Windows® Operating System | Microsoft Corporation |
| pvhdparser | pvhdparser | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\pvhdparser.sys | Proxy VHD parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| QWAVEdrv | QWAVE driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\qwavedrv.sys | Microsoft Quality Windows Audio Video Experience (qWave) Support Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ramdisk | Windows RAM Disk Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ramdisk.sys | RAM Disk Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ramparser | ramparser | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ramparser.sys | RAM parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| RasAcd | Remote Access Auto Connection Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\rasacd.sys | RAS Automatic Connection Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| RasAgileVpn | WAN Miniport (IKEv2) | 10.0.19041.153 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\agilevpn.sys | RAS Agile Vpn Miniport Call Manager / Microsoft® Windows® Operating System | Microsoft Corporation |
| Rasl2tp | WAN Miniport (L2TP) | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rasl2tp.sys | RAS L2TP mini-port/call-manager driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| RasPppoe | Remote Access PPPOE Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\raspppoe.sys | RAS PPPoE mini-port/call-manager driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| RasSstp | WAN Miniport (SSTP) | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rassstp.sys | RAS SSTP Miniport Call Manager / Microsoft® Windows® Operating System | Microsoft Corporation |
| rdbss | Redirected Buffering Sub System | 10.0.19041.1 | File System Driver | Running | System Start | C:\Windows\System32\drivers\rdbss.sys | Redirected Drive Buffering SubSystem Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| rdpbus | Remote Desktop Device Redirector Bus Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rdpbus.sys | Microsoft RDP Bus Device driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| RDPDR | Remote Desktop Device Redirector Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rdpdr.sys | Microsoft RDP Device redirector / Microsoft® Windows® Operating System | Microsoft Corporation |
| RdpVideoMiniport | Remote Desktop Video Miniport Driver | 10.0.19041.153 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rdpvideominiport.sys | Microsoft RDP Video Miniport driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| rdyboost | ReadyBoost | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\rdyboost.sys | ReadyBoost Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ReFS | ReFS | | File System Driver | Stopped | Demand Start | | | |
| ReFSv1 | ReFSv1 | | File System Driver | Stopped | Demand Start | | | |
| RFCOMM | Bluetooth Device (RFCOMM Protocol TDI) | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\rfcomm.sys | Bluetooth RFCOMM Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| rhproxy | Resource Hub proxy driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\rhproxy.sys | ResourceHub Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| rspndr | Link-Layer Topology Discovery Responder | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\rspndr.sys | Link-Layer Topology Responder Driver for NDIS 6 / Microsoft® Windows® Operating System | Microsoft Corporation |
| s3cap | s3cap | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vms3cap.sys | Microsoft S3 Emulated Device Cap Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| sbp2port | SBP-2 Transport/Protocol Bus Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sbp2port.sys | SBP-2 Protocol Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| scfilter | Smart card PnP Class Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\scfilter.sys | Microsoft Smart Card Reader Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| scmbus | Microsoft Storage Class Memory Bus Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\scmbus.sys | Storage Class Memory Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| sdbus | sdbus | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sdbus.sys | SecureDigital Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| SDFRd | SDF Reflector | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\SDFRd.sys | SDF Reflector / Microsoft® Windows® Operating System | Microsoft Corporation |
| sdstor | SD Storage Port Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sdstor.sys | SD Storage Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| SensorsHIDClassDriver | UMDF Reflector service for Sensors HID Class Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WUDFRd.sys | Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System | Microsoft Corporation |
| SerCx | Serial UART Support Library | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\SerCx.sys | Serial Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| SerCx2 | Serial UART Support Library | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SerCx2.sys | Serial Class Extension V2 / Microsoft® Windows® Operating System | Microsoft Corporation |
| Serenum | Serenum Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\serenum.sys | Serial Port Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| Serial | Serial port driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\serial.sys | Serial Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| sermouse | Serial Mouse Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sermouse.sys | Serial Mouse Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| sfloppy | High-Capacity Floppy Disk Drive | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sfloppy.sys | SCSI Floppy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| SgrmAgent | System Guard Runtime Monitor Agent | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\SgrmAgent.sys | System Guard Runtime Monitor Agent Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| SiSRaid2 | SiSRaid2 | 5.1.1039.2600 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sisraid2.sys | SiS RAID Stor Miniport Driver / Microsoft® Windows® Operating System | Silicon Integrated Systems Corp. |
| SiSRaid4 | SiSRaid4 | 5.1.1039.3600 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\sisraid4.sys | SiS AHCI Stor-Miniport Driver / Microsoft® Windows® Operating System | Silicon Integrated Systems |
| SIVDriver | SIV Kernel Driver | 5.45.0.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\SIVX64.sys | System Information Viewer X64 Driver / SIVDRIVER | Ray Hinchliffe |
| SmartSAMD | SmartSAMD | 1.50.1.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\SmartSAMD.sys | Storport Miniport Driver for SmartRAID/SmartHBA Controllers / SmartRAID, SmartHBA PQI Storport Driver | Microsemi Corportation |
| smbdirect | smbdirect | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\smbdirect.sys | SMB Network Direct Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| spaceparser | Space Parser | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\spaceparser.sys | Storage Spaces Parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| spaceport | Storage Spaces Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\spaceport.sys | Storage Spaces Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| SpatialGraphFilter | Holographic Spatial Graph Filter | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\SpatialGraphFilter.sys | Holographic Spatial Graph Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| SpbCx | Simple Peripheral Bus Support Library | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SpbCx.sys | SPB Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| srv2 | Server SMB 2.xxx Driver | 10.0.19041.153 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\srv2.sys | Smb 2.0 Server driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| srvnet | srvnet | 10.0.19041.1 | File System Driver | Running | Demand Start | C:\Windows\System32\drivers\srvnet.sys | Server Network driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| stexstor | stexstor | 5.1.0.10 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\stexstor.sys | Promise SuperTrak EX Series Driver for Windows x64 / Promise® SuperTrak EX Series | Promise Technology, Inc. |
| storahci | Microsoft Standard SATA AHCI Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\storahci.sys | MS AHCI Storport Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| storflt | Microsoft Hyper-V Storage Accelerator | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmstorfl.sys | Virtual Storage Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| stornvme | Microsoft Standard NVM Express Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\stornvme.sys | Microsoft NVM Express Storport Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| storqosflt | Storage QoS Filter Driver | 10.0.19041.1 | File System Driver | Running | Auto Start | C:\Windows\System32\drivers\storqosflt.sys | Storage QoS Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| storufs | Microsoft Universal Flash Storage (UFS) Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\storufs.sys | MS UFS Storport Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| storvsc | storvsc | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\storvsc.sys | Storage VSC Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| storvsp | storvsp | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\storvsp.sys | Storage vsp Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| supportdriver | Intel(R) Imaging Signal Processor 2500 | 1.0.0.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\iaisp64.sys | Intel(R) Imaging Signal Processor 2500 | Intel(R) Corporation |
| SurfaceAcpiNotify | Surface ACPI Notify Driver | 5.15.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceAcpiNotifyDriver.sys | Surface ACPI Notification Driver / Surface | Microsoft Corporation |
| SurfaceBase2Integration | SurfaceBase2Integration Service | 2.0.25.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceBase2Integration.sys | SurfaceBase2Integration / Surface | Microsoft Corporation |
| SurfaceButton | Surface Button Service | 1.18.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceButton.sys | Surface Button Driver / Surface | Microsoft Corporation |
| SurfaceDockIntegration | Surface Dock Integration Service | 2.0.303.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceDockIntegration.sys | SurfaceDockIntegration / Surface | Microsoft Corporation |
| SurfaceHotPlug | Surface Hot Plug Service | 1.13.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceHotPlug.sys | Surface Hot-Plug Driver / Surface | Microsoft Corporation |
| SurfaceIntegrationDriver | Surface Integration Driver | 4.8.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceIntegrationDriver.sys | Surface Integration Driver / Surface | Microsoft Corporation |
| SurfacePenDriver | SurfacePenDriver Service | 21.0.17.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfacePenDriver.sys | Surface Pen Settings / Surface | Microsoft Corporation |
| SurfacePowerMeterDriver | Surface Power Meter Driver | 1.9.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfacePowerMeterDriver.sys | Surface Power Meter Driver / Surface | Microsoft Corporation |
| SurfaceSerialHubDriver | Surface Serial Hub Driver Service | 4.5.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceSerialHubDriver.sys | Surface Serial Hub Driver / Surface | Microsoft Corporation |
| SurfaceStorageFwUpdate | Surface Storage Firmware Update Service | 2.7.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceStorageFwUpdate.sys | Surface Storage Firmware Update Driver / Surface | Microsoft Corporation |
| SurfaceTconDriver | Microsoft Tcon Driver | 1.0.0.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceTconDriver.sys | Surface Tcon Driver / Surface | Microsoft Corporation |
| SurfaceTouchServicingML | Surface Touch Servicing ML | 1.0.0.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceTouchServicingML.sys | Surface Touch Servicing ML / Surface | Microsoft Corporation |
| SurfaceUcsi | Surface Ucsi Service | 2.14.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceUcsi.sys | Surface Type-C UCSI Driver / Surface | Microsoft Corporation |
| SurfaceUsbHubFwUpdate | Surface USB Hub Firmware Update Filter Driver | 1.16.136.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\SurfaceUsbHubFwUpdate.sys | Surface Usb Hub Filter Driver / Surface | Microsoft Corporation |
| swenum | Software Bus Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys | Plug and Play Software Device Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| Synth3dVsc | Synth3dVsc | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\Synth3dVsc.sys | Microsoft RemoteFX Synth3D Video VSC / Microsoft® Windows® Operating System | Microsoft Corporation |
| Synth3dVsp | Synth3dVsp | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\Synth3dVsp.sys | Microsoft RemoteFX Synth3D Video VSP / Microsoft® Windows® Operating System | Microsoft Corporation |
| Tcpip | TCP/IP Protocol Driver | 10.0.19041.84 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\tcpip.sys | TCP/IP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Tcpip6 | @todo.dll,-100;Microsoft IPv6 Protocol Driver | 10.0.19041.84 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\tcpip.sys | TCP/IP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| tcpipreg | TCP/IP Registry Compatibility | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\tcpipreg.sys | TCP/IP Registry Compatibility Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| tdx | NetIO Legacy TDI Support Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\tdx.sys | TDI Translation Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Telemetry | Intel(R) Telemetry Service | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\IntelTA.sys | Intel Telemetry Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| terminpt | Microsoft Remote Desktop Input Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\terminpt.sys | Terminal Server Input Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| TPM | TPM | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\tpm.sys | TPM Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| TsUsbFlt | Remote Desktop USB Hub Class Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\TsUsbFlt.sys | Remote Desktop USB Hub Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| TsUsbGD | Remote Desktop Generic USB Device | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\TsUsbGD.sys | Remote Desktop Generic USB Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| tsusbhub | Remote Desktop USB Hub | 10.0.19041.153 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\tsusbhub.sys | Remote Desktop USB Hub / Microsoft® Windows® Operating System | Microsoft Corporation |
| tunnel | Microsoft Tunnel Miniport Adapter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\tunnel.sys | Microsoft Tunnel Interface Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| UASPStor | USB Attached SCSI (UAS) Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\uaspstor.sys | Microsoft Uasp Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| UcmCx0101 | USB Connector Manager KMDF Class Extension | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\UcmCx.sys | USB Connector Manager KMDF Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| UcmTcpciCx0101 | UCM-TCPCI KMDF Class Extension | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\UcmTcpciCx.sys | UCM-TCPCI KMDF Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| UcmUcsiAcpiClient | UCM-UCSI ACPI Client | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys | UCM-UCSI ACPI Client Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| UcmUcsiCx0101 | UCM-UCSI KMDF Class Extension | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\UcmUcsiCx.sys | UCM-UCSI KMDF Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ucx01000 | USB Host Support Library | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\Ucx01000.sys | USB Controller Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| UdeCx | USB Device Emulation Support Library | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\Udecx.sys | "udecx.DRIVER" / Microsoft® Windows® Operating System | Microsoft Corporation |
| udfs | udfs | 10.0.19041.1 | File System Driver | Running | Disabled | C:\Windows\System32\drivers\udfs.sys | UDF File System Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| UEFI | Microsoft UEFI Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\uefi.sys | UEFI Driver for NT / Microsoft® Windows® Operating System | Microsoft Corporation |
| UevAgentDriver | UevAgentDriver | 10.0.19041.1 | File System Driver | Stopped | Disabled | C:\Windows\System32\drivers\UevAgentDriver.sys | Microsoft User Experience Virtualization Agent Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Ufx01000 | USB Function Class Extension | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ufx01000.sys | USB Function Driver Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| UfxChipidea | USB Chipidea Controller | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\UfxChipidea.sys | UFX Chipidea Client Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ufxsynopsys | USB Synopsys Controller | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\ufxsynopsys.sys | UFX Synopsys Client Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| umbus | UMBus Enumerator Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys | User-Mode Bus Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| UmPass | Microsoft UMPass Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\umpass.sys | Generic pass-through driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| UrsChipidea | Chipidea USB Role-Switch Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\urschipidea.sys | USB Role-Switch Driver for Chipidea Core / Microsoft® Windows® Operating System | Microsoft Corporation |
| UrsCx01000 | USB Role-Switch Support Library | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\urscx01000.sys | USB Role-Switch Class Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| UrsSynopsys | Synopsys USB Role-Switch Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\urssynopsys.sys | USB Role-Switch Driver for Synopsys Core / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbaudio | USB Audio Driver (WDM) | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\USBAUDIO.sys | USB Audio Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbaudio2 | USB Audio 2.0 Service | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbaudio2.sys | Microsoft USB Audio Class 2.0 Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbccgp | Microsoft USB Generic Parent Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbccgp.sys | USB Common Class Generic Parent Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbcir | eHome Infrared Receiver (USBCIR) | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbcir.sys | USB Consumer IR Driver for eHome / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbehci | Microsoft USB 2.0 Enhanced Host Controller Miniport Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbehci.sys | EHCI eUSB Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbhub | Microsoft USB Standard Hub Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbhub.sys | Default Hub Driver for USB / Microsoft® Windows® Operating System | Microsoft Corporation |
| USBHUB3 | SuperSpeed Hub | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\USBHUB3.SYS | USB3 HUB Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbohci | Microsoft USB Open Host Controller Miniport Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbohci.sys | OHCI USB Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbprint | Microsoft USB PRINTER Class | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbprint.sys | USB Printer driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbser | Microsoft USB Serial Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbser.sys | USB Serial Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| USBSTOR | USB Mass Storage Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\USBSTOR.SYS | USB Mass Storage Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| usbuhci | Microsoft USB Universal Host Controller Miniport Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\usbuhci.sys | UHCI USB Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| USBXHCI | USB xHCI Compliant Host Controller | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\USBXHCI.SYS | USB XHCI Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vdrvroot | Microsoft Virtual Drive Enumerator | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\vdrvroot.sys | Virtual Drive Root Enumerator / Microsoft® Windows® Operating System | Microsoft Corporation |
| VerifierExt | Driver Verifier Extension | 10.0.19041.1 | Kernel Driver | Stopped | Disabled | C:\Windows\System32\drivers\VerifierExt.sys | Driver Verifier Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| VfpExt | Microsoft Azure VFP Switch Extension | 10.0.19020.1000 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\vfpext.sys | Microsoft Azure VFP Extension / Microsoft® Windows® Operating System | Microsoft Corporation |
| vhdmp | vhdmp | 10.0.19041.84 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vhdmp.sys | VHD Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vhdparser | vhdparser | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vhdparser.sys | Native VHD parser / Microsoft® Windows® Operating System | Microsoft Corporation |
| vhf | Virtual HID Framework (VHF) Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vhf.sys | Virtual HID Framework (VHF) Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| Vid | Vid | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\Vid.sys | Microsoft Hyper-V Virtualization Infrastructure Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| VirtualRender | VirtualRender | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys | Microsoft Virtual Render Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vkrnlintvsc | Microsoft Hyper-V NT Kernel Integration VSC | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vkrnlintvsc.sys | Microsoft Hyper-V NT Kernel Integration VSC Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vkrnlintvsp | Microsoft Hyper-V NT Kernel Integration VSP | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vkrnlintvsp.sys | Microsoft Hyper-V NT Kernel Integration VSP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vmbus | Virtual Machine Bus | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmbus.sys | Microsoft Hyper-V Virtual Machine Bus Child Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMBusHID | VMBusHID | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\VMBusHID.sys | Microsoft VMBus HID Miniport / Microsoft® Windows® Operating System | Microsoft Corporation |
| vmbusr | Virtual Machine Bus Provider | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vmbusr.sys | Microsoft Hyper-V Virtual Machine Bus Root Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vmgid | Microsoft Hyper-V Guest Infrastructure Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmgid.sys | Virtual Machine Guest Infrastructure Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vmsmp | vmsmp | 10.0.19041.153 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vmswitch.sys | Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMSNPXY | VmSwitch NIC Proxy Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\VmsProxyHNic.sys | VmSwitch NIC Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMSNPXYMP | VMSNPXYMP | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\VmsProxyHNic.sys | VmSwitch NIC Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMSP | VmSwitch Protocol Driver | 10.0.19041.153 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\vmswitch.sys | Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| VmsProxy | VmSwitch Proxy Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\VmsProxy.sys | VMSWITCH Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMSVSF | VmSwitch Extensibility Filter | 10.0.19041.153 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmswitch.sys | Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| VMSVSP | VmSwitch Extensibility Protocol | 10.0.19041.153 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vmswitch.sys | Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System | Microsoft Corporation |
| volmgr | Volume Manager Driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\volmgr.sys | Volume Manager Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| volmgrx | Dynamic Volume Manager | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\volmgrx.sys | Volume Manager Extension Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| volsnap | Volume Shadow Copy driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\volsnap.sys | Volume Shadow Copy driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| volume | Volume driver | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\volume.sys | Volume driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vpci | Microsoft Hyper-V Virtual PCI Bus | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vpci.sys | Virtual PCI Bus / Microsoft® Windows® Operating System | Microsoft Corporation |
| vpcivsp | Microsoft Hyper-V PCI Server | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vpcivsp.sys | Virtual PCI VSP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vsmraid | vsmraid | 7.0.9600.6352 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\vsmraid.sys | VIA RAID DRIVER FOR AMD-X86-64 / VIA RAID driver | VIA Technologies Inc.,Ltd |
| VSPerfDrv160 | VSPerf Profile Monitor Driver 16.0 | 16.0.27814.4001 | Kernel Driver | Stopped | Demand Start | C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\VSPerfCollectionTools\vs2019\x64\VSPerfDrv160.sys | VSPerf Profiling Control Driver / Microsoft® Visual Studio® | Microsoft Corporation |
| VSTXRAID | VIA StorX Storage RAID Controller Windows Driver | 8.0.9200.8110 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\VSTXRAID.SYS | VIA StorX RAID Controller Driver | VIA Corporation |
| vwifibus | Virtual Wireless Bus Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vwifibus.sys | Virtual Wireless Bus Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vwififlt | Virtual WiFi Filter Driver | 10.0.19041.1 | Kernel Driver | Running | System Start | C:\Windows\System32\drivers\vwififlt.sys | Virtual WiFi Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| vwifimp | Virtual WiFi Miniport Service | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\vwifimp.sys | Virtual WiFi Miniport Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WacomPen | Wacom Serial Pen HID Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\wacompen.sys | Wacom Serial Pen Tablet HID Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| wanarp | Remote Access IP ARP Driver | 10.0.19041.1 | Kernel Driver | Running | Auto Start | C:\Windows\System32\drivers\wanarp.sys | MS Remote Access and Routing ARP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| wanarpv6 | Remote Access IPv6 ARP Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\wanarp.sys | MS Remote Access and Routing ARP Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| wcifs | Windows Container Isolation | 10.0.19041.1 | File System Driver | Running | Auto Start | C:\Windows\System32\drivers\wcifs.sys | Windows Container Isolation FS Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| wcnfs | Windows Container Name Virtualization | 10.0.19041.1 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\wcnfs.sys | Windows Container Name Virtualization FS Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WdBoot | Microsoft Defender Antivirus Boot Driver | 4.18.2003.6 | Kernel Driver | Stopped | Boot Start | C:\Windows\System32\drivers\wd\WdBoot.sys | Microsoft antimalware boot driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WDC_SAM | WD SCSI Pass Thru driver | 1.1.0.0 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\wdcsam64.sys | Western Digital SCSI Architecture Model (SAM) driver / Western Digital SAM driver | Western Digital Technologies, Inc. |
| Wdf01000 | Kernel Mode Driver Frameworks service | 1.31.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\Wdf01000.sys | Kernel Mode Driver Framework Runtime / Microsoft® Windows® Operating System | Microsoft Corporation |
| WdFilter | Microsoft Defender Antivirus Mini-Filter Driver | 4.18.2003.6 | File System Driver | Running | Boot Start | C:\Windows\System32\drivers\wd\WdFilter.sys | Microsoft antimalware file system filter driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| wdiwifi | WDI Driver Framework | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WdiWiFi.sys | WDI Driver Framework Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WdmCompanionFilter | WdmCompanionFilter | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\WdmCompanionFilter.sys | WDM Companion Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| WdNisDrv | Microsoft Defender Antivirus Network Inspection System Driver | 4.18.2003.6 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\wd\WdNisDrv.sys | Windows Defender Network Stream Filter / Microsoft® Windows® Operating System | Microsoft Corporation |
| WFPLWFS | Microsoft Windows Filtering Platform | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\wfplwfs.sys | WFP NDIS 6.30 Lightweight Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WIMMount | WIMMount | 10.0.19041.84 | File System Driver | Stopped | Demand Start | C:\Windows\System32\drivers\wimmount.sys | Wim file system Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WindowsTrustedRT | Windows Trusted Execution Environment Class Extension | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\WindowsTrustedRT.sys | Windows Trusted Runtime Interface Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WindowsTrustedRTProxy | Microsoft Windows Trusted Runtime Secure Service | 10.0.19041.1 | Kernel Driver | Running | Boot Start | C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys | Windows Trusted Runtime Service Proxy Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WinMad | WinMad Service | 5.50.14695.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\winmad.sys | Kernel WinMad / OpenFabrics Windows | Mellanox |
| WinNat | Windows NAT Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\winnat.sys | Windows NAT Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WINUSB | WinUsb Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\winusb.sys | Windows WinUSB Class Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WinVerbs | WinVerbs Service | 5.50.14695.0 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\winverbs.sys | Kernel WinVerbs / OpenFabrics Windows | Mellanox |
| WmiAcpi | Microsoft Windows Management Interface for ACPI | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\wmiacpi.sys | Windows Management Interface for ACPI / Microsoft® Windows® Operating System | Microsoft Corporation |
| Wof | Windows Overlay File System Filter Driver | | File System Driver | Running | Boot Start | | | |
| WpdUpFltr | WPD Upper Class Filter Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WpdUpFltr.sys | Windows Portable Device Upper Class Filter Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| ws2ifsl | Winsock IFS Driver | 10.0.19041.1 | Kernel Driver | Stopped | Disabled | C:\Windows\System32\drivers\ws2ifsl.sys | Winsock2 IFS Layer / Microsoft® Windows® Operating System | Microsoft Corporation |
| WSDPrintDevice | WSD Print Support | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WSDPrint.sys | Web Services Print Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WSDScan | WSD Scan Support | 10.0.19041.21 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WSDScan.sys | Web Service Based Scan Device Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WudfPf | User Mode Driver Frameworks Platform Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\WUDFPf.sys | Windows Driver Foundation - User-mode Driver Framework Platform Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| WUDFRd | Windows Driver Foundation - User-mode Driver Framework Reflector | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WUDFRd.sys | Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System | Microsoft Corporation |
| WUDFWpdFs | WPD File System driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\WUDFRd.sys | Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System | Microsoft Corporation |
| xboxgip | Xbox Game Input Protocol Driver | 10.0.19041.1 | Kernel Driver | Running | Demand Start | C:\Windows\System32\drivers\xboxgip.sys | Game Input Protocol Driver / Microsoft® Windows® Operating System | Microsoft Corporation |
| xinputhid | XINPUT HID Filter Driver | 10.0.19041.1 | Kernel Driver | Stopped | Demand Start | C:\Windows\System32\drivers\xinputhid.sys | XINPUT filter driver for HID / Microsoft® Windows® Operating System | Microsoft Corporation |
| cpuz149 | cpuz149 | 1.0.4.9 | Kernel Driver | Running | Demand Start | C:\Windows\Temp\cpuz149\cpuz149_x64.sys | CPUID Driver / CPUID service | CPUID |