---------- [Operating System] ---------------------------------- Property Value Windows 10 Name Windows 10 Pro x64, version 2004 Version 2004 (OS Build 19041.153) Product Name Windows 10 Pro Code Name 20H1 Features 64 Bit Edition, Terminal Services in Remote Admin Mode, Tablet PC Edition, Multiprocessor Free, OEM-Version Edition Type Professional Edition ID [TH]X19-99497 Key Type OEM:DM EULA OEM SKU 0x30 Windows 10 Pro Computer Name BOOK2-GABI Computer Description Gabriel's Surface Book2 Windows Insider Program Disabled Windows Sandbox No Language English Safe Mode No Activation Status Activated License Status Licensed [Windows(R) Operating System, OEM_DM channel] Genuine Yes Checked Build No UAC Enabled Yes OS Root C:\Windows\ Boot Device \Device\HarddiskVolume1 System Device \Device\HarddiskVolume3 Kernel Version 10.0.19041.1 KernelBase Version 10.0.19041.153 Build Branch vb_release Build Lab 19041.vb_release.191206-1406 Build Lab Ex 19041.1.amd64fre.vb_release.191206-1406 Security 256 bits MMC Version 3.0 Hardware DEP Available Yes Device Guard Running Automatic Updates Enabled Registration Windows To Go No Boot Time 2020-03-17 10:45:32 (Tuesday, March 17, 2020) Up Time 6 Days 22 Hours 38 Minutes 51 seconds Installation Time 2020-02-25 19:54:30 (Tuesday, February 25, 2020) Installation History System Restore Enabled ---------- [Installed Updates] --------------------------------- Name HotFix Category Date Client Source idx Security Intelligence Update for Windows Defender Antivirus - KB2267602 (Version 1.311.1837.0) KB2267602 Security Update 2020-03-23 (Monday, March 23, 2020) MoUpdateOrchestrator Microsoft Update 1 Update for Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2003.6) KB4052623 Security Update 2020-03-20 (Friday, March 20, 2020) Windows Defender Microsoft Update 2 Surface - Net - 10.14.117.2020 Driver 2020-03-18 (Wednesday, March 18, 2020) MoUpdateOrchestrator OS Flighting 3 2020-03 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4541738) KB4541738 Update 2020-03-14 (Saturday, March 14, 2020) MoUpdateOrchestrator WSUS 4 2020-03 Servicing Stack Update for Windows 10 Version 2004 for x64-based Systems (KB4545706) KB4545706 Security Update 2020-03-14 (Saturday, March 14, 2020) MoUpdateOrchestrator WSUS 5 Windows Malicious Software Removal Tool x64 - March 2020 (KB890830) KB890830 Security Update 2020-03-10 (Tuesday, March 10, 2020) MoUpdateOrchestrator Microsoft Update 6 Windows Insider Pre-release Feature Update to Windows 10 (consumer editions), version 2004, en-us x64 2020-02-26 (Wednesday, February 26, 2020) UpdateOrchestrator WSUS 7 KB2468871 KB2468871 Microsoft .NET Framework 4 Client Profile Not Available 8 KB2468871v2 KB2468871v2 Microsoft .NET Framework 4 Client Profile Not Available 9 KB2478063 KB2478063 Microsoft .NET Framework 4 Client Profile Not Available 10 KB2533523 KB2533523 Microsoft .NET Framework 4 Client Profile Not Available 11 KB2544514 KB2544514 Microsoft .NET Framework 4 Client Profile Not Available 12 KB2600211 KB2600211 Microsoft .NET Framework 4 Client Profile Not Available 13 KB2600217 KB2600217 Microsoft .NET Framework 4 Client Profile Not Available 14 KB4534170 KB4534170 Update Not Available 15 KB4537759 KB4537759 Security Update Not Available 16 ---------- [Security] ------------------------------------------ Property Value Security Provider Health Firewall Good Autoupdate Settings Good AntiVirus Good AntiSpyware Good Internet Settings Good User Account Control Good Service Good Firewall Windows Firewall Program C:\Windows\System32\FirewallControlPanel.dll Company Microsoft Corporation Version 10.0.19041.1 GUID {304CE942-6E39-40D8-943A-B913C40C9CD4} Status Active AntiVirus Windows Defender Program C:\Program Files\Windows Defender\MsMpEng.exe Company Microsoft Corporation Version 4.18.1909.6 GUID {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} Status Active, Auto-Update, Up-To-Date AntiSpyware Windows Defender Program C:\Program Files\Windows Defender\MsMpEng.exe Company Microsoft Corporation Version 4.18.1909.6 GUID {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} Status Active, Auto-Update, Up-To-Date Audit Policy System Security State Change Security System Extension System Integrity IPsec Driver Other System Events Logon/Logoff Logon Logoff Account Lockout IPsec Main Mode IPsec Quick Mode IPsec Extended Mode Special Logon Other Logon/Logoff Events Network Policy Server User / Device Claims Group Membership Object Access File System Registry Kernel Object SAM Certification Services Application Generated Handle Manipulation File Share Filtering Platform Packet Drop Filtering Platform Connection Other Object Access Events Detailed File Share Removable Storage Central Policy Staging Privilege Use Sensitive Privilege Use Non Sensitive Privilege Use Other Privilege Use Events Detailed Tracking Process Creation Process Termination DPAPI Activity RPC Events Plug and Play Events Token Right Adjusted Events Policy Change Audit Policy Change Authentication Policy Change Authorization Policy Change MPSSVC Rule-Level Policy Change Filtering Platform Policy Change Other Policy Change Events Account Management User Account Management Computer Account Management Security Group Management Distribution Group Management Application Group Management Other Account Management Events DS Access Directory Service Access Directory Service Changes Directory Service Replication Detailed Directory Service Replication Account Logon Credential Validation Kerberos Service Ticket Operations Other Account Logon Events Kerberos Authentication Service ---------- [Running Processes] --------------------------------- PID Image Name Version Name Type Parent PID Threads Priority Window Title Creation Time Running Time Kernel Time User Time Size File Name and Path Command Line with Parameters 0 [System Process] 0 8 0 8,192 4 System 0 263 8 2,826,240 72 Secure System 4 0 8 47,534,080 132 Registry 4 4 8 93,257,728 444 services.exe 10.0.19041.1 Services and Controller app / Microsoft® Windows® Operating System 64-bit 956 11 9 10,473,472 C:\Windows\System32\services.exe 492 smss.exe 10.0.19041.1 Windows Session Manager / Microsoft® Windows® Operating System 64-bit 4 2 11 999,424 C:\Windows\System32\smss.exe 548 LsaIso.exe 10.0.19041.1 Credential Guard & Key Guard / Microsoft® Windows® Operating System 64-bit 956 3 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 3,325,952 C:\Windows\System32\LsaIso.exe 560 lsass.exe 10.0.19041.1 Local Security Authority Process / Microsoft® Windows® Operating System 64-bit 956 11 9 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 09m 13s 0h 11m 35s 23,707,648 C:\Windows\System32\lsass.exe C:\WINDOWS\system32\lsass.exe 792 SearchIndexer.exe 7.0.19041.153 Microsoft Windows Search Indexer / Windows® Search 64-bit 444 21 8 2020-03-19 19:30:06 (Thursday, March 19, 2020) 4d 17h 54m 19s 0h 01m 20s 0h 05m 00s 54,620,160 C:\Windows\System32\SearchIndexer.exe C:\WINDOWS\system32\SearchIndexer.exe /Embedding 808 csrss.exe 10.0.19041.1 Client Server Runtime Process / Microsoft® Windows® Operating System 64-bit 612 13 13 3,407,872 C:\Windows\System32\csrss.exe 956 wininit.exe 10.0.19041.1 Windows Start-Up Application / Microsoft® Windows® Operating System 64-bit 612 3 13 4,227,072 C:\Windows\System32\wininit.exe 976 csrss.exe 10.0.19041.1 Client Server Runtime Process / Microsoft® Windows® Operating System 64-bit 948 20 13 5,451,776 C:\Windows\System32\csrss.exe 1060 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 2,879,488 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s PlugPlay 1072 OfficeClickToRun.exe 16.0.12527.20242 Microsoft Office Click-to-Run (SxS) / Microsoft Office 64-bit 444 19 8 2020-03-17 14:46:57 (Tuesday, March 17, 2020) 6d 22h 37m 28s 0h 00m 20s 0h 00m 15s 32,628,736 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service 1088 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 25 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 02m 25s 0h 01m 45s 36,052,992 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p 1096 fontdrvhost.exe 10.0.19041.1 Usermode Font Driver Host / Microsoft® Windows® Operating System 64-bit 956 5 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 2,023,424 C:\Windows\System32\fontdrvhost.exe "fontdrvhost.exe" 1116 mRemoteNG.exe 1.76.20.24669 mRemoteNG 32-bit 9868 37 8 mRemoteNG - C:\utils\mremoreng\confCons.xml - BuildCenter 2020-03-19 23:47:17 (Thursday, March 19, 2020) 4d 13h 37m 08s 0h 07m 27s 0h 06m 04s 85,491,712 C:\utils\mremoreng\mRemoteNG.exe "C:\utils\mremoreng\mRemoteNG.exe" 1144 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 19 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 09s 0h 00m 14s 12,361,728 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-9377ebc9-f3fc-443a-b7e4-01ca0cd84b96 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-73e15d1c-e96e-4c5c-9ff2-05505de285c2 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-04ccd672-ab8e-4b16-81b2-c35bf20be441 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c009a279-1e62-4109-b616-23cd0f92dd82 -LifetimeId:519ec823-ea3a-4970-ab6d-51233a4c22aa -DeviceGroupId:WudfDefaultDevicePool -HostArg:0 1212 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 12 13 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 12s 0h 00m 06s 10,301,440 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e465f32a-2db6-4b9f-a51e-e24f5ed3b094 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-718f05b5-d52b-4528-9aec-8c21534077e7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-16b84781-96a9-4a15-bdf8-d4fde7e63bba -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-c86f06d6-012b-4802-b56d-3a50baa4bc98 -LifetimeId:49262541-7b21-4856-aec8-03492a50b624 -DeviceGroupId: -HostArg:0 1268 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 16 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 03m 05s 0h 05m 44s 27,095,040 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k RPCSS -p 1320 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 6 8 2020-03-17 14:46:11 (Tuesday, March 17, 2020) 6d 22h 38m 13s 0h 00m 21s 0h 00m 22s 7,163,904 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM 1412 winlogon.exe 10.0.19041.1 Windows Logon Application / Microsoft® Windows® Operating System 64-bit 948 6 13 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 04s 0h 00m 00s 8,806,400 C:\Windows\System32\winlogon.exe winlogon.exe 1468 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 3,805,184 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-363b9f54-d7cc-41e4-9880-466f169820a6 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2c3ae7c7-fe36-4f4c-a746-4a9885f4fa5c -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1cdca7a4-7649-484d-a1bf-2cdeeab55e08 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0570f2d7-1175-4b1a-b728-439347482bfa -LifetimeId:e2c6c3bc-64da-4ccd-a10a-9bc23cd434a0 -DeviceGroupId: -HostArg:0 1476 SkypeApp.exe 8.56.0.102 SkypeApp / Microsoft Skype 64-bit 1088 47 8 2020-03-17 15:16:18 (Tuesday, March 17, 2020) 6d 22h 08m 07s 0h 00m 04s 0h 00m 07s 4,661,248 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe "C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca 1512 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 18,128,896 C:\Windows\System32\svchost.exe 1516 fontdrvhost.exe 10.0.19041.1 Usermode Font Driver Host / Microsoft® Windows® Operating System 64-bit 1412 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 12s 0h 00m 14s 9,367,552 C:\Windows\System32\fontdrvhost.exe "fontdrvhost.exe" 1620 dwm.exe 10.0.19041.1 Desktop Window Manager / Microsoft® Windows® Operating System 64-bit 1412 16 13 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 27m 43s 1h 08m 28s 119,480,320 C:\Windows\System32\dwm.exe "dwm.exe" 1652 TextInputHost.exe 1907.3183.0.11830 Microsoft® Windows® Operating System 64-bit 1088 12 8 Microsoft Text Input Application 2020-03-17 14:46:32 (Tuesday, March 17, 2020) 6d 22h 37m 53s 0h 00m 15s 0h 00m 14s 18,317,312 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca 1672 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 63 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 17m 49s 0h 08m 09s 11,898,880 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k NetworkService -s TermService 1684 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 01s 0h 00m 00s 4,530,176 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s XboxGipSvc 1696 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 03s 0h 00m 00s 5,996,544 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BDESVC 1736 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 4,272,128 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts 1764 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 3,751,936 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s HvHost 1788 Taskmgr.exe 10.0.19041.84 Task Manager / Microsoft® Windows® Operating System 64-bit 9868 16 8 2020-03-17 14:46:47 (Tuesday, March 17, 2020) 6d 22h 37m 38s 0h 17m 39s 0h 08m 17s 29,966,336 C:\Windows\System32\Taskmgr.exe "C:\Windows\System32\Taskmgr.exe" 1816 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 10s 0h 00m 14s 8,118,272 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi 1836 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 5,210,112 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -s BTAGService 1848 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 13 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 04m 50s 0h 08m 52s 11,808,768 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s bthserv 1880 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 33s 0h 00m 29s 6,946,816 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p 1900 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 6 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 28s 0h 00m 21s 7,950,336 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s BthAvctpSvc 1936 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 6,504,448 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc 1944 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 17s 0h 00m 09s 7,135,232 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService 2152 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 14 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 22s 0h 00m 10s 12,677,120 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Schedule 2208 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 10 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 28s 0h 00m 15s 9,199,616 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k appmodel -p -s camsvc 2280 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 7,868,416 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s ProfSvc 2288 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 4,521,984 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s PhoneSvc 2312 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 01s 0h 00m 02s 4,431,872 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p 2344 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 6,291,456 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService 2472 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 03s 0h 00m 01s 4,837,376 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv 2484 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 4,837,376 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s UmRdpService 2500 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 20s 0h 00m 20s 6,213,632 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 2556 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 31s 0h 00m 17s 8,200,192 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager 2684 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 10 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 5,754,880 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SensrSvc 2720 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 5,152,768 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SensorService 2788 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 5,287,936 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService 2876 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 9 8 8,970,240 C:\Windows\System32\svchost.exe 2880 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 40s 0h 00m 35s 14,770,176 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog 2884 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 24m 03s 0h 10m 48s 8,450,048 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-35f5b8fe-c2b7-4f85-a6fd-89bc7ae0ef0d -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-77f84a38-7370-477c-8838-5dcc45d733b0 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7872324c-b996-4f97-a027-76dec44f6d59 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cf42f6cf-d8a3-4d00-a3ee-8cc4055468f0 -LifetimeId:2cef4c6e-48c8-4947-a065-43f79f5ffb84 -DeviceGroupId: -HostArg:0 2888 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 3,788,800 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc 3288 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 45s 0h 00m 18s 5,701,632 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc 3328 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 39s 0h 02m 56s 20,369,408 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository 3344 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 37 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 29s 0h 01m 00s 22,806,528 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt 3376 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 00s 0h 00m 00s 7,065,600 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -s CertPropSvc 3460 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 35s 0h 00m 12s 9,986,048 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s NlaSvc 3492 vmms.exe 10.0.19041.153 Virtual Machine Management Service / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:12 (Tuesday, March 17, 2020) 6d 22h 38m 12s 0h 00m 05s 0h 00m 02s 23,396,352 C:\Windows\System32\vmms.exe C:\WINDOWS\system32\vmms.exe 3508 ONENOTEM.EXE 16.0.12527.20278 Send to OneNote Tool / Microsoft OneNote 32-bit 9868 2 8 2020-03-17 14:46:47 (Tuesday, March 17, 2020) 6d 22h 37m 38s 0h 00m 00s 0h 00m 00s 1,122,304 C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE "C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE" sr 3548 Dropbox.exe 93.4.273.0 Dropbox 32-bit 12744 6 8 2020-03-20 18:51:14 (Friday, March 20, 2020) 3d 18h 33m 11s 0h 00m 00s 0h 00m 00s 9,027,584 C:\Program Files (x86)\Dropbox\Client\Dropbox.exe "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:crashpad-handler --no-upload-gzip --no-rate-limit --capture-python --no-identify-client-via-url --database=C:\Users\gtopa\AppData\Local\Dropbox\Crashpad --metrics-dir=0 --url=https://d.dropbox.com/report_crashpad_minidump --https-pin=0x23,0xf2,0xed,0xff,0x3e,0xde,0x90,0x25,0x9a,0x9e,0x30,0xf4,0xa,0xf8,0xf9,0x12,0xa5,0xe5,0xb3,0x69,0x4e,0x69,0x38,0x44,0x3,0x41,0xf6,0x6,0xe,0x1,0x4f,0xfa --https-pin=0xaf,0xf9,0x88,0x90,0x6d,0xde,0x12,0x95,0x5d,0x9b,0xeb,0xbf,0x92,0x8f,0xdc,0xc3,0x1c,0xce,0x32,0x8d,0x5b,0x93,0x84,0xf2,0x1c,0x89,0x41,0xca,0x26,0xe2,0x3,0x91 --https-pin=0x5a,0x88,0x96,0x47,0x22,0xe,0x54,0xd6,0xbd,0x8a,0x16,0x81,0x72,0x24,0x52,0xb,0xb5,0xc7,0x8e,0x58,0x98,0x4b,0xd5,0x70,0x50,0x63,0x88,0xb9,0xde,0xf,0x7,0x5f --https-pin=0xfe,0xa2,0xb7,0xd6,0x45,0xfb,0xa7,0x3d,0x75,0x3c,0x1e,0xc9,0xa7,0x87,0xc,0x40,0xe1,0xf7,0xb0,0xc5,0x61,0xe9,0x27,0xb9,0x85,0xbf,0x71,0x18,0x66,0xe3,0x6f,0x22 --https-pin=0x76,0xee,0x85,0x90,0x37,0x4c,0x71,0x54,0x37,0xbb,0xca,0x6b,0xba,0x60,0x28,0xea,0xdd,0xe2,0xdc,0x6d,0xbb,0xb8,0xc3,0xf6,0x10,0xe8,0x51,0xf1,0x1d,0x1a,0xb7,0xf5 --https-pin=0x6d,0xbf,0xae,0x0,0xd3,0x7b,0x9c,0xd7,0x3f,0x8f,0xb4,0x7d,0xe6,0x59,0x17,0xaf,0x0,0xe0,0xdd,0xdf,0x42,0xdb,0xce,0xac,0x20,0xc1,0x7c,0x2,0x75,0xee,0x20,0x95 --https-pin=0x1e,0xa3,0xc5,0xe4,0x3e,0xd6,0x6c,0x2d,0xa2,0x98,0x3a,0x42,0xa4,0xa7,0x9b,0x1e,0x90,0x67,0x86,0xce,0x9f,0x1b,0x58,0x62,0x14,0x19,0xa0,0x4,0x63,0xa8,0x7d,0x38 --https-pin=0x87,0xaf,0x34,0xd6,0x6f,0xb3,0xf2,0xfd,0xf3,0x6e,0x9,0x11,0x1e,0x9a,0xba,0x2f,0x6f,0x44,0xb2,0x7,0xf3,0x86,0x3f,0x3d,0xb,0x54,0xb2,0x50,0x23,0x90,0x9a,0xa5 --https-pin=0xbc,0xfb,0x44,0xaa,0xb9,0xad,0x2,0x10,0x15,0x70,0x6b,0x41,0x21,0xea,0x76,0x1c,0x81,0xc9,0xe8,0x89,0x67,0x59,0xf,0x6f,0x94,0xae,0x74,0x4d,0xc8,0x8b,0x78,0xfb --https-pin=0xab,0x98,0x49,0x52,0x76,0xad,0xf1,0xec,0xaf,0xf2,0x8f,0x35,0xc5,0x30,0x48,0x78,0x1e,0x5c,0x17,0x18,0xda,0xb9,0xc8,0xe6,0x7a,0x50,0x4f,0x4f,0x6a,0x51,0x32,0x8f --https-pin=0x49,0x5,0x46,0x66,0x23,0xab,0x41,0x78,0xbe,0x92,0xac,0x5c,0xbd,0x65,0x84,0xf7,0xa1,0xe1,0x7f,0x27,0x65,0x2d,0x5a,0x85,0xaf,0x89,0x50,0x4e,0xa2,0x39,0xaa,0xaa --https-pin=0x56,0x32,0xd9,0x7b,0xfa,0x77,0x5b,0xf3,0xc9,0x9d,0xde,0xa5,0x2f,0xc2,0x55,0x34,0x10,0x86,0x40,0x16,0x72,0x9c,0x52,0xdd,0x65,0x24,0xc8,0xa9,0xc3,0xb4,0x48,0x9f --https-pin=0x2a,0x8f,0x2d,0x8a,0xf0,0xeb,0x12,0x38,0x98,0xf7,0x4c,0x86,0x6a,0xc3,0xfa,0x66,0x90,0x54,0xe2,0x3c,0x17,0xbc,0x7a,0x95,0xbd,0x2,0x34,0x19,0x2d,0xc6,0x35,0xd0 --https-pin=0x32,0xb6,0x4b,0x66,0x72,0x7a,0x20,0x63,0xe4,0x6,0x6f,0x3b,0x95,0x8c,0xb0,0xaa,0xee,0x57,0x6a,0x5e,0xce,0xfd,0x95,0x33,0x99,0xbb,0x88,0x74,0x73,0x1d,0x95,0x87 --https-pin=0xf5,0x3c,0x22,0x5,0x98,0x17,0xdd,0x96,0xf4,0x0,0x65,0x16,0x39,0xd2,0xf8,0x57,0xe2,0x10,0x70,0xa5,0x9a,0xbe,0xd9,0x7,0x94,0x0,0xd9,0xf6,0x95,0x50,0x69,0x0 --https-pin=0x67,0xdc,0x4f,0x32,0xfa,0x10,0xe7,0xd0,0x1a,0x79,0xa0,0x73,0xaa,0xc,0x9e,0x2,0x12,0xec,0x2f,0xfc,0x3d,0x77,0x9e,0xa,0xa7,0xf9,0xc0,0xf0,0xe1,0xc2,0xc8,0x93 --https-pin=0x19,0x6,0xc6,0x12,0x4d,0xbb,0x43,0x85,0x78,0xd0,0xe,0x6,0x6d,0x50,0x54,0xc6,0xc3,0x7f,0xf,0xa6,0x2,0x8c,0x5,0x54,0x5e,0x9,0x94,0xed,0xda,0xec,0x86,0x29 --https-pin=0x1d,0x75,0xd0,0x83,0x1b,0x9e,0x8,0x85,0x39,0x4d,0x32,0xc7,0xa1,0xbf,0xdb,0x3d,0xbc,0x1c,0x28,0xe2,0xb0,0xe8,0x39,0x1f,0xb1,0x35,0x98,0x1d,0xbc,0x5b,0xa9,0x36 --annotation=host_int_account1_boot=34345911360 --annotation=machine_id=b1519b9f-bb6e-4227-8eb7-e99d19dda9b1 --annotation=platform=win "--annotation=platform_version=10 2004" --initial-client-data=0x234,0x23c,0x240,0x198,0x244,0x6fbe0560,0x6fbe0588,0x6fbe0570 3616 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 03m 13s 0h 01m 25s 8,331,264 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s Dnscache 3652 NVDisplay.Container.exe 1.2.0.0 NVIDIA Container 64-bit 444 10 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 03s 0h 00m 08s 7,970,816 C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 3748 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 13 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 02m 15s 0h 01m 51s 13,717,504 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalService -p -s netprofm 3756 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 01s 0h 00m 01s 6,598,656 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem 3768 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 6 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 10m 45s 0h 00m 35s 8,814,592 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain 3812 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 02s 0h 00m 01s 3,985,408 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes 3844 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 03m 36s 0h 03m 18s 5,124,096 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation 3880 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 01s 0h 00m 00s 6,373,376 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p 3888 Memory Compression 4 102 8 990,769,152 3984 NVDisplay.Container.exe 1.2.0.0 NVIDIA Container 64-bit 3652 22 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 24s 0h 00m 26s 18,485,248 C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c 4020 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 00s 0h 00m 00s 6,889,472 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS 4076 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 10 13 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 06m 59s 0h 08m 27s 7,467,008 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-eb160f2e-84e7-47d4-bf1b-1788fdb2d599 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2ec9bb7d-19e7-4435-865c-b9ff98a6eea7 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e57c1805-2723-437d-a026-4cd95468ab3a -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-345e2b44-7b58-400e-930f-c84624526285 -LifetimeId:49850cba-5665-4a03-86e9-31ac11c17a0f -DeviceGroupId:WudfDefaultDevicePoolPriorityHigh -HostArg:0 4100 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 04s 0h 00m 00s 6,467,584 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder 4116 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 07s 0h 00m 08s 6,094,848 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache 4176 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 01s 7,856,128 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k NetSvcs -p -s iphlpsvc 4180 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 00s 0h 00m 00s 5,853,184 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SessionEnv 4188 smartscreen.exe 10.0.19041.84 Windows Defender SmartScreen / Microsoft® Windows® Operating System 64-bit 1088 16 8 2020-03-23 17:38:21 (Monday, March 23, 2020) 0d 19h 46m 04s 0h 00m 10s 0h 00m 15s 36,433,920 C:\Windows\System32\smartscreen.exe C:\Windows\System32\smartscreen.exe -Embedding 4244 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 02s 0h 00m 00s 5,050,368 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService 4272 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:47:36 (Tuesday, March 17, 2020) 6d 22h 36m 49s 0h 00m 01s 0h 00m 01s 15,953,920 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p 4320 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 13 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 03m 55s 0h 00m 56s 9,269,248 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k NetSvcs -p -s hns 4452 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 00s 0h 00m 00s 4,046,848 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s fdPHost 4504 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 00s 0h 00m 00s 5,197,824 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k NetSvcs -s nvagent 4596 armsvc.exe 1.824.36.9436 Adobe Acrobat Update Service 32-bit 444 2 8 2020-03-19 19:30:09 (Thursday, March 19, 2020) 4d 17h 54m 16s 0h 00m 00s 0h 00m 00s 3,489,792 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" 4600 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 05s 0h 00m 07s 6,414,336 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s FDResPub 4620 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:20 (Tuesday, March 17, 2020) 6d 22h 38m 05s 0h 00m 00s 0h 00m 01s 6,340,608 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc 4632 TOTALCMD64.EXE 9.5.0.0 Total Commander 64-bit 9868 29 8 Total Commander (x64) 9.50 - Gabriel Topala 2020-03-23 16:39:23 (Monday, March 23, 2020) 0d 20h 45m 02s 0h 01m 27s 0h 00m 30s 62,504,960 C:\totalcmd\TOTALCMD64.EXE "C:\totalcmd\TOTALCMD64.EXE" 4712 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 14 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 30s 0h 00m 30s 15,507,456 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p 4820 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 14s 0h 00m 07s 12,013,568 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p 4856 QtWebEngineProcess.exe 5.13.2.0 Qt Qtwebengineprocess / Qt5 32-bit 12744 17 4 2020-03-20 18:51:23 (Friday, March 20, 2020) 3d 18h 33m 02s 0h 01m 00s 0h 01m 08s 67,198,976 C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=5643575549165785889 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=5643575549165785889 --renderer-client-id=3 --mojo-platform-channel-handle=7088 /prefetch:1 5080 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:13 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 18s 0h 00m 04s 4,812,800 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p 5172 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 13 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 01m 10s 0h 01m 03s 14,319,616 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p 5220 SkypeBackgroundHost.exe 8.56.0.102 64-bit 1088 4 8 2020-03-17 15:16:18 (Tuesday, March 17, 2020) 6d 22h 08m 07s 0h 00m 00s 0h 00m 00s 2,347,008 C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe "C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost 5308 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 00s 6,209,536 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s SharedAccess 5324 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 08s 0h 00m 03s 10,727,424 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection 5448 SurfaceUsbHubFwUpdateService.exe 1.16.136.0 Surface Usb Hub Firmware Update Service / Surface 64-bit 444 2 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 3,850,240 C:\Windows\System32\SurfaceUsbHubFwUpdateService.exe C:\WINDOWS\System32\SurfaceUsbHubFwUpdateService.exe 5456 spoolsv.exe 10.0.19041.1 Spooler SubSystem App / Microsoft® Windows® Operating System 64-bit 444 16 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 03s 0h 00m 03s 16,855,040 C:\Windows\System32\spoolsv.exe C:\WINDOWS\System32\spoolsv.exe 5492 vmcompute.exe 10.0.19041.153 Hyper-V Host Compute Service / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 5,382,144 C:\Windows\System32\vmcompute.exe C:\WINDOWS\system32\vmcompute.exe 5516 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:48:17 (Tuesday, March 17, 2020) 6d 22h 36m 08s 0h 00m 00s 0h 00m 00s 14,548,992 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup 5604 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-20 12:47:13 (Friday, March 20, 2020) 4d 00h 37m 12s 0h 00m 00s 0h 00m 00s 8,859,648 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-e2bc04a4-687d-4b9c-af44-218044b1d637 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-7d6e66ce-b1e4-487e-9e71-e6763f5c3e3c -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-71ae7c9e-f847-4b6f-bdcc-6b1b2e63915f -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-bfa10ff2-0730-4b3e-91af-f814fed6f769 -LifetimeId:307b8484-982b-4121-a4e3-85ab93e0c72b -DeviceGroupId:WpdFsGroup -HostArg:0 5664 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 4,288,512 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s CmService 5672 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 12s 0h 00m 31s 181,325,824 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc 5724 dasHost.exe 10.0.19041.1 Device Association Framework Provider Host / Microsoft® Windows® Operating System 64-bit 4244 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 29s 0h 00m 32s 12,656,640 C:\Windows\System32\dasHost.exe dashost.exe {84faf3b5-2e17-4ddb-8d91209b83d4998b} 5792 IntelCpHDCPSvc.exe 25.20.100.6472 Intel HD Graphics Drivers for Windows(R) 64-bit 444 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 4,382,720 C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe 5824 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 15s 0h 00m 07s 14,602,240 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k NetworkService -p -s CryptSvc 5836 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 18 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 49s 0h 00m 46s 30,134,272 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k utcsvc -p 5864 esif_uf.exe 8.3.10207.5567 Intel(R) Dynamic Platform and Thermal Framework 64-bit 444 3 13 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 4,083,712 C:\Windows\System32\Intel\DPTF\esif_uf.exe C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe 5880 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 19 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 06m 15s 0h 05m 03s 39,055,360 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS 6064 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 3,731,456 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s SstpSvc 6072 SurfaceColorService.exe 2.0.366.0 Surface Color Profile Service / Surface 64-bit 444 1 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 4,440,064 C:\Windows\System32\SurfaceColorService.exe C:\WINDOWS\System32\SurfaceColorService.exe 6100 SurfaceDtxService.exe 3.32.139.0 Surface DTX Service / Surface 64-bit 444 2 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 00s 3,747,840 C:\Windows\System32\SurfaceDtxService.exe C:\WINDOWS\system32\SurfaceDtxService.exe 6140 SurfaceService.exe 4.14.139.0 Surface Service / Surface 64-bit 444 7 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 00s 5,337,088 C:\Windows\System32\SurfaceService.exe C:\WINDOWS\System32\SurfaceService.exe 6152 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 4,173,824 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks 6180 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 02s 0h 00m 03s 10,731,520 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k imgsvc 6196 dptf_helper.exe 8.3.10207.5567 Intel(R) Dynamic Platform and Thermal Framework Utility Application 64-bit 5864 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 29s 0h 00m 13s 3,125,248 C:\Windows\System32\Intel\DPTF\dptf_helper.exe "C:\WINDOWS\system32\Intel\DPTF\dptf_helper.exe" 6204 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 01s 0h 00m 01s 6,483,968 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer 6232 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 7 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 02s 0h 00m 02s 16,703,488 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s WpnService 6332 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:15 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 00s 7,860,224 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs 6484 siw64.exe 64-bit 4632 164 8 SIW 2020 64-bit v10.2.0322 (Licensed To Gabriel Topala) - running on \\BOOK2-GABI 2020-03-24 13:22:28 (Tuesday, March 24, 2020) 0d 00h 01m 57s 0h 01m 14s 0h 00m 19s 114,266,112 \\dell8700\share\siw_test\siw\new\siw64.exe "\\dell8700\share\siw_test\siw\new\siw64.exe" 6820 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 21:06:02 (Tuesday, March 17, 2020) 6d 16h 18m 23s 0h 00m 00s 0h 00m 00s 6,000,640 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s QWAVE 6836 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 10 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 34s 0h 00m 59s 6,549,504 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV 6856 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 4 8 2020-03-17 15:55:53 (Tuesday, March 17, 2020) 6d 21h 28m 32s 0h 00m 03s 0h 00m 02s 25,710,592 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 6892 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:14 (Tuesday, March 17, 2020) 6d 22h 38m 11s 0h 00m 00s 0h 00m 00s 3,837,952 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalService -p -s WdiServiceHost 6932 rundll32.exe 10.0.19041.1 Windows host process (Rundll32) / Microsoft® Windows® Operating System 64-bit 1088 6 8 2020-03-17 14:46:15 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 01s 0h 00m 00s 8,826,880 C:\Windows\System32\rundll32.exe C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding 7032 IntelCpHeciSvc.exe 9.1.1.1117 IntelCpHeciSvc Executable 64-bit 444 3 8 2020-03-17 14:46:15 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 00s 0h 00m 00s 5,459,968 C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe 7224 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:15 (Tuesday, March 17, 2020) 6d 22h 38m 10s 0h 00m 04s 0h 00m 02s 5,926,912 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent 7400 dasHost.exe 10.0.19041.1 Device Association Framework Provider Host / Microsoft® Windows® Operating System 64-bit 4244 1 8 2020-03-17 14:46:16 (Tuesday, March 17, 2020) 6d 22h 38m 09s 0h 00m 00s 0h 00m 00s 3,231,744 C:\Windows\System32\dasHost.exe dashost.exe {b08a263e-2e6b-4fed-84ee8d01f60f5f74} 7748 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 12 8 2020-03-17 14:46:16 (Tuesday, March 17, 2020) 6d 22h 38m 09s 0h 00m 03s 0h 00m 01s 15,400,960 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc 7960 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 4 8 2020-03-24 02:48:55 (Tuesday, March 24, 2020) 0d 10h 35m 30s 0h 00m 00s 0h 00m 00s 18,468,864 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 8280 sihost.exe 10.0.19041.1 Shell Infrastructure Host / Microsoft® Windows® Operating System 64-bit 2556 12 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 43s 0h 00m 25s 26,710,016 C:\Windows\System32\sihost.exe sihost.exe 8304 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 11 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 04m 29s 0h 03m 31s 24,649,728 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc 8312 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 06s 0h 00m 03s 5,758,976 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p -s BluetoothUserService 8384 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-18 01:32:24 (Wednesday, March 18, 2020) 6d 11h 52m 01s 0h 00m 00s 0h 00m 00s 6,397,952 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc 8388 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 16 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 41s 0h 01m 11s 38,236,160 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService 8516 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 10 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 01m 37s 0h 03m 49s 15,884,288 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s TokenBroker 8536 DropboxUpdate.exe 1.3.27.73 Dropbox Update 32-bit 2152 3 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 01s 0h 00m 00s 2,084,864 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe "C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /c 8548 SettingSyncHost.exe 10.0.19041.1 Host Process for Setting Synchronization / Microsoft® Windows® Operating System 64-bit 1088 7 6 2020-03-17 14:46:18 (Tuesday, March 17, 2020) 6d 22h 38m 07s 0h 01m 00s 0h 00m 35s 8,339,456 C:\Windows\System32\SettingSyncHost.exe C:\WINDOWS\system32\SettingSyncHost.exe -Embedding 8576 taskhostw.exe 10.0.19041.1 Host Process for Windows Tasks / Microsoft® Windows® Operating System 64-bit 2152 10 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 23s 0h 00m 19s 19,107,840 C:\Windows\System32\taskhostw.exe taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E} 8596 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 2 8 2020-03-17 14:46:20 (Tuesday, March 17, 2020) 6d 22h 38m 05s 0h 00m 00s 0h 00m 00s 5,591,040 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc 8604 SurfaceColorTracker.exe 2.0.366.0 Surface Color Profile Tracker / Surface 64-bit 2152 1 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 04s 0h 00m 00s 1,818,624 C:\Windows\System32\SurfaceColorTracker.exe C:\WINDOWS\System32\SurfaceColorTracker.exe 8668 QtWebEngineProcess.exe 5.13.2.0 Qt Qtwebengineprocess / Qt5 32-bit 12744 16 4 2020-03-20 18:51:23 (Friday, March 20, 2020) 3d 18h 33m 02s 0h 00m 00s 0h 00m 00s 39,948,288 C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=16129899374287304221 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=16129899374287304221 --renderer-client-id=4 --mojo-platform-channel-handle=7352 /prefetch:1 8776 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:20 (Tuesday, March 17, 2020) 6d 22h 38m 05s 0h 00m 05s 0h 00m 06s 28,590,080 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc 8984 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 00m 47s 0h 00m 18s 15,220,736 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s lfsvc 9096 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 9 8 2020-03-17 14:46:17 (Tuesday, March 17, 2020) 6d 22h 38m 08s 0h 01m 02s 0h 01m 53s 15,687,680 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s CDPSvc 9428 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:48:14 (Tuesday, March 17, 2020) 6d 22h 36m 11s 0h 00m 53s 0h 00m 21s 14,368,768 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc 9620 AcrobatNotificationClient.exe 32-bit 1088 13 8 2020-03-21 17:29:24 (Saturday, March 21, 2020) 2d 19h 55m 01s 0h 00m 00s 0h 00m 00s 3,584,000 C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe "C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe" -ServerName:App.AppX9n879r3et3x3b24eqasexpgc3412rn2m.mca 9780 StartMenuExperienceHost.exe 64-bit 1088 14 8 Start 2020-03-17 14:46:22 (Tuesday, March 17, 2020) 6d 22h 38m 03s 0h 00m 28s 0h 01m 02s 82,890,752 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca 9868 explorer.exe 10.0.19041.153 Windows Explorer / Microsoft® Windows® Operating System 64-bit 9804 78 8 Program Manager 2020-03-17 14:46:20 (Tuesday, March 17, 2020) 6d 22h 38m 05s 0h 20m 06s 0h 10m 03s 132,182,016 C:\Windows\explorer.exe C:\WINDOWS\Explorer.EXE 10024 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 2 8 2020-03-17 15:16:18 (Tuesday, March 17, 2020) 6d 22h 08m 07s 0h 00m 01s 0h 00m 01s 15,351,808 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 10068 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-17 14:46:20 (Tuesday, March 17, 2020) 6d 22h 38m 05s 0h 00m 15s 0h 00m 13s 6,287,360 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc 10300 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 4 8 2020-03-17 14:46:23 (Tuesday, March 17, 2020) 6d 22h 38m 02s 0h 00m 04s 0h 00m 02s 19,288,064 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 10440 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 6 8 2020-03-17 14:46:24 (Tuesday, March 17, 2020) 6d 22h 38m 01s 0h 00m 03s 0h 00m 03s 14,692,352 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager 10524 MsMpEng.exe 444 44 8 151,486,464 10540 Microsoft.Msn.Weather.exe 4.36.2003.11004 64-bit 1088 24 8 Weather 2020-03-24 06:03:14 (Tuesday, March 24, 2020) 0d 07h 21m 11s 0h 00m 00s 0h 00m 00s 2,383,872 C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe" -ServerName:App.AppX2m6wj6jceb8yq7ppx1b3drf7yy51ha6f.mca 10560 DbxSvc.exe 1.0.24.0 Dropbox Service / Dropbox 64-bit 444 24 8 2020-03-20 18:51:03 (Friday, March 20, 2020) 3d 18h 33m 22s 0h 00m 00s 0h 00m 00s 6,033,408 C:\Windows\System32\DbxSvc.exe C:\WINDOWS\system32\DbxSvc.exe 10708 SearchApp.exe 10.0.19041.153 Search application / Microsoft® Windows® Operating System 64-bit 1088 41 8 Search 2020-03-17 14:46:23 (Tuesday, March 17, 2020) 6d 22h 38m 02s 0h 00m 30s 0h 01m 14s 173,080,576 C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca 10800 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 2020-03-17 14:46:30 (Tuesday, March 17, 2020) 6d 22h 37m 55s 0h 00m 00s 0h 00m 00s 6,430,720 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hvsics 11044 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 15 8 2020-03-17 14:46:24 (Tuesday, March 17, 2020) 6d 22h 38m 01s 0h 00m 44s 0h 00m 34s 42,635,264 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 11172 QtWebEngineProcess.exe 5.13.2.0 Qt Qtwebengineprocess / Qt5 32-bit 12744 16 4 2020-03-20 18:51:28 (Friday, March 20, 2020) 3d 18h 32m 57s 0h 00m 47s 0h 00m 08s 54,231,040 C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe "C:\Program Files (x86)\Dropbox\Client\93.4.273\QtWebEngineProcess.exe" --type=renderer --no-sandbox --disable-gpu-memory-buffer-video-frames --enable-threaded-compositing --use-gl=egl --enable-features=AllowContentInitiatedDataUrlNavigations --disable-features=BackgroundFetch,MojoVideoCapture,SurfaceSynchronization,UsePdfCompositorServiceForPrint,UserActivationV2,VizDisplayCompositor --disable-databases --service-pipe-token=12202267630609783148 --lang=en-US --webengine-schemes=dbx-local:hs;qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=12202267630609783148 --renderer-client-id=5 --mojo-platform-channel-handle=16432 /prefetch:1 11212 Cloud.Backup.Scheduler.exe 6.3.0.274 Online Backup Scheduler 32-bit 444 16 8 2020-03-24 11:41:27 (Tuesday, March 24, 2020) 0d 01h 42m 58s 0h 00m 00s 0h 00m 01s 59,592,704 C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe "C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe" 11336 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 3 8 2020-03-17 14:46:25 (Tuesday, March 17, 2020) 6d 22h 38m 00s 0h 00m 41s 0h 00m 29s 27,238,400 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 11480 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-17 14:46:46 (Tuesday, March 17, 2020) 6d 22h 37m 39s 0h 00m 00s 0h 00m 00s 7,868,416 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Appinfo 11524 ctfmon.exe 10.0.19041.1 CTF Loader / Microsoft® Windows® Operating System 64-bit 2788 12 13 2020-03-17 14:46:26 (Tuesday, March 17, 2020) 6d 22h 37m 59s 0h 02m 44s 0h 01m 11s 20,414,464 C:\Windows\System32\ctfmon.exe "ctfmon.exe" 11536 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-17 14:46:29 (Tuesday, March 17, 2020) 6d 22h 37m 56s 0h 00m 04s 0h 00m 01s 7,749,632 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -p -s WebClient 11556 TabTip.exe 10.0.19041.1 Touch Keyboard and Handwriting Panel / Microsoft® Windows® Operating System 64-bit 2788 13 13 Touch Keyboard text suggestion 2020-03-17 14:46:26 (Tuesday, March 17, 2020) 6d 22h 37m 59s 0h 00m 17s 0h 00m 08s 12,562,432 C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe /QuitInfo:0000000000000258;0000000000000254; 11928 ddm.exe 1.50.0.1996 Dell Display Manager 32-bit 9868 6 8 2020-03-17 14:46:45 (Tuesday, March 17, 2020) 6d 22h 37m 40s 0h 30m 24s 0h 03m 19s 16,576,512 C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe "C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe" 11996 CompPkgSrv.exe 10.0.19041.1 Component Package Support Server / Microsoft® Windows® Operating System 64-bit 1088 1 8 2020-03-17 21:37:35 (Tuesday, March 17, 2020) 6d 15h 46m 50s 0h 00m 00s 0h 00m 00s 7,270,400 C:\Windows\System32\CompPkgSrv.exe C:\Windows\System32\CompPkgSrv.exe -Embedding 12292 MsMpEngCP.exe 1.1.16627.0 Antimalware Service Executable Content Process / Microsoft Malware Protection 64-bit 10524 6 8 2020-03-23 21:20:37 (Monday, March 23, 2020) 0d 16h 03m 48s 0h 00m 39s 0h 03m 29s 132,345,856 C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe "C:\ProgramData\Microsoft\Windows Defender\Scans\\MsMpEngCP.exe" "C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C56198BA-780F-422F-B78A-4DA5D9C462E1}\mpengine.dll" ACFCFA1E-538E-433E-8DCE-726ADC631615 S-1-15-2-414658757-1168934989-2622017976-4156097913-1883912072-3505740788-538829988 291c.1d5fec7c7093a33 12352 OUTLOOK.EXE 16.0.12527.20278 Microsoft Outlook 32-bit 9868 102 8 Income - admin@gtopala.com - Outlook 2020-03-18 11:46:25 (Wednesday, March 18, 2020) 6d 01h 38m 00s 0h 43m 44s 1h 20m 25s 427,192,320 C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE" 12504 SgrmBroker.exe 10.0.19041.84 System Guard Runtime Monitor Broker Service / Microsoft® Windows® Operating System 64-bit 444 8 8 8,839,168 C:\Windows\System32\SgrmBroker.exe 12716 dllhost.exe 10.0.19041.1 COM Surrogate / Microsoft® Windows® Operating System 64-bit 1088 6 8 2020-03-17 14:47:55 (Tuesday, March 17, 2020) 6d 22h 36m 30s 0h 00m 02s 0h 00m 00s 11,259,904 C:\Windows\System32\dllhost.exe C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F} 12744 Dropbox.exe 93.4.273.0 Dropbox 32-bit 13744 139 8 2020-03-20 18:51:14 (Friday, March 20, 2020) 3d 18h 33m 11s 0h 07m 32s 0h 15m 32s 231,440,384 C:\Program Files (x86)\Dropbox\Client\Dropbox.exe "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrunupdate 1 /appwasrunning 12872 SurfaceDTX.exe 3.32.139.0 Surface DTX / Surface 32-bit 9868 13 8 2020-03-17 14:46:36 (Tuesday, March 17, 2020) 6d 22h 37m 49s 0h 00m 11s 0h 00m 02s 29,253,632 C:\Windows\System32\SurfaceDTX.exe "C:\Windows\System32\SurfaceDTX.exe" 13176 vmmem 12020 0 8 2020-03-17 14:46:46 (Tuesday, March 17, 2020) 6d 22h 37m 39s 0h 00m 00s 0h 00m 00s 8,192 vmmem 13264 audiodg.exe 10.0.19041.84 Windows Audio Device Graph Isolation / Microsoft® Windows® Operating System 64-bit 4820 6 8 2020-03-24 13:22:26 (Tuesday, March 24, 2020) 0d 00h 01m 59s 0h 00m 00s 0h 00m 00s 12,746,752 C:\Windows\System32\audiodg.exe C:\WINDOWS\system32\AUDIODG.EXE 0x1fc 13380 WmiPrvSE.exe 10.0.19041.1 WMI Provider Host / Microsoft® Windows® Operating System 64-bit 1088 7 8 2020-03-24 11:27:28 (Tuesday, March 24, 2020) 0d 01h 56m 57s 0h 00m 03s 0h 00m 01s 21,278,720 C:\Windows\System32\wbem\WmiPrvSE.exe C:\WINDOWS\system32\wbem\wmiprvse.exe 13388 NisSrv.exe 444 8 8 14,196,736 13520 YourPhone.exe 1.20012.135.0 64-bit 1088 16 8 2020-03-24 08:46:09 (Tuesday, March 24, 2020) 0d 04h 38m 16s 0h 00m 00s 0h 00m 00s 10,526,720 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe "C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca 13756 dllhost.exe 10.0.19041.1 COM Surrogate / Microsoft® Windows® Operating System 64-bit 1088 5 8 2020-03-17 14:47:08 (Tuesday, March 17, 2020) 6d 22h 37m 17s 0h 00m 00s 0h 00m 00s 8,331,264 C:\Windows\System32\dllhost.exe C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} 13876 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 16 8 2020-03-17 14:47:16 (Tuesday, March 17, 2020) 6d 22h 37m 09s 0h 00m 07s 0h 00m 08s 19,562,496 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BITS 14192 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 9 8 2020-03-17 14:47:31 (Tuesday, March 17, 2020) 6d 22h 36m 54s 0h 00m 11s 0h 00m 04s 13,324,288 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc 14320 ApplicationFrameHost.exe 10.0.19041.1 Application Frame Host / Microsoft® Windows® Operating System 64-bit 1088 9 8 Weather 2020-03-17 14:47:32 (Tuesday, March 17, 2020) 6d 22h 36m 53s 0h 00m 13s 0h 00m 07s 35,262,464 C:\Windows\System32\ApplicationFrameHost.exe C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding 14852 YourPhoneServer.exe 1.20012.135.0 64-bit 1088 3 8 2020-03-17 14:48:25 (Tuesday, March 17, 2020) 6d 22h 36m 00s 0h 00m 00s 0h 00m 00s 8,433,664 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe "C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer/YourPhoneServer.exe" -Embedding 14900 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 10 8 2020-03-18 02:28:23 (Wednesday, March 18, 2020) 6d 10h 56m 02s 0h 00m 31s 0h 00m 25s 28,364,800 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 14956 LockApp.exe 10.0.19041.1 LockApp.exe / Microsoft® Windows® Operating System 64-bit 1088 11 8 Windows Default Lock Screen 2020-03-18 02:28:23 (Wednesday, March 18, 2020) 6d 10h 56m 02s 0h 00m 00s 0h 00m 01s 29,372,416 C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe "C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca 15112 Microsoft.Msn.News.exe 4.36.2003.11004 64-bit 1088 28 8 Microsoft News 2020-03-24 02:50:33 (Tuesday, March 24, 2020) 0d 10h 33m 52s 0h 00m 00s 0h 00m 00s 2,461,696 C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.News.exe "C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.News.exe" -ServerName:AppexNews.AppX3vz52bd72d0ycrnwe6jysfgn7k1qcv00.mca 15380 SecurityHealthService.exe 4.18.1907.16384 Windows Security Health Service / Microsoft® Windows® Operating System 64-bit 444 4 8 10,092,544 C:\Windows\System32\SecurityHealthService.exe 15840 ShellExperienceHost.exe 10.0.19041.1 Windows Shell Experience Host / Microsoft® Windows® Operating System 64-bit 1088 22 8 Volume Control 2020-03-17 15:55:53 (Tuesday, March 17, 2020) 6d 21h 28m 32s 0h 00m 05s 0h 00m 09s 53,141,504 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca 15984 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 6 8 2020-03-17 14:49:30 (Tuesday, March 17, 2020) 6d 22h 34m 55s 0h 04m 41s 0h 01m 52s 5,931,008 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvc 16336 WmiPrvSE.exe 10.0.19041.1 WMI Provider Host / Microsoft® Windows® Operating System 32-bit 1088 5 8 2020-03-19 23:47:21 (Thursday, March 19, 2020) 4d 13h 37m 04s 0h 00m 03s 0h 00m 00s 7,692,288 C:\Windows\SysWOW64\wbem\WmiPrvSE.exe C:\WINDOWS\sysWOW64\wbem\wmiprvse.exe -Embedding 16492 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 5 8 2020-03-18 11:44:52 (Wednesday, March 18, 2020) 6d 01h 39m 33s 0h 00m 00s 0h 00m 00s 5,001,216 C:\Windows\System32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Browser 17496 OneDrive.exe 19.232.1124.10 Microsoft OneDrive 32-bit 8896 29 8 2020-03-19 05:38:05 (Thursday, March 19, 2020) 5d 07h 46m 20s 0h 01m 15s 0h 01m 36s 56,881,152 C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\OneDrive.exe /updateInstalled /background 17764 Dropbox.exe 93.4.273.0 Dropbox 32-bit 12744 6 8 2020-03-20 18:51:14 (Friday, March 20, 2020) 3d 18h 33m 11s 0h 00m 00s 0h 00m 00s 12,427,264 C:\Program Files (x86)\Dropbox\Client\Dropbox.exe "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:exit-monitor -method:collectupload -session-token:667e9ed7-30aa-4df2-bc24-4167f87a294d -target-handle:596 -target-shutdown-event:588 -target-restart-event:584 "-target-command-line:\"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe\" /firstrunupdate 1 /appwasrunning" -python-version:3.7.5 -handler-pipe:\\.\pipe\crashpad_12744_LACCLETOVYZQXELE 17836 taskhostw.exe 10.0.19041.1 Host Process for Windows Tasks / Microsoft® Windows® Operating System 64-bit 2152 6 8 2020-03-22 12:53:01 (Sunday, March 22, 2020) 2d 00h 31m 24s 0h 00m 00s 0h 00m 00s 19,492,864 C:\Windows\System32\taskhostw.exe taskhostw.exe 19112 Microsoft.Photos.exe 2020.19081.28230.0 64-bit 1088 19 8 2020-03-18 16:34:31 (Wednesday, March 18, 2020) 5d 20h 49m 54s 0h 00m 37s 0h 00m 43s 93,962,240 C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca 19216 SystemSettings.exe 10.0.19041.1 Settings / Microsoft® Windows® Operating System 64-bit 1088 22 8 Settings 2020-03-23 21:35:47 (Monday, March 23, 2020) 0d 15h 48m 38s 0h 00m 00s 0h 00m 00s 2,949,120 C:\Windows\ImmersiveControlPanel\SystemSettings.exe "C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel 19544 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 11 8 2020-03-18 16:34:32 (Wednesday, March 18, 2020) 5d 20h 49m 53s 0h 02m 52s 0h 03m 18s 38,514,688 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 19912 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 4 8 8,241,152 C:\Windows\System32\svchost.exe 20144 Microsoft.Msn.Money.exe 4.36.2003.11004 64-bit 1088 27 8 Money 2020-03-24 02:48:54 (Tuesday, March 24, 2020) 0d 10h 35m 31s 0h 00m 00s 0h 00m 00s 2,473,984 C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe "C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Money.exe" -ServerName:AppexFinance.AppX6tep37frvzednpfqt02kdykt0ydv37zc.mca 20240 FileCoAuth.exe 19.232.1124.10 Microsoft OneDriveFile Co-Authoring Executable / Microsoft OneDrive 32-bit 1088 2 8 2020-03-23 14:49:26 (Monday, March 23, 2020) 0d 22h 34m 59s 0h 00m 00s 0h 00m 00s 16,068,608 C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\FileCoAuth.exe C:\Users\gtopa\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\FileCoAuth.exe -Embedding 20288 WUDFHost.exe 10.0.19041.1 Windows Driver Foundation - User-mode Driver Framework Host Process / Microsoft® Windows® Operating System 64-bit 444 8 8 2020-03-24 13:20:52 (Tuesday, March 24, 2020) 0d 00h 03m 33s 0h 00m 00s 0h 00m 00s 9,211,904 C:\Windows\System32\WUDFHost.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-1fa2498a-066d-49d4-a9ca-f15288f92c3f -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-caf30a36-5af8-4f6c-a676-ff1360b46953 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2972b8d3-7278-402c-8d9e-c73eb3133965 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-11d31395-4aa1-4970-a4bc-657c1ad333fb -LifetimeId:3b8a15e7-0777-491f-b190-c8ee20b3a538 -DeviceGroupId: -HostArg:0 20924 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 6 8 2020-03-24 08:46:10 (Tuesday, March 24, 2020) 0d 04h 38m 15s 0h 00m 00s 0h 00m 00s 17,309,696 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 21652 svchost.exe 10.0.19041.1 Host Process for Windows Services / Microsoft® Windows® Operating System 64-bit 444 3 8 2020-03-22 11:40:31 (Sunday, March 22, 2020) 2d 01h 43m 54s 0h 00m 00s 0h 00m 00s 6,459,392 C:\Windows\System32\svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s AppMgmt 21828 AdobeCollabSync.exe 20.6.20042.43423 Adobe Collaboration Synchronizer 20.6 32-bit 22296 17 8 2020-03-21 17:29:18 (Saturday, March 21, 2020) 2d 19h 55m 07s 0h 00m 51s 0h 01m 07s 18,018,304 C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" -c --type=collab-renderer --proc=22296 22296 AdobeCollabSync.exe 20.6.20042.43423 Adobe Collaboration Synchronizer 20.6 32-bit 7992 8 8 2020-03-21 17:29:18 (Saturday, March 21, 2020) 2d 19h 55m 07s 0h 00m 00s 0h 00m 00s 12,169,216 C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" -c 23776 WmiPrvSE.exe 10.0.19041.1 WMI Provider Host / Microsoft® Windows® Operating System 64-bit 1088 1 8 2020-03-24 13:24:23 (Tuesday, March 24, 2020) 0d 00h 00m 02s 0h 00m 01s 0h 00m 00s 18,968,576 C:\Windows\System32\wbem\WmiPrvSE.exe C:\WINDOWS\system32\wbem\wmiprvse.exe 24532 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 11 8 2020-03-24 02:50:33 (Tuesday, March 24, 2020) 0d 10h 33m 52s 0h 00m 02s 0h 00m 01s 21,368,832 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 25444 SIWViewer.exe 2.0.0.0 SIWViewer 32-bit 4632 6 8 SIW Viewer [ siw-xml-report.xml] - \\SURFACEPRO 2020-03-24 13:22:17 (Tuesday, March 24, 2020) 0d 00h 02m 08s 0h 00m 00s 0h 00m 00s 42,913,792 C:\workspace\BuildHelper\Buildcenter\SIWViewer.exe "C:\workspace\BuildHelper\Buildcenter\SIWViewer.exe" siw-xml-report.xml 26404 RuntimeBroker.exe 10.0.19041.1 Runtime Broker / Microsoft® Windows® Operating System 64-bit 1088 1 8 2020-03-24 06:03:15 (Tuesday, March 24, 2020) 0d 07h 21m 10s 0h 00m 00s 0h 00m 00s 6,975,488 C:\Windows\System32\RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding ---------- [NT Services] --------------------------------------- Name Description Version Type Status Startup Type Path File Description Company Service Start Name AarSvc Agent Activation Runtime 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService AdobeARMservice Adobe Acrobat Update Service 1.824.36.9436 Own Process Running Auto Start C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe Adobe Acrobat Update Service Adobe Systems LocalSystem AJRouter AllJoyn Router Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService ALG Application Layer Gateway Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\alg.exe Application Layer Gateway Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService AppIDSvc Application Identity 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService Appinfo Application Information 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AppMgmt Application Management 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AppReadiness App Readiness 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AppVClient Microsoft App-V Client 10.0.19041.84 Own Process Stopped Disabled C:\Windows\System32\AppVClient.exe Microsoft Application Virtualization Client Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AppXSvc AppX Deployment Service (AppXSVC) 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AssignedAccessManagerSvc AssignedAccessManager Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AudioEndpointBuilder Windows Audio Endpoint Builder 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Audiosrv Windows Audio 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService autotimesvc Cellular Time 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService AxInstSV ActiveX Installer (AxInstSV) 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem BcastDVRUserService GameDVR and Broadcast User Service 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem BDESVC BitLocker Drive Encryption Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem BFE Base Filtering Engine 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService BITS Background Intelligent Transfer Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem BluetoothUserService Bluetooth User Support Service 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation BrokerInfrastructure Background Tasks Infrastructure Service 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Browser Computer Browser 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem BTAGService Bluetooth Audio Gateway Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService BthAvctpSvc AVCTP service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService bthserv Bluetooth Support Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService camsvc Capability Access Manager Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem CaptureService CaptureService 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService cbdhsvc Clipboard User Service 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem CDPSvc Connected Devices Platform Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService CDPUserSvc Connected Devices Platform User Service 10.0.19041.1 Share Process, User Service Stopped Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem CertPropSvc Certificate Propagation 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem ClickToRunSvc ‪Microsoft Office Click-to-Run Service‬ 16.0.12527.20242 Own Process Running Auto Start C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe Microsoft Office Click-to-Run (SxS) / Microsoft Office Microsoft Corporation LocalSystem ClipSVC Client License Service (ClipSVC) 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem CloudBerry Backup Service CloudBerry Backup Service 6.3.0.274 Own Process Running Auto Start C:\Program Files\CloudBerryLab\CloudBerry Backup\Cloud.Backup.Scheduler.exe Online Backup Scheduler CloudBerry Lab Inc. LocalSystem CmService Container Manager Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem COMSysApp COM+ System Application 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\dllhost.exe COM Surrogate / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem ConsentUxUserSvc ConsentUX 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem CoreMessagingRegistrar CoreMessaging 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService cphs Intel(R) Content Protection HECI Service 9.1.1.1117 Own Process Running Demand Start C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHeciSvc.exe IntelCpHeciSvc Executable Intel Corporation LocalSystem cplspcon Intel(R) Content Protection HDCP Service 25.20.100.6472 Own Process Running Auto Start C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\IntelCpHDCPSvc.exe Intel HD Graphics Drivers for Windows(R) Intel Corporation LocalSystem CredentialEnrollmentManagerUserSvc CredentialEnrollmentManagerUserSvc 10.0.19041.153 Own Process, User Service Stopped Demand Start C:\Windows\System32\CredentialEnrollmentManager.exe Credential Enrollment Manager / Microsoft® Windows® Operating System Microsoft Corporation CryptSvc Cryptographic Services 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\NetworkService CscService Offline Files 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem dbupdate Dropbox Update Service (dbupdate) 1.3.27.73 Own Process Stopped Auto Start C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Dropbox Update Dropbox, Inc. LocalSystem dbupdatem Dropbox Update Service (dbupdatem) 1.3.27.73 Own Process Stopped Demand Start C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Dropbox Update Dropbox, Inc. LocalSystem DbxSvc DbxSvc 1.0.24.0 Own Process Running Auto Start C:\Windows\System32\DbxSvc.exe Dropbox Service / Dropbox Dropbox, Inc. LocalSystem DcomLaunch DCOM Server Process Launcher 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem defragsvc Optimize drives 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem DeviceAssociationBrokerSvc DeviceAssociationBroker 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DeviceAssociationService Device Association Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DeviceInstall Device Install Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DevicePickerUserSvc DevicePicker 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DevicesFlowUserSvc DevicesFlow 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DevQueryBroker DevQuery Background Discovery Broker 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Dhcp DHCP Client 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService diagnosticshub.standardcollector.service Microsoft (R) Diagnostics Hub Standard Collector Service 11.0.19041.153 Own Process Stopped Demand Start C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe Microsoft (R) Diagnostics Hub Standard Collector / Internet Explorer Microsoft Corporation LocalSystem diagsvc Diagnostic Execution Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DiagTrack Connected User Experiences and Telemetry 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DispBrokerDesktopSvc Display Policy Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService DisplayEnhancementService Display Enhancement Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DmEnrollmentSvc Device Management Enrollment Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem dmwappushservice Device Management Wireless Application Protocol (WAP) Push message Routing Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Dnscache DNS Client 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService DoSvc Delivery Optimization 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\NetworkService dot3svc Wired AutoConfig 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem DPS Diagnostic Policy Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService DsmSvc Device Setup Manager 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DsSvc Data Sharing Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem DusmSvc Data Usage 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService Eaphost Extensible Authentication Protocol 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem edgeupdate Microsoft Edge Update Service (edgeupdate) 1.3.107.13 Own Process Stopped Auto Start C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe Microsoft Edge Update Microsoft Corporation LocalSystem edgeupdatem Microsoft Edge Update Service (edgeupdatem) 1.3.107.13 Own Process Stopped Demand Start C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe Microsoft Edge Update Microsoft Corporation LocalSystem EFS Encrypting File System (EFS) 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\lsass.exe Local Security Authority Process / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem embeddedmode Embedded Mode 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem EntAppSvc Enterprise App Management Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem esifsvc Intel(R) Dynamic Platform and Thermal Framework service 8.3.10207.5567 Own Process Running Auto Start C:\Windows\System32\Intel\DPTF\esif_uf.exe Intel(R) Dynamic Platform and Thermal Framework Intel Corporation LocalSystem EventLog Windows Event Log 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService EventSystem COM+ Event System 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService Fax Fax 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\FXSSVC.exe Fax Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService fdPHost Function Discovery Provider Host 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService FDResPub Function Discovery Resource Publication 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService fhsvc File History Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem FontCache Windows Font Cache Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService FrameServer Windows Camera Frame Server 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem gcs Hyper-V Guest Compute Service 10.0.19041.153 Own Process Stopped Demand Start C:\Windows\System32\VmComputeAgent.exe Hyper-V Guest Compute Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem gpsvc Group Policy Client 10.0.19041.1 Own Process, Share Process Stopped Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem GraphicsPerfSvc GraphicsPerfSvc 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem HgClientService Host Guardian Client Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem hidserv Human Interface Device Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem hns Host Network Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem HvHost HV Host Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem hvsics Application Guard Container Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem icssvc Windows Mobile Hotspot Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService IKEEXT IKE and AuthIP IPsec Keying Modules 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem InstallService Microsoft Store Install Service 10.0.19041.1 Own Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Intel(R) Capability Licensing Service TCP IP Interface Intel(R) Capability Licensing Service TCP IP Interface 1.48.197.0 Own Process Stopped Demand Start C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe Intel(R) Capability Licensing Service TCP IP Interface Intel(R) Corporation LocalSystem Intel(R) TPM Provisioning Service Intel(R) TPM Provisioning Service 1.48.197.0 Own Process Stopped Auto Start C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe Intel(R) TPM Provisioning Service Intel(R) Corporation LocalSystem IntelAudioService Intel(R) Audio Service 1.0.140.0 Own Process Stopped Auto Start C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe IntelAudioService Intel LocalSystem iphlpsvc IP Helper 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem IpxlatCfgSvc IP Translation Configuration Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem KeyIso CNG Key Isolation 10.0.19041.1 Share Process Running Demand Start C:\Windows\System32\lsass.exe Local Security Authority Process / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem KtmRm KtmRm for Distributed Transaction Coordinator 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService LanmanServer Server 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem LanmanWorkstation Workstation 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService lfsvc Geolocation Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem LicenseManager Windows License Manager Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService lltdsvc Link-Layer Topology Discovery Mapper 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService lmhosts TCP/IP NetBIOS Helper 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService LSM Local Session Manager 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem LxpSvc Language Experience Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem MapsBroker Downloaded Maps Manager 10.0.19041.1 Own Process Stopped Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService MessagingService MessagingService 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem MicrosoftEdgeElevationService Microsoft Edge Elevation Service 80.0.361.69 Own Process Stopped Demand Start C:\Program Files (x86)\Microsoft\Edge\Application\80.0.361.69\elevation_service.exe Microsoft Edge Microsoft Corporation LocalSystem MixedRealityOpenXRSvc Windows Mixed Reality OpenXR Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem mpssvc Windows Defender Firewall 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService MSDTC Distributed Transaction Coordinator 2001.12.10941.16384 Own Process Stopped Demand Start C:\Windows\System32\msdtc.exe Microsoft Distributed Transaction Coordinator Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService MSiSCSI Microsoft iSCSI Initiator Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem msiserver Windows Installer 5.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\msiexec.exe Windows® installer / Windows Installer - Unicode Microsoft Corporation LocalSystem NaturalAuthentication Natural Authentication 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NcaSvc Network Connectivity Assistant 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NcbService Network Connection Broker 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NcdAutoSetup Network Connected Devices Auto-Setup 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService Netlogon Netlogon 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\lsass.exe Local Security Authority Process / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Netman Network Connections 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem netprofm Network List Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService NetSetupSvc Network Setup Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NetTcpPortSharing Net.Tcp Port Sharing Service 4.8.4084.0 Share Process Stopped Disabled C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe SMSvcHost.exe / Microsoft® .NET Framework Microsoft Corporation NT AUTHORITY\LocalService NgcCtnrSvc Microsoft Passport Container 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService NgcSvc Microsoft Passport 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NlaSvc Network Location Awareness 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService nsi Network Store Interface Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService nvagent Network Virtualization Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem NVDisplay.ContainerLocalSystem NVIDIA Display Container LS 1.2.0.0 Own Process Running Auto Start C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe NVIDIA Container NVIDIA Corporation LocalSystem OneSyncSvc Sync Host 10.0.19041.1 Share Process, User Service Stopped Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation ose Office Source Engine 16.0.12527.20232 Own Process Stopped Demand Start C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE Office Source Engine Microsoft Corporation LocalSystem p2pimsvc Peer Networking Identity Manager 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService p2psvc Peer Networking Grouping 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService PcaSvc Program Compatibility Assistant Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PeerDistSvc BranchCache 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService perceptionsimulation Windows Perception Simulation Service 10.0.19041.84 Own Process Stopped Demand Start C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe Windows Perception Simulation Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PerfHost Performance Counter DLL Host 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\SysWOW64\perfhost.exe x86 Performance Counter Host / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService PhoneSvc Phone Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService PimIndexMaintenanceSvc Contact Data 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem pla Performance Logs & Alerts 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService PlugPlay Plug and Play 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PNRPAutoReg PNRP Machine Name Publication Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService PNRPsvc Peer Name Resolution Protocol 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService PolicyAgent IPsec Policy Agent 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\NetworkService Power Power 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PrintNotify Printer Extensions and Notifications 10.0.19041.1 Share Process, Interactive Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PrintWorkflowUserSvc PrintWorkflow 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem ProfSvc User Profile Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem PushToInstall Windows PushToInstall Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem QWAVE Quality Windows Audio Video Experience 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService RasAuto Remote Access Auto Connection Manager 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem RasMan Remote Access Connection Manager 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem RemoteAccess Routing and Remote Access 10.0.19041.1 Share Process Stopped Disabled C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem RemoteRegistry Remote Registry 10.0.19041.1 Share Process Stopped Disabled C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService RetailDemo Retail Demo Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem RmSvc Radio Management Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService RpcEptMapper RPC Endpoint Mapper 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService RpcLocator Remote Procedure Call (RPC) Locator 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\Locator.exe Rpc Locator / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService RpcSs Remote Procedure Call (RPC) 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService SamSs Security Accounts Manager 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\lsass.exe Local Security Authority Process / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SCardSvr Smart Card 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService ScDeviceEnum Smart Card Device Enumeration Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Schedule Task Scheduler 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SCPolicySvc Smart Card Removal Policy 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SDRSVC Windows Backup 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem seclogon Secondary Logon 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SecurityHealthService Windows Security Service 4.18.1907.16384 Own Process Running Demand Start C:\Windows\System32\SecurityHealthService.exe Windows Security Health Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SEMgrSvc Payments and NFC/SE Manager 10.0.19041.1 Own Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService SENS System Event Notification Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Sense Windows Defender Advanced Threat Protection Service 10.7150.19041.153 Own Process Stopped Demand Start C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe Windows Defender Advanced Threat Protection Service Executable / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SensorDataService Sensor Data Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\SensorDataService.exe Sensor Data Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SensorService Sensor Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SensrSvc Sensor Monitoring Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService SessionEnv Remote Desktop Configuration 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem SgrmBroker System Guard Runtime Monitor Broker 10.0.19041.84 Own Process Running Auto Start C:\Windows\System32\SgrmBroker.exe System Guard Runtime Monitor Broker Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SharedAccess Internet Connection Sharing (ICS) 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SharedRealitySvc Spatial Data Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService ShellHWDetection Shell Hardware Detection 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem shpamsvc Shared PC Account Manager 10.0.19041.1 Share Process Stopped Disabled C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem smphost Microsoft Storage Spaces SMP 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService SmsRouter Microsoft Windows SMS Router Service. 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService SNMPTRAP SNMP Trap 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\snmptrap.exe SNMP Trap / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService spectrum Windows Perception Service 10.0.19041.153 Own Process Stopped Demand Start C:\Windows\System32\Spectrum.exe Windows Perception Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService Spooler Print Spooler 10.0.19041.1 Own Process, Interactive Running Auto Start C:\Windows\System32\spoolsv.exe Spooler SubSystem App / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem sppsvc Software Protection 10.0.19041.153 Own Process Stopped Auto Start C:\Windows\System32\sppsvc.exe Microsoft Software Protection Platform Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService SSDPSRV SSDP Discovery 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService ssh-agent OpenSSH Authentication Agent 7.7.2.1 Own Process Stopped Disabled C:\Windows\System32\OpenSSH\ssh-agent.exe OpenSSH for Windows LocalSystem SstpSvc Secure Socket Tunneling Protocol Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService StateRepository State Repository Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem stisvc Windows Image Acquisition (WIA) 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService StorSvc Storage Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SurfaceColorService Surface Display Color Service 2.0.366.0 Share Process Running Auto Start C:\Windows\System32\SurfaceColorService.exe Surface Color Profile Service / Surface Microsoft Corporation LocalSystem SurfaceDtxService Surface DTX Service 3.32.139.0 Share Process Running Auto Start C:\Windows\System32\SurfaceDtxService.exe Surface DTX Service / Surface Microsoft Corporation LocalSystem SurfaceService Surface Integration Service 4.14.139.0 Share Process Running Auto Start C:\Windows\System32\SurfaceService.exe Surface Service / Surface Microsoft Corporation LocalSystem SurfaceUsbHubFwUpdateService Surface USB Hub Firmware Update Service 1.16.136.0 Share Process Running Auto Start C:\Windows\System32\SurfaceUsbHubFwUpdateService.exe Surface Usb Hub Firmware Update Service / Surface Microsoft Corporation LocalSystem svsvc Spot Verifier 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem swprv Microsoft Software Shadow Copy Provider 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SysMain SysMain 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem SystemEventsBroker System Events Broker 10.0.19041.1 Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TabletInputService Touch Keyboard and Handwriting Panel Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TapiSrv Telephony 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService TermService Remote Desktop Services 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\NetworkService Themes Themes 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TieringEngineService Storage Tiers Management 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\TieringEngineService.exe Storage Tiers Management / Microsoft® Windows® Operating System Microsoft Corporation localSystem TimeBrokerSvc Time Broker 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService TokenBroker Web Account Manager 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TrkWks Distributed Link Tracking Client 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TroubleshootingSvc Recommended Troubleshooting Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem TrustedInstaller Windows Modules Installer 10.0.19041.153 Own Process Stopped Demand Start C:\Windows\servicing\TrustedInstaller.exe Windows Modules Installer / Microsoft® Windows® Operating System Microsoft Corporation localSystem tzautoupdate Auto Time Zone Updater 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService UdkUserSvc Udk User Service 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation UevAgentService User Experience Virtualization Service 10.0.19041.1 Own Process Stopped Disabled C:\Windows\System32\AgentService.exe AgentService EXE / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem UmRdpService Remote Desktop Services UserMode Port Redirector 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem UnistoreSvc User Data Storage 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem upnphost UPnP Device Host 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService UserDataSvc User Data Access 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem UserManager User Manager 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem UsoSvc Update Orchestrator Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem VacSvc Volumetric Audio Compositor Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService VaultSvc Credential Manager 10.0.19041.1 Share Process Running Demand Start C:\Windows\System32\lsass.exe Local Security Authority Process / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vds Virtual Disk 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\vds.exe Virtual Disk Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmcompute Hyper-V Host Compute Service 10.0.19041.153 Own Process Running Demand Start C:\Windows\System32\vmcompute.exe Hyper-V Host Compute Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmicguestinterface Hyper-V Guest Service Interface 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmicheartbeat Hyper-V Heartbeat Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmickvpexchange Hyper-V Data Exchange Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmicrdv Hyper-V Remote Desktop Virtualization Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmicshutdown Hyper-V Guest Shutdown Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmictimesync Hyper-V Time Synchronization Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService vmicvmsession Hyper-V PowerShell Direct Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmicvss Hyper-V Volume Shadow Copy Requestor 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem vmms Hyper-V Virtual Machine Management 10.0.19041.153 Own Process Running Auto Start C:\Windows\System32\vmms.exe Virtual Machine Management Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem VSS Volume Shadow Copy 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\VSSVC.exe Microsoft® Volume Shadow Copy Service / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem VSStandardCollectorService150 Visual Studio Standard Collector Service 150 16.1.28901.1 Own Process Stopped Demand Start C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe Microsoft (R) Visual Studio Standard Collector / Microsoft® Visual Studio® Microsoft Corporation LocalSystem W32Time Windows Time 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WaaSMedicSvc Windows Update Medic Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WalletService WalletService 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WarpJITSvc WarpJITSvc 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService wbengine Block Level Backup Engine Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\wbengine.exe Microsoft® Block Level Backup Engine Service EXE / Microsoft® Windows® Operating System Microsoft Corporation localSystem WbioSrvc Windows Biometric Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem Wcmsvc Windows Connection Manager 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService wcncsvc Windows Connect Now - Config Registrar 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WdiServiceHost Diagnostic Service Host 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WdiSystemHost Diagnostic System Host 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WdNisSvc Microsoft Defender Antivirus Network Inspection Service 4.18.2003.6 Own Process Running Demand Start C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.6-0\NisSrv.exe Microsoft Network Realtime Inspection Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WebClient WebClient 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService Wecsvc Windows Event Collector 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService WEPHOSTSVC Windows Encryption Provider Host Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService wercplsupport Problem Reports Control Panel Support 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem WerSvc Windows Error Reporting Service 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem WFDSConMgrSvc Wi-Fi Direct Services Connection Manager Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WiaRpc Still Image Acquisition Events 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WinDefend Microsoft Defender Antivirus Service 4.18.2003.6 Own Process Running Auto Start C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.6-0\MsMpEng.exe Antimalware Service Executable / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WinHttpAutoProxySvc WinHTTP Web Proxy Auto-Discovery Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService Winmgmt Windows Management Instrumentation 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem WinRM Windows Remote Management (WS-Management) 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService wisvc Windows Insider Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WlanSvc WLAN AutoConfig 10.0.19041.1 Own Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem wlidsvc Microsoft Account Sign-in Assistant 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem wlpasvc Local Profile Assistant Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT Authority\LocalService WManSvc Windows Management Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem wmiApSrv WMI Performance Adapter 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\wbem\WmiApSrv.exe WMI Performance Reverse Adapter / Microsoft® Windows® Operating System Microsoft Corporation localSystem WMPNetworkSvc Windows Media Player Network Sharing Service 12.0.19041.1 Own Process Stopped Demand Start C:\Program Files\Windows Media Player\wmpnetwk.exe Windows Media Player Network Sharing Service / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\NetworkService workfolderssvc Work Folders 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WpcMonSvc Parental Controls 10.0.19041.1 Own Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WPDBusEnum Portable Device Enumerator Service 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WpnService Windows Push Notifications System Service 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WpnUserService Windows Push Notifications User Service 10.0.19041.1 Share Process, User Service Stopped Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem wscsvc Security Center 10.0.19041.1 Own Process, Share Process Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation NT AUTHORITY\LocalService WSearch Windows Search 7.0.19041.153 Own Process Running Auto Start C:\Windows\System32\SearchIndexer.exe Microsoft Windows Search Indexer / Windows® Search Microsoft Corporation LocalSystem wuauserv Windows Update 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem WwanSvc WWAN AutoConfig 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation localSystem XblAuthManager Xbox Live Auth Manager 10.0.19041.1 Own Process, Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem XblGameSave Xbox Live Game Save 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem XboxGipSvc Xbox Accessory Management Service 10.0.19041.1 Own Process, Share Process Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem XboxNetApiSvc Xbox Live Networking Service 10.0.19041.1 Share Process Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation LocalSystem AarSvc_84aa9 AarSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation BcastDVRUserService_84aa9 BcastDVRUserService_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation BluetoothUserService_84aa9 BluetoothUserService_84aa9 10.0.19041.1 Own Process, Share Process, User Service Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation CaptureService_84aa9 CaptureService_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation cbdhsvc_84aa9 cbdhsvc_84aa9 10.0.19041.1 Own Process, Share Process, User Service Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation CDPUserSvc_84aa9 CDPUserSvc_84aa9 10.0.19041.1 Own Process, Share Process, User Service Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation ConsentUxUserSvc_84aa9 ConsentUxUserSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation CredentialEnrollmentManagerUserSvc_84aa9 CredentialEnrollmentManagerUserSvc_84aa9 10.0.19041.153 Own Process, User Service Stopped Demand Start C:\Windows\System32\CredentialEnrollmentManager.exe Credential Enrollment Manager / Microsoft® Windows® Operating System Microsoft Corporation DeviceAssociationBrokerSvc_84aa9 DeviceAssociationBrokerSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation DevicePickerUserSvc_84aa9 DevicePickerUserSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation DevicesFlowUserSvc_84aa9 DevicesFlowUserSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation MessagingService_84aa9 MessagingService_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation OneSyncSvc_84aa9 OneSyncSvc_84aa9 10.0.19041.1 Share Process, User Service Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation PimIndexMaintenanceSvc_84aa9 PimIndexMaintenanceSvc_84aa9 10.0.19041.1 Share Process, User Service Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation PrintWorkflowUserSvc_84aa9 PrintWorkflowUserSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation UdkUserSvc_84aa9 UdkUserSvc_84aa9 10.0.19041.1 Share Process, User Service Stopped Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation UnistoreSvc_84aa9 UnistoreSvc_84aa9 10.0.19041.1 Share Process, User Service Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation UserDataSvc_84aa9 UserDataSvc_84aa9 10.0.19041.1 Share Process, User Service Running Demand Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation WpnUserService_84aa9 WpnUserService_84aa9 10.0.19041.1 Own Process, Share Process, User Service Running Auto Start C:\Windows\System32\svchost.exe Host Process for Windows Services / Microsoft® Windows® Operating System Microsoft Corporation ---------- [Drivers] ------------------------------------------- Name Description Version Type Status Startup Type Path File Description Company 1394ohci 1394 OHCI Compliant Host Controller 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\1394ohci.sys 1394 OpenHCI Driver / Microsoft® Windows® Operating System Microsoft Corporation 3ware 3ware 5.1.0.51 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\3ware.sys LSI 3ware SCSI Storport Driver / LSI 3ware RAID Controller LSI ACPI Microsoft ACPI Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\acpi.sys ACPI Driver for NT / Microsoft® Windows® Operating System Microsoft Corporation AcpiDev ACPI Devices driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\AcpiDev.sys ACPI Devices Driver / Microsoft® Windows® Operating System Microsoft Corporation acpiex Microsoft ACPIEx Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\acpiex.sys ACPIEx Driver / Microsoft® Windows® Operating System Microsoft Corporation acpipagr ACPI Processor Aggregator Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\acpipagr.sys ACPI Processor Aggregator Device Driver / Microsoft® Windows® Operating System Microsoft Corporation AcpiPmi ACPI Power Meter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\acpipmi.sys ACPI Power Metering Driver / Microsoft® Windows® Operating System Microsoft Corporation acpitime ACPI Wake Alarm Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\acpitime.sys ACPI Wake Alarm / Microsoft® Windows® Operating System Microsoft Corporation Acx01000 Acx01000 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\Acx01000.sys Audio KMDF Class Extension / Microsoft® Windows® Operating System Microsoft Corporation ADP80XX ADP80XX 1.3.0.10769 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\adp80xx.sys PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller / PMC-Sierra HBA Controller PMC-Sierra AFD Ancillary Function Driver for Winsock 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\afd.sys Ancillary Function Driver for WinSock / Microsoft® Windows® Operating System Microsoft Corporation afunix afunix 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\afunix.sys AF_UNIX socket provider / Microsoft® Windows® Operating System Microsoft Corporation ahcache Application Compatibility Cache 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\ahcache.sys Application Compatibility Cache / Microsoft® Windows® Operating System Microsoft Corporation amdgpio2 AMD GPIO Client Driver 2.2.0.71 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdgpio2.sys AMD GPIO Controller Driver Advanced Micro Devices, Inc amdi2c AMD I2C Controller Service 1.2.0.99 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdi2c.sys AMD I2C Controller Driver Advanced Micro Devices, Inc AmdK8 AMD K8 Processor Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdk8.sys Processor Device Driver / Microsoft® Windows® Operating System Microsoft Corporation AmdPPM AMD Processor Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdppm.sys Processor Device Driver / Microsoft® Windows® Operating System Microsoft Corporation amdsata amdsata 1.1.3.277 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdsata.sys AHCI 1.3 Device Driver Advanced Micro Devices amdsbs amdsbs 3.7.1540.43 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdsbs.sys AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform / AMD Technology AHCI Compatible Controller AMD Technologies Inc. amdxata amdxata 1.1.3.277 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\amdxata.sys Storage Filter Driver Advanced Micro Devices AppID AppID Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\appid.sys AppID Driver / Microsoft® Windows® Operating System Microsoft Corporation applockerfltr Smartlocker Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\applockerfltr.sys Applocker Filter / Microsoft® Windows® Operating System Microsoft Corporation AppvStrm AppvStrm 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\AppVStrm.sys Microsoft Application Virtualization Streaming Driver / Microsoft® Windows® Operating System Microsoft Corporation AppvVemgr AppvVemgr 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\AppvVemgr.sys Microsoft Application Virtualization VE Manager Driver / Microsoft® Windows® Operating System Microsoft Corporation AppvVfs AppvVfs 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\AppvVfs.sys Microsoft Application Virtualization VFS Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation arcsas Adaptec SAS/SATA-II RAID Storport's Miniport Driver 7.5.0.32048 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\arcsas.sys Adaptec SAS RAID WS03 Driver / Adaptec RAID Controller PMC-Sierra, Inc. AsyncMac RAS Asynchronous Media Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\asyncmac.sys MS Remote Access serial network driver / Microsoft® Windows® Operating System Microsoft Corporation atapi IDE Channel 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\atapi.sys ATAPI IDE Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation b06bdrv QLogic Network Adapter VBD 7.12.31.105 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\bxvbda.sys QLogic Gigabit Ethernet VBD / QLogic Gigabit Ethernet QLogic Corporation bam Background Activity Moderator Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\bam.sys BAM Kernel Driver / Microsoft® Windows® Operating System Microsoft Corporation BasicDisplay BasicDisplay 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys Microsoft Basic Display Driver / Microsoft® Windows® Operating System Microsoft Corporation BasicRender BasicRender 10.0.19041.84 Kernel Driver Running System Start C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys Microsoft Basic Render Driver / Microsoft® Windows® Operating System Microsoft Corporation bcmfn2 bcmfn2 Service 6.3.9600.17336 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\bcmfn2.sys BCM Function 2 Device Driver / Windows (R) Win 7 DDK driver Windows (R) Win 7 DDK provider Beep Beep Kernel Driver Running System Start bindflt Windows Bind Filter Driver 10.0.19041.1 File System Driver Running Auto Start C:\Windows\System32\drivers\bindflt.sys Windows Bind Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation bowser Browser 10.0.19041.1 File System Driver Running Demand Start C:\Windows\System32\drivers\bowser.sys NT Lan Manager Datagram Receiver Driver / Microsoft® Windows® Operating System Microsoft Corporation BthA2dp Microsoft Bluetooth A2dp driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\BthA2dp.sys Bluetooth A2DP Driver / Microsoft® Windows® Operating System Microsoft Corporation BthEnum Bluetooth Enumerator Service 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\bthenum.sys Bluetooth Bus Extender / Microsoft® Windows® Operating System Microsoft Corporation BthHFAud Microsoft Bluetooth Hands-Free Audio driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\BthHfAud.sys Bluetooth Hands-free Audio Device Driver / Microsoft® Windows® Operating System Microsoft Corporation BthHFEnum Microsoft Bluetooth Hands-Free Profile driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\BthHfEnum.sys Bluetooth Hands-Free Audio and Call Control HID Enumerator / Microsoft® Windows® Operating System Microsoft Corporation BthLEEnum Bluetooth Low Energy Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys Legacy Bluetooth LE Bus Enumerator / Microsoft® Windows® Operating System Microsoft Corporation BthMini Bluetooth Radio Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\BthMini.SYS Bluetooth Transport Extensibility Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation BTHMODEM Bluetooth Modem Communications Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\bthmodem.sys Bluetooth Communications Driver / Microsoft® Windows® Operating System Microsoft Corporation BthPan Bluetooth Device (Personal Area Network) 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\bthpan.sys Bluetooth Personal Area Networking / Microsoft® Windows® Operating System Microsoft Corporation BTHPORT Bluetooth Port Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\bthport.sys Bluetooth Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation BTHUSB Bluetooth Radio USB Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\BTHUSB.SYS Bluetooth Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation bttflt Microsoft Hyper-V VHDPMEM BTT Filter 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\bttflt.sys VHD BTT Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation buttonconverter Service for Portable Device Control devices 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\buttonconverter.sys Button Converter Driver / Microsoft® Windows® Operating System Microsoft Corporation CAD Charge Arbitration Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\CAD.sys Charge Arbiration Driver / Microsoft® Windows® Operating System Microsoft Corporation cdfs CD/DVD File System Reader 10.0.19041.1 File System Driver Stopped Disabled C:\Windows\System32\drivers\cdfs.sys CD-ROM File System Driver / Microsoft® Windows® Operating System Microsoft Corporation cdrom CD-ROM Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\cdrom.sys SCSI CD-ROM Driver / Microsoft® Windows® Operating System Microsoft Corporation cht4iscsi cht4iscsi 6.11.4.100 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\cht4sx64.sys Chelsio iSCSI VMiniport Driver / Chelsio Communications iSCSI Controller Chelsio Communications cht4vbd Chelsio Virtual Bus Driver 6.11.4.100 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\cht4vx64.sys Virtual Bus Driver for Chelsio ® T5/T6 Chipset / Chelsio Communications Unified Network I/O Controller Chelsio Communications CimFS CimFS File System Driver Running System Start circlass Consumer IR Devices 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\circlass.sys Consumer IR Class Driver for eHome / Microsoft® Windows® Operating System Microsoft Corporation CldFlt Windows Cloud Files Filter Driver 10.0.19041.21 File System Driver Running Auto Start C:\Windows\System32\drivers\cldflt.sys Cloud Files Mini Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation CLFS Common Log (CLFS) 10.0.19041.84 Kernel Driver Running Boot Start C:\Windows\System32\drivers\clfs.sys Common Log File System Driver / Microsoft® Windows® Operating System Microsoft Corporation CmBatt Microsoft ACPI Control Method Battery Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\CmBatt.sys Control Method Battery Driver / Microsoft® Windows® Operating System Microsoft Corporation CNG CNG 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\cng.sys Kernel Cryptography, Next Generation / Microsoft® Windows® Operating System Microsoft Corporation cnghwassist CNG Hardware Assist algorithm provider 10.0.19041.1 Kernel Driver Stopped Disabled C:\Windows\System32\drivers\cnghwassist.sys CNG Hardware Assist algorithm provider / Microsoft® Windows® Operating System Microsoft Corporation CompositeBus Composite Bus Enumerator Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys Multi-Transport Composite Bus Enumerator / Microsoft® Windows® Operating System Microsoft Corporation condrv Console Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\condrv.sys Console Driver / Microsoft® Windows® Operating System Microsoft Corporation COREINFO100 COREINFO100 1.0.0.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\COREINFO100.SYS Coreinfo processor information utility / Coreinfo Sysinternals - www.sysinternals.com CSC Offline Files Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\csc.sys Windows Client Side Caching Driver / Microsoft® Windows® Operating System Microsoft Corporation CSI2HostControllerDriver Intel(R) CSI2 Host Controller services 0.2.5.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\CSI2HostControllerDriver.sys Intel(R) CSI2 Host Controller Intel(R) Corporation dam Desktop Activity Moderator Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\dam.sys DAM Kernel Driver / Microsoft® Windows® Operating System Microsoft Corporation Dfsc DFS Namespace Client Driver 10.0.19041.1 File System Driver Running System Start C:\Windows\System32\drivers\dfsc.sys DFS Namespace Client Driver / Microsoft® Windows® Operating System Microsoft Corporation disk Disk Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\disk.sys PnP Disk Driver / Microsoft® Windows® Operating System Microsoft Corporation dmvsc dmvsc 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\dmvsc.sys Dynamic Memory / Microsoft® Windows® Operating System Microsoft Corporation dptf_acpi dptf_acpi 8.3.10207.5567 Kernel Driver Running Demand Start C:\Windows\System32\drivers\dptf_acpi.sys DPTF ACPI Device (64-Bit) / Dynamic Platform Thermal Framework Intel Corporation dptf_cpu dptf_cpu 8.3.10207.5567 Kernel Driver Running Demand Start C:\Windows\System32\drivers\dptf_cpu.sys DPTF CPU Device (64-Bit) / Dynamic Platform Thermal Framework Intel Corporation drmkaud Microsoft Trusted Audio Drivers 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\drmkaud.sys Microsoft Trusted Audio Drivers / Microsoft® Windows® Operating System Microsoft Corporation DXGKrnl LDDM Graphics Subsystem 10.0.19041.153 Kernel Driver Running System Start C:\Windows\System32\drivers\dxgkrnl.sys DirectX Graphics Kernel / Microsoft® Windows® Operating System Microsoft Corporation ebdrv QLogic 10 Gigabit Ethernet Adapter VBD 7.13.65.105 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\evbda.sys QLogic 10 GigE VBD / QLogic 10 GigE QLogic Corporation EhStorClass Enhanced Storage Filter Driver 10.0.19041.1 Kernel Driver Stopped Boot Start C:\Windows\System32\drivers\EhStorClass.sys Enhanced Storage Class driver for IEEE 1667 devices / Microsoft® Windows® Operating System Microsoft Corporation EhStorTcgDrv Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\EhStorTcgDrv.sys Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols / Microsoft® Windows® Operating System Microsoft Corporation ErrDev Microsoft Hardware Error Device Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\errdev.sys Error Device Driver / Microsoft® Windows® Operating System Microsoft Corporation esif_lf esif_lf 8.3.10207.5567 Kernel Driver Running Demand Start C:\Windows\System32\drivers\esif_lf.sys DPTF Zone (64-Bit) / Dynamic Platform Thermal Framework Intel Corporation exfat exFAT File System Driver File System Driver Stopped Demand Start fastfat FAT12/16/32 File System Driver File System Driver Running Demand Start fdc Floppy Disk Controller Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\fdc.sys Floppy Disk Controller Driver / Microsoft® Windows® Operating System Microsoft Corporation FileCrypt FileCrypt 10.0.19041.1 File System Driver Running System Start C:\Windows\System32\drivers\filecrypt.sys Windows sandboxing and encryption filter / Microsoft® Windows® Operating System Microsoft Corporation FileInfo File Information FS MiniFilter 10.0.19041.1 File System Driver Running Boot Start C:\Windows\System32\drivers\fileinfo.sys FileInfo Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation Filetrace Filetrace 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\filetrace.sys File Trace Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation flpydisk Floppy Disk Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\flpydisk.sys Floppy Driver / Microsoft® Windows® Operating System Microsoft Corporation FltMgr FltMgr 10.0.19041.1 File System Driver Running Boot Start C:\Windows\System32\drivers\fltMgr.sys Microsoft Filesystem Filter Manager / Microsoft® Windows® Operating System Microsoft Corporation FsDepends File System Dependency Minifilter 10.0.19041.1 File System Driver Running Demand Start C:\Windows\System32\drivers\fsdepends.sys File System Dependency Manager Mini Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation fvevol BitLocker Drive Encryption Filter Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\fvevol.sys BitLocker Drive Encryption Driver / Microsoft® Windows® Operating System Microsoft Corporation gencounter Microsoft Hyper-V Generation Counter 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmgencounter.sys Virtual Machine Generation Counter / Microsoft® Windows® Operating System Microsoft Corporation genericusbfn Generic USB Function Class 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys Generic USB Function Class Driver / Microsoft® Windows® Operating System Microsoft Corporation GPIOClx0101 Microsoft GPIO Class Extension Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\msgpioclx.sys GPIO Class Extension Driver / Microsoft® Windows® Operating System Microsoft Corporation GpuEnergyDrv GPU Energy Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\gpuenergydrv.sys GPU Energy Kernel Driver / Microsoft® Windows® Operating System Microsoft Corporation HdAudAddService Microsoft 1.1 UAA Function Driver for High Definition Audio Service 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\HdAudio.sys High Definition Audio Function Driver / Microsoft® Windows® Operating System Microsoft Corporation HDAudBus Microsoft UAA Bus Driver for High Definition Audio 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hdaudbus.sys High Definition Audio Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation HidBatt HID UPS Battery Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidbatt.sys Hid Battery Driver / Microsoft® Windows® Operating System Microsoft Corporation HidBth Microsoft Bluetooth HID Miniport 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidbth.sys Bluetooth Miniport Driver for HID Devices / Microsoft® Windows® Operating System Microsoft Corporation hidi2c Microsoft I2C HID Miniport Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidi2c.sys I2C HID Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation hidinterrupt Common Driver for HID Buttons implemented with interrupts 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidinterrupt.sys HID Button over Interrupt Driver / Microsoft® Windows® Operating System Microsoft Corporation HidIr Microsoft Infrared HID Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidir.sys Infrared Miniport Driver for Input Devices / Microsoft® Windows® Operating System Microsoft Corporation hidspi Microsoft SPI HID Miniport Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hidspi.sys SPI HID Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation HidUsb Microsoft HID Class Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\hidusb.sys USB Miniport Driver for Input Devices / Microsoft® Windows® Operating System Microsoft Corporation HID_PCI HID PCI Minidriver for ISS 3.1.0.3524 Kernel Driver Running Demand Start C:\Windows\System32\drivers\HID_PCI.sys HID PCI Minidriver for ISS / ISS Intel hnswfpdriver HNS WFP Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hnswfpdriver.sys Network driver for proxying traffic / Microsoft® Windows® Operating System Microsoft Corporation HpSAMD HpSAMD 8.0.4.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\HpSAMD.sys Smart Array SAS/SATA Controller Media Driver Hewlett-Packard Company HTTP HTTP Service 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\http.sys HTTP Protocol Stack / Microsoft® Windows® Operating System Microsoft Corporation hvcrash hvcrash 10.0.19041.1 Kernel Driver Stopped Disabled C:\Windows\System32\drivers\hvcrash.sys Hyper-V Crashdump / Microsoft® Windows® Operating System Microsoft Corporation hvservice Hypervisor/Virtual Machine Support Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\hvservice.sys Hypervisor Boot Driver / Microsoft® Windows® Operating System Microsoft Corporation hvsifltr Microsoft Defender Application Guard Filter Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\hvsifltr.sys Microsoft Defender Application Guard Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation hvsocketcontrol hvsocketcontrol 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\hvsocketcontrol.sys Microsoft Hyper-V Socket Provider Control Driver / Microsoft® Windows® Operating System Microsoft Corporation HwNClx0101 Microsoft Hardware Notifications Class Extension Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mshwnclx.sys Hardware Notification Class Extension Driver / Microsoft® Windows® Operating System Microsoft Corporation hwpolicy Hardware Policy Driver 10.0.19041.1 Kernel Driver Stopped Boot Start C:\Windows\System32\drivers\hwpolicy.sys Hardware Policy Driver / Microsoft® Windows® Operating System Microsoft Corporation hyperkbd hyperkbd 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\hyperkbd.sys Microsoft VMBus Synthetic Keyboard Driver / Microsoft® Windows® Operating System Microsoft Corporation HyperVideo HyperVideo 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\HyperVideo.sys Microsoft VMBus Video Device Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation i8042prt i8042 Keyboard and PS/2 Mouse Port Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\i8042prt.sys i8042 Port Driver / Microsoft® Windows® Operating System Microsoft Corporation iacamera64 Intel(R) AVStream Camera 2500 1.0.0.8611 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iacamera64.sys Intel(R) AVStream Camera Driver Intel(R) Corporation iactrllogic Intel(R) Control Logic 1.0.0.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iactrllogic64.sys Intel(R) Control Logic Intel(R) Corporation iagpio Intel Serial IO GPIO Controller Driver 1.1.1.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iagpio.sys Intel(R) Serial IO GPIO Controller Driver Intel(R) Corporation iai2c Intel(R) Serial IO I2C Host Controller 1.1.1.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iai2c.sys Intel(R) Serial IO I2C Driver Intel(R) Corporation iaLPSS2i_GPIO2 Intel(R) Serial IO GPIO Driver v2 30.100.1816.3 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_GPIO2_BXT_P Intel(R) Serial IO GPIO Driver v2 30.100.1816.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_GPIO2_CNL Intel(R) Serial IO GPIO Driver v2 30.100.1816.3 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_GPIO2_GLK Intel(R) Serial IO GPIO Driver v2 30.100.1820.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_I2C Intel(R) Serial IO I2C Driver v2 30.100.1816.3 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iaLPSS2i_I2C.sys Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_I2C_BXT_P Intel(R) Serial IO I2C Driver v2 30.100.1816.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_I2C_CNL Intel(R) Serial IO I2C Driver v2 30.100.1929.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2i_I2C_GLK Intel(R) Serial IO I2C Driver v2 30.100.1820.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2_GPIO2 Intel(R) Serial IO GPIO Driver v2 30.100.1725.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys Intel(R) Serial IO GPIO Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2_I2C Intel(R) Serial IO I2C Driver v2 30.100.1725.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2_I2C.sys Intel(R) Serial IO I2C Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2_SPI Intel(R) Serial IO SPI Driver v2 30.100.1713.2 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSS2_SPI.sys Intel(R) Serial IO SPI Driver v2 / Intel(R) Serial IO Driver Intel Corporation iaLPSS2_UART2 Intel(R) Serial IO UART Driver v2 30.100.1725.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iaLPSS2_UART2.sys Intel(R) Serial IO UART Driver / Intel(R) Serial IO Driver Intel Corporation iaLPSSi_GPIO Intel(R) Serial IO GPIO Controller Driver 1.1.250.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSSi_GPIO.sys Intel(R) Serial IO GPIO Controller Driver / Intel(R) Serial IO Driver Intel Corporation iaLPSSi_I2C Intel(R) Serial IO I2C Controller Driver 1.1.253.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaLPSSi_I2C.sys Intel(R) Serial IO I2C Controller Driver / Intel(R) Serial IO Driver Intel Corporation iaStorAVC Intel Chipset SATA RAID Controller 15.44.0.1015 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaStorAVC.sys Intel(R) Rapid Storage Technology driver (inbox) - x64 / Intel(R) Rapid Storage Technology driver (inbox) Intel Corporation iaStorV Intel RAID Controller Windows 7 8.6.2.1019 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\iaStorV.sys Intel Matrix Storage Manager driver - x64 / Intel Matrix Storage Manager driver Intel Corporation ibbus Mellanox InfiniBand Bus/AL (Filter Driver) 5.50.14695.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ibbus.sys InfiniBand Fabric Bus Driver / OpenFabrics Windows Mellanox igfx igfx 25.20.100.6472 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igdkmd64.sys Intel Graphics Kernel Mode Driver / Intel HD Graphics Drivers for Windows(R) Intel Corporation IndirectKmd Indirect Displays Kernel-Mode Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\IndirectKmd.sys Indirect displays kernel-mode filter driver / Microsoft® Windows® Operating System Microsoft Corporation IntcAudioBus Intel(R) Smart Sound Technology (Intel(R) SST) Bus 9.21.0.3755 Kernel Driver Running Demand Start C:\Windows\System32\drivers\IntcAudioBus.sys Intel® Smart Sound Technology (Intel® SST) Bus Intel(R) Corporation IntcAzAudAddService Service for Realtek HD Audio (WDM) 6.0.1.8242 Kernel Driver Running Demand Start C:\Windows\System32\drivers\RTKVHD64.sys Realtek(r) High Definition Audio Function Driver Realtek Semiconductor Corp. IntcDAud Intel(R) Display Audio 10.26.0.4 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_db1a3501f64b55f3\IntcDAud.sys Intel(R) Display Audio Driver / Intel(R) Display Audio Intel(R) Corporation IntcOED Intel(R) Smart Sound Technology (Intel(R) SST) OED 9.21.0.3755 Kernel Driver Running Demand Start C:\Windows\System32\drivers\IntcOED.sys Intel® Smart Sound Technology (Intel® SST) OED Intel(R) Corporation intelide intelide 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\intelide.sys Intel PCI IDE Driver / Microsoft® Windows® Operating System Microsoft Corporation intelpep Intel(R) Power Engine Plug-in Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\intelpep.sys Intel Power Engine Plugin / Microsoft® Windows® Operating System Microsoft Corporation intelpmax Intel(R) Dynamic Device Peak Power Manager Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\intelpmax.sys Intel Power Limit Driver / Microsoft® Windows® Operating System Microsoft Corporation intelppm Intel Processor Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\intelppm.sys Processor Device Driver / Microsoft® Windows® Operating System Microsoft Corporation IntTouch Intel(R) Precise Touch Service 1.2.0.100 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iaPreciseTouch.sys Intel(R) Precise Touch Driver Intel Corporation iorate Disk I/O Rate Filter Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\iorate.sys I/O rate control Filter / Microsoft® Windows® Operating System Microsoft Corporation IpFilterDriver IP Traffic Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ipfltdrv.sys IP FILTER DRIVER / Microsoft® Windows® Operating System Microsoft Corporation IPMIDRV IPMIDRV 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\IPMIDrv.sys WMI IPMI DRIVER / Microsoft® Windows® Operating System Microsoft Corporation IPNAT IP Network Address Translator 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ipnat.sys IP Network Address Translator / Microsoft® Windows® Operating System Microsoft Corporation IPT IPT 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ipt.sys IPT Driver / Microsoft® Windows® Operating System Microsoft Corporation isapnp isapnp 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\isapnp.sys PNP ISA Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation iScsiPrt iScsiPort Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\msiscsi.sys Microsoft iSCSI Initiator Driver / Microsoft® Windows® Operating System Microsoft Corporation ISH Intel(R) Integrated Sensor Solution 3.1.0.3524 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ISH.sys Intel(R) Integrated Sensor Solution / ISS Intel ISH_BusDriver ISS Bus Enumerator 3.1.0.3524 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ISH_BusDriver.sys ISS Dynamic Bus Enumerator / ISS Intel ISODrive ISO DVD/CD-ROM Device Driver 3.1.3.579 File System Driver Running System Start C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys ISO DVD/CD-ROM Device Driver / ISODrive EZB Systems, Inc. ItSas35i ItSas35i 2.60.94.80 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ItSas35i.sys Avago SAS Gen3.5 Driver (StorPort) / Windows (R) Win 7 DDK driver Avago Technologies kbdclass Keyboard Class Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\kbdclass.sys Keyboard Class Driver / Microsoft® Windows® Operating System Microsoft Corporation kbdhid Keyboard HID Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\kbdhid.sys HID Keyboard Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation kdnic Microsoft Kernel Debug Network Miniport (NDIS 6.20) 6.1.0.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\kdnic.sys Microsoft Kernel Debugger Network Miniport / Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport) Microsoft Corporation KeyboardFingerprintIntegration KeyboardFingerprintIntegration Service 1.1.610.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\KeyboardFingerprintIntegration.sys KeyboardFingerprintIntegration / Surface Microsoft Corporation KSecDD KSecDD 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\ksecdd.sys Kernel Security Support Provider Interface / Microsoft® Windows® Operating System Microsoft Corporation KSecPkg KSecPkg 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\ksecpkg.sys Kernel Security Support Provider Interface Packages / Microsoft® Windows® Operating System Microsoft Corporation ksthunk Kernel Streaming Thunks 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ksthunk.sys Kernel Streaming WOW Thunk Service / Microsoft® Windows® Operating System Microsoft Corporation l2bridge Bridge Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\l2bridge.sys Network driver for bridging packets between mbb, wifi, and ethernet networks / Microsoft® Windows® Operating System Microsoft Corporation lltdio Link-Layer Topology Discovery Mapper I/O Driver 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\lltdio.sys Link-Layer Topology Mapper I/O Driver / Microsoft® Windows® Operating System Microsoft Corporation LSI_SAS LSI_SAS 1.34.3.83 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\lsi_sas.sys LSI Fusion-MPT SAS Driver (StorPort) LSI Corporation LSI_SAS2i LSI_SAS2i 2.0.79.82 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\lsi_sas2i.sys LSI SAS Gen2 Driver (StorPort) / Windows (R) Win 7 DDK driver LSI Corporation LSI_SAS3i LSI_SAS3i 2.51.26.80 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\lsi_sas3i.sys Avago SAS Gen3 Driver (StorPort) / Windows (R) Win 7 DDK driver Avago Technologies LSI_SSS LSI_SSS 2.10.61.81 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\lsi_sss.sys LSI SSS PCIe/Flash Driver (StorPort) LSI Corporation luafv UAC File Virtualization 10.0.19041.1 File System Driver Running Auto Start C:\Windows\System32\drivers\luafv.sys LUA File Virtualization Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation lunparser LUN Parser 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\lunparser.sys lun parser / Microsoft® Windows® Operating System Microsoft Corporation mausbhost MA-USB Host Controller Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mausbhost.sys MA-USB Host Controller Driver / Microsoft® Windows® Operating System Microsoft Corporation mausbip MA-USB IP Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mausbip.sys MA-USB IP Driver / Microsoft® Windows® Operating System Microsoft Corporation MaximPowerMeter Maxim Power Meter Service 100.0.1.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\MaximPowerMeter.sys Microsoft Power Meter / Maxim Power Meter Maxim Integrated MbbCx MBB Network Adapter Class Extension 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\MbbCx.sys Windows Mobile Broadband Class Extension / Microsoft® Windows® Operating System Microsoft Corporation megasas megasas 6.706.6.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\megasas.sys MEGASAS RAID Controller Driver for Windows Avago Technologies megasas2i megasas2i 6.714.20.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\MegaSas2i.sys MEGASAS RAID Controller Driver for Windows Avago Technologies megasas35i megasas35i 7.710.10.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\megasas35i.sys MEGASAS RAID Controller Driver for Windows Avago Technologies megasr megasr 15.2.2013.129 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\megasr.sys LSI MegaRAID Software RAID Driver / MegaRAID Software RAID LSI Corporation, Inc. MEIx64 Intel(R) Management Engine Interface 11.7.0.1057 Kernel Driver Running Demand Start C:\Windows\System32\drivers\TeeDriverW8x64.sys Intel(R) Management Engine Interface Intel Corporation Microsoft_Bluetooth_AvrcpTransport Microsoft Bluetooth Avrcp Transport Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys Microsoft Bluetooth Avrcp Transport Driver / Microsoft® Windows® Operating System Microsoft Corporation mlx4_bus Mellanox ConnectX Bus Enumerator 5.50.14695.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mlx4_bus.sys MLX4 Bus Driver / OpenFabrics Windows Mellanox MMCSS Multimedia Class Scheduler 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\mmcss.sys MMCSS Driver / Microsoft® Windows® Operating System Microsoft Corporation Modem Modem 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\modem.sys Modem Device Driver / Microsoft® Windows® Operating System Microsoft Corporation monitor monitor 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\monitor.sys Monitor Driver / Microsoft® Windows® Operating System Microsoft Corporation mouclass Mouse Class Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mouclass.sys Mouse Class Driver / Microsoft® Windows® Operating System Microsoft Corporation mouhid Mouse HID Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mouhid.sys HID Mouse Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation mountmgr Mount Point Manager 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\mountmgr.sys Mount Point Manager / Microsoft® Windows® Operating System Microsoft Corporation mpsdrv Windows Defender Firewall Authorization Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mpsdrv.sys Microsoft Protection Service Driver / Microsoft® Windows® Operating System Microsoft Corporation MQAC MQAC 5.0.1.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\mqac.sys Message Queuing Device Driver / Microsoft® Windows® Operating System Microsoft Corporation mrvlpcie8897 mrvlpcie8897 15.68.17017.115 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mrvlpcie8897.sys Marvell LE Driver for the WiFiCLass Stack / Marvell LE Driver Marvell Semiconductors Inc. MRxDAV WebDav Client Redirector Driver 10.0.19041.1 File System Driver Running Demand Start C:\Windows\System32\drivers\mrxdav.sys Windows NT WebDav Minirdr / Microsoft® Windows® Operating System Microsoft Corporation mrxsmb SMB MiniRedirector Wrapper and Engine 10.0.19041.153 File System Driver Running Demand Start C:\Windows\System32\drivers\mrxsmb.sys Windows NT SMB Minirdr / Microsoft® Windows® Operating System Microsoft Corporation mrxsmb20 SMB 2.0 MiniRedirector 10.0.19041.1 File System Driver Running Demand Start C:\Windows\System32\drivers\mrxsmb20.sys Longhorn SMB 2.0 Redirector / Microsoft® Windows® Operating System Microsoft Corporation MsBridge Microsoft MAC Bridge 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\bridge.sys MAC Bridge Driver / Microsoft® Windows® Operating System Microsoft Corporation Msfs Msfs File System Driver Running System Start msgpiowin32 Common Driver for Buttons, DockMode and Laptop/Slate Indicator 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\msgpiowin32.sys GPIO Button Driver / Microsoft® Windows® Operating System Microsoft Corporation mshidkmdf Pass-through HID to KMDF Filter Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mshidkmdf.sys Pass-through HID to KMDF Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation mshidumdf Pass-through HID to UMDF Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mshidumdf.sys Pass-through Driver for HID-UMDF Interface / Microsoft® Windows® Operating System Microsoft Corporation msisadrv msisadrv 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\msisadrv.sys ISA Driver / Microsoft® Windows® Operating System Microsoft Corporation MSKSSRV Microsoft Streaming Service Proxy 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mskssrv.sys MS KS Server / Microsoft® Windows® Operating System Microsoft Corporation MsLldp Microsoft Link-Layer Discovery Protocol 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\mslldp.sys Microsoft Link-Layer Discovery Protocol Driver / Microsoft® Windows® Operating System Microsoft Corporation MSPCLOCK Microsoft Streaming Clock Proxy 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mspclock.sys MS Proxy Clock / Microsoft® Windows® Operating System Microsoft Corporation MSPQM Microsoft Streaming Quality Manager Proxy 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mspqm.sys MS Proxy Quality Manager / Microsoft® Windows® Operating System Microsoft Corporation MsQuic MsQuic 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\msquic.sys Windows QUIC Driver / Microsoft® Windows® Operating System Microsoft Corporation MsRPC MsRPC Kernel Driver Stopped Demand Start MsSecFlt Microsoft Security Events Component Minifilter 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\mssecflt.sys Microsoft Security Events Component file system filter driver / Microsoft® Windows® Operating System Microsoft Corporation mssmbios Microsoft System Management BIOS Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\mssmbios.sys System Management BIOS Driver / Microsoft® Windows® Operating System Microsoft Corporation MSTEE Microsoft Streaming Tee/Sink-to-Sink Converter 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mstee.sys WDM Tee/Communication Transform Filter / Microsoft® Windows® Operating System Microsoft Corporation msux64w10 Microsoft USB Fast/Gigabit Ethernet NIC NDIS6.40 64-bit Driver 10.14.117.2020 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\msux64w10.inf_amd64_440fd3d3d9361452\msux64w10.sys Microsoft USB Fast/Gigabit Ethernet NIC NDIS6.40 64-bit Driver / Surface Ethernet Adapter Microsoft mt7612US_bc Xbox Wireless Adapter for Windows 11524.0.0.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\mt7612US_bc.sys MT7612U Phoenix Driver / MediaTek Inc. MT7612 Wireless LAN Adapter Driver MediaTek Inc. MTConfig Microsoft Input Configuration Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\MTConfig.sys Microsoft Multi-Touch HID Driver / Microsoft® Windows® Operating System Microsoft Corporation Mup Mup 10.0.19041.1 File System Driver Running Boot Start C:\Windows\System32\drivers\mup.sys Multiple UNC Provider Driver / Microsoft® Windows® Operating System Microsoft Corporation mvumis mvumis 1.0.5.1016 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\mvumis.sys Marvell Flash Controller Driver / Marvell Flash Controller Marvell Semiconductor, Inc. NativeWifiP NativeWiFi Filter 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\nwifi.sys NativeWiFi Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation ndfltr NetworkDirect Service 5.50.14695.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ndfltr.sys NetworkDirect Support Filter Driver / OpenFabrics Windows Mellanox NDIS NDIS System Driver 10.0.19041.84 Kernel Driver Running Boot Start C:\Windows\System32\drivers\ndis.sys Network Driver Interface Specification (NDIS) / Microsoft® Windows® Operating System Microsoft Corporation NdisCap Microsoft NDIS Capture 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\ndiscap.sys Microsoft NDIS Packet Capture Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation NdisImPlatform Microsoft Network Adapter Multiplexor Protocol 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\NdisImPlatform.sys Microsoft Network Adapter Multiplexor / Microsoft® Windows® Operating System Microsoft Corporation NdisImPlatformMp Microsoft Network Adapter Multiplexor Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\NdisImPlatform.sys Microsoft Network Adapter Multiplexor / Microsoft® Windows® Operating System Microsoft Corporation NdisTapi Remote Access NDIS TAPI Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ndistapi.sys NDIS 3.0 connection wrapper driver / Microsoft® Windows® Operating System Microsoft Corporation Ndisuio NDIS Usermode I/O Protocol 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ndisuio.sys NDIS User mode I/O driver / Microsoft® Windows® Operating System Microsoft Corporation NdisVirtualBus Microsoft Virtual Network Adapter Enumerator 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\NdisVirtualBus.sys Microsoft Virtual Network Adapter Enumerator / Microsoft® Windows® Operating System Microsoft Corporation NdisWan Remote Access NDIS WAN Driver 10.0.19041.153 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ndiswan.sys MS PPP Framing Driver (Strong Encryption) / Microsoft® Windows® Operating System Microsoft Corporation ndiswanlegacy Remote Access LEGACY NDIS WAN Driver 10.0.19041.153 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ndiswan.sys MS PPP Framing Driver (Strong Encryption) / Microsoft® Windows® Operating System Microsoft Corporation NDKPing NDKPing Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\NDKPing.sys RDMA Sample Driver / Microsoft® Windows® Operating System Microsoft Corporation ndproxy NDIS Proxy Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ndproxy.sys NDIS Proxy / Microsoft® Windows® Operating System Microsoft Corporation Ndu Windows Network Data Usage Monitoring Driver 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\Ndu.sys Windows Network Data Usage Monitoring Driver / Microsoft® Windows® Operating System Microsoft Corporation NetAdapterCx Network Adapter Wdf Class Extension Library 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\NetAdapterCx.sys Network Adapter Class Extension for WDF / Microsoft® Windows® Operating System Microsoft Corporation NetBIOS NetBIOS Interface 10.0.19041.1 File System Driver Running System Start C:\Windows\System32\drivers\netbios.sys NetBIOS interface driver / Microsoft® Windows® Operating System Microsoft Corporation NetBT NetBT 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\netbt.sys MBT Transport driver / Microsoft® Windows® Operating System Microsoft Corporation netvsc netvsc 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\netvsc.sys Virtual NDIS Miniport / Microsoft® Windows® Operating System Microsoft Corporation Npfs Npfs File System Driver Running System Start npsvctrig Named pipe service trigger provider 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\npsvctrig.sys Named pipe service triggers / Microsoft® Windows® Operating System Microsoft Corporation nsiproxy NSI Proxy Service Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\nsiproxy.sys NSI Proxy / Microsoft® Windows® Operating System Microsoft Corporation Ntfs Ntfs File System Driver Running Demand Start Null Null Kernel Driver Running System Start nvdimm Microsoft NVDIMM device driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\nvdimm.sys NVDIMM device driver / Microsoft® Windows® Operating System Microsoft Corporation nvlddmkm nvlddmkm 23.21.13.9140 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvlddmkm.sys NVIDIA Windows Kernel Mode Driver, Version 391.40 NVIDIA Corporation nvraid nvraid 10.6.0.23 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\nvraid.sys NVIDIA® nForce(TM) RAID Driver / NVIDIA nForce(TM) RAID Driver NVIDIA Corporation nvstor nvstor 10.6.0.23 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\nvstor.sys NVIDIA® nForce(TM) Sata Performance Driver / NVIDIA nForce(TM) SATA Driver NVIDIA Corporation OemShZDigitizerIntegration Surface1832DigitizerIntegration Service 1.12.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\Surface1832DigitizerIntegration.sys Surface1832DigitizerIntegration / Surface Microsoft Corporation ov5693 Camera Sensor OV5693 1.0.0.8611 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ov5693.sys Camera Sensor OV5693 Intel(R) Corporation ov7251 Camera Sensor OV7251 10.0.10011.16384 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ov7251.sys Camera Sensor OV7251 Intel Corporation ov8865 Camera Sensor OV8865 10.0.10011.16384 Kernel Driver Running Demand Start C:\Windows\System32\drivers\ov8865.sys Camera Sensor OV8865 Intel Corporation Parport Parallel port driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\parport.sys Parallel Port Driver / Microsoft® Windows® Operating System Microsoft Corporation partmgr Partition driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\partmgr.sys Partition driver / Microsoft® Windows® Operating System Microsoft Corporation passthruparser PassthroughParser 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\passthruparser.sys Pass thru parser / Microsoft® Windows® Operating System Microsoft Corporation pci PCI Bus Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\pci.sys NT Plug and Play PCI Enumerator / Microsoft® Windows® Operating System Microsoft Corporation pciide pciide 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pciide.sys Generic PCI IDE Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation pcip PCI Proxy driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pcip.sys Microsoft PCI Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation pcmcia pcmcia 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pcmcia.sys PCMCIA Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation pcw Performance Counters for Windows Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\pcw.sys Performance Counters for Windows Driver / Microsoft® Windows® Operating System Microsoft Corporation pdc pdc 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\pdc.sys Power Dependency Coordinator Driver / Microsoft® Windows® Operating System Microsoft Corporation PEAUTH PEAUTH 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\PEAuth.sys Protected Environment Authentication and Authorization Export Driver / Microsoft® Windows® Operating System Microsoft Corporation percsas2i percsas2i 6.805.3.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\percsas2i.sys MEGASAS RAID Controller Driver for Windows Avago Technologies percsas3i percsas3i 6.604.6.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\percsas3i.sys MEGASAS RAID Controller Driver for Windows Avago Technologies PktMon Packet Monitor Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\PktMon.sys Packet Monitor Driver / Microsoft® Windows® Operating System Microsoft Corporation pmem Microsoft persistent memory disk driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pmem.sys Persistent memory driver / Microsoft® Windows® Operating System Microsoft Corporation PNPMEM Microsoft Memory Module Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pnpmem.sys Plug and Play Memory Driver / Microsoft® Windows® Operating System Microsoft Corporation portcfg portcfg 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\portcfg.sys Port Device Class Configuration Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation PptpMiniport WAN Miniport (PPTP) 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\raspptp.sys Peer-to-Peer Tunneling Protocol / Microsoft® Windows® Operating System Microsoft Corporation Processor Processor Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\processr.sys Processor Device Driver / Microsoft® Windows® Operating System Microsoft Corporation Psched QoS Packet Scheduler 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\pacer.sys QoS Packet Scheduler / Microsoft® Windows® Operating System Microsoft Corporation pvhdparser pvhdparser 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\pvhdparser.sys Proxy VHD parser / Microsoft® Windows® Operating System Microsoft Corporation QWAVEdrv QWAVE driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\qwavedrv.sys Microsoft Quality Windows Audio Video Experience (qWave) Support Driver / Microsoft® Windows® Operating System Microsoft Corporation Ramdisk Windows RAM Disk Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ramdisk.sys RAM Disk Driver / Microsoft® Windows® Operating System Microsoft Corporation ramparser ramparser 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ramparser.sys RAM parser / Microsoft® Windows® Operating System Microsoft Corporation RasAcd Remote Access Auto Connection Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\rasacd.sys RAS Automatic Connection Driver / Microsoft® Windows® Operating System Microsoft Corporation RasAgileVpn WAN Miniport (IKEv2) 10.0.19041.153 Kernel Driver Running Demand Start C:\Windows\System32\drivers\agilevpn.sys RAS Agile Vpn Miniport Call Manager / Microsoft® Windows® Operating System Microsoft Corporation Rasl2tp WAN Miniport (L2TP) 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rasl2tp.sys RAS L2TP mini-port/call-manager driver / Microsoft® Windows® Operating System Microsoft Corporation RasPppoe Remote Access PPPOE Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\raspppoe.sys RAS PPPoE mini-port/call-manager driver / Microsoft® Windows® Operating System Microsoft Corporation RasSstp WAN Miniport (SSTP) 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rassstp.sys RAS SSTP Miniport Call Manager / Microsoft® Windows® Operating System Microsoft Corporation rdbss Redirected Buffering Sub System 10.0.19041.1 File System Driver Running System Start C:\Windows\System32\drivers\rdbss.sys Redirected Drive Buffering SubSystem Driver / Microsoft® Windows® Operating System Microsoft Corporation rdpbus Remote Desktop Device Redirector Bus Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rdpbus.sys Microsoft RDP Bus Device driver / Microsoft® Windows® Operating System Microsoft Corporation RDPDR Remote Desktop Device Redirector Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rdpdr.sys Microsoft RDP Device redirector / Microsoft® Windows® Operating System Microsoft Corporation RdpVideoMiniport Remote Desktop Video Miniport Driver 10.0.19041.153 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rdpvideominiport.sys Microsoft RDP Video Miniport driver / Microsoft® Windows® Operating System Microsoft Corporation rdyboost ReadyBoost 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\rdyboost.sys ReadyBoost Driver / Microsoft® Windows® Operating System Microsoft Corporation ReFS ReFS File System Driver Stopped Demand Start ReFSv1 ReFSv1 File System Driver Stopped Demand Start RFCOMM Bluetooth Device (RFCOMM Protocol TDI) 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\rfcomm.sys Bluetooth RFCOMM Driver / Microsoft® Windows® Operating System Microsoft Corporation rhproxy Resource Hub proxy driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\rhproxy.sys ResourceHub Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation rspndr Link-Layer Topology Discovery Responder 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\rspndr.sys Link-Layer Topology Responder Driver for NDIS 6 / Microsoft® Windows® Operating System Microsoft Corporation s3cap s3cap 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vms3cap.sys Microsoft S3 Emulated Device Cap Driver / Microsoft® Windows® Operating System Microsoft Corporation sbp2port SBP-2 Transport/Protocol Bus Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sbp2port.sys SBP-2 Protocol Driver / Microsoft® Windows® Operating System Microsoft Corporation scfilter Smart card PnP Class Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\scfilter.sys Microsoft Smart Card Reader Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation scmbus Microsoft Storage Class Memory Bus Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\scmbus.sys Storage Class Memory Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation sdbus sdbus 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sdbus.sys SecureDigital Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation SDFRd SDF Reflector 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\SDFRd.sys SDF Reflector / Microsoft® Windows® Operating System Microsoft Corporation sdstor SD Storage Port Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sdstor.sys SD Storage Class Driver / Microsoft® Windows® Operating System Microsoft Corporation SensorsHIDClassDriver UMDF Reflector service for Sensors HID Class Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System Microsoft Corporation SerCx Serial UART Support Library 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\SerCx.sys Serial Class Extension / Microsoft® Windows® Operating System Microsoft Corporation SerCx2 Serial UART Support Library 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SerCx2.sys Serial Class Extension V2 / Microsoft® Windows® Operating System Microsoft Corporation Serenum Serenum Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\serenum.sys Serial Port Enumerator / Microsoft® Windows® Operating System Microsoft Corporation Serial Serial port driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\serial.sys Serial Device Driver / Microsoft® Windows® Operating System Microsoft Corporation sermouse Serial Mouse Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sermouse.sys Serial Mouse Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation sfloppy High-Capacity Floppy Disk Drive 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sfloppy.sys SCSI Floppy Driver / Microsoft® Windows® Operating System Microsoft Corporation SgrmAgent System Guard Runtime Monitor Agent 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\SgrmAgent.sys System Guard Runtime Monitor Agent Driver / Microsoft® Windows® Operating System Microsoft Corporation SiSRaid2 SiSRaid2 5.1.1039.2600 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sisraid2.sys SiS RAID Stor Miniport Driver / Microsoft® Windows® Operating System Silicon Integrated Systems Corp. SiSRaid4 SiSRaid4 5.1.1039.3600 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\sisraid4.sys SiS AHCI Stor-Miniport Driver / Microsoft® Windows® Operating System Silicon Integrated Systems SIVDriver SIV Kernel Driver 5.45.0.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\SIVX64.sys System Information Viewer X64 Driver / SIVDRIVER Ray Hinchliffe SmartSAMD SmartSAMD 1.50.1.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\SmartSAMD.sys Storport Miniport Driver for SmartRAID/SmartHBA Controllers / SmartRAID, SmartHBA PQI Storport Driver Microsemi Corportation smbdirect smbdirect 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\smbdirect.sys SMB Network Direct Driver / Microsoft® Windows® Operating System Microsoft Corporation spaceparser Space Parser 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\spaceparser.sys Storage Spaces Parser / Microsoft® Windows® Operating System Microsoft Corporation spaceport Storage Spaces Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\spaceport.sys Storage Spaces Driver / Microsoft® Windows® Operating System Microsoft Corporation SpatialGraphFilter Holographic Spatial Graph Filter 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\SpatialGraphFilter.sys Holographic Spatial Graph Filter / Microsoft® Windows® Operating System Microsoft Corporation SpbCx Simple Peripheral Bus Support Library 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SpbCx.sys SPB Class Extension / Microsoft® Windows® Operating System Microsoft Corporation srv2 Server SMB 2.xxx Driver 10.0.19041.153 File System Driver Running Demand Start C:\Windows\System32\drivers\srv2.sys Smb 2.0 Server driver / Microsoft® Windows® Operating System Microsoft Corporation srvnet srvnet 10.0.19041.1 File System Driver Running Demand Start C:\Windows\System32\drivers\srvnet.sys Server Network driver / Microsoft® Windows® Operating System Microsoft Corporation stexstor stexstor 5.1.0.10 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\stexstor.sys Promise SuperTrak EX Series Driver for Windows x64 / Promise® SuperTrak EX Series Promise Technology, Inc. storahci Microsoft Standard SATA AHCI Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\storahci.sys MS AHCI Storport Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation storflt Microsoft Hyper-V Storage Accelerator 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmstorfl.sys Virtual Storage Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation stornvme Microsoft Standard NVM Express Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\stornvme.sys Microsoft NVM Express Storport Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation storqosflt Storage QoS Filter Driver 10.0.19041.1 File System Driver Running Auto Start C:\Windows\System32\drivers\storqosflt.sys Storage QoS Filter / Microsoft® Windows® Operating System Microsoft Corporation storufs Microsoft Universal Flash Storage (UFS) Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\storufs.sys MS UFS Storport Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation storvsc storvsc 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\storvsc.sys Storage VSC Driver / Microsoft® Windows® Operating System Microsoft Corporation storvsp storvsp 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\storvsp.sys Storage vsp Driver / Microsoft® Windows® Operating System Microsoft Corporation supportdriver Intel(R) Imaging Signal Processor 2500 1.0.0.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\iaisp64.sys Intel(R) Imaging Signal Processor 2500 Intel(R) Corporation SurfaceAcpiNotify Surface ACPI Notify Driver 5.15.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceAcpiNotifyDriver.sys Surface ACPI Notification Driver / Surface Microsoft Corporation SurfaceBase2Integration SurfaceBase2Integration Service 2.0.25.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceBase2Integration.sys SurfaceBase2Integration / Surface Microsoft Corporation SurfaceButton Surface Button Service 1.18.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceButton.sys Surface Button Driver / Surface Microsoft Corporation SurfaceDockIntegration Surface Dock Integration Service 2.0.303.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceDockIntegration.sys SurfaceDockIntegration / Surface Microsoft Corporation SurfaceHotPlug Surface Hot Plug Service 1.13.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceHotPlug.sys Surface Hot-Plug Driver / Surface Microsoft Corporation SurfaceIntegrationDriver Surface Integration Driver 4.8.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceIntegrationDriver.sys Surface Integration Driver / Surface Microsoft Corporation SurfacePenDriver SurfacePenDriver Service 21.0.17.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfacePenDriver.sys Surface Pen Settings / Surface Microsoft Corporation SurfacePowerMeterDriver Surface Power Meter Driver 1.9.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfacePowerMeterDriver.sys Surface Power Meter Driver / Surface Microsoft Corporation SurfaceSerialHubDriver Surface Serial Hub Driver Service 4.5.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceSerialHubDriver.sys Surface Serial Hub Driver / Surface Microsoft Corporation SurfaceStorageFwUpdate Surface Storage Firmware Update Service 2.7.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceStorageFwUpdate.sys Surface Storage Firmware Update Driver / Surface Microsoft Corporation SurfaceTconDriver Microsoft Tcon Driver 1.0.0.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceTconDriver.sys Surface Tcon Driver / Surface Microsoft Corporation SurfaceTouchServicingML Surface Touch Servicing ML 1.0.0.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceTouchServicingML.sys Surface Touch Servicing ML / Surface Microsoft Corporation SurfaceUcsi Surface Ucsi Service 2.14.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceUcsi.sys Surface Type-C UCSI Driver / Surface Microsoft Corporation SurfaceUsbHubFwUpdate Surface USB Hub Firmware Update Filter Driver 1.16.136.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\SurfaceUsbHubFwUpdate.sys Surface Usb Hub Filter Driver / Surface Microsoft Corporation swenum Software Bus Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys Plug and Play Software Device Enumerator / Microsoft® Windows® Operating System Microsoft Corporation Synth3dVsc Synth3dVsc 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\Synth3dVsc.sys Microsoft RemoteFX Synth3D Video VSC / Microsoft® Windows® Operating System Microsoft Corporation Synth3dVsp Synth3dVsp 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\Synth3dVsp.sys Microsoft RemoteFX Synth3D Video VSP / Microsoft® Windows® Operating System Microsoft Corporation Tcpip TCP/IP Protocol Driver 10.0.19041.84 Kernel Driver Running Boot Start C:\Windows\System32\drivers\tcpip.sys TCP/IP Driver / Microsoft® Windows® Operating System Microsoft Corporation Tcpip6 @todo.dll,-100;Microsoft IPv6 Protocol Driver 10.0.19041.84 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\tcpip.sys TCP/IP Driver / Microsoft® Windows® Operating System Microsoft Corporation tcpipreg TCP/IP Registry Compatibility 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\tcpipreg.sys TCP/IP Registry Compatibility Driver / Microsoft® Windows® Operating System Microsoft Corporation tdx NetIO Legacy TDI Support Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\tdx.sys TDI Translation Driver / Microsoft® Windows® Operating System Microsoft Corporation Telemetry Intel(R) Telemetry Service 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\IntelTA.sys Intel Telemetry Driver / Microsoft® Windows® Operating System Microsoft Corporation terminpt Microsoft Remote Desktop Input Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\terminpt.sys Terminal Server Input Driver / Microsoft® Windows® Operating System Microsoft Corporation TPM TPM 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\tpm.sys TPM Device Driver / Microsoft® Windows® Operating System Microsoft Corporation TsUsbFlt Remote Desktop USB Hub Class Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\TsUsbFlt.sys Remote Desktop USB Hub Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation TsUsbGD Remote Desktop Generic USB Device 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\TsUsbGD.sys Remote Desktop Generic USB Driver / Microsoft® Windows® Operating System Microsoft Corporation tsusbhub Remote Desktop USB Hub 10.0.19041.153 Kernel Driver Running Demand Start C:\Windows\System32\drivers\tsusbhub.sys Remote Desktop USB Hub / Microsoft® Windows® Operating System Microsoft Corporation tunnel Microsoft Tunnel Miniport Adapter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\tunnel.sys Microsoft Tunnel Interface Driver / Microsoft® Windows® Operating System Microsoft Corporation UASPStor USB Attached SCSI (UAS) Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\uaspstor.sys Microsoft Uasp Driver / Microsoft® Windows® Operating System Microsoft Corporation UcmCx0101 USB Connector Manager KMDF Class Extension 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\UcmCx.sys USB Connector Manager KMDF Class Extension / Microsoft® Windows® Operating System Microsoft Corporation UcmTcpciCx0101 UCM-TCPCI KMDF Class Extension 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\UcmTcpciCx.sys UCM-TCPCI KMDF Class Extension / Microsoft® Windows® Operating System Microsoft Corporation UcmUcsiAcpiClient UCM-UCSI ACPI Client 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys UCM-UCSI ACPI Client Driver / Microsoft® Windows® Operating System Microsoft Corporation UcmUcsiCx0101 UCM-UCSI KMDF Class Extension 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\UcmUcsiCx.sys UCM-UCSI KMDF Class Extension / Microsoft® Windows® Operating System Microsoft Corporation Ucx01000 USB Host Support Library 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\Ucx01000.sys USB Controller Extension / Microsoft® Windows® Operating System Microsoft Corporation UdeCx USB Device Emulation Support Library 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\Udecx.sys "udecx.DRIVER" / Microsoft® Windows® Operating System Microsoft Corporation udfs udfs 10.0.19041.1 File System Driver Running Disabled C:\Windows\System32\drivers\udfs.sys UDF File System Driver / Microsoft® Windows® Operating System Microsoft Corporation UEFI Microsoft UEFI Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\uefi.sys UEFI Driver for NT / Microsoft® Windows® Operating System Microsoft Corporation UevAgentDriver UevAgentDriver 10.0.19041.1 File System Driver Stopped Disabled C:\Windows\System32\drivers\UevAgentDriver.sys Microsoft User Experience Virtualization Agent Driver / Microsoft® Windows® Operating System Microsoft Corporation Ufx01000 USB Function Class Extension 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ufx01000.sys USB Function Driver Class Extension / Microsoft® Windows® Operating System Microsoft Corporation UfxChipidea USB Chipidea Controller 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\UfxChipidea.sys UFX Chipidea Client Driver / Microsoft® Windows® Operating System Microsoft Corporation ufxsynopsys USB Synopsys Controller 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\ufxsynopsys.sys UFX Synopsys Client Driver / Microsoft® Windows® Operating System Microsoft Corporation umbus UMBus Enumerator Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys User-Mode Bus Enumerator / Microsoft® Windows® Operating System Microsoft Corporation UmPass Microsoft UMPass Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\umpass.sys Generic pass-through driver / Microsoft® Windows® Operating System Microsoft Corporation UrsChipidea Chipidea USB Role-Switch Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\urschipidea.sys USB Role-Switch Driver for Chipidea Core / Microsoft® Windows® Operating System Microsoft Corporation UrsCx01000 USB Role-Switch Support Library 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\urscx01000.sys USB Role-Switch Class Extension / Microsoft® Windows® Operating System Microsoft Corporation UrsSynopsys Synopsys USB Role-Switch Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\urssynopsys.sys USB Role-Switch Driver for Synopsys Core / Microsoft® Windows® Operating System Microsoft Corporation usbaudio USB Audio Driver (WDM) 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\USBAUDIO.sys USB Audio Class Driver / Microsoft® Windows® Operating System Microsoft Corporation usbaudio2 USB Audio 2.0 Service 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbaudio2.sys Microsoft USB Audio Class 2.0 Driver / Microsoft® Windows® Operating System Microsoft Corporation usbccgp Microsoft USB Generic Parent Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbccgp.sys USB Common Class Generic Parent Driver / Microsoft® Windows® Operating System Microsoft Corporation usbcir eHome Infrared Receiver (USBCIR) 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbcir.sys USB Consumer IR Driver for eHome / Microsoft® Windows® Operating System Microsoft Corporation usbehci Microsoft USB 2.0 Enhanced Host Controller Miniport Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbehci.sys EHCI eUSB Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation usbhub Microsoft USB Standard Hub Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbhub.sys Default Hub Driver for USB / Microsoft® Windows® Operating System Microsoft Corporation USBHUB3 SuperSpeed Hub 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\USBHUB3.SYS USB3 HUB Driver / Microsoft® Windows® Operating System Microsoft Corporation usbohci Microsoft USB Open Host Controller Miniport Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbohci.sys OHCI USB Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation usbprint Microsoft USB PRINTER Class 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbprint.sys USB Printer driver / Microsoft® Windows® Operating System Microsoft Corporation usbser Microsoft USB Serial Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbser.sys USB Serial Driver / Microsoft® Windows® Operating System Microsoft Corporation USBSTOR USB Mass Storage Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\USBSTOR.SYS USB Mass Storage Class Driver / Microsoft® Windows® Operating System Microsoft Corporation usbuhci Microsoft USB Universal Host Controller Miniport Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\usbuhci.sys UHCI USB Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation USBXHCI USB xHCI Compliant Host Controller 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\USBXHCI.SYS USB XHCI Driver / Microsoft® Windows® Operating System Microsoft Corporation vdrvroot Microsoft Virtual Drive Enumerator 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\vdrvroot.sys Virtual Drive Root Enumerator / Microsoft® Windows® Operating System Microsoft Corporation VerifierExt Driver Verifier Extension 10.0.19041.1 Kernel Driver Stopped Disabled C:\Windows\System32\drivers\VerifierExt.sys Driver Verifier Extension / Microsoft® Windows® Operating System Microsoft Corporation VfpExt Microsoft Azure VFP Switch Extension 10.0.19020.1000 Kernel Driver Running System Start C:\Windows\System32\drivers\vfpext.sys Microsoft Azure VFP Extension / Microsoft® Windows® Operating System Microsoft Corporation vhdmp vhdmp 10.0.19041.84 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vhdmp.sys VHD Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation vhdparser vhdparser 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vhdparser.sys Native VHD parser / Microsoft® Windows® Operating System Microsoft Corporation vhf Virtual HID Framework (VHF) Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vhf.sys Virtual HID Framework (VHF) Driver / Microsoft® Windows® Operating System Microsoft Corporation Vid Vid 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver / Microsoft® Windows® Operating System Microsoft Corporation VirtualRender VirtualRender 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys Microsoft Virtual Render Driver / Microsoft® Windows® Operating System Microsoft Corporation vkrnlintvsc Microsoft Hyper-V NT Kernel Integration VSC 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vkrnlintvsc.sys Microsoft Hyper-V NT Kernel Integration VSC Driver / Microsoft® Windows® Operating System Microsoft Corporation vkrnlintvsp Microsoft Hyper-V NT Kernel Integration VSP 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vkrnlintvsp.sys Microsoft Hyper-V NT Kernel Integration VSP Driver / Microsoft® Windows® Operating System Microsoft Corporation vmbus Virtual Machine Bus 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmbus.sys Microsoft Hyper-V Virtual Machine Bus Child Driver / Microsoft® Windows® Operating System Microsoft Corporation VMBusHID VMBusHID 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\VMBusHID.sys Microsoft VMBus HID Miniport / Microsoft® Windows® Operating System Microsoft Corporation vmbusr Virtual Machine Bus Provider 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vmbusr.sys Microsoft Hyper-V Virtual Machine Bus Root Driver / Microsoft® Windows® Operating System Microsoft Corporation vmgid Microsoft Hyper-V Guest Infrastructure Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmgid.sys Virtual Machine Guest Infrastructure Driver / Microsoft® Windows® Operating System Microsoft Corporation vmsmp vmsmp 10.0.19041.153 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vmswitch.sys Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System Microsoft Corporation VMSNPXY VmSwitch NIC Proxy Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\VmsProxyHNic.sys VmSwitch NIC Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation VMSNPXYMP VMSNPXYMP 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\VmsProxyHNic.sys VmSwitch NIC Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation VMSP VmSwitch Protocol Driver 10.0.19041.153 Kernel Driver Running Auto Start C:\Windows\System32\drivers\vmswitch.sys Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System Microsoft Corporation VmsProxy VmSwitch Proxy Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\VmsProxy.sys VMSWITCH Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation VMSVSF VmSwitch Extensibility Filter 10.0.19041.153 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmswitch.sys Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System Microsoft Corporation VMSVSP VmSwitch Extensibility Protocol 10.0.19041.153 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vmswitch.sys Microsoft® Network Virtualization Service Provider / Microsoft® Windows® Operating System Microsoft Corporation volmgr Volume Manager Driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\volmgr.sys Volume Manager Driver / Microsoft® Windows® Operating System Microsoft Corporation volmgrx Dynamic Volume Manager 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\volmgrx.sys Volume Manager Extension Driver / Microsoft® Windows® Operating System Microsoft Corporation volsnap Volume Shadow Copy driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\volsnap.sys Volume Shadow Copy driver / Microsoft® Windows® Operating System Microsoft Corporation volume Volume driver 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\volume.sys Volume driver / Microsoft® Windows® Operating System Microsoft Corporation vpci Microsoft Hyper-V Virtual PCI Bus 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vpci.sys Virtual PCI Bus / Microsoft® Windows® Operating System Microsoft Corporation vpcivsp Microsoft Hyper-V PCI Server 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vpcivsp.sys Virtual PCI VSP Driver / Microsoft® Windows® Operating System Microsoft Corporation vsmraid vsmraid 7.0.9600.6352 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\vsmraid.sys VIA RAID DRIVER FOR AMD-X86-64 / VIA RAID driver VIA Technologies Inc.,Ltd VSPerfDrv160 VSPerf Profile Monitor Driver 16.0 16.0.27814.4001 Kernel Driver Stopped Demand Start C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\VSPerfCollectionTools\vs2019\x64\VSPerfDrv160.sys VSPerf Profiling Control Driver / Microsoft® Visual Studio® Microsoft Corporation VSTXRAID VIA StorX Storage RAID Controller Windows Driver 8.0.9200.8110 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\VSTXRAID.SYS VIA StorX RAID Controller Driver VIA Corporation vwifibus Virtual Wireless Bus Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vwifibus.sys Virtual Wireless Bus Driver / Microsoft® Windows® Operating System Microsoft Corporation vwififlt Virtual WiFi Filter Driver 10.0.19041.1 Kernel Driver Running System Start C:\Windows\System32\drivers\vwififlt.sys Virtual WiFi Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation vwifimp Virtual WiFi Miniport Service 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\vwifimp.sys Virtual WiFi Miniport Driver / Microsoft® Windows® Operating System Microsoft Corporation WacomPen Wacom Serial Pen HID Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\wacompen.sys Wacom Serial Pen Tablet HID Driver / Microsoft® Windows® Operating System Microsoft Corporation wanarp Remote Access IP ARP Driver 10.0.19041.1 Kernel Driver Running Auto Start C:\Windows\System32\drivers\wanarp.sys MS Remote Access and Routing ARP Driver / Microsoft® Windows® Operating System Microsoft Corporation wanarpv6 Remote Access IPv6 ARP Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\wanarp.sys MS Remote Access and Routing ARP Driver / Microsoft® Windows® Operating System Microsoft Corporation wcifs Windows Container Isolation 10.0.19041.1 File System Driver Running Auto Start C:\Windows\System32\drivers\wcifs.sys Windows Container Isolation FS Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation wcnfs Windows Container Name Virtualization 10.0.19041.1 File System Driver Stopped Demand Start C:\Windows\System32\drivers\wcnfs.sys Windows Container Name Virtualization FS Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation WdBoot Microsoft Defender Antivirus Boot Driver 4.18.2003.6 Kernel Driver Stopped Boot Start C:\Windows\System32\drivers\wd\WdBoot.sys Microsoft antimalware boot driver / Microsoft® Windows® Operating System Microsoft Corporation WDC_SAM WD SCSI Pass Thru driver 1.1.0.0 Kernel Driver Running Demand Start C:\Windows\System32\drivers\wdcsam64.sys Western Digital SCSI Architecture Model (SAM) driver / Western Digital SAM driver Western Digital Technologies, Inc. Wdf01000 Kernel Mode Driver Frameworks service 1.31.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\Wdf01000.sys Kernel Mode Driver Framework Runtime / Microsoft® Windows® Operating System Microsoft Corporation WdFilter Microsoft Defender Antivirus Mini-Filter Driver 4.18.2003.6 File System Driver Running Boot Start C:\Windows\System32\drivers\wd\WdFilter.sys Microsoft antimalware file system filter driver / Microsoft® Windows® Operating System Microsoft Corporation wdiwifi WDI Driver Framework 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WdiWiFi.sys WDI Driver Framework Driver / Microsoft® Windows® Operating System Microsoft Corporation WdmCompanionFilter WdmCompanionFilter 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\WdmCompanionFilter.sys WDM Companion Filter / Microsoft® Windows® Operating System Microsoft Corporation WdNisDrv Microsoft Defender Antivirus Network Inspection System Driver 4.18.2003.6 Kernel Driver Running Demand Start C:\Windows\System32\drivers\wd\WdNisDrv.sys Windows Defender Network Stream Filter / Microsoft® Windows® Operating System Microsoft Corporation WFPLWFS Microsoft Windows Filtering Platform 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\wfplwfs.sys WFP NDIS 6.30 Lightweight Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation WIMMount WIMMount 10.0.19041.84 File System Driver Stopped Demand Start C:\Windows\System32\drivers\wimmount.sys Wim file system Driver / Microsoft® Windows® Operating System Microsoft Corporation WindowsTrustedRT Windows Trusted Execution Environment Class Extension 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\WindowsTrustedRT.sys Windows Trusted Runtime Interface Driver / Microsoft® Windows® Operating System Microsoft Corporation WindowsTrustedRTProxy Microsoft Windows Trusted Runtime Secure Service 10.0.19041.1 Kernel Driver Running Boot Start C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy Driver / Microsoft® Windows® Operating System Microsoft Corporation WinMad WinMad Service 5.50.14695.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\winmad.sys Kernel WinMad / OpenFabrics Windows Mellanox WinNat Windows NAT Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\winnat.sys Windows NAT Driver / Microsoft® Windows® Operating System Microsoft Corporation WINUSB WinUsb Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\winusb.sys Windows WinUSB Class Driver / Microsoft® Windows® Operating System Microsoft Corporation WinVerbs WinVerbs Service 5.50.14695.0 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\winverbs.sys Kernel WinVerbs / OpenFabrics Windows Mellanox WmiAcpi Microsoft Windows Management Interface for ACPI 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\wmiacpi.sys Windows Management Interface for ACPI / Microsoft® Windows® Operating System Microsoft Corporation Wof Windows Overlay File System Filter Driver File System Driver Running Boot Start WpdUpFltr WPD Upper Class Filter Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WpdUpFltr.sys Windows Portable Device Upper Class Filter Driver / Microsoft® Windows® Operating System Microsoft Corporation ws2ifsl Winsock IFS Driver 10.0.19041.1 Kernel Driver Stopped Disabled C:\Windows\System32\drivers\ws2ifsl.sys Winsock2 IFS Layer / Microsoft® Windows® Operating System Microsoft Corporation WSDPrintDevice WSD Print Support 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WSDPrint.sys Web Services Print Device Driver / Microsoft® Windows® Operating System Microsoft Corporation WSDScan WSD Scan Support 10.0.19041.21 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WSDScan.sys Web Service Based Scan Device Driver / Microsoft® Windows® Operating System Microsoft Corporation WudfPf User Mode Driver Frameworks Platform Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\WUDFPf.sys Windows Driver Foundation - User-mode Driver Framework Platform Driver / Microsoft® Windows® Operating System Microsoft Corporation WUDFRd Windows Driver Foundation - User-mode Driver Framework Reflector 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System Microsoft Corporation WUDFWpdFs WPD File System driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector / Microsoft® Windows® Operating System Microsoft Corporation xboxgip Xbox Game Input Protocol Driver 10.0.19041.1 Kernel Driver Running Demand Start C:\Windows\System32\drivers\xboxgip.sys Game Input Protocol Driver / Microsoft® Windows® Operating System Microsoft Corporation xinputhid XINPUT HID Filter Driver 10.0.19041.1 Kernel Driver Stopped Demand Start C:\Windows\System32\drivers\xinputhid.sys XINPUT filter driver for HID / Microsoft® Windows® Operating System Microsoft Corporation cpuz149 cpuz149 1.0.4.9 Kernel Driver Running Demand Start C:\Windows\Temp\cpuz149\cpuz149_x64.sys CPUID Driver / CPUID service CPUID ---------- [Audio and Video Codecs] ---------------------------- Name Type Description Manufacturer Version Path and File Size bdaplgin Video Microsoft BDA Device Control Plug-in for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\bdaplgin.ax 100864 bdaplgin Video Microsoft BDA Device Control Plug-in for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\bdaplgin.ax 76288 cca Closed Captions Analysis Filter Microsoft Corporation 10.0.19041.1 C:\Windows\System32\cca.dll 92672 evr Video Enhanced Video Renderer Microsoft Corporation 10.0.19041.1 C:\Windows\System32\evr.dll 773416 g711codc Audio Intel G711 CODEC / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\g711codc.ax 60928 g711codc Audio Intel G711 CODEC / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\g711codc.ax 50688 iac25_32 Audio Indeo® audio software Intel Corporation 2.0.5.53 C:\Windows\SysWOW64\iac25_32.ax 197632 imaadp32 Audio IMA ADPCM CODEC for MSACM / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\imaadp32.acm 37440 ir41_32 IR41_32 WRAPPER DLL / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\ir41_32.ax 9216 ivfsrc Video Intel Indeo® video IVF Source Filter 5.10 Intel Corporation 5.10.2.51 C:\Windows\SysWOW64\ivfsrc.ax 146944 iyuv_32 Video Intel Indeo(R) Video YUV Codec / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\iyuv_32.dll 54272 ksproxy WDM Streaming ActiveMovie Proxy / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\ksproxy.ax 304128 ksproxy WDM Streaming ActiveMovie Proxy / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\ksproxy.ax 234496 kstvtune WDM Streaming TvTuner / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\kstvtune.ax 104960 kstvtune WDM Streaming TvTuner / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\kstvtune.ax 89600 Kswdmcap Video WDM Streaming Video Capture / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\Kswdmcap.ax 141312 Kswdmcap Video WDM Streaming Video Capture / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\Kswdmcap.ax 116224 ksxbar WDM Streaming Crossbar / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\ksxbar.ax 67584 ksxbar WDM Streaming Crossbar / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\ksxbar.ax 53248 l3codeca Audio Fraunhofer IIS MPEG Layer-3 Codec Fraunhofer Institut Integrierte Schaltungen IIS 1.9.0.401 C:\Windows\System32\l3codeca.acm 93184 midimap Audio Microsoft MIDI Mapper / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\midimap.dll 26624 Mpeg2Data Video MPEG-2 Sections and Tables Microsoft Corporation 10.0.19041.1 C:\Windows\System32\Mpeg2Data.ax 103936 Mpeg2Data Video Microsoft MPEG-2 Section and Table Acquisition Module / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\Mpeg2Data.ax 75776 mpg2splt Video AC3 Parser Filter Microsoft Corporation 10.0.19041.1 C:\Windows\System32\mpg2splt.ax 266240 mpg2splt Video DirectShow MPEG-2 Splitter. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\mpg2splt.ax 204800 MSAC3ENC Microsoft AC3 Encoder Microsoft Corporation 10.0.19041.1 C:\Windows\System32\MSAC3ENC.DLL 243200 msacm32 Audio Microsoft Sound Mapper / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msacm32.drv 30208 msadp32 Audio Microsoft ADPCM CODEC for MSACM / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msadp32.acm 34600 MSDvbNP Video Microsoft Network Provider for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\MSDvbNP.ax 79872 MSDvbNP Video Microsoft Network Provider for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\MSDvbNP.ax 66560 msg711 Audio Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msg711.acm 25824 msgsm32 Audio Microsoft GSM 6.10 Audio CODEC for MSACM / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msgsm32.acm 42904 msmpeg2adec Audio Microsoft DTV-DVD Audio Decoder Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msmpeg2adec.dll 1068144 MSMPEG2ENC Video Microsoft MPEG-2 Video Encoder Microsoft Corporation 10.0.19041.1 C:\Windows\System32\MSMPEG2ENC.DLL 944128 msmpeg2vdec Video Microsoft DTV-DVD Video Decoder Microsoft Corporation 10.0.19041.84 C:\Windows\System32\msmpeg2vdec.dll 2520040 MSNP Video Microsoft Network Provider for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\MSNP.ax 260096 MSNP Video Microsoft Network Provider for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\MSNP.ax 213504 msrle32 Video Microsoft RLE Compressor / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msrle32.dll 18432 msvidc32 Video Microsoft Video 1 Compressor / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msvidc32.dll 39936 msyuv Video Microsoft UYVY Video Decompressor / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\msyuv.dll 27648 psisrndr Video BDA MPEG2 Transport Information Filter Microsoft Corporation 10.0.19041.1 C:\Windows\System32\psisrndr.ax 99840 psisrndr Video Microsoft Transport Information Filter for MPEG2 based networks. / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\psisrndr.ax 80384 qasf WM ASF Reader Microsoft Corporation 12.0.19041.1 C:\Windows\System32\qasf.dll 157696 qcap File writer Microsoft Corporation 10.0.19041.1 C:\Windows\System32\qcap.dll 199680 qdv Video DV Muxer Microsoft Corporation 10.0.19041.1 C:\Windows\System32\qdv.dll 252416 qdvd DVD Navigator Microsoft Corporation 10.0.19041.1 C:\Windows\System32\qdvd.dll 398848 qedit SampleGrabber Microsoft Corporation 10.0.19041.1 C:\Windows\System32\qedit.dll 666112 quartz Audio Color Space Converter Microsoft Corporation 10.0.19041.1 C:\Windows\System32\quartz.dll 1686016 sbe Video SBE2MediaTypeProfile Microsoft Corporation 10.0.19041.1 C:\Windows\System32\sbe.dll 964096 tsbyuv Video Toshiba Video Codec / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\tsbyuv.dll 16896 VBICodec VBI Codec Microsoft Corporation 10.0.19041.1 C:\Windows\System32\VBICodec.ax 169984 VBICodec Microsoft VBI Codec / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\VBICodec.ax 135168 vbisurf VBI Surface Allocator Microsoft Corporation 10.0.19041.1 C:\Windows\System32\vbisurf.ax 47616 vbisurf VBI Surface Allocator Filter / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\vbisurf.ax 37888 vfwwdm32 Video WDM Video For Windows Capture Driver (Win32) Microsoft Corporation 10.0.19041.1 C:\Windows\System32\vfwwdm32.dll 70656 vidcap Video Video Capture Interface Server / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\vidcap.ax 34304 vidcap Video Video Capture Interface Server / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\vidcap.ax 28672 wdmaud Audio Winmm audio system driver / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\System32\wdmaud.drv 259584 WSTPager VPS Decoder Microsoft Corporation 10.0.19041.1 C:\Windows\System32\WSTPager.ax 95232 WSTPager Microsoft Teletext Server / Microsoft® Windows® Operating System Microsoft Corporation 10.0.19041.1 C:\Windows\SysWOW64\WSTPager.ax 72192 ---------- [Motherboard] --------------------------------------- Property Value Summary Manufacturer Microsoft Corporation Model Surface Book 2 Version [unknown] Serial Number A39113020222802A Bridge North Bridge Intel Kaby Lake Revision 08 South Bridge Intel Coffee Lake-U/Y PCH Revision 21 CPU Name Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz CPU Socket Socket 1356 FCBGA Max CPU Speed 2112 MHz Memory Summary Reported by BIOS Memory Type DDR3 Installed Memory 16.0 GB Available Memory 15.9 GB Channels Dual Maximum Capacity 16.0 GB Maximum Memory Module Size [unknown] Memory Slots 2 Error Correction None System Slots ISA 0 PCI 0 AGP 0 VL-BUS 0 EISA 0 PCMCIA 0 ExpressCard 0 MCA 0 TPM Manufacturer NTC Version 1.3.2.8 Physical Presence Interface Version 1.3 Specification Version 2.0, 0, 1.16 ---------- [BIOS] ---------------------------------------------- Property Value BIOS Properties BIOS Vendor Microsoft Corporation Serial Number 016769680257 BIOS Version 389.2837.768 Firmware Type UEFI Firmware Version [unknown] BIOS Date 2019-08-21 (Wednesday, August 21, 2019) BIOS Size 16384 KB BIOS Starting Segment BIOS Release Version [unknown] DMI Version 3.1 Characteristics Supports ISA No Supports MCA No Supports EISA No Supports PCI Yes Supports PC Card (PCMCIA) No Supports Plug-and-Play No Supports APM No Upgradeable (Flash) BIOS Yes Allows BIOS shadowing Yes Supports VL-VESA No ESCD support is available No Supports booting from CD-ROM No Supports selectable boot Yes BIOS ROM is socketed No Supports booting from PC Card (PCMCIA) No Supports Enhanced Disk Drive specification Yes Supports INT 13 for Japanese NEC 9800 1.2M floppy (3.5-inch, 1024-byte sectors, 360rpm) No Supports INT 13 for Japanese Toshiba 1.2M floppy (3.5-inch, 360rpm) No Supports INT 13 5.25-inch/360K floppy services No Supports INT 13 5.25-inch/1.2M floppy services No Supports INT 13 3.5-inch/720K floppy services No Supports INT 13 3.5-inch/2.88M floppy services No Supports INT 05 print-screen Yes Supports INT 09 and 8042 keyboard services Yes Supports INT 14 serial services No Supports INT 17 printer services Yes Supports INT 10 CGA/Mono video services No NEC PC-98 No Supports ACPI Yes Supports legacy USB Yes Supports AGP No Supports booting from I2O device No Supports booting from LS-120 No Supports booting from ATAPI ZIP drive No Supports booting from IEEE 1394 device No Smart Battery supported No BIOS Boot Specification supported Yes Function key-initiated Network Service boot supported No Enable Targeted Content Distribution Yes ACPI MCFG FACP APIC DMAR HPET FPDT SSDT TPM2 MSDM LPIT NHLT BGRT WSMT ---------- [CPU] ----------------------------------------------- Property Value Virtual Machine Type Microsoft Hyper-V (Host Partition) Summary Number of Sockets 1 Number of Physical Processors 1 Number of Cores per Processor 4 Number of Logical Processors 8 CPU #1 CPU Name Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz Vendor GenuineIntel Description Intel64 Family 6 Model 142 Stepping 10 CPU Code Name Kaby Lake-U/Y Part Number Not Available Serial Number Not Available Asset Tag Not Available Family 6 Model 8E Stepping A Revision U0 Microcode MU068E0AB4 Number of Bits 64 Instruction Set ET64, MMX, SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2, XD, PAE, XSAVE, RDRAND, AES, AVX, AVX2, FMA3, VMX, EPT, TSX, SMX, EST Platform Name Socket 1356 FCBGA Max TDP 15.0 W Technology x64 14nm Core Voltage Not Available Original Clock 1900 MHz Original System Clock 100 MHz Original Multiplier 19.0 CPU Clock 1800 MHz System Clock 99.7 MHz Max CPU Speed 2112 MHz FSB Not Available Number of Cores 4 Core #1 Core #2 Core #3 Core #4 Turbo Boost Enabled Virtual Technology Enabled SLAT Supported Hyper Threading Enabled Cache L1 Data Cache 4 x 32 KBytes, 8-way set associative, 64-byte line size L1 Instructions Cache 4 x 32 KBytes, 8-way set associative, 64-byte line size L2 Cache 4 x 256 KBytes, 4-way set associative, 64-byte line size L3 Cache 8192 KBytes, 16-way set associative, 64-byte line size ---------- [Memory] -------------------------------------------- Property Value Memory Summary Reported by BIOS Memory Type DDR3 Installed Memory 16.0 GB Available Memory 15.9 GB Channels Dual Maximum Capacity 16.0 GB Maximum Memory Module Size [unknown] Memory Slots 2 Error Correction None Memory Timings Device Locator ChannelA-DIMM0 Memory Type Synchronous Unbuffered (Unregistered) LPDDR3 Manufacturer SK Hynix Model H9CCNNNCLGALAR-NUD Serial Number [unknown] Firmware Version [unknown] Capacity 8192 MB Data Bus Width 64 bits Configured Speed 1867 MHz Speed 1867 MHz Configured Voltage 1.200 V Minimum Voltage [unknown] Maximum Voltage [unknown] Manufacturing Date [unknown] Form Factor Row Of Chips Asset Tag [unknown] Bank Locator BANK 0 AMP SPD Support [unknown] XMP SPD Support [unknown] EPP SPD Support [unknown] JEDEC Profiles [unknown] Supported Frequencies [unknown] Device Locator ChannelB-DIMM0 Memory Type Synchronous Unbuffered (Unregistered) LPDDR3 Manufacturer SK Hynix Model H9CCNNNCLGALAR-NUD Serial Number [unknown] Firmware Version [unknown] Capacity 8192 MB Data Bus Width 64 bits Configured Speed 1867 MHz Speed 1867 MHz Configured Voltage 1.200 V Minimum Voltage [unknown] Maximum Voltage [unknown] Manufacturing Date [unknown] Form Factor Row Of Chips Asset Tag [unknown] Bank Locator BANK 2 AMP SPD Support [unknown] XMP SPD Support [unknown] EPP SPD Support [unknown] JEDEC Profiles [unknown] Supported Frequencies [unknown] ---------- [Sensors] ------------------------------------------- Sensor Value Min Max BOOK2-GABI Microsoft Corporation Surface Book 2 Utilizations System Memory 43 % 43 % 44 % Intel Core i7 8650U Voltages IA Offset 0.00 V 0.00 V 0.00 V GT Offset 0.00 V 0.00 V 0.00 V LLC/Ring Offset 0.00 V 0.00 V 0.00 V System Agent Offset 0.00 V 0.00 V 0.00 V VID #0 1.04 V 0.79 V 1.32 V VID #1 1.04 V 0.76 V 1.32 V VID #2 1.11 V 0.59 V 1.25 V VID #3 1.03 V 0.77 V 1.33 V Temperatures Package 79 °C (174 °F) 46 °C (114 °F) 98 °C (208 °F) Core #0 78 °C (172 °F) 45 °C (113 °F) 98 °C (208 °F) Core #1 75 °C (167 °F) 44 °C (111 °F) 77 °C (170 °F) Core #2 81 °C (177 °F) 45 °C (113 °F) 83 °C (181 °F) Core #3 78 °C (172 °F) 45 °C (113 °F) 81 °C (177 °F) Powers Package 23.58 W 2.33 W 25.42 W IA Cores 21.71 W 0.30 W 23.16 W GT 0.15 W 0.00 W 0.82 W Uncore 1.71 W 1.32 W 2.89 W DRAM 1.01 W 0.67 W 1.62 W Clocks Core #0 3091 MHz 3091 MHz 3891 MHz Core #1 3091 MHz 3091 MHz 3891 MHz Core #2 3390 MHz 3390 MHz 3792 MHz Core #3 3091 MHz 3091 MHz 4191 MHz Utilizations Processor 25 % 25 % 27 % CPU #0 100 % 0 % 100 % CPU #1 86 % 0 % 95 % CPU #2 96 % 0 % 96 % CPU #3 86 % 0 % 86 % CPU #4 89 % 0 % 89 % CPU #5 89 % 0 % 89 % CPU #6 87 % 0 % 87 % CPU #7 87 % 0 % 87 % SAMSUNG MZFLW1T0HMLH-000MU Temperatures Assembly 39 °C (102 °F) 39 °C (102 °F) 39 °C (102 °F) Utilizations Space (c:) 26 % 26 % 26 % WDC WD20EADS-00R6B0 Temperatures Assembly 49 °C (120 °F) 49 °C (120 °F) 49 °C (120 °F) Utilizations Space (p:) 10 % 10 % 10 % Intel(R) UHD Graphics 620 Temperatures GPU 70 °C (158 °F) 50 °C (122 °F) 70 °C (158 °F) NVIDIA GeForce GTX 1060 Voltages GPU 0.59 V 0.59 V 0.59 V Temperatures GPU 35 °C (95 °F) 35 °C (95 °F) 35 °C (95 °F) Fans PWM FANPWMIN0 0 % 0 % 0 % Clocks Graphics 291 MHz 139 MHz 608 MHz Memory 405 MHz 405 MHz 405 MHz Video 544 MHz 544 MHz 544 MHz Utilizations GPU 0 % 0 % 0 % Memory 0 % 0 % 0 % Frame Buffer 0 % 0 % 0 % Video Engine 0 % 0 % 0 % Bus Interface 0 % 0 % 3 % M1010456 Voltages Current Voltage 12.13 V 12.13 V 12.13 V Capacities Designed Capacity 62200 mWh 62200 mWh 62200 mWh Full Charge Capacity 61040 mWh 61040 mWh 61040 mWh Current Capacity 61040 mWh 61040 mWh 61040 mWh Levels Wear Level 2 % 2 % 2 % Charge Level 100 % 100 % 100 % M1005046 Voltages Current Voltage 8.19 V 8.19 V 8.19 V Capacities Designed Capacity 23200 mWh 23200 mWh 23200 mWh Full Charge Capacity 23580 mWh 23580 mWh 23580 mWh Current Capacity 23580 mWh 23580 mWh 23580 mWh Levels Wear Level 0 % 0 % 0 % Charge Level 100 % 100 % 100 % ---------- [Network Adapters] ---------------------------------- Property Value Network Adapter 1 Model Xbox Wireless Adapter for Windows Manufacturer Microsoft Corporation Description Xbox Wireless Adapter for Windows Name [SIW] Not Available Label Local Area Connection Status Connected MAC Address 62:45:B5:13:58:32 Type Other Speed 600 Mbps Driver Provider Xbox Driver Version 1.0.45.4 Driver Date 2017-06-21 (Wednesday, June 21, 2017) Service Name mt7612US_bc Product Name Xbox Wireless Adapter for Windows Time Of Last Reset 2020-03-17 10:45:32 (Tuesday, March 17, 2020) Properties Network Adapter 2 Model Marvell AVASTAR Wireless-AC Network Controller Manufacturer Marvell Semiconductor, Inc. Description Marvell AVASTAR Wireless-AC Network Controller Name [SIW] Marvell Technology Group Ltd. 88W8897 [AVASTAR] 802.11ac Wireless Label Wi-Fi Status Connected MAC Address C4:9D:ED:8B:9D:02 Type Wireless Native 802.11 Speed 72 Mbps Driver Provider Marvell Semiconductor, Inc. Driver Version 15.68.17017.115 Driver Date 2019-09-25 (Wednesday, September 25, 2019) Service Name mrvlpcie8897 Product Name Marvell AVASTAR Wireless-AC Network Controller Time Of Last Reset 2020-03-17 10:45:32 (Tuesday, March 17, 2020) Properties Network Adapter 3 Model Bluetooth Device (Personal Area Network) #2 Manufacturer Microsoft Description Bluetooth Device (Personal Area Network) Name [SIW] Not Available Label Bluetooth Network Connection 2 Status Media disconnected MAC Address C4:9D:ED:8B:9D:03 Type Ethernet 802.3 Speed 3000 Kbps Driver Provider Not Available Driver Version Not Available Driver Date Not Available Service Name BthPan Product Name Bluetooth Device (Personal Area Network) Time Of Last Reset 2020-03-17 10:45:32 (Tuesday, March 17, 2020) Properties Network Adapter 4 Model Surface Ethernet Adapter Manufacturer Surface Description Surface Ethernet Adapter Name [SIW] Not Available Label Ethernet 3 Status Connected MAC Address C4:9D:ED:E8:88:BF Type Wired 802.3 Speed 1000 Mbps Driver Provider Surface Driver Version 10.14.117.2020 Driver Date 2020-01-17 (Friday, January 17, 2020) Service Name msux64w10 Product Name Surface Ethernet Adapter Time Of Last Reset 2020-03-17 10:45:32 (Tuesday, March 17, 2020) Properties ---------- [Video] --------------------------------------------- Property Value Video Adapter Intel(R) UHD Graphics 620 Availability Running Name [SIW] Intel Corporation UHD Graphics 620 [Microsoft Corporation] Code Name Not Available Video Processor Intel(R) UHD Graphics Family Technology Not Available Adapter DAC Type Internal PCI ID 0x8086 / 0x5917 - Intel Corporation / UHD Graphics 620 PCI sub ID 0x1414 / 0x0028 - Microsoft Corporation Memory 1024 MBytes Performance Level Perf Level 0 Adapter BIOS String Intel Video BIOS Adapter BIOS Date Not Available Video Mode Description 3440 x 1440 x 4294967296 colors Driver Version 25.20.100.6472 Drivers C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igdumdim64.dll|C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igd10iumd64.dll|C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igd10iumd64.dll|C:\WINDOWS\System32\DriverStore\FileRepository\64jp6472.inf_amd64_9cb509ce249c1c9b\igd12umd64.dll Driver Date 2018-12-25 (Tuesday, December 25, 2018) Properties Video Adapter NVIDIA GeForce GTX 1060 Availability Offline Name [SIW] NVIDIA Corporation GP106M [GeForce GTX 1060 Mobile] [Microsoft Corporation] Code Name GP106 Video Processor GeForce GTX 1060 Technology 16 nm Adapter DAC Type Integrated RAMDAC PCI ID 0x10DE / 0x1C20 - NVIDIA Corporation / GP106M [GeForce GTX 1060 Mobile] PCI sub ID 0x1414 / 0x0024 - Microsoft Corporation Memory 6144 MBytes Performance Level Perf Level 0 Adapter BIOS String Not Available Adapter BIOS Date Not Available Video Mode Description Not Available Driver Version 23.21.13.9140 Drivers C:\WINDOWS\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvmso.inf_amd64_8461c3207f0421af\nvldumdx.dll Driver Date 2018-04-04 (Wednesday, April 4, 2018) Properties DirectX DirectX v12.0 File Version 10.0.19041.1 Monitor Dell U3417W(DisplayPort) Name [SIW] Dell U3417W(DisplayPort) Model DELL U3417W Monitor ID DELA0DE Manufacturer Dell Inc. Manufacturing Date 2018, Week 21 Input Digital Serial Number FR3PK85O152L Display Size 34" (80 cm x 33 cm) Horizontal Frequency 30-89 KHz Vertical Frequency 48-85 Hz Current Resolution 3440 x 1440 @ 60 Hz - Aspect Ratio 43:18 Supported Resolution 3440 x 1440 @ 60 Hz - Aspect Ratio 43:18 Supported Resolution 1152 x 864 @ 75 Hz - Aspect Ratio 4:3 Supported Resolution 1280 x 800 @ 60 Hz - Aspect Ratio 16:10 Supported Resolution 1280 x 1024 @ 60 Hz - Aspect Ratio 5:4 Supported Resolution 1600 x 1200 @ 60 Hz - Aspect Ratio 4:3 Supported Resolution 1920 x 1080 @ 60 Hz - Aspect Ratio 16:9 EDID Version 1 revision 4 Max dot clock (video bandwidth) 320 MHz DPMS Mode Support Active Off Properties Monitor Surface Display Name [SIW] Surface Display Model LP150QD112604 Monitor ID LGD0554 Manufacturer Surface Manufacturing Date 2016 Input Digital Display Size 15" (32 cm x 21 cm) Brightness 69% Horizontal Frequency 0-0 KHz Vertical Frequency 48-60 Hz Current Resolution 3240 x 2160 @ 60 Hz - Aspect Ratio 3:2 Supported Resolution 3240 x 2160 @ 60 Hz - Aspect Ratio 3:2 EDID Version 1 revision 4 Max dot clock (video bandwidth) 450 MHz Properties Display Device \\.\DISPLAY1 Device Name Intel(R) UHD Graphics 620 Device Key \Registry\Machine\System\CurrentControlSet\Control\Video\{8F171A87-5831-11EA-9626-C49DEDE888BF}\0000 Device Flags DISPLAY_DEVICE_ACTIVE, DISPLAY_DEVICE_PRIMARY_DEVICE Video Modes Monitor \\.\DISPLAY1\Monitor0 Display Device \\.\DISPLAY2 Device Name Intel(R) UHD Graphics 620 Device Key \Registry\Machine\System\CurrentControlSet\Control\Video\{8F171A87-5831-11EA-9626-C49DEDE888BF}\0001 Device Flags DISPLAY_DEVICE_ACTIVE Video Modes Monitor \\.\DISPLAY2\Monitor0 ---------- [Storage Devices] ----------------------------------- Property Value CD-ROM 0 Manufacturer Western Digital Model WD Virtual CD 1110 USB Device Size 0 Bytes Firmware Version 2018 Serial Number Rotational Speed Not Available Form Factor Not Available Interface Standard Advanced Format Supported Not Available Drive Letter(s) D: Queue Depth 1 Removable No Cache Enabled (Read / Write) [unknown] / [unknown] Capabilities Volume Serial Number ABD5A30E Volume Name WD SmartWare SMART Support No Properties Disk 0 Manufacturer Samsung Model SAMSUNG MZFLW1T0HMLH-000MU Size 1024.2 GB Firmware Version CXY74M0Q Serial Number S3PBNX0JC01563 Rotational Speed Solid State Device (SSD) Form Factor Not Available Interface NVM Express Standard NVM Express 1.0/1.1 Advanced Format Supported 512 emulation (512e) Transfer Mode (Current / Max) PCIe 3.0 x4 / PCIe 3.0 x4 Features S.M.A.R.T. Host Writes 24480.2 TB Host Reads 24029.2 TB Power Cycle Count 115 Power On Hours Count 4503 Hours Status Good Temperature 39 C (102 F) Drive Letter(s) C: Queue Depth 1 Removable No Cache Enabled (Read / Write) Yes / Yes SMART Support Yes Properties Disk 1 Manufacturer Western Digital Model WDC WD20EADS-00R6B0 Friendly name WD My Book 1110 USB Device Size 2000.3 GB Firmware Version 01.00A01 Serial Number WD-WCAVY2802769 Rotational Speed Not Available Form Factor Not Available Interface USB (Serial ATA) Standard ATA8-ACS | ---- Advanced Format Supported Not Available Transfer Mode (Current / Max) SATA-300 / SATA-300 Features S.M.A.R.T., 48bit LBA, NCQ, AAM (Disabled) Power Cycle Count 68 Power On Hours Count 86441 Hours Status Good Temperature 49 C (120 F) Drive Letter(s) P: Controller Buffer Size on Drive 32767 KB Queue Depth 32 Enclosure Device WD My Book 1110 USB Device (VID=1058h, PID=1110h) Removable No Cache Enabled (Read / Write) [unknown] / [unknown] SMART Support Yes Properties ---------- [Ports] --------------------------------------------- Property Value Ports COM4 Standard Serial over Bluetooth link COM3 Standard Serial over Bluetooth link Supported Modes USB1 Supported USB2 Supported USB3 Supported USB Devices Generic SuperSpeed USB Hub USB\VID_045E&PID_0943\6&2F49523B&0&1 USB Input Device USB\VID_045E&PID_0904\6&1F97EB87&1&3 CD-ROM Drive USBSTOR\CDROM&VEN_WD&PROD_VIRTUAL_CD_1110&REV_2018\574341565932383032373639&1 Marvell AVASTAR Bluetooth Radio Adapter USB\VID_1286&PID_204C\0000000000000000 Generic USB Hub USB\VID_045E&PID_0942\5&2C705BFE&0&1 Xbox Wireless Adapter for Windows USB\VID_045E&PID_091E\000000000 USB Root Hub (USB 3.0) USB\ROOT_HUB30\4&DB2FC44&0&0 Generic SuperSpeed USB Hub USB\VID_045E&PID_0900\5&2C705BFE&0&16 Generic USB Hub USB\VID_045E&PID_0901\5&2C705BFE&0&4 USB Mass Storage Device USB\VID_1058&PID_1110\574341565932383032373639 Generic USB Hub USB\VID_045E&PID_0944\6&15BA3093&0&1 Surface Ethernet Adapter USB\VID_045E&PID_07C6\000001000000 Generic USB Hub USB\VID_045E&PID_0903\6&1F97EB87&1&1 Generic SuperSpeed USB Hub USB\VID_045E&PID_0941\5&2C705BFE&0&13 Disk drive USBSTOR\DISK&VEN_WD&PROD_MY_BOOK_1110&REV_2018\574341565932383032373639&0 USB Input Device USB\VID_045E&PID_0922\6&15BA3093&0&3 WD SES Device USBSTOR\OTHER&VEN_WD&PROD_SES_DEVICE&REV_2018\574341565932383032373639&2 Generic SuperSpeed USB Hub USB\VID_045E&PID_0902\6&22F239F&1&1 USB Controller Surface Ucsi Device Surface Ucsi Device Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft) Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft) History WD Virtual CD 1110 USB Device WD My Book 1110 USB Device [unknown] ---------- [Network Information] ------------------------------- Property Value Network Computer Name BOOK2-GABI Computer Description Gabriel's Surface Book2 Workgroup Name WORKGROUP Logon Server \\BOOK2-GABI Windows Sockets Socket Version 2.0 Highest Version 2.2 Description WinSock 2.0 System Status Running Network Interface 1 Friendly name Bluetooth Network Connection 2 Model Bluetooth Device (Personal Area Network) #2 Manufacturer Microsoft Description Bluetooth Device (Personal Area Network) Type Ethernet 802.3 MAC Address C4:9D:ED:8B:9D:03 MTU 1500 Bytes Operational Status Down Network Interface 2 Friendly name vEthernet (vEthernet (Wire) Model Hyper-V Virtual Ethernet Adapter Manufacturer Microsoft Description Hyper-V Virtual Ethernet Adapter Type Ethernet Adapter MAC Address 00:15:5D:80:FB:21 MTU 1500 Bytes Operational Status Up TransmitLinkSpeed 10 Gbps ReceiveLinkSpeed 10 Gbps IPv4 Address 172.24.96.1 [book2-gabi] IPv4 Default Gateway [unknown] IPv4 DHCP Enabled No IPv4 DNS Server [unknown] WINS Enabled No IPv4 Multicast Address 224.0.0.1 [all-systems.mcast.net] IPv6 Address fe80::f046:43e5:8c60:b4e8%32 Flags Zone Info if 32, link 32, subnet 32, admin 1, site 1, org 1, global 0 IPv6 Multicast Address ff01::1%32 Network Interface 3 Friendly name vEthernet (Surface) Model Surface Ethernet Adapter Manufacturer Surface Description Hyper-V Virtual Ethernet Adapter #2 Type Wired 802.3 MAC Address C4:9D:ED:E8:88:BF MTU 1500 Bytes Operational Status Up TransmitLinkSpeed 1000 Mbps ReceiveLinkSpeed 1000 Mbps IPv4 Address 192.168.2.161 [book2-gabi.home] IPv4 Default Gateway 192.168.2.1 [mynetwork] IPv4 DHCP Enabled Yes IPv4 DNS Server 192.168.2.1 [mynetwork] WINS Enabled No IPv4 Multicast Address 224.0.0.1 [all-systems.mcast.net] IPv6 Address fe80::9096:79ec:9943:fa9a%30 Flags DDNS_ENABLED, DHCP_ENABLED Zone Info if 30, link 30, subnet 30, admin 1, site 1, org 1, global 0 IPv6 Multicast Address ff01::1%30 Network Interface 4 Friendly name vEthernet (Default Switch) Model Hyper-V Virtual Ethernet Adapter #3 Manufacturer Microsoft Description Hyper-V Virtual Ethernet Adapter #3 Type Ethernet Adapter MAC Address 00:15:5D:F5:0B:2B MTU 1500 Bytes Operational Status Up TransmitLinkSpeed 10 Gbps ReceiveLinkSpeed 10 Gbps IPv4 Address 172.31.224.1 [book2-gabi.mshome.net] IPv4 Default Gateway [unknown] IPv4 DHCP Enabled No IPv4 DNS Server [unknown] WINS Enabled No IPv4 Multicast Address 224.0.0.1 [all-systems.mcast.net] IPv6 Address fe80::70e2:f90d:34b7:5bb2%42 Flags Zone Info if 42, link 42, subnet 42, admin 1, site 1, org 1, global 0 IPv6 Multicast Address ff01::1%42 Network Interface 5 Friendly name vEthernet (Wireless) Model Marvell AVASTAR Wireless-AC Network Controller Manufacturer Marvell Semiconductor, Inc. Description Hyper-V Virtual Ethernet Adapter #4 Type Wireless Native 802.11 MAC Address C4:9D:ED:8B:9D:02 MTU 1500 Bytes Operational Status Up TransmitLinkSpeed 72 Mbps ReceiveLinkSpeed 72 Mbps IPv4 Address 192.168.2.170 [book2-gabi.home] IPv4 Default Gateway 192.168.2.1 [mynetwork] IPv4 DHCP Enabled Yes IPv4 DNS Server 192.168.2.1 [mynetwork] WINS Enabled No IPv4 Multicast Address 224.0.0.1 [all-systems.mcast.net] IPv6 Address fe80::a1df:6264:8860:470%4 Flags DDNS_ENABLED, DHCP_ENABLED Zone Info if 4, link 4, subnet 4, admin 1, site 1, org 1, global 0 IPv6 Multicast Address ff01::1%4 Network Interface 6 Friendly name vEthernet (vEthernet (Surf) Model Hyper-V Virtual Ethernet Adapter #5 Manufacturer Microsoft Description Hyper-V Virtual Ethernet Adapter #5 Type Ethernet Adapter MAC Address 00:15:5D:86:FA:41 MTU 1500 Bytes Operational Status Up TransmitLinkSpeed 10 Gbps ReceiveLinkSpeed 10 Gbps IPv4 Address 172.25.0.1 [book2-gabi] IPv4 Default Gateway [unknown] IPv4 DHCP Enabled No IPv4 DNS Server [unknown] WINS Enabled No IPv4 Multicast Address 224.0.0.1 [all-systems.mcast.net] IPv6 Address fe80::4d70:1d4e:c938:515d%51 Flags Zone Info if 51, link 51, subnet 51, admin 1, site 1, org 1, global 0 IPv6 Multicast Address ff01::1%51 Network Interface 7 Friendly name Local Area Connection* 1 Model Microsoft Wi-Fi Direct Virtual Adapter Manufacturer Microsoft Description Microsoft Wi-Fi Direct Virtual Adapter Type Wireless MAC Address C6:9D:ED:8B:9C:03 MTU 1500 Bytes Operational Status Down Network Interface 8 Friendly name Local Area Connection* 2 Model Microsoft Wi-Fi Direct Virtual Adapter #2 Manufacturer Microsoft Description Microsoft Wi-Fi Direct Virtual Adapter #2 Type Wireless MAC Address C6:9D:ED:8B:99:03 MTU 1500 Bytes Operational Status Down Protocols MSAFD Tcpip [TCP/IP] MSAFD Tcpip [UDP/IP] MSAFD Tcpip [TCP/IPv6] MSAFD Tcpip [UDP/IPv6] AF_UNIX RSVP TCPv6 Service Provider RSVP TCP Service Provider RSVP UDPv6 Service Provider RSVP UDP Service Provider Hyper-V RAW MSAFD L2CAP [Bluetooth] MSAFD RfComm [Bluetooth] ---------- [Network Connections] ------------------------------- Property Value Network Connections Name \\dell8700\share (S:) Name \\live.sysinternals.com\Tools (T:) SMB Connections Name \\dell8700\IPC$ Name \\dell8700\share (S:) RAS Connections No entries found!