Hi,
Here's the results of the first step, more to follow:
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 49.04 60 K 8 K 0
procexp64.exe 8.21 30,540 K 63,540 K 8832 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
svchost.exe 1.94 9,896 K 22,264 K 2092 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
CompatTelRunner.exe 2.48 52,676 K 31,720 K 4432 Microsoft Compatibility Telemetry Microsoft Corporation (Verified) Microsoft Windows
SrTasks.exe 2.22 68,380 K 29,664 K 6968 Microsoft® Windows System Protection background tasks. Microsoft Corporation (Verified) Microsoft Windows
MsMpEng.exe 2.06 212,812 K 150,640 K 1804 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Windows Publisher
WmiPrvSE.exe 2.04 3,100 K 10,088 K 452 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
System 0.95 196 K 752 K 4
dwm.exe 1.61 43,432 K 68,472 K 6024 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
Interrupts 0.76 0 K 0 K n/a Hardware Interrupts and DPCs
svchost.exe 0.33 8,228 K 16,868 K 844 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
HxTsr.exe 0.71 23,572 K 51,376 K 8800 Microsoft Outlook Communications Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
csrss.exe 0.64 2,184 K 6,188 K 9780 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
explorer.exe 0.42 50,604 K 158,384 K 8764 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe 0.38 21,796 K 31,252 K 7760 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.23 55,576 K 67,420 K 1852 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 13,144 K 36,540 K 760 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
services.exe 0.23 5,324 K 10,576 K 644 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows Publisher
lsass.exe 0.03 8,872 K 28,356 K 652 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,172 K 8,212 K 1572 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
csrss.exe < 0.01 1,744 K 6,016 K 488 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchIndexer.exe 0.03 19,032 K 23,812 K 2012 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 5,132 K 9,724 K 1472 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
SgrmBroker.exe 0.01 4,748 K 7,500 K 5620 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.02 12,692 K 23,656 K 4352 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,060 K 16,916 K 2228 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 17,640 K 21,512 K 1296 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
RuntimeBroker.exe 0.01 2,804 K 18,200 K 4852 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.01 3,028 K 19,436 K 6320 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 7,060 K 32,116 K 9988 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
conhost.exe 0.01 6,644 K 2,040 K 8664 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2,432 K 9,064 K 896 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
sihost.exe < 0.01 5,964 K 26,800 K 7504 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
SynTPEnh.exe < 0.01 6,244 K 21,640 K 9588 Synaptics TouchPad 64-bit Enhancements Synaptics Incorporated (Verified) Synaptics Incorporated
svchost.exe < 0.01 1,612 K 6,696 K 2876 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
OneDrive.exe < 0.01 24,540 K 62,116 K 7512 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation
svchost.exe 6,676 K 18,708 K 2884 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
taskhostw.exe < 0.01 6,744 K 17,940 K 6848 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
OfficeClickToRun.exe < 0.01 29,304 K 54,924 K 4032 Microsoft Office Click-to-Run (SxS) Microsoft Corporation (Verified) Microsoft Corporation
YourPhone.exe Suspended 28,492 K 53,876 K 7624 YourPhone Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
WUDFHost.exe 1,972 K 9,164 K 2528 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe 2,440 K 10,924 K 9656 Windows Log-on Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe 1,508 K 7,624 K 580 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows Publisher
ViakaraokeSrv.exe 1,220 K 6,172 K 2780 Service binary VIA Technologies, Inc. (Verified) VIA Technologies Inc.
SynTPHelper.exe 1,040 K 5,380 K 8588 Synaptics Pointing Device Helper Synaptics Incorporated (Verified) Synaptics Incorporated
SynTPEnhService.exe 1,132 K 4,840 K 2164 64-bit Synaptics Pointing Enhance Service Synaptics Incorporated (Verified) Synaptics Incorporated
svchost.exe 0.05 18,024 K 31,812 K 2900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,044 K 8,096 K 2476 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,352 K 9,364 K 2316 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,640 K 14,612 K 1144 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 9,360 K 19,588 K 2736 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,972 K 13,860 K 1228 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,704 K 18,520 K 6956 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,828 K 26,608 K 5252 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.04 11,084 K 20,408 K 1644 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,356 K 14,760 K 2580 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,672 K 24,164 K 3304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,648 K 22,452 K 3100 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,652 K 14,300 K 10096 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,624 K 16,920 K 4980 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,144 K 9,260 K 4320 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,376 K 11,568 K 3188 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,808 K 9,804 K 5024 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,756 K 8,568 K 4972 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,884 K 15,924 K 1616 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,656 K 13,324 K 1708 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 14,024 K 24,688 K 2920 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,932 K 15,284 K 1864 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,964 K 12,308 K 1360 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,692 K 8,984 K 3868 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,424 K 7,876 K 4016 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,168 K 11,940 K 276 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 110,548 K 88,096 K 7684 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,580 K 23,800 K 2856 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,920 K 8,864 K 1960 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,052 K 8,284 K 1828 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,488 K 6,320 K 5600 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,704 K 12,488 K 4856 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,904 K 10,464 K 1988 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 9,388 K 30,928 K 4208 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,924 K 8,128 K 1768 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,576 K 21,660 K 2552 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,276 K 10,680 K 2148 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 8,480 K 45,628 K 2396 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,432 K 10,580 K 2328 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,148 K 16,508 K 428 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,724 K 7,184 K 2308 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,180 K 15,664 K 1076 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,620 K 11,400 K 1136 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,428 K 11,096 K 1040 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,612 K 7,308 K 6628 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,580 K 13,536 K 7308 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,372 K 15,296 K 3716 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,580 K 7,196 K 3056 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,296 K 5,912 K 3172 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,256 K 6,100 K 2380 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,652 K 11,800 K 2960 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,956 K 8,664 K 2764 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,564 K 7,712 K 1816 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,768 K 8,716 K 1652 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,100 K 9,684 K 1208 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,280 K 6,248 K 1868 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,932 K 9,508 K 1892 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,380 K 14,272 K 1736 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,768 K 10,300 K 1124 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,944 K 11,696 K 5724 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,676 K 8,188 K 9264 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,224 K 14,808 K 2284 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,244 K 6,220 K 3312 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
StartMenuExperienceHost.exe 26,320 K 67,940 K 5768 (Verified) Microsoft Windows
spoolsv.exe 5,876 K 20,036 K 2700 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
smss.exe 1,052 K 1,212 K 336 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows Publisher
smartscreen.exe 7,640 K 22,816 K 5464 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows
ShellExperienceHost.exe Suspended 15,648 K 50,316 K 5932 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
SettingSyncHost.exe 6,820 K 7,808 K 9996 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthSystray.exe 1,792 K 9,440 K 8568 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthService.exe 3,848 K 14,272 K 6852 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchProtocolHost.exe 1,876 K 8,356 K 9440 Microsoft Windows Search Protocol Host Microsoft Corporation (Verified) Microsoft Windows
SearchFilterHost.exe 1,636 K 7,480 K 5360 Microsoft Windows Search Filter Host Microsoft Corporation (Verified) Microsoft Windows
SearchApp.exe Suspended 86,748 K 148,984 K 4624 Search application Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,816 K 16,504 K 4500 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 5,788 K 32,856 K 6088 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 3,712 K 22,324 K 8056 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 5,356 K 24,632 K 7952 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 8,904 K 35,828 K 10172 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,944 K 15,908 K 992 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 6,044 K 26,312 K 8956 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
Registry 20,208 K 54,516 K 92
procexp.exe 4,304 K 11,472 K 8804 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
PresentationFontCache.exe 23,632 K 18,920 K 4516 PresentationFontCache.exe Microsoft Corporation (Verified) Microsoft Corporation
NisSrv.exe 3,608 K 11,036 K 9368 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Windows Publisher
msiexec.exe 8,632 K 17,204 K 2800 Windows® installer Microsoft Corporation (Verified) Microsoft Windows
MoUsoCoreWorker.exe 26,808 K 43,408 K 2612 MoUSO Core Worker Process Microsoft Corporation (Verified) Microsoft Windows
Microsoft.Photos.exe Suspended 33,884 K 61,584 K 1564 (No signature was present in the subject)
Memory Compression 184 K 1,112 K 1932
LockApp.exe Suspended 16,608 K 52,632 K 3252 LockApp.exe Microsoft Corporation (Verified) Microsoft Windows
igfxTray.exe 2,948 K 12,100 K 5808 (Verified) Intel® pGFX
igfxHK.exe 2,464 K 10,756 K 6576 igfxHK Module Intel Corporation (Verified) Intel® pGFX
igfxEM.exe 3,580 K 13,856 K 8112 igfxEM Module Intel Corporation (Verified) Intel® pGFX
igfxCUIService.exe 2,168 K 9,852 K 2016 igfxCUIService Module Intel Corporation (Verified) Intel® pGFX
ibtsiva.exe 1,000 K 4,892 K 2940 Intel® Wireless Bluetooth® iBtSiva Service Intel Corporation (Verified) Intel® Wireless Connectivity Solutions
fontdrvhost.exe 1,888 K 6,096 K 7128 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe 1,444 K 4,136 K 776 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe 0.01 3,212 K 11,548 K 4220 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
ctfmon.exe 4,136 K 20,124 K 4992 CTF Loader Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 6,212 K 10,912 K 476 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
CompatTelRunner.exe 1,052 K 2,156 K 7348 Microsoft Compatibility Telemetry Microsoft Corporation (Verified) Microsoft Windows
audiodg.exe 6,880 K 13,096 K 4716 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
AppVShNotify.exe 1,668 K 8,144 K 5144 Microsoft Application Virtualization Client Shell Notifier Microsoft Corporation (Verified) Microsoft Windows
AppVShNotify.exe 1,576 K 7,468 K 5432 Microsoft Application Virtualization Client Shell Notifier Microsoft Corporation (Verified) Microsoft Windows