[Logon] [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell] [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] + "Adobe Acrobat Synchronizer" "Acrobat Collaboration Synchronizer 23.1" "(Verified) Adobe Inc." "C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe" "Thu May 4 22:12:32 2023" " + "BingWallpaperApp" "Bing Wallpaper" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\BingWallpaperApp\BingWallpaperApp.exe" "Fri Apr 28 11:50:58 2023" " + "OneDrive" "Microsoft OneDrive" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\OneDrive.exe" "Fri Jun 23 13:50:41 2023" " + "SUPERAntiSpyware" "SUPERAntiSpyware Application" "(Verified) Support.com, Inc." "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" "Thu Feb 24 15:57:00 2022" " [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] [HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] [HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] [HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKCU\Environment\UserInitMprLogonScript] [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load] [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run] [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run] [HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms] + "rdpclip" "RDP Clipboard Monitor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rdpclip.exe" "Thu Oct 13 13:59:22 2022" " [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] + "iTunesHelper" "iTunesHelper" "(Verified) Apple Inc." "C:\Program Files\iTunes\iTunesHelper.exe" "Thu Dec 8 15:41:54 2022" " + "RtkAudUService" "Realtek HD Audio Universal Service" "(Verified) Realtek Semiconductor Corp." "C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0e8db3195354f73d\RtkAudUService64.exe" "Wed Feb 3 23:05:46 2021" " + "SecurityHealth" "Windows Security notification icon" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SecurityHealthSystray.exe" "Fri Dec 17 21:55:52 2021" " [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell] + "explorer.exe" "Windows Explorer" "(Verified) Microsoft Windows" "C:\WINDOWS\explorer.exe" "Fri Apr 14 15:48:26 2023" " [HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\AlternateShell] + "cmd.exe" "Windows Command Processor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\cmd.exe" "Sat Jun 5 13:05:12 2021" " [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\TaskMan] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit] + "C:\Windows\system32\userinit.exe" "Userinit Log-on Application" "(Verified) Microsoft Windows" "C:\Windows\system32\userinit.exe" "Wed May 11 12:08:04 2022" " [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\VmApplet] + "SystemPropertiesPerformance.exe /pagefile" "Change Computer Performance Settings" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SystemPropertiesPerformance.exe" "Sat Jun 5 13:05:34 2021" " [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells\AvailableShells] [HKLM\Environment\UserInitMprLogonScript] [HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components] + "Google Chrome" "Google Chrome Installer" "(Verified) Google LLC" "C:\Program Files\Google\Chrome\Application\114.0.5735.134\Installer\chrmstp.exe" "Fri Jun 23 11:59:37 2023" " + "Microsoft Edge" "Microsoft Edge Installer" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.58\Installer\setup.exe" "Sat Jun 24 12:17:38 2023" " + "Microsoft Windows Media Player" "Microsoft Windows Media Player Setup Utility" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\unregmp2.exe" "Wed May 11 12:13:54 2022" " + "Microsoft Windows Media Player" "Microsoft Windows Media Player Setup Utility" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\unregmp2.exe" "Wed May 11 12:13:54 2022" " + "n/a" "Microsoft .NET IE SECURITY REGISTRATION" "(Verified) Microsoft Corporation" "C:\Windows\System32\mscories.dll" "Sat Jun 5 13:06:26 2021" " + "Themes Setup" "Windows Theme API" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\themeui.dll" "Sat Feb 18 14:29:24 2023" " + "Web Platform Customizations" "IE Per-User Initialisation Utility" "(Verified) Microsoft Windows" "C:\Windows\System32\ie4uinit.exe" "Wed May 10 20:27:34 2023" " + "Windows Desktop Update" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\IconServiceLib] + "IconCodecService.dll" "Converts a PNG part of the icon to a legacy bmp icon" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\IconCodecService.dll" "Sat Jun 5 13:05:29 2021" " [HKLM\SOFTWARE\Microsoft\Windows CE Services\AutoStartOnConnect] [HKLM\SOFTWARE\Microsoft\Windows CE Services\AutoStartDisconnect] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] + "GrooveMonitor" "GrooveMonitor Utility" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" "Thu Feb 26 17:36:46 2009" " + "IndexSearch" "PaperPort IndexSearch" "(Verified) Nuance Communications, Inc." "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe" "Wed May 29 09:23:30 2013" " + "ISUSPM" "Common Software Manager" "(Verified) Flexera Software LLC" "C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe" "Wed Oct 12 23:11:34 2011" " + "LauncherC1765nf" "Quick Launch Utility" "(Verified) Dell Inc." "C:\Program Files (x86)\Dell Printers\Printer SSW\Launcher\dlm1launcher.exe" "Tue Aug 13 14:43:00 2013" " + "PaperPort PTD" "PaperPort Print to Desktop for NT" "(Verified) Nuance Communications, Inc." "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe" "Wed May 29 09:26:58 2013" " + "PDFProHook" "PdfPro7Hook.exe" "(Verified) Nuance Communications, Inc." "C:\Program Files (x86)\Nuance\PDFViewer\pdfpro7hook.exe" "Wed Mar 20 14:26:20 2013" " + "PPort14reminder" "Ereg" "(Verified) Nuance Communications, Inc." "C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" "Thu Mar 14 10:04:36 2013" " + "StatusAutoRunC1765nf" "Printer Selection List" "(Verified) Dell Inc." "C:\Program Files (x86)\Dell Printers\Printer SSW\Status Monitor\dlm1pl.exe" "Wed Feb 6 16:42:10 2013" " [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components] + "Microsoft Windows Media Player" "Microsoft Windows Media Player Setup Utility" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\unregmp2.exe" "Wed May 11 12:14:01 2022" " + "Microsoft Windows Media Player" "Microsoft Windows Media Player Setup Utility" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\unregmp2.exe" "Wed May 11 12:14:01 2022" " + "n/a" "Microsoft .NET IE SECURITY REGISTRATION" "(Verified) Microsoft Corporation" "C:\Windows\System32\mscories.dll" "Sat Jun 5 13:06:26 2021" " [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services\AutoStartOnConnect] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services\AutoStartOnDisconnect] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\InitialProgram] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [C:\Users\chann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup] [C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup] [%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup] [HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logon] [HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logoff] [HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup] [HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logon] [HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logoff] [HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Shutdown] [HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Startup] [HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logon] [HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logoff] [HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown] [HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Shutdown] [HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logoff] [HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Logon] [HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup] [Explorer] [HKCU\SOFTWARE\Classes\Protocols\Filter] [HKCU\SOFTWARE\Classes\Protocols\Handler] [HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components] [HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers] + " FileSyncEx" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " [HKCU\Software\Classes\Drive\ShellEx\ContextMenuHandlers] [HKCU\Software\Classes\*\ShellEx\PropertySheetHandlers] [HKCU\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers] [HKCU\Software\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers] [HKCU\Software\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers] [HKCU\Software\Classes\Directory\ShellEx\ContextMenuHandlers] + " FileSyncEx" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " [HKCU\Software\Classes\Directory\ShellEx\DragDropHandlers] [HKCU\Software\Classes\Directory\ShellEx\PropertySheetHandlers] [HKCU\Software\Classes\Directory\ShellEx\CopyHookHandlers] [HKCU\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers] + " FileSyncEx" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " [HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers] [HKCU\Software\Classes\Folder\ShellEx\DragDropHandlers] [HKCU\Software\Classes\Folder\ShellEx\PropertySheetHandlers] [HKCU\Software\Classes\Folder\ShellEx\ColumnHandlers] [HKCU\Software\Classes\Folder\ShellEx\ExtShellFolderViews] [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [HKCU\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InProcServer32] [HKCU\Software\Microsoft\Ctf\LangBarAddin] [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects] + "Published Items Shell Service Object" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Microsoft VolumeControlService Class" "SCA Volume" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SndVolSSO.dll" "Fri Apr 14 15:49:36 2023" " + "Windows To Go Shell Service Object" "Windows To Go Shell Service Object" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\pwsso.dll" "Wed May 11 12:11:03 2022" " + "Device Stage Shell Extension" "Device Stage Shell Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dxp.dll" "Sat Jun 5 13:06:05 2021" " + "Cloud Cache Invalidator SSO" "Cloud Data Store" "(Verified) Microsoft Windows" "C:\Windows\System32\Windows.CloudStore.dll" "Wed May 10 20:26:02 2023" " + "UnexpectedShutdownReason" "Systray shell service object" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\stobject.dll" "Fri Jun 17 18:28:13 2022" " + "PostBootReminder object" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "OneDrive network states cache SSO" "Windows.FileExplorer.Common" "(Verified) Microsoft Windows" "C:\Windows\System32\Windows.FileExplorer.Common.dll" "Thu Mar 16 15:27:40 2023" " + "Library Group Policy Shell Service Object" "Microsoft WinRT Storage API" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\windows.storage.dll" "Fri Apr 14 15:48:56 2023" " + "Windows System Reset SSO" "Windows System Reset Platform SSO" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SystemResetPlatform\SystemResetSSO.dll" "Wed May 11 12:11:04 2022" " + "User Account Control Check Service" "Security and Maintenance Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\hcproviders.dll" "Sat Jun 5 13:05:29 2021" " + "WPDShServiceObj Class" "Windows Portable Device Shell Service Object" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wpdshserviceobj.dll" "Sat Jun 5 18:16:58 2021" " + "Network Tray SSO" "Network System Icon" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\pnidui.dll" "Fri Dec 17 21:56:53 2021" " + "Windows Search Shell Service Object" "Indexing Options" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\srchadmin.dll" "Sat Jun 5 13:05:40 2021" " + "WebCheck" "Shell Doc Object and Control Library" "(Verified) Microsoft Windows" "C:\Windows\System32\shdocvw.dll" "Thu Mar 16 15:27:40 2023" " + "Bluetooth Authentication Agent SSO" "Bluetooth Control Panel Applet" "(Verified) Microsoft Windows" "C:\Windows\System32\bthprops.cpl" "Sat Jun 5 13:05:23 2021" " + "Sync Center Shell Service Object (Internal)" "Microsoft Sync Centre" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SyncCenter.dll" "Sat Jun 5 13:06:11 2021" " + "Security and Maintenance Shell Service Object" "Security and Maintenance" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Actioncenter.dll" "Sat Jun 5 13:05:29 2021" " + "ShellFolder for CD Burning" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "HomeGroup SSO" "HomeGroup Control Panel" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\hgcpl.dll" "Sat Jun 5 13:05:29 2021" " [HKLM\SOFTWARE\Classes\Protocols\Filter] + "application/octet-stream" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + "application/x-complus" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + "application/x-msdownload" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + "text/xml" "Microsoft Office XML MIME Filter" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL" "Tue Nov 1 13:06:41 2022" " [HKLM\SOFTWARE\Classes\Protocols\Handler] + "about" "Microsoft (R) HTML Viewer" "(Verified) Microsoft Windows" "C:\Windows\System32\mshtml.dll" "Wed May 10 20:27:39 2023" " + "cdl" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "dvd" "ActiveX control for streaming video" "(Verified) Microsoft Windows" "C:\Windows\System32\msvidctl.dll" "Wed May 11 12:11:17 2022" " + "file" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "ftp" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "http" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "https" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "its" "Microsoft® InfoTech Storage System Library" "(Verified) Microsoft Windows" "C:\Windows\System32\itss.dll" "Wed May 11 12:10:41 2022" " + "javascript" "Microsoft (R) HTML Viewer" "(Verified) Microsoft Windows" "C:\Windows\System32\mshtml.dll" "Wed May 10 20:27:39 2023" " + "local" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "mailto" "Microsoft (R) HTML Viewer" "(Verified) Microsoft Windows" "C:\Windows\System32\mshtml.dll" "Wed May 10 20:27:39 2023" " + "mhtml" "Microsoft Internet Messaging API Resources" "(Verified) Microsoft Windows" "C:\Windows\System32\inetcomm.dll" "Sat Jun 5 13:06:07 2021" " + "mk" "OLE32 Extensions for Win32" "(Verified) Microsoft Windows" "C:\Windows\System32\urlmon.dll" "Fri Apr 14 15:49:52 2023" " + "ms-its" "Microsoft® InfoTech Storage System Library" "(Verified) Microsoft Windows" "C:\Windows\System32\itss.dll" "Wed May 11 12:10:41 2022" " + "mso-minsb-roaming.16" "Microsoft Office component" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL" "Thu Jun 22 20:58:09 2023" " + "mso-minsb.16" "Microsoft Office component" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL" "Thu Jun 22 20:58:09 2023" " + "osf-roaming.16" "Microsoft Office component" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL" "Thu Jun 22 20:58:09 2023" " + "osf.16" "Microsoft Office component" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL" "Thu Jun 22 20:58:09 2023" " + "res" "Microsoft (R) HTML Viewer" "(Verified) Microsoft Windows" "C:\Windows\System32\mshtml.dll" "Wed May 10 20:27:39 2023" " + "tbauth" "TBAuth protocol handler" "(Verified) Microsoft Windows" "C:\Windows\System32\tbauth.dll" "Fri Jun 17 18:28:22 2022" " + "tv" "ActiveX control for streaming video" "(Verified) Microsoft Windows" "C:\Windows\System32\msvidctl.dll" "Wed May 11 12:11:17 2022" " + "vbscript" "Microsoft (R) HTML Viewer" "(Verified) Microsoft Windows" "C:\Windows\System32\mshtml.dll" "Wed May 10 20:27:39 2023" " + "windows.tbauth" "TBAuth protocol handler" "(Verified) Microsoft Windows" "C:\Windows\System32\tbauth.dll" "Fri Jun 17 18:28:22 2022" " [HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers] + "EPP" "Microsoft Security Client Shell Extension" "(Not Verified) Microsoft Corporation" "C:\Program Files\Windows Defender\shellext.dll" "Wed May 11 12:06:07 2022" " + "Open With" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Open With EncryptionMenu" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "WorkFolders" "Microsoft (C) Work Folders Shell Extension" "(Verified) Microsoft Windows" "C:\Windows\System32\WorkfoldersShell.dll" "Wed Apr 13 21:58:23 2022" " + "Taskband Pin" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Start Menu Pin" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "SUPERAntiSpyware Context Menu" "SUPERAntiSpyware Context Menu Extension" "(Verified) SUPERAntiSpyware.com" "C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL" "Sat Jan 9 10:14:56 2021" " [HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers] + "EnhancedStorageShell" "Windows Enhanced Storage Shell Extension DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\EhStorShell.dll" "Sat Jun 5 13:05:29 2021" " + "EPP" "Microsoft Security Client Shell Extension" "(Not Verified) Microsoft Corporation" "C:\Program Files\Windows Defender\shellext.dll" "Wed May 11 12:06:07 2022" " + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "Previous Versions Property Page" "Previous Versions property page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\twext.dll" "Fri Jun 17 18:29:43 2022" " + "Portable Devices Menu" "Portable Devices Shell Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wpdshext.dll" "Sat Jun 5 18:16:58 2021" " + "ShellFolder for CD Burning" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " [HKLM\Software\Classes\*\ShellEx\PropertySheetHandlers] + "CryptoSignMenu" "Crypto Shell Extensions" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\cryptext.dll" "Wed May 11 12:08:14 2022" " + "Security Shell Extension" "Security Shell Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rshx32.dll" "Thu Oct 13 13:59:11 2022" " + "OLE DocFile Property Page" "OLE DocFile Property Page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\docprop.dll" "Wed May 11 12:08:42 2022" " + "Summary Properties Page" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " [HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers] + "CopyAsPathMenu" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "ModernSharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "SendTo" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Previous Versions Property Page" "Previous Versions property page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\twext.dll" "Fri Jun 17 18:29:43 2022" " + "Start Menu Pin" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "SUPERAntiSpyware Context Menu" "SUPERAntiSpyware Context Menu Extension" "(Verified) SUPERAntiSpyware.com" "C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL" "Sat Jan 9 10:14:56 2021" " [HKLM\Software\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers] [HKLM\Software\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers] + "Previous Versions Property Page" "Previous Versions property page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\twext.dll" "Fri Jun 17 18:29:43 2022" " [HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers] + "EncryptionMenu" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "EPP" "Microsoft Security Client Shell Extension" "(Not Verified) Microsoft Corporation" "C:\Program Files\Windows Defender\shellext.dll" "Wed May 11 12:06:07 2022" " + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "WorkFolders" "Microsoft (C) Work Folders Shell Extension" "(Verified) Microsoft Windows" "C:\Windows\System32\WorkfoldersShell.dll" "Wed Apr 13 21:58:23 2022" " + "Previous Versions Property Page" "Previous Versions property page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\twext.dll" "Fri Jun 17 18:29:43 2022" " + "SUPERAntiSpyware Context Menu" "SUPERAntiSpyware Context Menu Extension" "(Verified) SUPERAntiSpyware.com" "C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL" "Sat Jan 9 10:14:56 2021" " [HKLM\Software\Classes\Directory\ShellEx\DragDropHandlers] [HKLM\Software\Classes\Directory\ShellEx\PropertySheetHandlers] + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "Security Shell Extension" "Security Shell Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rshx32.dll" "Thu Oct 13 13:59:11 2022" " + "MyFolder menu and properties" "My Documents Folder UI" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mydocs.dll" "Wed May 11 12:07:10 2022" " + "Previous Versions Property Page" "Previous Versions property page" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\twext.dll" "Fri Jun 17 18:29:43 2022" " + "DfsShell Class" "Distributed File System shell extension" "(Verified) Microsoft Windows" "C:\Windows\System32\DfsShlEx.dll" "Wed May 11 12:08:48 2022" " + "Folder Customization Tab" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " [HKLM\Software\Classes\Directory\ShellEx\CopyHookHandlers] + "FileSystem" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " [HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers] + "New" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "Sharing" "Shell extensions for sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ntshrui.dll" "Wed Jan 12 19:17:46 2022" " + "WorkFolders" "Microsoft (C) Work Folders Shell Extension" "(Verified) Microsoft Windows" "C:\Windows\System32\WorkfoldersShell.dll" "Wed Apr 13 21:58:23 2022" " [HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers] + "Library Location" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "PintoStartScreen" "App Resolver" "(Verified) Microsoft Windows" "C:\Windows\System32\appresolver.dll" "Thu Dec 15 17:25:16 2022" " + "Start Menu Pin" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " [HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers] + "Compressed (zipped) Folder Right Drag Handler" "Compressed (zipped) Folders" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\zipfldr.dll" "Wed May 11 12:07:54 2022" " [HKLM\Software\Classes\Folder\ShellEx\PropertySheetHandlers] [HKLM\Software\Classes\Folder\ShellEx\ColumnHandlers] [HKLM\Software\Classes\Folder\ShellEx\ExtShellFolderViews] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers] + " OneDrive1" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive2" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive3" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive4" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive5" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive6" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive7" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + "EnhancedStorageShell" "Windows Enhanced Storage Shell Extension DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\EhStorShell.dll" "Sat Jun 5 13:05:29 2021" " [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [HKLM\Software\Microsoft\Ctf\LangBarAddin] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] + "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" "Microsoft Office Groove" "(Verified) Microsoft Corporation" "C:\PROGRA~2\MICROS~2\Office12\GROOVE.EXE" "Tue May 31 16:59:54 2011" " [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects] + "Published Items Shell Service Object" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\shell32.dll" "Fri Apr 14 15:50:33 2023" " + "Microsoft VolumeControlService Class" "SCA Volume" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\SndVolSSO.dll" "Fri Apr 14 15:50:14 2023" " + "UnexpectedShutdownReason" "Systray shell service object" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\stobject.dll" "Fri Dec 17 21:57:12 2021" " + "PostBootReminder object" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\shell32.dll" "Fri Apr 14 15:50:33 2023" " + "OneDrive network states cache SSO" "Windows.FileExplorer.Common" "(Verified) Microsoft Windows" "C:\Windows\Syswow64\Windows.FileExplorer.Common.dll" "Thu Mar 16 15:28:30 2023" " + "Library Group Policy Shell Service Object" "Microsoft WinRT Storage API" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\windows.storage.dll" "Fri Apr 14 15:50:10 2023" " + "User Account Control Check Service" "Security and Maintenance Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\hcproviders.dll" "Sat Jun 5 13:05:55 2021" " + "WPDShServiceObj Class" "Windows Portable Device Shell Service Object" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\wpdshserviceobj.dll" "Sat Jun 5 18:17:05 2021" " + "Windows Search Shell Service Object" "Indexing Options" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\srchadmin.dll" "Sat Jun 5 13:06:00 2021" " + "WebCheck" "Shell Doc Object and Control Library" "(Verified) Microsoft Windows" "C:\Windows\Syswow64\shdocvw.dll" "Thu Mar 16 15:28:30 2023" " + "Bluetooth Authentication Agent SSO" "Bluetooth Control Panel Applet" "(Verified) Microsoft Windows" "C:\Windows\Syswow64\bthprops.cpl" "Sat Jun 5 13:05:53 2021" " + "Sync Center Shell Service Object (Internal)" "Microsoft Sync Centre" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\SyncCenter.dll" "Sat Jun 5 13:06:24 2021" " + "Security and Maintenance Shell Service Object" "Security and Maintenance" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\Actioncenter.dll" "Sat Jun 5 13:05:55 2021" " + "ShellFolder for CD Burning" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\shell32.dll" "Fri Apr 14 15:50:33 2023" " + "HomeGroup SSO" "HomeGroup Control Panel" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\hgcpl.dll" "Sat Jun 5 13:05:55 2021" " [HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\Drive\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\*\ShellEx\PropertySheetHandlers] [HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\DragDropHandlers] [HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers] [HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\DragDropHandlers] [HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\PropertySheetHandlers] [HKLM\Software\Wow6432Node\Classes\Directory\ShellEx\CopyHookHandlers] [HKLM\Software\Wow6432Node\Classes\Directory\Background\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers] [HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\DragDropHandlers] [HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\PropertySheetHandlers] [HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ColumnHandlers] [HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ExtShellFolderViews] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers] + " OneDrive1" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive2" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive3" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive4" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive5" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive6" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " + " OneDrive7" "Microsoft OneDrive Shell Extension" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\23.114.0530.0001_1\FileSyncShell64.dll" "Fri Jun 23 13:50:39 2023" " [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [HKLM\Software\Wow6432Node\Microsoft\Ctf\LangBarAddin] [Internet Explorer] [HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks] + "Microsoft Url Search Hook" "Internet Browser" "(Verified) Microsoft Windows" "C:\Windows\System32\ieframe.dll" "Wed May 10 20:27:40 2023" " [HKCU\Software\Microsoft\Internet Explorer\Explorer Bars] [HKCU\Software\Microsoft\Internet Explorer\Extensions] [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars] [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions] [HKLM\Software\Microsoft\Internet Explorer\Toolbar] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] + "IEToEdge BHO" "IEToEdge BHO" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.58\BHO\ie_to_edge_bho_64.dll" "Thu Jun 22 08:08:00 2023" " [HKLM\Software\Microsoft\Internet Explorer\Explorer Bars] [HKLM\Software\Microsoft\Internet Explorer\Extensions] + "OneNote Lin&ked Notes" "Microsoft OneNote Internet Explorer Add-in" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll" "Thu Jun 22 20:58:13 2023" " + "Se&nd to OneNote" "Microsoft OneNote Internet Explorer Add-in" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll" "Thu Jun 22 20:58:13 2023" " [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] + "IEToEdge BHO" "IEToEdge BHO" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.58\BHO\ie_to_edge_bho.dll" "Thu Jun 22 08:08:13 2023" " + "Skype for Business Browser Helper" "Skype for Business" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll" "Tue Mar 7 11:58:18 2023" " + "PlusIEEventHelper Class" "PlusIEContextMenu.dll" "(Verified) Zeon Corporation" "C:\Program Files (x86)\Nuance\PDFViewer\Bin\PlusIEContextMenu.dll" "Thu Jun 30 14:08:52 2011" " + "Groove GFS Browser Helper" "GrooveShellExtensions Module" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll" "Thu Feb 26 17:36:54 2009" " [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars] [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions] + "Lync Click to Call" "Skype for Business" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll" "Tue Mar 7 11:58:18 2023" " + "OneNote Lin&ked Notes" "Microsoft OneNote Internet Explorer Add-in" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll" "Thu Jun 22 20:59:06 2023" " + "Se&nd to OneNote" "Microsoft OneNote Internet Explorer Add-in" "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll" "Thu Jun 22 20:59:06 2023" " [Scheduled Tasks] [Task Scheduler] + "\ACC" "This task is for Care Center" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe" "Thu Dec 30 11:20:08 2021" " + "\ACCAgent" "This task is for Care Center agent" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe" "Thu Dec 30 11:20:08 2021" " + "\ACCBackgroundApplication" "Acer Care Center background application" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Care Center\ACCStd.exe" "Thu Dec 30 11:20:52 2021" " + "\AcerCMUpdateTask2.5.22250" "Start Configuration Manager and keep manufacturer software up to date." "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe" "Sun Sep 25 13:15:00 2022" " + "\Adobe Acrobat Update Task" "This task keeps your Adobe Reader and Acrobat applications up to date with the latest enhancements and security fixes" "(Verified) Adobe Inc." "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "Mon Apr 3 21:12:38 2023" " + "\App Explorer" "Host App Service Updater" "(Verified) SweetLabs Inc" "C:\Users\chann\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe" "Wed Mar 29 20:28:38 2023" " + "\CLToast" "CLToast Application" "(Verified) CyberLink Corp." "C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe" "Tue Jul 19 10:32:05 2022" " + "\CLToastRun" "CLToast Application" "(Verified) CyberLink Corp." "C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe" "Tue Jul 19 10:32:05 2022" " + "\GoogleUpdateTaskMachineCore" "Keeps your Google software up to date. If this task is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This task uninstalls itself when there is no Google software using it." "(Verified) Google LLC" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" "Mon Aug 16 16:41:17 2021" " + "\GoogleUpdateTaskMachineUA" "Keeps your Google software up to date. If this task is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This task uninstalls itself when there is no Google software using it." "(Verified) Google LLC" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" "Mon Aug 16 16:41:17 2021" " + "\GoTrust ID Driver" "GoTrust ID Driver" "(Verified) GoTrustID Inc." "C:\Program Files\GoTrust ID Plugin\Resource\GO-Trust_ID_Driver.exe" "Fri Aug 2 09:52:06 2019" " + "\klcp_update" "Setup/Uninstall" "(Not Verified) " "C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe" "Sun Jun 26 11:00:00 2022" " + "\MicrosoftEdgeUpdateTaskMachineCore" "Keeps your Microsoft software up to date. If this task is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This task uninstalls itself when there is no Microsoft software using it." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" "Thu Feb 4 10:49:49 2021" " + "\MicrosoftEdgeUpdateTaskMachineUA" "Keeps your Microsoft software up to date. If this task is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This task uninstalls itself when there is no Microsoft software using it." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" "Thu Feb 4 10:49:49 2021" " + "\OneDrive Reporting Task-S-1-5-21-2711510294-1658842217-2417928101-1001" "Standalone Updater" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe" "Fri Jun 23 13:50:41 2023" " + "\OneDrive Standalone Update Task-S-1-5-21-2711510294-1658842217-2417928101-1001" "Standalone Updater" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe" "Fri Jun 23 13:50:41 2023" " + "\OneDrive Standalone Update Task-S-1-5-21-2711510294-1658842217-2417928101-500" "Standalone Updater" "(Verified) Microsoft Corporation" "C:\Users\chann\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe" "Fri Jun 23 13:50:41 2023" " + "\Quick Access" "This task is for Quick Access" "(Verified) Acer Incorporated" "C:\Program Files\Acer\Quick Access Service\QALauncher.exe" "Mon Jan 3 14:00:50 2022" " + "\Software Update Application" "Software Updater Scheduler" "(Verified) Acer Incorporated" "C:\ProgramData\OEM\UpgradeTool\ListCheck.exe" "Mon Jan 3 12:19:22 2022" " + X "\UbtFrameworkService" "User Experience Improvement Program Framework Service" "(Verified) Acer Incorporated" "C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe" "Wed Apr 15 14:17:00 2020" " + "\UEIPInvitation" "User Experience Improvement Program Framework Invitation" "(Verified) Acer Incorporated" "C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe" "Wed Apr 15 14:17:00 2020" " + "\Agent Activation Runtime\S-1-5-21-2711510294-1658842217-2417928101-1001" "" "(Verified) Microsoft Windows" "C:\Windows\System32\AgentActivationRuntimeStarter.exe" "Wed Apr 13 21:56:49 2022" " + "\Apple\AppleSoftwareUpdate" "Apple Software Update" "(Verified) Apple Inc." "C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe" "Fri Feb 25 17:56:22 2022" " + "\Microsoft\Office\Office Automatic Updates 2.0" "This task ensures that your Microsoft Office installation can check for updates." "(Verified) Microsoft Corporation" "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" "Sat Jun 24 12:22:11 2023" " + "\Microsoft\Office\Office ClickToRun Service Monitor" "This task monitors the state of your Microsoft Office ClickToRunSvc and sends crash and error logs to Microsoft." "(Verified) Microsoft Corporation" "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" "Sat Jun 24 12:22:11 2023" " + "\Microsoft\Office\Office Feature Updates" "This task ensures that your Microsoft Office installation can check for feature updates." "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" "Sat Jun 24 12:27:26 2023" " + "\Microsoft\Office\Office Feature Updates Logon" "This task ensures that your Microsoft Office installation can check for feature updates." "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" "Sat Jun 24 12:27:26 2023" " + "\Microsoft\Office\Office Performance Monitor" "This task ensures that your Microsoft Office installation can be monitored for performance issues." "(Verified) Microsoft Corporation" "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe" "Thu Jun 22 20:59:01 2023" " + "\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + "\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + X "\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + X "\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" "Microsoft .NET Runtime Execution Engine" "(Verified) Microsoft Windows" "C:\Windows\System32\mscoree.dll" "Sat Jun 5 13:06:26 2021" " + X "\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)" "Windows Rights Management client" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msdrm.dll" "Sat Jun 5 13:04:58 2021" " + "\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)" "Windows Rights Management client" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msdrm.dll" "Sat Jun 5 13:04:58 2021" " + "\Microsoft\Windows\AppID\EDP Policy Manager" "AppLockerCSP" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\AppLockerCsp.dll" "Thu Mar 16 15:26:14 2023" " + X "\Microsoft\Windows\AppID\PolicyConverter" "Converts the software restriction policies policy from XML into binary format." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\appidpolicyconverter.exe" "Thu Mar 16 15:26:15 2023" " + X "\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck" "Inspects the AppID certificate cache for invalid or revoked certificates." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\appidcertstorecheck.exe" "Thu Mar 16 15:26:15 2023" " + "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." "(Verified) Microsoft Corporation" "C:\WINDOWS\system32\compattelrunner.exe" "Sat Jun 5 13:05:21 2021" " + "\Microsoft\Windows\Application Experience\PcaPatchDbTask" "Updates compatibility database" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\PcaSvc.dll" "Fri Dec 17 21:56:02 2021" " + "\Microsoft\Windows\Application Experience\ProgramDataUpdater" "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" "(Verified) Microsoft Corporation" "C:\WINDOWS\system32\compattelrunner.exe" "Sat Jun 5 13:05:21 2021" " + "\Microsoft\Windows\Application Experience\StartupAppTask" "Scans startup entries and raises notification to the user if there are too many startup entries." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Startupscan.dll" "Wed May 11 12:08:28 2022" " + "\Microsoft\Windows\ApplicationData\appuriverifierdaily" "Verifies AppUriHandler host registrations." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppHostRegistrationVerifier.exe" "Wed May 11 12:06:35 2022" " + "\Microsoft\Windows\ApplicationData\appuriverifierinstall" "Verifies AppUriHandler host registrations." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppHostRegistrationVerifier.exe" "Wed May 11 12:06:35 2022" " + "\Microsoft\Windows\ApplicationData\CleanupTemporaryState" "Cleans up each package's unused temporary files." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll" "Thu Oct 13 13:57:37 2022" " + "\Microsoft\Windows\ApplicationData\DsSvcCleanup" "Performs maintenance for the Data Sharing Service." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dstokenclean.exe" "Wed May 11 12:06:35 2022" " + "\Microsoft\Windows\AppListBackup\Backup" "AppListBackupLauncher" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppListBackupLauncher.dll" "Fri Apr 14 15:48:22 2023" " + X "\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup" "AppX Deployment Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppxDeploymentClient.dll" "Fri Apr 14 15:48:56 2023" " + "\Microsoft\Windows\Autochk\Proxy" "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\acproxy.dll" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\Bluetooth\UninstallDeviceTask" "Uninstalls the PnP device associated with the specified Bluetooth service ID" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\BthUdTask.exe" "Wed May 11 12:07:47 2022" " + "\Microsoft\Windows\capabilityaccessmanager\maintenancetasks" "Capability Access Manager Maintenance Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\CapabilityAccessManager.dll" "Sat Feb 18 14:29:21 2023" " + "\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask" "Microsoft Passport Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ngctasks.dll" "Fri Jun 17 18:30:02 2022" " + "\Microsoft\Windows\CertificateServicesClient\CryptoPolicyTask" "Microsoft Passport Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ngctasks.dll" "Fri Jun 17 18:30:02 2022" " + "\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask" "Microsoft Passport Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ngctasks.dll" "Fri Jun 17 18:30:02 2022" " + "\Microsoft\Windows\CertificateServicesClient\SystemTask" "DIMS Job DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dimsjob.dll" "Sat Jun 5 13:06:05 2021" " + "\Microsoft\Windows\CertificateServicesClient\UserTask" "DIMS Job DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dimsjob.dll" "Sat Jun 5 13:06:05 2021" " + "\Microsoft\Windows\CertificateServicesClient\UserTask-Roam" "DIMS Job DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dimsjob.dll" "Sat Jun 5 13:06:05 2021" " + "\Microsoft\Windows\Chkdsk\ProactiveScan" "pstask Task" "(Verified) Microsoft Windows" "C:\Windows\System32\pstask.dll" "Wed May 11 12:11:18 2022" " + "\Microsoft\Windows\Chkdsk\SyspartRepair" "Bcdboot utility" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\bcdboot.exe" "Fri Dec 17 21:54:43 2021" " + X "\Microsoft\Windows\Clip\License Validation" "Windows Store legacy license migration task" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\ClipUp.exe" "Sat Sep 17 14:43:37 2022" " + "\Microsoft\Windows\CloudExperienceHost\CreateObjectTask" "CloudExperienceHost Broker" "(Verified) Microsoft Windows" "C:\Windows\System32\CloudExperienceHostBroker.exe" "Wed May 11 12:07:40 2022" " + "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wsqmcons.exe" "Wed May 11 12:07:51 2022" " + "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" "USBCEIP Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\usbceip.dll" "Wed May 11 12:08:17 2022" " + "\Microsoft\Windows\Data Integrity Scan\Data Integrity Check And Scan" "Data Integrity Scan Task" "(Verified) Microsoft Windows" "C:\Windows\System32\discan.dll" "Sat Jun 5 13:06:00 2021" " + "\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan" "Data Integrity Scan Task" "(Verified) Microsoft Windows" "C:\Windows\System32\discan.dll" "Sat Jun 5 13:06:00 2021" " + "\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery" "Data Integrity Scan Task" "(Verified) Microsoft Windows" "C:\Windows\System32\discan.dll" "Sat Jun 5 13:06:00 2021" " + "\Microsoft\Windows\Defrag\ScheduledDefrag" "This task optimises local storage drives." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\defrag.exe" "Wed May 11 12:10:36 2022" " + "\Microsoft\Windows\Device Information\Device" "Device Census" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\devicecensus.exe" "Wed Nov 9 15:33:25 2022" " + "\Microsoft\Windows\Device Information\Device User" "Device Census" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\devicecensus.exe" "Wed Nov 9 15:33:25 2022" " + "\Microsoft\Windows\Device Setup\Metadata Refresh" "Device Setup Manager Client API" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DeviceSetupManagerAPI.dll" "Wed May 11 12:08:39 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\HandleCommand" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + X "\Microsoft\Windows\DeviceDirectoryClient\IntegrityCheck" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceAccountChange" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic24" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceSettingChange" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceWnsFallback" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\DeviceDirectoryClient\RegisterUserDevice" "DeviceDirectoryClient Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DeviceDirectoryClient.dll" "Wed May 11 12:06:08 2022" " + "\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner" "MitigationClient" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MitigationClient.dll" "Sat Feb 18 14:28:56 2023" " + "\Microsoft\Windows\Diagnosis\Scheduled" "Scripted Diagnostics Scheduled Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\sdiagschd.dll" "Thu Aug 11 14:12:28 2022" " + "\Microsoft\Windows\DirectX\DirectXDatabaseUpdater" "DirectX Database Updater" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\directxdatabaseupdater.exe" "Wed May 11 12:06:49 2022" " + "\Microsoft\Windows\DirectX\DXGIAdapterCache" "DXGI Adapter Cache" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dxgiadaptercache.exe" "Wed May 11 12:06:48 2022" " + "\Microsoft\Windows\DiskCleanup\SilentCleanup" "Maintenance task used by the system to launch a silent automatic disk clean-up when free disk space is running low." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\cleanmgr.exe" "Wed May 11 12:10:34 2022" " + X "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dfdts.dll" "Wed May 11 12:10:38 2022" " + X "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" "The Microsoft-Windows-DiskDiagnosticResolver warns users about faults reported by hard disks that support the Self Monitoring and Reporting Technology (S.M.A.R.T.) standard. This task is triggered automatically by the Diagnostic Policy Service when a S.M.A.R.T. fault is detected." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DFDWiz.exe" "Wed May 11 12:10:38 2022" " + "\Microsoft\Windows\DiskFootprint\Diagnostics" "DiskSnapshot.exe" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\disksnapshot.exe" "Sat Jun 5 13:05:16 2021" " + "\Microsoft\Windows\DiskFootprint\StorageSense" "Storage Usage" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\StorageUsage.dll" "Wed May 10 20:27:33 2023" " + "\Microsoft\Windows\DUSM\dusmtask" "DUSM Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dusmtask.exe" "Wed May 11 12:10:17 2022" " + "\Microsoft\Windows\EDP\EDP App Launch Task" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\EDP\EDP Auth Task" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\EDP\StorageCardEncryption Task" "EdpTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\edptask.dll" "Wed May 11 12:08:25 2022" " + "\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask" "MDMAgent" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MDMAgent.exe" "Thu Mar 16 15:24:40 2023" " + "\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" "Exploit Guard Configuration Helper" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MitigationConfiguration.dll" "Wed May 11 12:09:13 2022" " + "\Microsoft\Windows\Feedback\Siuf\DmClient" "Update SIUF strings" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dmclient.exe" "Sat Jun 5 13:04:59 2021" " + "\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" "Update SIUF strings" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dmclient.exe" "Sat Jun 5 13:04:59 2021" " + "\Microsoft\Windows\FileHistory\File History (maintenance mode)" "File History Task Handler" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\fhtask.dll" "Wed May 11 12:11:28 2022" " + "\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures" "Feature Configuration" "(Verified) Microsoft Windows" "C:\Windows\System32\fcon.dll" "Sat Feb 18 14:28:55 2023" " + "\Microsoft\Windows\Flighting\FeatureConfig\UsageDataFlushing" "Feature Configuration" "(Verified) Microsoft Windows" "C:\Windows\System32\fcon.dll" "Sat Feb 18 14:28:55 2023" " + "\Microsoft\Windows\Flighting\FeatureConfig\UsageDataReporting" "Feature Configuration" "(Verified) Microsoft Windows" "C:\Windows\System32\fcon.dll" "Sat Feb 18 14:28:55 2023" " + "\Microsoft\Windows\Flighting\OneSettings\RefreshCache" "Windows OneSettings Client" "(Verified) Microsoft Windows" "C:\Windows\System32\wosc.dll" "Wed May 11 12:05:56 2022" " + "\Microsoft\Windows\HelloFace\FODCleanupTask" "" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe" "Thu Aug 11 14:11:49 2022" " + "\Microsoft\Windows\Input\LocalUserSyncDataAvailable" "Windows Input Cloud Store Task Handlers" "(Verified) Microsoft Windows" "C:\Windows\System32\InputCloudStore.dll" "Wed May 11 12:07:40 2022" " + "\Microsoft\Windows\Input\MouseSyncDataAvailable" "Windows Input Cloud Store Task Handlers" "(Verified) Microsoft Windows" "C:\Windows\System32\InputCloudStore.dll" "Wed May 11 12:07:40 2022" " + "\Microsoft\Windows\Input\PenSyncDataAvailable" "Windows Input Cloud Store Task Handlers" "(Verified) Microsoft Windows" "C:\Windows\System32\InputCloudStore.dll" "Wed May 11 12:07:40 2022" " + "\Microsoft\Windows\Input\TouchpadSyncDataAvailable" "Windows Input Cloud Store Task Handlers" "(Verified) Microsoft Windows" "C:\Windows\System32\InputCloudStore.dll" "Wed May 11 12:07:40 2022" " + "\Microsoft\Windows\InstallService\ScanForUpdates" "InstallService Tasks" "(Verified) Microsoft Windows" "C:\Windows\System32\InstallServiceTasks.dll" "Sat Feb 18 14:29:18 2023" " + "\Microsoft\Windows\InstallService\ScanForUpdatesAsUser" "InstallService Tasks" "(Verified) Microsoft Windows" "C:\Windows\System32\InstallServiceTasks.dll" "Sat Feb 18 14:29:18 2023" " + "\Microsoft\Windows\InstallService\SmartRetry" "InstallService Tasks" "(Verified) Microsoft Windows" "C:\Windows\System32\InstallServiceTasks.dll" "Sat Feb 18 14:29:18 2023" " + X "\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates" "InstallService Tasks" "(Verified) Microsoft Windows" "C:\Windows\System32\InstallServiceTasks.dll" "Sat Feb 18 14:29:18 2023" " + X "\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates" "InstallService Tasks" "(Verified) Microsoft Windows" "C:\Windows\System32\InstallServiceTasks.dll" "Sat Feb 18 14:29:18 2023" " + "\Microsoft\Windows\International\Synchronize Language Settings" "Core Globalization Configuration" "(Verified) Microsoft Windows" "C:\Windows\System32\CoreGlobConfig.dll" "Wed May 11 12:06:56 2022" " + "\Microsoft\Windows\Kernel\La57Cleanup" "This task cleans up 5-level paging binaries on systems that do not support 5-level paging." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\la57setup.exe" "Fri Dec 17 21:56:37 2021" " + "\Microsoft\Windows\LanguageComponentsInstaller\Installation" "LanguageComponentsInstaller Task" "(Verified) Microsoft Windows" "C:\Windows\System32\LanguageComponentsInstaller.dll" "Wed May 11 12:08:41 2022" " + X "\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation" "LanguageComponentsInstaller Task" "(Verified) Microsoft Windows" "C:\Windows\System32\LanguageComponentsInstaller.dll" "Wed May 11 12:08:41 2022" " + "\Microsoft\Windows\License Manager\TempSignedLicenseExchange" "TempSignedLicenseExchangeTask Task" "(Verified) Microsoft Windows" "C:\Windows\System32\TempSignedLicenseExchangeTask.dll" "Fri Jun 17 18:28:33 2022" " + "\Microsoft\Windows\Location\Notifications" "Location Notification" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\LocationNotificationWindows.exe" "Sat Jun 5 13:06:10 2021" " + "\Microsoft\Windows\Location\WindowsActionDialog" "Location Notification" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WindowsActionDialog.exe" "Wed May 11 12:11:01 2022" " + "\Microsoft\Windows\Maintenance\WinSAT" "Windows System Assessment Tool API" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WinSATAPI.dll" "Sat Jun 5 13:06:16 2021" " + X "\Microsoft\Windows\Management\Autopilot\DetectHardwareChange" "AutoPilot" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Autopilot.dll" "Fri Apr 14 15:48:21 2023" " + X "\Microsoft\Windows\Management\Autopilot\RemediateHardwareChange" "AutoPilot" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Autopilot.dll" "Fri Apr 14 15:48:21 2023" " + "\Microsoft\Windows\Management\Provisioning\Cellular" "Provisioning package runtime processing tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ProvTool.exe" "Thu Mar 16 15:24:42 2023" " + "\Microsoft\Windows\Management\Provisioning\Logon" "Provisioning package runtime processing tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ProvTool.exe" "Thu Mar 16 15:24:42 2023" " + X "\Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup" "MdmDiagnosticsTool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MdmDiagnosticsTool.exe" "Wed Nov 9 15:33:07 2022" " + X "\Microsoft\Windows\Management\Provisioning\Retry" "Provisioning package runtime processing tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ProvTool.exe" "Thu Mar 16 15:24:42 2023" " + X "\Microsoft\Windows\Management\Provisioning\RunOnReboot" "Provisioning package runtime processing tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ProvTool.exe" "Thu Mar 16 15:24:42 2023" " + "\Microsoft\Windows\Maps\MapsToastTask" "MapsToastTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\mapstoasttask.dll" "Wed May 11 12:06:51 2022" " + X "\Microsoft\Windows\Maps\MapsUpdateTask" "MapsUpdateTask Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\mapsupdatetask.dll" "Wed May 11 12:06:51 2022" " + "\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" "Microsoft Windows Memory Diagnostic Task Handler" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MemoryDiagnostic.dll" "Wed May 11 12:11:29 2022" " + "\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" "Microsoft Windows Memory Diagnostic Task Handler" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MemoryDiagnostic.dll" "Wed May 11 12:11:29 2022" " + "\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" "$(@%SystemRoot%\system32\MbaeParserTask.exe,-1903)" "" "File not found: C:\WINDOWS\Syswow64\MbaeParserTask.exe" "" " + "\Microsoft\Windows\MUI\LPRemove" "Launch language clean-up tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\lpremove.exe" "Wed May 11 12:08:40 2022" " + "\Microsoft\Windows\Multimedia\SystemSoundsService" "PlaySound Service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\PlaySndSrv.dll" "Fri Dec 17 21:54:42 2021" " + "\Microsoft\Windows\NetTrace\GatherNetworkInfo" "Network information collector" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gatherNetworkInfo.vbs" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\NlaSvc\WiFiTask" "Background task for performing per user and web interactions" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WiFiTask.exe" "Fri Dec 17 21:54:51 2021" " + "\Microsoft\Windows\PI\Secure-Boot-Update" "TPM Maintenance Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TpmTasks.dll" "Wed May 10 20:26:01 2023" " + "\Microsoft\Windows\PI\SecureBootEncodeUEFI" "" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SecureBootEncodeUEFI.exe" "Thu Mar 16 15:28:31 2023" " + "\Microsoft\Windows\PI\Sqm-Tasks" "TPM Maintenance Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TpmTasks.dll" "Wed May 10 20:26:01 2023" " + "\Microsoft\Windows\Plug and Play\Device Install Group Policy" "pnppolicy Task" "(Verified) Microsoft Windows" "C:\Windows\System32\pnppolicy.dll" "Wed May 11 12:08:56 2022" " + "\Microsoft\Windows\Plug and Play\Device Install Reboot Required" "Plug and Play User Interface DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\pnpui.dll" "Wed May 11 12:08:57 2022" " + "\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers" "Generalise driver state in order to prepare the system to be bootable on any hardware configuration." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drvinst.exe" "Thu Dec 15 17:25:50 2022" " + "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" "Power Efficiency Diagnostics Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\energytask.dll" "Wed May 11 12:11:04 2022" " + "\Microsoft\Windows\Printing\EduPrintProv" "Printer Provision Utility for EDU" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\eduprintprov.exe" "Wed May 11 12:11:30 2022" " + "\Microsoft\Windows\Printing\PrinterCleanupTask" "Windows Printer Cleanup Task" "(Verified) Microsoft Windows" "C:\Windows\System32\PrinterCleanupTask.dll" "Fri Apr 14 15:48:26 2023" " + X "\Microsoft\Windows\PushToInstall\LoginCheck" "Service Control Manager Configuration Tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sc.exe" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\PushToInstall\Registration" "Service Control Manager Configuration Tool" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sc.exe" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\Ras\MobilityManager" "Provides support for the switching of mobility enabled VPN connections if their underlying interface goes down." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rasmbmgr.dll" "Wed May 11 12:09:11 2022" " + X "\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE" "Microsoft Windows Recovery Agent Task Handler" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ReAgentTask.dll" "Wed May 11 12:08:14 2022" " + "\Microsoft\Windows\Registry\RegIdleBackup" "RegIdle Backup Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\regidle.dll" "Wed May 11 12:11:05 2022" " + "\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" "Checks group policy for changes relevant to Remote Assistance" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\RAServer.exe" "Wed May 11 12:13:48 2022" " + X "\Microsoft\Windows\SharedPC\Account Cleanup" "SharedPC.AccountManager" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Windows.SharedPC.AccountManager.dll" "Fri Apr 14 15:49:20 2023" " + "\Microsoft\Windows\Shell\CreateObjectTask" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\shell32.dll" "Fri Apr 14 15:49:54 2023" " + "\Microsoft\Windows\Shell\FamilySafetyMonitor" "Initialises Family Safety monitoring and enforcement." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wpcmon.exe" "Wed Nov 9 15:32:25 2022" " + "\Microsoft\Windows\Shell\FamilySafetyRefreshTask" "Family Safety Refresh Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WpcRefreshTask.dll" "Fri Jun 17 18:28:09 2022" " + "\Microsoft\Windows\Shell\IndexerAutomaticMaintenance" "Indexing Options" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\srchadmin.dll" "Sat Jun 5 13:05:40 2021" " + "\Microsoft\Windows\Shell\ThemesSyncedImageDownload" "ThemesSyncedImageDownload Task" "(Verified) Microsoft Windows" "C:\Windows\System32\Themes.SsfDownload.ScheduledTask.dll" "Wed May 11 12:06:15 2022" " + "\Microsoft\Windows\Shell\UpdateUserPictureTask" "WINDOWS.UI.IMMERSIVE" "(Verified) Microsoft Windows" "C:\Windows\System32\Windows.UI.Immersive.dll" "Sat Feb 18 14:30:04 2023" " + "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask" "Software Protection Platform Client Extension Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\sppcext.dll" "Wed May 10 20:26:47 2023" " + X "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon" "Software Protection Platform Client Extension Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\sppcext.dll" "Wed May 10 20:26:47 2023" " + X "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork" "Software Protection Platform Client Extension Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\sppcext.dll" "Wed May 10 20:26:47 2023" " + "\Microsoft\Windows\SpacePort\SpaceAgentTask" "Storage Spaces Settings" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SpaceAgent.exe" "Wed May 11 12:11:32 2022" " + "\Microsoft\Windows\SpacePort\SpaceManagerTask" "$(@%SystemRoot%\system32\spaceman.exe,-3)" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\spaceman.exe" "Wed May 11 12:10:31 2022" " + "\Microsoft\Windows\Speech\SpeechModelDownloadTask" "Speech Model Download Executable" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\speech_onecore\common\SpeechModelDownload.exe" "Sat Jun 5 13:05:17 2021" " + "\Microsoft\Windows\StateRepository\MaintenanceTasks" "$(@%SystemRoot%\system32\Windows.StateRepositoryClient.dll,-602)" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Windows.StateRepositoryClient.dll" "Thu Mar 16 15:25:53 2023" " + "\Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization" "Storage Tiers Management" "(Verified) Microsoft Windows" "C:\Windows\System32\TieringEngineService.exe" "Wed May 11 12:11:11 2022" " + X "\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization" "Optimizes the placement of data in storage tiers on all tiered storage spaces in the system." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\defrag.exe" "Wed May 11 12:10:36 2022" " + "\Microsoft\Windows\Subscription\EnableLicenseAcquisition" "Enable susbscription license acquisition" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ClipRenew.exe" "Wed Nov 9 15:32:19 2022" " + X "\Microsoft\Windows\Subscription\LicenseAcquisition" "Susbscription license acquisition" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ClipRenew.exe" "Wed Nov 9 15:32:19 2022" " + X "\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate" "SysMain Service Host" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sysmain.dll" "Fri Dec 17 21:58:20 2021" " + X "\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance" "SysMain Service Host" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sysmain.dll" "Fri Dec 17 21:58:20 2021" " + "\Microsoft\Windows\Sysmain\ResPriStaticDbSync" "SysMain Service Host" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sysmain.dll" "Fri Dec 17 21:58:20 2021" " + "\Microsoft\Windows\Sysmain\WsSwapAssessmentTask" "Working set swap assessment maintenance task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sysmain.dll" "Fri Dec 17 21:58:20 2021" " + "\Microsoft\Windows\SystemRestore\SR" "This task creates regular system protection points." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\srtasks.exe" "Wed May 11 12:11:32 2022" " + "\Microsoft\Windows\Task Manager\Interactive" "Performance Monitor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdc.dll" "Sat Jun 5 13:06:10 2021" " + "\Microsoft\Windows\TextServicesFramework\MsCtfMonitor" "MsCtfMonitor DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MsCtfMonitor.dll" "Sat Jun 5 13:05:12 2021" " + "\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime" "Time Synchronization Task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TimeSyncTask.dll" "Wed May 11 12:06:18 2022" " + "\Microsoft\Windows\Time Synchronization\SynchronizeTime" "Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sc.exe" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\Time Zone\SynchronizeTimeZone" "Updates timezone information. If this task is stopped, local time may not be accurate for some time zones." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\tzsync.exe" "Wed May 10 20:26:22 2023" " + "\Microsoft\Windows\TPM\Tpm-HASCertRetr" "TPM Maintenance Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TpmTasks.dll" "Wed May 10 20:26:01 2023" " + "\Microsoft\Windows\TPM\Tpm-Maintenance" "TPM Maintenance Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TpmTasks.dll" "Wed May 10 20:26:01 2023" " + X "\Microsoft\Windows\UNP\RunUpdateNotificationMgr" "Update Notification Pipeline Manager" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\UNP\UpdateNotificationMgr.exe" "Wed May 11 12:11:29 2022" " + "\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" "MusNotificationBroker" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MusNotification.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval" "MusNotificationBroker" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MusNotification.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" "MusNotificationBroker" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MusNotification.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" "MusNotificationBroker" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MusNotification.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Report policies" "UsoClient" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + X "\Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work" "UsoClient" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Schedule Scan" "UsoClient" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Schedule Scan Static Task" "This task performs a scheduled Windows Update scan." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work" "UsoClient" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\Schedule Work" "UsoClient" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + X "\Microsoft\Windows\UpdateOrchestrator\Start Oobe Expedite Work" "This task performs a scheduled Windows Update scan." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScan" "This task performs a scheduled Windows Update scan." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\UpdateModelTask" "This task updates ML Models." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" "This task triggers a system reboot following update installation." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MusNotification.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UpdateOrchestrator\UUS Failover Task" "$(@%systemRoot%\system32\update\uusbrain.dll,-103)" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usoclient.exe" "Wed May 10 20:26:25 2023" " + "\Microsoft\Windows\UPnP\UPnPHostConfig" "Set UPnPHost service to Auto-Start" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sc.exe" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\USB\Usb-Notifications" "UsbTask" "(Verified) Microsoft Windows" "C:\Windows\System32\UsbTask.dll" "Wed May 11 12:05:56 2022" " + "\Microsoft\Windows\WCM\WiFiTask" "Background task for performing per user and web interactions" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WiFiTask.exe" "Fri Dec 17 21:54:51 2021" " + "\Microsoft\Windows\WDI\ResolutionHost" "Windows Diagnostic Infrastructure" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wdi.dll" "Sat Jun 5 13:05:29 2021" " + "\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" "Periodic maintenance task." "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe" "Wed Jun 21 20:54:09 2023" " + "\Microsoft\Windows\Windows Defender\Windows Defender Cleanup" "Periodic clean-up task." "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe" "Wed Jun 21 20:54:09 2023" " + "\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" "Periodic scan task." "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe" "Wed Jun 21 20:54:09 2023" " + "\Microsoft\Windows\Windows Defender\Windows Defender Verification" "Periodic verification task." "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe" "Wed Jun 21 20:54:09 2023" " + "\Microsoft\Windows\Windows Error Reporting\QueueReporting" "Windows Error Reporting task to process queued reports." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wermgr.exe" "Wed May 10 20:26:36 2023" " + "\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" "This task adjusts the start type for firewall-triggered services when the start type of the Base Filtering Engine (BFE) is disabled." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\bfe.dll" "Wed May 10 20:26:20 2023" " + "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" "This task updates the cached list of folders and the security permissions on any new files in a user s shared media library." "(Not Verified) Microsoft Corporation" "C:\Program Files\Windows Media Player\wmpnscfg.exe" "Wed May 11 12:13:28 2022" " + "\Microsoft\Windows\WindowsColorSystem\Calibration Loader" "Microsoft Colour Matching System DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\mscms.dll" "Fri Jun 17 18:28:29 2022" " + "\Microsoft\Windows\WindowsUpdate\Scheduled Start" "This task is used to start the Windows Update service when needed to perform scheduled operations such as scans." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sc.exe" "Sat Jun 5 13:06:02 2021" " + "\Microsoft\Windows\Wininet\CacheTask" "Internet Extensions for Win32" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wininet.dll" "Thu Mar 16 15:27:38 2023" " + "\Microsoft\Windows\WlanSvc\CDSSync" "Windows WiFi Sync Provider DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\WiFiCloudStore.dll" "Sat Jun 5 13:05:00 2021" " + "\Microsoft\Windows\WOF\WIM-Hash-Management" "WIM Boot Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WofTasks.dll" "Wed May 11 12:13:48 2022" " + "\Microsoft\Windows\WOF\WIM-Hash-Validation" "WIM Boot Tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WofTasks.dll" "Wed May 11 12:13:48 2022" " + "\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" "Microsoft (C) Work Folders Shell Extension" "(Verified) Microsoft Windows" "C:\Windows\System32\WorkFoldersShell.dll" "Wed Apr 13 21:58:23 2022" " + "\Microsoft\Windows\Work Folders\Work Folders Maintenance Work" "Microsoft (C) Work Folders Shell Extension" "(Verified) Microsoft Windows" "C:\Windows\System32\WorkFoldersShell.dll" "Wed Apr 13 21:58:23 2022" " + X "\Microsoft\Windows\Workplace Join\Automatic-Device-Join" "Register this computer if the computer is already joined to an Active Directory domain." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dsregcmd.exe" "Thu Oct 13 13:57:13 2022" " + X "\Microsoft\Windows\Workplace Join\Device-Sync" "DSREG task handler" "(Verified) Microsoft Windows" "C:\Windows\System32\dsregtask.dll" "Thu Oct 13 13:57:13 2022" " + X "\Microsoft\Windows\Workplace Join\Recovery-Check" "Performs recovery check." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dsregcmd.exe" "Thu Oct 13 13:57:13 2022" " + "\Microsoft\Windows\WwanSvc\NotificationTask" "Background task for performing per user and web interactions" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WiFiTask.exe" "Fri Dec 17 21:54:51 2021" " + "\Microsoft\Windows\WwanSvc\OobeDiscovery" "Windows MB Media Manager DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\MBMediaManager.dll" "Wed May 10 20:26:24 2023" " + "\Microsoft\XblGameSave\XblGameSaveTask" "XblGameSave Standby Task" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\XblGameSaveTask.exe" "Wed May 11 12:05:56 2022" " + "\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB" "The Default Browser Agent task checks when the default changes from Firefox to another browser. If the change happens under suspicious circumstances, it will prompt users to change back to Firefox no more than two times. This task is installed automatically by Firefox, and is reinstalled when Firefox updates. To disable this task, update the  default-browser-agent.enabled preference on the about:config page or the Firefox enterprise policy setting  DisableDefaultBrowserAgent ." "(Verified) Mozilla Corporation" "C:\Program Files\Mozilla Firefox\default-browser-agent.exe" "Fri Jun 23 13:03:20 2023" " + "\Oem\AcerJumpstartTask" "Acer Jumpstart" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe" "Mon Aug 15 10:12:00 2022" " + "\Oem\wlanBrokerTask" "Acer Configuration Manager VPN Broker" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\ExpressVPN\wlanBroker.exe" "Fri Mar 12 16:59:36 2021" " [Services] [HKLM\System\CurrentControlSet\Services] + "!SASCORE" "SAS Core Service: SUPERAntiSpyware Core Service" "(Verified) SUPERAntiSpyware.com" "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE" "Sat Jan 9 10:14:56 2021" " + "AarSvc" "Agent Activation Runtime: Runtime for activating conversational agent applications" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\AarSvc.dll" "Thu Aug 11 14:06:41 2022" " + "AarSvc_404d68f" "Agent Activation Runtime_404d68f: Runtime for activating conversational agent applications" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "ACCSvc" "ACC Service: ACC Service" "(Verified) Acer Incorporated" "C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe" "Thu Dec 30 11:20:52 2021" " + "AdobeARMservice" "Adobe Acrobat Update Service: Adobe Acrobat Updater keeps your Adobe software up to date." "(Verified) Adobe Inc." "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "Mon Apr 3 21:12:38 2023" " + "AJRouter" "AllJoyn Router Service: Routes AllJoyn messages for the local AllJoyn clients. If this service is stopped the AllJoyn clients that do not have their own bundled routers will be unable to run." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\AJRouter.dll" "Sat Jun 5 13:05:03 2021" " + "ALG" "Application Layer Gateway Service: Provides support for 3rd party protocol plug-ins for Internet Connection Sharing" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\alg.exe" "Wed May 11 12:07:05 2022" " + "AppIDSvc" "Application Identity: Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\appidsvc.dll" "Thu Mar 16 15:26:14 2023" " + "Appinfo" "Application Information: Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\appinfo.dll" "Thu Aug 11 14:08:01 2022" " + "Apple Mobile Device Service" "Apple Mobile Device Service: Provides the interface to Apple mobile devices." "(Verified) Apple Inc." "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "Sat Oct 8 03:00:46 2022" " + "AppReadiness" "App Readiness: Gets apps ready for use the first time a user signs in to this PC and when adding new apps." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppReadiness.dll" "Wed May 10 20:30:20 2023" " + "AppXSvc" "AppX Deployment Service (AppXSVC): Provides infrastructure support for deploying Store applications. This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\appxdeploymentserver.dll" "Wed May 10 20:26:43 2023" " + "AtherosSvc" "AtherosSvc: Windows Setup API" "(Verified) Microsoft Windows Hardware Compatibility Publisher" "C:\WINDOWS\System32\drivers\AdminService.exe" "Mon Jul 19 21:46:00 2021" " + "AudioEndpointBuilder" "Windows Audio Endpoint Builder: Manages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\AudioEndpointBuilder.dll" "Wed May 10 20:26:00 2023" " + "Audiosrv" "Windows Audio: Manages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Audiosrv.dll" "Wed May 10 20:25:59 2023" " + "autotimesvc" "Cellular Time: This service sets time based on NITZ messages from a Mobile Network" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\autotimesvc.dll" "Wed May 11 12:10:16 2022" " + "AxInstSV" "ActiveX Installer (AxInstSV): Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\AxInstSV.dll" "Wed May 11 12:08:41 2022" " + "BcastDVRUserService" "GameDVR and Broadcast User Service: This user service is used for Game Recordings and Live Broadcasts" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\BcastDVRUserService.dll" "Fri Jun 17 18:30:26 2022" " + "BcastDVRUserService_404d68f" "GameDVR and Broadcast User Service_404d68f: This user service is used for Game Recordings and Live Broadcasts" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "BDESVC" "BitLocker Drive Encryption Service: BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\bdesvc.dll" "Thu Oct 13 14:01:29 2022" " + "BFE" "Base Filtering Engine: The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\bfe.dll" "Wed May 10 20:26:20 2023" " + "BITS" "Background Intelligent Transfer Service: Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\qmgr.dll" "Wed Apr 13 21:57:01 2022" " + "BluetoothUserService" "Bluetooth User Support Service: The Bluetooth user service supports proper functionality of Bluetooth features relevant to each user session." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll" "Wed May 11 12:05:55 2022" " + "BluetoothUserService_404d68f" "Bluetooth User Support Service_404d68f: The Bluetooth user service supports proper functionality of Bluetooth features relevant to each user session." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "Bonjour Service" "Bonjour Service: Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence." "(Verified) Apple Inc." "C:\Program Files\Bonjour\mDNSResponder.exe" "Wed Aug 12 16:03:42 2015" " + "BrokerInfrastructure" "Background Tasks Infrastructure Service: Windows infrastructure service that controls which background tasks can run on the system." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\psmsrv.dll" "Sat Jun 5 13:05:10 2021" " + "BTAGService" "Bluetooth Audio Gateway Service: Service supporting the audio gateway role of the Bluetooth Handsfree Profile." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\BTAGService.dll" "Thu Mar 16 15:24:35 2023" " + "BthAvctpSvc" "AVCTP service: This is Audio Video Control Transport Protocol service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\BthAvctpSvc.dll" "Wed May 11 12:05:54 2022" " + "bthserv" "Bluetooth Support Service: The Bluetooth service supports discovery and association of remote Bluetooth devices. Stopping or disabling this service may cause already installed Bluetooth devices to fail to operate properly and prevent new devices from being discovered or associated." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\bthserv.dll" "Thu Dec 15 17:25:12 2022" " + "camsvc" "Capability Access Manager Service: Provides facilities for managing UWP apps access to app capabilities as well as checking an app's access to specific app capabilities" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\CapabilityAccessManager.dll" "Sat Feb 18 14:29:21 2023" " + "CaptureService" "CaptureService: Enables optional screen capture functionality for applications that call the Windows.Graphics.Capture API." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\CaptureService.dll" "Wed May 11 12:07:50 2022" " + "CaptureService_404d68f" "CaptureService_404d68f: Enables optional screen capture functionality for applications that call the Windows.Graphics.Capture API." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "cbdhsvc" "Clipboard User Service: This user service is used for Clipboard scenarios" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\cbdhsvc.dll" "Wed May 11 12:10:23 2022" " + "cbdhsvc_404d68f" "Clipboard User Service_404d68f: This user service is used for Clipboard scenarios" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "CDPSvc" "Connected Devices Platform Service: This service is used for Connected Devices Platform scenarios" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\CDPSvc.dll" "Thu Oct 13 13:57:15 2022" " + "CDPUserSvc" "Connected Devices Platform User Service: This user service is used for Connected Devices Platform scenarios" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\CDPUserSvc.dll" "Wed May 10 20:26:02 2023" " + "CDPUserSvc_404d68f" "Connected Devices Platform User Service_404d68f: This user service is used for Connected Devices Platform scenarios" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "CertPropSvc" "Certificate Propagation: Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\certprop.dll" "Sat Jun 5 13:05:34 2021" " + "ClickToRunSvc" "Microsoft Office Click-to-Run Service: * Manages resource coordination, background streaming, and system integration of Microsoft Office products and their related updates. This service is required to run during the use of any Microsoft Office program, during initial streaming installation and all subsequent updates., " "(Verified) Microsoft Corporation" "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" "Sat Jun 24 12:22:10 2023" " + "ClipSVC" "Client Licence Service (ClipSVC): Provides infrastructure support for the Microsoft Store. This service is started on demand and if disabled applications bought using Windows Store will not behave correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ClipSVC.dll" "Thu Oct 13 13:57:37 2022" " + "COMSysApp" "COM+ System Application: Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dllhost.exe" "Sat Jun 5 13:05:23 2021" " + "ConsentUxUserSvc" "ConsentUX User Service: Allows the system to request user consent to allow apps to access sensitive resources and information such as the device's location" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ConsentUxClient.dll" "Wed May 11 12:10:24 2022" " + "ConsentUxUserSvc_404d68f" "ConsentUX User Service_404d68f: Allows the system to request user consent to allow apps to access sensitive resources and information such as the device's location" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "CoreMessagingRegistrar" "CoreMessaging: Manages communication between system components." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\coremessaging.dll" "Thu Oct 13 13:58:13 2022" " + "cphs" "Intel(R) Content Protection HECI Service: Intel(R) Content Protection HECI Service - enables communication with the Content Protection FW" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7cee4436373b22ac\IntelCpHeciSvc.exe" "Wed Aug 25 22:51:10 2021" " + "cplspcon" "Intel(R) Content Protection HDCP Service: Intel(R) Content Protection HDCP Service - enables communication with Content Protection HDCP HW" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7cee4436373b22ac\IntelCpHDCPSvc.exe" "Wed Aug 25 22:51:08 2021" " + "CredentialEnrollmentManagerUserSvc" "CredentialEnrollmentManagerUserSvc: Credential Enrollment Manager" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\CredentialEnrollmentManager.exe" "Wed May 11 12:06:25 2022" " + "CredentialEnrollmentManagerUserSvc_404d68f" "CredentialEnrollmentManagerUserSvc_404d68f: Credential Enrollment Manager" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\CredentialEnrollmentManager.exe" "Wed May 11 12:06:25 2022" " + "CryptSvc" "Cryptographic Services: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\cryptsvc.dll" "Sat Jun 5 13:05:23 2021" " + "DcomLaunch" "DCOM Server Process Launcher: The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rpcss.dll" "Fri Apr 14 15:49:39 2023" " + "dcsvc" "dcsvc: Declared Configuration(DC) service" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dcsvc.dll" "Fri Apr 14 15:49:50 2023" " + "defragsvc" "Optimise drives: Helps the computer run more efficiently by optimising files on storage drives." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\defragsvc.dll" "Thu Mar 16 15:28:42 2023" " + "DeviceAssociationBrokerSvc" "DeviceAssociationBroker: Enables apps to pair devices" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\deviceaccess.dll" "Thu Dec 15 17:25:09 2022" " + "DeviceAssociationBrokerSvc_404d68f" "DeviceAssociationBroker_404d68f: Enables apps to pair devices" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "DeviceAssociationService" "Device Association Service: Enables pairing between the system and wired or wireless devices." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\das.dll" "Sat Jun 5 13:05:16 2021" " + "DeviceInstall" "Device Install Service: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\umpnpmgr.dll" "Sat Jun 5 13:05:39 2021" " + "DevicePickerUserSvc" "DevicePicker: This user service is used for managing the Miracast, DLNA and DIAL UI" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Windows.Devices.Picker.dll" "Wed Jul 13 15:35:36 2022" " + "DevicePickerUserSvc_404d68f" "DevicePicker_404d68f: This user service is used for managing the Miracast, DLNA and DIAL UI" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "DevicesFlowUserSvc" "DevicesFlow: Allows ConnectUX and PC Settings to Connect and Pair with WiFi displays and Bluetooth devices." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DevicesFlowBroker.dll" "Fri Jun 17 18:29:21 2022" " + "DevicesFlowUserSvc_404d68f" "DevicesFlow_404d68f: Allows ConnectUX and PC Settings to Connect and Pair with WiFi displays and Bluetooth devices." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "DevQueryBroker" "DevQuery Background Discovery Broker: Enables apps to discover devices with a backgroud task" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DevQueryBroker.dll" "Wed May 11 12:06:58 2022" " + "Dhcp" "DHCP Client: Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dhcpcore.dll" "Thu Mar 16 15:26:49 2023" " + "diagnosticshub.standardcollector.service" "Microsoft (R) Diagnostics Hub Standard Collector Service: Diagnostics Hub Standard Collector Service. When running, this service collects real time ETW events and processes them." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe" "Wed May 11 12:08:12 2022" " + "diagsvc" "Diagnostic Execution Service: Executes diagnostic actions for troubleshooting support" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DiagSvc.dll" "Wed May 11 12:11:27 2022" " + "DiagTrack" "Connected User Experiences and Telemetry: The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences. Additionally, this service manages the event driven collection and transmission of diagnostic and usage information (used to improve the experience and quality of the Windows Platform) when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\diagtrack.dll" "Sat Feb 18 14:29:54 2023" " + "DispBrokerDesktopSvc" "Display Policy Service: Manages the connection and configuration of local and remote displays" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DispBroker.Desktop.dll" "Wed May 11 12:10:38 2022" " + "DisplayEnhancementService" "Display Enhancement Service: A service for managing display enhancement such as brightness control." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll" "Fri Jun 17 18:30:26 2022" " + "DLNBDB" "Dell Status Monitor Database: " "(Verified) Dell Inc." "C:\Program Files (x86)\Dell Printers\Printer SSW\Status Monitor\dlm1db.exe" "Wed Feb 6 16:40:08 2013" " + "DmEnrollmentSvc" "Device Management Enrollment Service: Performs Device Enrollment Activities for Device Management" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Windows.Internal.Management.dll" "Wed May 10 20:26:45 2023" " + "dmwappushservice" "Device Management Wireless Application Protocol (WAP) Push message Routing Service: Routes Wireless Application Protocol (WAP) Push messages received by the device and synchronizes Device Management sessions" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dmwappushsvc.dll" "Wed Nov 9 15:33:41 2022" " + "Dnscache" "DNS Client: The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dnsrslvr.dll" "Sat Feb 18 14:29:38 2023" " + "DoSvc" "Delivery Optimization: Performs content delivery optimization tasks" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dosvc.dll" "Sat Feb 18 14:29:15 2023" " + "dot3svc" "Wired AutoConfig: The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dot3svc.dll" "Sat Sep 17 14:42:12 2022" " + "DPS" "Diagnostic Policy Service: The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dps.dll" "Sat Jun 5 13:06:13 2021" " + "DsmSvc" "Device Setup Manager: Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DeviceSetupManager.dll" "Sat Jun 5 13:05:06 2021" " + "DsSvc" "Data Sharing Service: Provides data brokering between applications." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DsSvc.dll" "Wed May 11 12:06:35 2022" " + "DusmSvc" "Data Usage: Network data usage, data limit, restrict background data, metered networks." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dusmsvc.dll" "Wed May 11 12:10:17 2022" " + "EapHost" "Extensible Authentication Protocol: The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\eapsvc.dll" "Wed May 11 12:06:09 2022" " + "edgeupdate" "Microsoft Edge Update Service (edgeupdate): Keeps your Microsoft software up to date. If this service is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Microsoft software using it." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" "Thu Feb 4 10:49:49 2021" " + "edgeupdatem" "Microsoft Edge Update Service (edgeupdatem): Keeps your Microsoft software up to date. If this service is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Microsoft software using it." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" "Thu Feb 4 10:49:49 2021" " + "EFS" "Encrypting File System (EFS): Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\efssvc.dll" "Wed Nov 9 15:33:45 2022" " + "embeddedmode" "Embedded Mode: The Embedded Mode service enables scenarios related to Background Applications. Disabling this service will prevent Background Applications from being activated." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\embeddedmodesvc.dll" "Wed May 11 12:06:27 2022" " + "EntAppSvc" "Enterprise App Management Service: Enables enterprise application management." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll" "Thu Mar 16 15:26:06 2023" " + "EventLog" "Windows Event Log: This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wevtsvc.dll" "Fri Apr 14 15:49:14 2023" " + "EventSystem" "COM+ Event System: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\es.dll" "Thu Oct 13 13:58:11 2022" " + "Fax" "Fax: Enables you to send and receive faxes, using fax resources available on this computer or on the network." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fxssvc.exe" "Sat Feb 18 14:32:52 2023" " + "fdPHost" "Function Discovery Provider Host: The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services  Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fdPHost.dll" "Wed May 11 12:08:26 2022" " + "FDResPub" "Function Discovery Resource Publication: Publishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fdrespub.dll" "Wed May 11 12:08:26 2022" " + "fhsvc" "File History Service: Protects user files from accidental loss by copying them to a backup location" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fhsvc.dll" "Fri Dec 17 21:58:19 2021" " + "FontCache" "Windows Font Cache Service: Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\FntCache.dll" "Fri Dec 17 21:55:15 2021" " + "FontCache3.0.0.0" "Windows Presentation Foundation Font Cache 3.0.0.0: Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications." "(Verified) Microsoft Corporation" "C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe" "Tue Jun 1 15:27:00 2021" " + "FrameServer" "Windows Camera Frame Server: Enables multiple clients to access video frames from camera devices." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\FrameServer.dll" "Fri Jun 17 18:30:50 2022" " + "FrameServerMonitor" "Windows Camera Frame Server Monitor: Monitors the health and state for the Windows Camera Frame Server service." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\FrameServerMonitor.dll" "Fri Jun 17 18:30:50 2022" " + "GoogleChromeElevationService" "Google Chrome Elevation Service (GoogleChromeElevationService): Google Chrome" "(Verified) Google LLC" "C:\Program Files\Google\Chrome\Application\114.0.5735.134\elevation_service.exe" "Tue Jun 13 03:01:56 2023" " + "GoTrust ID Plugin" "GoTrust ID Plugin: GoTrust ID Plugin" "(Verified) GoTrustID Inc." "C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe" "Fri Aug 2 09:53:54 2019" " + "GoTrustID Service" "GoTrustID Service: GoTrustID Service" "(Verified) GoTrustID Inc." "C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe" "Fri Aug 2 09:51:42 2019" " + "gpsvc" "Group Policy Client: The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\gpsvc.dll" "Fri Apr 14 15:49:52 2023" " + "GraphicsPerfSvc" "GraphicsPerfSvc: Graphics performance monitor service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\GraphicsPerfSvc.dll" "Fri Jun 17 18:28:29 2022" " + "gupdate" "Google Update Service (gupdate): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "(Verified) Google LLC" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" "Mon Aug 16 16:41:17 2021" " + "gupdatem" "Google Update Service (gupdatem): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "(Verified) Google LLC" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" "Mon Aug 16 16:41:17 2021" " + "hidserv" "Human Interface Device Service: Activates and maintains the use of hot buttons on keyboards, remote controls and other multimedia devices. It is recommended that you keep this service running." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\hidserv.dll" "Wed May 11 12:08:39 2022" " + "HvHost" "HV Host Service: Provides an interface for the Hyper-V hypervisor to provide per-partition performance counters to the host operating system." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\hvhostsvc.dll" "Sat Jun 5 13:06:00 2021" " + "icssvc" "Windows Mobile Hotspot Service: Provides the ability to share a mobile data connection with another device." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\tetheringservice.dll" "Wed May 11 12:05:57 2022" " + "igccservice" "Intel(R) Graphics Command Center Service: Service for Intel(R) Graphics Command Center" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_3d2488852c7b45a0\OneApp.IGCC.WinService.exe" "Wed Aug 25 22:51:44 2021" " + "igfxCUIService2.0.0.0" "Intel(R) HD Graphics Control Panel Service: Service for Intel(R) HD Graphics Control Panel" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_23e9be9389950d33\igfxCUIService.exe" "Wed Aug 25 22:50:32 2021" " + "IKEEXT" "IKE and AuthIP IPsec Keying Modules: The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ikeext.dll" "Wed May 10 20:26:20 2023" " + "InstallService" "Microsoft Store Install Service: Provides infrastructure support for the Microsoft Store. This service is started on demand, and if disabled then installations will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\InstallService.dll" "Sat Feb 18 14:29:18 2023" " + "Intel(R) Capability Licensing Service TCP IP Interface" "Intel(R) Capability Licensing Service TCP IP Interface: Version: 1.56.87.0" "(Verified) Intel(R) Trust Services" "C:\Program Files\Intel\TXE Components\iCLS\SocketHeciServer.exe" "Fri Jun 7 12:57:56 2019" " + "Intel(R) TPM Provisioning Service" "Intel(R) TPM Provisioning Service: Version: 1.56.87.0" "(Verified) Intel(R) Trust Services" "C:\Program Files\Intel\TXE Components\iCLS\TPMProvisioningService.exe" "Fri Jun 7 12:58:54 2019" " + "iphlpsvc" "IP Helper: Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\iphlpsvc.dll" "Sat Sep 17 14:43:17 2022" " + "IpxlatCfgSvc" "IP Translation Configuration Service: Configures and enables translation from v4 to v6 and vice versa" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\IpxlatCfg.dll" "Wed May 11 12:05:54 2022" " + "jhi_service" "Intel(R) Dynamic Application Loader Host Interface: Intel(R) Dynamic Application Loader Host Interface Service - Allows applications to access the local Intel (R) DAL." "(Verified) Intel(R) Embedded Subsystems and IP Blocks Group" "C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe" "Mon Jul 15 14:21:28 2019" " + "KeyIso" "CNG Key Isolation: The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\keyiso.dll" "Fri Apr 14 15:49:40 2023" " + "KtmRm" "KtmRm for Distributed Transaction Coordinator: Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msdtckrm.dll" "Wed May 11 12:10:35 2022" " + "LanmanServer" "Server: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\srvsvc.dll" "Thu Oct 13 13:58:21 2022" " + "LanmanWorkstation" "Workstation: Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wkssvc.dll" "Wed May 10 20:26:40 2023" " + "lfsvc" "Geolocation Service: This service monitors the current location of the system and manages geofences (a geographical location with associated events). If you turn off this service, applications will be unable to use or receive notifications for geolocation or geofences." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\lfsvc.dll" "Sat Jun 5 13:05:29 2021" " + "LicenseManager" "Windows License Manager Service: Provides infrastructure support for the Microsoft Store. This service is started on demand and if disabled then content acquired through the Microsoft Store will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\LicenseManagerSvc.dll" "Fri Dec 17 21:55:22 2021" " + "lltdsvc" "Link-Layer Topology Discovery Mapper: Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\lltdsvc.dll" "Wed May 11 12:08:28 2022" " + "lmhosts" "TCP/IP NetBIOS Helper: Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\lmhsvc.dll" "Sat Jun 5 13:05:25 2021" " + "LSM" "Local Session Manager: Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\lsm.dll" "Fri Apr 14 15:49:05 2023" " + "LxpSvc" "Language Experience Service: Provides infrastructure support for deploying and configuring localized Windows resources. This service is started on demand and, if disabled, additional Windows languages will not be deployed to the system, and Windows may not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\LanguageOverlayServer.dll" "Fri Apr 14 15:48:24 2023" " + "MapsBroker" "Downloaded Maps Manager: Windows service for application access to downloaded maps. This service is started on-demand by applications accessing downloaded maps. Disabling this service will prevent apps from accessing maps." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\moshost.dll" "Wed May 11 12:06:51 2022" " + "McpManagementService" "McpManagementService: Universal Print Management Service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\McpManagementService.dll" "Fri Apr 14 15:50:42 2023" " + "MessagingService" "MessagingService: Service supporting text messaging and related functionality." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MessagingService.dll" "Sat Jun 5 13:04:52 2021" " + "MessagingService_404d68f" "MessagingService_404d68f: Service supporting text messaging and related functionality." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "Microsoft Office Groove Audit Service" "Microsoft Office Groove Audit Service: Groove Audit Service" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe" "Thu Feb 26 17:36:22 2009" " + "MicrosoftEdgeElevationService" "Microsoft Edge Elevation Service (MicrosoftEdgeElevationService): Keeps Microsoft Edge up to update. If this service is disabled, the application will not be kept up to date." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.58\elevation_service.exe" "Thu Jun 22 08:08:25 2023" " + "MixedRealityOpenXRSvc" "Windows Mixed Reality OpenXR Service: Enables Mixed Reality OpenXR runtime functionality" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\MixedRealityRuntime.dll" "Sat Jun 5 18:17:04 2021" " + "MozillaMaintenance" "Mozilla Maintenance Service: The Mozilla Maintenance Service ensures that you have the latest and most secure version of Mozilla Firefox on your computer. Keeping Firefox up to date is very important for your online security, and Mozilla strongly recommends that you keep this service enabled." "(Verified) Mozilla Corporation" "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" "Fri Jun 23 13:03:19 2023" " + "mpssvc" "Windows Defender Firewall: Windows Defender Firewall helps to protect your computer by preventing unauthorised users from gaining access to your computer through the Internet or a network." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mpssvc.dll" "Wed May 10 20:26:19 2023" " + "MSDTC" "Distributed Transaction Coordinator: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\msdtc.exe" "Wed May 11 12:10:34 2022" " + "MSiSCSI" "Microsoft iSCSI Initiator Service: Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\iscsiexe.dll" "Sat Feb 18 14:30:35 2023" " + "msiserver" "Windows Installer: Adds, modifies and removes applications provided as a Windows Installer or APPX package (*.msi, *.msp, *.appx). If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msiexec.exe" "Wed Nov 9 15:34:37 2022" " + "NaturalAuthentication" "Natural Authentication: Signal aggregator service, that evaluates signals based on time, network, geolocation, bluetooth and cdf factors. Supported features are Device Unlock, Dynamic Lock and Dynamo MDM policies" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\NaturalAuth.dll" "Wed May 11 12:06:14 2022" " + "NcaSvc" "Network Connectivity Assistant: Provides DirectAccess status notification for UI components" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ncasvc.dll" "Sat Jun 5 13:05:29 2021" " + "NcbService" "Network Connection Broker: Brokers connections that allow Windows Store Apps to receive notifications from the internet." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ncbservice.dll" "Sat Jun 5 13:05:09 2021" " + "NcdAutoSetup" "Network Connected Devices Auto-Setup: Network Connected Devices Auto-Setup service monitors and installs qualified devices that connect to a qualified network. Stopping or disabling this service will prevent Windows from discovering and installing qualified network connected devices automatically. Users can still manually add network connected devices to a PC through the user interface." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\NcdAutoSetup.dll" "Wed May 11 12:11:29 2022" " + "Netlogon" "Netlogon: Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\netlogon.dll" "Wed May 10 20:26:40 2023" " + "Netman" "Network Connections: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\netman.dll" "Fri Jun 17 18:28:11 2022" " + "netprofm" "Network List Service: Identifies the networks the computer has connected to, collects and stores properties for these networks, and notifies applications when these properties change." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\netprofmsvc.dll" "Wed May 10 20:27:09 2023" " + "NetSetupSvc" "Network Setup Service: The Network Setup Service manages the installation of network drivers and permits the configuration of low-level network settings. If this service is stopped, any driver installations that are in progress may be cancelled." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\NetSetupSvc.dll" "Wed May 11 12:08:10 2022" " + X "NetTcpPortSharing" "Net.Tcp Port Sharing Service: Provides ability to share TCP ports over the net.tcp protocol." "(Verified) Microsoft Corporation" "C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" "Sat Jun 5 13:06:50 2021" " + "NgcCtnrSvc" "Microsoft Passport Container: Manages local user identity keys used to authenticate the user to identity providers, as well as TPM virtual smart cards. If this service is disabled, local user identity keys and TPM virtual smart cards will not be accessible. It is recommended that you do not reconfigure this service." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\NgcCtnrSvc.dll" "Thu Dec 15 17:25:10 2022" " + "NgcSvc" "Microsoft Passport: Provides process isolation for cryptographic keys used to provide authentication to a user s associated identity providers. If this service is disabled, all uses and management of these keys will not be available, which includes machine log-on and single sign-on for apps and websites. This service starts and stops automatically. It is recommended that you do not reconfigure this service." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ngcsvc.dll" "Thu Oct 13 13:57:39 2022" " + "NlaSvc" "Network Location Awareness: Collects and stores configuration information for the network and notifies programmes when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\netprofmsvc.dll" "Wed May 10 20:27:09 2023" " + "NPSMSvc" "NPSMSvc: NPSM" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\npsm.dll" "Wed May 11 12:06:53 2022" " + "NPSMSvc_404d68f" "NPSMSvc_404d68f: Host Process for Windows Services" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "nsi" "Network Store Interface Service: This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\nsisvc.dll" "Sat Jun 5 13:05:25 2021" " + "odserv" "Microsoft Office Diagnostics Service: Run portions of Microsoft Office Diagnostics." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" "Wed Jul 20 05:18:24 2011" " + "OneSyncSvc" "Sync Host: This service synchronizes mail, contacts, calendar and various other user data. Mail and other applications dependent on this functionality will not work properly when this service is not running." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\APHostService.dll" "Fri Jun 4 20:12:00 2021" " + "OneSyncSvc_404d68f" "Sync Host_404d68f: This service synchronizes mail, contacts, calendar and various other user data. Mail and other applications dependent on this functionality will not work properly when this service is not running." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "ose" "Office Source Engine: Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports." "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" "Thu Oct 26 14:03:08 2006" " + "ose64" "Office 64 Source Engine: Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports." "(Verified) Microsoft Corporation" "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" "Fri Feb 1 19:02:02 2002" " + "p2pimsvc" "Peer Networking Identity Manager: Provides identity services for the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services. If disabled, the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services may not function, and some applications, such as HomeGroup and Remote Assistance, may not function correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpsvc.dll" "Fri Jun 17 18:30:53 2022" " + "p2psvc" "Peer Networking Grouping: Enables multi-party communication using Peer-to-Peer Grouping. If disabled, some applications, such as HomeGroup, may not function." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\p2psvc.dll" "Fri Jun 17 18:30:53 2022" " + "P9RdrService" "P9RdrService: Enables trigger-starting plan9 file servers." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\p9rdrservice.dll" "Thu Dec 15 17:26:41 2022" " + "P9RdrService_404d68f" "P9RdrService_404d68f: Enables trigger-starting plan9 file servers." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "PcaSvc" "Program Compatibility Assistant Service: This service provides support for the Program Compatibility Assistant (PCA). PCA monitors programs installed and run by the user and detects known compatibility problems. If this service is stopped, PCA will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\pcasvc.dll" "Fri Dec 17 21:56:02 2021" " + "PDFProFiltSrvPP" "PDFProFiltSrvPP: PDFPro IFilter Service" "(Verified) Nuance Communications, Inc." "C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe" "Wed May 29 09:25:16 2013" " + "PenService" "PenService: Pen Service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\PenService.dll" "Fri Apr 14 15:50:34 2023" " + "PenService_404d68f" "PenService_404d68f: Pen Service" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "perceptionsimulation" "Windows Perception Simulation Service: Enables spatial perception simulation, virtual camera management and spatial input simulation." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe" "Sat Jun 5 13:06:00 2021" " + "PerfHost" "Performance Counter DLL Host: Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs." "(Verified) Microsoft Windows" "C:\WINDOWS\SysWow64\perfhost.exe" "Sat Jun 5 13:05:55 2021" " + "PhoneSvc" "Phone Service: Manages the telephony state on the device" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\PhoneService.dll" "Thu Aug 11 14:06:35 2022" " + "PimIndexMaintenanceSvc" "Contact Data: Indexes contact data for fast contact searching. If you stop or disable this service, contacts might be missing from your search results." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\PimIndexMaintenance.dll" "Wed May 11 12:06:55 2022" " + "PimIndexMaintenanceSvc_404d68f" "Contact Data_404d68f: Indexes contact data for fast contact searching. If you stop or disable this service, contacts might be missing from your search results." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "pla" "Performance Logs & Alerts: Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pla.dll" "Sat Jun 5 13:06:10 2021" " + "PlugPlay" "Plug and Play: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\umpnpmgr.dll" "Sat Jun 5 13:05:39 2021" " + "PNRPAutoReg" "PNRP Machine Name Publication Service: This service publishes a machine name using the Peer Name Resolution Protocol. Configuration is managed via the netsh context 'p2p pnrp peer' " "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpauto.dll" "Wed May 11 12:11:30 2022" " + "PNRPsvc" "Peer Name Resolution Protocol: Enables serverless peer name resolution over the Internet using the Peer Name Resolution Protocol (PNRP). If disabled, some peer-to-peer and collaborative applications, such as Remote Assistance, may not function." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpsvc.dll" "Fri Jun 17 18:30:53 2022" " + "PolicyAgent" "IPsec Policy Agent: Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Defender Firewall is not available when this service is stopped." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ipsecsvc.dll" "Wed May 11 12:08:25 2022" " + "Power" "Power: Manages power policy and power policy notification delivery." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\umpo.dll" "Sat Jun 5 13:04:52 2021" " + "PrintNotify" "Printer Extensions and Notifications: This service opens custom printer dialogue boxes and handles notifications from a remote print server or a printer. If you turn this service off, you won t be able to see printer extensions or notifications." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll" "Wed May 10 20:25:57 2023" " + "PrintWorkflowUserSvc" "PrintWorkflow: Provides support for Print Workflow applications. If you turn off this service, you may not be able to print successfully." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\PrintWorkflowService.dll" "Wed May 10 20:27:10 2023" " + "PrintWorkflowUserSvc_404d68f" "PrintWorkflow_404d68f: Provides support for Print Workflow applications. If you turn off this service, you may not be able to print successfully." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "ProfSvc" "User Profile Service: This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\profsvc.dll" "Wed May 10 20:26:33 2023" " + "ProtonVPN Service" "ProtonVPN Service: Proton VPN" "(Verified) Proton Technologies AG" "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe" "Wed Dec 14 09:24:49 2022" " + "PushToInstall" "Windows PushToInstall Service: Provides infrastructure support for the Microsoft Store. This service is started automatically and if disabled then remote installations will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\PushToInstall.dll" "Fri Jun 17 18:28:34 2022" " + "QASvc" "Quick Access Service: Quick Access Service" "(Verified) Acer Incorporated" "C:\Program Files\Acer\Quick Access Service\QASvc.exe" "Mon Jan 3 14:00:44 2022" " + "QcomWlanSrv" "Qualcomm Atheros WLAN Driver Service: " "(Verified) Qualcomm Atheros, Inc." "C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe" "Sun Jul 18 20:19:12 2021" " + "QWAVE" "Quality Windows Audio Video Experience: Quality Windows Audio Video Experience (qWave) is a networking platform for Audio Video (AV) streaming applications on IP home networks. qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\qwave.dll" "Thu Oct 13 13:58:30 2022" " + "RasAuto" "Remote Access Auto Connection Manager: Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\rasauto.dll" "Wed May 11 12:09:08 2022" " + "RasMan" "Remote Access Connection Manager: Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\rasmans.dll" "Wed Nov 9 15:33:51 2022" " + X "RemoteAccess" "Routing and Remote Access: Offers routing services to businesses in local area and wide area network environments." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\mprdim.dll" "Thu Oct 13 13:58:32 2022" " + X "RemoteRegistry" "Remote Registry: Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\regsvc.dll" "Thu Oct 13 13:59:11 2022" " + "RetailDemo" "Retail Demo Service: The Retail Demo service controls device activity while the device is in retail demo mode." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\RDXService.dll" "Wed Nov 9 15:34:22 2022" " + "RmSvc" "Radio Management Service: Radio Management and Airplane Mode Service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\RMapi.dll" "Sat Jun 5 13:05:40 2021" " + "RpcEptMapper" "RPC Endpoint Mapper: Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\RpcEpMap.dll" "Sat Jun 5 13:05:25 2021" " + "RpcLocator" "Remote Procedure Call (RPC) Locator: In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\locator.exe" "Sat Jun 5 13:05:23 2021" " + "RpcSs" "Remote Procedure Call (RPC): The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rpcss.dll" "Fri Apr 14 15:49:39 2023" " + "RtkAudioUniversalService" "Realtek Audio Universal Service: Realtek Audio Universal Service" "(Verified) Realtek Semiconductor Corp." "C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0e8db3195354f73d\RtkAudUService64.exe" "Wed Feb 3 23:05:46 2021" " + "SamSs" "Security Accounts Manager: The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\lsass.exe" "Thu Oct 13 13:58:20 2022" " + "SCardSvr" "Smart Card: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SCardSvr.dll" "Wed Jan 11 19:39:41 2023" " + "ScDeviceEnum" "Smart Card Device Enumeration Service: Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ScDeviceEnum.dll" "Wed May 11 12:08:44 2022" " + "Schedule" "Task Scheduler: Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\schedsvc.dll" "Wed Jan 11 19:39:25 2023" " + "SCPolicySvc" "Smart Card Removal Policy: Allows the system to be configured to lock the user desktop upon smart card removal." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\certprop.dll" "Sat Jun 5 13:05:34 2021" " + "SDRSVC" "Windows Backup: Provides Windows Backup and Restore capabilities." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SDRSVC.dll" "Wed May 10 20:27:30 2023" " + "seclogon" "Secondary Logon: Enables starting processes under alternate credentials. If this service is stopped, this type of log-on access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\seclogon.dll" "Thu Mar 16 15:27:48 2023" " + "SecurityHealthService" "Windows Security Service: Windows Security Service handles unified device protection and health information" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\SecurityHealthService.exe" "Thu Oct 13 13:58:25 2022" " + "SEMgrSvc" "Payments and NFC/SE Manager: Manages payments and Near Field Communication (NFC) based secure elements." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SEMgrSvc.dll" "Sat Jun 5 13:05:05 2021" " + "SENS" "System Event Notification Service: Monitors system events and notifies subscribers to COM+ Event System of these events." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\sens.dll" "Sat Jun 5 13:05:40 2021" " + "SensorDataService" "Sensor Data Service: Delivers data from a variety of sensors" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SensorDataService.exe" "Sat Jun 5 13:05:27 2021" " + "SensorService" "Sensor Service: A service for sensors that manages different sensors' functionality. Manages Simple Device Orientation (SDO) and History for sensors. Loads the SDO sensor that reports device orientation changes. If this service is stopped or disabled, the SDO sensor will not be loaded and so auto-rotation will not occur. History collection from Sensors will also be stopped." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SensorService.dll" "Fri Jun 17 18:29:09 2022" " + "SensrSvc" "Sensor Monitoring Service: Monitors various sensors in order to expose data and adapt to system and user state. If this service is stopped or disabled, the display brightness will not adapt to lighting conditions. Stopping this service may affect other system functionality and features as well." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sensrsvc.dll" "Sat Jun 5 13:05:33 2021" " + "SessionEnv" "Remote Desktop Configuration: Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sessenv.dll" "Thu Oct 13 13:59:24 2022" " + "SgrmBroker" "System Guard Runtime Monitor Broker: Monitors and attests to the integrity of the Windows platform." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\SgrmBroker.exe" "Sat Jun 5 13:06:00 2021" " + "SharedAccess" "Internet Connection Sharing (ICS): Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ipnathlp.dll" "Thu Dec 15 17:25:52 2022" " + "SharedRealitySvc" "Spatial Data Service: This service is used for Spatial Perception scenarios" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SharedRealitySvc.dll" "Sat Jun 5 13:06:16 2021" " + "ShellHWDetection" "Shell Hardware Detection: Provides notifications for AutoPlay hardware events." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\shsvcs.dll" "Fri Jun 17 18:30:42 2022" " + X "shpamsvc" "Shared PC Account Manager: Manages profiles and accounts on a SharedPC configured device" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll" "Fri Apr 14 15:49:20 2023" " + "smphost" "Microsoft Storage Spaces SMP: Host service for the Microsoft Storage Spaces management provider. If this service is stopped or disabled, Storage Spaces cannot be managed." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\smphost.dll" "Fri Jun 17 18:30:41 2022" " + "SmsRouter" "Microsoft Windows SMS Router Service.: Routes messages based on rules to appropriate clients." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SmsRouterSvc.dll" "Fri Dec 17 21:57:55 2021" " + "SNMPTrap" "SNMP Trap: Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\snmptrap.exe" "Sat Jun 5 13:05:34 2021" " + "spectrum" "Windows Perception Service: Enables spatial perception, spatial input, and holographic rendering." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\spectrum.exe" "Fri Dec 17 21:58:20 2021" " + "Spooler" "Print Spooler: This service spools print jobs and handles interaction with the printer. If you turn off this service, you won t be able to print or see your printers." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\spoolsv.exe" "Fri Apr 14 15:48:25 2023" " + "sppsvc" "Software Protection: Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sppsvc.exe" "Wed May 10 20:26:47 2023" " + "SSDPSRV" "SSDP Discovery: Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ssdpsrv.dll" "Sat Jun 5 13:06:00 2021" " + X "ssh-agent" "OpenSSH Authentication Agent: Agent to hold private keys used for public key authentication." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\OpenSSH\ssh-agent.exe" "Fri Jun 4 18:53:00 2021" " + "SstpSvc" "Secure Socket Tunneling Protocol Service: Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sstpsvc.dll" "Wed May 10 20:27:11 2023" " + "StateRepository" "State Repository Service: Provides required infrastructure support for the application model." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\windows.staterepository.dll" "Fri Apr 14 15:48:57 2023" " + "StiSvc" "Windows Image Acquisition (WIA): Provides image acquisition services for scanners and cameras" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wiaservc.dll" "Fri Apr 14 15:50:37 2023" " + "StorSvc" "Storage Service: Provides enabling services for storage settings and external storage expansion" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\storsvc.dll" "Wed May 10 20:27:33 2023" " + "svsvc" "Spot Verifier: Verifies potential file system corruptions." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\svsvc.dll" "Sat Jun 5 13:06:15 2021" " + "swprv" "Microsoft Software Shadow Copy Provider: Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\swprv.dll" "Wed May 11 12:07:32 2022" " + "SysMain" "SysMain: Maintains and improves system performance over time." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sysmain.dll" "Fri Dec 17 21:58:20 2021" " + "SystemEventsBroker" "System Events Broker: Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\SystemEventsBrokerServer.dll" "Sat Jun 5 13:05:09 2021" " + "TabletInputService" "Touch Keyboard and Handwriting Panel Service: Enables Touch Keyboard and Handwriting Panel pen and ink functionality" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\TabSvc.dll" "Sat Jun 5 13:05:12 2021" " + "TapiSrv" "Telephony: Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\tapisrv.dll" "Wed May 11 12:11:11 2022" " + "TermService" "Remote Desktop Services: Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\termsrv.dll" "Thu Mar 16 15:29:18 2023" " + "Themes" "Themes: Provides user experience theme management." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\themeservice.dll" "Sat Jun 5 13:05:14 2021" " + "TieringEngineService" "Storage Tiers Management: Optimizes the placement of data in storage tiers on all tiered storage spaces in the system." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TieringEngineService.exe" "Wed May 11 12:11:11 2022" " + "TimeBrokerSvc" "Time Broker: Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\TimeBrokerServer.dll" "Sat Jun 5 13:05:09 2021" " + "TokenBroker" "Web Account Manager: This service is used by Web Account Manager to provide single-sign-on to apps and services." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\TokenBroker.dll" "Fri Jun 17 18:28:21 2022" " + "TrkWks" "Distributed Link Tracking Client: Maintains links between NTFS files within a computer or across computers in a network." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\trkwks.dll" "Sat Jun 5 13:05:23 2021" " + "TroubleshootingSvc" "Recommended Troubleshooting Service: Enables automatic mitigation for known problems by applying recommended troubleshooting. If stopped, your device will not get recommended troubleshooting for problems on your device." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MitigationClient.dll" "Sat Feb 18 14:28:56 2023" " + "TrustedInstaller" "Windows Modules Installer: Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer." "(Verified) Microsoft Windows" "C:\WINDOWS\servicing\TrustedInstaller.exe" "Thu Mar 16 15:27:50 2023" " + "tzautoupdate" "Auto Time Zone Updater: Automatically sets the system time zone." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\tzautoupdate.dll" "Thu Mar 16 15:25:56 2023" " + "UdkUserSvc" "Udk User Service: Shell components service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\windowsudkservices.shellcommon.dll" "Wed May 10 20:26:24 2023" " + "UdkUserSvc_404d68f" "Udk User Service_404d68f: Shell components service" "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "UEIPSvc" "User Experience Improvement Program: UEIPSvc" "(Verified) Acer Incorporated" "C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe" "Wed Apr 15 14:17:00 2020" " + X "uhssvc" "Microsoft Update Health Service: Maintains Update Health" "(Not Verified) Microsoft Corporation" "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" "Wed Apr 5 21:10:58 2023" " + "UmRdpService" "Remote Desktop Services UserMode Port Redirector: Allows the redirection of Printers/Drives/Ports for RDP connections" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\umrdp.dll" "Fri Jun 17 18:30:51 2022" " + "UnistoreSvc" "User Data Storage: Handles storage of structured user data, including contact info, calendars, messages and other content. If you stop or disable this service, apps that use this data might not work correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\unistore.dll" "Sat Jun 5 13:05:09 2021" " + "UnistoreSvc_404d68f" "User Data Storage_404d68f: Handles storage of structured user data, including contact info, calendars, messages and other content. If you stop or disable this service, apps that use this data might not work correctly." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\System32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "upnphost" "UPnP Device Host: Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\upnphost.dll" "Wed Nov 9 15:34:23 2022" " + "UserDataSvc" "User Data Access: Provides apps with access to structured user data, including contact info, calendars, messages and other content. If you stop or disable this service, apps that use this data might not work correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\userdataservice.dll" "Sat Jun 5 13:05:09 2021" " + "UserDataSvc_404d68f" "User Data Access_404d68f: Provides apps with access to structured user data, including contact info, calendars, messages and other content. If you stop or disable this service, apps that use this data might not work correctly." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "UserManager" "User Manager: User Manager provides the runtime components required for multi-user interaction. If this service is stopped, some applications may not operate correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\usermgr.dll" "Wed May 10 20:26:41 2023" " + "UsoSvc" "Update Orchestrator Service: Manages Windows Updates. If stopped, your devices will not be able to download and install the latest updates." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usosvc.dll" "Wed May 10 20:26:24 2023" " + "VacSvc" "Volumetric Audio Compositor Service: Hosts spatial analysis for Mixed Reality audio simulation." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\vac.dll" "Wed May 11 12:05:58 2022" " + "VaultSvc" "Credential Manager: Provides secure storage and retrieval of credentials to users, applications and security service packages." "(Verified) Microsoft Windows" "C:\Windows\System32\vaultsvc.dll" "Wed Apr 13 21:57:12 2022" " + "vds" "Virtual Disk: Provides management services for disks, volumes, file systems, and storage arrays." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\vds.exe" "Wed May 11 12:07:11 2022" " + "vmicguestinterface" "Hyper-V Guest Service Interface: Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmicheartbeat" "Hyper-V Heartbeat Service: Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmickvpexchange" "Hyper-V Data Exchange Service: Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmicrdv" "Hyper-V Remote Desktop Virtualization Service: Provides a platform for communication between the virtual machine and the operating system running on the physical computer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvcext.dll" "Wed May 11 12:11:28 2022" " + "vmicshutdown" "Hyper-V Guest Shutdown Service: Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmictimesync" "Hyper-V Time Synchronization Service: Synchronizes the system time of this virtual machine with the system time of the physical computer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmicvmsession" "Hyper-V PowerShell Direct Service: Provides a mechanism to manage virtual machine with PowerShell via VM session without a virtual network." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvc.dll" "Wed May 11 12:11:28 2022" " + "vmicvss" "Hyper-V Volume Shadow Copy Requestor: Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\icsvcvss.dll" "Wed May 11 12:11:28 2022" " + "VSS" "Volume Shadow Copy: Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\vssvc.exe" "Wed Feb 9 16:19:20 2022" " + "W32Time" "Windows Time: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\w32time.dll" "Thu Dec 15 17:24:38 2022" " + "WaaSMedicSvc" "Windows Update Medic Service: Enables remediation and protection of Windows Update components." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WaaSMedicSvc.dll" "Wed Nov 9 15:32:50 2022" " + "WalletService" "WalletService: Hosts objects used by clients of the wallet" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WalletService.dll" "Wed May 11 12:13:44 2022" " + "WarpJITSvc" "Warp JIT Service: Enables JIT compilation support in d3d10warp.dll for processes in which code generation is disabled." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Windows.WARP.JITService.dll" "Sat Jun 5 13:05:06 2021" " + "wbengine" "Block Level Backup Engine Service: The WBENGINE service is used by Windows Backup to perform backup and recovery operations. If this service is stopped by a user, it may cause the currently running backup or recovery operation to fail. Disabling this service may disable backup and recovery operations using Windows Backup on this computer." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wbengine.exe" "Wed May 11 12:13:47 2022" " + "WbioSrvc" "Windows Biometric Service: The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wbiosrvc.dll" "Fri Apr 14 15:49:08 2023" " + "Wcmsvc" "Windows Connection Manager: Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wcmsvc.dll" "Fri Dec 17 21:54:50 2021" " + "wcncsvc" "Windows Connect Now - Config Registrar: WCNCSVC hosts the Windows Connect Now Configuration, which is Microsoft's Implementation of the Wireless Protected Setup (WPS) protocol. This is used to configure Wireless LAN settings for an Access Point (AP) or a Wireless Device. The service is started programmatically as needed." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wcncsvc.dll" "Wed May 11 12:06:19 2022" " + "WdiServiceHost" "Diagnostic Service Host: The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdi.dll" "Sat Jun 5 13:05:29 2021" " + "WdiSystemHost" "Diagnostic System Host: The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdi.dll" "Sat Jun 5 13:05:29 2021" " + "WdNisSvc" "Microsoft Defender Antivirus Network Inspection Service: Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols" "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe" "Wed Jun 21 20:54:11 2023" " + "WebClient" "WebClient: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\webclnt.dll" "Wed May 11 12:11:33 2022" " + "Wecsvc" "Windows Event Collector: This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wecsvc.dll" "Wed May 11 12:10:40 2022" " + "WEPHOSTSVC" "Windows Encryption Provider Host Service: Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wephostsvc.dll" "Wed May 11 12:10:39 2022" " + "wercplsupport" "Problem Reports Control Panel Support: This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports control panel." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wercplsupport.dll" "Wed May 11 12:10:39 2022" " + "WerSvc" "Windows Error Reporting Service: Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WerSvc.dll" "Wed Jan 11 19:39:34 2023" " + "WFDSConMgrSvc" "Wi-Fi Direct Services Connection Manager Service: Manages connections to wireless services, including wireless display and docking." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wfdsconmgrsvc.dll" "Wed May 11 12:06:22 2022" " + "WiaRpc" "Still Image Acquisition Events: Launches applications associated with still image acquisition events." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wiarpc.dll" "Fri Apr 14 15:50:37 2023" " + "WinDefend" "Microsoft Defender Antivirus Service: Helps protect users from malware and other potentially unwanted software" "(Verified) Microsoft Windows Publisher" "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe" "Wed Jun 21 20:54:11 2023" " + "WinHttpAutoProxySvc" "WinHTTP Web Proxy Auto-Discovery Service: WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\winhttp.dll" "Wed May 10 20:26:35 2023" " + "Winmgmt" "Windows Management Instrumentation: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wbem\WMIsvc.dll" "Sat Jun 5 13:05:14 2021" " + "WinRM" "Windows Remote Management (WS-Management): Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WsmSvc.dll" "Wed May 10 20:26:42 2023" " + "wisvc" "Windows Insider Service: Provides infrastructure support for the Windows Insider Programme. This service must remain enabled for the Windows Insider Programme to work." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\flightsettings.dll" "Sat Sep 17 14:42:09 2022" " + "WlanSvc" "WLAN AutoConfig: The WLANSVC service provides the logic required to configure, discover, connect to and disconnect from a wireless local area network (WLAN) as defined by IEEE 802.11 standards. It also contains the logic to turn your computer into a software access point so that other devices or computers can connect to your computer wirelessly using a WLAN adapter that can support this. Stopping or disabling the WLANSVC service will make all WLAN adapters on your computer inaccessible from the Windows networking UI. It is strongly recommended that you have the WLANSVC service running if your computer has a WLAN adapter." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wlansvc.dll" "Thu Mar 16 15:24:53 2023" " + "wlidsvc" "Microsoft Account Sign-in Assistant: Enables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wlidsvc.dll" "Thu Mar 16 15:25:06 2023" " + "wlpasvc" "Local Profile Assistant Service: This service provides profile management for subscriber identity modules" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\lpasvc.dll" "Wed May 11 12:05:55 2022" " + "WManSvc" "Windows Management Service: Performs management including Provisioning and Enrollment activities" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Windows.Management.Service.dll" "Fri Apr 14 15:48:20 2023" " + "wmiApSrv" "WMI Performance Adapter: Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wbem\WmiApSrv.exe" "Wed May 11 12:06:15 2022" " + "WMPNetworkSvc" "Windows Media Player Network Sharing Service: Shares Windows Media Player libraries with other networked players and media devices using Universal Plug and Play" "(Not Verified) Microsoft Corporation" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "Wed Jul 13 15:33:25 2022" " + "workfolderssvc" "Work Folders: This service syncs files with the Work Folders server, enabling you to use the files on any of the PCs and devices on which you've set up Work Folders." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\workfolderssvc.dll" "Wed Apr 13 21:58:24 2022" " + "WpcMonSvc" "Parental Controls: Enforces parental controls for child accounts in Windows. If this service is stopped or disabled, parental controls may not be enforced." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WpcDesktopMonSvc.dll" "Wed Nov 9 15:32:25 2022" " + "WPDBusEnum" "Portable Device Enumerator Service: Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wpdbusenum.dll" "Thu Oct 13 13:59:52 2022" " + "WpnService" "Windows Push Notifications System Service: This service runs in session 0 and hosts the notification platform and connection provider which handles the connection between the device and WNS server." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WpnService.dll" "Fri Dec 17 21:55:32 2021" " + "WpnUserService" "Windows Push Notifications User Service: This service hosts the Windows notification platform which provides support for local and push notifications. Supported notifications are tile, toast and raw." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\WpnUserService.dll" "Wed May 11 12:07:00 2022" " + "WpnUserService_404d68f" "Windows Push Notifications User Service_404d68f: This service hosts the Windows notification platform which provides support for local and push notifications. Supported notifications are tile, toast and raw." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\system32\svchost.exe" "Thu Mar 10 12:22:40 2022" " + "wscsvc" "Security Center: The WSCSVC (Windows Security Center) service monitors and reports security health settings on the computer. The health settings include firewall (on/off), antivirus (on/off/out of date), antispyware (on/off/out of date), Windows Update (automatically/manually download and install updates), User Account Control (on/off), and Internet settings (recommended/not recommended). The service provides COM APIs for independent software vendors to register and record the state of their products to the Security Center service. The Security and Maintenance UI uses the service to provide systray alerts and a graphical view of the security health states in the Security and Maintenance control panel. Network Access Protection (NAP) uses the service to report the security health states of clients to the NAP Network Policy Server to make network quarantine decisions. The service also has a public API that allows external consumers to programmatically retrieve the aggregated security health state of the system." "(Verified) Microsoft Windows Publisher" "C:\WINDOWS\System32\wscsvc.dll" "Thu Mar 16 15:24:47 2023" " + "WSearch" "Windows Search: Provides content indexing, property caching, and search results for files, e-mail, and other content." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SearchIndexer.exe" "Fri Apr 14 15:48:52 2023" " + "wuauserv" "Windows Update: Enables the detection, download and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wuaueng.dll" "Wed May 10 20:26:26 2023" " + "WwanSvc" "WWAN AutoConfig: This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\wwansvc.dll" "Thu Dec 15 17:24:33 2022" " + "XblAuthManager" "Xbox Live Auth Manager: Provides authentication and authorisation services for interacting with Xbox Live. If this service is stopped, some applications may not operate correctly." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\XblAuthManager.dll" "Sat Sep 17 14:42:07 2022" " + "XblGameSave" "Xbox Live Game Save: This service syncs save data for Xbox Live save enabled games. If this service is stopped, game save data will not upload to or download from Xbox Live." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\XblGameSave.dll" "Wed May 11 12:05:56 2022" " + "XboxGipSvc" "Xbox Accessory Management Service: This service manages connected Xbox Accessories." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\XboxGipSvc.dll" "Wed May 11 12:05:56 2022" " + "XboxNetApiSvc" "Xbox Live Networking Service: This service supports the Windows.Networking.XboxLive application programming interface." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\XboxNetApiSvc.dll" "Wed May 11 12:10:17 2022" " [Drivers] [HKLM\System\CurrentControlSet\Services] + "1394ohci" "1394 OHCI Compliant Host Controller: 1394 OpenHCI Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\1394ohci.sys" "Wed May 11 12:05:29 2022" " + "3ware" "3ware: LSI 3ware SCSI Storport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\3ware.sys" "Sat Jun 5 13:04:44 2021" " + "ACPI" "Microsoft ACPI Driver: ACPI Driver for NT" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ACPI.sys" "Sat Feb 18 14:28:52 2023" " + "AcpiDev" "ACPI Devices driver: ACPI Devices Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\AcpiDev.sys" "Wed May 11 12:05:28 2022" " + "acpiex" "Microsoft ACPIEx Driver: ACPIEx Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\acpiex.sys" "Sat Jun 5 13:04:57 2021" " + "acpipagr" "ACPI Processor Aggregator Driver: ACPI Processor Aggregator Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\acpipagr.sys" "Wed May 11 12:05:31 2022" " + "AcpiPmi" "ACPI Power Meter Driver: ACPI Power Metering Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\acpipmi.sys" "Wed May 11 12:05:27 2022" " + "acpitime" "ACPI Wake Alarm Driver: ACPI Wake Alarm" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\acpitime.sys" "Wed May 11 12:05:31 2022" " + "Acx01000" "Acx01000: Audio KMDF Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\Acx01000.sys" "Sat Jun 5 13:04:57 2021" " + "ADP80XX" "ADP80XX: PMC-Sierra Storport Driver For SPC8x6G SAS/SATA controller" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ADP80XX.SYS" "Sat Jun 5 13:04:44 2021" " + "AFD" "Ancillary Function Driver for Winsock: Ancillary Function Driver for Winsock" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\afd.sys" "Wed May 10 20:26:39 2023" " + "afunix" "afunix: AF_UNIX socket provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\afunix.sys" "Thu Aug 11 14:10:29 2022" " + "ahcache" "Application Compatibility Cache: Cache Compatibility Data and Attributes for Individual PE File" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\ahcache.sys" "Sat Jun 5 13:05:33 2021" " + "amdgpio2" "AMD GPIO Client Driver: AMD GPIO Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdgpio2.sys" "Sat Jun 5 13:04:42 2021" " + "amdi2c" "AMD I2C Controller Service: AMD I2C Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdi2c.sys" "Sat Jun 5 13:04:42 2021" " + "AmdK8" "AMD K8 Processor Driver: Processor Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdk8.sys" "Thu Mar 16 15:23:29 2023" " + "AmdPPM" "AMD Processor Driver: Processor Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdppm.sys" "Thu Mar 16 15:23:29 2023" " + "amdsata" "amdsata: AHCI 1.3 Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdsata.sys" "Sat Jun 5 13:04:44 2021" " + "amdsbs" "amdsbs: AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdsbs.sys" "Sat Jun 5 13:04:44 2021" " + "amdxata" "amdxata: Storage Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\amdxata.sys" "Sat Jun 5 13:04:44 2021" " + "AppID" "AppID Driver: Identifies an application and enforces software restriction policies." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\appid.sys" "Thu Mar 16 15:26:13 2023" " + "AppleSSD" "Apple Solid State Drive Device: Apple Solid State Drive Device" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\AppleSSD.sys" "Sat Jun 5 13:04:42 2021" " + "applockerfltr" "Smartlocker Filter Driver: Identifies files created by authorized installers." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\applockerfltr.sys" "Thu Mar 16 15:26:13 2023" " + "arcsas" "Adaptec SAS/SATA-II RAID Storport's Miniport Driver: Adaptec SAS RAID WS03 Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\arcsas.sys" "Sat Jun 5 13:04:44 2021" " + "AsyncMac" "RAS Asynchronous Media Driver: RAS Asynchronous Media Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\asyncmac.sys" "Wed May 11 12:09:12 2022" " + "atapi" "IDE Channel: ATAPI IDE Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\atapi.sys" "Thu Aug 11 14:06:12 2022" " + "b06bdrv" "QLogic Network Adapter VBD: QLogic Gigabit Ethernet VBD" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\bxvbda.sys" "Sat Jun 5 13:04:44 2021" " + "bam" "Background Activity Moderator Driver: Controls activity of background applications" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\bam.sys" "Sat Jun 5 13:05:27 2021" " + "BasicDisplay" "BasicDisplay: Microsoft Basic Display Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_a3f9d7c24b3377b3\BasicDisplay.sys" "Sat Jun 5 13:04:45 2021" " + "BasicRender" "BasicRender: Microsoft Basic Render Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\basicrender.inf_amd64_125ef86610247b72\BasicRender.sys" "Sat Sep 17 14:42:04 2022" " + "bcmfn2" "bcmfn2 Service: BCM Function 2 Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\bcmfn2.sys" "Sat Jun 5 13:04:42 2021" " + "Beep" "Beep: BEEP Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Beep.sys" "Sat Jun 5 13:05:34 2021" " + "bindflt" "Windows Bind Filter Driver: Binds filesystem namespaces to different locations and hides this remapping from the user" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\bindflt.sys" "Wed Jan 11 19:39:25 2023" " + "bowser" "Browser: NT Lan Manager Datagram Receiver Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\bowser.sys" "Wed Apr 13 21:56:51 2022" " + "BtFilter" "BtFilter: BT Filter" "(Verified) Qualcomm Atheros, Inc." "C:\WINDOWS\System32\drivers\btfilter.sys" "Mon Jul 19 21:46:02 2021" " + "BthA2dp" "Microsoft Bluetooth A2dp driver: Bluetooth A2DP Driver" "(Not Verified) Microsoft Corporation" "C:\WINDOWS\System32\drivers\BthA2dp.sys" "Fri Dec 17 21:54:23 2021" " + "BthEnum" "Bluetooth Enumerator Service: Bluetooth Bus Extender" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\BthEnum.sys" "Wed May 10 20:25:58 2023" " + "BthHFEnum" "Microsoft Bluetooth Hands-Free Profile driver: Bluetooth Hands-Free Audio and Call Control HID Enumerator" "(Not Verified) Microsoft Corporation" "C:\WINDOWS\System32\drivers\bthhfenum.sys" "Fri Dec 17 21:54:23 2021" " + "BthLEEnum" "Bluetooth Low Energy Driver: Legacy Bluetooth LE Bus Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys" "Thu Aug 11 14:06:14 2022" " + "BthMini" "Bluetooth Radio Driver: Bluetooth Transport Extensibility Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\BTHMINI.sys" "Wed May 10 20:25:58 2023" " + "BTHMODEM" "Bluetooth Modem Communications Driver: Bluetooth Communications Driver" "(Not Verified) Microsoft Corporation" "C:\WINDOWS\System32\drivers\bthmodem.sys" "Sat Jun 5 13:04:43 2021" " + "BthPan" "Bluetooth Device (Personal Area Network): Bluetooth Device (Personal Area Network)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\bthpan.sys" "Fri Apr 14 15:48:16 2023" " + "BTHPORT" "Bluetooth Port Driver: Bluetooth Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\BTHport.sys" "Wed May 10 20:25:58 2023" " + "BTHUSB" "Bluetooth Radio USB Driver: Bluetooth Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\BTHUSB.sys" "Wed May 10 20:25:58 2023" " + "bttflt" "Microsoft Hyper-V VHDPMEM BTT Filter: VHD BTT Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\bttflt.sys" "Wed May 11 12:05:33 2022" " + "buttonconverter" "Service for Portable Device Control devices: Button Converter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\buttonconverter.sys" "Wed May 11 12:05:42 2022" " + "CAD" "Charge Arbitration Driver: Charge Arbiration Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\CAD.sys" "Wed May 11 12:05:20 2022" " + X "cdfs" "CD/DVD File System Reader: ISO9660/Joliet File System Reader for CD/DVDs. (Core) (All pieces)" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\cdfs.sys" "Thu Oct 13 13:59:12 2022" " + "cdrom" "CD-ROM Driver: SCSI CD-ROM Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\cdrom.sys" "Sat Jun 5 13:04:44 2021" " + "cht4iscsi" "cht4iscsi: Chelsio iSCSI VMiniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\cht4sx64.sys" "Sat Jun 5 13:04:45 2021" " + "cht4vbd" "Chelsio Virtual Bus Driver: Virtual Bus Driver for Chelsio ® T5/T6 Chipset" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\cht4vx64.sys" "Sat Jun 5 13:04:45 2021" " + "CimFS" "CimFS: CimFS driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\CimFS.sys" "Sat Feb 18 14:29:23 2023" " + "circlass" "Consumer IR Devices: Consumer IR Class Driver for eHome" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\circlass.sys" "Wed May 11 12:05:21 2022" " + "CldFlt" "Windows Cloud Files Filter Driver: Cloud Files Mini Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\cldflt.sys" "Sat Feb 18 14:29:36 2023" " + "CLFS" "Common Log (CLFS): General-purpose logging service" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\CLFS.sys" "Wed May 10 20:26:41 2023" " + "CmBatt" "Microsoft ACPI Control Method Battery Driver: Control Method Battery Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\CmBatt.sys" "Wed May 11 12:05:31 2022" " + "CNG" "CNG: Kernel Cryptography, Next Generation" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\cng.sys" "Fri Apr 14 15:49:40 2023" " + X "cnghwassist" "CNG Hardware Assist algorithm provider: CNG Hardware Assist algorithm provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\cnghwassist.sys" "Wed May 11 12:07:26 2022" " + "CompositeBus" "Composite Bus Enumerator Driver: Multi-Transport Composite Bus Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_6657edf28697c405\CompositeBus.sys" "Wed May 11 12:05:21 2022" " + "condrv" "Console Driver: Console Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\condrv.sys" "Fri Dec 17 21:55:38 2021" " + "dam" "Desktop Activity Moderator Driver: Controls activity of desktop applications" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\dam.sys" "Wed May 11 12:08:15 2022" " + "Dfsc" "DFS Namespace Client Driver: Client driver for access to DFS Namespaces" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\dfsc.sys" "Sat Feb 18 14:29:59 2023" " + "disk" "Disk Driver: PnP Disk Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\disk.sys" "Thu Aug 11 14:06:12 2022" " + "dmvsc" "dmvsc: Dynamic Memory" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\dmvsc.sys" "Wed May 11 12:05:47 2022" " + "drmkaud" "Microsoft Trusted Audio Drivers: Microsoft Trusted Audio Drivers" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\drmkaud.sys" "Wed May 10 20:25:55 2023" " + "DXGKrnl" "LDDM Graphics Subsystem: Controls the underlying video driver stacks to provide fully-featured display capabilities." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\dxgkrnl.sys" "Wed May 10 20:26:21 2023" " + "ebdrv" "QLogic 10 Gigabit Ethernet Adapter VBD: QLogic 10 GigE VBD" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\evbda.sys" "Sat Jun 5 13:04:44 2021" " + "ebdrv0" "QLogic Legacy Ethernet Adapter VBD: QLogic 10 GigE VBD" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\evbd0a.sys" "Sat Jun 5 13:04:44 2021" " + "EhStorClass" "Enhanced Storage Filter Driver: Enhanced Storage Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\EhStorClass.sys" "Sat Jun 5 13:06:05 2021" " + "EhStorTcgDrv" "Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols: Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys" "Wed May 11 12:05:21 2022" " + "ErrDev" "Microsoft Hardware Error Device Driver: Error Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\errdev.sys" "Sat Jun 5 13:04:45 2021" " + "ExecutionContext" "CPU Scheduler for High Performance I/O: CPU Scheduler for High Performance I/O" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\ExecutionContext.sys" "Sat Jun 5 13:05:25 2021" " + "exfat" "exFAT File System Driver: exFAT File System Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\exfat.sys" "Wed Nov 9 15:32:24 2022" " + "fastfat" "FAT12/16/32 File System Driver: Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\fastfat.sys" "Wed Nov 9 15:32:24 2022" " + "fdc" "Floppy Disk Controller Driver: Floppy Disk Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\fdc.sys" "Wed May 11 12:05:32 2022" " + "FileCrypt" "FileCrypt: Windows sandboxing and encryption filter." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\filecrypt.sys" "Sat Jun 5 13:04:57 2021" " + "FileInfo" "File Information FS MiniFilter: Collects information about files in memory to be consumed by other system services." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\fileinfo.sys" "Sat Jun 5 13:05:23 2021" " + "Filetrace" "Filetrace: ETW File Trace Filter" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\filetrace.sys" "Wed May 11 12:07:46 2022" " + "flpydisk" "Floppy Disk Driver: Floppy Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\flpydisk.sys" "Wed May 11 12:05:32 2022" " + "FltMgr" "FltMgr: File System Filter Manager Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\fltmgr.sys" "Fri Apr 14 15:49:42 2023" " + "FsDepends" "File System Dependency Minifilter: This minifilter tracks the dependencies associated with the various nested volumes/filesystems" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\FsDepends.sys" "Wed May 11 12:06:08 2022" " + "fvevol" "BitLocker Drive Encryption Filter Driver: BitLocker Drive Encryption Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\fvevol.sys" "Sat Sep 17 14:45:07 2022" " + "gencounter" "Microsoft Hyper-V Generation Counter: Virtual Machine Generation Counter" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vmgencounter.sys" "Sat Jun 5 13:04:47 2021" " + "genericusbfn" "Generic USB Function Class: Generic USB Function Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_dc3260bbd08046c4\genericusbfn.sys" "Sat Jun 5 13:04:46 2021" " + "GPIOClx0101" "Microsoft GPIO Class Extension Driver: GPIO Class Extension Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\msgpioclx.sys" "Sat Feb 18 14:29:22 2023" " + "GpuEnergyDrv" "GPU Energy Driver: Computes energy consumed by GPU" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\gpuenergydrv.sys" "Sat Jun 5 13:04:52 2021" " + "HdAudAddService" "Microsoft 1.1 UAA Function Driver for High Definition Audio Service: High Definition Audio Function Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\HdAudio.sys" "Sat Jun 5 13:04:43 2021" " + "HDAudBus" "Microsoft UAA Bus Driver for High Definition Audio: High Definition Audio Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\HDAudBus.sys" "Sat Feb 18 14:28:51 2023" " + "HidBatt" "HID UPS Battery Driver: Hid Battery Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\HidBatt.sys" "Wed May 11 12:05:32 2022" " + "HidBth" "Microsoft Bluetooth HID Miniport: Bluetooth Miniport Driver for HID Devices" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidbth.sys" "Thu Aug 11 14:06:14 2022" " + "hidi2c" "Microsoft I2C HID Miniport Driver: I2C HID Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidi2c.sys" "Fri Apr 14 15:48:16 2023" " + "hidinterrupt" "Common Driver for HID Buttons implemented with interrupts: HID Button over Interrupt Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidinterrupt.sys" "Wed May 11 12:05:42 2022" " + "HidIr" "Microsoft Infrared HID Driver: Infrared Miniport Driver for Input Devices" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidir.sys" "Wed May 11 12:05:21 2022" " + "hidspi" "Microsoft SPI HID Miniport Driver: SPI HID Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidspi.sys" "Wed May 11 12:05:42 2022" " + "HidSpiCx" "HidSpi KMDF Class Extension: HidSpi KMDF Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\HidSpiCx.sys" "Wed May 11 12:07:25 2022" " + "HidUsb" "Microsoft HID Class Driver: USB Miniport Driver for Input Devices" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hidusb.sys" "Wed Jan 11 19:39:13 2023" " + "HpSAMD" "HpSAMD: Smart Array SAS/SATA Controller Media Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\HpSAMD.sys" "Sat Jun 5 13:04:45 2021" " + "Hsp" "Microsoft Pluton Service: HSP Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\Hsp.sys" "Sat Sep 17 14:42:04 2022" " + "HTTP" "HTTP Service: HTTP Service" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\HTTP.sys" "Wed May 10 20:26:35 2023" " + X "hvcrash" "hvcrash: Hyper-V Crashdump" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hvcrash.sys" "Sat Jun 5 13:04:47 2021" " + "hvservice" "Microsoft Hypervisor Service Driver: Hypervisor Boot Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hvservice.sys" "Fri Dec 17 21:54:28 2021" " + "HwNClx0101" "Microsoft Hardware Notifications Class Extension Driver: Hardware Notification Class Extension Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\mshwnclx.sys" "Sat Jun 5 13:05:16 2021" " + "hwpolicy" "Hardware Policy Driver: Contains Processor and other policies" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hwpolicy.sys" "Sat Jun 5 13:05:25 2021" " + "hyperkbd" "hyperkbd: Microsoft VMBus Synthetic Keyboard Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\hyperkbd.sys" "Sat Jun 5 13:04:47 2021" " + "HyperVideo" "HyperVideo: Microsoft VMBus Video Device Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\HyperVideo.sys" "Sat Jun 5 13:04:47 2021" " + "i8042prt" "i8042 Keyboard and PS/2 Mouse Port Driver: i8042 Port Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\i8042prt.sys" "Wed May 11 12:05:42 2022" " + "iagpio" "Intel Serial IO GPIO Controller Driver: Intel(R) Serial IO GPIO Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iagpio.sys" "Sat Jun 5 13:04:42 2021" " + "iai2c" "Intel(R) Serial IO I2C Host Controller: Intel(R) Serial IO I2C Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iai2c.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_GPIO2" "Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_GPIO2_BXT_P" "Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_GPIO2_CNL" "Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_GPIO2_GLK" "Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_I2C" "Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_I2C_BXT_P" "Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_I2C_CNL" "Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSS2i_I2C_GLK" "Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys" "Sat Jun 5 13:04:42 2021" " + "iaLPSSi_GPIO" "Intel(R) Serial IO GPIO Controller Driver: Intel(R) Serial IO GPIO Controller Driver" "(Verified) Intel Corporation - Client Components Group" "C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys" "Sat Jun 5 13:04:44 2021" " + "iaLPSSi_I2C" "Intel(R) Serial IO I2C Controller Driver: Intel(R) Serial IO I2C Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys" "Sat Jun 5 13:04:43 2021" " + "iaStorAVC" "Intel Chipset SATA RAID Controller: Intel(R) Rapid Storage Technology driver (inbox) - x64" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaStorAVC.sys" "Sat Jun 5 13:04:45 2021" " + "iaStorV" "Intel RAID Controller Windows 7: Intel Matrix Storage Manager driver - x64" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\iaStorV.sys" "Sat Jun 5 13:04:45 2021" " + "ibbus" "Mellanox InfiniBand Bus/AL (Filter Driver): InfiniBand Fabric Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ibbus.sys" "Sat Jun 5 13:04:45 2021" " + "igfx" "igfx: Intel Graphics Kernel Mode Driver" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7cee4436373b22ac\igdkmd64.sys" "Wed Aug 25 22:50:22 2021" " + "IndirectKmd" "Indirect Displays Kernel-Mode Driver: Kernel mode driver that implements the Indirect Displays framework." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\IndirectKmd.sys" "Wed May 11 12:07:24 2022" " + "IntcAzAudAddService" "Service for Realtek HD Audio (WDM): Realtek(r) High Definition Audio Function Driver" "(Verified) Realtek Semiconductor Corp." "C:\WINDOWS\system32\drivers\RTKVHD64.sys" "Wed Feb 3 23:03:20 2021" " + "IntcDAud" "Intel(R) Display Audio: Intel(R) Display Audio Driver" "(Verified) Intel Corporation" "C:\WINDOWS\System32\DriverStore\FileRepository\intcdaud.inf_amd64_f883a2d2516832ef\IntcDAud.sys" "Wed Aug 25 22:52:14 2021" " + "intelide" "intelide: Intel PCI IDE Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\intelide.sys" "Thu Aug 11 14:06:12 2022" " + "intelpep" "Intel(R) Power Engine Plug-in Driver: Intel Power Engine Plugin" "(Verified) Microsoft Windows Hardware Abstraction Layer Publisher" "C:\WINDOWS\System32\drivers\intelpep.sys" "Wed May 11 12:05:34 2022" " + "intelpmax" "Intel(R) Dynamic Device Peak Power Manager Driver: Intel Power Limit Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\intelpmax.sys" "Wed May 11 12:05:20 2022" " + "IntelPMT" "Intel(R) Platform Monitoring Technology Service: Intel Platform Monitoring Driver" "(Verified) Microsoft Windows Hardware Abstraction Layer Publisher" "C:\WINDOWS\System32\drivers\IntelPMT.sys" "Wed May 11 12:05:34 2022" " + "intelppm" "Intel Processor Driver: Processor Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\intelppm.sys" "Thu Mar 16 15:23:24 2023" " + "iorate" "Disk I/O Rate Filter Driver: Provides rate control for disk I/O traffic." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\iorate.sys" "Wed May 11 12:05:54 2022" " + "IpFilterDriver" "IP Traffic Filter Driver: IP Traffic Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys" "Thu Oct 13 13:58:32 2022" " + "IPMIDRV" "IPMIDRV: WMI IPMI DRIVER" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\IPMIDrv.sys" "Thu Oct 13 13:57:07 2022" " + "IPNAT" "IP Network Address Translator: IP Network Address Translator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ipnat.sys" "Fri Apr 14 15:49:04 2023" " + "IPT" "IPT: IPT Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ipt.sys" "Sat Jun 5 13:04:54 2021" " + "isapnp" "isapnp: PNP ISA Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\isapnp.sys" "Sat Jun 5 13:04:45 2021" " + "iScsiPrt" "iScsiPort Driver: Microsoft iSCSI Initiator Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\msiscsi.sys" "Wed May 10 20:25:57 2023" " + "ItSas35i" "ItSas35i: Avago SAS Gen3.5 Driver (StorPort)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ItSas35i.sys" "Sat Jun 5 13:04:45 2021" " + "kbdclass" "Keyboard Class Driver: Keyboard Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\kbdclass.sys" "Wed May 11 12:05:42 2022" " + "kbdhid" "Keyboard HID Driver: HID Keyboard Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\kbdhid.sys" "Wed May 11 12:05:43 2022" " + "kdnic" "Microsoft Kernel Debug Network Miniport (NDIS 6.20): Microsoft Kernel Debugger Network Miniport" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\kdnic.sys" "Sat Jun 5 13:04:46 2021" " + "KSecDD" "KSecDD: Kernel Security Support Provider Interface" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\ksecdd.sys" "Thu Oct 13 13:58:20 2022" " + "KSecPkg" "KSecPkg: Kernel Security Support Provider Interface Packages" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\ksecpkg.sys" "Wed May 10 20:26:35 2023" " + "ksthunk" "Kernel Streaming Thunks: Kernel Streaming WOW Thunk Service" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ksthunk.sys" "Thu Oct 13 13:58:27 2022" " + "lltdio" "Link-Layer Topology Discovery Mapper I/O Driver: Link-Layer Topology Discovery Mapper I/O Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\lltdio.sys" "Sat Jun 5 13:05:29 2021" " + "LSI_SAS" "LSI_SAS: LSI Fusion-MPT SAS Driver (StorPort)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\lsi_sas.sys" "Sat Jun 5 13:04:45 2021" " + "LSI_SAS2i" "LSI_SAS2i: LSI SAS Gen2 Driver (StorPort)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\lsi_sas2i.sys" "Sat Jun 5 13:04:45 2021" " + "LSI_SAS3i" "LSI_SAS3i: Avago SAS Gen3 Driver (StorPort)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\lsi_sas3i.sys" "Sat Jun 5 13:04:45 2021" " + "luafv" "UAC File Virtualization: Virtualizes file write failures to per-user locations." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\luafv.sys" "Sat Feb 18 14:30:05 2023" " + "mausbhost" "MA-USB Host Controller Driver: MA-USB Host Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mausbhost.sys" "Sat Jun 5 13:04:45 2021" " + "mausbip" "MA-USB IP Filter Driver: MA-USB IP Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mausbip.sys" "Sat Jun 5 13:04:45 2021" " + "MbbCx" "MBB Network Adapter Class Extension: Windows Mobile Broadband Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\MbbCx.sys" "Fri Apr 14 15:48:20 2023" " + "megasas2i" "megasas2i: MEGASAS2i RAID Controller Driver for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MegaSas2i.sys" "Sat Jun 5 13:04:45 2021" " + "megasas35i" "megasas35i: MEGASAS RAID Controller Driver for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\megasas35i.sys" "Sat Jun 5 13:04:45 2021" " + "megasr" "megasr: LSI MegaRAID Software RAID Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\megasr.sys" "Sat Jun 5 13:04:45 2021" " + "MEIx64" "Intel(R) Trusted Execution Engine Interface: Intel(R) Management Engine Interface" "(Verified) Intel(R) Embedded Subsystems and IP Blocks Group" "C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys" "Mon Jul 15 14:21:06 2019" " + "Microsoft_Bluetooth_AvrcpTransport" "Microsoft Bluetooth Avrcp Transport Driver: Microsoft Bluetooth Avrcp Transport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys" "Wed May 11 12:05:19 2022" " + "mlx4_bus" "Mellanox ConnectX Bus Enumerator: MLX4 Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mlx4_bus.sys" "Sat Jun 5 13:04:45 2021" " + "MMCSS" "Multimedia Class Scheduler: Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\mmcss.sys" "Wed May 11 12:05:59 2022" " + "Modem" "Modem: Modem Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\modem.sys" "Wed May 11 12:11:18 2022" " + "monitor" "Microsoft Monitor Class Function Driver Service: Monitor Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\monitor.sys" "Thu Oct 13 13:57:06 2022" " + "mouclass" "Mouse Class Driver: Mouse Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mouclass.sys" "Wed May 11 12:05:41 2022" " + "mouhid" "Mouse HID Driver: HID Mouse Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mouhid.sys" "Wed May 11 12:05:41 2022" " + "mountmgr" "Mount Point Manager: Driver responsible with maintaining persistent drive letters and names for volumes" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mountmgr.sys" "Sat Jun 5 13:05:25 2021" " + "mpi3drvi" "mpi3drvi: Broadcom MPI 3.0 Driver (StorPort)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mpi3drvi.sys" "Sat Jun 5 13:04:45 2021" " + "mpsdrv" "Windows Defender Firewall Authorization Driver: Windows Defender Firewall Authorization Driver is a kernel mode driver that provides deep inspection services on inbound and outbound network traffic." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mpsdrv.sys" "Sat Jun 5 13:05:09 2021" " + "MRxDAV" "WebDav Client Redirector Driver: Network Redirector that provides WebDAV file access for the WebClient service" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\mrxdav.sys" "Wed May 11 12:11:33 2022" " + "mrxsmb" "SMB MiniRedirector Wrapper and Engine: Implements the framework for the SMB filesystem redirector" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\mrxsmb.sys" "Wed May 10 20:26:41 2023" " + "mrxsmb20" "SMB 2.0 MiniRedirector: Implements the SMB 2.0 protocol, which provides connectivity to network resources on Windows Vista and later servers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys" "Wed May 10 20:26:41 2023" " + "MsBridge" "Microsoft MAC Bridge: Microsoft MAC Bridge" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\bridge.sys" "Wed May 11 12:10:42 2022" " + "Msfs" "Msfs: Mailslot driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Msfs.sys" "Sat Jun 5 13:05:25 2021" " + "msgpiowin32" "Common Driver for Buttons, DockMode and Laptop/Slate Indicator: GPIO Button Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\msgpiowin32.sys" "Wed May 11 12:05:44 2022" " + "mshidkmdf" "Pass-through HID to KMDF Filter Driver: Pass-through HID to KMDF Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mshidkmdf.sys" "Sat Jun 5 13:05:16 2021" " + "mshidumdf" "Pass-through HID to UMDF Driver: Device Driver to provide pass-through interface between HIDCLASS and UMDF" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mshidumdf.sys" "Sat Jun 5 13:05:14 2021" " + "msisadrv" "msisadrv: ISA Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\msisadrv.sys" "Sat Jun 5 13:04:45 2021" " + "MSKSSRV" "Microsoft Streaming Service Proxy: MS KS Server" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MSKSSRV.sys" "Thu Oct 13 13:58:27 2022" " + "MsLldp" "Microsoft Link-Layer Discovery Protocol: Microsoft Link-Layer Discovery Protocol Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\mslldp.sys" "Sat Jun 5 13:05:39 2021" " + "MSPCLOCK" "Microsoft Streaming Clock Proxy: MS Proxy Clock" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MSPCLOCK.sys" "Sat Jun 5 13:05:31 2021" " + "MSPQM" "Microsoft Streaming Quality Manager Proxy: MS Proxy Quality Manager" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MSPQM.sys" "Wed May 11 12:08:40 2022" " + "MsQuic" "MsQuic: Microsoft® QUIC Library" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\msquic.sys" "Fri Apr 14 15:49:38 2023" " + "MsRPC" "MsRPC: Kernel Remote Procedure Call Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\MsRPC.sys" "Fri Apr 14 15:49:45 2023" " + "mssmbios" "Microsoft System Management BIOS Driver: System Management BIOS Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mssmbios.sys" "Sat Jun 5 13:04:45 2021" " + "MSTEE" "Microsoft Streaming Tee/Sink-to-Sink Converter: WDM Tee/Communication Transform Filter " "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MSTEE.sys" "Sat Jun 5 13:05:31 2021" " + "MTConfig" "Microsoft Input Configuration Driver: Microsoft Multi-Touch HID Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\MTConfig.sys" "Sat Jun 5 13:04:44 2021" " + "Mup" "Mup: Multiple UNC Provider Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\mup.sys" "Sat Jun 5 13:05:27 2021" " + "mvumis" "mvumis: Marvell Flash Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\mvumis.sys" "Sat Jun 5 13:04:45 2021" " + "NativeWifiP" "NativeWiFi Filter: NativeWiFi Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\nwifi.sys" "Wed Jul 13 15:31:11 2022" " + "ndfltr" "NetworkDirect Service: NetworkDirect Support Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ndfltr.sys" "Sat Jun 5 13:04:45 2021" " + "NDIS" "NDIS System Driver: NDIS System Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ndis.sys" "Fri Apr 14 15:49:44 2023" " + "NdisCap" "Microsoft NDIS Capture: Microsoft NDIS Capture" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ndiscap.sys" "Wed May 11 12:11:12 2022" " + "NdisImPlatform" "Microsoft Network Adapter Multiplexor Protocol: Microsoft Network Adapter Multiplexor Protocol" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\NdisImPlatform.sys" "Wed May 10 20:27:09 2023" " + "NdisTapi" "Remote Access NDIS TAPI Driver: Remote Access NDIS TAPI Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\ndistapi.sys" "Wed May 11 12:09:11 2022" " + "Ndisuio" "NDIS Usermode I/O Protocol: NDIS User mode I/O driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ndisuio.sys" "Wed May 11 12:08:03 2022" " + "NdisVirtualBus" "Microsoft Virtual Network Adapter Enumerator: Microsoft Virtual Network Adapter Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\NdisVirtualBus.sys" "Sat Jun 5 13:05:39 2021" " + "NdisWan" "Remote Access NDIS WAN Driver: Remote Access NDIS WAN Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ndiswan.sys" "Fri Apr 14 15:49:58 2023" " + "ndiswanlegacy" "Remote Access LEGACY NDIS WAN Driver: Remote Access LEGACY NDIS WAN Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\ndiswan.sys" "Fri Apr 14 15:49:58 2023" " + "NDKPerf" "NDKPerf Driver: " "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\NDKPerf.sys" "Wed May 11 12:11:13 2022" " + "NDKPing" "NDKPing Driver: RDMA Sample Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\NDKPing.sys" "Wed May 11 12:11:12 2022" " + "ndproxy" "NDIS Proxy Driver: NDIS Proxy Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\NDProxy.sys" "Wed May 11 12:09:11 2022" " + "Ndu" "Windows Network Data Usage Monitoring Driver: This service provides network data usage monitoring functionality" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\Ndu.sys" "Sat Jun 5 13:06:00 2021" " + "NetAdapterCx" "Network Adapter Wdf Class Extension Library: Network Adapter Class Extension for WDF" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\NetAdapterCx.sys" "Thu Mar 16 15:27:19 2023" " + "NetBIOS" "NetBIOS Interface: NetBIOS Interface" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\netbios.sys" "Sat Jun 5 13:05:37 2021" " + "NetBT" "NetBT: This service implements NetBios over TCP/IP." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\netbt.sys" "Sat Jun 5 13:05:39 2021" " + "netvsc" "netvsc: Virtual NDIS Miniport" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\netvsc.sys" "Thu Mar 16 15:24:21 2023" " + "Npfs" "Npfs: NPFS Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Npfs.sys" "Wed Feb 9 16:19:27 2022" " + "npsvctrig" "Named pipe service trigger provider: Named pipe service triggers" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\npsvctrig.sys" "Sat Jun 5 13:04:46 2021" " + "nsiproxy" "NSI Proxy Service Driver: NSI Proxy Service" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\nsiproxy.sys" "Sat Jun 5 13:05:25 2021" " + "Ntfs" "Ntfs: NT File System Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Ntfs.sys" "Fri Apr 14 15:49:43 2023" " + "Null" "Null: NULL Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Null.sys" "Sat Jun 5 13:05:25 2021" " + "nvdimm" "Microsoft NVDIMM device driver: NVDIMM device driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\nvdimm.sys" "Wed May 11 12:05:33 2022" " + "nvmedisk" "Microsoft NVMe disk driver: Nvme Disk Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\nvmedisk.sys" "Wed May 11 12:05:28 2022" " + "nvraid" "nvraid: NVIDIA® nForce(TM) RAID Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\nvraid.sys" "Sat Jun 5 13:04:45 2021" " + "nvstor" "nvstor: NVIDIA® nForce(TM) Sata Performance Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\nvstor.sys" "Sat Jun 5 13:04:45 2021" " + "P9Rdr" "Plan 9 Redirector Driver: Plan 9 Redirector Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\p9rdr.sys" "Thu Dec 15 17:26:41 2022" " + "Parport" "Parallel port driver: Parallel Port Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\parport.sys" "Wed May 11 12:05:32 2022" " + "partmgr" "Partition driver: Disk class filter driver that manages and auctions out partitions to volume managers." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\partmgr.sys" "Thu Mar 16 15:27:14 2023" " + "pci" "PCI Bus Driver: NT Plug and Play PCI Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pci.sys" "Thu Mar 16 15:23:40 2023" " + "pciide" "pciide: Generic PCI IDE Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pciide.sys" "Thu Aug 11 14:06:12 2022" " + "pcmcia" "pcmcia: PCMCIA Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pcmcia.sys" "Wed May 11 12:05:20 2022" " + "pcw" "Performance Counters for Windows Driver: Performance Counters for Windows Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pcw.sys" "Wed Jul 13 15:32:06 2022" " + "pdc" "pdc: Power Dependency Coordinator Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\pdc.sys" "Fri Jun 17 18:28:09 2022" " + "PEAUTH" "PEAUTH: Protected Environment Authentication and Authorization Export Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\peauth.sys" "Wed May 10 20:26:00 2023" " + "percsas2i" "percsas2i: MEGASAS RAID Controller Driver for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\percsas2i.sys" "Sat Jun 5 13:04:45 2021" " + "percsas3i" "percsas3i: MEGASAS RAID Controller Driver for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\percsas3i.sys" "Sat Jun 5 13:04:45 2021" " + "PktMon" "Packet Monitor Driver: Packet Monitor Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\PktMon.sys" "Wed Nov 9 15:34:38 2022" " + "pmem" "Microsoft persistent memory disk driver: Persistent memory driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pmem.sys" "Thu Mar 16 15:23:41 2023" " + "PNPMEM" "Microsoft Memory Module Driver: Plug and Play Memory Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pnpmem.sys" "Wed May 11 12:05:27 2022" " + "portcfg" "portcfg: Port Device Class Configuration Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\portcfg.sys" "Wed May 11 12:07:25 2022" " + "PptpMiniport" "WAN Miniport (PPTP): WAN Miniport (PPTP)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\raspptp.sys" "Thu Mar 16 15:27:49 2023" " + "PRM" "Microsoft PRM Driver: Windows PRM Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\prm.inf_amd64_7fc9bb8ba2b73803\PRM.sys" "Sat Jun 5 13:04:44 2021" " + "Processor" "Processor Driver: Processor Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\processr.sys" "Thu Mar 16 15:23:24 2023" " + "ProtonVPNCallout" "ProtonVPN Callout: ProtonVPN Split Tunnel Driver" "(Verified) Microsoft Windows Hardware Compatibility Publisher" "C:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys" "Fri Oct 7 09:27:39 2022" " + "Psched" "QoS Packet Scheduler: QoS Packet Scheduler" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\pacer.sys" "Sat Jun 5 13:05:09 2021" " + "Qcamain10x64" "Qualcomm Atheros Extensible Wireless LAN 11AC device driver: Qualcomm Atheros Extensible Wireless LAN device driver" "(Verified) Qualcomm Atheros, Inc." "C:\WINDOWS\System32\drivers\Qcamain10x64.sys" "Sun Jul 18 20:19:10 2021" " + "QWAVEdrv" "QWAVE driver: Quality Windows Audio/Video Experience component driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\qwavedrv.sys" "Wed May 11 12:08:51 2022" " + "Ramdisk" "Windows RAM Disk Driver: RAM Disk Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\ramdisk.sys" "Fri Apr 14 15:48:24 2023" " + X "RapportAegle64" "RapportAegle64: " "" "File not found: C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys" "Fri Jun 23 13:15:12 2023" " + X "RapportCerberus_2204255" "RapportCerberus_2204255: RapportCerberus" "(Verified) International Business Machines Corporation" "c:\programdata\trusteer\rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_2204255.sys" "Thu Oct 13 12:53:21 2022" " + X "RapportEI64" "RapportEI64: " "" "File not found: C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys" "Fri Jun 23 13:15:12 2023" " + X "RapportKE64" "RapportKE64: " "" "File not found: C:\WINDOWS\System32\Drivers\RapportKE64.sys" "Fri Jun 23 13:15:12 2023" " + X "RapportPG64" "RapportPG64: " "" "File not found: C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys" "Fri Jun 23 13:15:12 2023" " + "RasAcd" "Remote Access Auto Connection Driver: Remote Access Auto Connection Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\rasacd.sys" "Wed May 11 12:09:08 2022" " + "RasAgileVpn" "WAN Miniport (IKEv2): WAN Miniport (IKEv2)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\AgileVpn.sys" "Fri Apr 14 15:49:58 2023" " + "Rasl2tp" "WAN Miniport (L2TP): WAN Miniport (L2TP)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rasl2tp.sys" "Wed May 10 20:27:11 2023" " + "RasPppoe" "Remote Access PPPOE Driver: Remote Access PPPOE Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\raspppoe.sys" "Fri Apr 14 15:49:59 2023" " + "RasSstp" "WAN Miniport (SSTP): WAN Miniport (SSTP)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rassstp.sys" "Fri Apr 14 15:49:59 2023" " + "rdbss" "Redirected Buffering Sub System: Provides the framework for network mini-redirectors" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\rdbss.sys" "Sat Feb 18 14:29:59 2023" " + "rdpbus" "Remote Desktop Device Redirector Bus Driver: Microsoft RDP Bus Device driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rdpbus.sys" "Sat Jun 5 13:04:47 2021" " + "RDPDR" "Remote Desktop Device Redirector Driver: Remote Desktop Device Redirector Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rdpdr.sys" "Sat Jun 5 13:06:13 2021" " + "RdpVideoMiniport" "Remote Desktop Video Miniport Driver: Microsoft RDP Video Miniport driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rdpvideominiport.sys" "Thu Oct 13 13:59:21 2022" " + "rdyboost" "ReadyBoost: ReadyBoost" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rdyboost.sys" "Sat Jun 5 13:06:16 2021" " + "ReFS" "ReFS: NT ReFS FS Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\ReFS.sys" "Wed May 10 20:26:30 2023" " + "ReFSv1" "ReFSv1: NT ReFS FS Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\ReFSv1.sys" "Wed May 11 12:07:47 2022" " + "RFCOMM" "Bluetooth Device (RFCOMM Protocol TDI): Bluetooth Device (RFCOMM Protocol TDI)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rfcomm.sys" "Wed May 11 12:05:42 2022" " + "rhproxy" "Resource Hub proxy driver: ResourceHub Proxy Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\rhproxy.sys" "Wed May 11 12:05:27 2022" " + "rspndr" "Link-Layer Topology Discovery Responder: Link-Layer Topology Discovery Responder" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\rspndr.sys" "Sat Jun 5 13:05:29 2021" " + "rt640x64" "Realtek RT640 NT Driver: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver " "(Verified) Realtek Semiconductor Corp." "C:\WINDOWS\System32\drivers\rt640x64.sys" "Tue Nov 16 22:43:52 2021" " + "RTSUER" "Realtek USB Card Reader - UER: RTS USB READER Driver" "(Verified) Realtek Semiconductor Corp." "C:\WINDOWS\system32\Drivers\RtsUer.sys" "Fri Sep 24 02:19:14 2021" " + "s3cap" "s3cap: Microsoft S3 Emulated Device Cap Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vms3cap.sys" "Sat Jun 5 13:04:47 2021" " + "SASDIFSV" "SASDIFSV: SASDIFSV64.SYS" "(Verified) Support.com, Inc." "C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS" "Sat Jan 9 10:14:56 2021" " + "SASKUTIL" "SASKUTIL: SASKUTIL64.SYS" "(Verified) Support.com, Inc." "C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS" "Sat Jan 9 10:14:56 2021" " + "sbp2port" "SBP-2 Transport/Protocol Bus Driver: SBP-2 Protocol Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sbp2port.sys" "Wed May 11 12:05:28 2022" " + "scfilter" "Smart card PnP Class Filter Driver: Smart card reader filter driver enabling smart card PnP." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\scfilter.sys" "Wed May 11 12:08:44 2022" " + "scmbus" "Microsoft Storage Class Memory Bus Driver: Storage Class Memory Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\scmbus.sys" "Wed May 11 12:05:33 2022" " + "sdbus" "sdbus: SecureDigital Bus Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sdbus.sys" "Sat Sep 17 14:42:04 2022" " + "SDFRd" "SDF Reflector: SDF Reflector" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\SDFRd.sys" "Sat Jun 5 13:04:44 2021" " + "sdstor" "SD Storage Port Driver: SD Storage Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sdstor.sys" "Wed May 11 12:05:44 2022" " + "SerCx" "Serial UART Support Library: Serial Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\SerCx.sys" "Sat Jun 5 13:05:16 2021" " + "SerCx2" "Serial UART Support Library: Serial Class Extension V2" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\SerCx2.sys" "Thu Mar 16 15:26:03 2023" " + "Serenum" "Serenum Filter Driver: Serial Port Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\serenum.sys" "Wed May 11 12:05:32 2022" " + "Serial" "Serial port driver: Serial Device Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\serial.sys" "Wed May 11 12:05:32 2022" " + "sermouse" "Serial Mouse Driver: Serial Mouse Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sermouse.sys" "Wed May 11 12:05:41 2022" " + "sfloppy" "High-Capacity Floppy Disk Drive: SCSI Floppy Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sfloppy.sys" "Wed May 11 12:05:32 2022" " + "SgrmAgent" "System Guard Runtime Monitor Agent: System Guard Runtime Monitor Agent Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\SgrmAgent.sys" "Sat Jun 5 13:06:00 2021" " + "SiSRaid2" "SiSRaid2: SiS RAID Stor Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\SiSRaid2.sys" "Sat Jun 5 13:04:45 2021" " + "SiSRaid4" "SiSRaid4: SiS AHCI Stor-Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\sisraid4.sys" "Sat Jun 5 13:04:45 2021" " + "SmartSAMD" "SmartSAMD: Storport Miniport Driver for SmartRAID/SmartHBA Controllers" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\SmartSAMD.sys" "Sat Jun 5 13:04:45 2021" " + "spaceparser" "spaceparser: Storage Spaces Parser driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\spaceparser.sys" "Wed May 11 12:10:25 2022" " + "spaceport" "Storage Spaces Driver: Storage Spaces Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\spaceport.sys" "Thu Mar 16 15:23:40 2023" " + "SpatialGraphFilter" "Holographic Spatial Graph Filter: Holographic Spatial Graph Filter" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys" "Sat Jun 5 18:17:02 2021" " + "SpbCx" "Simple Peripheral Bus Support Library: SPB Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\SpbCx.sys" "Sat Jun 5 13:05:16 2021" " + "speedfan" "speedfan: SpeedFan x64 Driver" "(Verified) SOKNO S.R.L." "C:\Windows\SysWOW64\speedfan.sys" "Sat Dec 29 20:59:38 2012" " + "srv2" "Server SMB 2.xxx Driver: Enables connectivity from Windows Vista and later clients" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\srv2.sys" "Wed May 10 20:26:41 2023" " + "srvnet" "srvnet: Server Network driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\srvnet.sys" "Wed May 10 20:26:41 2023" " + "stexstor" "stexstor: Promise SuperTrak EX Series Driver for Windows x64" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\stexstor.sys" "Sat Jun 5 13:04:45 2021" " + "storahci" "Microsoft Standard SATA AHCI Driver: MS AHCI Storport Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\storahci.sys" "Thu Aug 11 14:06:12 2022" " + "storflt" "Microsoft Hyper-V Storage Accelerator: Virtual Storage Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vmstorfl.sys" "Wed May 11 12:05:47 2022" " + "stornvme" "Microsoft Standard NVM Express Driver: Microsoft NVM Express Storport Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\stornvme.sys" "Wed May 10 20:25:57 2023" " + "storqosflt" "Storage QoS Filter Driver: Provides Quality of Service for storage I/O traffic." "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\storqosflt.sys" "Sat Jun 5 13:05:16 2021" " + "storufs" "Microsoft Universal Flash Storage (UFS) Driver: MS UFS Storport Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\storufs.sys" "Thu Oct 13 13:57:08 2022" " + "storvsc" "storvsc: Storage VSC Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\storvsc.sys" "Sat Jun 5 13:04:47 2021" " + "swenum" "Software Bus Driver: Plug and Play Software Device Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_3bf6c0d173eb26c6\swenum.sys" "Sat Jun 5 13:04:44 2021" " + "tapprotonvpn" "TAP-ProtonVPN Windows Adapter V9: TAP-Windows Virtual Network Driver (NDIS 6.0)" "(Verified) Microsoft Windows Hardware Compatibility Publisher" "C:\WINDOWS\System32\drivers\tapprotonvpn.sys" "Fri Oct 7 09:27:41 2022" " + "Tcpip" "TCP/IP Protocol Driver: TCP/IP Protocol Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\tcpip.sys" "Wed May 10 20:26:40 2023" " + "Tcpip6" "@todo.dll,-100;Microsoft IPv6 Protocol Driver: @todo.dll,-100;Microsoft IPv6 Protocol Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\tcpip.sys" "Wed May 10 20:26:40 2023" " + "tcpipreg" "@%SystemRoot%\System32\drivers\tcpipreg.sys,-10110,: TCP/IP Registry Compatibility Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\tcpipreg.sys" "Wed May 10 20:26:40 2023" " + "tdx" "NetIO Legacy TDI Support Driver: NetIO Legacy TDI Support Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\tdx.sys" "Fri Dec 17 21:57:55 2021" " + "terminpt" "Microsoft Remote Desktop Input Driver: Terminal Server Input Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\terminpt.sys" "Wed May 11 12:05:47 2022" " + "TPM" "TPM: TPM Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\tpm.sys" "Sat Feb 18 14:28:53 2023" " + "TsUsbFlt" "Remote Desktop USB Hub Class Filter Driver: Remote Desktop USB Hub Class Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\tsusbflt.sys" "Wed May 11 12:06:08 2022" " + "TsUsbGD" "Remote Desktop Generic USB Device: Remote Desktop Generic USB Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\TsUsbGD.sys" "Wed May 11 12:05:34 2022" " + "tunnel" "Microsoft Tunnel Miniport Adapter Driver: Microsoft Tunnel Interface Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\tunnel.sys" "Wed Nov 9 15:33:50 2022" " + "UASPStor" "USB Attached SCSI (UAS) Driver: Microsoft Uasp Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\uaspstor.sys" "Sat Sep 17 14:42:04 2022" " + "UcmCx0101" "USB Connector Manager KMDF Class Extension: USB Connector Manager KMDF Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\UcmCx.sys" "Sat Jun 5 13:05:16 2021" " + "UcmTcpciCx0101" "UCM-TCPCI KMDF Class Extension: UCM-TCPCI KMDF Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys" "Sat Jun 5 13:05:16 2021" " + "UcmUcsiAcpiClient" "UCM-UCSI ACPI Client: UCM-UCSI ACPI Client Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys" "Sat Jun 5 13:04:46 2021" " + "UcmUcsiCx0101" "UCM-UCSI KMDF Class Extension: UCM-UCSI KMDF Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\UcmUcsiCx.sys" "Sat Jun 5 13:05:16 2021" " + "Ucx01000" "USB Host Support Library: USB Controller Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ucx01000.sys" "Sat Jun 5 13:04:57 2021" " + "UdeCx" "USB Device Emulation Support Library: "udecx.DRIVER"" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\udecx.sys" "Sat Jun 5 13:04:57 2021" " + X "udfs" "udfs: Reads/Writes UDF 1.02,1.5,2.0x,2.5 disc formats, usually found on C/DVD discs. (Core) (All pieces)" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\udfs.sys" "Wed May 11 12:11:17 2022" " + "UEFI" "Microsoft UEFI Driver: UEFI Driver for NT" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\uefi.inf_amd64_6693f32a658a859a\UEFI.sys" "Wed May 11 12:05:29 2022" " + "Ufx01000" "USB Function Class Extension: USB Function Driver Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ufx01000.sys" "Sat Jun 5 13:05:16 2021" " + "UfxChipidea" "USB Chipidea Controller: UFX Chipidea Client Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_a517b810ee0e44a2\UfxChipidea.sys" "Sat Jun 5 13:04:46 2021" " + "ufxsynopsys" "USB Synopsys Controller: UFX Synopsys Client Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\ufxsynopsys.sys" "Sat Jun 5 13:04:46 2021" " + "umbus" "UMBus Enumerator Driver: User-Mode Bus Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\umbus.inf_amd64_0a89aff902a5c3a9\umbus.sys" "Sat Jun 5 13:04:45 2021" " + "UmPass" "Microsoft UMPass Driver: Generic pass-through driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\umpass.sys" "Wed May 11 12:05:42 2022" " + "UrsChipidea" "Chipidea USB Role-Switch Driver: USB Role-Switch Driver for Chipidea Core" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\urschipidea.inf_amd64_4bd4df2779fd9e16\urschipidea.sys" "Sat Jun 5 13:04:46 2021" " + "UrsCx01000" "USB Role-Switch Support Library: USB Role-Switch Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\urscx01000.sys" "Sat Jun 5 13:05:16 2021" " + "UrsSynopsys" "Synopsys USB Role-Switch Driver: USB Role-Switch Driver for Synopsys Core" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_28522251903b4825\urssynopsys.sys" "Sat Jun 5 13:04:46 2021" " + "Usb4DeviceRouter" "USB4 Device Router Service: USB4(TM) Device Router Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_d8f35ef90c83032f\Usb4DeviceRouter.sys" "Wed Nov 9 15:32:16 2022" " + "Usb4HostRouter" "USB4 Host Router Service: USB4(TM) Host Router Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\usb4hostrouter.inf_amd64_ea264d21e6b3e5db\Usb4HostRouter.sys" "Wed Nov 9 15:32:16 2022" " + "usbaudio" "USB Audio Driver (WDM): USB Audio Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\usbaudio.sys" "Wed Nov 9 15:32:13 2022" " + "usbaudio2" "USB Audio 2.0 Service: Microsoft USB Audio Class 2.0 Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbaudio2.sys" "Wed May 11 12:05:21 2022" " + "usbccgp" "Microsoft USB Generic Parent Driver: USB Common Class Generic Parent Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbccgp.sys" "Sat Feb 18 14:28:52 2023" " + "usbcir" "eHome Infrared Receiver (USBCIR): USB Consumer IR Driver for eHome" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbcir.sys" "Wed May 11 12:05:21 2022" " + "usbehci" "Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: EHCI eUSB Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbehci.sys" "Fri Jun 17 18:28:04 2022" " + "usbhub" "Microsoft USB Standard Hub Driver: Default Hub Driver for USB" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbhub.sys" "Fri Jun 17 18:28:04 2022" " + "USBHUB3" "SuperSpeed Hub: USB3 HUB Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\UsbHub3.sys" "Fri Dec 17 21:54:27 2021" " + "usbohci" "Microsoft USB Open Host Controller Miniport Driver: OHCI USB Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbohci.sys" "Fri Jun 17 18:28:03 2022" " + "usbprint" "Microsoft USB PRINTER Class: USB Printer driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbprint.sys" "Fri Apr 14 15:48:16 2023" " + "usbscan" "USB Scanner Driver: USB Scanner Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbscan.sys" "Thu Oct 13 13:57:06 2022" " + "usbser" "Microsoft USB Serial Driver: USB Serial Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbser.sys" "Thu Oct 13 13:57:08 2022" " + "USBSTOR" "USB Mass Storage Driver: USB Mass Storage Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\USBSTOR.SYS" "Sat Sep 17 14:42:04 2022" " + "usbuhci" "Microsoft USB Universal Host Controller Miniport Driver: UHCI USB Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\usbuhci.sys" "Fri Jun 17 18:28:04 2022" " + "usbvideo" "USB Video Device (WDM): USB Video Class Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\usbvideo.sys" "Thu Oct 13 13:57:07 2022" " + "USBXHCI" "USB xHCI Compliant Host Controller: USB XHCI Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\USBXHCI.SYS" "Fri Apr 14 15:48:17 2023" " + "vdrvroot" "Microsoft Virtual Drive Enumerator: Virtual Drive Root Enumerator" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vdrvroot.sys" "Sat Jun 5 13:04:45 2021" " + "VerifierExt" "Driver Verifier Extension: Driver Verifier component to help find bugs in device drivers." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\VerifierExt.sys" "Wed May 11 12:08:07 2022" " + "vhdmp" "vhdmp: VHD Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vhdmp.sys" "Wed May 10 20:25:57 2023" " + "vhf" "Virtual HID Framework (VHF) Driver: Kernel mode driver that implements the Virtual HID Framework (VHF)" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vhf.sys" "Wed May 11 12:05:32 2022" " + "Vid" "Vid: Microsoft Hyper-V Virtualization Infrastructure Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\Vid.sys" "Fri Apr 14 15:48:19 2023" " + "VirtualRender" "VirtualRender: Microsoft Virtual Render Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DriverStore\FileRepository\vrd.inf_amd64_346f3764318c1681\vrd.sys" "Sat Jun 5 13:04:47 2021" " + "vmbus" "Virtual Machine Bus: Microsoft Hyper-V Virtual Machine Bus Child Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vmbus.sys" "Sat Sep 17 14:42:06 2022" " + "VMBusHID" "VMBusHID: Microsoft VMBus HID Miniport" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\VMBusHID.sys" "Sat Jun 5 13:04:47 2021" " + "vmgid" "Microsoft Hyper-V Guest Infrastructure Driver: Virtual Machine Guest Infrastructure Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vmgid.sys" "Sat Jun 5 13:04:47 2021" " + "volmgr" "Volume Manager Driver: Volume Manager Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\volmgr.sys" "Wed Jul 13 15:31:03 2022" " + "volmgrx" "Dynamic Volume Manager: Extension of the volume manager driver that manages software RAID volumes (spanned, striped, mirrored, RAID-5) on dynamic disks" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\volmgrx.sys" "Thu Oct 13 13:59:12 2022" " + "volsnap" "Volume Shadow Copy driver: Volume class filter driver that takes and manages snapshots." "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\volsnap.sys" "Sat Jun 5 13:05:14 2021" " + "volume" "Volume driver: Volume driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\volume.sys" "Sat Jun 5 13:04:44 2021" " + "vpci" "Microsoft Hyper-V Virtual PCI Bus: Virtual PCI Bus" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vpci.sys" "Sat Feb 18 14:28:55 2023" " + "vsmraid" "vsmraid: VIA RAID DRIVER FOR AMD-X86-64" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vsmraid.sys" "Sat Jun 5 13:04:45 2021" " + "VSTXRAID" "VIA StorX Storage RAID Controller Windows Driver: VIA StorX RAID Controller Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vstxraid.sys" "Sat Jun 5 13:04:45 2021" " + "vwifibus" "Virtual Wireless Bus Driver: Implements bus functionality for Virtual Wireless" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vwifibus.sys" "Wed May 11 12:06:22 2022" " + "vwififlt" "Virtual WiFi Filter Driver: Virtual WiFi Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vwififlt.sys" "Sat Jun 5 13:05:00 2021" " + "vwifimp" "Virtual WiFi Miniport Service: Virtual WiFi Miniport Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\vwifimp.sys" "Wed May 11 12:06:22 2022" " + "WacomPen" "Wacom Serial Pen HID Driver: Wacom Serial Pen Tablet HID Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\wacompen.sys" "Wed May 11 12:05:29 2022" " + "wanarp" "Remote Access IP ARP Driver: Remote Access IP ARP Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\wanarp.sys" "Sat Jun 5 13:05:40 2021" " + "wanarpv6" "Remote Access IPv6 ARP Driver: Remote Access IPv6 ARP Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\DRIVERS\wanarp.sys" "Sat Jun 5 13:05:40 2021" " + "wcifs" "Windows Container Isolation: Provides a virtual filesystem view for processes running within Windows Containers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\wcifs.sys" "Thu Oct 13 13:57:53 2022" " + "WdBoot" "Microsoft Defender Antivirus Boot Driver: Microsoft Defender Antivirus Boot Driver" "(Verified) Microsoft Windows Early Launch Anti-malware Publisher" "C:\WINDOWS\system32\drivers\wd\WdBoot.sys" "Wed Jun 21 20:54:41 2023" " + "Wdf01000" "Kernel Mode Driver Frameworks service: Kernel Mode Driver Framework Runtime" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\Wdf01000.sys" "Thu Oct 13 13:58:19 2022" " + "WdFilter" "Microsoft Defender Antivirus Mini-Filter Driver: Microsoft Defender Antivirus On-Access Malware Protection Mini-Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\wd\WdFilter.sys" "Wed Jun 21 20:54:41 2023" " + "wdiwifi" "WDI Driver Framework: WDI Driver Framework Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\DRIVERS\wdiwifi.sys" "Thu Mar 16 15:24:53 2023" " + "WdmCompanionFilter" "WdmCompanionFilter: WDM Companion Filter" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\WdmCompanionFilter.sys" "Wed May 11 12:07:32 2022" " + "WdNisDrv" "Microsoft Defender Antivirus Network Inspection System Driver: Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\wd\WdNisDrv.sys" "Wed Jun 21 20:54:41 2023" " + "WFPLWFS" "Microsoft Windows Filtering Platform: Microsoft Windows Filtering Platform" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\wfplwfs.sys" "Wed May 10 20:26:20 2023" " + "WifiCx" "Wifi Network Adapter Class Extension: Windows Wifi Class Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\WifiCx.sys" "Fri Apr 14 15:48:27 2023" " + "WIMMount" "WIMMount: WIM Image mount service driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\wimmount.sys" "Fri Dec 17 21:56:09 2021" " + "WindowsTrustedRT" "Windows Trusted Execution Environment Class Extension: Windows Trusted Runtime Interface Driver" "(Verified) Microsoft Windows Hardware Abstraction Layer Publisher" "C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys" "Wed May 11 12:07:27 2022" " + "WindowsTrustedRTProxy" "Microsoft Windows Trusted Runtime Secure Service: Windows Trusted Runtime Service Proxy Driver" "(Verified) Microsoft Windows Hardware Abstraction Layer Publisher" "C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys" "Sat Jun 5 13:04:46 2021" " + "WinMad" "WinMad Service: Kernel WinMad" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\winmad.sys" "Sat Jun 5 13:04:45 2021" " + "WinNat" "Windows NAT Driver: This service provides network address translation functionality" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\winnat.sys" "Wed May 11 12:05:58 2022" " + "wintun" "wintun: Wintun Userspace Tunnel" "(Verified) Microsoft Windows Hardware Compatibility Publisher" "C:\WINDOWS\system32\DRIVERS\wintun.sys" "Fri Mar 10 20:41:27 2023" " + "WINUSB" "WinUsb Driver: Generic driver for USB devices" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\WinUSB.SYS" "Wed May 11 12:05:44 2022" " + "WinVerbs" "WinVerbs Service: Kernel WinVerbs" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\winverbs.sys" "Sat Jun 5 13:04:45 2021" " + "WmiAcpi" "Microsoft Windows Management Interface for ACPI: Windows Management Interface for ACPI" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\wmiacpi.sys" "Sat Jun 5 13:04:45 2021" " + "Wof" "Windows Overlay File System Filter Driver: Windows Overlay Filter" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\Drivers\Wof.sys" "Wed Jan 11 19:39:31 2023" " + "WpdUpFltr" "WPD Upper Class Filter Driver: WPD Upper Class Filter Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\WpdUpFltr.sys" "Wed May 11 12:12:28 2022" " + X "ws2ifsl" "Winsock IFS Driver: Winsock IFS Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\ws2ifsl.sys" "Wed May 11 12:08:17 2022" " + "WudfPf" "User Mode Driver Frameworks Platform Driver: A kernel mode driver that uses message-based interprocess communication mechanism to communicate with the driver manager and secure host process to facilitate secure companions" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\drivers\WudfPf.sys" "Thu Oct 13 13:58:28 2022" " + "WUDFRd" "Windows Driver Foundation - User-mode Driver Framework Reflector: A kernel mode driver that uses message-based interprocess communication mechanism to communicate with the driver manager and host process to facilitate UMDF drivers" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\WUDFRd.sys" "Thu Oct 13 13:58:28 2022" " + "WUDFWpdFs" "WPD File System driver: User mode driver that enables communication with removable storage devices via the WPD interface" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\WUDFRd.sys" "Thu Oct 13 13:58:28 2022" " + "xboxgip" "Xbox Game Input Protocol Driver: Xbox Game Input Protocol Driver" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\xboxgip.sys" "Wed May 11 12:05:19 2022" " + "xinputhid" "XINPUT HID Filter Driver: XINPUT filter driver for HID" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drivers\xinputhid.sys" "Fri Apr 14 15:48:12 2023" " [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers] + "Adobe Type Manager" "" "" "File not found: atmfd.dll" "" " [Codecs] [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] [HKCU\Software\Classes\Filter] [HKCU\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance] [HKCU\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance] [HKCU\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance] [HKCU\Software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance] [HKCU\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32] [HKCU\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance] [HKCU\Software\Wow6432Node\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance] [HKCU\Software\Wow6432Node\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance] [HKCU\Software\Wow6432Node\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] + "aux" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "aux1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "aux2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "aux3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "midi" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "midi1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "midi2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "midi3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "midimapper" "Microsoft MIDI Mapper" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\midimap.dll" "Sat Jun 5 13:04:54 2021" " + "mixer" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "mixer1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "mixer2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "mixer3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "msacm.imaadpcm" "IMA ADPCM CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\imaadp32.acm" "Wed May 11 12:05:59 2022" " + "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "(Verified) Microsoft Windows" "C:\Windows\System32\l3codeca.acm" "Sat Jun 5 18:17:05 2021" " + "msacm.msadpcm" "Microsoft ADPCM CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msadp32.acm" "Wed May 11 12:05:59 2022" " + "msacm.msg711" "Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msg711.acm" "Sat Jun 5 13:04:54 2021" " + "msacm.msgsm610" "Microsoft GSM 6.10 Audio CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msgsm32.acm" "Wed May 11 12:05:59 2022" " + "MSVideo8" "VfW MM Driver for WDM Video Capture Devices" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\VfWWDM32.dll" "Wed May 11 12:11:08 2022" " + "vidc.i420" "Intel Indeo(R) Video YUV Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\iyuv_32.dll" "Wed May 11 12:11:07 2022" " + "vidc.iyuv" "Intel Indeo(R) Video YUV Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\iyuv_32.dll" "Wed May 11 12:11:07 2022" " + "vidc.mrle" "Microsoft RLE Compressor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msrle32.dll" "Wed May 10 20:27:42 2023" " + "vidc.msvc" "Microsoft Video 1 Compressor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msvidc32.dll" "Wed May 10 20:27:42 2023" " + "vidc.uyvy" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msyuv.dll" "Wed May 11 12:11:07 2022" " + "vidc.yuy2" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msyuv.dll" "Wed May 11 12:11:07 2022" " + "vidc.yvu9" "Toshiba Video Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\tsbyuv.dll" "Wed May 11 12:11:07 2022" " + "vidc.yvyu" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msyuv.dll" "Wed May 11 12:11:07 2022" " + "wave" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "wave1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "wave2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "wave3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wdmaud.drv" "Sat Jun 5 13:04:54 2021" " + "wavemapper" "Microsoft Sound Mapper" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msacm32.drv" "Wed May 11 12:05:58 2022" " [HKLM\Software\Classes\Filter] [HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance] + "AC3 Parser Filter" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\System32\mpg2splt.ax" "Wed May 11 12:11:16 2022" " + "ACM Wrapper" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "AVI Decompressor" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "AVI Draw Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "AVI mux" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qcap.dll" "Wed May 11 12:11:07 2022" " + "AVI Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "AVI/WAV File Source" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "BDA MPEG2 Transport Information Filter" "Microsoft Transport Information Filter for MPEG2 based networks." "(Verified) Microsoft Windows" "C:\Windows\System32\psisrndr.ax" "Wed May 11 12:11:17 2022" " + "Closed Captions Analysis Filter" "CCA DirectShow Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\cca.dll" "Wed May 11 12:11:17 2022" " + "Color Space Converter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Default Video Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not Verified) xy-VSFilter Team" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\DirectVobSub64\vsfilter.dll" "Wed Jul 6 10:00:00 2022" " + "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not Verified) xy-VSFilter Team" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\DirectVobSub64\vsfilter.dll" "Wed Jul 6 10:00:00 2022" " + "DV Muxer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qdv.dll" "Wed May 11 12:11:08 2022" " + "DV Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qdv.dll" "Wed May 11 12:11:08 2022" " + "DV Video Decoder" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qdv.dll" "Wed May 11 12:11:08 2022" " + "DVD Navigator" "DirectShow DVD PlayBack Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qdvd.dll" "Wed May 11 12:11:08 2022" " + "Enhanced Video Renderer" "Enhanced Video Renderer DLL" "(Verified) Microsoft Windows" "C:\Windows\System32\evr.dll" "Thu Oct 13 13:59:50 2022" " + "File Source (Async.)" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "File Source (URL)" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "File stream renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "File Writer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qcap.dll" "Wed May 11 12:11:07 2022" " + "Infinite Pin Tee Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qcap.dll" "Wed May 11 12:11:07 2022" " + "Internal Text Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "LAV Audio Decoder" "LAV Audio Decoder - DirectShow Audio Decoder" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\LAVAudio.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Splitter" "LAV Splitter - DirectShow Media Splitter" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\LAVSplitter.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Splitter Source" "LAV Splitter - DirectShow Media Splitter" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\LAVSplitter.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Video Decoder" "LAV Video Decoder - DirectShow Video Decoder" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\LAVVideo.ax" "Thu Aug 25 10:00:00 2022" " + "Line 21 Decoder 2" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Microsoft AC3 Encoder" "Microsoft AC-3 Encoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msac3enc.dll" "Thu Oct 13 13:59:51 2022" " + "Microsoft DTV-DVD Audio Decoder" "Microsoft DTV-DVD Audio Decoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msmpeg2adec.dll" "Thu Oct 13 13:59:52 2022" " + "Microsoft DTV-DVD Video Decoder" "Microsoft DTV-DVD Video Decoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msmpeg2vdec.dll" "Wed May 10 20:27:57 2023" " + "Microsoft MPEG-2 Audio Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msmpeg2enc.dll" "Wed May 10 20:27:57 2023" " + "Microsoft MPEG-2 Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msmpeg2enc.dll" "Wed May 10 20:27:57 2023" " + "Microsoft MPEG-2 Video Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\System32\msmpeg2enc.dll" "Wed May 10 20:27:57 2023" " + "MIDI Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "MJPEG Decompressor" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "MPEG Audio Codec" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "MPEG Video Codec" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "MPEG-2 Demultiplexer" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\System32\mpg2splt.ax" "Wed May 11 12:11:16 2022" " + "MPEG-2 Sections and Tables" "Microsoft MPEG-2 Section and Table Acquisition Module" "(Verified) Microsoft Windows" "C:\Windows\System32\Mpeg2Data.ax" "Wed May 11 12:11:17 2022" " + "MPEG-2 Splitter" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\System32\mpg2splt.ax" "Wed May 11 12:11:16 2022" " + "Mpeg-2 Video Stream Analysis" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "MPEG-I Stream Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Multi-file Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Null Renderer" "DirectShow editing." "(Verified) Microsoft Windows" "C:\Windows\System32\qedit.dll" "Wed May 11 12:11:26 2022" " + "SAMI (CC) Reader" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Sample Grabber" "DirectShow editing." "(Verified) Microsoft Windows" "C:\Windows\System32\qedit.dll" "Wed May 11 12:11:26 2022" " + "SBE2 Sink" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "SBE2FileScan" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "SBE2MediaTypeProfile" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "Smart Tee Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\qcap.dll" "Wed May 11 12:11:07 2022" " + "StreamBufferSink" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "StreamBufferSource" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\System32\sbe.dll" "Wed May 11 12:11:17 2022" " + "VBI Codec" "Microsoft VBI Codec" "(Verified) Microsoft Windows" "C:\Windows\System32\VBICodec.ax" "Wed May 11 12:11:17 2022" " + "VBI Surface Allocator" "VBI Surface Allocator Filter" "(Verified) Microsoft Windows" "C:\Windows\System32\vbisurf.ax" "Wed May 11 12:11:16 2022" " + "VGA 16 color ditherer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Video Mixing Renderer 9" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Video Port Manager" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "Video Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "VPS Decoder" "Microsoft Teletext Server" "(Verified) Microsoft Windows" "C:\Windows\System32\WSTPager.ax" "Wed May 11 12:11:17 2022" " + "Wave Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\System32\quartz.dll" "Sat Jun 5 13:06:11 2021" " + "WM ASF Reader" "DirectShow ASF Support" "(Verified) Microsoft Windows" "C:\Windows\System32\qasf.dll" "Wed May 11 12:10:38 2022" " + "WM ASF Writer" "DirectShow ASF Support" "(Verified) Microsoft Windows" "C:\Windows\System32\qasf.dll" "Wed May 11 12:10:38 2022" " + "WST Pager" "Microsoft Teletext Server" "(Verified) Microsoft Windows" "C:\Windows\System32\WSTPager.ax" "Wed May 11 12:11:17 2022" " [HKLM\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance] [HKLM\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance] + "{41945702-8302-44A6-9445-AC98E8AFA086}" "MS RAW Image Decoder DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MSRAWImage.dll" "Wed May 11 12:12:24 2022" " + "{5FDD51E2-A9D0-44CE-8C8D-162BA0C591A0}" "Microsoft Camera Codec Pack" "(Verified) Microsoft Windows" "C:\Windows\System32\WindowsCodecsRaw.dll" "Wed Nov 9 15:34:51 2022" " [HKLM\Software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance] [HKLM\Software\Wow6432Node\Classes\Filter] [HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32] + "aux" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "aux1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "aux2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "aux3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "midi" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "midi1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "midi2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "midi3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "midimapper" "Microsoft MIDI Mapper" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\midimap.dll" "Sat Jun 5 13:05:43 2021" " + "mixer" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "mixer1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "mixer2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "mixer3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "msacm.imaadpcm" "IMA ADPCM CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\imaadp32.acm" "Wed May 11 12:09:17 2022" " + "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\l3codeca.acm" "Sat Jun 5 18:17:04 2021" " + "msacm.msadpcm" "Microsoft ADPCM CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msadp32.acm" "Wed May 11 12:09:18 2022" " + "msacm.msg711" "Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msg711.acm" "Sat Jun 5 13:05:43 2021" " + "msacm.msgsm610" "Microsoft GSM 6.10 Audio CODEC for MSACM" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msgsm32.acm" "Wed May 11 12:09:18 2022" " + "vidc.cvid" "Cinepak® Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\iccvid.dll" "Sat Jun 5 13:06:24 2021" " + "vidc.i420" "Intel Indeo(R) Video YUV Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\iyuv_32.dll" "Wed May 11 12:12:01 2022" " + "vidc.iyuv" "Intel Indeo(R) Video YUV Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\iyuv_32.dll" "Wed May 11 12:12:01 2022" " + "vidc.mrle" "Microsoft RLE Compressor" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msrle32.dll" "Wed May 10 20:27:53 2023" " + "vidc.msvc" "Microsoft Video 1 Compressor" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msvidc32.dll" "Wed May 10 20:27:53 2023" " + "vidc.uyvy" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msyuv.dll" "Wed May 11 12:12:01 2022" " + "vidc.yuy2" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msyuv.dll" "Wed May 11 12:12:01 2022" " + "vidc.yvu9" "Toshiba Video Codec" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\tsbyuv.dll" "Wed May 11 12:12:01 2022" " + "vidc.yvyu" "Microsoft UYVY Video Decompressor" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msyuv.dll" "Wed May 11 12:12:01 2022" " + "wave" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "wave1" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "wave2" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "wave3" "Winmm audio system driver" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\wdmaud.drv" "Sat Jun 5 13:05:45 2021" " + "wavemapper" "Microsoft Sound Mapper" "(Verified) Microsoft Windows" "C:\WINDOWS\SysWOW64\msacm32.drv" "Wed May 11 12:09:17 2022" " [HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance] + "AC3 Parser Filter" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\mpg2splt.ax" "Wed May 11 12:12:05 2022" " + "ACM Wrapper" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "AVI Decompressor" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "AVI Draw Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "AVI mux" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qcap.dll" "Wed May 11 12:12:01 2022" " + "AVI Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "AVI/WAV File Source" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "BDA MPEG2 Transport Information Filter" "Microsoft Transport Information Filter for MPEG2 based networks." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\psisrndr.ax" "Wed May 11 12:12:05 2022" " + "Closed Captions Analysis Filter" "CCA DirectShow Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\cca.dll" "Wed May 11 12:12:05 2022" " + "Color Space Converter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Default Video Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "DirectVobSub" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not Verified) xy-VSFilter Team" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\DirectVobSub\vsfilter.dll" "Wed Jul 6 10:00:00 2022" " + "DirectVobSub (auto-loading version)" "VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth" "(Not Verified) xy-VSFilter Team" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\DirectVobSub\vsfilter.dll" "Wed Jul 6 10:00:00 2022" " + "DV Muxer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdv.dll" "Wed May 11 12:12:01 2022" " + "DV Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdv.dll" "Wed May 11 12:12:01 2022" " + "DV Video Decoder" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdv.dll" "Wed May 11 12:12:01 2022" " + "DVD Navigator" "DirectShow DVD PlayBack Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdvd.dll" "Wed May 11 12:12:02 2022" " + "Enhanced Video Renderer" "Enhanced Video Renderer DLL" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\evr.dll" "Thu Oct 13 13:59:53 2022" " + "File Source (Async.)" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "File Source (URL)" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "File stream renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "File Writer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qcap.dll" "Wed May 11 12:12:01 2022" " + "Infinite Pin Tee Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qcap.dll" "Wed May 11 12:12:01 2022" " + "Internal Text Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "LAV Audio Decoder" "LAV Audio Decoder - DirectShow Audio Decoder" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVAudio.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Splitter" "LAV Splitter - DirectShow Media Splitter" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVSplitter.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Splitter Source" "LAV Splitter - DirectShow Media Splitter" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVSplitter.ax" "Thu Aug 25 10:00:00 2022" " + "LAV Video Decoder" "LAV Video Decoder - DirectShow Video Decoder" "(Not Verified) 1f0.de - Hendrik Leppkes" "C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\LAVVideo.ax" "Thu Aug 25 10:00:00 2022" " + "Line 21 Decoder" "DirectShow DVD PlayBack Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdvd.dll" "Wed May 11 12:12:02 2022" " + "Line 21 Decoder 2" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Microsoft AC3 Encoder" "Microsoft AC-3 Encoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msac3enc.dll" "Thu Oct 13 13:59:53 2022" " + "Microsoft DTV-DVD Audio Decoder" "Microsoft DTV-DVD Audio Decoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msmpeg2adec.dll" "Thu Oct 13 13:59:54 2022" " + "Microsoft DTV-DVD Video Decoder" "Microsoft DTV-DVD Video Decoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msmpeg2vdec.dll" "Wed May 10 20:28:13 2023" " + "Microsoft MPEG-2 Audio Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msmpeg2enc.dll" "Thu Oct 13 13:59:54 2022" " + "Microsoft MPEG-2 Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msmpeg2enc.dll" "Thu Oct 13 13:59:54 2022" " + "Microsoft MPEG-2 Video Encoder" "Microsoft MPEG-2 Encoder" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\msmpeg2enc.dll" "Thu Oct 13 13:59:54 2022" " + "MIDI Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "MJPEG Decompressor" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "MPEG Audio Codec" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "MPEG Video Codec" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "MPEG-2 Demultiplexer" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\mpg2splt.ax" "Wed May 11 12:12:05 2022" " + "MPEG-2 Sections and Tables" "Microsoft MPEG-2 Section and Table Acquisition Module" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\Mpeg2Data.ax" "Wed May 11 12:12:05 2022" " + "MPEG-2 Splitter" "DirectShow MPEG-2 Splitter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\mpg2splt.ax" "Wed May 11 12:12:05 2022" " + "Mpeg-2 Video Stream Analysis" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "MPEG-I Stream Splitter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Multi-file Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Null Renderer" "DirectShow editing." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qedit.dll" "Wed May 11 12:12:06 2022" " + "Overlay Mixer" "DirectShow DVD PlayBack Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdvd.dll" "Wed May 11 12:12:02 2022" " + "Overlay Mixer2" "DirectShow DVD PlayBack Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qdvd.dll" "Wed May 11 12:12:02 2022" " + "SAMI (CC) Reader" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Sample Grabber" "DirectShow editing." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qedit.dll" "Wed May 11 12:12:06 2022" " + "SBE2 Sink" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "SBE2FileScan" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "SBE2MediaTypeProfile" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "Smart Tee Filter" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qcap.dll" "Wed May 11 12:12:01 2022" " + "StreamBufferSink" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "StreamBufferSource" "DirectShow Stream Buffer Filter." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\sbe.dll" "Sat Jun 5 13:06:24 2021" " + "VBI Codec" "Microsoft VBI Codec" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\VBICodec.ax" "Wed May 11 12:12:05 2022" " + "VBI Surface Allocator" "VBI Surface Allocator Filter" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\vbisurf.ax" "Fri Dec 17 21:58:31 2021" " + "VGA 16 color ditherer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Video Mixing Renderer 9" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Video Port Manager" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "Video Renderer" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "VPS Decoder" "Microsoft Teletext Server" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\WSTPager.ax" "Wed May 11 12:12:05 2022" " + "Wave Parser" "DirectShow Runtime." "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\quartz.dll" "Sat Jun 5 13:06:24 2021" " + "WM ASF Reader" "DirectShow ASF Support" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qasf.dll" "Fri Dec 17 21:58:24 2021" " + "WM ASF Writer" "DirectShow ASF Support" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\qasf.dll" "Fri Dec 17 21:58:24 2021" " + "WST Pager" "Microsoft Teletext Server" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\WSTPager.ax" "Wed May 11 12:12:05 2022" " [HKLM\Software\Wow6432Node\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance] [HKLM\Software\Wow6432Node\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance] + "{41945702-8302-44A6-9445-AC98E8AFA086}" "MS RAW Image Decoder DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\MSRAWImage.dll" "Wed May 11 12:12:32 2022" " + "{5FDD51E2-A9D0-44CE-8C8D-162BA0C591A0}" "Microsoft Camera Codec Pack" "(Verified) Microsoft Windows" "C:\Windows\SysWOW64\WindowsCodecsRaw.dll" "Wed Nov 9 15:34:52 2022" " [HKLM\Software\Wow6432Node\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance] [Boot Execute] [HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute] + "autocheck autochk *" "Auto Check Utility" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\autochk.exe" "Wed May 11 12:07:51 2022" " [HKLM\System\CurrentControlSet\Control\Session Manager\SetupExecute] [HKLM\System\CurrentControlSet\Control\Session Manager\Execute] [HKLM\System\CurrentControlSet\Control\Session Manager\S0InitialCommand] [Image Hijacks] [HKCU\Software\Microsoft\Command Processor\Autorun] [HKCU\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)] [HKCU\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)] [HKCU\Software\Classes\.exe] [HKCU\Software\Classes\.cmd] [HKLM\Software\Microsoft\Command Processor\Autorun] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options] [HKLM\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)] [HKLM\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)] + "C:\Program Files\Internet Explorer\iexplore.exe" "Internet Explorer" "(Verified) Microsoft Corporation" "C:\Program Files\Internet Explorer\iexplore.exe" "Fri Dec 17 22:04:10 2021" " [HKLM\Software\Classes\.exe] [HKLM\Software\Classes\.cmd] [HKLM\Software\Wow6432Node\Microsoft\Command Processor\Autorun] [HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options] [AppInit] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls] [HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls] [Known DLLs] [HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls] + "*kernel32" "Windows NT BASE API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\kernel32.dll" "Wed May 10 20:26:24 2023" " + "*kernel32" "Windows NT BASE API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\kernel32.dll" "Wed May 10 20:27:14 2023" " + "_wow64cpu" "AMD64 Wow64 CPU " "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wow64cpu.dll" "Sat Jun 5 13:05:27 2021" " + "_wow64cpu" "" "" "File not found: C:\WINDOWS\Syswow64\wow64cpu.dll" "" " + "_wowarmhw" "" "" "File not found: C:\WINDOWS\system32\wowarmhw.dll" "" " + "_wowarmhw" "" "" "File not found: C:\WINDOWS\Syswow64\wowarmhw.dll" "" " + "_xtajit" "" "" "File not found: C:\WINDOWS\system32\xtajit.dll" "" " + "_xtajit" "" "" "File not found: C:\WINDOWS\Syswow64\xtajit.dll" "" " + "advapi32" "Advanced Windows 32 Base API" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\advapi32.dll" "Wed May 10 20:26:01 2023" " + "advapi32" "Advanced Windows 32 Base API" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\advapi32.dll" "Wed May 10 20:27:13 2023" " + "clbcatq" "COM+ Configuration Catalog" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\clbcatq.dll" "Sat Feb 18 14:29:37 2023" " + "clbcatq" "COM+ Configuration Catalog" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\clbcatq.dll" "Sat Feb 18 14:30:22 2023" " + "combase" "Microsoft COM for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\combase.dll" "Thu Mar 16 15:26:56 2023" " + "combase" "Microsoft COM for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\combase.dll" "Thu Mar 16 15:28:11 2023" " + "COMDLG32" "Common Dialogues DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\COMDLG32.dll" "Wed Jul 13 15:32:27 2022" " + "COMDLG32" "Common Dialogues DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\COMDLG32.dll" "Wed Jul 13 15:32:45 2022" " + "coml2" "Microsoft COM for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\coml2.dll" "Sat Jun 5 13:05:09 2021" " + "coml2" "Microsoft COM for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\coml2.dll" "Sat Jun 5 13:05:51 2021" " + "DifxApi" "Driver Install Frameworks for API library module" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\difxapi.dll" "Wed May 11 12:08:56 2022" " + "DifxApi" "Driver Install Frameworks for API library module" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\difxapi.dll" "Wed May 11 12:10:11 2022" " + "gdi32" "GDI Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gdi32.dll" "Wed May 10 20:26:11 2023" " + "gdi32" "GDI Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\gdi32.dll" "Wed May 10 20:27:21 2023" " + "gdiplus" "Microsoft GDI+" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gdiplus.dll" "Wed Nov 9 15:33:45 2022" " + "gdiplus" "Microsoft GDI+" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\gdiplus.dll" "Wed Nov 9 15:34:20 2022" " + "IMAGEHLP" "Windows NT Image Helper" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\IMAGEHLP.dll" "Sat Jun 5 13:05:25 2021" " + "IMAGEHLP" "Windows NT Image Helper" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\IMAGEHLP.dll" "Sat Jun 5 13:05:25 2021" " + "IMM32" "Multi-User Windows IMM32 API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\IMM32.dll" "Thu Mar 16 15:27:22 2023" " + "IMM32" "Multi-User Windows IMM32 API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\IMM32.dll" "Thu Mar 16 15:28:12 2023" " + "MSCTF" "MSCTF Server DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MSCTF.dll" "Thu Mar 16 15:25:59 2023" " + "MSCTF" "MSCTF Server DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\MSCTF.dll" "Thu Mar 16 15:27:52 2023" " + "MSVCRT" "Windows NT CRT DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\MSVCRT.dll" "Sat Jun 5 13:05:25 2021" " + "MSVCRT" "Windows NT CRT DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\MSVCRT.dll" "Sat Jun 5 13:05:45 2021" " + "NORMALIZ" "Unicode Normalization DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\NORMALIZ.dll" "Sat Jun 5 13:05:27 2021" " + "NORMALIZ" "Unicode Normalization DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\NORMALIZ.dll" "Sat Jun 5 13:05:53 2021" " + "NSI" "NSI User-mode interface DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\NSI.dll" "Sat Jun 5 13:05:25 2021" " + "NSI" "NSI User-mode interface DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\NSI.dll" "Sat Jun 5 13:05:25 2021" " + "ole32" "Microsoft OLE for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\ole32.dll" "Wed May 10 20:26:32 2023" " + "ole32" "Microsoft OLE for Windows" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\ole32.dll" "Wed May 10 20:27:23 2023" " + "OLEAUT32" "OLEAUT32.DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\OLEAUT32.dll" "Sat Jun 5 13:05:25 2021" " + "OLEAUT32" "OLEAUT32.DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\OLEAUT32.dll" "Sat Jun 5 13:05:53 2021" " + "PSAPI" "Process Status Helper" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\PSAPI.DLL" "Sat Jun 5 13:05:23 2021" " + "PSAPI" "Process Status Helper" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\PSAPI.DLL" "Sat Jun 5 13:05:53 2021" " + "rpcrt4" "Remote Procedure Call Runtime" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rpcrt4.dll" "Wed May 10 20:26:39 2023" " + "rpcrt4" "Remote Procedure Call Runtime" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\rpcrt4.dll" "Wed May 10 20:27:12 2023" " + "sechost" "Host for SCM/SDDL/LSA Lookup APIs" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\sechost.dll" "Wed May 10 20:26:39 2023" " + "sechost" "Host for SCM/SDDL/LSA Lookup APIs" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\sechost.dll" "Wed May 10 20:27:12 2023" " + "Setupapi" "Windows Setup API" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\Setupapi.dll" "Wed Feb 9 16:19:44 2022" " + "Setupapi" "Windows Setup API" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\Setupapi.dll" "Wed Feb 9 16:19:54 2022" " + "SHCORE" "SHCORE" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SHCORE.dll" "Wed Apr 13 21:57:15 2022" " + "SHCORE" "SHCORE" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\SHCORE.dll" "Fri Jun 17 18:30:18 2022" " + "SHELL32" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SHELL32.dll" "Fri Apr 14 15:49:54 2023" " + "SHELL32" "Windows Shell Common Dll" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\SHELL32.dll" "Fri Apr 14 15:50:33 2023" " + "SHLWAPI" "Shell Light-weight Utility Library" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SHLWAPI.dll" "Sat Jun 5 13:05:33 2021" " + "SHLWAPI" "Shell Light-weight Utility Library" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\SHLWAPI.dll" "Sat Jun 5 13:06:00 2021" " + "user32" "Multi-User Windows USER API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\user32.dll" "Fri Apr 14 15:49:03 2023" " + "user32" "Multi-User Windows USER API Client DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\user32.dll" "Wed May 10 20:27:22 2023" " + "WLDAP32" "Win32 LDAP API DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WLDAP32.dll" "Wed Jan 11 19:39:33 2023" " + "WLDAP32" "Win32 LDAP API DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\WLDAP32.dll" "Wed Jan 11 19:39:50 2023" " + "wow64" "Win32 Emulation on NT64" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wow64.dll" "Fri Apr 14 15:49:49 2023" " + "wow64" "" "" "File not found: C:\WINDOWS\Syswow64\wow64.dll" "" " + "wow64base" "" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wow64base.dll" "Wed May 11 12:08:18 2022" " + "wow64base" "" "" "File not found: C:\WINDOWS\Syswow64\wow64base.dll" "" " + "wow64con" "" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wow64con.dll" "Fri Dec 17 21:56:29 2021" " + "wow64con" "" "" "File not found: C:\WINDOWS\Syswow64\wow64con.dll" "" " + "wow64win" "Wow64 Console and Win32 API Logging" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wow64win.dll" "Wed Jan 11 19:39:39 2023" " + "wow64win" "" "" "File not found: C:\WINDOWS\Syswow64\wow64win.dll" "" " + "WS2_32" "Windows Socket 2.0 32-Bit DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WS2_32.dll" "Sat Jun 5 13:05:25 2021" " + "WS2_32" "Windows Socket 2.0 32-Bit DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\Syswow64\WS2_32.dll" "Sat Jun 5 13:05:45 2021" " + "xtajit64" "" "" "File not found: C:\WINDOWS\system32\xtajit64.dll" "" " + "xtajit64" "" "" "File not found: C:\WINDOWS\Syswow64\xtajit64.dll" "" " [WinLogon] [HKCU\SOFTWARE\Policies\Microsoft\Windows\Control Panel\Desktop\Scrnsave.exe] [HKCU\Control Panel\Desktop\Scrnsave.exe] [HKLM\SYSTEM\Setup\CmdLine] [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman] [HKLM\System\CurrentControlSet\Control\BootVerificationProgram\ImagePath] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers] + "%windir%\system32\rdpcredentialprovider.dll" ""RdpCredentialProvider.DYNLINK"" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rdpcredentialprovider.dll" "Thu Oct 13 13:59:21 2022" " + "Automatic Redeployment Credential Provider" "Autopilot Reset Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mgmtrefreshcredprov.dll" "Thu Oct 13 13:59:25 2022" " + "CCertProvider" "Cert Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\certCredProvider.dll" "Sat Jun 5 13:05:27 2021" " + "Cloud Experience Credential Provider" "Cloud Experience Credential Provider" "(Verified) Microsoft Windows" "C:\Windows\System32\cxcredprov.dll" "Thu Mar 16 15:26:17 2023" " + "CngCredUICredentialProvider" "Microsoft CNG CredUI Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\cngcredui.dll" "Sat Jun 5 13:05:40 2021" " + "FaceCredentialProvider" "Face Credential Provider" "(Verified) Microsoft Windows" "C:\Windows\System32\FaceCredentialProvider.dll" "Fri Jun 17 18:30:26 2022" " + "FIDO Credential Provider" "FIDO Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fidocredprov.dll" "Fri Apr 14 15:48:54 2023" " + "GenericProvider" "Credential Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovs.dll" "Thu Oct 13 13:58:25 2022" " + "NGC Credential Provider" "Microsoft Passport Credential Provider" "(Verified) Microsoft Windows" "C:\Windows\System32\ngccredprov.dll" "Thu Oct 13 13:57:38 2022" " + "NPProvider" "Credential Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovs.dll" "Thu Oct 13 13:58:25 2022" " + "PasswordProvider" "Credential Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovs.dll" "Thu Oct 13 13:58:25 2022" " + "PicturePasswordLogonProvider" "Credentials Providers Legacy" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovslegacy.dll" "Thu Mar 16 15:27:26 2023" " + "PINLogonProvider" "Credentials Providers Legacy" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovslegacy.dll" "Thu Mar 16 15:27:26 2023" " + "Second Authentication Factor Credential Provider" "Microsoft Companion Authenticator Credentials Provider" "(Verified) Microsoft Windows" "C:\Windows\System32\devicengccredprov.dll" "Fri Dec 17 21:56:32 2021" " + "Smartcard Credential Provider" "Windows Smartcard Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SmartcardCredentialProvider.dll" "Sat Jun 5 13:05:34 2021" " + "Smartcard Pin Provider" "Windows Smartcard Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SmartcardCredentialProvider.dll" "Sat Jun 5 13:05:34 2021" " + "Smartcard Reader Selection Provider" "Windows Smartcard Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SmartcardCredentialProvider.dll" "Sat Jun 5 13:05:34 2021" " + "Smartcard WinRT Provider" "Windows Smartcard Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\SmartcardCredentialProvider.dll" "Sat Jun 5 13:05:34 2021" " + "TrustedSignal Credential Provider" "Trusted Signal Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\TrustedSignalCredProv.dll" "Wed May 11 12:08:21 2022" " + "WinBio Credential Provider" "WinBio Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\BioCredProv.dll" "Fri Dec 17 21:55:43 2021" " + "WLIDCredentialProvider" "Microsoft® Account Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wlidcredprov.dll" "Sat Jun 5 13:05:31 2021" " [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters] + "GenericFilter" "Credential Providers" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credprovs.dll" "Thu Oct 13 13:58:25 2022" " [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\PLAP Providers] + "CRasProvider" "RAS PLAP Credential Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\rasplap.dll" "Sat Jun 5 13:05:40 2021" " [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GpExtensions] + "@wlgpclnt.dll,-100" "802.11 Group Policy Client" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wlgpclnt.dll" "Wed May 11 12:06:23 2022" " + "Central Access" "Windows Audit Settings CSE" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\auditcse.dll" "Wed May 11 12:09:13 2022" " + "Folder Redirection" "Folder Redirection Group Policy Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\fdeploy.dll" "Wed May 11 12:07:10 2022" " + "Microsoft Disk Quota" "Windows Shell Disk Quota Support DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\dskquota.dll" "Sat Jun 5 13:06:05 2021" " + "QoS Packet Scheduler" "GPTExt" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gptext.dll" "Wed May 11 12:08:27 2022" " + "Remote Desktop USB Redirection" "Remote Desktop USB Redirection GP Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll" "Sat Jun 5 13:04:57 2021" " + "@C:\Windows\System32\iedkcs32.dll,-3051" "IEAK branding" "(Verified) Microsoft Windows" "C:\Windows\System32\iedkcs32.dll" "Wed May 11 12:10:44 2022" " + "{4D2F9B6F-1E52-4711-A382-6A8B1A003DE6}" "RemoteApp and Desktop Connection Component" "(Verified) Microsoft Windows" "C:\Windows\System32\tsworkspace.dll" "Thu Oct 13 13:57:55 2022" " + "Work Folders" "Microsoft (C) Work Folders Group Policy Client Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\WorkFoldersGPExt.dll" "Sat Jun 5 13:06:16 2021" " + "MDM Policy" "Enroll Engine DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dmenrollengine.dll" "Fri Apr 14 15:49:51 2023" " + "Windows Search Group Policy Extension" "Indexing Options" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\srchadmin.dll" "Sat Jun 5 13:05:40 2021" " + "@C:\Windows\System32\iedkcs32.dll,-3051" "IEAK branding" "(Verified) Microsoft Windows" "C:\Windows\System32\iedkcs32.dll" "Wed May 11 12:10:44 2022" " + "Security" "Windows Security Configuration Editor Client Engine" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\scecli.dll" "Wed May 10 20:27:12 2023" " + "Start Layout Group Policy" "Start Tile Data InProc Server" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\StartTileData.dll" "Fri Apr 14 15:48:29 2023" " + "Deployed Printer Connections" "Group Policy Printer Extension" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gpprnext.dll" "Wed May 11 12:06:14 2022" " + "@dot3gpclnt.dll,-100" "802.3 Group Policy Client" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\dot3gpclnt.dll" "Wed May 11 12:06:21 2022" " + "Windows To Go Startup Options" "Windows To Go Launcher" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pwlauncher.dll" "Wed May 11 12:11:03 2022" " + "Windows To Go Hibernate Options" "Windows To Go Launcher" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pwlauncher.dll" "Wed May 11 12:11:03 2022" " + "TCPIP" "GPTExt" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gptext.dll" "Wed May 11 12:08:27 2022" " + "@C:\Windows\System32\iedkcs32.dll,-3051" "IEAK branding" "(Verified) Microsoft Windows" "C:\Windows\System32\iedkcs32.dll" "Wed May 11 12:10:44 2022" " + "Delivery Optimization GP extension" "Delivery Optimisation Management" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\domgmt.dll" "Sat Feb 18 14:29:15 2023" " + "Internet Protocol Security Policies" "Policy Storage dll" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\polstore.dll" "Wed May 11 12:08:25 2022" " + "Audit" "Windows Audit Settings CSE" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\auditcse.dll" "Wed May 11 12:09:13 2022" " + "Policy-based QoS" "GPTExt" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gptext.dll" "Wed May 11 12:08:27 2022" " + "Connectivity Platform" "GPTExt" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\gptext.dll" "Wed May 11 12:08:27 2022" " [Winsock Providers] [HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries] + "AF_UNIX" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "Hyper-V RAW" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD L2CAP [Bluetooth]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD RfComm [Bluetooth]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [RAW/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [RAW/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [TCP/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [TCP/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [UDP/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "MSAFD Tcpip [UDP/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "RSVP TCP Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "RSVP TCPv6 Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "RSVP UDP Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " + "RSVP UDPv6 Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " [HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries] + "@%SystemRoot%\system32\nlasvc.dll,-1000" "NLA Namespace Service Provider DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\nlansp_c.dll" "Wed May 11 12:10:11 2022" " + "Bluetooth Namespace" "Windows Sockets Helper DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wshbth.dll" "Fri Dec 17 21:57:36 2021" " + "E-mail Naming Shim Provider" "E-mail Naming Shim Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\napinsp.dll" "Sat Jun 5 13:05:48 2021" " + "NTDS" "LDAP RnR Provider DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\winrnr.dll" "Sat Jun 5 13:05:55 2021" " + "PNRP Cloud Namespace Provider" "PNRP Name Space Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpnsp.dll" "Sat Jun 5 13:06:26 2021" " + "PNRP Name Namespace Provider" "PNRP Name Space Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpnsp.dll" "Sat Jun 5 13:06:26 2021" " + "Tcpip" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\mswsock.dll" "Sat Jun 5 13:05:53 2021" " [HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64] + "AF_UNIX" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "Hyper-V RAW" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD L2CAP [Bluetooth]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD RfComm [Bluetooth]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [RAW/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [RAW/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [TCP/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [TCP/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [UDP/IP]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "MSAFD Tcpip [UDP/IPv6]" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "RSVP TCP Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "RSVP TCPv6 Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "RSVP UDP Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " + "RSVP UDPv6 Service Provider" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " [HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64] + "@%SystemRoot%\system32\nlasvc.dll,-1000" "NLA Namespace Service Provider DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\nlansp_c.dll" "Wed May 11 12:08:52 2022" " + "Bluetooth Namespace" "Windows Sockets Helper DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\wshbth.dll" "Wed May 11 12:07:25 2022" " + "E-mail Naming Shim Provider" "E-mail Naming Shim Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\napinsp.dll" "Sat Jun 5 13:05:27 2021" " + "NTDS" "LDAP RnR Provider DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\winrnr.dll" "Sat Jun 5 13:05:29 2021" " + "PNRP Cloud Namespace Provider" "PNRP Name Space Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpnsp.dll" "Sat Jun 5 13:06:16 2021" " + "PNRP Name Namespace Provider" "PNRP Name Space Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\pnrpnsp.dll" "Sat Jun 5 13:06:16 2021" " + "Tcpip" "Microsoft Windows Sockets 2.0 Service Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\mswsock.dll" "Sat Jun 5 13:05:23 2021" " [Print Monitors] [HKLM\System\CurrentControlSet\Control\Print\Monitors] + "Appmon" "App Printer" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\AppMon.dll" "Wed May 11 12:11:31 2022" " + "Dell C1765n FAX Language Monitor" "" "(Verified) Microsoft Windows Hardware Compatibility Publisher" "C:\WINDOWS\system32\dltfm1zLM.DLL" "Thu Feb 7 17:54:48 2013" " + "Local Port" "Local Spooler DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\localspl.dll" "Wed May 10 20:26:00 2023" " + "Microsoft Shared Fax Monitor" "Microsoft Fax Print Monitor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\FXSMON.DLL" "Sat Feb 18 14:32:52 2023" " + "Standard TCP/IP Port" "Standard TCP/IP Port Monitor DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\tcpmon.dll" "Wed Nov 9 15:33:51 2022" " + "USB Monitor" "Standard Dynamic Printing Port Monitor DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\usbmon.dll" "Wed May 10 20:26:02 2023" " + "WSD Port" "Adaptive Port Monitor" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\APMon.dll" "Wed May 10 20:27:11 2023" " [HKLM\System\CurrentControlSet\Control\Print\Providers] + "HTTP Print Services" "Internet Print Provider DLL" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\inetpp.dll" "Wed Jan 11 19:40:00 2023" " + "LanMan Print Services" "Client Side Rendering Print Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\win32spl.dll" "Wed May 10 20:26:01 2023" " [LSA Providers] [HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders] + "credssp.dll" "Credential Delegation Security Package" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\credssp.dll" "Fri Jun 17 18:30:02 2022" " [HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages] + "msv1_0" "Microsoft Authentication Package v1.0" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\msv1_0.dll" "Wed May 10 20:26:34 2023" " [HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages] + "scecli" "Windows Security Configuration Editor Client Engine" "(Verified) Microsoft Windows" "C:\WINDOWS\system32\scecli.dll" "Wed May 10 20:27:12 2023" " [HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages] [HKLM\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig\Security Packages] [Network Providers] [HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order] + "LanmanWorkstation" "Microsoft Windows Network" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\ntlanman.dll" "Sat Feb 18 14:29:59 2023" " + "P9NP" "Plan 9 Network Provider" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\p9np.dll" "Thu Dec 15 17:26:41 2022" " + "RDPNP" "Microsoft Terminal Services" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\drprov.dll" "Sat Jun 5 13:06:14 2021" " + "webclient" "Web Client Network" "(Verified) Microsoft Windows" "C:\WINDOWS\System32\davclnt.dll" "Sat Jun 5 13:06:17 2021" " [WMI] [WMI Database Entries] [Office] [HKCU\Software\Microsoft\Office\Outlook\Addins] [HKCU\Software\Microsoft\Office\Excel\Addins] [HKCU\Software\Microsoft\Office\PowerPoint\Addins] [HKCU\Software\Microsoft\Office\Word\Addins] [HKCU\Software\Microsoft\Office\Access\Addins] [HKCU\Software\Microsoft\Office\OneNote\Addins] [HKCU\SOFTWARE\Microsoft\Office test\Special\Perf\(Default)] [HKCU\Software\Wow6432Node\Microsoft\Office\Outlook\Addins] [HKCU\Software\Wow6432Node\Microsoft\Office\Excel\Addins] [HKCU\Software\Wow6432Node\Microsoft\Office\PowerPoint\Addins] [HKCU\Software\Wow6432Node\Microsoft\Office\Word\Addins] [HKCU\Software\Wow6432Node\Microsoft\Office\Access\Addins] [HKCU\Software\Wow6432Node\Microsoft\Office\OneNote\Addins] [HKCU\SOFTWARE\Wow6432Node\Microsoft\Office test\Special\Perf\(Default)] [HKLM\Software\Microsoft\Office\Outlook\Addins] + "Outlook Change Notifier" "OutlookChangeNotifier" "(Verified) Apple Inc." "C:\Program Files\Common Files\Apple\Mobile Device Support\OutlookChangeNotifierAddIn.dll" "Sat Oct 8 03:01:30 2022" " [HKLM\Software\Microsoft\Office\Excel\Addins] [HKLM\Software\Microsoft\Office\PowerPoint\Addins] [HKLM\Software\Microsoft\Office\Word\Addins] [HKLM\Software\Microsoft\Office\Access\Addins] [HKLM\Software\Microsoft\Office\OneNote\Addins] [HKLM\SOFTWARE\Microsoft\Office test\Special\Perf\(Default)] [HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins] + "Microsoft Office Groove Proxy for Outlook Add-in" "GrooveTransceiver Module" "(Verified) Microsoft Corporation" "C:\Program Files (x86)\Microsoft Office\Office12\GrooveTransceiver.dll" "Thu Feb 26 17:37:06 2009" " + "Microsoft Outlook Mobile Service" "Microsoft Outlook Mobile Service" "(Verified) Microsoft Corporation" "C:\PROGRA~2\MICROS~2\Office12\OMSMAIN.DLL" "Tue Nov 18 15:00:10 2014" " + "Microsoft VBA for Outlook Addin" "Outlook VBA Integration Add-In" "(Verified) Microsoft Corporation" "C:\PROGRA~2\MICROS~2\Office12\ADDINS\OUTLVBA.DLL" "Tue Nov 18 14:53:52 2014" " + "OneNote Notes about Outlook Items" "Microsoft Office OneNote Outlook Add-in" "(Verified) Microsoft Corporation" "C:\PROGRA~2\MICROS~2\Office12\ONBttnOL.dll" "Wed Aug 31 06:31:12 2011" " [HKLM\Software\Wow6432Node\Microsoft\Office\Excel\Addins] [HKLM\Software\Wow6432Node\Microsoft\Office\PowerPoint\Addins] [HKLM\Software\Wow6432Node\Microsoft\Office\Word\Addins] [HKLM\Software\Wow6432Node\Microsoft\Office\Access\Addins] [HKLM\Software\Wow6432Node\Microsoft\Office\OneNote\Addins] [HKLM\SOFTWARE\Wow6432Node\Microsoft\Office test\Special\Perf\(Default)]