
Sysinternals Autoruns v14.11 - Autostart program viewer
Copyright (C) 2002-2024 Mark Russinovich
Sysinternals - www.sysinternals.com


HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
   autocheck autochk *
     autocheck autochk *
     Auto Check Utility
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\autochk.exe
     8/25/1929 4:43 PM

HKLM\Software\Microsoft\Office\Outlook\Addins
   LyncAddin Class
     HKCR\CLSID\{a6a2383f-ad50-4d52-8110-3508275e77f7}
     Skype for Business
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\ucaddin.dll
     5/15/2025 5:45 PM

HKLM\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)
   C:\Program Files\Internet Explorer\iexplore.exe
     Internet Explorer
     Microsoft Corporation
     11.0.26100.1882
     c:\program files\internet explorer\iexplore.exe
     3/15/1954 3:17 AM

HKLM\System\CurrentControlSet\Services
   AarSvc
     %SystemRoot%\system32\svchost.exe -k AarSvcGroup -p
     Agent Activation Runtime: Runtime for activating conversational agent applications
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\aarsvc.dll
     3/18/1978 6:55 PM
   AarSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k AarSvcGroup -p
     AarSvc_6d700: Runtime for activating conversational agent applications
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   ALG
     %SystemRoot%\System32\alg.exe
     Application Layer Gateway Service: Provides support for 3rd party protocol plug-ins for Internet Connection Sharing
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\alg.exe
     7/10/1958 1:07 PM
   AMD Crash Defender Service
     %SystemRoot%\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
     AMD Crash Defender Service: AMD Crash Defender Service
     Advanced Micro Devices, Inc.
     24.10.0.1
     c:\windows\system32\driverstore\filerepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
     5/7/2024 4:06 PM
   AMD External Events Utility
     %SystemRoot%\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\atiesrxx.exe
     AMD External Events Utility: AMD External Events Service Module
     AMD
     32.0.11024.2
     c:\windows\system32\driverstore\filerepository\u0405277.inf_amd64_00f6bd87014da3b2\b404941\atiesrxx.exe
     6/25/2024 9:16 PM
   AmdAppCompatSvc
     %SystemRoot%\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe
     AMD Application Compatibility Database Service: Manages AMD compatibility databases, including optimizations.
     Advanced Micro Devices, Inc
     1.0.0.3
     c:\windows\system32\driverstore\filerepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\amdappcompatsvc.exe
     12/27/2024 1:38 AM
   AmdPpkgSvc
     %SystemRoot%\System32\DriverStore\FileRepository\amdppkg.inf_amd64_3b35ade6b9714417\AmdPpkgSvc.exe
     AMD Provisioning Packages Service: Manages AMD provisioning packages, including processor and NVMe power management.
     Advanced Micro Devices, Inc
     8.0.0.52
     c:\windows\system32\driverstore\filerepository\amdppkg.inf_amd64_3b35ade6b9714417\amdppkgsvc.exe
     3/27/2025 6:29 AM
   AppIDSvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Application Identity: Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\appidsvc.dll
     5/18/1913 7:17 PM
   Appinfo
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Application Information: Facilitates the running of interactive applications with additional administrative privileges.  If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\appinfo.dll
     1/28/1924 12:53 PM
   AppMgmt
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Application Management: Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\appmgmts.dll
     5/24/1947 11:32 AM
   AppReadiness
     %SystemRoot%\System32\svchost.exe -k AppReadiness -p
     App Readiness: Gets apps ready for use the first time a user signs in to this PC and when adding new apps.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\appreadiness.dll
     9/3/1992 1:11 AM
   AppXSvc
     %systemroot%\system32\svchost.exe -k wsappx -p
     AppX Deployment Service (AppXSVC): Provides infrastructure support for deploying Store applications. This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\appxdeploymentserver.dll
     2/22/1963 2:54 AM
   ApxSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Windows Virtual Audio Device Proxy Service: Manages virtual audio devices for Windows-based programs.  If this service is stopped, virtual audio devices will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\apxsvc.dll
     9/7/2012 5:21 AM
   AssignedAccessManagerSvc
     %SystemRoot%\system32\svchost.exe -k AssignedAccessManagerSvc
     AssignedAccessManager Service: AssignedAccessManager Service supports kiosk experience in Windows.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\assignedaccessmanagersvc.dll
     6/17/1941 4:50 AM
   AudioEndpointBuilder
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Windows Audio Endpoint Builder: Manages audio devices for the Windows Audio service.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\audioendpointbuilder.dll
     9/3/1945 5:38 AM
   Audiosrv
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
     Windows Audio: Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\audiosrv.dll
     4/3/1938 1:26 AM
   autotimesvc
     %SystemRoot%\system32\svchost.exe -k autoTimeSvc
     Cellular Time: This service sets time based on NITZ messages from a Mobile Network
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\autotimesvc.dll
     3/12/1910 9:08 PM
   AxInstSV
     %SystemRoot%\system32\svchost.exe -k AxInstSVGroup
     ActiveX Installer (AxInstSV): Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\axinstsv.dll
     8/14/1924 11:18 AM
   BcastDVRUserService
     %SystemRoot%\system32\svchost.exe -k BcastDVRUserService
     GameDVR and Broadcast User Service: This user service is used for Game Recordings and Live Broadcasts
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\bcastdvruserservice.dll
     11/19/1942 10:18 AM
   BcastDVRUserService_6d700
     C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService
     BcastDVRUserService_6d700: This user service is used for Game Recordings and Live Broadcasts
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   BDESVC
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     BitLocker Drive Encryption Service: BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used.  Stopping or disabling the service would prevent users from leveraging this functionality.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\bdesvc.dll
     2/29/1980 2:39 PM
   BFE
     %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
     Base Filtering Engine: The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\bfe.dll
     4/4/1980 11:38 PM
   BITS
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Background Intelligent Transfer Service: Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.
     Microsoft Corporation
     7.8.26100.4061
     c:\windows\system32\qmgr.dll
     9/12/1909 3:08 PM
   BluetoothUserService
     %SystemRoot%\system32\svchost.exe -k BthAppGroup -p
     Bluetooth User Support Service: The Bluetooth user service supports proper functionality of Bluetooth features relevant to each user session.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\microsoft.bluetooth.userservice.dll
     9/25/1967 7:04 AM
   BluetoothUserService_6d700
     C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p
     BluetoothUserService_6d700: The Bluetooth user service supports proper functionality of Bluetooth features relevant to each user session.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   BrokerInfrastructure
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     Background Tasks Infrastructure Service: Windows infrastructure service that controls which background tasks can run on the system.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\psmsrv.dll
     6/23/1916 3:40 PM
   BTAGService
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
     Bluetooth Audio Gateway Service: Service supporting the audio gateway role of the Bluetooth Handsfree Profile.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\btagservice.dll
     4/3/1928 2:58 PM
   BthAvctpSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     AVCTP service: This is Audio Video Control Transport Protocol service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\bthavctpsvc.dll
     6/18/1989 2:08 PM
   bthserv
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Bluetooth Support Service: The Bluetooth service supports discovery and association of remote Bluetooth devices.  Stopping or disabling this service may cause already installed Bluetooth devices to fail to operate properly and prevent new devices from being discovered or associated.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\bthserv.dll
     11/7/1931 5:30 PM
   camsvc
     %SystemRoot%\system32\svchost.exe -k osprivacy -p
     Capability Access Manager Service: Provides facilities for managing UWP apps access to app capabilities as well as checking an app's access to specific app capabilities
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\capabilityaccessmanager.dll
     5/2/1973 8:36 PM
   CaptureService
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     CaptureService: Enables optional screen capture functionality for applications that call the Windows.Graphics.Capture API.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\captureservice.dll
     3/3/2015 10:03 AM
   CaptureService_6d700
     C:\WINDOWS\system32\svchost.exe -k LocalService -p
     CaptureService_6d700: Enables optional screen capture functionality for applications that call the Windows.Graphics.Capture API.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   cbdhsvc
     %SystemRoot%\system32\svchost.exe -k ClipboardSvcGroup -p
     Clipboard User Service: This user service is used for Clipboard scenarios
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\cbdhsvc.dll
     3/29/1957 6:00 AM
   cbdhsvc_6d700
     C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
     cbdhsvc_6d700: This user service is used for Clipboard scenarios
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   CDPSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Connected Devices Platform Service: This service is used for Connected Devices Platform scenarios
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\cdpsvc.dll
     7/4/2031 3:59 AM
   CDPUserSvc
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     Connected Devices Platform User Service: This user service is used for Connected Devices Platform scenarios
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\cdpusersvc.dll
     12/15/1911 1:28 AM
   CDPUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     CDPUserSvc_6d700: This user service is used for Connected Devices Platform scenarios
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   CertPropSvc
     %SystemRoot%\system32\svchost.exe -k netsvcs
     Certificate Propagation: Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\certprop.dll
     12/17/1977 8:10 PM
   ClickToRunSvc
     "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
     Microsoft Office Click-to-Run Service: ‪Manages resource coordination, background streaming, and system integration of Microsoft 365 and Office products and their related updates. This service is required to run during the use of any Microsoft 365 and Office program, during initial streaming installation and all subsequent updates.‬
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe
     5/15/2025 5:27 PM
   ClipSVC
     %SystemRoot%\System32\svchost.exe -k wsappx -p
     Client License Service (ClipSVC): Provides infrastructure support for the Microsoft Store. This service is started on demand and if disabled applications bought using the Microsoft Store will not behave correctly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\clipsvc.dll
     9/26/1953 9:49 AM
   CloudBackupRestoreSvc
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     Cloud Backup and Restore Service: Monitors the system for changes in application and setting states and performs cloud backup and restore operations when required.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\cloudrestorelauncher.dll
     3/8/1916 2:36 PM
   CloudBackupRestoreSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     CloudBackupRestoreSvc_6d700: Monitors the system for changes in application and setting states and performs cloud backup and restore operations when required.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   cloudidsvc
     %SystemRoot%\system32\svchost.exe -k CloudIdServiceGroup -p
     Microsoft Cloud Identity Service: Supports integrations with Microsoft cloud identity services.  If disabled, tenant restrictions will not be enforced properly.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\cloudidsvc.dll
     2/17/1916 11:22 PM
   COMSysApp
     %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
     COM+ System Application: Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\dllhost.exe
     11/26/1927 9:39 PM
   ConsentUxUserSvc
     %SystemRoot%\system32\svchost.exe -k DevicesFlow
     ConsentUX User Service: Allows the system to request user consent to allow apps to access sensitive resources and information such as the device's location
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\consentuxclient.dll
     9/18/1932 3:31 PM
   ConsentUxUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k DevicesFlow
     ConsentUxUserSvc_6d700: Allows the system to request user consent to allow apps to access sensitive resources and information such as the device's location
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   CoreMessagingRegistrar
     %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p
     CoreMessaging: Manages communication between system components.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\coremessaging.dll
     5/20/1902 3:26 AM
   CredentialEnrollmentManagerUserSvc
     %SystemRoot%\system32\CredentialEnrollmentManager.exe
     CredentialEnrollmentManagerUserSvc: Credential Enrollment Manager
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credentialenrollmentmanager.exe
     5/29/1996 2:35 PM
   CredentialEnrollmentManagerUserSvc_6d700
     C:\WINDOWS\system32\CredentialEnrollmentManager.exe
     CredentialEnrollmentManagerUserSvc_6d700: Credential Enrollment Manager
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credentialenrollmentmanager.exe
     5/29/1996 2:35 PM
   CryptSvc
     %SystemRoot%\system32\svchost.exe -k NetworkService -p
     Cryptographic Services: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cryptsvc.dll
     6/2/1918 9:45 AM
   CscService
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Offline Files: The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.
     Microsoft Corporation
     10.0.26100.2894
     c:\windows\system32\cscsvc.dll
     1/17/1972 5:11 PM
   DcomLaunch
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     DCOM Server Process Launcher: The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\rpcss.dll
     1/24/1913 7:29 PM
   dcsvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Declared Configuration(DC) service: Process Declared Configuration documents recevied from MDM and other channels and perform configurations on device
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dcsvc.dll
     11/23/1980 4:20 AM
   defragsvc
     %SystemRoot%\system32\svchost.exe -k defragsvc
     Optimize drives: Helps the computer run more efficiently by optimizing files on storage drives.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\defragsvc.dll
     1/6/2019 4:25 AM
   DeviceAssociationBrokerSvc
     %SystemRoot%\system32\svchost.exe -k DevicesFlow -p
     DeviceAssociationBroker: Enables apps to pair devices
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\deviceaccess.dll
     3/4/2000 3:49 AM
   DeviceAssociationBrokerSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k DevicesFlow -p
     DeviceAssociationBrokerSvc_6d700: Enables apps to pair devices
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   DeviceAssociationService
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Device Association Service: Enables pairing between the system and wired or wireless devices.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\das.dll
     12/25/1968 8:05 PM
   DeviceInstall
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     Device Install Service: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\umpnpmgr.dll
     7/14/1990 7:12 PM
   DevicePickerUserSvc
     %SystemRoot%\system32\svchost.exe -k DevicesFlow
     DevicePicker: This user service is used for managing the Miracast, DLNA, and DIAL UI
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.devices.picker.dll
     10/15/1958 12:17 PM
   DevicePickerUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k DevicesFlow
     DevicePickerUserSvc_6d700: This user service is used for managing the Miracast, DLNA, and DIAL UI
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   DevicesFlowUserSvc
     %SystemRoot%\system32\svchost.exe -k DevicesFlow
     DevicesFlow: Allows ConnectUX and PC Settings to Connect and Pair with WiFi displays and Bluetooth devices.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\devicesflowbroker.dll
     4/12/1944 7:25 AM
   DevicesFlowUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k DevicesFlow
     DevicesFlowUserSvc_6d700: Allows ConnectUX and PC Settings to Connect and Pair with WiFi displays and Bluetooth devices.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   DevQueryBroker
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     DevQuery Background Discovery Broker: Enables apps to discover devices with a backgroud task
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\devquerybroker.dll
     2/19/2022 2:50 AM
   Dhcp
     %SystemRoot%\system32\dhcpcore.dll
     DHCP Client: Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\dhcpcore.dll
     4/6/1903 10:56 AM
   diagsvc
     %SystemRoot%\System32\svchost.exe -k diagnostics
     Diagnostic Execution Service: Executes diagnostic actions for troubleshooting support
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\diagsvc.dll
     10/20/2016 5:16 PM
   DiagTrack
     %SystemRoot%\System32\svchost.exe -k utcsvc -p
     Connected User Experiences and Telemetry: The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences. Additionally, this service manages the event driven collection and transmission of diagnostic and usage information (used to improve the experience and quality of the Windows Platform) when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\diagtrack.dll
     2/23/1995 6:30 PM
   DispBrokerDesktopSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Display Policy Service: Manages the connection and configuration of local and remote displays
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\dispbroker.desktop.dll
     10/26/2021 7:42 AM
   DisplayEnhancementService
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Display Enhancement Service: A service for managing display enhancement such as brightness control.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\microsoft.graphics.display.displayenhancementservice.dll
     2/2/1932 4:03 AM
   DmEnrollmentSvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Device Management Enrollment Service: Performs Device Enrollment Activities for Device Management
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.internal.management.dll
     10/17/1938 2:15 AM
   dmwappushservice
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Device Management Wireless Application Protocol (WAP) Push message Routing Service: Routes Wireless Application Protocol (WAP) Push messages received by the device and synchronizes Device Management sessions
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dmwappushsvc.dll
     10/4/1902 1:52 PM
   Dnscache
     %SystemRoot%\system32\svchost.exe -k NetworkService -p
     DNS Client: The DNS Client service (dnscache) sends Domain Name System (DNS) queries, caches query results, and registers the computer's full name on the network. This service is not stoppable.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dnsrslvr.dll
     8/24/1907 1:30 AM
   DoSvc
     %SystemRoot%\system32\dosvc.dll
     Delivery Optimization: Performs content delivery optimization tasks
     Microsoft Corporation
     10.0.26100.2033
     c:\windows\system32\dosvc.dll
     7/10/2017 12:27 PM
   dot3svc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Wired AutoConfig: The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dot3svc.dll
     5/21/1959 5:56 AM
   DPS
     %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
     Diagnostic Policy Service: The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components.  If this service is stopped, diagnostics will no longer function.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\dps.dll
     8/20/1910 3:37 PM
   DsmSvc
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Device Setup Manager: Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\devicesetupmanager.dll
     9/2/1957 9:28 AM
   DsSvc
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Data Sharing Service: Provides data brokering between applications.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dssvc.dll
     7/3/1915 3:54 AM
   DusmSvc
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc
     Data Usage: Network data usage, data limit, restrict background data, metered networks.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\dusmsvc.dll
     7/12/1976 2:46 PM
   EapHost
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Extensible Authentication Protocol: The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP).  EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process.  If you disable this service, this computer is prevented from accessing networks that require EAP authentication.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\eapsvc.dll
     10/18/1949 9:36 PM
   EasyTuneEngineService
     "C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe"
     EasyTune Engine Service: EasyTune Engine service
     GIGA-BYTE TECHNOLOGY CO., LTD.
     8.0.8.6
     c:\program files (x86)\gigabyte\easytuneengineservice\easytuneengineservice.exe
     11/5/2023 11:22 PM
   edgeupdate
     "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
     Microsoft Edge Update Service (edgeupdate): Keeps your Microsoft software up to date. If this service is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Microsoft software using it.
     Microsoft Corporation
     1.3.185.27
     c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe
     3/21/2024 5:25 PM
   edgeupdatem
     "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /medsvc
     Microsoft Edge Update Service (edgeupdatem): Keeps your Microsoft software up to date. If this service is disabled or stopped, your Microsoft software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Microsoft software using it.
     Microsoft Corporation
     1.3.185.27
     c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe
     3/21/2024 5:25 PM
   EFS
     %SystemRoot%\System32\lsass.exe
     Encrypting File System (EFS): Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   embeddedmode
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Embedded Mode: The Embedded Mode service enables scenarios related to Background Applications.  Disabling this service will prevent Background Applications from being activated.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\embeddedmodesvc.dll
     12/3/2011 6:48 PM
   EntAppSvc
     %systemroot%\system32\svchost.exe -k appmodel -p
     Enterprise App Management Service: Enables enterprise application management.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\enterpriseappmgmtsvc.dll
     4/8/1958 3:23 PM
   EventLog
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
     Windows Event Log: This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wevtsvc.dll
     11/10/1961 12:59 AM
   EventSystem
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     COM+ Event System: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     2001.12.10941.16384
     c:\windows\system32\es.dll
     8/16/1979 9:19 PM
   fdPHost
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Function Discovery Provider Host: The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\fdphost.dll
     10/14/1966 3:28 AM
   FDResPub
     %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
     Function Discovery Resource Publication: Publishes this computer and resources attached to this computer so they can be discovered over the network.  If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\fdrespub.dll
     7/9/1916 5:05 AM
   fhsvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     File History Service: Protects user files from accidental loss by copying them to a backup location
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\fhsvc.dll
     6/27/2033 11:26 AM
   FileSyncHelper
     "C:\Program Files\Microsoft OneDrive\25.080.0427.0003\FileSyncHelper.exe"
     FileSyncHelper: Helper service for OneDrive
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesynchelper.exe
     2/17/1997 8:15 AM
   FontCache
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Windows Font Cache Service: Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\fntcache.dll
     8/19/2027 5:28 PM
   FontCache3.0.0.0
     %systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
     Windows Presentation Foundation Font Cache 3.0.0.0: Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.
     Microsoft Corporation
     3.0.6920.9151
     c:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe
     5/3/2021 11:29 PM
   FrameServer
     %SystemRoot%\System32\svchost.exe -k Camera
     Windows Camera Frame Server: Enables multiple clients to access video frames from camera devices.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\frameserver.dll
     1/6/2008 10:52 AM
   FrameServerMonitor
     %SystemRoot%\System32\svchost.exe -k CameraMonitor
     Windows Camera Frame Server Monitor: Monitors the health and state for the Windows Camera Frame Server service.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\frameservermonitor.dll
     9/3/1926 7:53 AM
   Futuremark SystemInfo Service
     "C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe"
     Futuremark SystemInfo Service: Futuremark SystemInfo Service
     Futuremark
     5.84.1372.0
     c:\program files (x86)\futuremark\systeminfo\fmsisvc.exe
     4/29/2025 7:02 AM
   GameInputSvc
     %SystemRoot%\System32\GameInputSvc.exe
     GameInput Service: Enables keyboards, mice, gamepads, and other input devices to be used with the GameInput API.
     Microsoft Corporation
     0.2309.26100.3912
     c:\windows\system32\gameinputsvc.exe
     3/30/1917 9:27 AM
   GBTECService
     C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe
     GBTECService: OLEDDisplayService
     GIGA-BYTE TECHNOLOGY CO., LTD.
     24.7.4.1
     c:\program files (x86)\gigabyte\gbtecservice\oleddisplayservice.exe
     6/5/1968 6:00 AM
   GoogleChromeElevationService
     "C:\Program Files\Google\Chrome\Application\136.0.7103.114\elevation_service.exe"
     Google Chrome Elevation Service (GoogleChromeElevationService): Provides encryption services and a secure way for recovering Google Chrome if it gets out of date. If this service is disabled,  may lose access to encrypted data, and  may not be able to recover itself.
     Google LLC
     136.0.7103.114
     c:\program files\google\chrome\application\136.0.7103.114\elevation_service.exe
     5/13/2025 10:45 AM
   GoogleUpdaterInternalService138.0.7194.0
     "C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe" --system --windows-service --service=update-internal
     Google Updater Internal Service (GoogleUpdaterInternalService138.0.7194.0): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it.
     Google LLC
     138.0.7194.0
     c:\program files (x86)\google\googleupdater\138.0.7194.0\updater.exe
     5/21/2025 11:02 PM
   GoogleUpdaterService138.0.7194.0
     "C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe" --system --windows-service --service=update
     Google Updater Service (GoogleUpdaterService138.0.7194.0): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it.
     Google LLC
     138.0.7194.0
     c:\program files (x86)\google\googleupdater\138.0.7194.0\updater.exe
     5/21/2025 11:02 PM
   gpsvc
     %windir%\system32\svchost.exe -k GPSvcGroup
     Group Policy Client: The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpsvc.dll
     9/22/1934 7:52 PM
   GraphicsPerfSvc
     %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup
     GraphicsPerfSvc: Graphics performance monitor service
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\graphicsperfsvc.dll
     2/5/1995 5:52 PM
   hidserv
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Human Interface Device Service: Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices. It is recommended that you keep this service running.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\hidserv.dll
     9/14/1968 4:38 PM
   HvHost
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     HV Host Service: Provides an interface for the Hyper-V hypervisor to provide per-partition performance counters to the host operating system.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\hvhostsvc.dll
     5/6/1947 7:40 AM
   icssvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Windows Mobile Hotspot Service: Provides the ability to share a cellular data connection with another device.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tetheringservice.dll
     5/11/2000 12:41 AM
   IKEEXT
     %systemroot%\system32\svchost.exe -k netsvcs -p
     IKE and AuthIP IPsec Keying Modules: The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ikeext.dll
     4/8/2006 11:18 AM
   InstallService
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Microsoft Store Install Service: Provides infrastructure support for the Microsoft Store.  This service is started on demand and if disabled then installations will not function properly.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservice.dll
     11/26/1903 5:35 PM
   InventorySvc
     %systemroot%\system32\svchost.exe -k InvSvcGroup -p
     Inventory and Compatibility Appraisal service: This service performs background system inventory, compatibility appraisal, and maintenance used by numerous system components.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\inventorysvc.dll
     11/8/2027 3:17 PM
   iphlpsvc
     %SystemRoot%\System32\svchost.exe -k NetSvcs -p
     IP Helper: Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\iphlpsvc.dll
     5/7/2031 2:03 PM
   IpxlatCfgSvc
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     IP Translation Configuration Service: Configures and enables translation from v4 to v6 and vice versa
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\ipxlatcfg.dll
     9/26/1939 7:59 AM
   KeyIso
     %SystemRoot%\system32\lsass.exe
     CNG Key Isolation: The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   KtmRm
     %SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p
     KtmRm for Distributed Transaction Coordinator: Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     2001.12.10941.16384
     c:\windows\system32\msdtckrm.dll
     7/4/1914 10:25 AM
   LanmanServer
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Server: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\srvsvc.dll
     12/8/2025 7:11 AM
   LanmanWorkstation
     %SystemRoot%\System32\svchost.exe -k NetworkService -p
     Workstation: Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wkssvc.dll
     12/11/2001 11:53 AM
   lfsvc
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Geolocation Service: This service monitors the current location of the system and manages geofences (a geographical location with associated events).  If you turn off this service, applications will be unable to use or receive notifications for geolocation or geofences.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\lfsvc.dll
     2/15/1965 4:01 AM
   LicenseManager
     %SystemRoot%\System32\svchost.exe -k LocalService -p
     Windows License Manager Service: Provides infrastructure support for the Microsoft Store.  This service is started on demand and if disabled then content acquired through the Microsoft Store will not function properly.
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\licensemanagersvc.dll
     7/13/2037 5:03 AM
   lltdsvc
     %SystemRoot%\System32\svchost.exe -k LocalService -p
     Link-Layer Topology Discovery Mapper: Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device.  If this service is disabled, the Network Map will not function properly.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\lltdsvc.dll
     6/29/2022 11:26 PM
   lmhosts
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
     TCP/IP NetBIOS Helper: Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lmhsvc.dll
     5/12/1993 5:07 AM
   LocalKdc
     %SystemRoot%\System32\lsass.exe
     Kerberos Local Key Distribution Center: This service enables users to log on to the local machine using the Kerberos authentication protocol. If this service is stopped, users will be unable to log on to the local machine. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   LSM
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     Local Session Manager: Core Windows Service that manages local user sessions. Stopping or disabling this service will result in system instability.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\lsm.dll
     4/30/1912 3:25 AM
   LxpSvc
     %SystemRoot%\system32\svchost.exe -k netsvcs
     Language Experience Service: Provides infrastructure support for deploying and configuring localized Windows resources. This service is started on demand and, if disabled, additional Windows languages will not be deployed to the system, and Windows may not function properly.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\languageoverlayserver.dll
     9/7/1928 3:08 AM
   MapsBroker
     %SystemRoot%\System32\svchost.exe -k NetworkService -p
     Downloaded Maps Manager: Windows service for application access to downloaded maps. This service is started on-demand by application accessing downloaded maps. Disabling this service will prevent apps from accessing maps.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\moshost.dll
     11/3/1919 12:33 PM
   McpManagementService
     %SystemRoot%\system32\svchost.exe -k McpManagementServiceGroup
     McpManagementService: Universal Print Management Service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mcpmanagementservice.dll
     12/12/1992 5:25 AM
   MDCoreSvc
     "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpDefenderCoreService.exe"
     Microsoft Defender Core Service: Monitors the availability, health, and performance of various security components
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\mpdefendercoreservice.exe
     4/23/1929 12:51 AM
   MessagingService
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     MessagingService: Service supporting text messaging and related functionality.
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\messagingservice.dll
     2/19/1963 3:48 PM
   MessagingService_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     MessagingService_6d700: Service supporting text messaging and related functionality.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   MicrosoftEdgeElevationService
     "C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.76\elevation_service.exe"
     Microsoft Edge Elevation Service (MicrosoftEdgeElevationService): Keeps Microsoft Edge up to update. If this service is disabled, the application will not be kept up to date.
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\136.0.3240.76\elevation_service.exe
     5/14/2025 1:55 PM
   mpssvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
     Windows Defender Firewall: Windows Defender Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\mpssvc.dll
     5/5/1977 1:55 PM
   MSDTC
     %SystemRoot%\System32\msdtc.exe
     Distributed Transaction Coordinator: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     2001.12.10941.16384
     c:\windows\system32\msdtc.exe
     4/25/1911 8:46 PM
   MSiSCSI
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Microsoft iSCSI Initiator Service: Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\iscsiexe.dll
     12/9/2005 9:08 AM
   msiserver
     %systemroot%\system32\msiexec.exe /V
     Windows Installer: Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     5.0.26100.1150
     c:\windows\system32\msiexec.exe
     1/10/2021 3:07 PM
   NaturalAuthentication
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Natural Authentication: Signal aggregator service, that evaluates signals based on time, network, geolocation, bluetooth and cdf factors. Supported features are Device Unlock, Dynamic Lock and Dynamo MDM policies
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\naturalauth.dll
     6/2/1962 6:46 PM
   NcaSvc
     %SystemRoot%\System32\svchost.exe -k NetSvcs -p
     Network Connectivity Assistant: Provides DirectAccess status notification for UI components
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\ncasvc.dll
     11/2/1994 6:05 PM
   NcbService
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Network Connection Broker: Brokers connections that allow packaged Microsoft Store apps to receive notifications from the internet.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ncbservice.dll
     3/13/1918 3:20 PM
   NcdAutoSetup
     %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
     Network Connected Devices Auto-Setup: Network Connected Devices Auto-Setup service monitors and installs qualified devices that connect to a qualified network. Stopping or disabling this service will prevent Windows from discovering and installing qualified network connected devices automatically. Users can still manually add network connected devices to a PC through the user interface.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\ncdautosetup.dll
     5/4/1971 1:15 PM
   Netlogon
     %systemroot%\system32\lsass.exe
     Netlogon: Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   Netman
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Network Connections: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\netman.dll
     5/19/2025 1:15 PM
   netprofm
     %SystemRoot%\System32\svchost.exe -k netprofm -p
     Network List Service: Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\netprofmsvc.dll
     5/31/2021 10:43 PM
   NetSetupSvc
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Network Setup Service: The Network Setup Service manages the installation of network drivers and permits the configuration of low-level network settings.  If this service is stopped, any driver installations that are in-progress may be cancelled.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\netsetupsvc.dll
     7/8/2017 11:09 AM
   NgcCtnrSvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Microsoft Passport Container: Manages local user identity keys used to authenticate user to identity providers as well as TPM virtual smart cards. If this service is disabled, local user identity keys and TPM virtual smart cards will not be accessible. It is recommended that you do not reconfigure this service.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ngcctnrsvc.dll
     3/15/1969 2:14 PM
   NgcSvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Microsoft Passport: Provides process isolation for cryptographic keys used to authenticate to a user’s associated identity providers. If this service is disabled, all uses and management of these keys will not be available, which includes machine logon and single-sign on for apps and websites. This service starts and stops automatically. It is recommended that you do not reconfigure this service.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ngcsvc.dll
     9/18/1954 11:01 PM
   NlaSvc
     %SystemRoot%\System32\svchost.exe -k netprofm -p
     Network Location Awareness: Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\netprofmsvc.dll
     5/31/2021 10:43 PM
   NPSMSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Now Playing Session Manager Service: This service hosts the Now Playing Session Manager used for Media Scenarios
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\npsm.dll
     10/8/1965 7:41 AM
   NPSMSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k LocalService -p
     NPSMSvc_6d700: This service hosts the Now Playing Session Manager used for Media Scenarios
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   nsi
     %systemroot%\system32\svchost.exe -k LocalService -p
     Network Store Interface Service: This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\nsisvc.dll
     6/18/2016 6:36 AM
   NVDisplay.ContainerLocalSystem
     C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem /ert
     NVIDIA Display Container LS: Container service for NVIDIA root features
     NVIDIA Corporation
     1.39.3323.1171
     c:\windows\system32\driverstore\filerepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\display.nvcontainer\nvdisplay.container.exe
     8/25/2023 3:24 AM
   OneDrive Updater Service
     "C:\Program Files\Microsoft OneDrive\25.080.0427.0003\OneDriveUpdaterService.exe"
     OneDrive Updater Service: Keeps your OneDrive up to date.
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\onedriveupdaterservice.exe
     11/11/2028 11:30 AM
   OneSyncSvc
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     Sync Host: This service synchronizes mail, contacts, calendar and various other user data. Mail and other applications dependent on this functionality will not work properly when this service is not running.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\aphostservice.dll
     6/22/1941 8:39 PM
   OneSyncSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     OneSyncSvc_6d700: This service synchronizes mail, contacts, calendar and various other user data. Mail and other applications dependent on this functionality will not work properly when this service is not running.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   P9RdrService
     %systemroot%\system32\svchost.exe -k P9RdrService -p
     P9RdrService: Enables trigger-starting plan9 file servers.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\p9rdrservice.dll
     8/19/2020 7:19 PM
   P9RdrService_6d700
     C:\WINDOWS\system32\svchost.exe -k P9RdrService -p
     P9RdrService_6d700: Enables trigger-starting plan9 file servers.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   PcaSvc
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Program Compatibility Assistant Service: This service provides support for the Program Compatibility Assistant (PCA).  PCA monitors programs installed and run by the user and detects known compatibility problems. If this service is stopped, PCA will not function properly.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\pcasvc.dll
     3/25/1966 4:23 AM
   PeerDistSvc
     %SystemRoot%\System32\svchost.exe -k PeerDist
     BranchCache: This service caches network content from peers on the local subnet.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\peerdistsvc.dll
     7/19/2004 12:37 AM
   PenService
     %SystemRoot%\system32\svchost.exe -k PenService
     PenService: Pen Service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\penservice.dll
     12/5/1914 9:02 PM
   PenService_6d700
     C:\WINDOWS\system32\svchost.exe -k PenService
     PenService_6d700: Pen Service
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   perceptionsimulation
     %systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe
     Windows Perception Simulation Service: Enables spatial perception simulation, virtual camera management and spatial input simulation.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\perceptionsimulation\perceptionsimulationservice.exe
     9/13/1910 11:34 PM
   PerfHost
     %SystemRoot%\SysWow64\perfhost.exe
     Performance Counter DLL Host: Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\perfhost.exe
     7/7/1990 11:06 AM
   PhoneSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Phone Service: Manages the telephony state on the device
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\phoneservice.dll
     10/13/1920 11:56 PM
   PimIndexMaintenanceSvc
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     Contact Data: Indexes contact data for fast contact searching. If you stop or disable this service, contacts might be missing from your search results.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\pimindexmaintenance.dll
     12/8/1991 6:44 AM
   PimIndexMaintenanceSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     PimIndexMaintenanceSvc_6d700: Indexes contact data for fast contact searching. If you stop or disable this service, contacts might be missing from your search results.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   pla
     %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
     Performance Logs & Alerts: Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\pla.dll
     10/19/1909 8:46 PM
   PlugPlay
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     Plug and Play: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\umpnpmgr.dll
     7/14/1990 7:12 PM
   PolicyAgent
     %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted -p
     IPsec Policy Agent: Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection.  This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec".  If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec.  Also,remote management of Windows Defender Firewall is not available when this service is stopped.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\ipsecsvc.dll
     8/6/1952 11:02 PM
   Power
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     Power: Manages power policy and power policy notification delivery.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\umpo.dll
     9/18/2009 6:00 PM
   PrintDeviceConfigurationService
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Print Device Configuration Service: The Print Device Configuration Service manages the installation of IPP and UP printers. If this service is stopped, any printer installations that are in-progress may be canceled.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\printdeviceconfigurationservice.dll
     1/30/1949 9:44 PM
   PrintNotify
     %SystemRoot%\system32\svchost.exe -k print
     Printer Extensions and Notifications: This service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. If you turn off this service, you won’t be able to see printer extensions or notifications.
     Microsoft Corporation
     0.3.26100.3912
     c:\windows\system32\spool\drivers\x64\3\printconfig.dll
     5/20/1980 12:43 AM
   PrintScanBrokerService
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     PrintScanBrokerService: Provides support for secure privileged operations needed by low priv spooler.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\printscanbrokerservice.dll
     9/26/2004 3:08 PM
   PrintWorkflowUserSvc
     %SystemRoot%\system32\svchost.exe -k PrintWorkflow
     PrintWorkflow: Provides support for Print Workflow applications. If you turn off this service, you may not be able to print successfully.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\printworkflowservice.dll
     9/9/2006 7:28 PM
   PrintWorkflowUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k PrintWorkflow
     PrintWorkflowUserSvc_6d700: Provides support for Print Workflow applications. If you turn off this service, you may not be able to print successfully.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   ProfSvc
     %systemroot%\system32\svchost.exe -k UserProfileService -p
     User Profile Service: This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\profsvc.dll
     3/27/1965 8:37 PM
   PushToInstall
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Windows PushToInstall Service: Provides infrastructure support for the Microsoft Store.  This service is started automatically and if disabled then remote installations will not function properly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\pushtoinstall.dll
     2/14/1983 1:45 AM
   QWAVE
     %windir%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
     Quality Windows Audio Video Experience: Quality Windows Audio Video Experience (qWave) is a networking platform for Audio Video (AV) streaming applications on IP home networks. qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\qwave.dll
     6/5/2021 5:24 PM
   RasAuto
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Remote Access Auto Connection Manager: Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\rasauto.dll
     3/4/1978 10:39 AM
   RasMan
     %SystemRoot%\System32\svchost.exe -k netsvcs
     Remote Access Connection Manager: Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\rasmans.dll
     10/8/1921 4:08 AM
   refsdedupsvc
     %SystemRoot%\System32\ReFsDedupSvc.exe
     ReFS Dedup Service: ReFS data deduplication and compression service to track file changes and run scheduled optimization jobs.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\refsdedupsvc.exe
     7/15/1975 9:00 AM
   RetailDemo
     %SystemRoot%\System32\svchost.exe -k rdxgroup
     Retail Demo Service: The Retail Demo service controls device activity while the device is in retail demo mode.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\rdxservice.dll
     2/2/2034 11:57 AM
   RmSvc
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
     Radio Management Service: Radio Management and Airplane Mode Service
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\rmapi.dll
     6/8/1963 7:03 AM
   RpcEptMapper
     %SystemRoot%\system32\svchost.exe -k RPCSS -p
     RPC Endpoint Mapper: Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\rpcepmap.dll
     9/11/1984 2:56 PM
   RpcLocator
     %SystemRoot%\system32\locator.exe
     Remote Procedure Call (RPC) Locator: In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\locator.exe
     12/20/1931 8:22 AM
   RpcSs
     %SystemRoot%\system32\svchost.exe -k rpcss -p
     Remote Procedure Call (RPC): The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\rpcss.dll
     1/24/1913 7:29 PM
   RtkAudioUniversalService
     %SystemRoot%\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
     Realtek Audio Universal Service: Realtek Audio Universal Service
     Realtek Semiconductor
     1.1.664.1
     c:\windows\system32\driverstore\filerepository\realtekservice.inf_amd64_c2fa179f72a88c18\rtkauduservice64.exe
     9/10/2024 2:35 AM
   RtkBtManServ
     %SystemRoot%\RtkBtManServ.exe
     Realtek Bluetooth Device Manager Service: Realtek Bluetooth Service Application
     Realtek Semiconductor Corp.
     2.0.5.0
     c:\windows\rtkbtmanserv.exe
     11/25/2024 5:13 AM
   SamSs
     %SystemRoot%\system32\lsass.exe
     Security Accounts Manager: The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests.  Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   SCardSvr
     %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation
     Smart Card: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\scardsvr.dll
     10/18/1999 7:45 PM
   ScDeviceEnum
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
     Smart Card Device Enumeration Service: Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers.
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\scdeviceenum.dll
     12/4/1933 7:15 PM
   Schedule
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Task Scheduler: Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\schedsvc.dll
     6/6/1914 4:41 AM
   SCPolicySvc
     %SystemRoot%\system32\svchost.exe -k netsvcs
     Smart Card Removal Policy: Allows the system to be configured to lock the user desktop upon smart card removal.
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\certprop.dll
     12/17/1977 8:10 PM
   SDRSVC
     %SystemRoot%\system32\svchost.exe -k SDRSVC
     Windows Backup: Provides Windows Backup and Restore capabilities.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sdrsvc.dll
     11/20/2001 9:34 AM
   seclogon
     %windir%\system32\svchost.exe -k netsvcs -p
     Secondary Logon: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\seclogon.dll
     12/11/1947 3:48 PM
   SecurityHealthService
     %SystemRoot%\system32\SecurityHealthService.exe
     Windows Security Service: Windows Security Service handles unified device protection and health information
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\securityhealthservice.exe
     12/16/1921 2:06 AM
   SEMgrSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Payments and NFC/SE Manager: Manages payments and Near Field Communication (NFC) based secure elements.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\semgrsvc.dll
     11/3/1979 8:29 PM
   SENS
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     System Event Notification Service: Monitors system events and notifies subscribers to COM+ Event System of these events.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\sens.dll
     3/8/1958 11:39 PM
   Sense
     "%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe"
     Windows Defender Advanced Threat Protection Service: Windows Defender Advanced Threat Protection service helps protect against advanced threats by monitoring and reporting security events that happen on the computer.
     Microsoft Corporation
     10.8792.27763.1022
     c:\program files\windows defender advanced threat protection\mssense.exe
     8/7/1943 1:23 AM
   SensorDataService
     %SystemRoot%\System32\SensorDataService.exe
     Sensor Data Service: Delivers data from a variety of sensors
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sensordataservice.exe
     5/21/2029 9:10 PM
   SensorService
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Sensor Service: A service for sensors that manages different sensors' functionality. Manages Simple Device Orientation (SDO) and History for sensors. Loads the SDO sensor that reports device orientation changes.  If this service is stopped or disabled, the SDO sensor will not be loaded and so auto-rotation will not occur. History collection from Sensors will also be stopped.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\sensorservice.dll
     9/16/1994 9:02 AM
   SensrSvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
     Sensor Monitoring Service: Monitors various sensors in order to expose data and adapt to system and user state.  If this service is stopped or disabled, the display brightness will not adapt to lighting conditions. Stopping this service may affect other system functionality and features as well.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sensrsvc.dll
     12/22/2034 3:18 PM
   SessionEnv
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Remote Desktop Configuration: Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sessenv.dll
     2/20/1994 6:03 PM
   SharedAccess
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Internet Connection Sharing (ICS): Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\ipnathlp.dll
     10/8/2036 10:51 PM
   ShellHWDetection
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Shell Hardware Detection: Provides notifications for AutoPlay hardware events.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\shsvcs.dll
     4/9/1954 8:50 AM
   smphost
     %SystemRoot%\System32\svchost.exe -k smphost
     Microsoft Storage Spaces SMP: Host service for the Microsoft Storage Spaces management provider. If this service is stopped or disabled, Storage Spaces cannot be managed.
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\smphost.dll
     12/6/1906 4:54 PM
   SmsRouter
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Microsoft Windows SMS Router Service.: Routes messages based on rules to appropriate clients.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\smsroutersvc.dll
     8/12/1970 2:20 PM
   SNMPTrap
     %SystemRoot%\System32\snmptrap.exe
     SNMP Trap: Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\snmptrap.exe
     3/12/1903 5:49 PM
   Spooler
     %SystemRoot%\System32\spoolsv.exe
     Print Spooler: This service spools print jobs and handles interaction with the printer.  If you turn off this service, you won't be able to print or see your printers.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\spoolsv.exe
     12/11/1938 6:00 AM
   sppsvc
     %SystemRoot%\system32\sppsvc.exe
     Software Protection: Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sppsvc.exe
     5/15/1945 3:03 PM
   SSDPSRV
     %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
     SSDP Discovery: Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ssdpsrv.dll
     11/9/2035 5:02 AM
   SstpSvc
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Secure Socket Tunneling Protocol Service: Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\sstpsvc.dll
     6/30/1987 10:24 PM
   StateRepository
     %SystemRoot%\system32\svchost.exe -k appmodel -p
     State Repository Service: Provides required infrastructure support for the application model.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.staterepository.dll
     2/1/1968 2:49 AM
   Steam Client Service
     "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
     Steam Client Service: Steam Client Service monitors and updates Steam content
     Valve Corporation
     9.75.83.25
     c:\program files (x86)\common files\steam\steamservice.exe
     5/19/2025 3:51 PM
   StiSvc
     %SystemRoot%\system32\svchost.exe -k imgsvc
     Windows Image Acquisition (WIA): Provides image acquisition services for scanners and cameras
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wiaservc.dll
     5/4/1908 3:09 AM
   StorSvc
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Storage Service: Provides enabling services for storage settings and external storage expansion
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\storsvc.dll
     9/24/1955 11:11 AM
   svsvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Spot Verifier: Verifies potential file system corruptions.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svsvc.dll
     7/18/1903 11:02 PM
   swprv
     %SystemRoot%\System32\svchost.exe -k swprv
     Microsoft Software Shadow Copy Provider: Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\swprv.dll
     1/9/1902 2:19 PM
   SysMain
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     SysMain: Maintains and improves system performance over time.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sysmain.dll
     5/28/1929 4:11 PM
   SystemEventsBroker
     %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
     System Events Broker: Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\systemeventsbrokerserver.dll
     1/12/2004 3:12 PM
   TapiSrv
     %SystemRoot%\System32\svchost.exe -k NetworkService -p
     Telephony: Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\tapisrv.dll
     11/5/1911 2:48 AM
   TermService
     %SystemRoot%\System32\svchost.exe -k NetworkService
     Remote Desktop Services: Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service.  To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\termsrv.dll
     12/18/2012 1:19 AM
   TextInputManagementService
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Text Input Management Service: Enables text input, expressive input, touch keyboard, handwriting, and IMEs.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\tabsvc.dll
     2/2/1960 6:00 AM
   Themes
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Themes: Provides user experience theme management.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\themeservice.dll
     11/8/2015 4:24 AM
   TieringEngineService
     %SystemRoot%\system32\TieringEngineService.exe
     Storage Tiers Management: Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\tieringengineservice.exe
     5/9/2025 10:44 PM
   TimeBrokerSvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Time Broker: Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\timebrokerserver.dll
     3/2/1907 12:17 PM
   TokenBroker
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Web Account Manager: This service is used by Web Account Manager to provide single-sign-on to apps and services.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tokenbroker.dll
     12/23/1975 12:08 PM
   TrkWks
     %SystemRoot%\System32\trkwks.dll
     Distributed Link Tracking Client: Maintains links between NTFS files within a computer or across computers in a network.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\trkwks.dll
     5/25/1930 6:38 PM
   TroubleshootingSvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Recommended Troubleshooting Service: Enables automatic mitigation for known problems by applying recommended troubleshooting. If stopped, your device will not get recommended troubleshooting for problems on your device.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mitigationclient.dll
     5/13/1986 12:45 AM
   TrustedInstaller
     %SystemRoot%\servicing\TrustedInstaller.exe
     Windows Modules Installer: Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\servicing\trustedinstaller.exe
     9/16/2011 4:38 AM
   tzautoupdate
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     Auto Time Zone Updater: Automatically sets the system time zone.
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\tzautoupdate.dll
     4/24/2037 3:11 PM
   UdkUserSvc
     %SystemRoot%\system32\svchost.exe -k UdkSvcGroup
     Udk User Service: Shell components service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windowsudkservices.shellcommon.dll
     3/11/2037 7:39 PM
   UdkUserSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
     UdkUserSvc_6d700: Shell components service
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   UmRdpService
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Remote Desktop Services UserMode Port Redirector: Allows the redirection of Printers/Drives/Ports for RDP connections
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\umrdp.dll
     5/26/2030 4:09 AM
   UnistoreSvc
     %SystemRoot%\System32\svchost.exe -k UnistackSvcGroup
     User Data Storage: Handles storage of structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\unistore.dll
     2/9/1971 7:09 AM
   UnistoreSvc_6d700
     C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
     UnistoreSvc_6d700: Handles storage of structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   upnphost
     %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
     UPnP Device Host: Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\upnphost.dll
     5/22/1996 12:13 AM
   UserDataSvc
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     User Data Access: Provides apps access to structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\userdataservice.dll
     9/7/1993 11:52 PM
   UserDataSvc_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     UserDataSvc_6d700: Provides apps access to structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   UserManager
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     User Manager: User Manager provides the runtime components required for multi-user interaction.  If this service is stopped, some applications may not operate correctly.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\usermgr.dll
     1/28/1976 12:12 PM
   UsoSvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Update Orchestrator Service: Manages Windows Updates. If stopped, your devices will not be able to download and install the latest updates.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\usosvc.dll
     12/31/1998 3:25 PM
   VaultSvc
     %SystemRoot%\system32\lsass.exe
     Credential Manager: Provides secure storage and retrieval of credentials to users, applications and security service packages.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\lsass.exe
     7/2/1934 8:05 AM
   vds
     %SystemRoot%\System32\vds.exe
     Virtual Disk: Provides management services for disks, volumes, file systems, and storage arrays.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\vds.exe
     3/11/2024 6:47 PM
   vmicguestinterface
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Hyper-V Guest Service Interface: Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmicheartbeat
     %systemroot%\system32\svchost.exe -k ICService -p
     Hyper-V Heartbeat Service: Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. This service helps you identify running virtual machines that have stopped responding.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmickvpexchange
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Hyper-V Data Exchange Service: Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmicrdv
     %systemroot%\system32\svchost.exe -k ICService -p
     Hyper-V Remote Desktop Virtualization Service: Provides a platform for communication between the virtual machine and the operating system running on the physical computer.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\icsvcext.dll
     7/28/2030 10:21 PM
   vmicshutdown
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Hyper-V Guest Shutdown Service: Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmictimesync
     %systemroot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Hyper-V Time Synchronization Service: Synchronizes the system time of this virtual machine with the system time of the physical computer.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmicvmsession
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Hyper-V PowerShell Direct Service: Provides a mechanism to manage virtual machine with PowerShell via VM session without a virtual network.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvc.dll
     2/22/1974 2:37 AM
   vmicvss
     %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Hyper-V Volume Shadow Copy Requestor: Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\icsvcvss.dll
     12/20/1970 10:37 PM
   VSS
     %systemroot%\system32\vssvc.exe
     Volume Shadow Copy: Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\vssvc.exe
     3/15/1947 9:55 AM
   W32Time
     %SystemRoot%\system32\svchost.exe -k LocalService
     Windows Time: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\w32time.dll
     12/9/2025 9:24 AM
   WaaSMedicSvc
     %systemroot%\system32\svchost.exe -k wusvcs -p
     WaaSMedicSvc: Enables remediation and protection of Windows Update components.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\waasmedicsvc.dll
     11/1/2034 12:41 AM
   WalletService
     %SystemRoot%\System32\svchost.exe -k appmodel -p
     WalletService: Hosts objects used by clients of the wallet
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\walletservice.dll
     3/31/1973 1:34 PM
   WarpJITSvc
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
     Warp JIT Service: Enables JIT compilation support in d3d10warp.dll for processes in which code generation is disabled.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\windows.warp.jitservice.dll
     9/27/1991 6:42 AM
   wbengine
     "%systemroot%\system32\wbengine.exe"
     Block Level Backup Engine Service: The WBENGINE service is used by Windows Backup to perform backup and recovery operations. If this service is stopped by a user, it may cause the currently running backup or recovery operation to fail. Disabling this service may disable backup and recovery operations using Windows Backup on this computer.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wbengine.exe
     1/30/2010 2:31 PM
   WbioSrvc
     %SystemRoot%\system32\svchost.exe -k WbioSvcGroup
     Windows Biometric Service: The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wbiosrvc.dll
     2/11/1943 10:26 AM
   Wcmsvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc
     Windows Connection Manager: Makes automatic connect and disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wcmsvc.dll
     5/26/1902 11:55 PM
   wcncsvc
     %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation -p
     Windows Connect Now - Config Registrar: WCNCSVC hosts the Windows Connect Now Configuration which is Microsoft's Implementation of Wireless Protected Setup (WPS) protocol. This is used to configure Wireless LAN settings for an Access Point (AP) or a Wireless Device. The service is started programmatically as needed.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wcncsvc.dll
     4/23/1951 1:19 PM
   WdiServiceHost
     %SystemRoot%\System32\svchost.exe -k LocalService -p
     Diagnostic Service Host: The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context.  If this service is stopped, any diagnostics that depend on it will no longer function.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\wdi.dll
     4/15/1909 5:51 PM
   WdiSystemHost
     %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
     Diagnostic System Host: The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context.  If this service is stopped, any diagnostics that depend on it will no longer function.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\wdi.dll
     4/15/1909 5:51 PM
   WdNisSvc
     "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.25040.2-0\NisSrv.exe"
     Microsoft Defender Antivirus Network Inspection Service: Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\nissrv.exe
     12/4/1988 11:40 AM
   WebClient
     %SystemRoot%\system32\svchost.exe -k LocalService -p
     WebClient: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\webclnt.dll
     10/2/1933 9:46 PM
   webthreatdefsvc
     %SystemRoot%\system32\svchost.exe -k WebThreatDefense -p
     Web Threat Defense Service: Web Threat Defense Endpoint Service helps protect your computer by identifying unauthorized entities attempting to gain access to user credentials
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\webthreatdefsvc.dll
     5/2/2003 7:03 AM
   webthreatdefusersvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Web Threat Defense User Service: Web Threat Defense User Service helps protect your computer by warning the user when unauthorized entities attempt to gain access to their credentials
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\webthreatdefusersvc.dll
     6/13/1944 9:30 AM
   webthreatdefusersvc_6d700
     C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     webthreatdefusersvc_6d700: Web Threat Defense User Service helps protect your computer by warning the user when unauthorized entities attempt to gain access to their credentials
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   Wecsvc
     %SystemRoot%\system32\svchost.exe -k NetworkService -p
     Windows Event Collector: This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\wecsvc.dll
     12/18/1987 6:30 AM
   WEPHOSTSVC
     %systemroot%\system32\svchost.exe -k WepHostSvcGroup
     Windows Encryption Provider Host Service: Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wephostsvc.dll
     4/28/1980 6:27 AM
   wercplsupport
     %SystemRoot%\System32\svchost.exe -k netsvcs -p
     Problem Reports Control Panel Support: This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports control panel.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wercplsupport.dll
     2/14/1958 12:55 PM
   WerSvc
     %SystemRoot%\System32\svchost.exe -k WerSvcGroup
     Windows Error Reporting Service: Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wersvc.dll
     1/29/2014 2:01 AM
   WFDSConMgrSvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Wi-Fi Direct Services Connection Manager Service: Manages connections to wireless services, including wireless display and docking.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wfdsconmgrsvc.dll
     1/1/1958 9:22 PM
   WiaRpc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     Still Image Acquisition Events: Launches applications associated with still image acquisition events.
     Microsoft Corporation
     10.0.26100.2161
     c:\windows\system32\wiarpc.dll
     3/11/1939 10:41 PM
   WinDefend
     "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MsMpEng.exe"
     Microsoft Defender Antivirus Service: Helps protect users from malware and other potentially unwanted software
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\msmpeng.exe
     6/24/1937 4:04 PM
   WinHttpAutoProxySvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     WinHTTP Web Proxy Auto-Discovery Service: WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\winhttp.dll
     4/23/2019 4:59 PM
   Winmgmt
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Windows Management Instrumentation: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wbem\wmisvc.dll
     3/13/2037 4:15 PM
   WinRM
     %SystemRoot%\System32\svchost.exe -k NetworkService -p
     Windows Remote Management (WS-Management): Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine.  The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wsmsvc.dll
     5/4/1927 8:55 AM
   wisvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Windows Insider Service: Provides infrastructure support for the Windows Insider Program. This service must remain enabled for the Windows Insider Program to work.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\flightsettings.dll
     4/30/2004 8:27 PM
   WlanSvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     WLAN AutoConfig: The WLANSVC service provides the logic required to configure, discover, connect to, and disconnect from a wireless local area network (WLAN) as defined by IEEE 802.11 standards. It also contains the logic to turn your computer into a software access point so that other devices or computers can connect to your computer wirelessly using a WLAN adapter that can support this. Stopping or disabling the WLANSVC service will make all WLAN adapters on your computer inaccessible from the Windows networking UI. It is strongly recommended that you have the WLANSVC service running if your computer has a WLAN adapter.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wlansvc.dll
     8/28/1983 3:33 PM
   wlidsvc
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Microsoft Account Sign-in Assistant: Enables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wlidsvc.dll
     7/26/2009 4:36 PM
   wlpasvc
     %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
     Local Profile Assistant Service: This service provides profile management for subscriber identity modules
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\lpasvc.dll
     1/27/1925 7:07 PM
   WManSvc
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Windows Management Service: Performs management including Provisioning and Enrollment activities
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.management.service.dll
     1/15/1925 12:59 PM
   wmiApSrv
     %systemroot%\system32\wbem\WmiApSrv.exe
     WMI Performance Adapter: Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wbem\wmiapsrv.exe
     3/12/2004 11:26 AM
   WMPNetworkSvc
     "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe"
     Windows Media Player Network Sharing Service: Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play
     Microsoft Corporation
     12.0.26100.1882
     c:\program files\windows media player\wmpnetwk.exe
     1/6/1999 12:00 AM
   workfolderssvc
     %SystemRoot%\System32\svchost.exe -k LocalService -p
     Work Folders: This service syncs files with the Work Folders server, enabling you to use the files on any of the PCs and devices on which you've set up Work Folders.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\workfolderssvc.dll
     2/27/1955 4:41 PM
   WpcMonSvc
     %SystemRoot%\system32\svchost.exe -k LocalService
     Parental Controls: Enforces parental controls for child accounts in Windows. If this service is stopped or disabled, parental controls may not be enforced.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wpcdesktopmonsvc.dll
     8/13/2006 3:44 AM
   WPDBusEnum
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
     Portable Device Enumerator Service: Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wpdbusenum.dll
     8/10/1918 12:01 AM
   WpnService
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Windows Push Notifications System Service: This service runs in session 0 and hosts the notification platform and connection provider which handles the connection between the device and WNS server.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wpnservice.dll
     6/1/2016 9:39 AM
   WpnUserService
     %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
     Windows Push Notifications User Service: This service hosts Windows notification platform which provides support for local and push notifications. Supported notifications are tile, toast and raw.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wpnuserservice.dll
     5/23/1988 2:53 AM
   WpnUserService_6d700
     C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
     WpnUserService_6d700: This service hosts Windows notification platform which provides support for local and push notifications. Supported notifications are tile, toast and raw.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\svchost.exe
     10/6/1968 10:08 AM
   WSAIFabricSvc
     %systemroot%\system32\svchost.exe -k WSAIFabricSvcGroup -p
     WSAIFabricSvc: Provides support to communicate with AIFabric in Local service context over COM.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wsaifabrichost.dll
     7/27/1906 11:21 PM
   wscsvc
     %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
     Security Center: The WSCSVC (Windows Security Center) service monitors and reports security health settings on the computer.  The health settings include firewall (on/off), antivirus (on/off/out of date), antispyware (on/off/out of date), Windows Update (automatically/manually download and install updates), User Account Control (on/off), and Internet settings (recommended/not recommended). The service provides COM APIs for independent software vendors to register and record the state of their products to the Security Center service.  The Security and Maintenance UI uses the service to provide systray alerts and a graphical view of the security health states in the Security and Maintenance control panel.  Network Access Protection (NAP) uses the service to report the security health states of clients to the NAP Network Policy Server to make network quarantine decisions.  The service also has a public API that allows external consumers to programmatically retrieve the aggregated security health state of the system.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wscsvc.dll
     5/18/1906 11:51 PM
   WSearch
     %systemroot%\system32\SearchIndexer.exe /Embedding
     Windows Search: Provides content indexing, property caching, and search results for files, e-mail, and other content.
     Microsoft Corporation
     7.0.26100.4061
     c:\windows\system32\searchindexer.exe
     11/8/2035 3:41 PM
   wuauserv
     %systemroot%\system32\svchost.exe -k netsvcs -p
     Windows Update: Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.
     Microsoft Corporation
     1310.2503.26012.0
     c:\windows\system32\wuaueng.dll
     11/18/2030 7:11 PM
   WwanSvc
     %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
     WWAN AutoConfig: This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wwansvc.dll
     3/21/2004 9:32 AM
   XblAuthManager
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Xbox Live Auth Manager: Provides authentication and authorization services for interacting with Xbox Live. If this service is stopped, some applications may not operate correctly.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\xblauthmanager.dll
     2/24/1908 7:09 PM
   XblGameSave
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Xbox Live Game Save: This service syncs save data for Xbox Live save enabled games.  If this service is stopped, game save data will not upload to or download from Xbox Live.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\xblgamesave.dll
     2/25/1936 10:45 AM
   XboxGipSvc
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Xbox Accessory Management Service: This service manages connected Xbox Accessories.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\xboxgipsvc.dll
     12/28/1975 12:34 AM
   XboxNetApiSvc
     %SystemRoot%\system32\svchost.exe -k netsvcs -p
     Xbox Live Networking Service: This service supports the Windows.Networking.XboxLive application programming interface.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\xboxnetapisvc.dll
     10/9/1918 6:52 AM
   ZTHELPER
     %SystemRoot%\system32\svchost.exe -k zthelper -p
     ZTHELPER: ZTHELPER
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\zthelper.dll
     10/31/1970 9:14 AM
   GigabyteUpdateService
     %SystemRoot%\system32\GigabyteUpdateService.exe 
     GIGABYTE Update Service: GIGABYTE Update Service
     GIGA-BYTE TECHNOLOGY CO., LTD.
     1.0.0.16
     c:\windows\system32\gigabyteupdateservice.exe
     1/6/2025 1:29 AM

HKLM\System\CurrentControlSet\Services
   1394ohci
     \SystemRoot\System32\drivers\1394ohci.sys
     1394 OHCI Compliant Host Controller: 1394 OpenHCI Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\1394ohci.sys
     12/27/1932 9:35 AM
   3ware
     System32\drivers\3ware.sys
     3ware: LSI 3ware SCSI Storport Driver
     LSI
     5.1.0.51
     c:\windows\system32\drivers\3ware.sys
     5/18/2015 6:28 PM
   ACPI
     System32\drivers\ACPI.sys
     Microsoft ACPI Driver: ACPI Driver for NT
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\acpi.sys
     1/11/1966 1:34 PM
   AcpiDev
     \SystemRoot\System32\drivers\AcpiDev.sys
     ACPI Devices driver: ACPI Devices Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\acpidev.sys
     6/2/1989 6:30 PM
   acpiex
     System32\Drivers\acpiex.sys
     Microsoft ACPIEx Driver: ACPIEx Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\acpiex.sys
     5/6/1972 7:01 AM
   acpipagr
     \SystemRoot\System32\DriverStore\FileRepository\acpipagr.inf_amd64_d1093347a27ff89c\acpipagr.sys
     ACPI Processor Aggregator Driver: ACPI Processor Aggregator Device Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\acpipagr.inf_amd64_d1093347a27ff89c\acpipagr.sys
     12/8/1987 2:22 PM
   AcpiPmi
     \SystemRoot\System32\DriverStore\FileRepository\acpipmi.inf_amd64_3ced06eb61dcc792\acpipmi.sys
     ACPI Power Meter Driver: ACPI Power Metering Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\acpipmi.inf_amd64_3ced06eb61dcc792\acpipmi.sys
     11/16/1997 2:54 AM
   acpitime
     \SystemRoot\System32\drivers\acpitime.sys
     ACPI Wake Alarm Driver: ACPI Wake Alarm
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\acpitime.sys
     7/30/1902 10:34 AM
   Acx01000
     system32\drivers\Acx01000.sys
     Acx01000: Audio KMDF Class Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\acx01000.sys
     6/23/1907 1:53 PM
   ADP80XX
     System32\drivers\ADP80XX.SYS
     ADP80XX: PMC-Sierra Storport  Driver For SPC8x6G SAS/SATA controller
     PMC-Sierra
     1.3.0.10769
     c:\windows\system32\drivers\adp80xx.sys
     4/9/2015 4:49 PM
   AFD
     \SystemRoot\system32\drivers\afd.sys
     Ancillary Function Driver for Winsock: Ancillary Function Driver for Winsock
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\afd.sys
     12/7/2004 11:59 AM
   afunix
     \SystemRoot\system32\drivers\afunix.sys
     afunix: AF_UNIX socket provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\afunix.sys
     11/10/1994 6:14 PM
   ahcache
     system32\DRIVERS\ahcache.sys
     Application Compatibility Cache: Cache Compatibility Data and Attributes for Individual PE File
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ahcache.sys
     5/5/1980 4:12 PM
   AmdAppCompat
     \SystemRoot\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompat.sys
     AMD Application Compatibility Database: AMD Application Compatibility Database
     Advanced Micro Devices
     1.0.0.3
     c:\windows\system32\driverstore\filerepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\amdappcompat.sys
     12/27/2024 1:38 AM
   amdfendr
     \SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendr.sys
     AMD Crash Defender Driver: AMD Crash Defender
     Advanced Micro Devices, Inc.
     24.20.0.3
     c:\windows\system32\driverstore\filerepository\amdfendr.inf_amd64_987f8cede005f427\amdfendr.sys
     5/7/2024 4:05 PM
   amdfendrmgr
     \SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys
     AMD Crash Defender Manager Driver: AMD Crash Defender Manager Driver
     Advanced Micro Devices, Inc.
     24.20.0.3
     c:\windows\system32\driverstore\filerepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys
     5/7/2024 4:05 PM
   amdgpio2
     \SystemRoot\System32\drivers\amdgpio2.sys
     AMD GPIO Client Driver: AMD GPIO Controller Driver
     Advanced Micro Devices, Inc
     2.2.0.134
     c:\windows\system32\drivers\amdgpio2.sys
     8/20/2024 2:25 AM
   amdi2c
     \SystemRoot\System32\drivers\amdi2c.sys
     AMD I2C Controller Service: AMD I2C Controller Driver
     Advanced Micro Devices, Inc
     1.2.0.126
     c:\windows\system32\drivers\amdi2c.sys
     8/20/2024 8:33 AM
   AmdK8
     \SystemRoot\System32\drivers\amdk8.sys
     AMD K8 Processor Driver: Processor Device Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\amdk8.sys
     7/26/1991 10:20 AM
   AmdPpkg
     \SystemRoot\System32\DriverStore\FileRepository\amdppkg.inf_amd64_3b35ade6b9714417\AmdPpkg.sys
     AMD Provisioning Packages: AMD Provisioning Packages
     Advanced Micro Devices
     8.0.0.52
     c:\windows\system32\driverstore\filerepository\amdppkg.inf_amd64_3b35ade6b9714417\amdppkg.sys
     3/27/2025 6:29 AM
   AmdPPM
     \SystemRoot\System32\drivers\amdppm.sys
     AMD Processor Driver: Processor Device Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\amdppm.sys
     10/22/1943 6:14 PM
   amdpsp
     System32\drivers\amdpsp.sys
     AMD PSP Service: amdpsp sys
     Advanced Micro Devices, Inc. 
     5.39.0.0
     c:\windows\system32\drivers\amdpsp.sys
     3/11/2025 4:57 PM
   amdsata
     System32\drivers\amdsata.sys
     amdsata: AHCI 1.3 Device Driver
     Advanced Micro Devices
     1.1.3.277
     c:\windows\system32\drivers\amdsata.sys
     5/14/2015 8:14 AM
   amdsbs
     System32\drivers\amdsbs.sys
     amdsbs: AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform
     AMD Technologies Inc.
     3.7.1540.43
     c:\windows\system32\drivers\amdsbs.sys
     12/11/2012 5:21 PM
   amduw23g
     \SystemRoot\System32\DriverStore\FileRepository\u0405277.inf_amd64_00f6bd87014da3b2\B404941\amdkmdag.sys
     amduw23g: ATI Radeon Kernel Mode Driver
     Advanced Micro Devices, Inc.
     32.0.11024.2
     c:\windows\system32\driverstore\filerepository\u0405277.inf_amd64_00f6bd87014da3b2\b404941\amdkmdag.sys
     6/25/2024 5:00 PM
   amdwps
     System32\drivers\amdwps.sys
     AMD Workload Profiling Scheduling Driver: AMD Workload Profiling Scheduling Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\amdwps.sys
     11/2/2002 12:34 PM
   amdxata
     System32\drivers\amdxata.sys
     amdxata: Storage Filter Driver
     Advanced Micro Devices
     1.1.3.277
     c:\windows\system32\drivers\amdxata.sys
     4/30/2015 8:55 PM
   AppID
     system32\drivers\appid.sys
     AppID Driver: Identifies an application and enforces software restriction policies.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\appid.sys
     11/5/2028 9:49 PM
   AppleSSD
     System32\drivers\AppleSSD.sys
     Apple Solid State Drive Device: Apple Solid State Drive Device
     Apple Inc.
     6.1.7800.1
     c:\windows\system32\drivers\applessd.sys
     11/11/2019 5:24 PM
   applockerfltr
     system32\drivers\applockerfltr.sys
     Smartlocker Filter Driver: Identifies files created by authorized installers.
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\drivers\applockerfltr.sys
     6/23/1939 7:13 PM
   AppvStrm
     \SystemRoot\system32\drivers\AppvStrm.sys
     AppvStrm: Microsoft App-V Streaming Mini-Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\appvstrm.sys
     7/15/1977 10:58 PM
   AppvVemgr
     \SystemRoot\system32\drivers\AppvVemgr.sys
     AppvVemgr: Microsoft App-V Virtual Environment Manager Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\appvvemgr.sys
     9/20/1999 8:36 PM
   AppvVfs
     \SystemRoot\system32\drivers\AppvVfs.sys
     AppvVfs: Microsoft App-V VFS Mini-Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\appvvfs.sys
     11/11/2030 10:19 AM
   arcsas
     System32\drivers\arcsas.sys
     Adaptec SAS/SATA-II RAID Storport's Miniport Driver: Adaptec SAS RAID WS03 Driver
     PMC-Sierra, Inc.
     7.5.0.32048
     c:\windows\system32\drivers\arcsas.sys
     4/9/2015 3:12 PM
   AsyncMac
     \SystemRoot\System32\drivers\asyncmac.sys
     RAS Asynchronous Media Driver: RAS Asynchronous Media Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\asyncmac.sys
     4/7/1985 11:02 AM
   atapi
     System32\drivers\atapi.sys
     IDE Channel: ATAPI IDE Miniport Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\atapi.sys
     8/16/2005 9:36 AM
   AtiHDAudioService
     \SystemRoot\system32\drivers\AtihdWT6.sys
     AMD Function Driver for HD Audio Service: AMD High Definition Audio Function Driver
     Advanced Micro Devices
     10.0.1.24
     c:\windows\system32\drivers\atihdwt6.sys
     6/22/2022 9:18 AM
   b06bdrv
     System32\drivers\bxvbda.sys
     QLogic Network Adapter VBD: QLogic Gigabit Ethernet VBD
     QLogic Corporation
     7.12.31.105
     c:\windows\system32\drivers\bxvbda.sys
     5/25/2016 3:03 AM
   bam
     system32\drivers\bam.sys
     Background Activity Moderator Driver: Controls activity of background applications
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\bam.sys
     1/22/1940 5:44 PM
   BasicDisplay
     \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_a0afd1c1603bc477\BasicDisplay.sys
     BasicDisplay: Microsoft Basic Display Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\basicdisplay.inf_amd64_a0afd1c1603bc477\basicdisplay.sys
     8/24/2019 9:05 PM
   BasicRender
     \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_5a35c75db01c44c7\BasicRender.sys
     BasicRender: Microsoft Basic Render Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\basicrender.inf_amd64_5a35c75db01c44c7\basicrender.sys
     9/23/1902 2:08 PM
   bcmfn2
     \SystemRoot\System32\drivers\bcmfn2.sys
     bcmfn2 Service: BCM Function 2  Device Driver
     Windows (R) Win 7 DDK provider
     6.3.9600.17336
     c:\windows\system32\drivers\bcmfn2.sys
     10/31/2016 10:09 PM
   Beep
     Beep
     Beep: BEEP Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\beep.sys
     6/8/2017 4:05 AM
   bfs
     \SystemRoot\system32\drivers\bfs.sys
     Brokering File System: Brokers file system for AppSilos.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bfs.sys
     12/21/1927 4:56 PM
   bindflt
     \SystemRoot\system32\drivers\bindflt.sys
     Windows Bind Filter Driver: Binds filesystem namespaces to different locations and hides this remapping from the user
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\bindflt.sys
     5/10/1923 10:41 AM
   bowser
     system32\DRIVERS\bowser.sys
     Browser: NT Lan Manager Datagram Receiver Driver
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\bowser.sys
     2/7/2011 8:24 PM
   BthA2dp
     \SystemRoot\System32\drivers\BthA2dp.sys
     Microsoft Bluetooth A2dp driver: Bluetooth A2DP Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\btha2dp.sys
     2/23/1942 8:39 PM
   BthEnum
     \SystemRoot\System32\drivers\BthEnum.sys
     Bluetooth Enumerator Service: Bluetooth Bus Extender
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bthenum.sys
     10/19/1963 6:40 AM
   BthHFEnum
     \SystemRoot\System32\drivers\bthhfenum.sys
     Microsoft Bluetooth Hands-Free Profile driver: Bluetooth Hands-Free Audio and Call Control HID Enumerator
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\bthhfenum.sys
     6/20/1997 6:50 AM
   BthLEEnum
     \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
     Bluetooth Low Energy Driver: Legacy Bluetooth LE Bus Enumerator
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\microsoft.bluetooth.legacy.leenumerator.sys
     11/19/2033 8:37 PM
   BthMini
     \SystemRoot\System32\drivers\BTHMINI.sys
     Bluetooth Radio Driver: Bluetooth Transport Extensibility Miniport Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bthmini.sys
     10/10/1989 4:06 PM
   BTHMODEM
     \SystemRoot\System32\drivers\bthmodem.sys
     Bluetooth Modem Communications Driver: Bluetooth Communications Driver
     Microsoft Corporation
     10.0.26100.2161
     c:\windows\system32\drivers\bthmodem.sys
     1/12/2009 1:08 AM
   BthPan
     \SystemRoot\System32\drivers\bthpan.sys
     Bluetooth Device (Personal Area Network): Bluetooth Device (Personal Area Network)
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bthpan.sys
     8/29/2014 6:05 PM
   BTHPORT
     \SystemRoot\System32\drivers\BTHport.sys
     Bluetooth Port Driver: Bluetooth Bus Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bthport.sys
     1/25/1923 5:06 PM
   BTHUSB
     \SystemRoot\System32\drivers\BTHUSB.sys
     Bluetooth Radio USB Driver: Bluetooth Miniport Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\bthusb.sys
     1/15/2031 1:29 PM
   bttflt
     System32\drivers\bttflt.sys
     Microsoft Hyper-V VHDPMEM BTT Filter: VHD BTT Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\bttflt.sys
     9/17/2027 12:30 PM
   buttonconverter
     \SystemRoot\System32\drivers\buttonconverter.sys
     Service for Portable Device Control devices: Button Converter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\buttonconverter.sys
     5/16/2004 9:50 PM
   CAD
     \SystemRoot\System32\drivers\CAD.sys
     Charge Arbitration Driver: Charge Arbiration Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\cad.sys
     4/7/1952 3:49 AM
   CDD
     \SystemRoot\System32\cdd.dll
     Canonical Display Driver: Provides legacy GDI support for the video driver stack.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\cdd.dll
     10/2/1951 5:06 PM
   cdrom
     \SystemRoot\System32\drivers\cdrom.sys
     CD-ROM Driver: SCSI CD-ROM Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\cdrom.sys
     9/10/1956 5:44 PM
   cht4iscsi
     System32\drivers\cht4sx64.sys
     cht4iscsi: Chelsio iSCSI VMiniport Driver
     Chelsio Communications
     6.11.4.100
     c:\windows\system32\drivers\cht4sx64.sys
     2/5/2019 9:51 AM
   cht4vbd
     \SystemRoot\System32\drivers\cht4vx64.sys
     Chelsio Virtual Bus Driver: Virtual Bus Driver for Chelsio ® T5/T6 Chipset
     Chelsio Communications
     6.11.4.100
     c:\windows\system32\drivers\cht4vx64.sys
     2/5/2019 9:47 AM
   CimFS
     CimFS
     CimFS: CimFS driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\cimfs.sys
     12/25/1912 11:10 AM
   circlass
     \SystemRoot\System32\drivers\circlass.sys
     Consumer IR Devices: Consumer IR Class Driver for eHome
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\circlass.sys
     9/29/1919 2:56 PM
   CldFlt
     system32\drivers\cldflt.sys
     Windows Cloud Files Filter Driver: Cloud Files Mini Filter Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\cldflt.sys
     1/4/1906 2:08 AM
   CLFS
     System32\drivers\CLFS.sys
     Common Log (CLFS): General-purpose logging service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\clfs.sys
     3/27/2015 12:27 PM
   CmBatt
     \SystemRoot\System32\drivers\CmBatt.sys
     Microsoft ACPI Control Method Battery Driver: Control Method Battery Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\cmbatt.sys
     3/9/1935 9:12 PM
   CNG
     System32\Drivers\cng.sys
     CNG: Kernel Cryptography, Next Generation
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\cng.sys
     5/31/1954 7:32 PM
   CompositeBus
     \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\CompositeBus.sys
     Composite Bus Enumerator Driver: Multi-Transport Composite Bus Enumerator
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\compositebus.inf_amd64_8cf6fa9d3afdfa25\compositebus.sys
     10/16/1925 9:06 AM
   condrv
     System32\drivers\condrv.sys
     Console Driver: Console Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\condrv.sys
     12/22/1981 2:03 AM
   CSC
     system32\drivers\csc.sys
     Offline Files Driver: Allows network files to be used while the local computer is offline.
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\csc.sys
     1/28/1943 3:59 PM
   CTIIO
     \??\C:\WINDOWS\system32\drivers\CtiIo64.sys
     CTIIO: CTI IO driver
     Creative Technology Innovation Co., LTd.
     1.1.24.709
     c:\windows\system32\drivers\ctiio64.sys
     7/8/2024 10:39 PM
   dam
     system32\drivers\dam.sys
     Desktop Activity Moderator Driver: Controls activity of desktop applications
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\dam.sys
     10/10/1965 2:33 AM
   dc1-controller
     \SystemRoot\System32\drivers\dc1-controller.sys
     Xbox Peripherals Driver: KMDF driver for DC1 Controller
     Microsoft Corp.
     1.0.0.1
     c:\windows\system32\drivers\dc1-controller.sys
     7/17/2004 9:39 PM
   devmap
     \SystemRoot\System32\DriverStore\FileRepository\devmap.inf_amd64_1993197f4612e967\devmap.sys
     Usermode Device Mapper Service: Device Mapper Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\devmap.inf_amd64_1993197f4612e967\devmap.sys
     10/25/2004 10:40 PM
   Dfsc
     System32\Drivers\dfsc.sys
     DFS Namespace Client Driver: Client driver for access to DFS Namespaces
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\dfsc.sys
     2/9/2019 5:50 AM
   disk
     System32\drivers\disk.sys
     Disk Driver: PnP Disk Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\disk.sys
     11/2/1945 2:09 PM
   DisplayMux
     \SystemRoot\System32\DriverStore\FileRepository\displaymux.inf_amd64_da65a70f0c3ce0f3\DisplayMux.sys
     Microsoft DisplayMux: Display Mux Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\displaymux.inf_amd64_da65a70f0c3ce0f3\displaymux.sys
     1/11/1986 7:04 PM
   dmvsc
     \SystemRoot\System32\drivers\dmvsc.sys
     dmvsc: Dynamic Memory
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\dmvsc.sys
     2/7/1941 12:34 PM
   drmkaud
     \SystemRoot\System32\drivers\drmkaud.sys
     Microsoft Trusted Audio Drivers: Microsoft Trusted Audio Drivers
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\drmkaud.sys
     10/27/1910 3:56 AM
   DXGKrnl
     System32\drivers\dxgkrnl.sys
     LDDM Graphics Subsystem: Controls the underlying video driver stacks to provide fully-featured display capabilities.
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\dxgkrnl.sys
     7/23/1942 12:32 PM
   ebdrv
     System32\drivers\evbda.sys
     QLogic 10 Gigabit Ethernet Adapter VBD: QLogic 10 GigE VBD
     Marvell Semiconductor Inc.
     7.13.171.102
     c:\windows\system32\drivers\evbda.sys
     11/15/2020 6:12 AM
   ebdrv0
     System32\drivers\evbd0a.sys
     QLogic Legacy Ethernet Adapter VBD: QLogic 10 GigE VBD
     QLogic Corporation
     7.13.65.105
     c:\windows\system32\drivers\evbd0a.sys
     11/7/2020 6:07 AM
   EhStorClass
     System32\drivers\EhStorClass.sys
     Enhanced Storage Filter Driver: Enhanced Storage Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ehstorclass.sys
     5/19/1997 4:42 PM
   EhStorTcgDrv
     System32\drivers\EhStorTcgDrv.sys
     Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols: Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ehstortcgdrv.sys
     3/9/1907 11:11 PM
   ErrDev
     \SystemRoot\System32\drivers\errdev.sys
     Microsoft Hardware Error Device Driver: Error Device Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\errdev.sys
     7/28/1951 6:01 AM
   ExecutionContext
     System32\Drivers\ExecutionContext.sys
     CPU Scheduler for High Performance I/O: CPU Scheduler for High Performance I/O
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\executioncontext.sys
     2/17/1970 5:16 PM
   exfat
     exfat
     exFAT File System Driver: exFAT File System Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\exfat.sys
     9/16/2005 4:43 PM
   fastfat
     fastfat
     FAT12/16/32 File System Driver: Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces)
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\fastfat.sys
     3/26/1988 6:49 AM
   fdc
     \SystemRoot\System32\drivers\fdc.sys
     Floppy Disk Controller Driver: Floppy Disk Controller Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\fdc.sys
     8/4/2005 11:03 PM
   FileCrypt
     system32\drivers\filecrypt.sys
     FileCrypt: Windows sandboxing and encryption filter.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\filecrypt.sys
     7/26/1939 11:38 AM
   FileInfo
     System32\drivers\fileinfo.sys
     File Information FS MiniFilter: Collects information about files in memory to be consumed by other system services.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\fileinfo.sys
     2/24/1957 3:01 PM
   Filetrace
     system32\drivers\filetrace.sys
     Filetrace: ETW File Trace Filter
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\filetrace.sys
     12/2/1985 4:55 AM
   flpydisk
     \SystemRoot\System32\drivers\flpydisk.sys
     Floppy Disk Driver: Floppy Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\flpydisk.sys
     5/7/2004 4:09 PM
   FltMgr
     system32\drivers\fltmgr.sys
     FltMgr: File System Filter Manager Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\fltmgr.sys
     12/15/2021 7:43 PM
   FsDepends
     System32\drivers\FsDepends.sys
     File System Dependency Minifilter: This minifilter tracks the dependencies associated with the various nested volumes/filesystems
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\fsdepends.sys
     11/16/2012 7:09 AM
   fvevol
     System32\DRIVERS\fvevol.sys
     BitLocker Drive Encryption Filter Driver: BitLocker Drive Encryption Filter Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\fvevol.sys
     5/15/2019 7:54 AM
   gdrv3
     \??\C:\WINDOWS\System32\drivers\gdrv3.sys
     gdrv3: GIGA-BYTE Nonpnp Driver
     GIGA-BYTE TECHNOLOGY CO., LTD.
     1.3.911.1
     c:\windows\system32\drivers\gdrv3.sys
     9/10/2024 11:09 PM
   gencounter
     \SystemRoot\System32\drivers\vmgencounter.sys
     Microsoft Hyper-V Generation Counter: Virtual Machine Generation Counter
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vmgencounter.sys
     5/29/1979 5:18 AM
   genericusbfn
     \SystemRoot\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_7c70b7fb8f0e88ff\genericusbfn.sys
     Generic USB Function Class: Generic USB Function Class Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\genericusbfn.inf_amd64_7c70b7fb8f0e88ff\genericusbfn.sys
     8/10/1997 11:35 AM
   GenPass
     System32\DriverStore\FileRepository\genpass.inf_amd64_0c82d80c9252c9bd\genpass.sys
     Microsoft GenPass Driver: Generic pass-through driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\genpass.inf_amd64_0c82d80c9252c9bd\genpass.sys
     12/1/2010 7:42 AM
   GPIOClx0101
     System32\Drivers\msgpioclx.sys
     Microsoft GPIO Class Extension Driver: GPIO Class Extension Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\msgpioclx.sys
     3/27/1943 10:38 PM
   HdAudAddService
     \SystemRoot\System32\drivers\HdAudio.sys
     Microsoft 1.1 UAA Function Driver for High Definition Audio Service: High Definition Audio Function Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\hdaudio.sys
     7/6/1955 5:33 PM
   HDAudBus
     \SystemRoot\System32\drivers\HDAudBus.sys
     Microsoft UAA Bus Driver for High Definition Audio: High Definition Audio Bus Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\hdaudbus.sys
     10/24/1933 9:14 AM
   HidBatt
     \SystemRoot\System32\drivers\HidBatt.sys
     HID UPS Battery Driver: Hid Battery Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidbatt.sys
     12/4/1917 12:03 AM
   HidBth
     \SystemRoot\System32\drivers\hidbth.sys
     Microsoft Bluetooth HID Miniport: Bluetooth Miniport Driver for HID Devices
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidbth.sys
     5/1/2013 9:36 PM
   hidi2c
     \SystemRoot\System32\drivers\hidi2c.sys
     Microsoft I2C HID Miniport Driver: I2C HID Miniport Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidi2c.sys
     7/19/2015 11:14 PM
   hidinterrupt
     \SystemRoot\System32\drivers\hidinterrupt.sys
     Common Driver for HID Buttons implemented with interrupts: HID Button over Interrupt Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidinterrupt.sys
     5/14/1920 10:12 AM
   HidIr
     \SystemRoot\System32\drivers\hidir.sys
     Microsoft Infrared HID Driver: Infrared Miniport Driver for Input Devices
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidir.sys
     2/15/1987 3:39 PM
   hidspi
     \SystemRoot\System32\drivers\hidspi.sys
     Microsoft SPI HID Miniport Driver: SPI HID Miniport Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\hidspi.sys
     11/7/1985 6:17 AM
   HidSpiCx
     system32\drivers\HidSpiCx.sys
     HidSpi KMDF Class Extension: HidSpi KMDF Class Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hidspicx.sys
     4/21/2037 9:15 PM
   HidUsb
     \SystemRoot\System32\drivers\hidusb.sys
     Microsoft HID Class Driver: USB Miniport Driver for Input Devices
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\hidusb.sys
     4/16/1965 2:56 AM
   HpSAMD
     System32\drivers\HpSAMD.sys
     HpSAMD: Smart Array SAS/SATA Controller Media Driver
     Hewlett-Packard Company
     8.0.4.0
     c:\windows\system32\drivers\hpsamd.sys
     3/26/2013 5:36 PM
   Hsp
     \SystemRoot\System32\drivers\Hsp.sys
     Microsoft Pluton Service: HSP Device Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\hsp.sys
     7/31/1924 4:38 PM
   HTTP
     system32\drivers\HTTP.sys
     HTTP Service: HTTP Service
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\http.sys
     6/18/2014 3:23 AM
   hvservice
     \SystemRoot\System32\drivers\hvservice.sys
     Microsoft Hypervisor Service Driver: Hypervisor Boot Driver
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\drivers\hvservice.sys
     1/22/1902 6:56 AM
   HWiNFO_204
     \??\C:\Users\peter\AppData\Local\Temp\HWiNFO_x64_204.sys
     HWiNFO Kernel Driver (v204): HWiNFO AMD64 Kernel Driver
     REALiX
     12.4.0.0
     c:\users\peter\appdata\local\temp\hwinfo_x64_204.sys
     10/5/2024 5:09 PM
   HwNClx0101
     System32\Drivers\mshwnclx.sys
     Microsoft Hardware Notifications Class Extension Driver: Hardware Notification Class Extension Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mshwnclx.sys
     11/21/1987 11:20 AM
   hwpolicy
     System32\drivers\hwpolicy.sys
     Hardware Policy Driver: Contains Processor and other policies
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\hwpolicy.sys
     3/21/1906 12:51 PM
   hyperkbd
     \SystemRoot\System32\drivers\hyperkbd.sys
     hyperkbd: Microsoft VMBus Synthetic Keyboard Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hyperkbd.sys
     2/2/1973 11:34 PM
   HyperVideo
     \SystemRoot\System32\drivers\HyperVideo.sys
     HyperVideo: Microsoft VMBus Video Device Miniport Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\hypervideo.sys
     5/1/1940 3:23 AM
   I3CHost
     \SystemRoot\System32\DriverStore\FileRepository\i3chost.inf_amd64_6e0d8c9e564573aa\I3CHost.sys
     I3C Host Controller Service: I3C HostController Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\driverstore\filerepository\i3chost.inf_amd64_6e0d8c9e564573aa\i3chost.sys
     5/5/1997 3:52 AM
   i8042prt
     \SystemRoot\System32\drivers\i8042prt.sys
     i8042 Keyboard and PS/2 Mouse Port Driver: i8042 Port Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\i8042prt.sys
     5/21/1966 6:10 AM
   iagpio
     \SystemRoot\System32\drivers\iagpio.sys
     Intel Serial IO GPIO Controller Driver: Intel(R) Serial IO GPIO Controller Driver
     Intel(R) Corporation
     1.1.1.0
     c:\windows\system32\drivers\iagpio.sys
     7/23/2018 5:04 AM
   iai2c
     \SystemRoot\System32\drivers\iai2c.sys
     Intel(R) Serial IO I2C Host Controller: Intel(R) Serial IO I2C Driver
     Intel(R) Corporation
     1.1.1.0
     c:\windows\system32\drivers\iai2c.sys
     7/23/2018 5:04 AM
   iaLPSS2i_GPIO2
     \SystemRoot\System32\drivers\iaLPSS2i_GPIO2.sys
     Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2
     Intel Corporation
     30.100.1816.3
     c:\windows\system32\drivers\ialpss2i_gpio2.sys
     4/19/2018 3:53 AM
   iaLPSS2i_GPIO2_BXT_P
     \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys
     Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2
     Intel Corporation
     30.100.1816.1
     c:\windows\system32\drivers\ialpss2i_gpio2_bxt_p.sys
     4/17/2018 5:25 AM
   iaLPSS2i_GPIO2_CNL
     \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_CNL.sys
     Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2
     Intel Corporation
     30.100.1816.3
     c:\windows\system32\drivers\ialpss2i_gpio2_cnl.sys
     4/17/2018 3:07 AM
   iaLPSS2i_GPIO2_GLK
     \SystemRoot\System32\drivers\iaLPSS2i_GPIO2_GLK.sys
     Intel(R) Serial IO GPIO Driver v2: Intel(R) Serial IO GPIO Driver v2
     Intel Corporation
     30.100.1820.1
     c:\windows\system32\drivers\ialpss2i_gpio2_glk.sys
     5/16/2018 1:46 AM
   iaLPSS2i_I2C
     \SystemRoot\System32\drivers\iaLPSS2i_I2C.sys
     Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2
     Intel Corporation
     30.100.1816.3
     c:\windows\system32\drivers\ialpss2i_i2c.sys
     4/19/2018 3:52 AM
   iaLPSS2i_I2C_BXT_P
     \SystemRoot\System32\drivers\iaLPSS2i_I2C_BXT_P.sys
     Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2
     Intel Corporation
     30.100.1816.1
     c:\windows\system32\drivers\ialpss2i_i2c_bxt_p.sys
     4/17/2018 5:24 AM
   iaLPSS2i_I2C_CNL
     \SystemRoot\System32\drivers\iaLPSS2i_I2C_CNL.sys
     Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2
     Intel Corporation
     30.100.1929.1
     c:\windows\system32\drivers\ialpss2i_i2c_cnl.sys
     7/15/2019 1:12 AM
   iaLPSS2i_I2C_GLK
     \SystemRoot\System32\drivers\iaLPSS2i_I2C_GLK.sys
     Intel(R) Serial IO I2C Driver v2: Intel(R) Serial IO I2C Driver v2
     Intel Corporation
     30.100.1820.1
     c:\windows\system32\drivers\ialpss2i_i2c_glk.sys
     5/16/2018 1:46 AM
   iaLPSSi_GPIO
     \SystemRoot\System32\drivers\iaLPSSi_GPIO.sys
     Intel(R) Serial IO GPIO Controller Driver: Intel(R) Serial IO GPIO Controller Driver
     Intel Corporation
     1.1.250.0
     c:\windows\system32\drivers\ialpssi_gpio.sys
     2/2/2015 5:00 AM
   iaLPSSi_I2C
     \SystemRoot\System32\drivers\iaLPSSi_I2C.sys
     Intel(R) Serial IO I2C Controller Driver: Intel(R) Serial IO I2C Controller Driver
     Intel Corporation
     1.1.253.0
     c:\windows\system32\drivers\ialpssi_i2c.sys
     2/24/2015 11:52 AM
   iaStorAVC
     System32\drivers\iaStorAVC.sys
     Intel Chipset SATA RAID Controller: Intel(R) Rapid Storage Technology driver (inbox) - x64
     Intel Corporation
     15.44.0.1015
     c:\windows\system32\drivers\iastoravc.sys
     9/5/2019 8:07 AM
   iaStorV
     System32\drivers\iaStorV.sys
     Intel RAID Controller Windows 7: Intel Matrix Storage Manager driver - x64
     Intel Corporation
     8.6.2.1019
     c:\windows\system32\drivers\iastorv.sys
     4/11/2011 2:48 PM
   ibbus
     \SystemRoot\System32\drivers\ibbus.sys
     Mellanox InfiniBand Bus/AL (Filter Driver): InfiniBand Fabric Bus Driver
     Mellanox
     5.50.14695.0
     c:\windows\system32\drivers\ibbus.sys
     6/19/2019 9:20 AM
   IndirectKmd
     \SystemRoot\System32\drivers\IndirectKmd.sys
     Indirect Displays Kernel-Mode Driver: Kernel mode driver that implements the Indirect Displays framework.
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\drivers\indirectkmd.sys
     7/21/1953 5:51 PM
   IntcAzAudAddService
     \SystemRoot\system32\drivers\RTKVHD64.sys
     Service for Realtek HD Audio (WDM): Realtek(r) High Definition Audio Function Driver
     Realtek Semiconductor Corp.
     6.0.9733.1
     c:\windows\system32\drivers\rtkvhd64.sys
     9/10/2024 5:08 AM
   intelide
     System32\drivers\intelide.sys
     intelide: Intel PCI IDE Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\intelide.sys
     1/26/1985 1:24 AM
   intelpep
     System32\drivers\intelpep.sys
     Intel(R) Power Engine Plug-in Driver: Intel Power Engine Plugin
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\intelpep.sys
     6/16/1923 3:32 AM
   intelpmax
     \SystemRoot\System32\drivers\intelpmax.sys
     Intel(R) Dynamic Device Peak Power Manager Driver: Intel Power Limit Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\intelpmax.sys
     8/3/1916 1:04 PM
   IntelPMT
     System32\drivers\IntelPMT.sys
     Intel(R) Platform Monitoring Technology Service: Intel Platform Monitoring Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\intelpmt.sys
     2/22/1954 12:13 AM
   intelppm
     \SystemRoot\System32\drivers\intelppm.sys
     Intel Processor Driver: Processor Device Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\intelppm.sys
     10/30/1908 11:00 AM
   iorate
     system32\drivers\iorate.sys
     Disk I/O Rate Filter Driver: Provides rate control for disk I/O traffic.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\iorate.sys
     9/19/1959 6:43 AM
   IpFilterDriver
     system32\DRIVERS\ipfltdrv.sys
     IP Traffic Filter Driver: IP Traffic Filter Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ipfltdrv.sys
     12/16/1914 8:21 PM
   IPMIDRV
     \SystemRoot\System32\drivers\IPMIDrv.sys
     IPMIDRV: WMI IPMI DRIVER
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\ipmidrv.sys
     9/3/2032 12:20 PM
   IPNAT
     System32\drivers\ipnat.sys
     IP Network Address Translator: IP Network Address Translator
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ipnat.sys
     1/27/2037 1:31 PM
   IPT
     \SystemRoot\System32\drivers\ipt.sys
     IPT: IPT Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ipt.sys
     7/22/1996 9:18 PM
   isapnp
     System32\drivers\isapnp.sys
     isapnp: PNP ISA Bus Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\isapnp.sys
     1/12/1967 11:47 PM
   iScsiPrt
     \SystemRoot\System32\drivers\msiscsi.sys
     iScsiPort Driver: Microsoft iSCSI Initiator Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\msiscsi.sys
     7/3/1989 3:21 PM
   ItSas35i
     System32\drivers\ItSas35i.sys
     ItSas35i: Avago SAS Gen3.5 Driver (StorPort)
     Avago Technologies
     2.61.29.80
     c:\windows\system32\drivers\itsas35i.sys
     3/1/2021 6:15 AM
   kbdclass
     \SystemRoot\System32\drivers\kbdclass.sys
     Keyboard Class Driver: Keyboard Class Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\kbdclass.sys
     11/2/2028 8:00 PM
   kbdhid
     \SystemRoot\System32\drivers\kbdhid.sys
     Keyboard HID Driver: HID Keyboard Filter Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\kbdhid.sys
     1/24/2015 1:58 AM
   kbldfltr
     system32\drivers\kbldfltr.sys
     kbldfltr: Keyboard Lockdown Subsystem
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\kbldfltr.sys
     7/21/1902 2:39 AM
   kdnic
     \SystemRoot\System32\drivers\kdnic.sys
     Microsoft Kernel Debug Network Miniport: Microsoft Kernel Debugger Network Miniport
     Microsoft Corporation
     6.2.1.0
     c:\windows\system32\drivers\kdnic.sys
     3/8/1972 9:34 AM
   kdnic_legacy
     \SystemRoot\System32\drivers\kdnic_legacy.sys
     Microsoft Kernel Debug Network Miniport (NDIS 6.20): Microsoft Kernel Debugger Network Miniport
     Microsoft Corporation
     6.1.0.0
     c:\windows\system32\drivers\kdnic_legacy.sys
     2/1/1954 2:50 PM
   KSecDD
     System32\Drivers\ksecdd.sys
     KSecDD: Kernel Security Support Provider Interface
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\ksecdd.sys
     11/6/1920 10:51 AM
   KSecPkg
     System32\Drivers\ksecpkg.sys
     KSecPkg: Kernel Security Support Provider Interface Packages
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ksecpkg.sys
     8/10/1931 7:03 AM
   KslD
     system32\drivers\wd\KslD.sys
     KslD: KSLD
     Microsoft Corporation
     1.1.25021.64020
     c:\windows\system32\drivers\wd\ksld.sys
     12/20/1951 7:59 AM
   ksthunk
     \SystemRoot\system32\drivers\ksthunk.sys
     Kernel Streaming Thunks: Kernel Streaming WOW Thunk Service
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\ksthunk.sys
     1/2/1908 5:27 PM
   lltdio
     system32\drivers\lltdio.sys
     Link-Layer Topology Discovery Mapper I/O Driver: Link-Layer Topology Discovery Mapper I/O Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\lltdio.sys
     5/14/2016 10:33 AM
   LSI_SAS
     System32\drivers\lsi_sas.sys
     LSI_SAS: LSI Fusion-MPT SAS Driver (StorPort)
     LSI Corporation
     1.34.3.83
     c:\windows\system32\drivers\lsi_sas.sys
     3/25/2015 3:36 PM
   LSI_SAS2i
     System32\drivers\lsi_sas2i.sys
     LSI_SAS2i: LSI SAS Gen2 Driver (StorPort)
     LSI Corporation
     2.0.79.82
     c:\windows\system32\drivers\lsi_sas2i.sys
     8/2/2017 9:29 AM
   LSI_SAS3i
     System32\drivers\lsi_sas3i.sys
     LSI_SAS3i: Avago SAS Gen3 Driver (StorPort)
     Avago Technologies
     2.51.27.80
     c:\windows\system32\drivers\lsi_sas3i.sys
     8/21/2020 3:33 AM
   luafv
     \SystemRoot\system32\drivers\luafv.sys
     UAC File Virtualization: Virtualizes file write failures to per-user locations.
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\luafv.sys
     5/18/1949 11:36 PM
   mausbhost
     \SystemRoot\System32\drivers\mausbhost.sys
     MA-USB Host Controller Driver: MA-USB Host Controller Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mausbhost.sys
     2/2/2037 6:48 PM
   mausbip
     \SystemRoot\System32\drivers\mausbip.sys
     MA-USB IP Filter Driver: MA-USB IP Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mausbip.sys
     12/7/1949 11:13 AM
   MbbCx
     system32\drivers\MbbCx.sys
     MBB Network Adapter Class Extension: Windows Mobile Broadband Class Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\mbbcx.sys
     7/29/1954 9:13 AM
   megasas2i
     System32\drivers\MegaSas2i.sys
     megasas2i: MEGASAS2i RAID Controller Driver for Windows
     Avago Technologies
     6.714.22.0
     c:\windows\system32\drivers\megasas2i.sys
     1/22/2020 5:57 AM
   megasas35i
     System32\drivers\megasas35i.sys
     megasas35i: MEGASAS RAID Controller Driver for Windows
     Broadcom Inc
     7.717.2.0
     c:\windows\system32\drivers\megasas35i.sys
     1/12/2021 3:59 AM
   megasr
     System32\drivers\megasr.sys
     megasr: LSI MegaRAID Software RAID Driver
     LSI Corporation, Inc.
     15.2.2013.129
     c:\windows\system32\drivers\megasr.sys
     6/3/2013 6:02 PM
   Microsoft_Bluetooth_AvrcpTransport
     \SystemRoot\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys
     Microsoft Bluetooth Avrcp Transport Driver: Microsoft Bluetooth Avrcp Transport Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\microsoft.bluetooth.avrcptransport.sys
     12/6/1984 3:38 PM
   mlx4_bus
     \SystemRoot\System32\drivers\mlx4_bus.sys
     Mellanox ConnectX Bus Enumerator: MLX4 Bus Driver
     Mellanox
     5.50.14695.0
     c:\windows\system32\drivers\mlx4_bus.sys
     6/19/2019 9:21 AM
   MMCSS
     \SystemRoot\system32\drivers\mmcss.sys
     Multimedia Class Scheduler: Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications.  If this service is stopped, individual tasks resort to their default priority.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mmcss.sys
     6/27/1914 5:04 AM
   Modem
     system32\drivers\modem.sys
     Modem: Modem Device Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\modem.sys
     2/8/1952 10:51 AM
   monitor
     \SystemRoot\System32\drivers\monitor.sys
     Microsoft Monitor Class Function Driver Service: Monitor Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\monitor.sys
     6/6/2017 12:09 PM
   mouclass
     \SystemRoot\System32\drivers\mouclass.sys
     Mouse Class Driver: Mouse Class Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mouclass.sys
     2/19/2007 10:36 AM
   mouhid
     \SystemRoot\System32\drivers\mouhid.sys
     Mouse HID Driver: HID Mouse Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mouhid.sys
     7/31/1993 5:24 AM
   mountmgr
     System32\drivers\mountmgr.sys
     Mount Point Manager: Driver responsible with maintaining persistent drive letters and names for volumes
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mountmgr.sys
     12/6/2014 8:57 AM
   mpi3drvi
     System32\drivers\mpi3drvi.sys
     mpi3drvi: Broadcom MPI 3.0 Driver (StorPort)
     Broadcom Limited
     3.0.71.90
     c:\windows\system32\drivers\mpi3drvi.sys
     11/16/2021 6:22 PM
   mpsdrv
     System32\drivers\mpsdrv.sys
     Windows Defender Firewall Authorization Driver: Windows Defender Firewall Authorization Driver is a kernel mode driver that provides deep inspection services on inbound and outbound network traffic.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mpsdrv.sys
     11/22/2001 8:12 PM
   MRxDAV
     \SystemRoot\system32\drivers\mrxdav.sys
     WebDav Client Redirector Driver: Network Redirector that provides WebDAV file access for the WebClient service
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mrxdav.sys
     9/28/2027 11:34 AM
   mrxsmb
     system32\DRIVERS\mrxsmb.sys
     SMB MiniRedirector Wrapper and Engine: Implements the framework for the SMB filesystem redirector
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\mrxsmb.sys
     6/13/1921 9:06 PM
   mrxsmb20
     system32\DRIVERS\mrxsmb20.sys
     SMB 2.0 MiniRedirector: Implements the SMB 2.0 protocol, which provides connectivity to network resources on Windows Vista and later servers
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\mrxsmb20.sys
     9/20/1935 5:32 PM
   MsBridge
     System32\drivers\bridge.sys
     Microsoft MAC Bridge: Microsoft MAC Bridge
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\drivers\bridge.sys
     8/29/1902 7:25 AM
   Msfs
     Msfs
     Msfs: Mailslot driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\msfs.sys
     11/20/1998 11:21 AM
   msgpiowin32
     \SystemRoot\System32\drivers\msgpiowin32.sys
     Common Driver for Buttons, DockMode and Laptop/Slate Indicator: GPIO Button Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\msgpiowin32.sys
     4/22/2001 6:57 PM
   mshidkmdf
     \SystemRoot\System32\drivers\mshidkmdf.sys
     Pass-through HID to KMDF Filter Driver: Pass-through HID to KMDF Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mshidkmdf.sys
     2/12/1982 5:47 PM
   mshidumdf
     \SystemRoot\System32\drivers\mshidumdf.sys
     Pass-through HID to UMDF Driver: Device Driver to provide pass-through interface between HIDCLASS and UMDF
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mshidumdf.sys
     3/19/1944 11:42 AM
   MSIO
     \??\C:\WINDOWS\system32\drivers\MsIo64.sys
     MSIO: MICSYS IO driver
     MICSYS Technology Co., LTd
     1.3.23.1211
     c:\windows\system32\drivers\msio64.sys
     12/11/2023 2:39 AM
   msisadrv
     System32\drivers\msisadrv.sys
     msisadrv: ISA Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\msisadrv.sys
     5/25/1936 2:22 AM
   MSKSSRV
     \SystemRoot\System32\drivers\MSKSSRV.sys
     Microsoft Streaming Service Proxy: MS KS Server
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\mskssrv.sys
     12/20/1931 4:23 PM
   MsLldp
     system32\drivers\mslldp.sys
     Microsoft Link-Layer Discovery Protocol: Microsoft Link-Layer Discovery Protocol Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mslldp.sys
     8/2/1956 9:26 PM
   MSPCLOCK
     \SystemRoot\System32\drivers\MSPCLOCK.sys
     Microsoft Streaming Clock Proxy: MS Proxy Clock
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\mspclock.sys
     5/15/1960 3:06 PM
   MSPQM
     \SystemRoot\System32\drivers\MSPQM.sys
     Microsoft Streaming Quality Manager Proxy: MS Proxy Quality Manager
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\mspqm.sys
     3/13/2019 2:59 PM
   MsQuic
     system32\drivers\msquic.sys
     MsQuic: This service implements the QUIC transport protocol.
     Microsoft Corporation
     2.4.7.0
     c:\windows\system32\drivers\msquic.sys
     2/11/1984 1:48 PM
   MsQuicPrev
     system32\drivers\msquicprev.sys
     MSQUIC: This service implements the QUIC transport protocol.
     Microsoft Corporation
     2.3.8.0
     c:\windows\system32\drivers\msquicprev.sys
     6/6/1953 7:49 PM
   MsRPC
     MsRPC
     MsRPC: Kernel Remote Procedure Call Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\msrpc.sys
     6/30/1907 5:47 PM
   MsSecCore
     system32\drivers\msseccore.sys
     Microsoft Security Core Boot Driver: Microsoft Security Core Boot Driver
     Microsoft Corporation
     10.8792.26100.3624
     c:\windows\system32\drivers\msseccore.sys
     9/4/2017 9:50 AM
   MsSecFlt
     system32\drivers\mssecflt.sys
     Microsoft Security Events Component Minifilter: Microsoft Security Events Component File System Filter Driver
     Microsoft Corporation
     10.8792.27763.1008
     c:\windows\system32\drivers\mssecflt.sys
     8/10/1968 1:43 AM
   MsSecWfp
     system32\drivers\mssecwfp.sys
     Microsoft Security WFP Callout Driver: Microsoft Security WFP Callout Driver
     Microsoft Corporation
     10.8792.27763.1008
     c:\windows\system32\drivers\mssecwfp.sys
     6/28/1966 4:10 PM
   mssmbios
     \SystemRoot\System32\drivers\mssmbios.sys
     Microsoft System Management BIOS Driver: System Management BIOS Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\mssmbios.sys
     2/7/1940 11:05 AM
   MSTEE
     \SystemRoot\System32\drivers\MSTEE.sys
     Microsoft Streaming Tee/Sink-to-Sink Converter: WDM Tee/Communication Transform Filter 
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mstee.sys
     2/20/1922 5:59 PM
   MTConfig
     \SystemRoot\System32\drivers\MTConfig.sys
     Microsoft Input Configuration Driver: Microsoft Multi-Touch HID Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\mtconfig.sys
     5/1/2027 3:01 AM
   Mup
     System32\Drivers\mup.sys
     Mup: Multiple UNC Provider Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\mup.sys
     11/7/1926 10:25 PM
   mvumis
     System32\drivers\mvumis.sys
     mvumis: Marvell Flash Controller Driver
     Marvell Semiconductor, Inc.
     1.0.5.1016
     c:\windows\system32\drivers\mvumis.sys
     5/23/2014 4:39 PM
   MyPortIO
     \??\C:\Program Files\GIGABYTE\Control Center\Lib\MBStorage\MyPortIO_x64.sys
     MyPortIO: Port I/O Driver for Win32/64
     Nuvoton Technology Corp.
     2.0.2008.128
     c:\program files\gigabyte\control center\lib\mbstorage\myportio_x64.sys
     6/22/2015 9:03 PM
   NativeWifiP
     system32\DRIVERS\nwifi.sys
     NativeWiFi Filter: NativeWiFi Miniport Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\nwifi.sys
     4/22/1935 5:03 PM
   ndfltr
     \SystemRoot\System32\drivers\ndfltr.sys
     NetworkDirect Service: NetworkDirect Support Filter Driver
     Mellanox
     5.50.14695.0
     c:\windows\system32\drivers\ndfltr.sys
     6/19/2019 9:18 AM
   NDIS
     system32\drivers\ndis.sys
     NDIS System Driver: NDIS System Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ndis.sys
     12/7/1987 2:04 PM
   NdisCap
     System32\drivers\ndiscap.sys
     Microsoft NDIS Capture: Microsoft NDIS Capture
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndiscap.sys
     8/5/1969 4:53 PM
   NdisImPlatform
     System32\drivers\NdisImPlatform.sys
     Microsoft Network Adapter Multiplexor Protocol: Microsoft Network Adapter Multiplexor Protocol
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndisimplatform.sys
     5/12/2029 9:45 AM
   NdisTapi
     System32\DRIVERS\ndistapi.sys
     Remote Access NDIS TAPI Driver: Remote Access NDIS TAPI Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndistapi.sys
     3/22/1967 8:36 AM
   Ndisuio
     system32\drivers\ndisuio.sys
     NDIS Usermode I/O Protocol: NDIS User mode I/O driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndisuio.sys
     6/9/1907 12:15 AM
   NdisVirtualBus
     \SystemRoot\System32\drivers\NdisVirtualBus.sys
     Microsoft Virtual Network Adapter Enumerator: Microsoft Virtual Network Adapter Enumerator
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndisvirtualbus.sys
     5/7/1917 5:44 AM
   NdisWan
     \SystemRoot\System32\drivers\ndiswan.sys
     Remote Access NDIS WAN Driver: Remote Access NDIS WAN Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ndiswan.sys
     1/23/1902 3:58 PM
   ndiswanlegacy
     System32\DRIVERS\ndiswan.sys
     Remote Access LEGACY NDIS WAN Driver: Remote Access LEGACY NDIS WAN Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ndiswan.sys
     1/23/1902 3:58 PM
   NDKPerf
     system32\drivers\NDKPerf.sys
     NDKPerf Driver: 
     c:\windows\system32\drivers\ndkperf.sys
     11/16/1927 11:18 AM
   NDKPing
     system32\drivers\NDKPing.sys
     NDKPing Driver: RDMA Sample Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndkping.sys
     3/15/1968 11:33 PM
   ndproxy
     System32\DRIVERS\NDProxy.sys
     NDIS Proxy Driver: NDIS Proxy Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ndproxy.sys
     3/9/2006 6:12 PM
   Ndu
     system32\drivers\Ndu.sys
     Windows Network Data Usage Monitoring Driver: This service provides network data usage monitoring functionality
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ndu.sys
     11/12/1985 11:56 PM
   NetAdapterCx
     system32\drivers\netadaptercx.sys
     Network Adapter WDF Class Extension Library: Network Adapter Class Extension for WDF
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\netadaptercx.sys
     4/23/1995 3:14 AM
   NetBIOS
     system32\drivers\netbios.sys
     NetBIOS Interface: NetBIOS Interface
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\netbios.sys
     10/14/1955 9:06 AM
   NetBT
     System32\DRIVERS\netbt.sys
     NetBT: This service implements NetBios over TCP/IP.
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\netbt.sys
     12/6/1977 11:13 AM
   netvsc
     \SystemRoot\System32\drivers\netvsc.sys
     netvsc: Virtual NDIS Miniport
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\netvsc.sys
     5/13/2013 6:47 AM
   NetworkPrivacyPolicy
     \SystemRoot\System32\DriverStore\FileRepository\networkprivacypolicy.inf_amd64_36df9257e06c3c02\NetworkPrivacyPolicy.sys
     Microsoft Network Privacy Policy Service: Microsoft Network Privacy Policy Service
     c:\windows\system32\driverstore\filerepository\networkprivacypolicy.inf_amd64_36df9257e06c3c02\networkprivacypolicy.sys
     11/7/1921 3:17 AM
   Npfs
     Npfs
     Npfs: NPFS Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\npfs.sys
     1/25/1931 2:05 PM
   npsvctrig
     \SystemRoot\System32\drivers\npsvctrig.sys
     Named pipe service trigger provider: Named pipe service triggers
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\npsvctrig.sys
     5/14/1978 5:13 AM
   nsiproxy
     system32\drivers\nsiproxy.sys
     NSI Proxy Service Driver: NSI Proxy Service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\nsiproxy.sys
     9/27/1934 4:21 PM
   Ntfs
     Ntfs
     Ntfs: NT File System Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ntfs.sys
     12/4/1934 7:49 AM
   Null
     Null
     Null: NULL Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\null.sys
     12/12/1949 8:39 PM
   nvdimm
     System32\drivers\nvdimm.sys
     Microsoft NVDIMM device driver: NVDIMM device driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\nvdimm.sys
     3/29/2009 4:13 PM
   nvlddmkm
     \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\nvlddmkm.sys
     nvlddmkm: NVIDIA Windows Kernel Mode Driver, Version 576.28 
     NVIDIA Corporation
     32.0.15.7628
     c:\windows\system32\driverstore\filerepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\nvlddmkm.sys
     4/27/2025 1:23 PM
   nvmedisk
     System32\drivers\nvmedisk.sys
     Microsoft NVMe disk driver: Nvme Disk Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\nvmedisk.sys
     5/15/2020 6:18 AM
   nvraid
     System32\drivers\nvraid.sys
     nvraid: NVIDIA® nForce(TM) RAID Driver
     NVIDIA Corporation
     10.6.0.23
     c:\windows\system32\drivers\nvraid.sys
     4/21/2014 2:28 PM
   nvstor
     System32\drivers\nvstor.sys
     nvstor: NVIDIA® nForce(TM) Sata Performance Driver
     NVIDIA Corporation
     10.6.0.23
     c:\windows\system32\drivers\nvstor.sys
     4/21/2014 2:34 PM
   P9Rdr
     System32\drivers\p9rdr.sys
     Plan 9 Redirector Driver: Plan 9 Redirector Driver
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\p9rdr.sys
     5/31/1949 11:42 PM
   Parport
     \SystemRoot\System32\drivers\parport.sys
     Parallel port driver: Parallel Port Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\parport.sys
     6/9/1909 10:01 AM
   partmgr
     System32\drivers\partmgr.sys
     Partition driver: Disk class filter driver that manages and auctions out partitions to volume managers.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\partmgr.sys
     8/14/1921 1:23 AM
   pci
     System32\drivers\pci.sys
     PCI Bus Driver: NT Plug and Play PCI Enumerator
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\pci.sys
     9/5/2037 1:30 AM
   pciide
     System32\drivers\pciide.sys
     pciide: Generic PCI IDE Bus Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\pciide.sys
     4/20/1981 6:12 PM
   pcmcia
     System32\drivers\pcmcia.sys
     pcmcia: PCMCIA Bus Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\pcmcia.sys
     3/2/2013 5:57 AM
   pcw
     System32\drivers\pcw.sys
     Performance Counters for Windows Driver: Performance Counters for Windows Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\pcw.sys
     3/8/2012 7:45 AM
   pdc
     system32\drivers\pdc.sys
     pdc: Power Dependency Coordinator Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\pdc.sys
     6/10/1984 7:18 PM
   PEAUTH
     system32\drivers\peauth.sys
     PEAUTH: Protected Environment Authentication and Authorization Export Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\peauth.sys
     6/14/1956 8:17 AM
   percsas2i
     System32\drivers\percsas2i.sys
     percsas2i: MEGASAS RAID Controller Driver for Windows
     Avago Technologies
     6.805.3.0
     c:\windows\system32\drivers\percsas2i.sys
     3/14/2016 8:50 PM
   percsas3i
     System32\drivers\percsas3i.sys
     percsas3i: MEGASAS RAID Controller Driver for Windows
     Avago Technologies
     6.604.6.0
     c:\windows\system32\drivers\percsas3i.sys
     6/1/2018 5:47 PM
   PktMon
     system32\drivers\PktMon.sys
     Packet Monitor Driver: Packet Monitor Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\pktmon.sys
     9/6/2013 7:58 AM
   PktMonApi
     system32\drivers\PktMonApi.sys
     Packet Monitor Export Driver: Packet Monitor API
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\drivers\pktmonapi.sys
     5/19/1911 11:54 PM
   PlutonHeci
     \SystemRoot\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_9aaa7a8c15ac7e9a\pluton-heci.sys
     Microsoft Pluton Security Service: 
     c:\windows\system32\driverstore\filerepository\pluton-heci.inf_amd64_9aaa7a8c15ac7e9a\pluton-heci.sys
     4/18/2028 3:50 AM
   PlutonHsp2
     \SystemRoot\System32\DriverStore\FileRepository\plutonhsp2.inf_amd64_0b3fdc25d1dc1c6e\PlutonHsp2.sys
     Microsoft Pluton Service: 
     c:\windows\system32\driverstore\filerepository\plutonhsp2.inf_amd64_0b3fdc25d1dc1c6e\plutonhsp2.sys
     11/14/2012 12:41 AM
   pmem
     System32\drivers\pmem.sys
     Microsoft persistent memory disk driver: Persistent memory driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\pmem.sys
     7/22/1967 2:52 AM
   PNPMEM
     \SystemRoot\System32\drivers\pnpmem.sys
     Microsoft Memory Module Driver: Plug and Play Memory Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\pnpmem.sys
     3/13/1983 4:29 PM
   portcfg
     \SystemRoot\System32\drivers\portcfg.sys
     portcfg: Port Device Class Configuration Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\portcfg.sys
     12/10/1995 12:59 PM
   PptpMiniport
     \SystemRoot\System32\drivers\raspptp.sys
     WAN Miniport (PPTP): WAN Miniport (PPTP)
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\raspptp.sys
     10/12/2035 11:47 AM
   PRM
     System32\DriverStore\FileRepository\prm.inf_amd64_7c38475757a1f016\PRM.sys
     Microsoft PRM Driver: Windows PRM Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\prm.inf_amd64_7c38475757a1f016\prm.sys
     3/24/2013 9:38 PM
   Processor
     \SystemRoot\System32\drivers\processr.sys
     Processor Driver: Processor Device Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\processr.sys
     12/24/2022 12:58 AM
   Psched
     System32\drivers\pacer.sys
     QoS Packet Scheduler: QoS Packet Scheduler
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\pacer.sys
     12/15/1950 2:15 AM
   pvscsi
     System32\drivers\pvscsii.sys
     pvscsi Storage Controller Driver: VMware PVSCSI StorPort driver (64-bit)
     VMware, Inc.
     1.3.15.0
     c:\windows\system32\drivers\pvscsii.sys
     5/19/2021 11:55 PM
   QWAVEdrv
     \SystemRoot\system32\drivers\qwavedrv.sys
     QWAVE driver: Quality Windows Audio/Video Experience component driver
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\qwavedrv.sys
     3/4/1997 3:18 PM
   Ramdisk
     \SystemRoot\System32\drivers\ramdisk.sys
     Windows RAM Disk Driver: RAM Disk Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\ramdisk.sys
     1/10/1918 12:49 AM
   RasAcd
     System32\DRIVERS\rasacd.sys
     Remote Access Auto Connection Driver: Remote Access Auto Connection Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\rasacd.sys
     11/20/2031 10:43 PM
   RasAgileVpn
     \SystemRoot\System32\drivers\AgileVpn.sys
     WAN Miniport (IKEv2): WAN Miniport (IKEv2)
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\agilevpn.sys
     4/8/2005 8:07 AM
   Rasl2tp
     \SystemRoot\System32\drivers\rasl2tp.sys
     WAN Miniport (L2TP): WAN Miniport (L2TP)
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\rasl2tp.sys
     5/17/2029 12:40 AM
   RasPppoe
     System32\DRIVERS\raspppoe.sys
     Remote Access PPPOE Driver: Remote Access PPPOE Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\raspppoe.sys
     12/20/1949 9:59 PM
   RasSstp
     \SystemRoot\System32\drivers\rassstp.sys
     WAN Miniport (SSTP): WAN Miniport (SSTP)
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\rassstp.sys
     4/18/2018 10:27 PM
   rdbss
     system32\DRIVERS\rdbss.sys
     Redirected Buffering Sub System: Provides the framework for network mini-redirectors
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\rdbss.sys
     5/16/1987 7:55 AM
   rdpbus
     \SystemRoot\System32\drivers\rdpbus.sys
     Remote Desktop Device Redirector Bus Driver: Microsoft RDP Bus Device driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\rdpbus.sys
     4/5/1925 4:01 AM
   RDPDR
     System32\drivers\rdpdr.sys
     Remote Desktop Device Redirector Driver: Remote Desktop Device Redirector Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\rdpdr.sys
     11/13/1924 5:16 AM
   rdyboost
     System32\drivers\rdyboost.sys
     ReadyBoost: ReadyBoost
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\rdyboost.sys
     7/15/1934 3:07 AM
   ReFS
     ReFS
     ReFS: NT ReFS FS Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\refs.sys
     9/27/1940 3:35 AM
   ReFSv1
     ReFSv1
     ReFSv1: NT ReFS FS Driver
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\refsv1.sys
     2/4/2025 6:15 PM
   RFCOMM
     \SystemRoot\System32\drivers\rfcomm.sys
     Bluetooth Device (RFCOMM Protocol TDI): Bluetooth Device (RFCOMM Protocol TDI)
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\rfcomm.sys
     3/30/1975 4:32 AM
   rhproxy
     \SystemRoot\System32\drivers\rhproxy.sys
     Resource Hub proxy driver: ResourceHub Proxy Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\rhproxy.sys
     1/18/1990 10:23 AM
   RoutePolicy
     \SystemRoot\System32\drivers\RoutePolicy.sys
     Microsoft Route Policy Service: Windows 5G ondemand connection route policy driver
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\drivers\routepolicy.sys
     10/4/2002 4:51 AM
   rspndr
     system32\drivers\rspndr.sys
     Link-Layer Topology Discovery Responder: Link-Layer Topology Discovery Responder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\rspndr.sys
     4/22/2015 6:55 AM
   rt25cx21
     \SystemRoot\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_f32b9472bc5b90de\rt25cx21x64.sys
     Realtek NetAdapter Driver: Realtek PCIe Ethernet Controller NetAdapterCx 2.2 Driver                                        
     Realtek                                        
     1125.21.903.2024
     c:\windows\system32\driverstore\filerepository\rt25cx21x64.inf_amd64_f32b9472bc5b90de\rt25cx21x64.sys
     9/3/2024 11:20 AM
   rt640x64
     \SystemRoot\System32\drivers\rt640x64.sys
     Realtek RT640 NT Driver: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver                                        
     Realtek                                        
     10.56.119.2022
     c:\windows\system32\drivers\rt640x64.sys
     1/19/2022 4:47 AM
   rtcx21
     \SystemRoot\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys
     Realtek NetAdapter Driver: Realtek NetAdapter Driver                                        
     Realtek                                        
     1.0.0.14
     c:\windows\system32\driverstore\filerepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys
     10/4/2021 2:54 AM
   rtf64
     \SystemRoot\system32\DRIVERS\rtf64x64.sys
     Realtek LightWeight Filter (NDIS6.40): Realtek LightWeight Filter (NDIS6.40)
     Realtek
     3.11.922.2021
     c:\windows\system32\drivers\rtf64x64.sys
     9/22/2021 4:40 AM
   RtkBtFilter2
     \SystemRoot\System32\drivers\RtkBtfilter2.sys
     Realtek Bluetooth Filter Driver: Realtek Bluetooth Filter Driver
     Realtek Semiconductor Corporation
     1.11.4020.3
     c:\windows\system32\drivers\rtkbtfilter2.sys
     10/23/2024 10:47 PM
   rtwlane613
     \SystemRoot\System32\drivers\rtwlane613.sys
     Realtek Wireless LAN 802.11ax PCI-E Network Adapter: Realtek PCIE NDIS Driver 880f346
     Realtek Semiconductor Corporation                           
     6101.19.126.0
     c:\windows\system32\drivers\rtwlane613.sys
     11/27/2024 4:11 AM
   s3cap
     \SystemRoot\System32\drivers\vms3cap.sys
     s3cap: Microsoft S3 Emulated Device Cap Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vms3cap.sys
     12/7/2031 4:20 PM
   sbp2port
     System32\drivers\sbp2port.sys
     SBP-2 Transport/Protocol Bus Driver: SBP-2 Protocol Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\sbp2port.sys
     5/23/1938 4:47 PM
   scfilter
     System32\DRIVERS\scfilter.sys
     Smart card PnP Class Filter Driver: Smart card reader filter driver enabling smart card PnP.
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\drivers\scfilter.sys
     9/9/2026 1:54 AM
   scmbus
     System32\drivers\scmbus.sys
     Microsoft Storage Class Memory Bus Driver: Storage Class Memory Bus Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\scmbus.sys
     4/9/1927 7:57 PM
   sdbus
     \SystemRoot\System32\drivers\sdbus.sys
     sdbus: SecureDigital Bus Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\sdbus.sys
     12/24/1978 6:38 AM
   sdstor
     \SystemRoot\System32\drivers\sdstor.sys
     SD Storage Port Driver: SD Storage Class Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\sdstor.sys
     2/22/2011 9:39 PM
   SerCx
     system32\drivers\SerCx.sys
     Serial UART Support Library: Serial Class Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\sercx.sys
     6/15/2000 4:05 AM
   SerCx2
     system32\drivers\SerCx2.sys
     Serial UART Support Library: Serial Class Extension V2
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\sercx2.sys
     10/12/1948 3:04 AM
   Serenum
     \SystemRoot\System32\drivers\serenum.sys
     Serenum Filter Driver: Serial Port Enumerator
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\serenum.sys
     12/1/1939 10:46 PM
   Serial
     \SystemRoot\System32\drivers\serial.sys
     Serial port driver: Serial Device Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\serial.sys
     6/8/2014 8:05 PM
   sermouse
     \SystemRoot\System32\drivers\sermouse.sys
     Serial Mouse Driver: Serial Mouse Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\sermouse.sys
     8/17/1905 2:16 AM
   sfloppy
     \SystemRoot\System32\drivers\sfloppy.sys
     High-Capacity Floppy Disk Drive: SCSI Floppy Driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\sfloppy.sys
     2/11/1902 4:58 PM
   SiSRaid2
     System32\drivers\SiSRaid2.sys
     SiSRaid2: SiS RAID Stor Miniport Driver
     Silicon Integrated Systems Corp.
     5.1.1039.2600
     c:\windows\system32\drivers\sisraid2.sys
     9/24/2008 2:28 PM
   SiSRaid4
     System32\drivers\sisraid4.sys
     SiSRaid4: SiS AHCI Stor-Miniport Driver
     Silicon Integrated Systems
     5.1.1039.3600
     c:\windows\system32\drivers\sisraid4.sys
     10/1/2008 5:56 PM
   SmartSAMD
     System32\drivers\SmartSAMD.sys
     SmartSAMD: Storport Miniport Driver for SmartRAID/SmartHBA Controllers
     Microsemi Corportation
     1.50.1.0
     c:\windows\system32\drivers\smartsamd.sys
     2/21/2019 1:54 PM
   smbdirect
     System32\DRIVERS\smbdirect.sys
     smbdirect: SMB Network Direct Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\smbdirect.sys
     6/19/1910 1:25 PM
   spaceparser
     system32\drivers\spaceparser.sys
     spaceparser: Storage Spaces Parser driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\spaceparser.sys
     8/29/1962 9:11 AM
   spaceport
     System32\drivers\spaceport.sys
     Storage Spaces Driver: Storage Spaces Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\spaceport.sys
     9/10/1983 5:10 PM
   SpbCx
     system32\drivers\SpbCx.sys
     Simple Peripheral Bus Support Library: SPB Class Extension
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\spbcx.sys
     7/12/2004 5:58 PM
   srv2
     System32\DRIVERS\srv2.sys
     Server SMB 2.xxx Driver: Enables connectivity from Windows Vista and later clients
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\srv2.sys
     9/1/2009 6:31 PM
   srvnet
     System32\DRIVERS\srvnet.sys
     srvnet: Server Network driver
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\drivers\srvnet.sys
     11/12/1927 8:06 AM
   stexstor
     System32\drivers\stexstor.sys
     stexstor: Promise SuperTrak EX Series Driver for Windows x64
     Promise Technology, Inc.
     5.1.0.10
     c:\windows\system32\drivers\stexstor.sys
     11/26/2012 8:02 PM
   storahci
     System32\drivers\storahci.sys
     Microsoft Standard SATA AHCI Driver: MS AHCI Storport Miniport Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\storahci.sys
     6/2/2011 12:09 AM
   storflt
     System32\drivers\vmstorfl.sys
     Microsoft Hyper-V Storage Accelerator: Virtual Storage Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vmstorfl.sys
     11/10/2014 3:15 PM
   stornvme
     System32\drivers\stornvme.sys
     Microsoft Standard NVM Express Driver: Microsoft NVM Express Storport Miniport Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\stornvme.sys
     7/6/1937 6:12 AM
   storqosflt
     system32\drivers\storqosflt.sys
     Storage QoS Filter Driver: Provides Quality of Service for storage I/O traffic.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\storqosflt.sys
     3/19/2021 6:47 AM
   storufs
     System32\drivers\storufs.sys
     Microsoft Universal Flash Storage (UFS) Driver: MS UFS Storport Miniport Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\storufs.sys
     12/12/2016 7:20 AM
   storvsc
     System32\drivers\storvsc.sys
     storvsc: Storage VSC Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\storvsc.sys
     2/4/1984 10:45 PM
   swenum
     \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_7e69a3e94e38c7ba\swenum.sys
     Software Bus Driver: Plug and Play Software Device Enumerator
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\driverstore\filerepository\swenum.inf_amd64_7e69a3e94e38c7ba\swenum.sys
     8/21/2030 2:02 AM
   Tcpip
     System32\drivers\tcpip.sys
     TCP/IP Protocol Driver: TCP/IP Protocol Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\tcpip.sys
     2/27/1917 11:41 PM
   Tcpip6
     System32\drivers\tcpip.sys
     @todo.dll,-100;Microsoft IPv6 Protocol Driver: @todo.dll,-100;Microsoft IPv6 Protocol Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\tcpip.sys
     2/27/1917 11:41 PM
   tcpipreg
     System32\drivers\tcpipreg.sys
     @%SystemRoot%\System32\drivers\tcpipreg.sys,-10110,: TCP/IP Registry Compatibility Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\tcpipreg.sys
     12/13/1956 2:53 AM
   tdx
     \SystemRoot\system32\DRIVERS\tdx.sys
     NetIO Legacy TDI Support Driver: NetIO Legacy TDI Support Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\tdx.sys
     9/17/1944 6:26 AM
   terminpt
     \SystemRoot\System32\drivers\terminpt.sys
     Microsoft Remote Desktop Input Driver: Terminal Server Input Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\terminpt.sys
     1/24/1925 7:03 PM
   ThermalFilter
     \SystemRoot\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys
     Microsoft Thermal Filter Driver: Microsoft Thermal Filter Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\driverstore\filerepository\c_thermal.inf_amd64_732a53ed1662b707\thermalfilter.sys
     2/21/1977 12:48 AM
   TPM
     \SystemRoot\System32\drivers\tpm.sys
     TPM: TPM Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\tpm.sys
     5/6/1959 8:11 PM
   TsUsbFlt
     system32\drivers\tsusbflt.sys
     Remote Desktop USB Hub Class Filter Driver: Remote Desktop USB Hub Class Filter Driver
     Microsoft Corporation
     10.0.26100.2894
     c:\windows\system32\drivers\tsusbflt.sys
     11/23/1940 12:02 PM
   TsUsbGD
     \SystemRoot\System32\drivers\TsUsbGD.sys
     Remote Desktop Generic USB Device: Remote Desktop Generic USB Driver
     Microsoft Corporation
     10.0.26100.2894
     c:\windows\system32\drivers\tsusbgd.sys
     9/20/1976 4:38 AM
   tsusbhub
     \SystemRoot\System32\drivers\tsusbhub.sys
     Remote Desktop USB Hub: Remote Desktop USB Hub
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\tsusbhub.sys
     9/25/2013 12:55 PM
   tunnel
     System32\drivers\tunnel.sys
     Microsoft Tunnel Miniport Adapter Driver: Microsoft Tunnel Interface Driver
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\drivers\tunnel.sys
     3/17/1993 8:58 PM
   UASPStor
     \SystemRoot\System32\drivers\uaspstor.sys
     USB Attached SCSI (UAS) Driver: Microsoft Uasp Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\uaspstor.sys
     10/15/1948 9:02 PM
   UcmCx0101
     System32\Drivers\UcmCx.sys
     USB Connector Manager KMDF Class Extension: USB Connector Manager KMDF Class Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ucmcx.sys
     7/21/1989 11:33 AM
   UcmTcpciCx0101
     System32\Drivers\UcmTcpciCx.sys
     UCM-TCPCI KMDF Class Extension: UCM-TCPCI KMDF Class Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ucmtcpcicx.sys
     1/22/1903 12:22 AM
   UcmUcsiAcpiClient
     \SystemRoot\System32\drivers\UcmUcsiAcpiClient.sys
     UCM-UCSI ACPI Client: UCM-UCSI ACPI Client Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\ucmucsiacpiclient.sys
     8/21/2037 9:40 PM
   UcmUcsiCx0101
     System32\Drivers\UcmUcsiCx.sys
     UCM-UCSI KMDF Class Extension: UCM-UCSI KMDF Class Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ucmucsicx.sys
     4/26/2021 3:35 AM
   UCPD
     system32\drivers\UCPD.sys
     UCPD: User Choice Protection Driver
     Microsoft Corporation
     4.2.0.0
     c:\windows\system32\drivers\ucpd.sys
     4/18/1909 4:53 PM
   Ucx01000
     system32\drivers\ucx01000.sys
     USB Host Support Library: USB Controller Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ucx01000.sys
     2/22/2025 10:07 AM
   UdeCx
     system32\drivers\udecx.sys
     USB Device Emulation Support Library: "udecx.DRIVER"
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\udecx.sys
     3/27/2019 1:24 PM
   UEFI
     \SystemRoot\System32\DriverStore\FileRepository\uefi.inf_amd64_980ddb5245bbf384\UEFI.sys
     Microsoft UEFI Driver: UEFI Driver for NT
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\uefi.inf_amd64_980ddb5245bbf384\uefi.sys
     7/1/1923 12:00 PM
   Ufx01000
     system32\drivers\ufx01000.sys
     USB Function Class Extension: USB Function Driver Class Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ufx01000.sys
     1/28/1955 2:12 PM
   UfxChipidea
     \SystemRoot\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_6e8bb2ed82835828\UfxChipidea.sys
     USB Chipidea Controller: UFX Chipidea Client Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\ufxchipidea.inf_amd64_6e8bb2ed82835828\ufxchipidea.sys
     12/25/1986 4:31 PM
   ufxsynopsys
     \SystemRoot\System32\drivers\ufxsynopsys.sys
     USB Synopsys Controller: UFX Synopsys Client Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\ufxsynopsys.sys
     3/6/1940 4:51 PM
   uiomap
     \SystemRoot\System32\DriverStore\FileRepository\uiomap.inf_amd64_697a815e86e816e8\uiomap.sys
     Microsoft UIO Mapper Driver Service: Usermode IO Mapper Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\driverstore\filerepository\uiomap.inf_amd64_697a815e86e816e8\uiomap.sys
     2/28/1917 9:13 PM
   umbus
     \SystemRoot\System32\DriverStore\FileRepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys
     UMBus Enumerator Driver: User-Mode Bus Enumerator
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\umbus.inf_amd64_914dd46b4b013b1b\umbus.sys
     11/29/2031 11:53 PM
   UmPass
     \SystemRoot\System32\DriverStore\FileRepository\umpass.inf_amd64_06e016c9ffecbf73\umpass.sys
     Microsoft UMPass Driver: Generic pass-through driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\umpass.inf_amd64_06e016c9ffecbf73\umpass.sys
     12/20/1961 1:20 PM
   UnionFS
     \SystemRoot\system32\drivers\UnionFS.sys
     UnionFS: Union Filesystem Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\unionfs.sys
     1/16/1911 12:33 AM
   UrsChipidea
     \SystemRoot\System32\DriverStore\FileRepository\urschipidea.inf_amd64_37fb14618bce547b\urschipidea.sys
     Chipidea USB Role-Switch Driver: USB Role-Switch Driver for Chipidea Core
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\urschipidea.inf_amd64_37fb14618bce547b\urschipidea.sys
     9/28/1963 2:50 AM
   UrsCx01000
     system32\drivers\urscx01000.sys
     USB Role-Switch Support Library: USB Role-Switch Class Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\drivers\urscx01000.sys
     7/31/2006 12:55 PM
   UrsSynopsys
     \SystemRoot\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_ef0be23d0f063014\urssynopsys.sys
     Synopsys USB Role-Switch Driver: USB Role-Switch Driver for Synopsys Core
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\driverstore\filerepository\urssynopsys.inf_amd64_ef0be23d0f063014\urssynopsys.sys
     12/12/2021 4:28 AM
   Usb4DeviceRouter
     \SystemRoot\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_7754111f295a4694\Usb4DeviceRouter.sys
     USB4 Device Router Service: USB4(TM) Device Router Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\driverstore\filerepository\usb4devicerouter.inf_amd64_7754111f295a4694\usb4devicerouter.sys
     3/12/1915 1:08 PM
   Usb4HostRouter
     \SystemRoot\System32\DriverStore\FileRepository\usb4hostrouter.inf_amd64_7b5149f37b0f7874\Usb4HostRouter.sys
     USB4 Host Router Service: USB4(TM) Host Router Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\driverstore\filerepository\usb4hostrouter.inf_amd64_7b5149f37b0f7874\usb4hostrouter.sys
     11/29/1925 8:03 PM
   usbaudio
     \SystemRoot\system32\drivers\usbaudio.sys
     USB Audio Driver (WDM): USB Audio Class Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbaudio.sys
     4/22/1940 5:33 AM
   usbaudio2
     \SystemRoot\System32\drivers\usbaudio2.sys
     USB Audio 2.0 Service: Microsoft USB Audio Class 2.0 Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\usbaudio2.sys
     5/1/1955 5:38 AM
   usbccgp
     \SystemRoot\System32\drivers\usbccgp.sys
     Microsoft USB Generic Parent Driver: USB Common Class Generic Parent Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbccgp.sys
     1/24/1994 5:27 PM
   usbcir
     \SystemRoot\System32\drivers\usbcir.sys
     eHome Infrared Receiver (USBCIR): USB Consumer IR Driver for eHome
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\usbcir.sys
     12/16/1938 8:06 PM
   usbehci
     \SystemRoot\System32\drivers\usbehci.sys
     Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: EHCI eUSB Miniport Driver
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\usbehci.sys
     4/16/1968 4:55 AM
   usbhub
     \SystemRoot\System32\drivers\usbhub.sys
     Microsoft USB Standard Hub Driver: Default Hub Driver for USB
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\usbhub.sys
     4/3/1936 3:04 PM
   USBHUB3
     \SystemRoot\System32\drivers\UsbHub3.sys
     SuperSpeed Hub: USB3 HUB Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbhub3.sys
     9/19/1908 9:10 PM
   usbohci
     \SystemRoot\System32\drivers\usbohci.sys
     Microsoft USB Open Host Controller Miniport Driver: OHCI USB Miniport Driver
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\usbohci.sys
     6/9/1930 3:24 PM
   usbprint
     \SystemRoot\System32\drivers\usbprint.sys
     Microsoft USB PRINTER Class: USB Printer driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbprint.sys
     4/13/2022 6:58 AM
   usbser
     \SystemRoot\System32\drivers\usbser.sys
     Microsoft USB Serial Driver: USB Serial Driver
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\drivers\usbser.sys
     12/3/1953 4:42 AM
   USBSTOR
     \SystemRoot\System32\drivers\USBSTOR.SYS
     USB Mass Storage Driver: USB Mass Storage Class Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\usbstor.sys
     12/19/2009 3:57 PM
   usbuhci
     \SystemRoot\System32\drivers\usbuhci.sys
     Microsoft USB Universal Host Controller Miniport Driver: UHCI USB Miniport Driver
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\drivers\usbuhci.sys
     2/22/1934 5:04 AM
   usbvideo
     \SystemRoot\System32\Drivers\usbvideo.sys
     USB Video Device (WDM): USB Video Class Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbvideo.sys
     9/22/1995 9:06 PM
   USBXHCI
     \SystemRoot\System32\drivers\USBXHCI.SYS
     USB xHCI Compliant Host Controller: USB XHCI Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\usbxhci.sys
     4/28/1982 10:41 AM
   vdrvroot
     System32\drivers\vdrvroot.sys
     Microsoft Virtual Drive Enumerator: Virtual Drive Root Enumerator
     Microsoft Corporation
     10.0.26100.1591
     c:\windows\system32\drivers\vdrvroot.sys
     2/16/1906 2:28 AM
   VerifierExt
     System32\drivers\VerifierExt.sys
     Driver Verifier Extension: Driver Verifier component to help find bugs in device drivers.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\verifierext.sys
     11/29/1998 3:15 PM
   vhdmp
     \SystemRoot\System32\drivers\vhdmp.sys
     vhdmp: VHD Miniport Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\vhdmp.sys
     2/20/1941 1:15 PM
   vhf
     \SystemRoot\System32\drivers\vhf.sys
     Virtual HID Framework (VHF) Driver: Kernel mode driver that implements the Virtual HID Framework (VHF)
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vhf.sys
     5/2/1986 2:13 PM
   Vid
     \SystemRoot\System32\drivers\Vid.sys
     Vid: Microsoft Hyper-V Virtualization Infrastructure Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\vid.sys
     2/1/1960 7:54 PM
   VirtualRender
     \SystemRoot\System32\DriverStore\FileRepository\vrd.inf_amd64_4dd0e6d66a75bb7e\vrd.sys
     VirtualRender: Microsoft Virtual Render Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\vrd.inf_amd64_4dd0e6d66a75bb7e\vrd.sys
     9/27/1984 3:05 AM
   vmbus
     System32\drivers\vmbus.sys
     Virtual Machine Bus: Microsoft Hyper-V Virtual Machine Bus Child Driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\vmbus.sys
     6/3/2026 10:35 PM
   VMBusHID
     \SystemRoot\System32\drivers\VMBusHID.sys
     VMBusHID: Microsoft VMBus HID Miniport
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vmbushid.sys
     6/8/2029 7:29 PM
   vmgid
     \SystemRoot\System32\drivers\vmgid.sys
     Microsoft Hyper-V Guest Infrastructure Driver: Virtual Machine Guest Infrastructure Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vmgid.sys
     11/8/1931 1:37 PM
   volmgr
     System32\drivers\volmgr.sys
     Volume Manager Driver: Volume Manager Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\volmgr.sys
     8/21/1910 12:14 PM
   volmgrx
     System32\drivers\volmgrx.sys
     Dynamic Volume Manager: Extension of the volume manager driver that manages software RAID volumes (spanned, striped, mirrored, RAID-5) on dynamic disks
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\volmgrx.sys
     11/27/1920 10:17 AM
   volsnap
     System32\drivers\volsnap.sys
     Volume Shadow Copy driver: Volume class filter driver that takes and manages snapshots.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\volsnap.sys
     5/8/1921 11:54 PM
   volume
     System32\drivers\volume.sys
     Volume driver: Volume driver
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drivers\volume.sys
     10/12/1982 3:31 AM
   vpci
     System32\drivers\vpci.sys
     Microsoft Hyper-V Virtual PCI Bus: Virtual PCI Bus
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\vpci.sys
     3/23/1967 8:51 PM
   vsmraid
     System32\drivers\vsmraid.sys
     vsmraid: VIA RAID DRIVER FOR AMD-X86-64
     VIA Technologies Inc.,Ltd
     7.0.9600.6352
     c:\windows\system32\drivers\vsmraid.sys
     4/22/2014 3:21 PM
   VSTXRAID
     System32\drivers\vstxraid.sys
     VIA StorX Storage RAID Controller Windows Driver: VIA StorX RAID Controller Driver
     VIA Corporation
     8.0.9200.8110
     c:\windows\system32\drivers\vstxraid.sys
     1/21/2013 3:00 PM
   vwifibus
     \SystemRoot\System32\DriverStore\FileRepository\netvwifibus.inf_amd64_ab4e111fe8221178\vwifibus.sys
     Virtual Wireless Bus Driver: Implements bus functionality for Virtual Wireless
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\driverstore\filerepository\netvwifibus.inf_amd64_ab4e111fe8221178\vwifibus.sys
     3/19/2019 12:10 AM
   vwififlt
     System32\drivers\vwififlt.sys
     Virtual WiFi Filter Driver: Virtual WiFi Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\vwififlt.sys
     12/31/1942 5:25 AM
   WacomPen
     \SystemRoot\System32\drivers\wacompen.sys
     Wacom Serial Pen HID Driver: Wacom Serial Pen Tablet HID Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\wacompen.sys
     5/10/2033 12:05 AM
   wanarp
     System32\DRIVERS\wanarp.sys
     Remote Access IP ARP Driver: Remote Access IP ARP Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\wanarp.sys
     6/1/1950 10:36 PM
   wanarpv6
     System32\DRIVERS\wanarp.sys
     Remote Access IPv6 ARP Driver: Remote Access IPv6 ARP Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\wanarp.sys
     6/1/1950 10:36 PM
   wcifs
     \SystemRoot\system32\drivers\wcifs.sys
     Windows Container Isolation: Provides a virtual filesystem view for processes running within Windows Containers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\wcifs.sys
     4/15/2011 11:25 PM
   WdBoot
     system32\drivers\wd\WdBoot.sys
     Microsoft Defender Antivirus Boot Driver: Microsoft Defender Antivirus Boot Driver
     Microsoft Corporation
     4.18.25040.2
     c:\windows\system32\drivers\wd\wdboot.sys
     4/4/2012 10:00 AM
   Wdf01000
     system32\drivers\Wdf01000.sys
     Kernel Mode Driver Frameworks service: Kernel Mode Driver Framework Runtime
     Microsoft Corporation
     1.35.26100.3912
     c:\windows\system32\drivers\wdf01000.sys
     8/9/1933 12:43 PM
   WdFilter
     system32\drivers\wd\WdFilter.sys
     Microsoft Defender Antivirus Mini-Filter Driver: Microsoft Defender Antivirus On-Access Malware Protection Mini-Filter Driver
     Microsoft Corporation
     4.18.25040.2
     c:\windows\system32\drivers\wd\wdfilter.sys
     9/13/2005 2:11 AM
   wdiwifi
     system32\DRIVERS\wdiwifi.sys
     WDI Driver Framework: WDI Driver Framework Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wdiwifi.sys
     7/9/2012 12:25 PM
   WdmCompanionFilter
     system32\drivers\WdmCompanionFilter.sys
     WdmCompanionFilter: WDM Companion Filter
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\drivers\wdmcompanionfilter.sys
     7/4/1987 1:22 PM
   WdNisDrv
     system32\drivers\wd\WdNisDrv.sys
     Microsoft Defender Antivirus Network Inspection System Driver: Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols
     Microsoft Corporation
     4.18.25040.2
     c:\windows\system32\drivers\wd\wdnisdrv.sys
     8/28/1972 2:13 AM
   WFPLWFS
     System32\drivers\wfplwfs.sys
     Microsoft Windows Filtering Platform: Microsoft Windows Filtering Platform
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wfplwfs.sys
     4/20/1965 5:36 AM
   Wificx
     system32\drivers\WifiCx.sys
     Wifi Network Adapter Class Extension: Windows Wifi Class Extension
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wificx.sys
     10/27/2016 5:07 AM
   WIMMount
     system32\drivers\wimmount.sys
     WIMMount: WIM Image mount service driver
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\wimmount.sys
     10/11/1961 7:11 AM
   WinAccelCx0101
     system32\drivers\WinAccelCx.sys
     Microsoft Accelerator Class Extension Driver: Microsoft Accelerator Class Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\winaccelcx.sys
     5/24/1909 9:17 AM
   WindowsTrustedRT
     system32\drivers\WindowsTrustedRT.sys
     Windows Trusted Execution Environment Class Extension: Windows Trusted Runtime Interface Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\windowstrustedrt.sys
     6/17/1904 7:22 PM
   WindowsTrustedRTProxy
     System32\drivers\WindowsTrustedRTProxy.sys
     Microsoft Windows Trusted Runtime Secure Service: Windows Trusted Runtime Service Proxy Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\windowstrustedrtproxy.sys
     8/1/1911 2:53 AM
   wini3ctarget
     \SystemRoot\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys
     Generic driver for I3C Target Devices: WinI3C Target Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\driverstore\filerepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys
     8/4/1970 12:04 PM
   WinMad
     \SystemRoot\System32\drivers\winmad.sys
     WinMad Service: Kernel WinMad
     Mellanox
     5.50.14695.0
     c:\windows\system32\drivers\winmad.sys
     6/19/2019 9:18 AM
   WinNat
     system32\drivers\winnat.sys
     Windows NAT Driver: This service provides network address translation functionality
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\winnat.sys
     3/25/1980 11:44 AM
   WINUSB
     \SystemRoot\System32\drivers\WinUSB.SYS
     WinUsb Driver: Generic driver for USB devices
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\winusb.sys
     7/9/1934 1:25 PM
   WinVerbs
     \SystemRoot\System32\drivers\winverbs.sys
     WinVerbs Service: Kernel WinVerbs
     Mellanox
     5.50.14695.0
     c:\windows\system32\drivers\winverbs.sys
     6/19/2019 9:18 AM
   WmiAcpi
     \SystemRoot\System32\drivers\wmiacpi.sys
     Microsoft Windows Management Interface for ACPI: Windows Management Interface for ACPI
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\wmiacpi.sys
     12/3/1928 4:35 PM
   Wof
     Wof
     Windows Overlay File System Filter Driver: Windows Overlay Filter
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\drivers\wof.sys
     10/21/1909 6:35 AM
   WpdUpFltr
     System32\drivers\WpdUpFltr.sys
     WPD Upper Class Filter Driver: WPD Upper Class Filter Driver
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\drivers\wpdupfltr.sys
     2/15/2032 11:48 PM
   wtd
     System32\drivers\wtd.sys
     wtd: WTD Driver
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\drivers\wtd.sys
     5/16/1948 3:38 PM
   WudfPf
     system32\drivers\WudfPf.sys
     User Mode Driver Frameworks Platform Driver: A kernel mode driver that uses message-based interprocess communication mechanism to communicate with the driver manager and secure host process to facilitate secure companions
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wudfpf.sys
     7/27/2015 8:45 AM
   WUDFRd
     \SystemRoot\System32\drivers\WUDFRd.sys
     Windows Driver Foundation - User-mode Driver Framework Reflector: A kernel mode driver that uses message-based interprocess communication mechanism to communicate with the driver manager and host process to facilitate UMDF drivers
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wudfrd.sys
     5/15/2004 4:45 PM
   WUDFWpdFs
     \SystemRoot\system32\DRIVERS\WUDFRd.sys
     WPD File System driver: User mode driver that enables communication with removable storage devices via the WPD interface
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\wudfrd.sys
     5/15/2004 4:45 PM
   xboxgip
     \SystemRoot\System32\drivers\xboxgip.sys
     Xbox Game Input Protocol Driver: Xbox Game Input Protocol Driver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\xboxgip.sys
     8/27/1967 5:28 AM
   xinputhid
     \SystemRoot\System32\drivers\xinputhid.sys
     XINPUT HID Filter Driver: XINPUT filter driver for HID
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\xinputhid.sys
     12/31/1918 8:21 PM
   ZTDNS
     system32\drivers\ztdns.sys
     ZTDNS: ZTDNS
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drivers\ztdns.sys
     10/1/1915 7:14 AM

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers
   Adobe Type Manager
     atmfd.dll
     File not found: atmfd.dll
     

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers
   Automatic Redeployment Credential Provider
     HKCR\CLSID\{01A30791-40AE-4653-AB2E-FD210019AE88}
     Autopilot Reset Credential Provider
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\mgmtrefreshcredprov.dll
     4/28/1914 7:35 PM
   Smartcard Reader Selection Provider
     HKCR\CLSID\{1b283861-754f-4022-ad47-a5eaaa618894}
     Windows Smartcard Credential Provider
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\smartcardcredentialprovider.dll
     4/14/1989 1:05 AM
   Smartcard WinRT Provider
     HKCR\CLSID\{1ee7337f-85ac-45e2-a23c-37c753209769}
     Windows Smartcard Credential Provider
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\smartcardcredentialprovider.dll
     4/14/1989 1:05 AM
   PicturePasswordLogonProvider
     HKCR\CLSID\{2135f72a-90b5-4ed3-a7f1-8bb705ac276a}
     Credential Providers Legacy
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\credprovslegacy.dll
     1/13/2035 1:37 AM
   GenericProvider
     HKCR\CLSID\{25CBB996-92ED-457e-B28C-4774084BD562}
     Credential Providers
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credprovs.dll
     10/19/1990 8:17 AM
   TrustedSignal Credential Provider
     HKCR\CLSID\{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}
     TrustedSignal Credential Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\trustedsignalcredprov.dll
     4/14/1963 6:23 PM
   NPProvider
     HKCR\CLSID\{3dd6bec0-8193-4ffe-ae25-e08e39ea4063}
     Credential Providers
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credprovs.dll
     10/19/1990 8:17 AM
   Second Authentication Factor Credential Provider
     HKCR\CLSID\{48B4E58D-2791-456C-9091-D524C6C706F2}
     Microsoft Companion Authenticator Credential Provider
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\devicengccredprov.dll
     7/25/2007 12:58 AM
   CngCredUICredentialProvider
     HKCR\CLSID\{600e7adb-da3e-41a4-9225-3c0399e88c0c}
     Microsoft CNG CredUI Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\cngcredui.dll
     12/13/1973 5:21 PM
   PasswordProvider
     HKCR\CLSID\{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}
     Credential Providers
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credprovs.dll
     10/19/1990 8:17 AM
   FaceCredentialProvider
     HKCR\CLSID\{8AF662BF-65A0-4D0A-A540-A338A999D36F}
     Face Credential Provider
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\facecredentialprovider.dll
     5/21/2032 2:22 PM
   Smartcard Credential Provider
     HKCR\CLSID\{8FD7E19C-3BF7-489B-A72C-846AB3678C96}
     Windows Smartcard Credential Provider
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\smartcardcredentialprovider.dll
     4/14/1989 1:05 AM
   Smartcard Pin Provider
     HKCR\CLSID\{94596c7e-3744-41ce-893e-bbf09122f76a}
     Windows Smartcard Credential Provider
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\smartcardcredentialprovider.dll
     4/14/1989 1:05 AM
   WinBio Credential Provider
     HKCR\CLSID\{BEC09223-B018-416D-A0AC-523971B639F5}
     WinBio Credential Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\biocredprov.dll
     10/4/1911 4:30 PM
   Cloud Experience Credential Provider
     HKCR\CLSID\{C5D7540A-CD51-453B-B22B-05305BA03F07}
     Cloud Experience Credential Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\cxcredprov.dll
     9/23/1996 12:33 AM
   PINLogonProvider
     HKCR\CLSID\{cb82ea12-9f71-446d-89e1-8d0924e1256e}
     Credential Providers Legacy
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\credprovslegacy.dll
     1/13/2035 1:37 AM
   NGC Credential Provider
     HKCR\CLSID\{D6886603-9D2F-4EB2-B667-1971041FA96B}
     Microsoft Passport Credential Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ngccredprov.dll
     2/1/1920 6:22 AM
   CCertProvider
     HKCR\CLSID\{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}
     Cert Credential Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\certcredprovider.dll
     9/28/1977 11:11 PM
   %windir%\system32\rdpcredentialprovider.dll
     HKCR\CLSID\{f64945df-4fa9-4068-a2fb-61af319edd33}
     "RdpCredentialProvider.DYNLINK"
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\rdpcredentialprovider.dll
     10/21/1944 9:58 PM
   WLIDCredentialProvider
     HKCR\CLSID\{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}
     Microsoft® Account Credential Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wlidcredprov.dll
     1/13/1918 12:00 AM
   FIDO Credential Provider
     HKCR\CLSID\{F8A1793B-7873-4046-B2A7-1F318747F427}
     FIDO Credential Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fidocredprov.dll
     9/29/2025 1:24 AM

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters
   GenericFilter
     HKCR\CLSID\{DDC0EED2-ADBE-40b6-A217-EDE16A79A0DE}
     Credential Providers
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\credprovs.dll
     10/19/1990 8:17 AM

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\PLAP Providers
   CRasProvider
     HKCR\CLSID\{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D}
     RAS PLAP Credential Provider
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\rasplap.dll
     7/28/1963 4:03 PM

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GpExtensions
   {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
     wlgpclnt.dll
     802.11 Group Policy Client
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wlgpclnt.dll
     8/16/1931 11:44 AM
   {0E28E245-9368-4853-AD84-6DA3BA35BB75}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {169EBF44-942F-4C43-87CE-13C93996EBBE}
     AppManagementConfiguration.dll
     Application Management Configuration
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\appmanagementconfiguration.dll
     8/18/2017 11:38 PM
   {16be69fa-4209-4250-88cb-716cf41954e0}
     auditcse.dll
     Windows Audit Settings CSE
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\auditcse.dll
     1/19/2003 1:38 AM
   {17D89FEC-5C44-4972-B12D-241CAEF74509}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {1A6364EB-776B-4120-ADE1-B63A406A76B5}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {25537BA6-77A8-11D2-9B6C-0000F8080861}
     fdeploy.dll
     Folder Redirection Group Policy Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\fdeploy.dll
     9/24/1942 11:25 PM
   {2A8FDC61-2347-4C87-92F6-B05EB91A201A}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {2BFCC077-22D2-48DE-BDE1-2F618D9B476D}
     AppManagementConfiguration.dll
     Application Management Configuration
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\appmanagementconfiguration.dll
     8/18/2017 11:38 PM
   {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
     %SystemRoot%\System32\dskquota.dll
     Windows Shell Disk Quota Support DLL
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\dskquota.dll
     1/20/1942 2:17 PM
   {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
     gptext.dll
     GPTExt
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\gptext.dll
     4/22/1980 11:09 AM
   {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
     C:\Windows\System32\gpscript.dll
     Script Client Side Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\gpscript.dll
     8/20/1995 4:43 AM
   {4B7C3B0F-E993-4E06-A241-3FBE06943684}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {4bcd6cde-777b-48b6-9804-43568e23545d}
     %SystemRoot%\System32\TsUsbRedirectionGroupPolicyExtension.dll
     Remote Desktop USB Redirection GP Extension
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\tsusbredirectiongrouppolicyextension.dll
     11/21/1992 6:33 AM
   {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
     C:\Windows\System32\iedkcs32.dll
     IEAK branding
     Microsoft Corporation
     18.0.26100.1882
     c:\windows\system32\iedkcs32.dll
     1/11/2033 9:12 PM
   {4D2F9B6F-1E52-4711-A382-6A8B1A003DE6}
     C:\Windows\System32\tsworkspace.dll
     RemoteApp and Desktop Connection Component
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\tsworkspace.dll
     3/11/2027 6:30 AM
   {4d968b55-cac2-4ff5-983f-0a54603781a3}
     WorkFoldersGPExt.dll
     Microsoft (C) Work Folders Group Policy Client Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\workfoldersgpext.dll
     9/17/2032 7:15 PM
   {5794DAFD-BE60-433f-88A2-1A31939AC01F}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {6232C319-91AC-4931-9385-E70C2B099F0E}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {728EE579-943C-4519-9EF7-AB56765798ED}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {74EE6C03-5363-4554-B161-627540339CAB}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {7909AD9E-09EE-4247-BAB9-7029D5F0A278}
     dmenrollengine.dll
     Enroll Engine DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dmenrollengine.dll
     3/31/1915 11:31 AM
   {7933F41E-56F8-41d6-A31C-4148A711EE93}
     %SystemRoot%\System32\srchadmin.dll
     Indexing Options
     Microsoft Corporation
     7.0.26100.3912
     c:\windows\system32\srchadmin.dll
     9/24/2008 7:21 PM
   {7B849a69-220F-451E-B3FE-2CB811AF94AE}
     C:\Windows\System32\iedkcs32.dll
     IEAK branding
     Microsoft Corporation
     18.0.26100.1882
     c:\windows\system32\iedkcs32.dll
     1/11/2033 9:12 PM
   {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
     scecli.dll
     Windows Security Configuration Editor Client Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\scecli.dll
     8/20/1974 3:00 PM
   {8472C2C4-6B70-4301-A20D-A6CEA5F82B7E}
     %SystemRoot%\System32\StartTileData.dll
     Start Tile Data InProc Server
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\starttiledata.dll
     7/25/1920 4:32 AM
   {8A28E2C5-8D06-49A4-A08C-632DAA493E17}
     %systemroot%\system32\gpprnext.dll
     Group Policy Printer Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\gpprnext.dll
     1/13/1963 5:07 PM
   {91FBB303-0CD5-4055-BF42-E512A681B325}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {9F02E2F5-5A41-4D1A-B473-4617E84BC957}
     %systemroot%\system32\WindowsProtectedPrintConfiguration.dll
     Windows Protected Print Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windowsprotectedprintconfiguration.dll
     11/27/1993 5:22 AM
   {A3F3E39B-5D83-4940-B954-28315B82F0A8}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {AADCED64-746C-4633-A97C-D61349046527}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {B087BE9D-ED37-454f-AF9C-04291E351182}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
     dot3gpclnt.dll
     802.3 Group Policy Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dot3gpclnt.dll
     2/5/1960 11:15 AM
   {BA649533-0AAC-4E04-B9BC-4DBAE0325B12}
     pwlauncher.dll
     Windows To Go Launcher
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\pwlauncher.dll
     7/11/1927 6:41 AM
   {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {C34B2751-1CF4-44F5-9262-C3FC39666591}
     pwlauncher.dll
     Windows To Go Launcher
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\pwlauncher.dll
     7/11/1927 6:41 AM
   {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {C631DF4C-088F-4156-B058-4375F0853CD8}
     %SystemRoot%\System32\cscobj.dll
     In-proc COM object used by clients of CSC API
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscobj.dll
     1/21/2016 10:13 PM
   {c6dc5466-785a-11d2-84d0-00c04fb169f7}
     appmgmts.dll
     Software installation Service
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\appmgmts.dll
     5/24/1947 11:32 AM
   {cdeafc3d-948d-49dd-ab12-e578ba4af7aa}
     gptext.dll
     GPTExt
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\gptext.dll
     4/22/1980 11:09 AM
   {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
     C:\Windows\System32\iedkcs32.dll
     IEAK branding
     Microsoft Corporation
     18.0.26100.1882
     c:\windows\system32\iedkcs32.dll
     1/11/2033 9:12 PM
   {CFF649BD-601D-4361-AD3D-0FC365DB4DB7}
     %SystemRoot%\system32\domgmt.dll
     Delivery Optimization Management
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\domgmt.dll
     1/23/2001 8:33 AM
   {e437bc1c-aa7d-11d2-a382-00c04f991e27}
     %SystemRoot%\System32\polstore.dll
     Policy Storage dll
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\polstore.dll
     11/27/1978 12:46 PM
   {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {E5094040-C46C-4115-B030-04FB2E545B00}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {F312195E-3D9D-447A-A3F5-08DFFA24735E}
     dggpext.dll
     Device Guard Group Policy CSE
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\dggpext.dll
     12/10/1995 3:22 AM
   {f3ccc681-b74c-4060-9f26-cd84525dca2a}
     auditcse.dll
     Windows Audit Settings CSE
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\auditcse.dll
     1/19/2003 1:38 AM
   {F9C77450-3A41-477E-9310-9ACD617BD9E3}
     C:\Windows\System32\gpprefcl.dll
     Group Policy Preference Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\gpprefcl.dll
     8/6/1915 9:47 PM
   {FB2CA36D-0B40-4307-821B-A13B252DE56C}
     gptext.dll
     GPTExt
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\gptext.dll
     4/22/1980 11:09 AM
   {fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}
     gptext.dll
     GPTExt
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\gptext.dll
     4/22/1980 11:09 AM
   {FC491EF1-C4AA-4CE1-B329-414B101DB823}
     dggpext.dll
     Device Guard Group Policy CSE
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\dggpext.dll
     12/10/1995 3:22 AM

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
   Appmon
     AppMon.dll
     App Printer
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\appmon.dll
     8/10/1964 1:59 PM
   Local Port
     localspl.dll
     Local Spooler DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\localspl.dll
     3/13/1988 6:58 PM
   Standard TCP/IP Port
     tcpmon.dll
     Standard TCP/IP Port Monitor DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\tcpmon.dll
     6/10/2031 2:49 AM
   USB Monitor
     usbmon.dll
     Standard Dynamic Printing Port Monitor DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\usbmon.dll
     12/24/1922 3:38 PM
   Virtual Port Monitor
     VirtualMon.dll
     Virtual Printer Monitor
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\virtualmon.dll
     7/5/2025 11:28 AM
   WSD Port
     APMon.dll
     Adaptive Port Monitor
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\apmon.dll
     9/28/1940 6:06 AM

HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers
   Internet Print Provider
     inetpp.dll
     Internet Print Provider DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\inetpp.dll
     6/1/1966 2:41 AM
   LanMan Print Services
     win32spl.dll
     Client Side Rendering Print Provider
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\win32spl.dll
     7/15/2009 9:21 AM

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders
   credssp.dll
     credssp.dll
     Credential Delegation Security Package
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\credssp.dll
     3/23/2013 9:25 PM

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages
   msv1_0
     msv1_0
     Microsoft Authentication Package v1.0
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\msv1_0.dll
     6/8/1986 3:03 AM

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages
   scecli
     scecli
     Windows Security Configuration Editor Client Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\scecli.dll
     8/20/1974 3:00 PM

HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
   RDPNP
     %SystemRoot%\System32\drprov.dll
     Microsoft Terminal Services
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\drprov.dll
     7/20/2010 10:38 PM
   P9NP
     %SystemRoot%\System32\p9np.dll
     Plan 9 Network Provider
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\p9np.dll
     7/30/1925 5:19 AM
   LanmanWorkstation
     %SystemRoot%\System32\ntlanman.dll
     Microsoft Windows Network
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\ntlanman.dll
     7/14/1964 12:28 AM
   webclient
     %SystemRoot%\System32\davclnt.dll
     Web Client Network
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\davclnt.dll
     5/8/1936 9:16 AM

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries
   Hyper-V RAW
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   AF_UNIX
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [TCP/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [UDP/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [RAW/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [TCP/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [UDP/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [RAW/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP TCPv6 Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP TCP Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP UDPv6 Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP UDP Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD L2CAP [Bluetooth]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD RfComm [Bluetooth]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries
   E-mail Naming Shim Provider
     %SystemRoot%\system32\napinsp.dll
     E-mail Naming Shim Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\napinsp.dll
     12/9/1933 11:24 PM
   Tcpip
     %SystemRoot%\System32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   NTDS
     %SystemRoot%\System32\winrnr.dll
     LDAP RnR Provider DLL
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\winrnr.dll
     5/15/2037 1:26 PM
   @%SystemRoot%\system32\nlasvc.dll,-1000
     %SystemRoot%\system32\nlansp_c.dll
     NLA Namespace Service Provider DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\nlansp_c.dll
     5/12/1949 5:59 AM
   Bluetooth Namespace
     %SystemRoot%\system32\wshbth.dll
     Windows Sockets Helper DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wshbth.dll
     3/21/2029 5:25 AM

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64
   Hyper-V RAW
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   AF_UNIX
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [TCP/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [UDP/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [RAW/IPv6]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [TCP/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [UDP/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD Tcpip [RAW/IP]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP TCPv6 Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP TCP Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP UDPv6 Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   RSVP UDP Service Provider
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD L2CAP [Bluetooth]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   MSAFD RfComm [Bluetooth]
     %SystemRoot%\system32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64
   E-mail Naming Shim Provider
     %SystemRoot%\system32\napinsp.dll
     E-mail Naming Shim Provider
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\napinsp.dll
     12/9/1933 11:24 PM
   Tcpip
     %SystemRoot%\System32\mswsock.dll
     Microsoft Windows Sockets 2.0 Service Provider
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mswsock.dll
     11/3/1963 9:29 AM
   NTDS
     %SystemRoot%\System32\winrnr.dll
     LDAP RnR Provider DLL
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\winrnr.dll
     5/15/2037 1:26 PM
   @%SystemRoot%\system32\nlasvc.dll,-1000
     %SystemRoot%\system32\nlansp_c.dll
     NLA Namespace Service Provider DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\nlansp_c.dll
     5/12/1949 5:59 AM
   Bluetooth Namespace
     %SystemRoot%\system32\wshbth.dll
     Windows Sockets Helper DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wshbth.dll
     3/21/2029 5:25 AM

HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
   rdpclip
     rdpclip
     RDP Clipboard Monitor
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\rdpclip.exe
     1/9/1910 6:39 AM

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
   C:\WINDOWS\system32\userinit.exe
     C:\WINDOWS\system32\userinit.exe
     Userinit Logon Application
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\userinit.exe
     3/30/1981 5:06 AM

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\VmApplet
   SystemPropertiesPerformance.exe
     SystemPropertiesPerformance.exe
     Change Computer Performance Settings
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\systempropertiesperformance.exe
     6/17/1912 10:47 PM

HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
   *kernel32
     kernel32.dll
     Windows NT BASE API Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\kernel32.dll
     3/30/1998 7:46 PM
   _wow64cpu
     wow64cpu.dll
     AMD64 Wow64 CPU 
     Microsoft Corporation
     10.0.26100.2894
     c:\windows\system32\wow64cpu.dll
     6/30/2027 9:35 PM
   _wowarmhw
     wowarmhw.dll
     c:\windows\system32\wowarmhw.dll
     
   _xtajit
     xtajit.dll
     c:\windows\system32\xtajit.dll
     
   advapi32
     advapi32.dll
     Advanced Windows 32 Base API
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\advapi32.dll
     4/1/1941 6:27 PM
   clbcatq
     clbcatq.dll
     COM+ Configuration Catalog
     Microsoft Corporation
     2001.12.10941.16384
     c:\windows\system32\clbcatq.dll
     9/15/2020 1:57 PM
   combase
     combase.dll
     Microsoft COM for Windows
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\combase.dll
     8/8/1999 6:12 AM
   COMDLG32
     COMDLG32.dll
     Common Dialogs DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\comdlg32.dll
     12/26/1989 8:20 AM
   coml2
     coml2.dll
     Microsoft COM for Windows
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\coml2.dll
     4/20/1956 3:37 AM
   DifxApi
     difxapi.dll
     Driver Install Frameworks for API library module
     Microsoft Corporation
     2.1.0.0
     c:\windows\system32\difxapi.dll
     1/17/1992 10:39 AM
   gdi32
     gdi32.dll
     GDI Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\gdi32.dll
     4/16/1915 1:13 PM
   gdiplus
     gdiplus.dll
     Microsoft GDI+
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\gdiplus.dll
     7/22/1956 5:16 PM
   IMAGEHLP
     IMAGEHLP.dll
     Windows NT Image Helper
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\imagehlp.dll
     4/22/1945 3:31 AM
   IMM32
     IMM32.dll
     Multi-User Windows IMM32 API Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\imm32.dll
     8/8/1976 1:26 PM
   MSCTF
     MSCTF.dll
     MSCTF Server DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\msctf.dll
     9/18/1976 4:44 PM
   MSVCRT
     MSVCRT.dll
     Windows NT CRT DLL
     Microsoft Corporation
     7.0.26100.4061
     c:\windows\system32\msvcrt.dll
     6/11/1946 3:07 AM
   NORMALIZ
     NORMALIZ.dll
     Unicode Normalization DLL
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\normaliz.dll
     5/15/1933 2:38 PM
   NSI
     NSI.dll
     NSI User-mode interface DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\nsi.dll
     5/29/1967 12:27 PM
   ole32
     ole32.dll
     Microsoft OLE for Windows
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ole32.dll
     9/10/1945 7:09 PM
   OLEAUT32
     OLEAUT32.dll
     OLEAUT32.DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\oleaut32.dll
     3/12/2003 8:58 PM
   PSAPI
     PSAPI.DLL
     Process Status Helper
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\psapi.dll
     6/13/2001 3:55 PM
   rpcrt4
     rpcrt4.dll
     Remote Procedure Call Runtime
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\rpcrt4.dll
     3/24/2026 1:36 PM
   sechost
     sechost.dll
     Host for SCM/SDDL/LSA Lookup APIs
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\sechost.dll
     9/9/1922 9:36 PM
   Setupapi
     Setupapi.dll
     Windows Setup API
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\setupapi.dll
     11/11/1989 12:33 PM
   SHCORE
     SHCORE.dll
     SHCORE
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shcore.dll
     12/8/1960 9:12 PM
   SHELL32
     SHELL32.dll
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   SHLWAPI
     SHLWAPI.dll
     Shell Light-weight Utility Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\shlwapi.dll
     9/7/1964 9:10 PM
   user32
     user32.dll
     Multi-User Windows USER API Client DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\user32.dll
     6/9/1987 7:43 AM
   WLDAP32
     WLDAP32.dll
     Win32 LDAP API DLL
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\system32\wldap32.dll
     1/24/1938 10:45 AM
   wow64
     wow64.dll
     Win32 Emulation on NT64
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wow64.dll
     7/13/2004 3:01 PM
   wow64base
     wow64base.dll
     Win32 Emulation on NT64
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wow64base.dll
     6/22/1967 7:17 PM
   wow64con
     wow64con.dll
     Wow64 Console and Win32 API Logging
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wow64con.dll
     4/17/1964 10:34 PM
   wow64win
     wow64win.dll
     Wow64 Console and Win32 API Logging
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wow64win.dll
     3/1/2027 3:12 PM
   WS2_32
     WS2_32.dll
     Windows Socket 2.0 32-Bit DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ws2_32.dll
     6/9/1903 9:25 AM
   xtajit64
     xtajit64.dll
     c:\windows\system32\xtajit64.dll
     
   xtajit64se
     xtajit64se.dll
     c:\windows\system32\xtajit64se.dll
     
   *kernel32
     kernel32.dll
     Windows NT BASE API Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\kernel32.dll
     6/7/2018 5:14 AM
   _wow64cpu
     wow64cpu.dll
     c:\windows\syswow64\wow64cpu.dll
     
   _wowarmhw
     wowarmhw.dll
     c:\windows\syswow64\wowarmhw.dll
     
   _xtajit
     xtajit.dll
     c:\windows\syswow64\xtajit.dll
     
   advapi32
     advapi32.dll
     Advanced Windows 32 Base API
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\syswow64\advapi32.dll
     1/6/2010 5:06 AM
   clbcatq
     clbcatq.dll
     COM+ Configuration Catalog
     Microsoft Corporation
     2001.12.10941.16384
     c:\windows\syswow64\clbcatq.dll
     11/1/1961 5:15 AM
   combase
     combase.dll
     Microsoft COM for Windows
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\combase.dll
     9/11/1976 1:31 AM
   COMDLG32
     COMDLG32.dll
     Common Dialogs DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\comdlg32.dll
     5/1/1955 5:29 AM
   coml2
     coml2.dll
     Microsoft COM for Windows
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\coml2.dll
     7/17/2026 9:08 AM
   DifxApi
     difxapi.dll
     Driver Install Frameworks for API library module
     Microsoft Corporation
     2.1.0.0
     c:\windows\syswow64\difxapi.dll
     8/6/1903 8:56 PM
   gdi32
     gdi32.dll
     GDI Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\gdi32.dll
     11/15/1924 3:10 PM
   gdiplus
     gdiplus.dll
     Microsoft GDI+
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\gdiplus.dll
     12/13/1903 8:04 PM
   IMAGEHLP
     IMAGEHLP.dll
     Windows NT Image Helper
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\imagehlp.dll
     6/6/1962 5:48 AM
   IMM32
     IMM32.dll
     Multi-User Windows IMM32 API Client DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\imm32.dll
     1/13/1951 2:22 PM
   MSCTF
     MSCTF.dll
     MSCTF Server DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\msctf.dll
     12/10/1945 7:36 AM
   MSVCRT
     MSVCRT.dll
     Windows NT CRT DLL
     Microsoft Corporation
     7.0.26100.4061
     c:\windows\syswow64\msvcrt.dll
     7/23/1950 12:15 AM
   NORMALIZ
     NORMALIZ.dll
     Unicode Normalization DLL
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\normaliz.dll
     10/3/1985 6:19 PM
   NSI
     NSI.dll
     NSI User-mode interface DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\nsi.dll
     10/30/2037 2:00 AM
   ole32
     ole32.dll
     Microsoft OLE for Windows
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\ole32.dll
     7/2/1939 5:56 PM
   OLEAUT32
     OLEAUT32.dll
     OLEAUT32.DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\oleaut32.dll
     3/11/1979 7:25 PM
   PSAPI
     PSAPI.DLL
     Process Status Helper
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\psapi.dll
     2/26/1965 4:59 AM
   rpcrt4
     rpcrt4.dll
     Remote Procedure Call Runtime
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\rpcrt4.dll
     12/17/1978 2:22 PM
   sechost
     sechost.dll
     Host for SCM/SDDL/LSA Lookup APIs
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\sechost.dll
     6/25/1903 11:38 AM
   Setupapi
     Setupapi.dll
     Windows Setup API
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\setupapi.dll
     8/13/2035 8:10 PM
   SHCORE
     SHCORE.dll
     SHCORE
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\shcore.dll
     3/3/1909 2:51 AM
   SHELL32
     SHELL32.dll
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\shell32.dll
     7/22/2025 7:32 PM
   SHLWAPI
     SHLWAPI.dll
     Shell Light-weight Utility Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\shlwapi.dll
     6/10/1937 12:00 PM
   user32
     user32.dll
     Multi-User Windows USER API Client DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\user32.dll
     7/16/1950 3:56 PM
   WLDAP32
     WLDAP32.dll
     Win32 LDAP API DLL
     Microsoft Corporation
     10.0.26100.3775
     c:\windows\syswow64\wldap32.dll
     8/14/1910 3:48 AM
   wow64
     wow64.dll
     c:\windows\syswow64\wow64.dll
     
   wow64base
     wow64base.dll
     c:\windows\syswow64\wow64base.dll
     
   wow64con
     wow64con.dll
     c:\windows\syswow64\wow64con.dll
     
   wow64win
     wow64win.dll
     c:\windows\syswow64\wow64win.dll
     
   WS2_32
     WS2_32.dll
     Windows Socket 2.0 32-Bit DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\ws2_32.dll
     9/26/2020 2:59 AM
   xtajit64
     xtajit64.dll
     c:\windows\syswow64\xtajit64.dll
     
   xtajit64se
     xtajit64se.dll
     c:\windows\syswow64\xtajit64se.dll
     

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
   explorer.exe
     explorer.exe
     Windows Explorer
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\explorer.exe
     1/20/2014 10:07 AM

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\AlternateShell
   cmd.exe
     cmd.exe
     Windows Command Processor
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\cmd.exe
     9/7/1966 1:08 AM

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   SecurityHealth
     %windir%\system32\SecurityHealthSystray.exe
     Windows Security notification icon
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\securityhealthsystray.exe
     4/2/1940 8:25 PM
   RtkAudUService
     "C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe" -background
     Realtek HD Audio Universal Service
     Realtek Semiconductor
     1.1.664.1
     c:\windows\system32\driverstore\filerepository\realtekservice.inf_amd64_c2fa179f72a88c18\rtkauduservice64.exe
     9/10/2024 2:35 AM

HKLM\SOFTWARE\Classes\Protocols\Filter
   application/octet-stream
     HKCR\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   application/x-complus
     HKCR\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   application/x-msdownload
     HKCR\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   text/xml
     HKCR\CLSID\{807583E5-5146-11D5-A672-00B0D022E945}
     Microsoft Office XML MIME Filter
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\office16\msoxmlmf.dll
     5/15/2025 5:36 PM

HKLM\SOFTWARE\Classes\Protocols\Handler
   about
     HKCR\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}
     Microsoft (R) HTML Viewer
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\mshtml.dll
     3/25/1954 6:02 AM
   cdl
     HKCR\CLSID\{3dd53d40-7b8b-11D0-b013-00aa0059ce02}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   dvd
     HKCR\CLSID\{12D51199-0DB5-46FE-A120-47A3D7D937CC}
     ActiveX control for streaming video
     Microsoft Corporation
     6.5.26100.3624
     c:\windows\system32\msvidctl.dll
     8/27/2035 5:41 PM
   file
     HKCR\CLSID\{79eac9e7-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   ftp
     HKCR\CLSID\{79eac9e3-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   http
     HKCR\CLSID\{79eac9e2-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   https
     HKCR\CLSID\{79eac9e5-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   its
     HKCR\CLSID\{9D148291-B9C8-11D0-A4CC-0000F80149F6}
     Microsoft® InfoTech Storage System Library
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\itss.dll
     10/22/1970 11:01 PM
   javascript
     HKCR\CLSID\{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}
     Microsoft (R) HTML Viewer
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\mshtml.dll
     3/25/1954 6:02 AM
   local
     HKCR\CLSID\{79eac9e7-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   mailto
     HKCR\CLSID\{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}
     Microsoft (R) HTML Viewer
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\mshtml.dll
     3/25/1954 6:02 AM
   mhtml
     HKCR\CLSID\{05300401-BCBC-11d0-85E3-00C04FD85AB4}
     Microsoft Internet Messaging API Resources
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\inetcomm.dll
     1/3/1972 9:07 AM
   mk
     HKCR\CLSID\{79eac9e6-baf9-11ce-8c82-00aa004ba90b}
     OLE32 Extensions for Win32
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\urlmon.dll
     3/25/1985 10:38 PM
   ms-its
     HKCR\CLSID\{9D148291-B9C8-11D0-A4CC-0000F80149F6}
     Microsoft® InfoTech Storage System Library
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\itss.dll
     10/22/1970 11:01 PM
   mso-minsb-roaming.16
     HKCR\CLSID\{83C25742-A9F7-49FB-9138-434302C88D07}
     Microsoft Office component
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\msosb.dll
     5/15/2025 5:28 PM
   mso-minsb.16
     HKCR\CLSID\{42089D2D-912D-4018-9087-2B87803E93FB}
     Microsoft Office component
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\msosb.dll
     5/15/2025 5:28 PM
   osf-roaming.16
     HKCR\CLSID\{42089D2D-912D-4018-9087-2B87803E93FB}
     Microsoft Office component
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\msosb.dll
     5/15/2025 5:28 PM
   osf.16
     HKCR\CLSID\{5504BE45-A83B-4808-900A-3A5C36E7F77A}
     Microsoft Office component
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\msosb.dll
     5/15/2025 5:28 PM
   res
     HKCR\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}
     Microsoft (R) HTML Viewer
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\mshtml.dll
     3/25/1954 6:02 AM
   tbauth
     HKCR\CLSID\{14654CA6-5711-491D-B89A-58E571679951}
     TBAuth protocol handler
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\tbauth.dll
     3/4/2037 6:38 PM
   tv
     HKCR\CLSID\{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}
     ActiveX control for streaming video
     Microsoft Corporation
     6.5.26100.3624
     c:\windows\system32\msvidctl.dll
     8/27/2035 5:41 PM
   vbscript
     HKCR\CLSID\{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}
     Microsoft (R) HTML Viewer
     Microsoft Corporation
     11.0.26100.4061
     c:\windows\system32\mshtml.dll
     3/25/1954 6:02 AM
   windows.tbauth
     HKCR\CLSID\{14654CA6-5711-491D-B89A-58E571679951}
     TBAuth protocol handler
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\tbauth.dll
     3/4/2037 6:38 PM

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
   Microsoft Windows Media Player
     %SystemRoot%\system32\unregmp2.exe /ShowWMP
     Microsoft Windows Media Player Legacy Setup Utility
     Microsoft Corporation
     12.0.26100.1882
     c:\windows\system32\unregmp2.exe
     7/7/1982 7:20 PM
   Themes Setup
     themeui.dll
     Windows Theme API
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\themeui.dll
     11/8/1955 4:51 AM
   Microsoft Windows Media Player
     %SystemRoot%\system32\unregmp2.exe /FirstLogon
     Microsoft Windows Media Player Legacy Setup Utility
     Microsoft Corporation
     12.0.26100.1882
     c:\windows\system32\unregmp2.exe
     7/7/1982 7:20 PM
   Windows Desktop Update
     shell32.dll
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Web Platform Customizations
     C:\Windows\System32\ie4uinit.exe -UserConfig
     IE Per-User Initialization Utility
     Microsoft Corporation
     11.0.26100.3912
     c:\windows\system32\ie4uinit.exe
     2/9/2035 10:22 PM
   n/a
     C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
     Microsoft .NET IE SECURITY REGISTRATION
     Microsoft Corporation
     2.0.50727.9157
     c:\windows\system32\mscories.dll
     5/4/2021 12:13 AM
   Google Chrome
     "C:\Program Files\Google\Chrome\Application\136.0.7103.114\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --channel=stable
     Google Chrome Installer
     Google LLC
     136.0.7103.114
     c:\program files\google\chrome\application\136.0.7103.114\installer\chrmstp.exe
     5/13/2025 10:45 AM
   Microsoft Edge
     "C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.76\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable
     Microsoft Edge Installer
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\136.0.3240.76\installer\setup.exe
     5/14/2025 1:55 PM

HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components
   Microsoft Windows Media Player
     %SystemRoot%\system32\unregmp2.exe /ShowWMP
     Microsoft Windows Media Player Legacy Setup Utility
     Microsoft Corporation
     12.0.26100.1882
     c:\windows\syswow64\unregmp2.exe
     1/11/1979 6:22 AM
   Microsoft Windows Media Player
     %SystemRoot%\system32\unregmp2.exe /FirstLogon
     Microsoft Windows Media Player Legacy Setup Utility
     Microsoft Corporation
     12.0.26100.1882
     c:\windows\syswow64\unregmp2.exe
     1/11/1979 6:22 AM
   n/a
     C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
     Microsoft .NET IE SECURITY REGISTRATION
     Microsoft Corporation
     2.0.50727.9157
     c:\windows\syswow64\mscories.dll
     5/4/2021 12:32 AM

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\IconServiceLib
   IconCodecService.dll
     IconCodecService.dll
     Converts a PNG part of the icon to a legacy bmp icon
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\iconcodecservice.dll
     3/14/2020 3:48 PM

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects
   Published Items Shell Service Object
     HKCR\CLSID\{003e0278-eca8-4bb8-a256-3689ca1c2600}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Microsoft VolumeControlService Class
     HKCR\CLSID\{3BF043EF-A974-49B3-8322-B853CF1E5EC5}
     SCA Volume
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\sndvolsso.dll
     7/22/1909 11:00 PM
   Windows To Go Shell Service Object
     HKCR\CLSID\{4DC9C264-730E-4CF6-8374-70F079E4F82B}
     Windows To Go Shell Service Object
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\pwsso.dll
     4/19/2010 11:08 AM
   {566296fe-e0e8-475f-ba9c-a31ad31620b1}
     HKCR\CLSID\{566296fe-e0e8-475f-ba9c-a31ad31620b1}
     Device Stage Shell Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\dxp.dll
     1/21/1965 2:49 AM
   Cloud Cache Invalidator SSO
     HKCR\CLSID\{578480AA-1B1C-4343-AABD-62C0A273DCB5}
     Cloud Data Store
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\windows.cloudstore.dll
     2/8/1974 9:53 PM
   UnexpectedShutdownReason
     HKCR\CLSID\{68ddbb56-9d1d-4fd9-89c5-c0da2a625392}
     Systray shell service object
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\stobject.dll
     1/28/1913 1:10 AM
   PostBootReminder object
     HKCR\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   OneDrive network states cache SSO
     HKCR\CLSID\{78DE489B-7931-4f14-83B4-C56D38AC9FFA}
     Windows.FileExplorer.Common
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.fileexplorer.common.dll
     3/28/1905 12:48 PM
   Library Group Policy Shell Service Object
     HKCR\CLSID\{811F592B-CDE7-4ca4-A6D4-7BB3F60AD8FB}
     Microsoft WinRT Storage API
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.storage.dll
     9/11/1965 12:03 PM
   User Account Control Check Service
     HKCR\CLSID\{900c0763-5cad-4a34-bc1f-40cd513679d5}
     Security and Maintenance Providers
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\hcproviders.dll
     11/23/1931 2:45 PM
   WPDShServiceObj Class
     HKCR\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}
     Windows Portable Device Shell Service Object
     Microsoft Corporation
     10.0.26100.1301
     c:\windows\system32\wpdshserviceobj.dll
     1/15/1956 7:42 AM
   {C51F0A6B-2A63-4cf4-8938-24404EAEF422}
     HKCR\CLSID\{C51F0A6B-2A63-4cf4-8938-24404EAEF422}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   Windows Search Shell Service Object
     HKCR\CLSID\{DA67B8AD-E81B-4c70-9B91-B417B5E33527}
     Indexing Options
     Microsoft Corporation
     7.0.26100.3912
     c:\windows\system32\srchadmin.dll
     9/24/2008 7:21 PM
   WebCheck
     HKCR\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}
     Shell Doc Object and Control Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\shdocvw.dll
     7/16/1955 5:40 AM
   Bluetooth Authentication Agent SSO
     HKCR\CLSID\{F08C5AC2-E722-4116-ADB7-CE41B527994B}
     Bluetooth Control Panel Applet
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\bthprops.cpl
     12/30/1914 12:04 PM
   Sync Center Shell Service Object (Internal)
     HKCR\CLSID\{F20487CC-FC04-4B1E-863F-D9801796130B}
     Microsoft Sync Center
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\synccenter.dll
     8/12/1934 5:36 AM
   Security and Maintenance Shell Service Object
     HKCR\CLSID\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}
     Security and Maintenance
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\actioncenter.dll
     9/25/1923 8:40 AM
   ShellFolder for CD Burning
     HKCR\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   HomeGroup SSO
     HKCR\CLSID\{ff363bfe-4941-4179-a81c-f3f1ca72d820}
     HomeGroup Control Panel
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\hgcpl.dll
     4/29/1920 6:34 PM

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects
   Published Items Shell Service Object
     HKCR\CLSID\{003e0278-eca8-4bb8-a256-3689ca1c2600}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\shell32.dll
     7/22/2025 7:32 PM
   Microsoft VolumeControlService Class
     HKCR\CLSID\{3BF043EF-A974-49B3-8322-B853CF1E5EC5}
     SCA Volume
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\sndvolsso.dll
     11/3/2008 5:28 PM
   UnexpectedShutdownReason
     HKCR\CLSID\{68ddbb56-9d1d-4fd9-89c5-c0da2a625392}
     Systray shell service object
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\stobject.dll
     3/10/1912 6:14 PM
   PostBootReminder object
     HKCR\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\shell32.dll
     7/22/2025 7:32 PM
   OneDrive network states cache SSO
     HKCR\CLSID\{78DE489B-7931-4f14-83B4-C56D38AC9FFA}
     Windows.FileExplorer.Common
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\windows.fileexplorer.common.dll
     6/14/1993 12:20 AM
   Library Group Policy Shell Service Object
     HKCR\CLSID\{811F592B-CDE7-4ca4-A6D4-7BB3F60AD8FB}
     Microsoft WinRT Storage API
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\windows.storage.dll
     8/21/1967 9:42 PM
   User Account Control Check Service
     HKCR\CLSID\{900c0763-5cad-4a34-bc1f-40cd513679d5}
     Security and Maintenance Providers
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\hcproviders.dll
     6/28/1999 5:35 AM
   WPDShServiceObj Class
     HKCR\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}
     Windows Portable Device Shell Service Object
     Microsoft Corporation
     10.0.26100.1301
     c:\windows\syswow64\wpdshserviceobj.dll
     5/25/1941 8:56 AM
   Windows Search Shell Service Object
     HKCR\CLSID\{DA67B8AD-E81B-4c70-9B91-B417B5E33527}
     Indexing Options
     Microsoft Corporation
     7.0.26100.3912
     c:\windows\syswow64\srchadmin.dll
     11/26/2001 1:56 AM
   WebCheck
     HKCR\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}
     Shell Doc Object and Control Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\shdocvw.dll
     6/24/2015 5:03 PM
   Bluetooth Authentication Agent SSO
     HKCR\CLSID\{F08C5AC2-E722-4116-ADB7-CE41B527994B}
     Bluetooth Control Panel Applet
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\bthprops.cpl
     5/21/1952 10:26 PM
   Sync Center Shell Service Object (Internal)
     HKCR\CLSID\{F20487CC-FC04-4B1E-863F-D9801796130B}
     Microsoft Sync Center
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\synccenter.dll
     11/21/1920 12:00 PM
   Security and Maintenance Shell Service Object
     HKCR\CLSID\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}
     Security and Maintenance
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\actioncenter.dll
     9/22/1920 5:44 AM
   ShellFolder for CD Burning
     HKCR\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\syswow64\shell32.dll
     7/22/2025 7:32 PM
   HomeGroup SSO
     HKCR\CLSID\{ff363bfe-4941-4179-a81c-f3f1ca72d820}
     HomeGroup Control Panel
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\hgcpl.dll
     2/14/2007 3:03 PM

Task Scheduler
   \DragonStart
     "C:\Program" Files (x86)\Realtek\Dragon\Dragon.exe
     File not found: C:\Program
     
   \GCC
     "C:\Program Files\GIGABYTE\Control Center\GCC.exe" -b
     GCC
     25.3.7.1
     c:\program files\gigabyte\control center\gcc.exe
     4/30/1933 12:59 AM
   \MicrosoftEdgeUpdateTaskMachineCore{533E3DCD-19B1-4913-83FF-0E377CB9C80D}
     "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c
     Microsoft Edge Update
     Microsoft Corporation
     1.3.185.27
     c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe
     3/21/2024 5:25 PM
   \MicrosoftEdgeUpdateTaskMachineUA{7F9F9E5D-3575-462A-A7E2-1654BAE69780}
     "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
     Microsoft Edge Update
     Microsoft Corporation
     1.3.185.27
     c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe
     3/21/2024 5:25 PM
   \OneDrive Per-Machine Standalone Update Task
     "C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe" 
     Standalone Updater
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrivestandaloneupdater.exe
     7/21/2009 2:45 AM
   \OneDrive Reporting Task-S-1-5-21-830355354-3656259162-2099500784-1001
     "C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe" /reporting
     Standalone Updater
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrivestandaloneupdater.exe
     7/21/2009 2:45 AM
   \OneDrive Reporting Task-S-1-5-21-830355354-3656259162-2099500784-1002
     "C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe" /reporting
     Standalone Updater
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrivestandaloneupdater.exe
     7/21/2009 2:45 AM
   \OneDrive Reporting Task-S-1-5-21-830355354-3656259162-2099500784-1003
     "C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe" /reporting
     Standalone Updater
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrivestandaloneupdater.exe
     7/21/2009 2:45 AM
   \OneDrive Startup Task-S-1-5-21-830355354-3656259162-2099500784-1001
     "C:\Program Files\Microsoft OneDrive\25.080.0427.0003\OneDriveLauncher.exe" /startInstances
     OneDriveLauncher
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\onedrivelauncher.exe
     2/4/1927 12:56 AM
   \OneDrive Startup Task-S-1-5-21-830355354-3656259162-2099500784-1002
     "C:\Program Files\Microsoft OneDrive\25.080.0427.0003\OneDriveLauncher.exe" /startInstances
     OneDriveLauncher
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\onedrivelauncher.exe
     2/4/1927 12:56 AM
   \OneDrive Startup Task-S-1-5-21-830355354-3656259162-2099500784-1003
     "C:\Program Files\Microsoft OneDrive\25.080.0427.0003\OneDriveLauncher.exe" /startInstances
     OneDriveLauncher
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\onedrivelauncher.exe
     2/4/1927 12:56 AM
   \PostponeDeviceSetupToast_S-1-5-21-830355354-3656259162-2099500784-1003_0
     HKCR\CLSID\{5DED83EF-1E99-48CF-BF83-676D2A6DB408}
     UserOOBE
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\oobe\useroobe.dll
     11/6/1998 6:02 AM
   \GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7156.0{14ECD38F-93B4-45A7-ABEB-AF9586C88B66}
     "C:\Program Files (x86)\Google\GoogleUpdater\138.0.7156.0\updater.exe" --wake --system
     Google Updater (x64)
     Google LLC
     138.0.7156.0
     c:\program files (x86)\google\googleupdater\138.0.7156.0\updater.exe
     5/1/2025 11:02 PM
   \GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7194.0{09215DAF-A329-4781-8CA5-2A95A7412A5E}
     "C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe" --wake --system
     Google Updater (x64)
     Google LLC
     138.0.7194.0
     c:\program files (x86)\google\googleupdater\138.0.7194.0\updater.exe
     5/21/2025 11:02 PM
   [DISABLED] \Microsoft\Office\Office Apps Prewarm
     "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" /prewarm
     Microsoft Office SDX Helper
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\sdxhelper.exe
     5/15/2025 5:35 PM
   [DISABLED] \Microsoft\Office\Office Apps Prewarm Recurring
     "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" /prewarm
     Microsoft Office SDX Helper
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\sdxhelper.exe
     5/15/2025 5:35 PM
   \Microsoft\Office\Office Automatic Updates 2.0
     "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /frequentupdate SCHEDULEDTASK displaylevel=False
     Microsoft Office Click-to-Run Client
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe
     5/15/2025 5:29 PM
   \Microsoft\Office\Office Background Push Maintenance
     "C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe" /pushregistration
     Office Push Notifications Utility Assembly
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\office16\opushutil.exe
     5/15/2025 5:24 PM
   \Microsoft\Office\Office ClickToRun Service Monitor
     "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /WatchService
     Microsoft Office Click-to-Run Client
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe
     5/15/2025 5:29 PM
   \Microsoft\Office\Office Feature Updates
     "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" 
     Microsoft Office SDX Helper
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\sdxhelper.exe
     5/15/2025 5:35 PM
   \Microsoft\Office\Office Feature Updates Logon
     "C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe" /onlogon
     Microsoft Office SDX Helper
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\sdxhelper.exe
     5/15/2025 5:35 PM
   \Microsoft\Office\Office Performance Monitor
     "C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe" 
     Office Performance Monitor
     Microsoft Corporation
     16.0.18730.20030
     c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\office16\operfmon.exe
     4/6/2025 10:33 PM
   \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
     HKCR\CLSID\{84F0FAE1-C27B-4F6F-807B-28CF6F96287D}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
     HKCR\CLSID\{429BC048-379E-45E0-80E4-EB1977941B5C}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   [DISABLED] \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
     HKCR\CLSID\{613FBA38-A3DF-4AB8-9674-5604984A299A}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   [DISABLED] \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
     HKCR\CLSID\{DE434264-8FE9-4C0B-A83B-89EBEEBFF78E}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM
   \Microsoft\Windows\AccountHealth\RecoverabilityToastTask
     HKCR\CLSID\{B7F5B442-EBF8-46CD-9F0B-D8E45ED43492}
     AccountHealth
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\accounthealth.dll
     7/11/1956 10:10 PM
   [DISABLED] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
     HKCR\CLSID\{CF2CF428-325B-48D3-8CA8-7633E36E5A32}
     Windows Rights Management client
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msdrm.dll
     4/10/1933 9:53 AM
   \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
     HKCR\CLSID\{BF5CB148-7C77-4D8A-A53E-D81C70CF743C}
     Windows Rights Management client
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msdrm.dll
     4/10/1933 9:53 AM
   \Microsoft\Windows\AppID\EDP Policy Manager
     HKCR\CLSID\{DECA92E0-AF85-439E-9204-86679978DA08}
     AppLockerCSP
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\applockercsp.dll
     10/16/1965 6:28 PM
   \Microsoft\Windows\AppID\PolicyConverter
     "%windir%\system32\appidpolicyconverter.exe" 
     AppID Policy Converter Task
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\appidpolicyconverter.exe
     7/15/1937 1:50 PM
   \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
     "%windir%\system32\appidcertstorecheck.exe" 
     AppID Certificate Store Verification Task
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\appidcertstorecheck.exe
     1/31/2001 10:20 AM
   \Microsoft\Windows\Application Experience\MareBackup
     "%windir%\system32\compattelrunner.exe" -m:aeinv.dll -f:UpdateSoftwareInventoryW invsvc
     Microsoft Compatibility Telemetry
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\compattelrunner.exe
     5/15/1902 6:21 PM
   \Microsoft\Windows\Application Experience\MareBackup
     "%windir%\system32\compattelrunner.exe" -m:appraiser.dll -f:DoScheduledTelemetryRun
     Microsoft Compatibility Telemetry
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\compattelrunner.exe
     5/15/1902 6:21 PM
   \Microsoft\Windows\Application Experience\MareBackup
     "%windir%\system32\compattelrunner.exe" -m:aemarebackup.dll -f:BackupMareData
     Microsoft Compatibility Telemetry
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\compattelrunner.exe
     5/15/1902 6:21 PM
   \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
     "%windir%\system32\sc.exe" start InventorySvc
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser Exp
     "%windir%\system32\compattelrunner.exe" -m:appraiser.dll -f:DoScheduledTelemetryRun express
     Microsoft Compatibility Telemetry
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\compattelrunner.exe
     5/15/1902 6:21 PM
   \Microsoft\Windows\Application Experience\PcaPatchDbTask
     "%windir%\system32\rundll32.exe" %windir%\system32\PcaSvc.dll,PcaPatchSdbTask
     Program Compatibility Assistant Service
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\pcasvc.dll
     3/25/1966 4:23 AM
   \Microsoft\Windows\Application Experience\SdbinstMergeDbTask
     "%windir%\system32\sdbinst.exe" -mm
     Application Compatibility Database Installer
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sdbinst.exe
     8/2/1923 12:10 PM
   \Microsoft\Windows\Application Experience\StartupAppTask
     "%windir%\system32\rundll32.exe" Startupscan.dll,SusRunTask
     Startup scan task DLL
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\startupscan.dll
     11/17/2007 3:18 PM
   \Microsoft\Windows\ApplicationData\appuriverifierdaily
     "%windir%\system32\AppHostRegistrationVerifier.exe" 
     App Uri Handlers Registration Verifier
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\apphostregistrationverifier.exe
     11/14/2018 5:03 PM
   \Microsoft\Windows\ApplicationData\appuriverifierinstall
     "%windir%\system32\AppHostRegistrationVerifier.exe" 
     App Uri Handlers Registration Verifier
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\apphostregistrationverifier.exe
     11/14/2018 5:03 PM
   \Microsoft\Windows\ApplicationData\CleanupTemporaryState
     "%windir%\system32\rundll32.exe" Windows.Storage.ApplicationData.dll,CleanupTemporaryState
     Windows Application Data API Server
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\windows.storage.applicationdata.dll
     10/1/1965 3:49 PM
   \Microsoft\Windows\ApplicationData\DsSvcCleanup
     "%windir%\system32\dstokenclean.exe" 
     Data Sharing Service Maintenance Driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\dstokenclean.exe
     2/19/2003 4:31 AM
   \Microsoft\Windows\AppListBackup\Backup
     HKCR\CLSID\{E0DCC2CC-3354-45F2-8914-519E07809082}
     AppListBackupLauncher
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\applistbackuplauncher.dll
     2/4/1904 8:47 PM
   \Microsoft\Windows\AppListBackup\BackupNonMaintenance
     HKCR\CLSID\{E0DCC2CC-3354-45F2-8914-519E07809082}
     AppListBackupLauncher
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\applistbackuplauncher.dll
     2/4/1904 8:47 PM
   \Microsoft\Windows\AppxDeploymentClient\AppInstallerUpdater
     "%windir%\system32\rundll32.exe" %windir%\system32\AppxDeploymentClient.dll,ScheduleAppInstallerBackgroundUpdate
     AppX Deployment Client DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\appxdeploymentclient.dll
     7/28/2002 3:48 PM
   [DISABLED] \Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup
     "%windir%\system32\rundll32.exe" %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
     AppX Deployment Client DLL
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\appxdeploymentclient.dll
     7/28/2002 3:48 PM
   \Microsoft\Windows\AppxDeploymentClient\UCPD velocity
     "%windir%\system32\UCPDMgr.exe" 
     User Choice Protection Manager
     Microsoft Corporation
     4.1.0.0
     c:\windows\system32\ucpdmgr.exe
     4/8/2024 9:31 AM
   \Microsoft\Windows\Autochk\Proxy
     "%windir%\system32\rundll32.exe" /d acproxy.dll,PerformAutochkOperations
     Autochk Proxy DLL
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\acproxy.dll
     12/12/2015 3:02 AM
   \Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\Bluetooth\UninstallDeviceTask
     "BthUdTask.exe" $(Arg0)
     Bluetooth Uninstall Device Task
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\bthudtask.exe
     2/21/2037 12:38 PM
   \Microsoft\Windows\capabilityaccessmanager\maintenancetasks
     "%windir%\system32\rundll32.exe" %windir%\system32\CapabilityAccessManager.dll,CapabilityAccessManagerDoStoreMaintenance
     Capability Access Manager Service
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\capabilityaccessmanager.dll
     5/2/1973 8:36 PM
   \Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
     HKCR\CLSID\{47E30D54-DAC1-473A-AFF7-2355BF78881F}
     Microsoft Passport Tasks
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ngctasks.dll
     1/29/1951 5:15 PM
   \Microsoft\Windows\CertificateServicesClient\CryptoPolicyTask
     HKCR\CLSID\{47E30D54-DAC1-473A-AFF7-2355BF78881F}
     Microsoft Passport Tasks
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ngctasks.dll
     1/29/1951 5:15 PM
   \Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
     HKCR\CLSID\{47E30D54-DAC1-473A-AFF7-2355BF78881F}
     Microsoft Passport Tasks
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ngctasks.dll
     1/29/1951 5:15 PM
   \Microsoft\Windows\CertificateServicesClient\SystemTask
     HKCR\CLSID\{58FB76B9-AC85-4E55-AC04-427593B1D060}
     DIMS Job DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dimsjob.dll
     8/24/1932 12:03 PM
   \Microsoft\Windows\CertificateServicesClient\UserTask
     HKCR\CLSID\{58FB76B9-AC85-4E55-AC04-427593B1D060}
     DIMS Job DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dimsjob.dll
     8/24/1932 12:03 PM
   \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
     HKCR\CLSID\{58FB76B9-AC85-4E55-AC04-427593B1D060}
     DIMS Job DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\dimsjob.dll
     8/24/1932 12:03 PM
   \Microsoft\Windows\Chkdsk\ProactiveScan
     HKCR\CLSID\{CF4270F5-2E43-4468-83B3-A8C45BB33EA1}
     pstask Task
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\pstask.dll
     8/15/1969 11:47 PM
   \Microsoft\Windows\Chkdsk\SyspartRepair
     "%windir%\system32\bcdboot.exe" %windir% /sysrepair
     Bcdboot utility
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\bcdboot.exe
     3/1/2007 8:55 AM
   [DISABLED] \Microsoft\Windows\Clip\License Validation
     "%SystemRoot%\system32\ClipUp.exe" -p -s -o
     Client License Platform migration tool
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\clipup.exe
     6/14/1917 3:35 AM
   [DISABLED] \Microsoft\Windows\Clip\LicenseImdsIntegration
     "%SystemRoot%\system32\fclip.exe" 
     Acquire IMDS response
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fclip.exe
     10/23/1907 6:51 PM
   \Microsoft\Windows\CloudExperienceHost\CreateObjectTask
     HKCR\CLSID\{E4544ABA-62BF-4C54-AAB2-EC246342626C}
     CloudExperienceHost Broker
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\cloudexperiencehostbroker.exe
     12/30/1988 12:59 PM
   \Microsoft\Windows\CloudRestore\Backup
     HKCR\CLSID\{722D0F89-B69C-4700-AE8C-4A44350E4876}
     CloudRestoreLauncher Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\cloudrestorelauncher.dll
     3/8/1916 2:36 PM
   \Microsoft\Windows\CloudRestore\Restore
     HKCR\CLSID\{B4BCFA6F-948D-46B8-BF27-E8B1117E23B3}
     CloudRestoreLauncher Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\cloudrestorelauncher.dll
     3/8/1916 2:36 PM
   \Microsoft\Windows\ConsentUX\UnifiedConsent\UnifiedConsentSyncTask
     HKCR\CLSID\{82AA0895-198A-4C1B-B2D1-C16894218AFB}
     Unified Consent API implementation
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\unifiedconsent.dll
     10/22/1929 12:51 AM
   \Microsoft\Windows\Containers\CmCleanup
     HKCR\CLSID\{F50E9363-6BC8-4DC5-8CAB-7D9F8C1B81B4}
     Container Manager Cleanup Maintenance Task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\cmcleanup.dll
     11/20/2004 10:31 AM
   \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
     "%SystemRoot%\System32\wsqmcons.exe" 
     Windows SQM Consolidator
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\wsqmcons.exe
     8/18/1969 2:53 PM
   \Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
     HKCR\CLSID\{C27F6B1D-FE0B-45E4-9257-38799FA69BC8}
     USBCEIP Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\usbceip.dll
     2/1/2017 6:49 AM
   \Microsoft\Windows\Data Integrity Scan\Data Integrity Check And Scan
     HKCR\CLSID\{DCFD3EA8-D960-4719-8206-490AE315F94F}
     Data Integrity Scan Task
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\discan.dll
     2/1/1962 5:32 AM
   \Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
     HKCR\CLSID\{DCFD3EA8-D960-4719-8206-490AE315F94F}
     Data Integrity Scan Task
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\discan.dll
     2/1/1962 5:32 AM
   \Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
     HKCR\CLSID\{DCFD3EA8-D960-4719-8206-490AE315F94F}
     Data Integrity Scan Task
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\discan.dll
     2/1/1962 5:32 AM
   \Microsoft\Windows\Defrag\ScheduledDefrag
     "%windir%\system32\defrag.exe" -c -h -o -$
     Disk Defragmenter Module
     Microsoft Corp.
     10.0.26100.1150
     c:\windows\system32\defrag.exe
     11/21/1910 4:11 PM
   \Microsoft\Windows\Device Information\Device
     "%windir%\system32\devicecensus.exe" SystemCxt
     Device Census
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicecensus.exe
     1/11/2009 4:26 PM
   \Microsoft\Windows\Device Information\Device User
     "%windir%\system32\devicecensus.exe" UserCxt
     Device Census
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicecensus.exe
     1/11/2009 4:26 PM
   \Microsoft\Windows\Device Setup\Metadata Refresh
     HKCR\CLSID\{23C1F3CF-C110-4512-ACA9-7B6174ECE888}
     Device Setup Manager Client API
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\devicesetupmanagerapi.dll
     11/15/1983 7:12 AM
   \Microsoft\Windows\DeviceDirectoryClient\HandleCommand
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   [DISABLED] \Microsoft\Windows\DeviceDirectoryClient\IntegrityCheck
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceAccountChange
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic24
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceSettingChange
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceWnsFallback
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\DeviceDirectoryClient\RegisterUserDevice
     HKCR\CLSID\{AE31B729-D5FD-401E-AF42-784074835AFE}
     DeviceDirectoryClient Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\devicedirectoryclient.dll
     5/10/1941 11:55 PM
   \Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner
     HKCR\CLSID\{AD08DCC2-4E35-4486-9D49-547CBD30942D}
     MitigationClient
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\mitigationclient.dll
     5/13/1986 12:45 AM
   \Microsoft\Windows\Diagnosis\Scheduled
     HKCR\CLSID\{C1F85EF8-BCC2-4606-BB39-70C523715EB3}
     Scripted Diagnostics Scheduled Task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\sdiagschd.dll
     6/4/1936 8:32 PM
   \Microsoft\Windows\Diagnosis\UnexpectedCodepath
     "%windir%\system32\UCConfigTask.exe" 
     c:\windows\system32\ucconfigtask.exe
     8/6/2012 4:13 PM
   \Microsoft\Windows\DirectX\DirectXDatabaseUpdater
     "%windir%\system32\directxdatabaseupdater.exe" 
     DirectX Database Updater
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\directxdatabaseupdater.exe
     11/9/1988 12:18 PM
   \Microsoft\Windows\DirectX\DXGIAdapterCache
     "%windir%\system32\dxgiadaptercache.exe" 
     DXGI Adapter Cache
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dxgiadaptercache.exe
     2/15/1906 12:57 AM
   \Microsoft\Windows\DiskCleanup\SilentCleanup
     "%windir%\system32\cleanmgr.exe" /autocleanstoragesense /d %systemdrive%
     Disk Space Cleanup Manager for Windows
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cleanmgr.exe
     7/12/2023 7:50 PM
   \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector
     "%windir%\system32\rundll32.exe" dfdts.dll,DfdGetDefaultPolicyAndSMART
     Windows Disk Failure Diagnostic Module
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\dfdts.dll
     8/3/1979 6:55 PM
   [DISABLED] \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
     "%windir%\system32\DFDWiz.exe" 
     Windows Disk Diagnostic User Resolver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\dfdwiz.exe
     5/27/1958 10:26 AM
   \Microsoft\Windows\DiskFootprint\Diagnostics
     "%windir%\system32\disksnapshot.exe" -z
     DiskSnapshot.exe
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\disksnapshot.exe
     9/3/1984 3:29 AM
   \Microsoft\Windows\DiskFootprint\StorageSense
     HKCR\CLSID\{AB2A519B-03B0-43CE-940A-A73DF850B49A}
     Storage Usage
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\storageusage.dll
     8/23/2025 4:58 PM
   \Microsoft\Windows\DUSM\dusmtask
     "%SystemRoot%\System32\dusmtask.exe" 
     DUSM Task
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\dusmtask.exe
     2/14/1917 12:19 AM
   \Microsoft\Windows\EDP\EDP App Launch Task
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\EDP\EDP Auth Task
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\EDP\StorageCardEncryption Task
     HKCR\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}
     EdpTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\edptask.dll
     8/29/2017 10:02 AM
   \Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
     HKCR\CLSID\{711001CD-CC1D-4470-9B7E-1EF73849C79E}
     Exploit Guard Configuration Helper
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\mitigationconfiguration.dll
     9/4/1977 3:12 PM
   \Microsoft\Windows\Feedback\Siuf\DmClient
     "%windir%\system32\dmclient.exe" 
     Microsoft Feedback SIUF Deployment Manager Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dmclient.exe
     1/25/1934 6:38 PM
   \Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload
     "%windir%\system32\dmclient.exe" utcwnf
     Microsoft Feedback SIUF Deployment Manager Client
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dmclient.exe
     1/25/1934 6:38 PM
   [DISABLED] \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync
     HKCR\CLSID\{2AE64751-B728-4D6B-97A0-B2DA2E7D2A3B}
     Microsoft® File Server Resource Management Client Extensions
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\srmclient.dll
     6/5/2010 8:03 PM
   \Microsoft\Windows\FileHistory\File History (maintenance mode)
     HKCR\CLSID\{89917B7C-A1A6-11DF-8BF6-18A90531A85A}
     File History Task Handler
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\fhtask.dll
     3/24/1908 5:59 PM
   [DISABLED] \Microsoft\Windows\Flighting\FeatureConfig\BootstrapUsageDataReporting
     HKCR\CLSID\{D759C938-B375-41CB-A2A2-E6D866A767F4}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\FeatureConfig\ReconcileConfigs
     HKCR\CLSID\{15F5ECE1-4550-4A92-8E26-984FD1DA54FA}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
     HKCR\CLSID\{59EECBFE-C2F5-4419-9B99-13FE05FF2675}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\FeatureConfig\UsageDataFlushing
     HKCR\CLSID\{99EFDAD1-0F11-4A6B-A702-4E1C37D1A3EF}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\FeatureConfig\UsageDataReceiver
     HKCR\CLSID\{D4C0420F-76BD-4F66-A91F-918A93ABEBEB}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\FeatureConfig\UsageDataReporting
     HKCR\CLSID\{BBFCD054-8AAC-45DE-A1EB-7B246C9028AF}
     Feature Configuration
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\fcon.dll
     7/20/1996 9:20 PM
   \Microsoft\Windows\Flighting\OneSettings\RefreshCache
     HKCR\CLSID\{E07647F7-AED2-48D9-9720-939BC24A8A3C}
     Windows OneSettings Client
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wosc.dll
     8/30/1942 4:55 PM
   \Microsoft\Windows\input\InputSettingsRestoreDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\LocalUserSyncDataAvailable
     HKCR\CLSID\{8E7C2AFB-72B9-415C-9AC2-5037693309B7}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\MouseSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\PenSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\RemoteMouseSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\RemotePenSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\RemoteTouchpadSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\input\syncpensettings
     HKCR\CLSID\{3ECEE215-83F5-4123-A592-74F1FE4C3D59}
     System Settings Pen Handlers Implementation
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\settingshandlers_pen.dll
     9/26/1989 6:11 PM
   \Microsoft\Windows\input\TouchpadSyncDataAvailable
     HKCR\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}
     Windows Input Cloud Store Task Handlers
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\inputcloudstore.dll
     6/18/2030 2:39 AM
   \Microsoft\Windows\InstallService\RestoreDevice
     HKCR\CLSID\{7F019157-05C8-473F-8664-2BA04A090DC8}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   \Microsoft\Windows\InstallService\ScanForUpdates
     HKCR\CLSID\{A558C6A5-B42B-4C98-B610-BF9559143139}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   \Microsoft\Windows\InstallService\ScanForUpdatesAsUser
     HKCR\CLSID\{DDAFAEA2-8842-4E96-BADE-D44A8D676FDB}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   \Microsoft\Windows\InstallService\SmartRetry
     HKCR\CLSID\{F3A219C3-2698-4CBF-9C07-037EDB8E72E6}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   [DISABLED] \Microsoft\Windows\InstallService\WakeUpAndContinueUpdates
     HKCR\CLSID\{0DC331EE-8438-49D5-A721-E10B937CE459}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   [DISABLED] \Microsoft\Windows\InstallService\WakeUpAndScanForUpdates
     HKCR\CLSID\{D5A04D91-6FE6-4FE4-A98A-FEB4500C5AF7}
     InstallService Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\installservicetasks.dll
     10/30/1975 10:49 PM
   \Microsoft\Windows\International\Synchronize Language Settings
     HKCR\CLSID\{10D62541-90D0-42FE-848C-0DBC1AC42EDA}
     Core Globalization Configuration
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\coreglobconfig.dll
     11/30/1973 10:25 AM
   \Microsoft\Windows\Kernel\La57Cleanup
     "%windir%\system32\la57setup.exe" 
     LA57 Setup
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\la57setup.exe
     12/23/2001 2:34 AM
   \Microsoft\Windows\LanguageComponentsInstaller\Installation
     HKCR\CLSID\{6F58F65F-EC0E-4ACA-99FE-FC5A1A25E4BE}
     LanguageComponentsInstaller Task
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\languagecomponentsinstaller.dll
     4/9/1936 11:30 AM
   [DISABLED] \Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
     HKCR\CLSID\{6F58F65F-EC0E-4ACA-99FE-FC5A1A25E4BE}
     LanguageComponentsInstaller Task
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\languagecomponentsinstaller.dll
     4/9/1936 11:30 AM
   \Microsoft\Windows\License Manager\TempSignedLicenseExchange
     HKCR\CLSID\{77646A68-AD14-4D53-897D-7BE4DDE5F929}
     TempSignedLicenseExchangeTask Task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\tempsignedlicenseexchangetask.dll
     6/18/1983 6:35 PM
   \Microsoft\Windows\Location\WindowsActionDialog
     "%windir%\System32\WindowsActionDialog.exe" 
     Windows Action Dialog Broker
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windowsactiondialog.exe
     11/1/1976 5:17 AM
   \Microsoft\Windows\Maintenance\WinSAT
     HKCR\CLSID\{A9A33436-678B-4C9C-A211-7CC38785E79D}
     Windows System Assessment Tool API
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\winsatapi.dll
     2/14/2004 7:13 AM
   [DISABLED] \Microsoft\Windows\Management\Autopilot\DetectHardwareChange
     HKCR\CLSID\{62B2DD2C-F129-42EE-BF59-55D3FD21C215}
     AutoPilot
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\autopilot.dll
     6/26/1957 9:21 AM
   [DISABLED] \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange
     HKCR\CLSID\{62B2DD2C-F129-42EE-BF59-55D3FD21C215}
     AutoPilot
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\autopilot.dll
     6/26/1957 9:21 AM
   \Microsoft\Windows\Management\Provisioning\Cellular
     "%windir%\system32\ProvTool.exe" /turn 7 /source CellStateChangeTask
     Provisioning package runtime processing tool
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\provtool.exe
     12/22/2030 7:36 PM
   \Microsoft\Windows\Management\Provisioning\Logon
     "%windir%\system32\ProvTool.exe" /turn 5 /source LogonIdleTask
     Provisioning package runtime processing tool
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\provtool.exe
     12/22/2030 7:36 PM
   [DISABLED] \Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup
     "%windir%\system32\MdmDiagnosticsTool.exe" /clean
     MdmDiagnosticsTool
     Microsoft Corporation
     10.0.26100.3323
     c:\windows\system32\mdmdiagnosticstool.exe
     6/21/1956 2:39 AM
   [DISABLED] \Microsoft\Windows\Management\Provisioning\Retry
     "%windir%\system32\ProvTool.exe" /turn 5 /source ProvRetryTask
     Provisioning package runtime processing tool
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\provtool.exe
     12/22/2030 7:36 PM
   [DISABLED] \Microsoft\Windows\Management\Provisioning\RunOnReboot
     "%windir%\system32\ProvTool.exe" /turn 5 /source ContinueSessionTask
     Provisioning package runtime processing tool
     Microsoft Corporation
     10.0.26100.3470
     c:\windows\system32\provtool.exe
     12/22/2030 7:36 PM
   \Microsoft\Windows\Maps\MapsToastTask
     HKCR\CLSID\{9885AEF2-BD9F-41E0-B15E-B3141395E803}
     MapsToastTask Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\mapstoasttask.dll
     6/29/1935 2:46 AM
   [DISABLED] \Microsoft\Windows\Maps\MapsUpdateTask
     HKCR\CLSID\{B9033E87-33CF-4D77-BC9B-895AFBBA72E4}
     MapsUpdateTask Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\mapsupdatetask.dll
     3/13/1986 6:19 PM
   \Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
     HKCR\CLSID\{8168E74A-B39F-46D8-ADCD-7BED477B80A3}
     Microsoft Windows Memory Diagnostic Task Handler
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\memorydiagnostic.dll
     10/23/1935 7:30 PM
   [DISABLED] \Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
     HKCR\CLSID\{8168E74A-B39F-46D8-ADCD-7BED477B80A3}
     Microsoft Windows Memory Diagnostic Task Handler
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\memorydiagnostic.dll
     10/23/1935 7:30 PM
   \Microsoft\Windows\MUI\LPRemove
     "%windir%\system32\lpremove.exe" 
     MUI Language pack cleanup
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\lpremove.exe
     7/22/1999 5:13 AM
   \Microsoft\Windows\Multimedia\SystemSoundsService
     HKCR\CLSID\{2DEA658F-54C1-4227-AF9B-260AB5FC3543}
     PlaySound Service
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\playsndsrv.dll
     8/23/1909 4:42 AM
   \Microsoft\Windows\Network Connectivity Status Indicator\NcsiIdentifyUserProxies
     HKCR\CLSID\{706B965A-8308-4CD4-9900-87C2D79C121B}
     Network List Manager
     Microsoft Corporation
     10.0.26100.2454
     c:\windows\system32\netprofm.dll
     1/8/1956 9:49 PM
   \Microsoft\Windows\NlaSvc\WiFiTask
     "%SystemRoot%\System32\WiFiTask.exe" nla
     Wireless Background Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wifitask.exe
     8/11/1920 12:10 AM
   [DISABLED] \Microsoft\Windows\Offline Files\Background Synchronization
     HKCR\CLSID\{FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   [DISABLED] \Microsoft\Windows\Offline Files\Logon Synchronization
     HKCR\CLSID\{FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   \Microsoft\Windows\PerformanceTrace\RequestTrace
     HKCR\CLSID\{9EFEB182-2EE3-4AF9-AFFA-521410D110D1}
     PerformanceTraceHandler task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\performancetracehandler.dll
     9/2/1944 6:31 PM
   \Microsoft\Windows\PI\Secure-Boot-Update
     HKCR\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}
     TPM Maintenance Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tpmtasks.dll
     7/27/1950 11:41 PM
   \Microsoft\Windows\PI\Sqm-Tasks
     HKCR\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}
     TPM Maintenance Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tpmtasks.dll
     7/27/1950 11:41 PM
   \Microsoft\Windows\Plug and Play\Device Install Group Policy
     HKCR\CLSID\{60400283-B242-4FA8-8C25-CAF695B88209}
     pnppolicy Task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\pnppolicy.dll
     6/21/2008 4:56 PM
   \Microsoft\Windows\Plug and Play\Device Install Reboot Required
     HKCR\CLSID\{48794782-6A1F-47B9-BD52-1D5F95D49C1B}
     Plug and Play User Interface DLL
     Microsoft Corporation
     5.2.3668.0
     c:\windows\system32\pnpui.dll
     1/11/1931 6:57 AM
   \Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers
     "%SystemRoot%\System32\drvinst.exe" 6
     Driver Installation Module
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\drvinst.exe
     11/30/1960 9:47 AM
   \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
     HKCR\CLSID\{927EA2AF-1C54-43D5-825E-0074CE028EEE}
     Power Efficiency Diagnostics Task
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\energytask.dll
     7/31/2013 9:59 AM
   \Microsoft\Windows\Printing\EduPrintProv
     "%windir%\system32\eduprintprov.exe" 
     Printer Provision Utility for EDU
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\eduprintprov.exe
     10/14/1989 9:22 AM
   \Microsoft\Windows\Printing\PrinterCleanupTask
     HKCR\CLSID\{C56F065E-DE49-4E42-BE7C-305C45609D25}
     Windows Printer Cleanup Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\printercleanuptask.dll
     2/19/1969 8:19 AM
   [DISABLED] \Microsoft\Windows\Printing\PrintJobCleanupTask
     HKCR\CLSID\{8ABCE260-32B6-476C-AE13-B34D0C91292D}
     Windows Printer Cleanup Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\printercleanuptask.dll
     2/19/1969 8:19 AM
   \Microsoft\Windows\PushToInstall\LoginCheck
     "%windir%\system32\sc.exe" start pushtoinstall login
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\PushToInstall\Registration
     "%windir%\system32\sc.exe" start pushtoinstall registration
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\Ras\MobilityManager
     HKCR\CLSID\{C463A0FC-794F-4FDF-9201-01938CEACAFA}
     Provides support for the switching of mobility enabled VPN connections if their underlying interface goes down.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\rasmbmgr.dll
     1/18/1969 6:51 AM
   \Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
     HKCR\CLSID\{89D1D0C2-A3CF-490C-ABE3-B86CDE34B047}
     Microsoft Windows Recovery Agent Task Handler
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\reagenttask.dll
     2/18/1938 2:42 PM
   \Microsoft\Windows\Registry\RegIdleBackup
     HKCR\CLSID\{CA767AA8-9157-4604-B64B-40747123D5F2}
     RegIdle Backup Task
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\regidle.dll
     6/14/1972 4:07 PM
   \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask
     "%windir%\system32\RAServer.exe" /offerraupdate
     Windows Remote Assistance COM Server
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\raserver.exe
     10/27/1978 6:16 AM
   [DISABLED] \Microsoft\Windows\Servicing\OOBEFodSetup
     "%windir%\system32\OOBEFodSetup.exe" 
     Perform OOBE FOD setup
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\oobefodsetup.exe
     6/14/1989 4:05 PM
   \Microsoft\Windows\Shell\CreateObjectTask
     HKCR\CLSID\{990A9F8F-301F-45F7-8D0E-68C5952DBA43}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   \Microsoft\Windows\Shell\FamilySafetyMonitor
     "%windir%\System32\wpcmon.exe" 
     Family Safety Monitor
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wpcmon.exe
     10/16/2003 5:54 PM
   \Microsoft\Windows\Shell\FamilySafetyRefreshTask
     HKCR\CLSID\{C844C79D-AED8-4DCE-AB25-4D359BED84F8}
     Family Safety Refresh Task
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\wpcrefreshtask.dll
     6/13/1952 2:22 PM
   \Microsoft\Windows\Shell\IndexerAutomaticMaintenance
     HKCR\CLSID\{3FBA60A6-7BF5-4868-A2CA-6623B3DFFEA6}
     Indexing Options
     Microsoft Corporation
     7.0.26100.3912
     c:\windows\system32\srchadmin.dll
     9/24/2008 7:21 PM
   [DISABLED] \Microsoft\Windows\Shell\ThemeAssetTask_SyncFODState
     HKCR\CLSID\{3BC5DD7D-EA3B-428C-B9B6-0723DB6A1057}
     WINDOWS.UI.IMMERSIVE
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.ui.immersive.dll
     1/16/2001 11:39 AM
   \Microsoft\Windows\Shell\ThemesSyncedImageDownload
     HKCR\CLSID\{79F8E185-4E45-4B74-8182-02AA430661E4}
     ThemesSyncedImageDownload Task
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\themes.ssfdownload.scheduledtask.dll
     6/8/1992 11:53 PM
   \Microsoft\Windows\Shell\UpdateUserPictureTask
     HKCR\CLSID\{09C5DD34-009D-40FA-BCB9-0165AD0C15D4}
     WINDOWS.UI.IMMERSIVE
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.ui.immersive.dll
     1/16/2001 11:39 AM
   \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
     HKCR\CLSID\{B1AEBB5D-EAD9-4476-B375-9C3ED9F32AFC}
     Software Protection Platform Client Extension Dll
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sppcext.dll
     4/10/1999 3:19 PM
   [DISABLED] \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
     HKCR\CLSID\{B1AEBB5D-EAD9-4476-B375-9C3ED9F32AFC}
     Software Protection Platform Client Extension Dll
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sppcext.dll
     4/10/1999 3:19 PM
   [DISABLED] \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
     HKCR\CLSID\{B1AEBB5D-EAD9-4476-B375-9C3ED9F32AFC}
     Software Protection Platform Client Extension Dll
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\sppcext.dll
     4/10/1999 3:19 PM
   \Microsoft\Windows\SpacePort\SpaceAgentTask
     "%windir%\system32\SpaceAgent.exe" 
     Storage Spaces Settings
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\spaceagent.exe
     11/8/1917 5:31 PM
   \Microsoft\Windows\SpacePort\SpaceManagerTask
     "%windir%\system32\spaceman.exe" /Work
     Storage Spaces Manager
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\spaceman.exe
     12/9/1911 4:21 AM
   \Microsoft\Windows\Speech\SpeechModelDownloadTask
     "%windir%\system32\speech_onecore\common\SpeechModelDownload.exe" 
     Speech Model Download Executable
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\speech_onecore\common\speechmodeldownload.exe
     6/8/1921 11:32 AM
   \Microsoft\Windows\StateRepository\MaintenanceTasks
     "%windir%\system32\rundll32.exe" %windir%\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks
     Windows StateRepository Client API
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\windows.staterepositoryclient.dll
     7/22/2016 12:47 PM
   \Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization
     HKCR\CLSID\{5C9AB547-345D-4175-9AF6-65133463A100}
     Storage Tiers Management
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\tieringengineservice.exe
     5/9/2025 10:44 PM
   [DISABLED] \Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization
     "%windir%\system32\defrag.exe" -c -h -g -# -m 8 -i 13500
     Disk Defragmenter Module
     Microsoft Corp.
     10.0.26100.1150
     c:\windows\system32\defrag.exe
     11/21/1910 4:11 PM
   \Microsoft\Windows\Subscription\EnableLicenseAcquisition
     "%SystemRoot%\system32\ClipRenew.exe" -e
     Acquire License From Store
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cliprenew.exe
     1/30/1990 11:44 AM
   [DISABLED] \Microsoft\Windows\Subscription\LicenseAcquisition
     "%SystemRoot%\system32\ClipRenew.exe" 
     Acquire License From Store
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cliprenew.exe
     1/30/1990 11:44 AM
   \Microsoft\Windows\Sustainability\PowerGridForecastTask
     HKCR\CLSID\{251E5B1F-E370-4E12-B5BD-B7AD2A8EE810}
     PowerGridForecastTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\powergridforecasttask.dll
     6/23/1911 11:51 PM
   \Microsoft\Windows\Sustainability\SustainabilityTelemetry
     HKCR\CLSID\{6EE41D75-D091-4FB7-9AD5-018760DD25D4}
     EcoScoreTask Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\ecoscoretask.dll
     12/14/1975 10:08 PM
   [DISABLED] \Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
     HKCR\CLSID\{17C82257-654E-4C47-8E23-DCA24EAA76A0}
     SysMain Service Host
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sysmain.dll
     5/28/1929 4:11 PM
   [DISABLED] \Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
     HKCR\CLSID\{D44377B8-1F2F-4FAA-9C8E-6C4AD2928E47}
     SysMain Service Host
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sysmain.dll
     5/28/1929 4:11 PM
   \Microsoft\Windows\Sysmain\ResPriStaticDbSync
     HKCR\CLSID\{297EE78C-BA95-4E94-81D3-D6E7F089C7B5}
     SysMain Service Host
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sysmain.dll
     5/28/1929 4:11 PM
   \Microsoft\Windows\Sysmain\WsSwapAssessmentTask
     "%windir%\system32\rundll32.exe" sysmain.dll,PfSvWsSwapAssessmentTask
     SysMain Service Host
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\sysmain.dll
     5/28/1929 4:11 PM
   \Microsoft\Windows\SystemRestore\SR
     "%windir%\system32\srtasks.exe" ExecuteScheduledSPPCreation
     Microsoft® Windows System Protection background tasks.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\srtasks.exe
     9/17/2017 2:48 AM
   \Microsoft\Windows\Task Manager\Interactive
     HKCR\CLSID\{855FEC53-D2E4-4999-9E87-3414E9CF0FF4}
     Performance Monitor
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wdc.dll
     6/4/1913 9:45 AM
   \Microsoft\Windows\TextServicesFramework\MsCtfMonitor
     HKCR\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}
     MsCtfMonitor DLL
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\msctfmonitor.dll
     4/12/1922 7:57 AM
   \Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
     HKCR\CLSID\{A31AD6C2-FF4C-43D4-8E90-7101023096F9}
     Time Synchronization Task
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\timesynctask.dll
     9/20/1988 1:31 PM
   \Microsoft\Windows\Time Synchronization\SynchronizeTime
     "%windir%\system32\sc.exe" start w32time task_started
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\Time Zone\SynchronizeTimeZone
     "%windir%\system32\tzsync.exe" 
     TimeZone Sync Task
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\tzsync.exe
     7/6/1952 12:18 AM
   \Microsoft\Windows\TPM\Tpm-HASCertRetr
     HKCR\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}
     TPM Maintenance Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tpmtasks.dll
     7/27/1950 11:41 PM
   \Microsoft\Windows\TPM\Tpm-Maintenance
     HKCR\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}
     TPM Maintenance Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tpmtasks.dll
     7/27/1950 11:41 PM
   \Microsoft\Windows\TPM\Tpm-PreAttestationHealthCheck
     HKCR\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}
     TPM Maintenance Tasks
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\tpmtasks.dll
     7/27/1950 11:41 PM
   [DISABLED] \Microsoft\Windows\UNP\RunUpdateNotificationMgr
     "%windir%\System32\UNP\UpdateNotificationMgr.exe" 
     Update Notification Pipeline Manager
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\unp\updatenotificationmgr.exe
     4/14/1907 6:36 PM
   \Microsoft\Windows\UpdateOrchestrator\Report policies
     "%systemroot%\system32\usoclient.exe" ReportPolicies
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   [DISABLED] \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work
     "%systemroot%\system32\usoclient.exe" StartMaintenanceWork
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\Schedule Scan
     "%systemroot%\system32\usoclient.exe" StartScan
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\Schedule Scan Static Task
     "%systemroot%\system32\usoclient.exe" StartScan
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   [DISABLED] \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work
     "%systemroot%\system32\usoclient.exe" StartWork
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   [DISABLED] \Microsoft\Windows\UpdateOrchestrator\Schedule Work
     "%systemroot%\system32\usoclient.exe" StartWork
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\Start Oobe Expedite Work
     "%systemroot%\system32\usoclient.exe" StartWork
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScanAfterUpdate
     "%systemroot%\system32\usoclient.exe" StartOobeAppsScanAfterUpdate
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScan_LicenseAccepted
     "%systemroot%\system32\usoclient.exe" StartOobeAppsScan
     UsoClient
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\usoclient.exe
     12/24/1972 10:06 PM
   \Microsoft\Windows\UpdateOrchestrator\UIEOrchestrator
     "%systemroot%\system32\UIEOrchestrator.exe" /SendHeartbeat
     c:\windows\system32\uieorchestrator.exe
     10/12/1988 10:17 PM
   \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker
     "%systemroot%\system32\MusNotification.exe" 
     File not found: C:\WINDOWS\system32\MusNotification.exe
     
   \Microsoft\Windows\UpdateOrchestrator\UUS Failover Task
     "%windir%\System32\MLEngineStub.exe" HandleUusFailoverEvaluationSignalFromWnf
     Undocked MLEngine Stub
     Microsoft Corporation
     10.0.26100.3037
     c:\windows\system32\mlenginestub.exe
     9/11/2033 8:30 AM
   \Microsoft\Windows\UPnP\UPnPHostConfig
     "sc.exe" config upnphost start= auto
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\USB\Usb-Notifications
     HKCR\CLSID\{E05BE1C8-92A8-4757-B575-ACAECB4E6A40}
     UsbTask
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\usbtask.dll
     2/20/2023 10:21 AM
   \Microsoft\Windows\WCM\WiFiTask
     "%SystemRoot%\System32\WiFiTask.exe" 
     Wireless Background Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wifitask.exe
     8/11/1920 12:10 AM
   \Microsoft\Windows\WDI\ResolutionHost
     HKCR\CLSID\{900BE39D-6BE8-461A-BC4D-B0FA71F5ECB1}
     Windows Diagnostic Infrastructure
     Microsoft Corporation
     10.0.26100.1
     c:\windows\system32\wdi.dll
     4/15/1909 5:51 PM
   \Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance
     "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe" -IdleTask -TaskName WdCacheMaintenance
     Microsoft Malware Protection Command Line Utility
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\mpcmdrun.exe
     1/25/1937 8:55 PM
   \Microsoft\Windows\Windows Defender\Windows Defender Cleanup
     "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe" -IdleTask -TaskName WdCleanup
     Microsoft Malware Protection Command Line Utility
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\mpcmdrun.exe
     1/25/1937 8:55 PM
   \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan
     "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe" Scan -ScheduleJob -ScanTrigger 55 -IdleScheduledJob
     Microsoft Malware Protection Command Line Utility
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\mpcmdrun.exe
     1/25/1937 8:55 PM
   \Microsoft\Windows\Windows Defender\Windows Defender Verification
     "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpCmdRun.exe" -IdleTask -TaskName WdVerification
     Microsoft Malware Protection Command Line Utility
     Microsoft Corporation
     4.18.25040.2
     c:\programdata\microsoft\windows defender\platform\4.18.25040.2-0\mpcmdrun.exe
     1/25/1937 8:55 PM
   \Microsoft\Windows\Windows Error Reporting\QueueReporting
     "%windir%\system32\wermgr.exe" -upload
     Windows Problem Reporting
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wermgr.exe
     10/24/1928 5:15 AM
   \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange
     "%windir%\system32\rundll32.exe" bfe.dll,BfeOnServiceStartTypeChange
     Base Filtering Engine
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\bfe.dll
     4/4/1980 11:38 PM
   \Microsoft\Windows\Windows Media Sharing\UpdateLibrary
     "%ProgramFiles%\Windows Media Player\wmpnscfg.exe" 
     Windows Media Player Network Sharing Service Configuration Application
     Microsoft Corporation
     12.0.26100.1882
     c:\program files\windows media player\wmpnscfg.exe
     1/10/1964 7:02 PM
   [DISABLED] \Microsoft\Windows\WindowsAI\Recall\InitialConfiguration
     HKCR\CLSID\{709FD5EF-7296-4154-BD3A-E9830FCFA60A}
     ShellConfigTask Task
     Microsoft Corporation
     10.0.26100.3915
     c:\windows\system32\shellconfigtask.dll
     6/9/1936 10:38 AM
   \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration
     HKCR\CLSID\{0BE6820D-B667-4CB6-931B-C153A77DA895}
     ShellConfigTask Task
     Microsoft Corporation
     10.0.26100.3915
     c:\windows\system32\shellconfigtask.dll
     6/9/1936 10:38 AM
   \Microsoft\Windows\WindowsColorSystem\Calibration Loader
     HKCR\CLSID\{B210D694-C8DF-490D-9576-9E20CDBC20BD}
     Microsoft Color Matching System DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\mscms.dll
     2/20/1907 3:48 AM
   \Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache
     HKCR\CLSID\{07369A67-07A6-4608-ABEA-379491CB7C46}
     Update Policy Reader
     Microsoft Corporation
     1310.2503.26012.0
     c:\windows\system32\updatepolicy.dll
     5/31/1972 6:32 PM
   \Microsoft\Windows\WindowsUpdate\Scheduled Start
     "%systemroot%\System32\sc.exe" start wuauserv
     Service Control Manager Configuration Tool
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sc.exe
     5/6/1966 8:47 AM
   \Microsoft\Windows\Wininet\CacheTask
     HKCR\CLSID\{0358B920-0AC7-461F-98F4-58E32CD89148}
     Internet Extensions for Win32
     Microsoft Corporation
     11.0.26100.3912
     c:\windows\system32\wininet.dll
     9/5/1955 6:44 PM
   \Microsoft\Windows\WlanSvc\CDSSync
     HKCR\CLSID\{B0D2B535-12E1-439F-86B3-BADA289510F0}
     Windows WiFi Sync Provider DLL
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wificloudstore.dll
     12/13/1962 12:13 PM
   \Microsoft\Windows\WlanSvc\MoProfileManagement
     HKCR\CLSID\{085EDA12-CF4A-4944-8222-8ADCADE137CB}
     Windows WLAN Media Manager DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\wlanmediamanager.dll
     12/2/2016 12:17 AM
   \Microsoft\Windows\WOF\WIM-Hash-Management
     HKCR\CLSID\{B7BFFB5A-EFA8-4D8C-BBDE-C8D5FAAF54A1}
     WIM Boot Tasks
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\woftasks.dll
     11/3/2024 8:11 PM
   [DISABLED] \Microsoft\Windows\WOF\WIM-Hash-Validation
     HKCR\CLSID\{B7BFFB5A-EFA8-4D8C-BBDE-C8D5FAAF54A1}
     WIM Boot Tasks
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\woftasks.dll
     11/3/2024 8:11 PM
   \Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
     HKCR\CLSID\{97D47D56-3777-49FB-8E8F-90D7E30E1A1E}
     Microsoft (C) Work Folders Shell Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\workfoldersshell.dll
     4/4/1996 12:58 AM
   \Microsoft\Windows\Work Folders\Work Folders Maintenance Work
     HKCR\CLSID\{63260BCE-A3FB-4A34-AA51-D4D8E877B62B}
     Microsoft (C) Work Folders Shell Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\workfoldersshell.dll
     4/4/1996 12:58 AM
   [DISABLED] \Microsoft\Windows\Workplace Join\Automatic-Device-Join
     "%SystemRoot%\System32\dsregcmd.exe" $(Arg0) $(Arg1) $(Arg2)
     DSREG commandline tool
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dsregcmd.exe
     8/21/2009 2:10 PM
   [DISABLED] \Microsoft\Windows\Workplace Join\Device-Sync
     HKCR\CLSID\{C662D912-E4D6-44A3-89A0-20550514951D}
     DSREG task handler
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dsregtask.dll
     10/22/1923 7:54 PM
   [DISABLED] \Microsoft\Windows\Workplace Join\Recovery-Check
     "%SystemRoot%\System32\dsregcmd.exe" /checkrecovery
     DSREG commandline tool
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\dsregcmd.exe
     8/21/2009 2:10 PM
   \Microsoft\Windows\WwanSvc\NotificationTask
     "%SystemRoot%\System32\WiFiTask.exe" wwan
     Wireless Background Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wifitask.exe
     8/11/1920 12:10 AM
   \Microsoft\Windows\WwanSvc\OobeDiscovery
     HKCR\CLSID\{C93CF9D5-031B-4AAA-AB0B-EF802347B381}
     Windows MB Media Manager DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\mbmediamanager.dll
     6/7/1933 3:29 PM
   \Microsoft\XblGameSave\XblGameSaveTask
     "%windir%\System32\XblGameSaveTask.exe" standby
     XblGameSave Standby Task
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\xblgamesavetask.exe
     3/2/1993 5:33 AM

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
   IEToEdge BHO
     HKCR\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
     IEToEdge BHO
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\136.0.3240.76\bho\ie_to_edge_bho.dll
     5/14/2025 1:55 PM
   Skype for Business Browser Helper
     HKCR\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
     Skype for Business
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\ochelper.dll
     5/15/2025 5:40 PM
   Microsoft OneDrive for Business Browser Helper
     HKCR\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\grooveex.dll
     5/15/2025 5:36 PM

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
   IEToEdge BHO
     HKCR\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
     IEToEdge BHO
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\136.0.3240.76\bho\ie_to_edge_bho.dll
     5/14/2025 1:55 PM
   Skype for Business Browser Helper
     HKCR\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
     Skype for Business
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\ochelper.dll
     5/15/2025 5:40 PM
   Microsoft OneDrive for Business Browser Helper
     HKCR\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\grooveex.dll
     5/15/2025 5:36 PM

HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers
    FileSyncEx
     HKCR\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
   EPP
     HKCR\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}
     Microsoft Security Client Shell Extension
     Microsoft Corporation
     4.18.1907.16384
     c:\program files\windows defender\shellext.dll
     12/20/1913 9:38 AM
   Open With
     HKCR\CLSID\{09799AFB-AD67-11d1-ABCD-00C04FC30936}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Open With EncryptionMenu
     HKCR\CLSID\{A470F8CF-A1E8-4f65-8335-227475AA5C46}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Sharing
     HKCR\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   WorkFolders
     HKCR\CLSID\{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}
     Microsoft (C) Work Folders Shell Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\workfoldersshell.dll
     4/4/1996 12:58 AM
   Taskband Pin
     HKCR\CLSID\{90AA3A4E-1CBA-4233-B8BB-535773D48449}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Start Menu Pin
     HKCR\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers
   EnhancedStorageShell
     HKCR\CLSID\{2854F705-3548-414C-A113-93E27C808C85}
     Windows Enhanced Storage Shell Extension DLL
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\ehstorshell.dll
     12/3/2034 11:42 AM
   EPP
     HKCR\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}
     Microsoft Security Client Shell Extension
     Microsoft Corporation
     4.18.1907.16384
     c:\program files\windows defender\shellext.dll
     12/20/1913 9:38 AM
   Sharing
     HKCR\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   Previous Versions Property Page
     HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}
     Previous Versions property page
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\twext.dll
     5/7/1913 8:09 AM
   Portable Devices Menu
     HKCR\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
     Portable Devices Shell Extension
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\wpdshext.dll
     4/19/2026 2:04 AM
   ShellFolder for CD Burning
     HKCR\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\*\ShellEx\PropertySheetHandlers
   CryptoSignMenu
     HKCR\CLSID\{7444C719-39BF-11D1-8CD9-00C04FC29D45}
     Crypto Shell Extensions
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\cryptext.dll
     3/26/1953 4:42 PM
   FCI Properties
     HKCR\CLSID\{748F920F-FB24-4D09-B360-BAF6F199AD6D}
     Microsoft® File Server Resource Management Shell Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\srmshell.dll
     7/26/1941 6:40 AM
   Security Shell Extension
     HKCR\CLSID\{1f2e5c40-9550-11ce-99d2-00aa006e086c}
     Security Shell Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\rshx32.dll
     9/15/1959 3:56 AM
   OLE Docfile Property Page
     HKCR\CLSID\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}
     OLE DocFile Property Page
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\docprop.dll
     8/4/1909 7:38 PM
   Summary Properties Page
     HKCR\CLSID\{883373C3-BF89-11D1-BE35-080036B11A03}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
   CopyAsPathMenu
     HKCR\CLSID\{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   ModernSharing
     HKCR\CLSID\{e2bf9676-5f8f-435c-97eb-11607a5bedf7}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   SendTo
     HKCR\CLSID\{7BA4C740-9E81-11CF-99D3-00AA004AE837}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Client Side Caching UI
     HKCR\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   Previous Versions Property Page
     HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}
     Previous Versions property page
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\twext.dll
     5/7/1913 8:09 AM
   Start Menu Pin
     HKCR\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\AllFileSystemObjects\ShellEx\PropertySheetHandlers
   Previous Versions Property Page
     HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}
     Previous Versions property page
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\twext.dll
     5/7/1913 8:09 AM
   Client Side Caching UI
     HKCR\CLSID\{7EFA68C6-086B-43e1-A2D2-55A113531240}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM

HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers
    FileSyncEx
     HKCR\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
   EncryptionMenu
     HKCR\CLSID\{A470F8CF-A1E8-4f65-8335-227475AA5C46}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   EPP
     HKCR\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}
     Microsoft Security Client Shell Extension
     Microsoft Corporation
     4.18.1907.16384
     c:\program files\windows defender\shellext.dll
     12/20/1913 9:38 AM
   Offline Files
     HKCR\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   Sharing
     HKCR\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   WorkFolders
     HKCR\CLSID\{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}
     Microsoft (C) Work Folders Shell Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\workfoldersshell.dll
     4/4/1996 12:58 AM
   Previous Versions Property Page
     HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}
     Previous Versions property page
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\twext.dll
     5/7/1913 8:09 AM

HKLM\Software\Classes\Directory\Shellex\PropertySheetHandlers
   Offline Files
     HKCR\CLSID\{7EFA68C6-086B-43e1-A2D2-55A113531240}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   Sharing
     HKCR\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   Security Shell Extension
     HKCR\CLSID\{1f2e5c40-9550-11ce-99d2-00aa006e086c}
     Security Shell Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\rshx32.dll
     9/15/1959 3:56 AM
   MyFolder menu and properties
     HKCR\CLSID\{4a7ded0a-ad25-11d0-98a8-0800361b1103}
     My Documents Folder UI
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\mydocs.dll
     6/24/1997 12:14 AM
   Previous Versions Property Page
     HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}
     Previous Versions property page
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\twext.dll
     5/7/1913 8:09 AM
   DfsShell Class
     HKCR\CLSID\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
     Distributed File System shell extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\dfsshlex.dll
     5/7/1951 9:50 AM
   Folder Customization Tab
     HKCR\CLSID\{ef43ecfe-2ab9-4632-bf21-58909dd177f0}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers
   FileSystem
     HKCR\CLSID\{217FC9C0-3AEA-1069-A2DB-08002B30309D}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Sharing
     HKCR\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM

HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers
    FileSyncEx
     HKCR\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
   New
     HKCR\CLSID\{D969A300-E7FF-11d0-A93B-00A0C90F2719}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   NvCplDesktopContext
     HKCR\CLSID\{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}
     NVIDIA Display Shell Extension
     NVIDIA Corporation
     1.2.0.1
     c:\windows\system32\driverstore\filerepository\nv_dispi.inf_amd64_fcb8b2221bca6b43\nvshext.dll
     4/27/2025 1:11 PM
   Sharing
     HKCR\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
     Shell extensions for sharing
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\ntshrui.dll
     9/26/1974 2:08 AM
   WorkFolders
     HKCR\CLSID\{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}
     Microsoft (C) Work Folders Shell Extension
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\workfoldersshell.dll
     4/4/1996 12:58 AM

HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers
   Library Location
     HKCR\CLSID\{3dad6c5d-2167-4cae-9914-f99e41c12cfa}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM
   Offline Files
     HKCR\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM
   PintoStartScreen
     HKCR\CLSID\{470C0EBD-5D73-4d58-9CED-E91E22E23282}
     App Resolver
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\appresolver.dll
     10/27/1968 6:32 PM
   Start Menu Pin
     HKCR\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
     Windows Shell Common Dll
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\shell32.dll
     8/6/1967 6:55 AM

HKLM\Software\Classes\Folder\ShellEx\DragDropHandlers
   Compressed (zipped) Folder Right Drag Handler
     HKCR\CLSID\{BD472F60-27FA-11cf-B8B4-444553540000}
     Compressed (zipped) Folders
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\zipfldr.dll
     7/5/2024 10:32 PM
   Compressed Archive Folder Right Drag Handler
     HKCR\CLSID\{D12E3394-DE4B-4777-93E9-DF0AC88F8584}
     Compressed (zipped) Folders
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\zipfldr.dll
     7/5/2024 10:32 PM

HKLM\Software\Classes\Folder\ShellEx\PropertySheetHandlers
   FCI Properties
     HKCR\CLSID\{748F920F-FB24-4D09-B360-BAF6F199AD6D}
     Microsoft® File Server Resource Management Shell Extension
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\srmshell.dll
     7/26/1941 6:40 AM
   Offline Files
     HKCR\CLSID\{7EFA68C6-086B-43e1-A2D2-55A113531240}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
    OneDrive1
     HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive2
     HKCR\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive3
     HKCR\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive4
     HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive5
     HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive6
     HKCR\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    OneDrive7
     HKCR\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\filesyncshell64.dll
     2/8/1912 10:35 PM
    SkyDrivePro1 (ErrorConflict)
     HKCR\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\grooveex.dll
     5/15/2025 5:23 PM
    SkyDrivePro2 (SyncInProgress)
     HKCR\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\grooveex.dll
     5/15/2025 5:23 PM
    SkyDrivePro3 (InSync)
     HKCR\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\grooveex.dll
     5/15/2025 5:23 PM
   EnhancedStorageShell
     HKCR\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}
     Windows Enhanced Storage Shell Extension DLL
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\ehstorshell.dll
     12/3/2034 11:42 AM
   Offline Files
     HKCR\CLSID\{4E77131D-3629-431c-9818-C5679DC83E81}
     Client Side Caching UI
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\cscui.dll
     12/27/1912 1:47 PM

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
    OneDrive1
     HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive2
     HKCR\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive3
     HKCR\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive4
     HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive5
     HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive6
     HKCR\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    OneDrive7
     HKCR\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}
     Microsoft OneDrive Shell Extension
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\25.080.0427.0003\i386\filesyncshell.dll
     3/6/2017 3:26 PM
    SkyDrivePro1 (ErrorConflict)
     HKCR\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\grooveex.dll
     5/15/2025 5:36 PM
    SkyDrivePro2 (SyncInProgress)
     HKCR\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\grooveex.dll
     5/15/2025 5:36 PM
    SkyDrivePro3 (InSync)
     HKCR\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}
     Microsoft OneDrive for Business Extensions
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\grooveex.dll
     5/15/2025 5:36 PM

HKLM\Software\Microsoft\Internet Explorer\Toolbar
   Smart Backup
     HKCR\CLSID\{1d09c093-f71e-43c3-b948-19316cbd695e}
     Microsoft .NET Runtime Execution Engine
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mscoree.dll
     10/20/1970 10:22 AM

HKLM\Software\Microsoft\Internet Explorer\Extensions
   Lync Click to Call
     C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll
     Skype for Business
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\office16\ochelper.dll
     5/15/2025 6:08 PM

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
   Lync Click to Call
     C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
     Skype for Business
     Microsoft Corporation
     16.0.18730.20186
     c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\ochelper.dll
     5/15/2025 5:40 PM

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
   aux
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midimapper
     midimap.dll
     Microsoft MIDI Mapper
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\midimap.dll
     12/9/1965 7:31 PM
   mixer
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   msacm.imaadpcm
     imaadp32.acm
     IMA ADPCM CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\imaadp32.acm
     3/24/1946 10:11 PM
   msacm.msadpcm
     msadp32.acm
     Microsoft ADPCM CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msadp32.acm
     1/22/2032 6:51 AM
   msacm.msg711
     msg711.acm
     Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msg711.acm
     8/5/1929 3:00 AM
   msacm.msgsm610
     msgsm32.acm
     Microsoft GSM 6.10 Audio CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\msgsm32.acm
     10/22/1952 3:18 PM
   vidc.i420
     iyuv_32.dll
     Intel Indeo(R) Video YUV Codec
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\iyuv_32.dll
     8/1/1905 10:42 AM
   vidc.iyuv
     iyuv_32.dll
     Intel Indeo(R) Video YUV Codec
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\iyuv_32.dll
     8/1/1905 10:42 AM
   vidc.mrle
     msrle32.dll
     Microsoft RLE Compressor
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\msrle32.dll
     5/3/1969 12:38 AM
   vidc.msvc
     msvidc32.dll
     Microsoft Video 1 Compressor
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\msvidc32.dll
     8/29/1981 5:23 PM
   vidc.uyvy
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msyuv.dll
     12/3/2032 7:38 AM
   vidc.yuy2
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msyuv.dll
     12/3/2032 7:38 AM
   vidc.yvu9
     tsbyuv.dll
     Toshiba Video Codec
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\tsbyuv.dll
     6/10/1975 8:10 PM
   vidc.yvyu
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\msyuv.dll
     12/3/2032 7:38 AM
   wave
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wavemapper
     msacm32.drv
     Microsoft Sound Mapper
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\msacm32.drv
     6/18/1921 8:45 AM
   msacm.l3acm
     C:\Windows\System32\l3codeca.acm
     MPEG Layer-3 Audio Codec for MSACM
     Fraunhofer Institut Integrierte Schaltungen IIS
     1.9.0.401
     c:\windows\system32\l3codeca.acm
     10/29/1918 1:22 PM
   aux1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   MSVideo8
     VfWWDM32.dll
     VfW MM Driver for WDM Video Capture Devices
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\vfwwdm32.dll
     1/28/1985 6:59 PM
   aux3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   aux9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   midi9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   mixer9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM
   wave9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\wdmaud.drv
     8/5/1990 10:59 PM

HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32
   aux
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midimapper
     midimap.dll
     Microsoft MIDI Mapper
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\midimap.dll
     3/6/2028 3:01 AM
   mixer
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   msacm.imaadpcm
     imaadp32.acm
     IMA ADPCM CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\imaadp32.acm
     10/31/1995 7:02 PM
   msacm.msadpcm
     msadp32.acm
     Microsoft ADPCM CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\msadp32.acm
     10/25/1911 10:42 AM
   msacm.msg711
     msg711.acm
     Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\msg711.acm
     9/8/1957 6:44 AM
   msacm.msgsm610
     msgsm32.acm
     Microsoft GSM 6.10 Audio CODEC for MSACM
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\msgsm32.acm
     5/1/1913 8:56 PM
   vidc.cvid
     iccvid.dll
     Cinepak® Codec
     Radius Inc.
     1.10.0.12
     c:\windows\syswow64\iccvid.dll
     10/30/1937 5:25 PM
   vidc.i420
     iyuv_32.dll
     Intel Indeo(R) Video YUV Codec
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\iyuv_32.dll
     1/25/1964 7:27 PM
   vidc.iyuv
     iyuv_32.dll
     Intel Indeo(R) Video YUV Codec
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\iyuv_32.dll
     1/25/1964 7:27 PM
   vidc.mrle
     msrle32.dll
     Microsoft RLE Compressor
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\msrle32.dll
     12/18/2000 11:37 AM
   vidc.msvc
     msvidc32.dll
     Microsoft Video 1 Compressor
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\msvidc32.dll
     5/4/2014 6:37 PM
   vidc.uyvy
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\msyuv.dll
     4/6/1960 12:59 PM
   vidc.yuy2
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\msyuv.dll
     4/6/1960 12:59 PM
   vidc.yvu9
     tsbyuv.dll
     Toshiba Video Codec
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\tsbyuv.dll
     4/18/1953 6:30 AM
   vidc.yvyu
     msyuv.dll
     Microsoft UYVY Video Decompressor
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\msyuv.dll
     4/6/1960 12:59 PM
   wave
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wavemapper
     msacm32.drv
     Microsoft Sound Mapper
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\msacm32.drv
     2/13/1912 12:40 AM
   msacm.l3acm
     C:\Windows\SysWOW64\l3codeca.acm
     MPEG Layer-3 Audio Codec for MSACM
     Fraunhofer Institut Integrierte Schaltungen IIS
     1.9.0.401
     c:\windows\syswow64\l3codeca.acm
     9/15/1931 2:25 PM
   aux1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave4
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave5
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux6
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave1
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux2
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave3
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave7
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave8
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   aux9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   midi9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   mixer9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM
   wave9
     wdmaud.drv
     Winmm  audio system driver
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\wdmaud.drv
     10/27/1954 7:55 PM

HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance
   DV Muxer
     HKCR\CLSID\{129D7E40-C10D-11D0-AFB9-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\qdv.dll
     6/19/1927 8:41 PM
   Color Space Converter
     HKCR\CLSID\{1643E180-90F5-11CE-97D5-00AA0055595A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   WM ASF Reader
     HKCR\CLSID\{187463A0-5BB7-11D3-ACBE-0080C75E246E}
     DirectShow ASF Support
     Microsoft Corporation
     12.0.26100.1
     c:\windows\system32\qasf.dll
     12/5/2036 5:28 AM
   AVI Splitter
     HKCR\CLSID\{1B544C20-FD0B-11CE-8C63-00AA0044B51E}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   VGA 16 color ditherer
     HKCR\CLSID\{1DA08500-9EDC-11CF-BC10-00AA00AC74F6}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   SBE2MediaTypeProfile
     HKCR\CLSID\{1f26a602-2b5c-4b63-b8e8-9ea5c1a7dc2e}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   Microsoft DTV-DVD Video Decoder
     HKCR\CLSID\{212690FB-83E5-4526-8FD7-74478B7939CD}
     Microsoft DTV-DVD Video Decoder
     Microsoft Corporation
     10.0.26100.4061
     c:\windows\system32\msmpeg2vdec.dll
     10/25/1920 3:53 AM
   AC3 Parser Filter
     HKCR\CLSID\{280A3020-86CF-11D1-ABE6-00A0C905F375}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mpg2splt.ax
     11/15/1903 11:42 PM
   StreamBufferSink
     HKCR\CLSID\{2DB47AE5-CF39-43C2-B4D6-0CD8D90946F4}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   MJPEG Decompressor
     HKCR\CLSID\{301056D0-6DFF-11D2-9EEB-006008039E37}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   MPEG-I Stream Splitter
     HKCR\CLSID\{336475D0-942A-11CE-A870-00AA002FEAB5}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   SAMI (CC) Reader
     HKCR\CLSID\{33FACFE0-A9BE-11D0-A520-00A0D10129C0}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   VBI Codec
     HKCR\CLSID\{370A1D5D-DDEB-418C-81CD-189E0D4FA443}
     Microsoft VBI Codec
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\vbicodec.ax
     1/19/1979 6:58 PM
   MPEG-2 Splitter
     HKCR\CLSID\{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mpg2splt.ax
     11/15/1903 11:42 PM
   Closed Captions Analysis Filter
     HKCR\CLSID\{3D07A539-35CA-447C-9B05-8D85CE924F9E}
     CCA DirectShow Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\cca.dll
     12/9/1904 12:36 AM
   SBE2FileScan
     HKCR\CLSID\{3E458037-0CA6-41aa-A594-2AA6C02D709B}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   Microsoft MPEG-2 Video Encoder
     HKCR\CLSID\{42150CD9-CA9A-4EA5-9939-30EE037F6E74}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\msmpeg2enc.dll
     3/16/1971 4:58 AM
   Internal Text Renderer
     HKCR\CLSID\{48025243-2D39-11CE-875D-00608CB78066}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   MPEG Audio Codec
     HKCR\CLSID\{4A2286E0-7BEF-11CE-9BD9-0000E202599C}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   DV Splitter
     HKCR\CLSID\{4EB31670-9FC6-11CF-AF6E-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\qdv.dll
     6/19/1927 8:41 PM
   Video Mixing Renderer 9
     HKCR\CLSID\{51B4ABF3-748F-4E3B-A276-C828330E926A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Microsoft MPEG-2 Encoder
     HKCR\CLSID\{5F5AFF4A-2F7F-4279-88C2-CD88EB39D144}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\msmpeg2enc.dll
     3/16/1971 4:58 AM
   ACM Wrapper
     HKCR\CLSID\{6A08CF80-0E18-11CF-A24D-0020AFD79767}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Default Video Renderer
     HKCR\CLSID\{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Mpeg-2 Video Stream Analysis
     HKCR\CLSID\{6CFAD761-735D-4AA5-8AFC-AF91A7D61EBA}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   Video Port Manager
     HKCR\CLSID\{6F26A6CD-967B-47FD-874A-7AED2C9D25A2}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Video Renderer
     HKCR\CLSID\{70E102B0-5556-11CE-97C0-00AA0055595A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   VPS Decoder
     HKCR\CLSID\{7B3BC2A0-AA50-4ae7-BD44-B03649EC87C2}
     Microsoft Teletext Server
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\wstpager.ax
     6/14/1955 7:56 PM
   WM ASF Writer
     HKCR\CLSID\{7C23220E-55BB-11D3-8B16-00C04FB6BD3D}
     DirectShow ASF Support
     Microsoft Corporation
     12.0.26100.1
     c:\windows\system32\qasf.dll
     12/5/2036 5:28 AM
   VBI Surface Allocator
     HKCR\CLSID\{814B9800-1C88-11D1-BAD9-00609744111A}
     VBI Surface Allocator Filter
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\vbisurf.ax
     5/14/2033 6:25 AM
   File Writer
     HKCR\CLSID\{8596E5F0-0DA5-11D0-BD21-00A0C911CE86}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qcap.dll
     9/16/2036 11:34 PM
   DVD Navigator
     HKCR\CLSID\{9B8C4620-2C1A-11D0-8493-00A02438AD48}
     DirectShow DVD PlayBack Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\qdvd.dll
     3/5/1959 6:12 PM
   AVI Draw Filter
     HKCR\CLSID\{A888DF60-1E90-11CF-AC98-00AA004C0FA9}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Microsoft MPEG-2 Audio Encoder
     HKCR\CLSID\{ACD453BC-C58A-44D1-BBF5-BFB325BE2D78}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\msmpeg2enc.dll
     3/16/1971 4:58 AM
   WST Pager
     HKCR\CLSID\{AD6C8934-F31B-4F43-B5E4-0541C1452F6F}
     Microsoft Teletext Server
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\wstpager.ax
     6/14/1955 7:56 PM
   MPEG-2 Demultiplexer
     HKCR\CLSID\{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\system32\mpg2splt.ax
     11/15/1903 11:42 PM
   DV Video Decoder
     HKCR\CLSID\{B1B77C00-C3E4-11CF-AF79-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\qdv.dll
     6/19/1927 8:41 PM
   Sample Grabber
     HKCR\CLSID\{C1F400A0-3F08-11D3-9F0B-006008039E37}
     DirectShow Editing.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qedit.dll
     5/6/1968 3:51 PM
   Null Renderer
     HKCR\CLSID\{C1F400A4-3F08-11D3-9F0B-006008039E37}
     DirectShow Editing.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qedit.dll
     5/6/1968 3:51 PM
   MPEG-2 Sections and Tables
     HKCR\CLSID\{C666E115-BB62-4027-A113-82D643FE2D99}
     Microsoft MPEG-2 Section and Table Acquisition Module
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\mpeg2data.ax
     11/4/1939 8:43 AM
   StreamBufferSource
     HKCR\CLSID\{C9F5FE02-F851-4EB5-99EE-AD602AF1E619}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   Smart Tee Filter
     HKCR\CLSID\{CC58E280-8AA1-11D1-B3F1-00AA003761C5}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qcap.dll
     9/16/2036 11:34 PM
   AVI Decompressor
     HKCR\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   AVI/WAV File Source
     HKCR\CLSID\{D3588AB0-0781-11CE-B03A-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Wave Parser
     HKCR\CLSID\{D51BD5A1-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   MIDI Parser
     HKCR\CLSID\{D51BD5A2-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Multi-file Parser
     HKCR\CLSID\{D51BD5A3-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   File stream renderer
     HKCR\CLSID\{D51BD5A5-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Microsoft DTV-DVD Audio Decoder
     HKCR\CLSID\{E1F1A0B8-BEEE-490D-BA7C-066C40B5E2B9}
     Microsoft DTV-DVD Audio Decoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\msmpeg2adec.dll
     1/11/1911 8:15 AM
   SBE2 Sink
     HKCR\CLSID\{E2448508-95DA-4205-9A27-7EC81E723B1A}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\system32\sbe.dll
     6/9/2011 9:05 PM
   AVI mux
     HKCR\CLSID\{E2510970-F137-11CE-8B67-00AA00A3F1A6}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qcap.dll
     9/16/2036 11:34 PM
   Line 21 Decoder 2
     HKCR\CLSID\{E4206432-01A1-4BEE-B3E1-3702C8EDC574}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   File Source (Async.)
     HKCR\CLSID\{E436EBB5-524F-11CE-9F53-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   File Source (URL)
     HKCR\CLSID\{E436EBB6-524F-11CE-9F53-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM
   Infinite Pin Tee Filter
     HKCR\CLSID\{F8388A40-D5BB-11D0-BE5A-0080C706568E}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\qcap.dll
     9/16/2036 11:34 PM
   Enhanced Video Renderer
     HKCR\CLSID\{FA10746C-9B63-4B6C-BC49-FC300EA5F256}
     Enhanced Video Renderer DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\evr.dll
     11/1/2011 6:55 PM
   BDA MPEG2 Transport Information Filter
     HKCR\CLSID\{FC772AB0-0C7F-11D3-8FF2-00A0C9224CF4}
     Microsoft Transport Information Filter for MPEG2 based networks.
     Microsoft Corporation
     10.0.26100.1150
     c:\windows\system32\psisrndr.ax
     2/3/2001 6:04 AM
   MPEG Video Codec
     HKCR\CLSID\{FEB50740-7BEF-11CE-9BD9-0000E202599C}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\quartz.dll
     7/14/1926 2:23 PM

HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance
   DV Muxer
     HKCR\CLSID\{129D7E40-C10D-11D0-AFB9-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\qdv.dll
     2/15/2031 4:40 AM
   Color Space Converter
     HKCR\CLSID\{1643E180-90F5-11CE-97D5-00AA0055595A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   WM ASF Reader
     HKCR\CLSID\{187463A0-5BB7-11D3-ACBE-0080C75E246E}
     DirectShow ASF Support
     Microsoft Corporation
     12.0.26100.1
     c:\windows\syswow64\qasf.dll
     9/28/1915 3:27 PM
   AVI Splitter
     HKCR\CLSID\{1B544C20-FD0B-11CE-8C63-00AA0044B51E}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   VGA 16 color ditherer
     HKCR\CLSID\{1DA08500-9EDC-11CF-BC10-00AA00AC74F6}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   SBE2MediaTypeProfile
     HKCR\CLSID\{1f26a602-2b5c-4b63-b8e8-9ea5c1a7dc2e}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   Microsoft DTV-DVD Video Decoder
     HKCR\CLSID\{212690FB-83E5-4526-8FD7-74478B7939CD}
     Microsoft DTV-DVD Video Decoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\msmpeg2vdec.dll
     10/3/1975 4:16 AM
   AC3 Parser Filter
     HKCR\CLSID\{280A3020-86CF-11D1-ABE6-00A0C905F375}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\mpg2splt.ax
     5/25/2026 6:50 AM
   StreamBufferSink
     HKCR\CLSID\{2DB47AE5-CF39-43C2-B4D6-0CD8D90946F4}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   MJPEG Decompressor
     HKCR\CLSID\{301056D0-6DFF-11D2-9EEB-006008039E37}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   MPEG-I Stream Splitter
     HKCR\CLSID\{336475D0-942A-11CE-A870-00AA002FEAB5}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   SAMI (CC) Reader
     HKCR\CLSID\{33FACFE0-A9BE-11D0-A520-00A0D10129C0}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   VBI Codec
     HKCR\CLSID\{370A1D5D-DDEB-418C-81CD-189E0D4FA443}
     Microsoft VBI Codec
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\vbicodec.ax
     8/16/1938 6:24 AM
   MPEG-2 Splitter
     HKCR\CLSID\{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\mpg2splt.ax
     5/25/2026 6:50 AM
   Closed Captions Analysis Filter
     HKCR\CLSID\{3D07A539-35CA-447C-9B05-8D85CE924F9E}
     CCA DirectShow Filter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\cca.dll
     1/23/1966 9:24 AM
   SBE2FileScan
     HKCR\CLSID\{3E458037-0CA6-41aa-A594-2AA6C02D709B}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   Microsoft MPEG-2 Video Encoder
     HKCR\CLSID\{42150CD9-CA9A-4EA5-9939-30EE037F6E74}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\msmpeg2enc.dll
     12/8/2010 5:37 AM
   Internal Text Renderer
     HKCR\CLSID\{48025243-2D39-11CE-875D-00608CB78066}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   MPEG Audio Codec
     HKCR\CLSID\{4A2286E0-7BEF-11CE-9BD9-0000E202599C}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   DV Splitter
     HKCR\CLSID\{4EB31670-9FC6-11CF-AF6E-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\qdv.dll
     2/15/2031 4:40 AM
   Video Mixing Renderer 9
     HKCR\CLSID\{51B4ABF3-748F-4E3B-A276-C828330E926A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Microsoft MPEG-2 Encoder
     HKCR\CLSID\{5F5AFF4A-2F7F-4279-88C2-CD88EB39D144}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\msmpeg2enc.dll
     12/8/2010 5:37 AM
   ACM Wrapper
     HKCR\CLSID\{6A08CF80-0E18-11CF-A24D-0020AFD79767}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Default Video Renderer
     HKCR\CLSID\{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Mpeg-2 Video Stream Analysis
     HKCR\CLSID\{6CFAD761-735D-4AA5-8AFC-AF91A7D61EBA}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   Line 21 Decoder
     HKCR\CLSID\{6E8D4A20-310C-11D0-B79A-00AA003767A7}
     DirectShow DVD PlayBack Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\qdvd.dll
     2/19/1943 6:02 AM
   Video Port Manager
     HKCR\CLSID\{6F26A6CD-967B-47FD-874A-7AED2C9D25A2}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Video Renderer
     HKCR\CLSID\{70E102B0-5556-11CE-97C0-00AA0055595A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   VPS Decoder
     HKCR\CLSID\{7B3BC2A0-AA50-4ae7-BD44-B03649EC87C2}
     Microsoft Teletext Server
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\wstpager.ax
     7/4/1946 12:39 PM
   WM ASF Writer
     HKCR\CLSID\{7C23220E-55BB-11D3-8B16-00C04FB6BD3D}
     DirectShow ASF Support
     Microsoft Corporation
     12.0.26100.1
     c:\windows\syswow64\qasf.dll
     9/28/1915 3:27 PM
   VBI Surface Allocator
     HKCR\CLSID\{814B9800-1C88-11D1-BAD9-00609744111A}
     VBI Surface Allocator Filter
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\vbisurf.ax
     5/26/2001 6:29 AM
   File Writer
     HKCR\CLSID\{8596E5F0-0DA5-11D0-BD21-00A0C911CE86}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qcap.dll
     1/9/1918 10:15 AM
   DVD Navigator
     HKCR\CLSID\{9B8C4620-2C1A-11D0-8493-00A02438AD48}
     DirectShow DVD PlayBack Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\qdvd.dll
     2/19/1943 6:02 AM
   Overlay Mixer2
     HKCR\CLSID\{A0025E90-E45B-11D1-ABE9-00A0C905F375}
     DirectShow DVD PlayBack Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\qdvd.dll
     2/19/1943 6:02 AM
   AVI Draw Filter
     HKCR\CLSID\{A888DF60-1E90-11CF-AC98-00AA004C0FA9}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Microsoft MPEG-2 Audio Encoder
     HKCR\CLSID\{ACD453BC-C58A-44D1-BBF5-BFB325BE2D78}
     Microsoft MPEG-2 Encoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\msmpeg2enc.dll
     12/8/2010 5:37 AM
   WST Pager
     HKCR\CLSID\{AD6C8934-F31B-4F43-B5E4-0541C1452F6F}
     Microsoft Teletext Server
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\wstpager.ax
     7/4/1946 12:39 PM
   MPEG-2 Demultiplexer
     HKCR\CLSID\{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}
     DirectShow MPEG-2 Splitter.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\mpg2splt.ax
     5/25/2026 6:50 AM
   DV Video Decoder
     HKCR\CLSID\{B1B77C00-C3E4-11CF-AF79-00AA00B67A42}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1882
     c:\windows\syswow64\qdv.dll
     2/15/2031 4:40 AM
   Sample Grabber
     HKCR\CLSID\{C1F400A0-3F08-11D3-9F0B-006008039E37}
     DirectShow Editing.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qedit.dll
     10/29/1969 2:58 PM
   Null Renderer
     HKCR\CLSID\{C1F400A4-3F08-11D3-9F0B-006008039E37}
     DirectShow Editing.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qedit.dll
     10/29/1969 2:58 PM
   MPEG-2 Sections and Tables
     HKCR\CLSID\{C666E115-BB62-4027-A113-82D643FE2D99}
     Microsoft MPEG-2 Section and Table Acquisition Module
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\mpeg2data.ax
     4/20/2036 7:11 PM
   StreamBufferSource
     HKCR\CLSID\{C9F5FE02-F851-4EB5-99EE-AD602AF1E619}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   Smart Tee Filter
     HKCR\CLSID\{CC58E280-8AA1-11D1-B3F1-00AA003761C5}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qcap.dll
     1/9/1918 10:15 AM
   Overlay Mixer
     HKCR\CLSID\{CD8743A1-3736-11D0-9E69-00C04FD7C15B}
     DirectShow DVD PlayBack Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\qdvd.dll
     2/19/1943 6:02 AM
   AVI Decompressor
     HKCR\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   AVI/WAV File Source
     HKCR\CLSID\{D3588AB0-0781-11CE-B03A-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Wave Parser
     HKCR\CLSID\{D51BD5A1-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   MIDI Parser
     HKCR\CLSID\{D51BD5A2-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Multi-file Parser
     HKCR\CLSID\{D51BD5A3-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   File stream renderer
     HKCR\CLSID\{D51BD5A5-7548-11CF-A520-0080C77EF58A}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Microsoft DTV-DVD Audio Decoder
     HKCR\CLSID\{E1F1A0B8-BEEE-490D-BA7C-066C40B5E2B9}
     Microsoft DTV-DVD Audio Decoder
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\msmpeg2adec.dll
     9/4/1995 6:56 AM
   SBE2 Sink
     HKCR\CLSID\{E2448508-95DA-4205-9A27-7EC81E723B1A}
     DirectShow Stream Buffer Filter.
     Microsoft Corporation
     10.0.26100.3624
     c:\windows\syswow64\sbe.dll
     8/30/1930 2:47 PM
   AVI mux
     HKCR\CLSID\{E2510970-F137-11CE-8B67-00AA00A3F1A6}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qcap.dll
     1/9/1918 10:15 AM
   Line 21 Decoder 2
     HKCR\CLSID\{E4206432-01A1-4BEE-B3E1-3702C8EDC574}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   File Source (Async.)
     HKCR\CLSID\{E436EBB5-524F-11CE-9F53-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   File Source (URL)
     HKCR\CLSID\{E436EBB6-524F-11CE-9F53-0020AF0BA770}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM
   Infinite Pin Tee Filter
     HKCR\CLSID\{F8388A40-D5BB-11D0-BE5A-0080C706568E}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\qcap.dll
     1/9/1918 10:15 AM
   Enhanced Video Renderer
     HKCR\CLSID\{FA10746C-9B63-4B6C-BC49-FC300EA5F256}
     Enhanced Video Renderer DLL
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\evr.dll
     7/15/1918 8:40 PM
   BDA MPEG2 Transport Information Filter
     HKCR\CLSID\{FC772AB0-0C7F-11D3-8FF2-00A0C9224CF4}
     Microsoft Transport Information Filter for MPEG2 based networks.
     Microsoft Corporation
     10.0.26100.1
     c:\windows\syswow64\psisrndr.ax
     11/18/1939 11:49 PM
   MPEG Video Codec
     HKCR\CLSID\{FEB50740-7BEF-11CE-9BD9-0000E202599C}
     DirectShow Runtime.
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\quartz.dll
     9/1/1931 6:06 PM

HKLM\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance
   {0e4ecd3b-1ba6-4636-8198-56c73040964a}
     HKCR\CLSID\{0e4ecd3b-1ba6-4636-8198-56c73040964a}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\windowscodecs.dll
     6/11/1911 7:20 AM

HKLM\Software\Wow6432Node\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance
   {0e4ecd3b-1ba6-4636-8198-56c73040964a}
     HKCR\CLSID\{0e4ecd3b-1ba6-4636-8198-56c73040964a}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\windowscodecs.dll
     9/5/2014 2:26 AM

HKLM\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance
   {41945702-8302-44A6-9445-AC98E8AFA086}
     HKCR\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\windowscodecs.dll
     6/11/1911 7:20 AM
   {fc6ceece-aef5-4a23-96ec-5984ffb486d9}
     HKCR\CLSID\{fc6ceece-aef5-4a23-96ec-5984ffb486d9}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\system32\windowscodecs.dll
     6/11/1911 7:20 AM

HKLM\Software\Wow6432Node\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance
   {41945702-8302-44A6-9445-AC98E8AFA086}
     HKCR\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\windowscodecs.dll
     9/5/2014 2:26 AM
   {fc6ceece-aef5-4a23-96ec-5984ffb486d9}
     HKCR\CLSID\{fc6ceece-aef5-4a23-96ec-5984ffb486d9}
     Microsoft Windows Codecs Library
     Microsoft Corporation
     10.0.26100.3912
     c:\windows\syswow64\windowscodecs.dll
     9/5/2014 2:26 AM

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   MicrosoftEdgeAutoLaunch_78A92E0D73E8D43924D5E45291DCAF15
     "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start
     Microsoft Edge
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\msedge.exe
     5/14/2025 1:55 PM
   OneDrive
     "C:\Program Files\Microsoft OneDrive\OneDrive.exe" /background
     Microsoft OneDrive
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrive.exe
     8/5/1966 1:29 AM
   Steam
     "C:\Program Files (x86)\Steam\steam.exe" -silent
     Steam
     Valve Corporation
     9.75.83.25
     c:\program files (x86)\steam\steam.exe
     5/19/2025 3:51 PM
   Discord
     "C:\Users\peter\AppData\Local\Discord\Update.exe" --processStart Discord.exe
     Update
     GitHub
     1.1.1.0
     c:\users\peter\appdata\local\discord\update.exe
     9/20/2021 4:18 PM

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
   Microsoft Url Search Hook
     HKCR\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
     Internet Browser
     Microsoft Corporation
     11.0.26100.3912
     c:\windows\system32\ieframe.dll
     8/15/1965 7:27 AM

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   MicrosoftEdgeAutoLaunch_78A92E0D73E8D43924D5E45291DCAF15
     "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start
     Microsoft Edge
     Microsoft Corporation
     136.0.3240.76
     c:\program files (x86)\microsoft\edge\application\msedge.exe
     5/14/2025 1:55 PM
   OneDrive
     "C:\Program Files\Microsoft OneDrive\OneDrive.exe" /background
     Microsoft OneDrive
     Microsoft Corporation
     25.80.427.3
     c:\program files\microsoft onedrive\onedrive.exe
     8/5/1966 1:29 AM
   Steam
     "C:\Program Files (x86)\Steam\steam.exe" -silent
     Steam
     Valve Corporation
     9.75.83.25
     c:\program files (x86)\steam\steam.exe
     5/19/2025 3:51 PM
   Discord
     "C:\Users\peter\AppData\Local\Discord\Update.exe" --processStart Discord.exe
     Update
     GitHub
     1.1.1.0
     c:\users\peter\appdata\local\discord\update.exe
     9/20/2021 4:18 PM

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
   Microsoft Url Search Hook
     HKCR\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
     Internet Browser
     Microsoft Corporation
     11.0.26100.3912
     c:\windows\system32\ieframe.dll
     8/15/1965 7:27 AM
