This commit is contained in:
2021-12-03 15:58:19 +01:00
parent f739c09cc4
commit 806d8ca65f
13 changed files with 133024 additions and 68 deletions

495
forensics/persist/services Normal file
View File

@@ -0,0 +1,495 @@
Volatility 3 Framework 1.0.1
Offset Order Pid Start State Type Name Display Binary
0x747c30 318 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS TrkWks Distributed Link Tracking Client C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x747c30 317 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS THREADORDER Thread Ordering Server N/A
0x7485a0 316 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Themes Themes C:\Windows\system32\svchost.exe -k netsvcs
0x747b88 315 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TermService Remote Desktop Services N/A
0x7484f0 314 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER TermDD Terminal Device Driver \Driver\TermDD
0x747ae0 313 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER tdx NetIO Legacy TDI Support Driver \Driver\tdx
0x741090 312 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER TDTCP TDTCP N/A
0x740ff0 311 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER TDPIPE TDPIPE N/A
0x747a38 310 N/A SERVICE_AUTO_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER tcpipreg TCP/IP Registry Compatibility \Driver\tcpipreg
0x747990 309 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER TCPIP6 Microsoft IPv6 Protocol Driver N/A
0x7478e8 308 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Tcpip TCP/IP Protocol Driver \Driver\Tcpip
0x740f50 307 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TBS TPM Base Services N/A
0x740eb0 306 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TapiSrv Telephony N/A
0x747840 305 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TabletInputService Tablet PC Input Service N/A
0x74a220 304 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SysMain Superfetch C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x747798 303 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER SynthVid SynthVid N/A
0x7476f0 302 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Synth3dVsc Synth3dVsc N/A
0x748440 301 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS swprv Microsoft Software Shadow Copy Provider N/A
0x740e10 300 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER swenum Software Bus Driver N/A
0x747648 299 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER storvsc storvsc \Driver\storvsc
0x7475a0 298 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS StorSvc Storage Service N/A
0x7474f8 297 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER storflt Disk Virtual Machine Bus Acceleration Filter Driver \Driver\storflt
0x747450 296 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS StiSvc Windows Image Acquisition (WIA) N/A
0x7473a8 295 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER stexstor stexstor N/A
0x747300 294 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SstpSvc Secure Socket Tunneling Protocol Service N/A
0x747258 293 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SSDPSRV SSDP Discovery N/A
0x7471b0 292 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER srvnet srvnet \FileSystem\srvnet
0x747108 291 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER srv2 Server SMB 2.xxx Driver \FileSystem\srv2
0x740d70 290 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER srv Server SMB 1.xxx Driver \FileSystem\srv
0x740cd0 289 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS sppuinotify SPP Notification Service N/A
0x748390 288 1124 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS sppsvc Software Protection C:\Windows\system32\sppsvc.exe
0x747060 287 1316 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS|SERVICE_INTERACTIVE_PROCESS Spooler Print Spooler C:\Windows\System32\spoolsv.exe
0x746fb8 286 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER spldr Security Processor Loader Driver \Driver\spldr
0x740c30 285 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS SNMPTRAP SNMP Trap N/A
0x746f10 284 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Smb Message-oriented TCP/IP and TCP/IPv6 Protocol (SMB session) N/A
0x740b90 283 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER SiSRaid4 SiSRaid4 N/A
0x746e68 282 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER SiSRaid2 SiSRaid2 N/A
0x746dc0 281 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sisagp SIS AGP Bus Filter N/A
0x746d18 280 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS ShellHWDetection Shell Hardware Detection C:\Windows\system32\svchost.exe -k netsvcs
0x74a168 279 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SharedAccess Internet Connection Sharing (ICS) N/A
0x7482e0 278 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sfloppy High-Capacity Floppy Disk Drive N/A
0x746c70 277 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sffp_sd SFF Storage Protocol Driver for SDBus N/A
0x746bc8 276 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sffp_mmc SFF Storage Protocol Driver for MMC N/A
0x746b20 275 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sffdisk SFF Storage Class Driver N/A
0x746a78 274 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SessionEnv Remote Desktop Configuration N/A
0x748230 273 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sermouse Serial Mouse Driver N/A
0x7469d0 272 N/A SERVICE_SYSTEM_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Serial Serial port driver N/A
0x746928 271 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Serenum Serenum Filter Driver N/A
0x746880 270 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SensrSvc Adaptive Brightness N/A
0x7467d8 269 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SENS System Event Notification Service C:\Windows\system32\svchost.exe -k netsvcs
0x740af0 268 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS seclogon Secondary Logon N/A
0x746730 267 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_KERNEL_DRIVER secdrv Security Driver N/A
0x746688 266 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS SDRSVC Windows Backup N/A
0x7465e0 265 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SCPolicySvc Smart Card Removal Policy N/A
0x748180 264 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Schedule Task Scheduler C:\Windows\system32\svchost.exe -k netsvcs
0x746538 263 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER scfilter Smart card PnP Class Filter Driver N/A
0x746490 262 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SCardSvr Smart Card N/A
0x7463e8 261 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER sbp2port SBP-2 Transport/Protocol Bus Driver N/A
0x746340 260 412 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SamSs Security Accounts Manager C:\Windows\system32\lsass.exe
0x740a50 259 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER s3cap s3cap N/A
0x7409b0 258 N/A SERVICE_AUTO_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER rspndr Link-Layer Topology Discovery Responder \Driver\rspndr
0x746298 257 696 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS RpcSs Remote Procedure Call (RPC) C:\Windows\system32\svchost.exe -k RPCSS
0x740910 256 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS RpcLocator Remote Procedure Call (RPC) Locator N/A
0x7480b8 255 696 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS RpcEptMapper RPC Endpoint Mapper C:\Windows\system32\svchost.exe -k RPCSS
0x748008 254 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RFCOMM Bluetooth Device (RFCOMM Protocol TDI) N/A
0x7461f0 253 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS RemoteRegistry Remote Registry N/A
0x747f50 252 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS RemoteAccess Routing and Remote Access N/A
0x747ea0 251 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER rdyboost ReadyBoost \Driver\rdyboost
0x746148 250 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RDPWD RDP Winstation Driver N/A
0x740870 249 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RdpVideoMiniport Remote Desktop Video Miniport Driver N/A
0x747de8 248 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER RDPREFMP Reflector Display Driver used to gain access to graphics data \Driver\RDPREFMP
0x7460a0 247 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER RDPENCDD RDP Encoder Mirror Driver \Driver\RDPENCDD
0x745ff8 246 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RDPDR Terminal Server Device Redirector Driver N/A
0x7407d0 245 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER RDPCDD RDPCDD \Driver\RDPCDD
0x745f50 244 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER rdpbus Remote Desktop Device Redirector Bus Driver N/A
0x745ea8 243 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER rdbss Redirected Buffering Sub Sysytem \FileSystem\rdbss
0x740730 242 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RasSstp WAN Miniport (SSTP) N/A
0x745e00 241 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RasPppoe Remote Access PPPOE Driver N/A
0x745520 240 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS RasMan Remote Access Connection Manager N/A
0x745478 239 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Rasl2tp WAN Miniport (L2TP) N/A
0x7453d0 238 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS RasAuto Remote Access Auto Connection Manager N/A
0x745328 237 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RasAgileVpn WAN Miniport (IKEv2) N/A
0x745d38 236 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER RasAcd Remote Access Auto Connection Driver N/A
0x745280 235 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER QWAVEdrv QWAVE driver N/A
0x7451d8 234 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS QWAVE Quality Windows Audio Video Experience N/A
0x740690 233 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ql40xx ql40xx N/A
0x745130 232 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ql2300 ql2300 N/A
0x745088 231 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Psched QoS Packet Scheduler \Driver\Psched
0x744fe0 230 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS ProtectedStorage Protected Storage N/A
0x745c80 229 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS ProfSvc User Profile Service C:\Windows\system32\svchost.exe -k netsvcs
0x744f38 228 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Processor Processor Driver N/A
0x744e90 227 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER PptpMiniport WAN Miniport (PPTP) N/A
0x745bd0 226 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Power Power C:\Windows\system32\svchost.exe -k DcomLaunch
0x7405f0 225 1920 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PolicyAgent IPsec Policy Agent C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
0x745b20 224 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS PNRPsvc Peer Name Resolution Protocol N/A
0x744de8 223 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS PNRPAutoReg PNRP Machine Name Publication Service N/A
0x745a70 222 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PlugPlay Plug and Play C:\Windows\system32\svchost.exe -k DcomLaunch
0x744d40 221 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS pla Performance Logs & Alerts N/A
0x740550 220 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS PeerDistSvc BranchCache N/A
0x7459c0 219 N/A SERVICE_AUTO_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER PEAUTH PEAUTH \Driver\PEAUTH
0x744c98 218 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER pcw Performance Counters for Windows Driver \Driver\pcw
0x7404b0 217 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER pcmcia pcmcia N/A
0x744bf0 216 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER pciide pciide N/A
0x744b48 215 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER pci PCI Bus Driver \Driver\pci
0x740410 214 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PcaSvc Program Compatibility Assistant Service C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x744aa0 213 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Parvdm Parvdm N/A
0x7449f8 212 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER partmgr Partition Manager \Driver\partmgr
0x744950 211 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Parport Parallel port driver N/A
0x7448a8 210 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS p2psvc Peer Networking Grouping N/A
0x744800 209 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS p2pimsvc Peer Networking Identity Manager N/A
0x744758 208 1868 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS OpenSSHd OpenSSH Server C:\Program Files\OpenSSH\bin\cygrunsrv.exe
0x7446b0 207 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ohci1394 1394 OHCI Compliant Host Controller (Legacy) N/A
0x744608 206 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER nv_agp NVIDIA nForce AGP Bus Filter N/A
0x744560 205 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER nvstor nvstor N/A
0x7444b8 204 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER nvraid nvraid N/A
0x744410 203 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Null Null \Driver\Null
0x740370 202 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER Ntfs Ntfs N/A
0x7402d0 201 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER nsiproxy NSI proxy service driver. \Driver\nsiproxy
0x744368 200 1016 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS nsi Network Store Interface Service C:\Windows\system32\svchost.exe -k LocalService
0x740230 199 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER Npfs Npfs \FileSystem\Npfs
0x740190 198 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS NlaSvc Network Location Awareness C:\Windows\system32\svchost.exe -k NetworkService
0x7442c0 197 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER nfrd960 nfrd960 N/A
0x744218 196 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER netvsc netvsc N/A
0x744170 195 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS NetTcpPortSharing Net.Tcp Port Sharing Service N/A
0x745908 194 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS NetTcpActivator Net.Tcp Listener Adapter N/A
0x745850 193 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS netprofm Network List Service C:\Windows\system32\svchost.exe -k LocalService
0x7440c8 192 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS NetPipeActivator Net.Pipe Listener Adapter N/A
0x745798 191 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS NetMsmqActivator Net.Msmq Listener Adapter N/A
0x7456e0 190 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Netman Network Connections C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x744020 189 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Netlogon Netlogon N/A
0x743f78 188 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER NetBT NetBT \Driver\NetBT
0x7400f0 187 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER NetBIOS NetBIOS Interface \FileSystem\NetBIOS
0x743ed0 186 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER NDProxy NDIS Proxy N/A
0x743e28 185 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER NdisWan Remote Access NDIS WAN Driver N/A
0x743d80 184 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Ndisuio NDIS Usermode I/O Protocol N/A
0x743cd8 183 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER NdisTapi Remote Access NDIS TAPI Driver N/A
0x743c30 182 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER NdisCap NDIS Capture LightWeight Filter N/A
0x743b88 181 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER NDIS NDIS System Driver \Driver\NDIS
0x740050 180 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER NativeWifiP NativeWiFi Filter N/A
0x745630 179 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS napagent Network Access Protection Agent N/A
0x743ae0 178 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER Mup Mup \FileSystem\Mup
0x73ffb0 177 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER MTConfig Microsoft Input Configuration Driver N/A
0x743a38 176 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER mssmbios Microsoft System Management BIOS Driver \Driver\mssmbios
0x743990 175 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER MsRPC MsRPC N/A
0x73ff10 174 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS msiserver Windows Installer N/A
0x7438e8 173 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS MSiSCSI Microsoft iSCSI Initiator Service N/A
0x743840 172 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER msisadrv msisadrv \Driver\msisadrv
0x743798 171 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER mshidkmdf Pass-through HID to KMDF Filter Driver N/A
0x7436f0 170 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER Msfs Msfs \FileSystem\Msfs
0x73fe70 169 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS MSDTC Distributed Transaction Coordinator N/A
0x73fdd0 168 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER msdsm Microsoft Multi-Path Device Specific Module N/A
0x73fd30 167 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER msahci msahci N/A
0x743648 166 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER mrxsmb20 SMB 2.0 MiniRedirector \FileSystem\mrxsmb20
0x743190 165 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER mrxsmb10 SMB 1.x MiniRedirector \FileSystem\mrxsmb10
0x7430e8 164 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER mrxsmb SMB MiniRedirector Wrapper and Engine \FileSystem\mrxsmb
0x743040 163 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER MRxDAV WebDav Client Redirector Driver N/A
0x742f98 162 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS MpsSvc Windows Firewall C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x742ef0 161 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER mpsdrv Windows Firewall Authorization Driver \Driver\mpsdrv
0x742e48 160 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER mpio Microsoft Multi-Path Bus Driver N/A
0x73fc90 159 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER mountmgr Mount Point Manager \Driver\mountmgr
0x742da0 158 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER mouhid Mouse HID Driver N/A
0x742cf8 157 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER mouclass Mouse Class Driver N/A
0x742c50 156 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER monitor Microsoft Monitor Class Function Driver Service N/A
0x742ba8 155 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Modem Modem N/A
0x73fbf0 154 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS MMCSS Multimedia Class Scheduler C:\Windows\system32\svchost.exe -k netsvcs
0x73fb50 153 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER MegaSR MegaSR N/A
0x742b00 152 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER megasas megasas N/A
0x742a58 151 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Mcx2Svc Media Center Extender Service N/A
0x7429b0 150 N/A SERVICE_AUTO_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER luafv UAC File Virtualization \FileSystem\luafv
0x73fab0 149 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER LSI_SCSI LSI_SCSI N/A
0x742908 148 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER LSI_SAS2 LSI_SAS2 N/A
0x742860 147 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER LSI_SAS LSI_SAS N/A
0x7427b8 146 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER LSI_FC LSI_FC N/A
0x742710 145 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS lmhosts TCP/IP NetBIOS Helper C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x742668 144 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS lltdsvc Link-Layer Topology Discovery Mapper N/A
0x7425c0 143 N/A SERVICE_AUTO_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER lltdio Link-Layer Topology Discovery Mapper I/O Driver \Driver\lltdio
0x742518 142 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS LanmanWorkstation Workstation C:\Windows\system32\svchost.exe -k NetworkService
0x743578 141 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS LanmanServer Server C:\Windows\system32\svchost.exe -k netsvcs
0x7434c8 140 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS KtmRm KtmRm for Distributed Transaction Coordinator N/A
0x73fa10 139 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER KSecPkg KSecPkg \Driver\KSecPkg
0x742470 138 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER KSecDD KSecDD \Driver\KSecDD
0x7423c8 137 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS KeyIso CNG Key Isolation N/A
0x742320 136 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER kbdhid Keyboard HID Driver N/A
0x742278 135 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER kbdclass Keyboard Class Driver N/A
0x7421d0 134 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER iScsiPrt iScsiPort Driver N/A
0x742128 133 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER isapnp isapnp N/A
0x742080 132 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER IRENUM IR Bus Enumerator N/A
0x741fd8 131 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER IPNAT IP Network Address Translator N/A
0x73f970 130 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER IPMIDRV IPMIDRV N/A
0x741f30 129 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS iphlpsvc IP Helper C:\Windows\system32\svchost.exe -k netsvcs
0x741e88 128 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER IpFilterDriver IP Traffic Filter Driver N/A
0x743410 127 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS IPBusEnum PnP-X IP Bus Enumerator N/A
0x741de0 126 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER intelppm Intel Processor Driver N/A
0x741d38 125 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER intelide intelide \Driver\intelide
0x741c90 124 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS IKEEXT IKE and AuthIP IPsec Keying Modules N/A
0x741be8 123 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER iirsp iirsp N/A
0x73f8d0 122 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS idsvc Windows CardSpace N/A
0x73f830 121 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER iaStorV Intel RAID Controller Windows 7 N/A
0x741b40 120 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER i8042prt i8042 Keyboard and PS/2 Mouse Port Driver N/A
0x741a98 119 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER hwpolicy Hardware Policy Driver \Driver\hwpolicy
0x7419f0 118 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER HTTP HTTP \Driver\HTTP
0x73f790 117 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HpSAMD HpSAMD N/A
0x741948 116 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS HomeGroupProvider HomeGroup Provider N/A
0x743358 115 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS HomeGroupListener HomeGroup Listener N/A
0x7432a0 114 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS hkmsvc Health Key and Certificate Management N/A
0x7418a0 113 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HidUsb Microsoft HID Class Driver N/A
0x7417f8 112 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS hidserv Human Interface Device Access N/A
0x741750 111 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HidIr Microsoft Infrared HID Driver N/A
0x73f6f0 110 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HidBth Microsoft Bluetooth HID Miniport N/A
0x7416a8 109 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HidBatt HID UPS Battery Driver N/A
0x741600 108 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER HDAudBus Microsoft UAA Bus Driver for High Definition Audio N/A
0x741558 107 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER hcw85cir Hauppauge Consumer Infrared Receiver N/A
0x7414b0 106 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS gpsvc Group Policy Client C:\Windows\system32\svchost.exe -k netsvcs
0x73f650 105 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER gagp30kx Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms N/A
0x741408 104 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER fvevol Bitlocker Drive Encryption Filter Driver \Driver\fvevol
0x741360 103 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER FsDepends File System Dependency Minifilter N/A
0x7412b8 102 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS FontCache3.0.0.0 Windows Presentation Foundation Font Cache 3.0.0.0 N/A
0x7411e8 101 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS FontCache Windows Font Cache Service N/A
0x73e018 100 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER FltMgr FltMgr \FileSystem\FltMgr
0x73df70 99 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER flpydisk Floppy Disk Driver N/A
0x73dec8 98 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER Filetrace Filetrace N/A
0x73de20 97 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER FileInfo File Information FS MiniFilter \FileSystem\FileInfo
0x73dd78 96 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS FDResPub Function Discovery Resource Publication N/A
0x73dcd0 95 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS fdPHost Function Discovery Provider Host N/A
0x73dc28 94 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER fdc Floppy Disk Controller Driver N/A
0x73f5b0 93 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS Fax Fax N/A
0x73f510 92 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER fastfat FAT12/16/32 File System Driver N/A
0x73db80 91 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER exfat exFAT File System Driver N/A
0x73f470 90 1016 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS EventSystem COM+ Event System C:\Windows\system32\svchost.exe -k LocalService
0x741138 89 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS eventlog Windows Event Log C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73dad8 88 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ErrDev Microsoft Hardware Error Device Driver N/A
0x73da30 87 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER elxstor elxstor N/A
0x73d988 86 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS ehSched Windows Media Center Scheduler Service N/A
0x73d8e0 85 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS ehRecvr Windows Media Center Receiver Service N/A
0x73d838 84 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS EFS Encrypting File System (EFS) N/A
0x73f3d0 83 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ebdrv Broadcom NetXtreme II 10 GigE VBD N/A
0x73f330 82 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS EapHost Extensible Authentication Protocol N/A
0x73d790 81 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER E1G60 Intel(R) PRO/1000 NDIS 6 Adapter Driver N/A
0x73f290 80 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER DXGKrnl LDDM Graphics Subsystem N/A
0x73d6e8 79 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS DPS Diagnostic Policy Service C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x73f1f0 78 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS dot3svc Wired AutoConfig N/A
0x73d640 77 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Dnscache DNS Client C:\Windows\system32\svchost.exe -k NetworkService
0x73d598 76 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Disk Disk Driver \Driver\Disk
0x73f150 75 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER discache System Attribute Cache \Driver\discache
0x73d4f0 74 1784 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS DiagTrack Diagnostics Tracking Service C:\Windows\System32\svchost.exe -k utcsvc
0x73d448 73 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Dhcp DHCP Client C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73f098 72 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER DfsC DFS Namespace Client Driver \FileSystem\DfsC
0x73eff8 71 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS defragsvc Disk Defragmenter N/A
0x73d3a0 70 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS DcomLaunch DCOM Server Process Launcher C:\Windows\system32\svchost.exe -k DcomLaunch
0x73ef48 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x73ee98 68 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER CSC Offline Files Driver \Driver\CSC
0x73edf8 67 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CryptSvc Cryptographic Services C:\Windows\system32\svchost.exe -k NetworkService
0x73d2f8 66 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_KERNEL_DRIVER crcdisk Crcdisk Filter Driver N/A
0x73d250 65 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS COMSysApp COM+ System Application N/A
0x73d1a8 64 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER CompositeBus Composite Bus Enumerator Driver N/A
0x73ed48 63 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Compbatt Microsoft Composite Battery Driver \Driver\Compbatt
0x73d100 62 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER CNG CNG \Driver\CNG
0x73eca8 61 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER cmdide cmdide N/A
0x73d058 60 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER CmBatt Microsoft ACPI Control Method Battery Driver N/A
0x73cfb0 59 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS clr_optimization_v4.0.30319_32 Microsoft .NET Framework NGEN v4.0.30319_X86 N/A
0x73ebd0 58 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS clr_optimization_v2.0.50727_32 Microsoft .NET Framework NGEN v2.0.50727_X86 N/A
0x73eaf8 57 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER CLFS Common Log (CLFS) \Driver\CLFS
0x73ea58 56 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER circlass Consumer IR Devices N/A
0x73cf08 55 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS CertPropSvc Certificate Propagation N/A
0x73e9a8 54 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER cdrom CD-ROM Driver \Driver\cdrom
0x73e908 53 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER cdfs CD/DVD File System Reader N/A
0x73e868 52 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BTHUSB Bluetooth Radio USB Driver N/A
0x73ce60 51 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS bthserv Bluetooth Support Service N/A
0x73cdb8 50 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BTHPORT Bluetooth Port Driver N/A
0x73cd10 49 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BthPan Bluetooth Device (Personal Area Network) N/A
0x73cc68 48 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BTHMODEM Bluetooth Serial Communications Driver N/A
0x73cbc0 47 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BthEnum Bluetooth Enumerator Service N/A
0x73cb18 46 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BrUsbSer Brother MFC USB Serial WDM Driver N/A
0x73ca70 45 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BrUsbMdm Brother MFC USB Fax Only Modem N/A
0x73c9c8 44 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BrSerWdm Brother WDM Serial driver N/A
0x73c920 43 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Brserid Brother MFC Serial Port Interface Driver (WDM) N/A
0x73c878 42 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Browser Computer Browser N/A
0x73c7d0 41 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BrFiltUp Brother USB Mass-Storage Upper Filter Driver N/A
0x73c728 40 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER BrFiltLo Brother USB Mass-Storage Lower Filter Driver N/A
0x73c680 39 N/A SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER bowser Browser Support Driver \FileSystem\bowser
0x73c5d8 38 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER blbdrive blbdrive \Driver\blbdrive
0x73c530 37 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS BITS Background Intelligent Transfer Service N/A
0x73e7c8 36 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS BFE Base Filtering Engine C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x73e728 35 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Beep Beep \Driver\Beep
0x73e688 34 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS BDESVC BitLocker Drive Encryption Service N/A
0x73c488 33 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER b57nd60x Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 N/A
0x73c3e0 32 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER b06bdrv Broadcom NetXtreme II VBD N/A
0x73c338 31 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS AxInstSV ActiveX Installer (AxInstSV) N/A
0x73c290 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73c1e8 29 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS AudioEndpointBuilder Windows Audio Endpoint Builder C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x73e5c8 28 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER atapi IDE Channel \Driver\atapi
0x73e528 27 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER AsyncMac RAS Asynchronous Media Driver N/A
0x73c140 26 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS aspnet_state ASP.NET State Service N/A
0x73c078 25 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER arcsas arcsas N/A
0x73bfd0 24 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER arc arc N/A
0x73bf30 23 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS AppMgmt Application Management N/A
0x731620 22 904 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Appinfo Application Information C:\Windows\system32\svchost.exe -k netsvcs
0x731578 21 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS AppIDSvc Application Identity N/A
0x7314d0 20 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER AppID AppID Driver N/A
0x731430 19 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER amdxata amdxata \Driver\amdxata
0x731388 18 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER amdsbs amdsbs N/A
0x7312e0 17 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER amdsata amdsata N/A
0x731238 16 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER AmdPPM AMD Processor Driver N/A
0x731190 15 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER AmdK8 AMD K8 Processor Driver N/A
0x7310f0 14 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER amdide amdide N/A
0x731048 13 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER amdagp AMD AGP Bus Filter Driver N/A
0x730fa0 12 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER aliide aliide N/A
0x730ef8 11 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS ALG Application Layer Gateway Service N/A
0x730e58 10 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER aic78xx aic78xx N/A
0x730db0 9 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER agp440 Intel AGP Bus Filter \Driver\agp440
0x730d08 8 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER AFD Ancillary Function Driver for Winsock \Driver\AFD
0x730c68 7 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS AeLookupSvc Application Experience N/A
0x730bb8 6 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER adpu320 adpu320 N/A
0x730b10 5 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER adpahci adpahci N/A
0x730a68 4 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER adp94xx adp94xx N/A
0x7309c0 3 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER AcpiPmi ACPI Power Meter Driver N/A
0x730918 2 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER ACPI Microsoft ACPI Driver \Driver\ACPI
0x730878 1 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER 1394ohci 1394 OHCI Compliant Host Controller N/A
0x744d40 222 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PlugPlay Plug and Play C:\Windows\system32\svchost.exe -k DcomLaunch
0x73dad8 89 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS eventlog Windows Event Log C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x740af0 269 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SENS System Event Notification Service C:\Windows\system32\svchost.exe -k netsvcs
0x74c4f0 340 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS UxSms Desktop Window Manager Session Manager C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74c4f0 339 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbuhci Microsoft USB Universal Host Controller Miniport Driver N/A
0x74ad88 338 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER USBSTOR USB Mass Storage Driver N/A
0x74ace0 337 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbprint Microsoft USB PRINTER Class N/A
0x74ac38 336 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbohci Microsoft USB Open Host Controller Miniport Driver N/A
0x74ab90 335 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbhub Microsoft USB Standard Hub Driver N/A
0x74aae8 334 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbehci Microsoft USB 2.0 Enhanced Host Controller Miniport Driver N/A
0x74aa40 333 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbcir eHome Infrared Receiver (USBCIR) N/A
0x74a998 332 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER usbccgp Microsoft USB Generic Parent Driver N/A
0x74a8f0 331 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS upnphost UPnP Device Host N/A
0x74a848 330 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS UmRdpService Remote Desktop Services UserMode Port Redirector N/A
0x748650 329 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER UmPass Microsoft UMPass Driver N/A
0x74a7a0 328 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER umbus UMBus Enumerator Driver N/A
0x74c450 327 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER uliagpkx Uli AGP Bus Filter N/A
0x74a6f8 326 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS|SERVICE_INTERACTIVE_PROCESS UI0Detect Interactive Services Detection N/A
0x74a650 325 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER udfs udfs N/A
0x74c3b0 324 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER uagp35 Microsoft AGPv3.5 Filter N/A
0x74a5a8 323 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER tunnel Microsoft Tunnel Miniport Adapter Driver N/A
0x74a500 322 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER tsusbhub tsusbhub N/A
0x74a458 321 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER TsUsbFlt TsUsbFlt N/A
0x74a3b0 320 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER tssecsrv Remote Desktop Services Security Filter Driver N/A
0x747cd8 319 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS TrustedInstaller Windows Modules Installer N/A
0x74a2e0 318 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS TrkWks Distributed Link Tracking Client C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x7405f0 226 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Power Power C:\Windows\system32\svchost.exe -k DcomLaunch
0x741e88 129 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS iphlpsvc IP Helper C:\Windows\system32\svchost.exe -k netsvcs
0x73e728 36 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS BFE Base Filtering Engine C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x748700 344 640 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS VBoxService VirtualBox Guest Additions Service C:\Windows\System32\VBoxService.exe
0x748700 343 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER VBoxMouse VirtualBox Guest Mouse Service N/A
0x74af80 342 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER VBoxGuest VirtualBox Guest Driver \Driver\VBoxGuest
0x74aed8 341 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS VaultSvc Credential Manager N/A
0x74ae30 340 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS UxSms Desktop Window Manager Session Manager C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x73ef48 70 576 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS DcomLaunch DCOM Server Process Launcher C:\Windows\system32\svchost.exe -k DcomLaunch
0x748008 255 696 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS RpcEptMapper RPC Endpoint Mapper C:\Windows\system32\svchost.exe -k RPCSS
0x740910 257 696 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS RpcSs Remote Procedure Call (RPC) C:\Windows\system32\svchost.exe -k RPCSS
0x7484f0 315 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TermService Remote Desktop Services N/A
0x740230 200 1016 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS nsi Network Store Interface Service C:\Windows\system32\svchost.exe -k LocalService
0x73e5c8 29 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS AudioEndpointBuilder Windows Audio Endpoint Builder C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x73fb50 154 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS MMCSS Multimedia Class Scheduler C:\Windows\system32\svchost.exe -k netsvcs
0x73c1e8 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73ee98 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x73f650 106 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS gpsvc Group Policy Client C:\Windows\system32\svchost.exe -k netsvcs
0x744f38 229 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS ProfSvc User Profile Service C:\Windows\system32\svchost.exe -k netsvcs
0x747b88 316 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Themes Themes C:\Windows\system32\svchost.exe -k netsvcs
0x742668 145 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS lmhosts TCP/IP NetBIOS Helper C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x741138 90 1016 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS EventSystem COM+ Event System C:\Windows\system32\svchost.exe -k LocalService
0x740a50 260 412 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SamSs Security Accounts Manager C:\Windows\system32\lsass.exe
0x73f098 73 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Dhcp DHCP Client C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x746538 264 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Schedule Task Scheduler C:\Windows\system32\svchost.exe -k netsvcs
0x74cb30 393 1936 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WLMS Windows Licensing Monitoring Service C:\Windows\system32\wlms\wlms.exe
0x74cb30 392 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Wlansvc WLAN AutoConfig N/A
0x74e698 391 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WinRM Windows Remote Management (WS-Management) N/A
0x74ca90 390 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Winmgmt Windows Management Instrumentation C:\Windows\system32\svchost.exe -k netsvcs
0x74c288 389 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WinHttpAutoProxySvc WinHTTP Web Proxy Auto-Discovery Service C:\Windows\system32\svchost.exe -k LocalService
0x74e5c0 388 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WinDefend Windows Defender N/A
0x74c1e0 387 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_FILE_SYSTEM_DRIVER WIMMount WIMMount N/A
0x74c138 386 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER WfpLwf WFP Lightweight Filter \Driver\WfpLwf
0x74c090 385 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WerSvc Windows Error Reporting Service N/A
0x74bfe8 384 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS wercplsupport Problem Reports and Solutions Control Panel Support N/A
0x748a70 383 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Wecsvc Windows Event Collector N/A
0x74bf40 382 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WebClient WebClient N/A
0x74be98 381 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WdiSystemHost Diagnostic System Host C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x7489c0 380 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WdiServiceHost Diagnostic Service Host C:\Windows\system32\svchost.exe -k LocalService
0x74e508 379 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Wdf01000 Kernel Mode Driver Frameworks service \Driver\Wdf01000
0x74bdf0 378 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER Wd Wd N/A
0x74c9f0 377 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WcsPlugInService Windows Color System N/A
0x74e450 376 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS wcncsvc Windows Connect Now - Config Registrar N/A
0x74bd48 375 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WbioSrvc Windows Biometric Service N/A
0x74bca0 374 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS wbengine Block Level Backup Engine Service N/A
0x74bbf8 373 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Wanarpv6 Remote Access IPv6 ARP Driver \Driver\Wanarpv6
0x74bb50 372 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER WANARP Remote Access IP ARP Driver N/A
0x74baa8 371 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER WacomPen Wacom Serial Pen HID Driver N/A
0x74ba00 370 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS W32Time Windows Time N/A
0x74b958 369 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER vwifibus Virtual WiFi Bus Driver N/A
0x74b8b0 368 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS VSS Volume Shadow Copy N/A
0x74c950 367 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER vsmraid vsmraid N/A
0x74b808 366 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER volsnap Storage volumes \Driver\volsnap
0x74b760 365 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER volmgrx Dynamic Volume Manager \Driver\volmgrx
0x74b6b8 364 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER volmgr Volume Manager Driver \Driver\volmgr
0x74b610 363 1748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicvss Hyper-V Volume Shadow Copy Requestor C:\Windows\system32\vmicsvc.exe -feature VSS
0x74b568 362 1708 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmictimesync Hyper-V Time Synchronization Service C:\Windows\system32\vmicsvc.exe -feature TimeSync
0x748910 361 1684 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicshutdown Hyper-V Guest Shutdown Service C:\Windows\system32\vmicsvc.exe -feature Shutdown
0x748860 360 1656 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmickvpexchange Hyper-V Data Exchange Service C:\Windows\system32\vmicsvc.exe -feature KvpExchange
0x74e398 359 1636 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicheartbeat Hyper-V Heartbeat Service C:\Windows\system32\vmicsvc.exe -feature Heartbeat
0x7487b0 358 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER VMBusHID VMBusHID N/A
0x74b4c0 357 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER vmbus Virtual Machine Bus \Driver\vmbus
0x74c8b0 356 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER viaide viaide N/A
0x74b418 355 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER ViaC7 VIA C7 Processor Driver N/A
0x74c810 354 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER viaagp VIA AGP Bus Filter N/A
0x74b370 353 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER vhdmp vhdmp N/A
0x74c770 352 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER VGPU VGPU N/A
0x74c6d0 351 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER VgaSave VgaSave \Driver\VgaSave
0x74b2c8 350 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER vga vga N/A
0x74c630 349 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS vds Virtual Disk N/A
0x74c590 348 N/A SERVICE_BOOT_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER vdrvroot Microsoft Virtual Drive Enumerator Driver \Driver\vdrvroot
0x74b220 347 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER VBoxWddm VBoxWddm N/A
0x74b178 346 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER VBoxVideo VBoxVideo N/A
0x74b0d0 345 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_FILE_SYSTEM_DRIVER VBoxSF VirtualBox Shared Folders \FileSystem\VBoxSF
0x74b028 344 640 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS VBoxService VirtualBox Guest Additions Service C:\Windows\System32\VBoxService.exe
0x73d598 77 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Dnscache DNS Client C:\Windows\system32\svchost.exe -k NetworkService
0x74a168 280 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS ShellHWDetection Shell Hardware Detection C:\Windows\system32\svchost.exe -k netsvcs
0x743358 116 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS HomeGroupProvider HomeGroup Provider N/A
0x7440c8 193 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS netprofm Network List Service C:\Windows\system32\svchost.exe -k LocalService
0x748bd0 398 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WPDBusEnum Portable Device Enumerator Service C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x748bd0 397 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WPCSvc Parental Controls N/A
0x74e890 396 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS WMPNetworkSvc Windows Media Player Network Sharing Service N/A
0x748b20 395 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS wmiApSrv WMI Performance Adapter N/A
0x74e7e8 394 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER WmiAcpi Microsoft Windows Management Interface for ACPI N/A
0x74e740 393 1936 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WLMS Windows Licensing Monitoring Service C:\Windows\system32\wlms\wlms.exe
0x74b568 363 1748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicvss Hyper-V Volume Shadow Copy Requestor C:\Windows\system32\vmicsvc.exe -feature VSS
0x74e508 380 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WdiServiceHost Diagnostic Service Host C:\Windows\system32\svchost.exe -k LocalService
0x7484f0 315 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS TermService Remote Desktop Services N/A
0x7442c0 198 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS NlaSvc Network Location Awareness C:\Windows\system32\svchost.exe -k NetworkService
0x73d448 74 1784 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS DiagTrack Diagnostics Tracking Service C:\Windows\System32\svchost.exe -k utcsvc
0x7471b0 293 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS SSDPSRV SSDP Discovery N/A
0x73d2f8 67 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CryptSvc Cryptographic Services C:\Windows\system32\svchost.exe -k NetworkService
0x743578 142 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS LanmanWorkstation Workstation C:\Windows\system32\svchost.exe -k NetworkService
0x742ef0 162 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS MpsSvc Windows Firewall C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x73f1f0 79 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS DPS Diagnostic Policy Service C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x7442c0 198 1108 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS NlaSvc Network Location Awareness C:\Windows\system32\svchost.exe -k NetworkService
0x7487b0 359 1636 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicheartbeat Hyper-V Heartbeat Service C:\Windows\system32\vmicsvc.exe -feature Heartbeat
0x746fb8 287 1316 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS|SERVICE_INTERACTIVE_PROCESS Spooler Print Spooler C:\Windows\System32\spoolsv.exe
0x748910 362 1708 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmictimesync Hyper-V Time Synchronization Service C:\Windows\system32\vmicsvc.exe -feature TimeSync
0x747798 304 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS SysMain Superfetch C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74e398 360 1656 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmickvpexchange Hyper-V Data Exchange Service C:\Windows\system32\vmicsvc.exe -feature KvpExchange
0x7446b0 208 1868 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS OpenSSHd OpenSSH Server C:\Program Files\OpenSSH\bin\cygrunsrv.exe
0x73e728 36 1384 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS BFE Base Filtering Engine C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
0x748860 361 1684 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS vmicshutdown Hyper-V Guest Shutdown Service C:\Windows\system32\vmicsvc.exe -feature Shutdown
0x74c288 390 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Winmgmt Windows Management Instrumentation C:\Windows\system32\svchost.exe -k netsvcs
0x7434c8 141 904 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS LanmanServer Server C:\Windows\system32\svchost.exe -k netsvcs
0x73e688 35 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Beep Beep \Driver\Beep
0x73c1e8 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x7440c8 193 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS netprofm Network List Service C:\Windows\system32\svchost.exe -k LocalService
0x747060 288 1124 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS sppsvc Software Protection C:\Windows\system32\sppsvc.exe
0x7489c0 381 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WdiSystemHost Diagnostic System Host C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74e5c0 389 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WinHttpAutoProxySvc WinHTTP Web Proxy Auto-Discovery Service C:\Windows\system32\svchost.exe -k LocalService
0x73c1e8 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x745b20 225 1920 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PolicyAgent IPsec Policy Agent C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
0x73d8e0 86 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS ehSched Windows Media Center Scheduler Service N/A
0x73ee98 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74ea88 401 2160 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WSearch Windows Search C:\Windows\system32\SearchIndexer.exe /Embedding
0x74ea88 400 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS wscsvc Security Center N/A
0x74e9e0 399 N/A SERVICE_DISABLED SERVICE_STOPPED SERVICE_KERNEL_DRIVER ws2ifsl Winsock IFS Driver N/A
0x74e938 398 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS WPDBusEnum Portable Device Enumerator Service C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x744020 190 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Netman Network Connections C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74ea88 401 2160 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WSearch Windows Search C:\Windows\system32\SearchIndexer.exe /Embedding
0x73ee98 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74ed28 405 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WwanSvc WWAN AutoConfig N/A
0x74ed28 404 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS wudfsvc Windows Driver Foundation - User-mode Driver Framework N/A
0x74ec80 403 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_KERNEL_DRIVER WudfPf User Mode Driver Frameworks Platform Driver N/A
0x74ebd8 402 N/A SERVICE_AUTO_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS wuauserv Windows Update N/A
0x74eb30 401 2160 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WSearch Windows Search C:\Windows\system32\SearchIndexer.exe /Embedding
0x744020 190 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Netman Network Connections C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74e698 392 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Wlansvc WLAN AutoConfig N/A
0x7440c8 193 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS netprofm Network List Service C:\Windows\system32\svchost.exe -k LocalService
0x743ae0 179 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS napagent Network Access Protection Agent N/A
0x73c1e8 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73e688 35 N/A SERVICE_SYSTEM_START SERVICE_RUNNING SERVICE_KERNEL_DRIVER Beep Beep \Driver\Beep
0x73c1e8 30 748 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Audiosrv Windows Audio C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
0x73d8e0 86 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_OWN_PROCESS ehSched Windows Media Center Scheduler Service N/A
0x74ed28 405 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS WwanSvc WWAN AutoConfig N/A
0x744020 190 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Netman Network Connections C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74e698 392 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS Wlansvc WLAN AutoConfig N/A
0x7440c8 193 1016 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS netprofm Network List Service C:\Windows\system32\svchost.exe -k LocalService
0x743ae0 179 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS napagent Network Access Protection Agent N/A
0x73ee98 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x74ea88 401 2160 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_OWN_PROCESS WSearch Windows Search C:\Windows\system32\SearchIndexer.exe /Embedding
0x73ee98 69 864 SERVICE_AUTO_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS CscService Offline Files C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0x731578 22 904 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS Appinfo Application Information C:\Windows\system32\svchost.exe -k netsvcs
0x743358 116 N/A SERVICE_DEMAND_START SERVICE_STOPPED SERVICE_WIN32_SHARE_PROCESS HomeGroupProvider HomeGroup Provider N/A
0x744aa0 214 864 SERVICE_DEMAND_START SERVICE_RUNNING SERVICE_WIN32_SHARE_PROCESS PcaSvc Program Compatibility Assistant Service C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

132392
forensics/persist/test Normal file

File diff suppressed because it is too large Load Diff

Submodule forensics/persist/volatility-autoruns added at a39efc8848