|
Node:
|
StuStarWindSrv1.student.local
|
Validated
|
|
Node:
|
StuStarWindSrv2.student.local
|
Validated
|
|
Started
|
2/10/2021 8:52:33 AM
|
|
|
Completed
|
2/10/2021 8:53:24 AM
|
| Name | Result Summary | Description |
|---|---|---|
| Cluster Configuration | ||
| Inventory | ||
| Network | ||
| Storage | ||
| System Configuration |
| Name | Result | Description |
|---|---|---|
| Name | Result | Description |
|---|---|---|
| Name | Result | Description |
|---|---|---|
| Name | Result | Description |
|---|---|---|
| Name | Result | Description |
|---|---|---|
| Item | Value |
|---|---|
| Name | PhoenixBIOS 4.0 Release 6.0 |
| Manufacturer | Phoenix Technologies LTD |
| SMBios Present | True |
| SMBios Version | 6.00 |
| SMBios Major Version | 2 |
| SMBios Minor Version | 4 |
| Current Language | Value Not Found |
| Release Date | 9/16/2015 8:00:00 PM |
| Primary BIOS | True |
| Item | Value |
|---|---|
| Name | PhoenixBIOS 4.0 Release 6.0 |
| Manufacturer | Phoenix Technologies LTD |
| SMBios Present | True |
| SMBios Version | 6.00 |
| SMBios Major Version | 2 |
| SMBios Minor Version | 4 |
| Current Language | Value Not Found |
| Release Date | 9/16/2015 8:00:00 PM |
| Primary BIOS | True |
| Summary |
|---|
| Cluster Name: StarwindCAP |
| Total Roles: 2 |
| Role | Status | Type |
|---|---|---|
| Cluster Group | Partial Online | Core Cluster |
| Available Storage | Offline | Available Storage |
| Resource | Type | Status | Possible Owners |
|---|---|---|---|
| Cluster Disk 1 | Physical Disk | Offline | All Nodes |
| IP Address: 172.25.4.135 | IP Address | Online | All Nodes |
| Name: StarwindCAP | Network Name | Online | All Nodes |
| Storage Qos Resource | Storage QoS Policy Manager | Online | All Nodes |
| Resource | Type | Status | Possible Owners |
|---|---|---|---|
| Cluster Disk 2 | Cluster Shared Volume | Offline | All Nodes |
| Network: ISCSI |
|---|
| DHCP Enabled: False |
| Network Role: Internal use |
| Metric: 39840 |
| Prefix | Prefix Length |
|---|---|
| 172.16.10.0 | 24 |
| Network: Management |
|---|
| DHCP Enabled: True |
| Network Role: Internal and client use |
| Metric: 70240 |
| Prefix | Prefix Length |
|---|---|
| 172.25.4.0 | 22 |
| Network: SYNC |
|---|
| DHCP Enabled: False |
| Network Role: Internal use |
| Metric: 30384 |
| Prefix | Prefix Length |
|---|---|
| 172.16.20.0 | 24 |
| Subnet Delay | |
|---|---|
| CrossSubnetDelay | 1000 |
| CrossSubnetThreshold | 20 |
| SameSubnetDelay | 1000 |
| SameSubnetThreshold | 20 |
| Property | Value |
|---|---|
| BuildNumber | 17763 |
| CSDVersion | |
| Description | |
| DetectedCloudPlatform | 0 |
| DynamicWeight | 1 |
| FaultDomain | Site:, Rack:, Chassis: |
| FaultDomainId | 0 |
| MajorVersion | 10 |
| Manufacturer | VMware, Inc. |
| MinorVersion | 0 |
| Model | VMware Virtual Platform |
| NeedsPreventQuorum | 0 |
| NodeDrainStatus | 0 |
| NodeDrainTarget | 4294967295 |
| NodeHighestVersion | 655363 |
| NodeInstanceID | 00000000-0000-0000-0000-000000000002 |
| NodeLowestVersion | 655363 |
| NodeName | StuStarWindSrv1 |
| NodeWeight | 1 |
| SerialNumber | VMware-42 23 16 74 46 ea 7c fe-f2 a3 6c 71 4d c8 c3 5f |
| StatusInformation | 0 |
| Property | Value |
|---|---|
| BuildNumber | 17763 |
| CSDVersion | |
| Description | |
| DetectedCloudPlatform | 0 |
| DynamicWeight | 1 |
| FaultDomain | Site:, Rack:, Chassis: |
| FaultDomainId | 0 |
| MajorVersion | 10 |
| Manufacturer | VMware, Inc. |
| MinorVersion | 0 |
| Model | VMware Virtual Platform |
| NeedsPreventQuorum | 0 |
| NodeDrainStatus | 3 |
| NodeDrainTarget | 4294967295 |
| NodeHighestVersion | 655363 |
| NodeInstanceID | 00000000-0000-0000-0000-000000000001 |
| NodeLowestVersion | 655363 |
| NodeName | StuStarWindSrv2 |
| NodeWeight | 1 |
| SerialNumber | VMware-42 23 08 12 52 9d e6 e0-61 00 06 a2 6d 23 fb 8c |
| StatusInformation | 16 |
| Property | Value |
|---|---|
| AddEvictDelay | 60 |
| AdminAccessPoint | 1 |
| AutoAssignNodeSite | 0 |
| AutoBalancerLevel | 1 |
| AutoBalancerMode | 2 |
| BackupInProgress | 0 |
| BlockCacheSize | 1024 |
| ClusSvcHangTimeout | 135 |
| ClusSvcRegroupStageTimeout | 15 |
| ClusSvcRegroupTickInMilliseconds | 300 |
| ClusterEnforcedAntiaffinity | 0 |
| ClusterFunctionalLevel | 10 |
| ClusterGroupWaitDelay | 120 |
| ClusterLogLevel | 3 |
| ClusterLogSize | 1536 |
| ClusterUpgradeVersion | 3 |
| CrossSiteDelay | 1000 |
| CrossSiteThreshold | 20 |
| CrossSubnetDelay | 1000 |
| CrossSubnetThreshold | 20 |
| CsvBalancer | 1 |
| DatabaseReadWriteMode | 0 |
| DefaultNetworkRole | 3 |
| Description | |
| DetectedCloudPlatform | 0 |
| DetectManagedEvents | 1 |
| DetectManagedEventsThreshold | 60 |
| DrainOnShutdown | 1 |
| DumpPolicy | 1376850201 |
| DynamicQuorumEnabled | 1 |
| EnabledEventLogs | Microsoft-Windows-Hyper-V-VmSwitch-Diagnostic,4,0xFFFFFFFD, Microsoft-Windows-SMBDirect/Debug,4, Microsoft-Windows-SMBServer/Analytic, Microsoft-Windows-Kernel-LiveDump/Analytic |
| EnableSharedVolumes | 1 |
| FixQuorum | 0 |
| GroupDependencyTimeout | 600 |
| HangRecoveryAction | 6 |
| IgnorePersistentStateOnStartup | 0 |
| LogResourceControls | 0 |
| LowerQuorumPriorityNodeId | 0 |
| MessageBufferLength | 50 |
| MinimumNeverPreemptPriority | 3000 |
| MinimumPreemptorPriority | 1 |
| NetftIPSecEnabled | 1 |
| PlacementOptions | 0 |
| PlumbAllCrossSubnetRoutes | 0 |
| PreferredSite | |
| PreventQuorum | 0 |
| QuarantineDuration | 7200 |
| QuarantineThreshold | 3 |
| QuorumArbitrationTimeMax | 20 |
| RecentEventsResetTime | 6:40 PM |
| RequestReplyTimeout | 60 |
| ResiliencyDefaultPeriod | 240 |
| ResiliencyLevel | 2 |
| RouteHistoryLength | 40 |
| S2DBusTypes | 0 |
| S2DCacheBehavior | 88 |
| S2DCacheDesiredState | 2 |
| S2DCacheFlashReservePercent | 0 |
| S2DCacheMetadataReserveBytes | 34359738368 |
| S2DCachePageSizeKBytes | 16 |
| S2DEnabled | 0 |
| S2DIOLatencyThreshold | 10000 |
| S2DOptimizations | 0 |
| SameSubnetDelay | 1000 |
| SameSubnetThreshold | 20 |
| Security Descriptor | < 396 Bytes > |
| SecurityLevel | 1 |
| SecurityLevelForStorage | 0 |
| SharedVolumeCompatibleFilters | |
| SharedVolumeIncompatibleFilters | |
| SharedVolumeSecurityDescriptor | < 280 Bytes > |
| SharedVolumesRoot | C:\ClusterStorage |
| SharedVolumeVssWriterOperationTimeout | 1800 |
| ShutdownTimeoutInMinutes | 20 |
| UseClientAccessNetworksForSharedVolumes | 2 |
| WitnessDatabaseWriteTimeout | 300 |
| WitnessDynamicWeight | 1 |
| WitnessRestartInterval | 15 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 4294973259 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 124 |
| Name | Cluster Disk 1 |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Physical Disk |
| Parameter | Value |
|---|---|
| CsvEnforceWriteThrough | 0 |
| DiskArbInterval | 3 |
| DiskGuid | {9b1d34bf-fa7c-c917-c667-8450a4dc6754} |
| DiskIdGuid | |
| DiskIdType | 0 |
| DiskPath | |
| DiskRecoveryAction | 0 |
| DiskReload | 0 |
| DiskRunChkDsk | 0 |
| DiskSignature | 28789009 |
| DiskUniqueIds | < 164 Bytes > |
| DiskVolumeInfo | < 80 Bytes > |
| EnableBlockCache | 1 |
| MaintenanceMode | 0 |
| PoolId | |
| SnapshotDiffSize | 0 |
| VirtualDiskDescription | |
| VirtualDiskHealth | 0 |
| VirtualDiskId | |
| VirtualDiskName | |
| VirtualDiskProvisioning | 0 |
| VirtualDiskResiliencyColumns | 0 |
| VirtualDiskResiliencyInterleave | 0 |
| VirtualDiskResiliencyType | 0 |
| VirtualDiskState | 0 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 2092 |
| Name | Cluster Disk 2 |
| PendingTimeout | 180000 |
| PersistentState | 0 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 900000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Physical Disk |
| Parameter | Value |
|---|---|
| CsvEnforceWriteThrough | 0 |
| DiskArbInterval | 3 |
| DiskGuid | {c6a58647-4dde-e14a-95ec-afead1268cf1} |
| DiskIdGuid | {076954b2-e40d-4536-be4b-ae5bf358b71e} |
| DiskIdType | 1 |
| DiskPath | |
| DiskRecoveryAction | 0 |
| DiskReload | 0 |
| DiskRunChkDsk | 0 |
| DiskSignature | 0 |
| DiskUniqueIds | < 48 Bytes > |
| DiskVolumeInfo | < 80 Bytes > |
| EnableBlockCache | 1 |
| MaintenanceMode | 0 |
| PoolId | |
| SnapshotDiffSize | 0 |
| VirtualDiskDescription | |
| VirtualDiskHealth | 0 |
| VirtualDiskId | |
| VirtualDiskName | |
| VirtualDiskProvisioning | 0 |
| VirtualDiskResiliencyColumns | 0 |
| VirtualDiskResiliencyInterleave | 0 |
| VirtualDiskResiliencyType | 0 |
| VirtualDiskState | 0 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 2832 |
| Name | Cluster IP Address |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | IP Address |
| Parameter | Value |
|---|---|
| Address | 172.25.4.135 |
| DhcpAddress | 172.25.4.135 |
| DhcpServer | 192.168.17.35 |
| DhcpSubnetMask | 255.255.252.0 |
| EnableDhcp | 1 |
| EnableNetBIOS | 0 |
| LeaseExpiresTime | 2/13/2021 9:13:20 AM |
| LeaseObtainedTime | 2/10/2021 9:13:20 AM |
| Network | Management |
| OverrideAddressMatch | 0 |
| ProbeFailureThreshold | 0 |
| ProbePort | 0 |
| SubnetMask | 255.255.252.0 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 5788 |
| Name | Cluster Name |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Network Name |
| Parameter | Value |
|---|---|
| ADAware | 1 |
| Aliases | |
| CreatingDC | \\OstudentDC2.student.local |
| DnsName | StarwindCAP |
| DnsSuffix | student.local |
| HostRecordTTL | 1200 |
| LastDNSUpdateTime | 2/9/2021 9:16:14 PM |
| Name | STARWINDCAP |
| ObjectGUID | 1f26be9d7dd156458116bbc60227605c |
| PublishPTRRecords | 0 |
| RegisterAllProvidersIP | 0 |
| RemapPipeNames | 0 |
| ResourceData | < 260 Bytes > |
| StatusDNS | 0 |
| StatusKerberos | 0 |
| StatusNetBIOS | 0 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 5360 |
| Name | Scale-Out File Server (\\starwindsrv) |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Scale Out File Server |
| Parameter | Value |
|---|
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 5360 |
| Name | starwindsrv |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Distributed Network Name |
| Parameter | Value |
|---|---|
| ADAware | 1 |
| Aliases | |
| CreatingDC | \\OstudentDC2.student.local |
| DnsName | starwindsrv |
| DnsSuffix | student.local |
| ExcludeNetworks | |
| HostRecordTTL | 1200 |
| InUseNetworks | a7c3f8b0-f642-428f-9ee8-afefa64d44ad |
| LastDNSUpdateTime | 2/10/2021 1:32:06 PM |
| Name | STARWINDSRV |
| ObjectGUID | b9ab58a499b4814192c292d12f48aec0 |
| RegisterAllProvidersIP | 1 |
| ResourceData | < 260 Bytes > |
| StatusDNS | 0 |
| StatusKerberos | 0 |
| Property | Value |
|---|---|
| DeadlockTimeout | 300000 |
| Description | |
| EmbeddedFailureAction | 2 |
| IsAlivePollInterval | 4294967295 |
| LastOperationStatusCode | 0 |
| LooksAlivePollInterval | 4294967295 |
| MonitorProcessId | 2832 |
| Name | Storage Qos Resource |
| PendingTimeout | 180000 |
| PersistentState | 1 |
| ResourceSpecificData1 | 0 |
| ResourceSpecificData2 | 0 |
| ResourceSpecificStatus | |
| RestartAction | 2 |
| RestartDelay | 500 |
| RestartPeriod | 600000 |
| RestartThreshold | 1 |
| RetryPeriodOnFailure | 600000 |
| SeparateMonitor | 0 |
| StatusInformation | 0 |
| Type | Storage QoS Policy Manager |
| Parameter | Value |
|---|
| Storage |
|---|
| 2 Total Disks - 0 Online |
| 0 Disks Available to Roles |
| Total Capacity |
|---|
| Total: 0.00 B |
| Free Space: 0.00 B ( 0% ) |
| Available Capacity |
|---|
| Total: 0.00 B |
| Free Space: 0.00 B ( 0% ) |
| Disk | Status | Group | Node | Capacity | FreeSpace |
|---|---|---|---|---|---|
| Cluster Disk 1 | Offline | Cluster Group | StuStarWindSrv2 | 0.00 B | 0.00 B ( 0% ) |
| Cluster Disk 2 | Offline | dcd14294-568a-4e90-9991-36490eff650f | StuStarWindSrv1 | 0.00 B | 0.00 B ( 0% ) |
| Summary |
|---|
| Cluster Name: StarwindCAP |
| Total Roles: 1 |
| Role | Status | Type |
|---|---|---|
| starwindsrv | Online |
| Resource | Type | Status | Possible Owners |
|---|---|---|---|
| Scale-Out File Server (\\starwindsrv) | Scale Out File Server | Online | All Nodes |
| starwindsrv | Distributed Network Name | Online | All Nodes |
| Row | Disk Number | Disk Signature | VPD Page 83h Identifier | VPD Serial Number | Model | Bus Type | Stack Type | SCSI Address | Adapter | Eligible for Validation | Disk Characteristics |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 0 | 55cfb307 | 6000C295DA8CDD5DE63E739760F2D6CA | 6000c295da8cdd5de63e739760f2d6ca | VMware Virtual disk SCSI Disk Device | SAS | Stor Port | 0:0:0:0 | LSI Adapter, SAS 3000 series, 8-port with 1068 | False | Disk is a boot volume. Disk is a system volume. Disk is used for paging files. Disk is used for memory dump files. Disk is on the system bus. Disk partition style is MBR. Disk type is BASIC. |
| 1 | 1 | {076954b2-e40d-4536-be4b-ae5bf358b71e} | 6000C2988C9733E3C0AF5FA91C48D417 | 6000c2988c9733e3c0af5fa91c48d417 | VMware Virtual disk SCSI Disk Device | SAS | Stor Port | 1:0:0:0 | LSI Adapter, SAS 3000 series, 8-port with 1068 | True | Disk is already clustered. Disk partition style is GPT. Disk type is BASIC. |
| Row | Disk Number | Disk Signature | VPD Page 83h Identifier | VPD Serial Number | Model | Bus Type | Stack Type | SCSI Address | Adapter | Eligible for Validation | Disk Characteristics |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 0 | 55cfb307 | 6000C29F749BEFE6DE1792055FFE8B84 | 6000c29f749befe6de1792055ffe8b84 | VMware Virtual disk SCSI Disk Device | SAS | Stor Port | 0:0:0:0 | LSI Adapter, SAS 3000 series, 8-port with 1068 | False | Disk is a boot volume. Disk is a system volume. Disk is used for paging files. Disk is used for memory dump files. Disk is on the system bus. Disk partition style is MBR. Disk type is BASIC. |
| 1 | 1 | {076954b2-e40d-4536-be4b-ae5bf358b71e} | 6000C2988C9733E3C0AF5FA91C48D417 | 6000c2988c9733e3c0af5fa91c48d417 | VMware Virtual disk SCSI Disk Device | SAS | Stor Port | 1:0:0:0 | LSI Adapter, SAS 3000 series, 8-port with 1068 | True | Disk is already clustered. Disk partition style is GPT. Disk type is BASIC. |
| Disks: | Disk Signature | VPD Page 83h Identifier | VPD Serial Number |
|---|---|---|---|
| Test Disk 0 | {076954b2-e40d-4536-be4b-ae5bf358b71e} | 6000C2988C9733E3C0AF5FA91C48D417 | 6000c2988c9733e3c0af5fa91c48d417 |
| Name | Variable Value | User Name |
|---|---|---|
| ComSpec | %SystemRoot%\system32\cmd.exe | <SYSTEM> |
| DriverData | C:\Windows\System32\Drivers\DriverData | <SYSTEM> |
| NUMBER_OF_PROCESSORS | 2 | <SYSTEM> |
| OS | Windows_NT | <SYSTEM> |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\LOCAL SERVICE |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | STUSTARWINDSRV1\Administrator |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\SYSTEM |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\NETWORK SERVICE |
| Path | %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\ | <SYSTEM> |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | STUSTARWINDSRV1\CLIUSR |
| PATHEXT | .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC | <SYSTEM> |
| PEGASUS_HOME | C:\Program Files\StarWind Software\StarWind\OpenPegasus | <SYSTEM> |
| PROCESSOR_ARCHITECTURE | AMD64 | <SYSTEM> |
| PROCESSOR_IDENTIFIER | Intel64 Family 6 Model 45 Stepping 2, GenuineIntel | <SYSTEM> |
| PROCESSOR_LEVEL | 6 | <SYSTEM> |
| PROCESSOR_REVISION | 2d02 | <SYSTEM> |
| PSModulePath | %ProgramFiles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules | <SYSTEM> |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\LOCAL SERVICE |
| TEMP | %SystemRoot%\TEMP | <SYSTEM> |
| TEMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV1\CLIUSR |
| TEMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV1\Administrator |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\SYSTEM |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\NETWORK SERVICE |
| TMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV1\Administrator |
| TMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV1\CLIUSR |
| TMP | %SystemRoot%\TEMP | <SYSTEM> |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\SYSTEM |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\NETWORK SERVICE |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\LOCAL SERVICE |
| USERNAME | SYSTEM | <SYSTEM> |
| windir | %SystemRoot% | <SYSTEM> |
| Name | Variable Value | User Name |
|---|---|---|
| ComSpec | %SystemRoot%\system32\cmd.exe | <SYSTEM> |
| DriverData | C:\Windows\System32\Drivers\DriverData | <SYSTEM> |
| NUMBER_OF_PROCESSORS | 2 | <SYSTEM> |
| OS | Windows_NT | <SYSTEM> |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\LOCAL SERVICE |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | STUSTARWINDSRV2\Administrator |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\SYSTEM |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | NT AUTHORITY\NETWORK SERVICE |
| Path | %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\ | <SYSTEM> |
| Path | %USERPROFILE%\AppData\Local\Microsoft\WindowsApps; | STUSTARWINDSRV2\CLIUSR |
| PATHEXT | .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC | <SYSTEM> |
| PEGASUS_HOME | C:\Program Files\StarWind Software\StarWind\OpenPegasus | <SYSTEM> |
| PROCESSOR_ARCHITECTURE | AMD64 | <SYSTEM> |
| PROCESSOR_IDENTIFIER | Intel64 Family 6 Model 45 Stepping 2, GenuineIntel | <SYSTEM> |
| PROCESSOR_LEVEL | 6 | <SYSTEM> |
| PROCESSOR_REVISION | 2d02 | <SYSTEM> |
| PSModulePath | %ProgramFiles%\WindowsPowerShell\Modules;%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules | <SYSTEM> |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\LOCAL SERVICE |
| TEMP | %SystemRoot%\TEMP | <SYSTEM> |
| TEMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV2\CLIUSR |
| TEMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV2\Administrator |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\SYSTEM |
| TEMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\NETWORK SERVICE |
| TMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV2\Administrator |
| TMP | %USERPROFILE%\AppData\Local\Temp | STUSTARWINDSRV2\CLIUSR |
| TMP | %SystemRoot%\TEMP | <SYSTEM> |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\SYSTEM |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\NETWORK SERVICE |
| TMP | %USERPROFILE%\AppData\Local\Temp | NT AUTHORITY\LOCAL SERVICE |
| USERNAME | SYSTEM | <SYSTEM> |
| windir | %SystemRoot% | <SYSTEM> |
| Manufacturer | Model | Manufacturer Version | Driver Name | Firmware Version | Serial Number | Status | Optional ROM Version | Unique Adapter ID |
|---|---|---|---|---|---|---|---|---|
| Microsoft Corporation | iSCSI Initiator | 1.5 | msiscsi.sys | 1.5 | MSFT-05-1991 | The HBA is functioning normally. | 18446689135254741008 |
| Manufacturer | Model | Manufacturer Version | Driver Name | Firmware Version | Serial Number | Status | Optional ROM Version | Unique Adapter ID |
|---|---|---|---|---|---|---|---|---|
| Microsoft Corporation | iSCSI Initiator | 1.5 | msiscsi.sys | 1.5 | MSFT-05-1991 | The HBA is functioning normally. | 18446674310155943952 |
| Item | Value |
|---|---|
| Total Physical Memory | 8.00 GB |
| Total Visible Memory Size | 8.00 GB |
| Total Virtual Memory Size | 9.25 GB |
| Free Physical Memory | 4.94 GB |
| Free Virtual Memory | 6.50 GB |
| Free Space In Page Files | 1.16 GB |
| Item | Value |
|---|---|
| Total Physical Memory | 8.00 GB |
| Total Visible Memory Size | 8.00 GB |
| Total Virtual Memory Size | 9.25 GB |
| Free Physical Memory | 4.57 GB |
| Free Virtual Memory | 6.17 GB |
| Free Space In Page Files | 1.16 GB |
| Network Connection | Interface Metric | Adapter | RDMA Capable | RSS Capable | Speed |
|---|---|---|---|---|---|
| Ethernet | 15 | vmxnet3 Ethernet Adapter | False | True | 10 Gbit/s |
| ISCSI | 15 | vmxnet3 Ethernet Adapter | False | False | 10 Gbit/s |
| SYNC | 25 | Intel(R) 82574L Gigabit Network Connection | False | True | 1 Gbit/s |
| Network Connection | Interface Metric | Adapter | RDMA Capable | RSS Capable | Speed |
|---|---|---|---|---|---|
| Ethernet | 15 | vmxnet3 Ethernet Adapter | False | True | 10 Gbit/s |
| ISCSIHB | 15 | vmxnet3 Ethernet Adapter | False | False | 10 Gbit/s |
| Ethernet 2 | 25 | Intel(R) 82574L Gigabit Network Connection | False | True | 1 Gbit/s |
| Item | Value |
|---|---|
| Name | Microsoft Windows Server 2019 Standard |
| Version | 10.0.17763 |
| Corrective Service Disk version | |
| Build Number | 17763 |
| Service Pack Major | 0 |
| Service Pack Minor | 0 |
| Install Date | 2/28/2020 6:27:58 PM |
| Last BootUp Time | 2/5/2021 4:11:58 PM |
| Local Date Time | 2/10/2021 8:52:35 AM |
| Windows Directory | C:\Windows |
| System Directory | C:\Windows\system32 |
| Boot Device | \Device\HarddiskVolume1 |
| Locale | en-US |
| PageFiles | C:\pagefile.sys - 1.25 GB ; |
| Item | Value |
|---|---|
| Name | Microsoft Windows Server 2019 Standard |
| Version | 10.0.17763 |
| Corrective Service Disk version | |
| Build Number | 17763 |
| Service Pack Major | 0 |
| Service Pack Minor | 0 |
| Install Date | 2/28/2020 6:27:58 PM |
| Last BootUp Time | 2/5/2021 4:11:59 PM |
| Local Date Time | 2/10/2021 8:52:35 AM |
| Windows Directory | C:\Windows |
| System Directory | C:\Windows\system32 |
| Boot Device | \Device\HarddiskVolume1 |
| Locale | en-US |
| PageFiles | C:\pagefile.sys - 1.25 GB ; |
| Caption | Manufacturer | Status | Service |
|---|---|---|---|
| ACPI Fixed Feature Button | (Standard system devices) | OK | Value Not Found |
| ACPI x64-based PC | (Standard computers) | OK | \Driver\ACPI_HAL |
| ATA Channel 0 | (Standard IDE ATA/ATAPI controllers) | OK | atapi |
| ATA Channel 1 | (Standard IDE ATA/ATAPI controllers) | OK | atapi |
| Cluster BFlt Driver | Microsoft | OK | clusbflt |
| Cluster Disk Driver | Microsoft | OK | ClusDisk |
| Communications Port (COM1) | (Standard port types) | OK | Serial |
| Communications Port (COM2) | (Standard port types) | OK | Serial |
| Composite Bus Enumerator | Microsoft | OK | CompositeBus |
| CPU to PCI Bridge | Intel | OK | Value Not Found |
| CSV Volume Bus | Microsoft | OK | csvvbus |
| Direct memory access controller | (Standard system devices) | OK | Value Not Found |
| EISA programmable interrupt controller | (Standard system devices) | OK | Value Not Found |
| Floppy disk drive | (Standard floppy disk drives) | OK | flpydisk |
| Generic Bus | (Standard system devices) | OK | Value Not Found |
| Generic Non-PnP Monitor | (Standard monitor types) | OK | monitor |
| High precision event timer | (Standard system devices) | OK | Value Not Found |
| Intel(R) 82371AB/EB PCI Bus Master IDE Controller | Intel | OK | intelide |
| Intel(R) 82574L Gigabit Network Connection | Intel Corporation | OK | e1iexpress |
| Intel(R) Xeon(R) CPU E5-2660 v4 @ 2.00GHz | Intel | OK | intelppm |
| Intel(R) Xeon(R) CPU E5-2660 v4 @ 2.00GHz | Intel | OK | intelppm |
| LSI Adapter, SAS 3000 series, 8-port with 1068 | LSI | OK | LSI_SAS |
| LSI Adapter, SAS 3000 series, 8-port with 1068 | LSI | OK | LSI_SAS |
| Microsoft AC Adapter | Microsoft | OK | CmBatt |
| Microsoft ACPI-Compliant System | Microsoft | OK | ACPI |
| Microsoft Basic Display Driver | (Standard display types) | OK | BasicDisplay |
| Microsoft Basic Render Driver | Microsoft | OK | BasicRender |
| Microsoft ClusPort HBA | Microsoft | OK | clusport |
| Microsoft Failover Cluster Virtual Adapter | Microsoft | OK | Netft |
| Microsoft Hyper-V Generation Counter | Microsoft | OK | gencounter |
| Microsoft iSCSI Initiator | Microsoft | OK | iScsiPrt |
| Microsoft Kernel Debug Network Adapter | Microsoft | OK | kdnic |
| Microsoft Multi-Path Bus Driver | Microsoft | OK | mpio |
| Microsoft Multi-Path Device Specific Module | Microsoft | Degraded | msdsm |
| Microsoft Print to PDF | Microsoft | OK | Value Not Found |
| Microsoft Radio Device Enumeration Bus | Microsoft | OK | Value Not Found |
| Microsoft Storage Spaces Controller | Microsoft | OK | spaceport |
| Microsoft System Management BIOS Driver | (Standard system devices) | OK | mssmbios |
| Microsoft Virtual Drive Enumerator | Microsoft | OK | vdrvroot |
| Microsoft XPS Document Writer | Microsoft | OK | Value Not Found |
| Motherboard resources | (Standard system devices) | OK | Value Not Found |
| Motherboard resources | (Standard system devices) | OK | Value Not Found |
| NDIS Virtual Network Adapter Enumerator | Microsoft | OK | NdisVirtualBus |
| NECVMWar VMware IDE CDR10 ATA Device | (Standard CD-ROM drives) | OK | cdrom |
| PCI Bus | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI to ISA Bridge | Intel | OK | msisadrv |
| PCI-to-PCI Bridge | (Standard system devices) | OK | pci |
| PCI-to-PCI Bridge | (Standard system devices) | OK | pci |
| Plug and Play Software Device Enumerator | (Standard system devices) | OK | swenum |
| Printer Port (LPT1) | (Standard port types) | OK | Parport |
| Printer Port Logical Interface | (Standard system devices) | OK | Value Not Found |
| Remote Desktop Device Redirector Bus | Microsoft | OK | rdpbus |
| Root Print Queue | Microsoft | OK | Value Not Found |
| Standard floppy disk controller | (Standard floppy disk controllers) | OK | fdc |
| Standard PS/2 Keyboard | (Standard keyboards) | OK | i8042prt |
| System CMOS/real time clock | (Standard system devices) | OK | Value Not Found |
| System speaker | (Standard system devices) | OK | Value Not Found |
| System timer | (Standard system devices) | OK | Value Not Found |
| UMBus Root Bus Enumerator | Microsoft | OK | umbus |
| VMware Pointing Device | VMware, Inc. | OK | i8042prt |
| VMware SVGA 3D | VMware, Inc. | OK | vm3dmp_loader |
| VMware Virtual disk SCSI Disk Device | (Standard disk drives) | OK | disk |
| VMware Virtual disk SCSI Disk Device | (Standard disk drives) | OK | disk |
| VMware VMCI Bus Device | VMware, Inc. | OK | vmci |
| VMware VMCI Host Device | VMware, Inc. | OK | vmci |
| vmxnet3 Ethernet Adapter | VMware, Inc. | OK | vmxnet3ndis6 |
| vmxnet3 Ethernet Adapter #2 | VMware, Inc. | OK | vmxnet3ndis6 |
| Volume | Microsoft | OK | volume |
| Volume | Microsoft | OK | volume |
| Volume Manager | Microsoft | OK | volmgr |
| Value Not Found | Value Not Found | OK | Value Not Found |
| Caption | Manufacturer | Status | Service |
|---|---|---|---|
| ACPI Fixed Feature Button | (Standard system devices) | OK | Value Not Found |
| ACPI x64-based PC | (Standard computers) | OK | \Driver\ACPI_HAL |
| ATA Channel 0 | (Standard IDE ATA/ATAPI controllers) | OK | atapi |
| ATA Channel 1 | (Standard IDE ATA/ATAPI controllers) | OK | atapi |
| Cluster BFlt Driver | Microsoft | OK | clusbflt |
| Cluster Disk Driver | Microsoft | OK | ClusDisk |
| Communications Port (COM1) | (Standard port types) | OK | Serial |
| Communications Port (COM2) | (Standard port types) | OK | Serial |
| Composite Bus Enumerator | Microsoft | OK | CompositeBus |
| CPU to PCI Bridge | Intel | OK | Value Not Found |
| CSV Volume Bus | Microsoft | OK | csvvbus |
| Direct memory access controller | (Standard system devices) | OK | Value Not Found |
| EISA programmable interrupt controller | (Standard system devices) | OK | Value Not Found |
| Floppy disk drive | (Standard floppy disk drives) | OK | flpydisk |
| Generic Bus | (Standard system devices) | OK | Value Not Found |
| Generic Non-PnP Monitor | (Standard monitor types) | OK | monitor |
| High precision event timer | (Standard system devices) | OK | Value Not Found |
| Intel(R) 82371AB/EB PCI Bus Master IDE Controller | Intel | OK | intelide |
| Intel(R) 82574L Gigabit Network Connection | Intel Corporation | OK | e1iexpress |
| Intel(R) Xeon(R) CPU E5-2660 v4 @ 2.00GHz | Intel | OK | intelppm |
| Intel(R) Xeon(R) CPU E5-2660 v4 @ 2.00GHz | Intel | OK | intelppm |
| LSI Adapter, SAS 3000 series, 8-port with 1068 | LSI | OK | LSI_SAS |
| LSI Adapter, SAS 3000 series, 8-port with 1068 | LSI | OK | LSI_SAS |
| Microsoft AC Adapter | Microsoft | OK | CmBatt |
| Microsoft ACPI-Compliant System | Microsoft | OK | ACPI |
| Microsoft Basic Display Driver | (Standard display types) | OK | BasicDisplay |
| Microsoft Basic Render Driver | Microsoft | OK | BasicRender |
| Microsoft ClusPort HBA | Microsoft | OK | clusport |
| Microsoft Failover Cluster Virtual Adapter | Microsoft | OK | Netft |
| Microsoft Hyper-V Generation Counter | Microsoft | OK | gencounter |
| Microsoft iSCSI Initiator | Microsoft | OK | iScsiPrt |
| Microsoft Kernel Debug Network Adapter | Microsoft | OK | kdnic |
| Microsoft Multi-Path Bus Driver | Microsoft | OK | mpio |
| Microsoft Multi-Path Device Specific Module | Microsoft | Degraded | msdsm |
| Microsoft Print to PDF | Microsoft | OK | Value Not Found |
| Microsoft Radio Device Enumeration Bus | Microsoft | OK | Value Not Found |
| Microsoft RRAS Root Enumerator | Microsoft | OK | Value Not Found |
| Microsoft Storage Spaces Controller | Microsoft | OK | spaceport |
| Microsoft System Management BIOS Driver | (Standard system devices) | OK | mssmbios |
| Microsoft Virtual Drive Enumerator | Microsoft | OK | vdrvroot |
| Microsoft XPS Document Writer | Microsoft | OK | Value Not Found |
| Motherboard resources | (Standard system devices) | OK | Value Not Found |
| Motherboard resources | (Standard system devices) | OK | Value Not Found |
| NDIS Virtual Network Adapter Enumerator | Microsoft | OK | NdisVirtualBus |
| NECVMWar VMware IDE CDR10 ATA Device | (Standard CD-ROM drives) | OK | cdrom |
| PCI Bus | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI Express Root Port | (Standard system devices) | OK | pci |
| PCI to ISA Bridge | Intel | OK | msisadrv |
| PCI-to-PCI Bridge | (Standard system devices) | OK | pci |
| PCI-to-PCI Bridge | (Standard system devices) | OK | pci |
| Plug and Play Software Device Enumerator | (Standard system devices) | OK | swenum |
| Printer Port (LPT1) | (Standard port types) | OK | Parport |
| Printer Port Logical Interface | (Standard system devices) | OK | Value Not Found |
| Remote Desktop Device Redirector Bus | Microsoft | OK | rdpbus |
| Root Print Queue | Microsoft | OK | Value Not Found |
| Standard floppy disk controller | (Standard floppy disk controllers) | OK | fdc |
| Standard PS/2 Keyboard | (Standard keyboards) | OK | i8042prt |
| System CMOS/real time clock | (Standard system devices) | OK | Value Not Found |
| System speaker | (Standard system devices) | OK | Value Not Found |
| System timer | (Standard system devices) | OK | Value Not Found |
| UMBus Root Bus Enumerator | Microsoft | OK | umbus |
| VMware Pointing Device | VMware, Inc. | OK | i8042prt |
| VMware SVGA 3D | VMware, Inc. | OK | vm3dmp_loader |
| VMware Virtual disk SCSI Disk Device | (Standard disk drives) | OK | disk |
| VMware Virtual disk SCSI Disk Device | (Standard disk drives) | OK | disk |
| VMware VMCI Bus Device | VMware, Inc. | OK | vmci |
| VMware VMCI Host Device | VMware, Inc. | OK | vmci |
| vmxnet3 Ethernet Adapter | VMware, Inc. | OK | vmxnet3ndis6 |
| vmxnet3 Ethernet Adapter #2 | VMware, Inc. | OK | vmxnet3ndis6 |
| Volume | Microsoft | OK | volume |
| Volume | Microsoft | OK | volume |
| Volume Manager | Microsoft | OK | volmgr |
| WAN Miniport (GRE) | Microsoft | OK | RasGre |
| WAN Miniport (IKEv2) | Microsoft | OK | RasAgileVpn |
| WAN Miniport (IP) | Microsoft | OK | NdisWan |
| WAN Miniport (IPv6) | Microsoft | OK | NdisWan |
| WAN Miniport (L2TP) | Microsoft | OK | Rasl2tp |
| WAN Miniport (Network Monitor) | Microsoft | OK | NdisWan |
| WAN Miniport (PPPOE) | Microsoft | OK | RasPppoe |
| WAN Miniport (PPTP) | Microsoft | OK | PptpMiniport |
| WAN Miniport (SSTP) | Microsoft | OK | RasSstp |
| Value Not Found | Value Not Found | OK | Value Not Found |
| Name | Path | Start Name | Process Id | WorkingSet Size | Virtual Size | Creation Date | Thread Count | Handle Count |
|---|---|---|---|---|---|---|---|---|
| ccSvcHst.exe | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe | STUSTARWINDSRV1\Administrator | 5752 | 3633152 | 124403712 | 2/5/2021 4:12:27 PM | 17 | 443 |
| ccSvcHst.exe | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe | NT AUTHORITY\SYSTEM | 2884 | 208621568 | 590897152 | 2/5/2021 4:10:56 PM | 88 | 2549 |
| clussvc.exe | C:\Windows\Cluster\clussvc.exe | NT AUTHORITY\SYSTEM | 3140 | 32428032 | 2203453431808 | 2/5/2021 4:10:56 PM | 57 | 1055 |
| CPrepSrv.exe | C:\Windows\System32\CprepSrv.exe | NT AUTHORITY\SYSTEM | 4216 | 12435456 | 2203410604032 | 2/10/2021 8:52:33 AM | 11 | 258 |
| csrss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 604 | 5484544 | 2203416092672 | 2/5/2021 4:10:53 PM | 11 | 384 |
| csrss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 516 | 5746688 | 2203411091456 | 2/5/2021 4:10:53 PM | 11 | 663 |
| ctfmon.exe | C:\Windows\system32\ctfmon.exe | STUSTARWINDSRV1\Administrator | 5352 | 15773696 | 2203456417792 | 2/5/2021 4:12:28 PM | 8 | 387 |
| dllhost.exe | C:\Windows\system32\DllHost.exe | STUSTARWINDSRV1\Administrator | 5524 | 11866112 | 2203503779840 | 2/9/2021 8:07:30 AM | 5 | 225 |
| dllhost.exe | C:\Windows\system32\dllhost.exe | NT AUTHORITY\SYSTEM | 3436 | 12894208 | 2203410583552 | 2/5/2021 4:12:08 PM | 9 | 238 |
| dwm.exe | C:\Windows\system32\dwm.exe | Window Manager\DWM-1 | 780 | 67674112 | 2203570098176 | 2/5/2021 4:10:55 PM | 13 | 629 |
| explorer.exe | C:\Windows\Explorer.EXE | STUSTARWINDSRV1\Administrator | 5952 | 83537920 | 2203778822144 | 2/5/2021 4:12:29 PM | 36 | 1480 |
| fontdrvhost.exe | C:\Windows\system32\fontdrvhost.exe | Font Driver Host\UMFD-0 | 920 | 3825664 | 2203414392832 | 2/5/2021 4:10:54 PM | 5 | 49 |
| fontdrvhost.exe | C:\Windows\system32\fontdrvhost.exe | Font Driver Host\UMFD-1 | 924 | 5160960 | 2203417571328 | 2/5/2021 4:10:54 PM | 5 | 49 |
| iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | STUSTARWINDSRV1\Administrator | 3364 | 20488192 | 189018112 | 2/10/2021 8:47:01 AM | 6 | 472 |
| iexplore.exe | C:\Program Files\Internet Explorer\iexplore.exe | STUSTARWINDSRV1\Administrator | 1724 | 30609408 | 2203545030656 | 2/10/2021 8:47:01 AM | 9 | 601 |
| iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | STUSTARWINDSRV1\Administrator | 628 | 18337792 | 187666432 | 2/10/2021 8:51:24 AM | 7 | 408 |
| lsass.exe | C:\Windows\system32\lsass.exe | NT AUTHORITY\SYSTEM | 760 | 25722880 | 2203421040640 | 2/5/2021 4:10:54 PM | 10 | 1760 |
| mmc.exe | C:\Windows\system32\mmc.exe | STUSTARWINDSRV1\Administrator | 1276 | 14536704 | 2204086415360 | 2/9/2021 8:07:32 AM | 14 | 708 |
| mmc.exe | C:\Windows\system32\mmc.exe | STUSTARWINDSRV1\Administrator | 4236 | 115974144 | 2204358086656 | 2/9/2021 7:59:33 AM | 68 | 1692 |
| msdtc.exe | C:\Windows\System32\msdtc.exe | NT AUTHORITY\NETWORK SERVICE | 3480 | 10956800 | 2203405463552 | 2/5/2021 4:12:10 PM | 9 | 234 |
| Registry | Value Not Found | NT AUTHORITY\SYSTEM | 88 | 143163392 | 165478400 | 2/5/2021 4:10:47 PM | 4 | 0 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 2092 | 11612160 | 2203407843328 | 2/5/2021 4:12:16 PM | 11 | 232 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 3360 | 15282176 | 2203422416896 | 2/5/2021 4:12:16 PM | 9 | 286 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 4844 | 12152832 | 2203409448960 | 2/5/2021 4:12:16 PM | 8 | 256 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 5360 | 18096128 | 2203419955200 | 2/5/2021 4:12:20 PM | 13 | 403 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 5420 | 11677696 | 2203404619776 | 2/5/2021 4:12:20 PM | 6 | 273 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV1\Administrator | 6680 | 17301504 | 2203458555904 | 2/5/2021 4:12:31 PM | 3 | 229 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV1\Administrator | 6828 | 23777280 | 2203499315200 | 2/5/2021 4:12:32 PM | 5 | 417 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV1\Administrator | 6348 | 18014208 | 2203468193792 | 2/5/2021 4:12:34 PM | 1 | 328 |
| SearchUI.exe | C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe | STUSTARWINDSRV1\Administrator | 6628 | 153432064 | 2238597632000 | 2/5/2021 4:12:31 PM | 36 | 1160 |
| sepWscSvc64.exe | Value Not Found | NT AUTHORITY\SYSTEM | 2984 | 9383936 | 4377350144 | 2/5/2021 4:10:56 PM | 6 | 181 |
| services.exe | Value Not Found | NT AUTHORITY\SYSTEM | 744 | 14159872 | 2203404869632 | 2/5/2021 4:10:54 PM | 8 | 609 |
| ShellExperienceHost.exe | C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe | STUSTARWINDSRV1\Administrator | 6508 | 72581120 | 2203700219904 | 2/5/2021 4:12:30 PM | 21 | 876 |
| sihost.exe | C:\Windows\system32\sihost.exe | STUSTARWINDSRV1\Administrator | 5836 | 25501696 | 2203481141248 | 2/5/2021 4:12:27 PM | 8 | 466 |
| smartscreen.exe | C:\Windows\System32\smartscreen.exe | STUSTARWINDSRV1\Administrator | 6932 | 26247168 | 2238103015424 | 2/5/2021 4:12:35 PM | 5 | 394 |
| smss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 368 | 1236992 | 2203358597120 | 2/5/2021 4:10:52 PM | 2 | 53 |
| spoolsv.exe | C:\Windows\System32\spoolsv.exe | NT AUTHORITY\SYSTEM | 2456 | 17391616 | 2203461427200 | 2/5/2021 4:10:56 PM | 7 | 471 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1092 | 8179712 | 2203391627264 | 2/5/2021 4:10:55 PM | 4 | 218 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1216 | 8450048 | 2203391406080 | 2/5/2021 4:10:55 PM | 6 | 245 |
| svchost.exe | C:\Windows\system32\svchost.exe | STUSTARWINDSRV1\Administrator | 5896 | 29679616 | 2203519307776 | 2/5/2021 4:12:27 PM | 3 | 376 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1076 | 9027584 | 2203388698624 | 2/5/2021 4:10:55 PM | 4 | 140 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1084 | 7299072 | 2203392397312 | 2/5/2021 4:10:55 PM | 5 | 152 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1156 | 10129408 | 2203399000064 | 2/5/2021 4:10:55 PM | 2 | 210 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 4592 | 7520256 | 2203387826176 | 2/5/2021 4:12:28 PM | 4 | 171 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 6104 | 12607488 | 2203409563648 | 2/5/2021 4:12:28 PM | 5 | 211 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1168 | 12091392 | 2203402084352 | 2/5/2021 4:10:55 PM | 2 | 149 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 5856 | 14286848 | 2203426443264 | 2/5/2021 4:12:28 PM | 5 | 251 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 5144 | 12263424 | 2203399278592 | 2/5/2021 4:12:28 PM | 3 | 162 |
| svchost.exe | C:\Windows\system32\svchost.exe | STUSTARWINDSRV1\Administrator | 5860 | 15319040 | 2203438084096 | 2/5/2021 4:12:27 PM | 9 | 283 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 456 | 8339456 | 2203395432448 | 2/5/2021 4:10:54 PM | 4 | 260 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1176 | 18722816 | 2203425656832 | 2/6/2021 2:10:57 PM | 5 | 268 |
| svchost.exe | Value Not Found | NT AUTHORITY\SYSTEM | 5976 | 7700480 | 2203386658816 | 2/5/2021 6:17:09 PM | 1 | 159 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 6008 | 9129984 | 2203405082624 | 2/5/2021 4:21:36 PM | 2 | 186 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 4324 | 10350592 | 2203545763840 | 2/6/2021 2:10:57 PM | 5 | 185 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 876 | 3993600 | 2203374563328 | 2/5/2021 4:10:54 PM | 2 | 85 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 896 | 23564288 | 2203435491328 | 2/5/2021 4:10:54 PM | 12 | 843 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 3404 | 8368128 | 2203392192512 | 2/6/2021 4:11:11 PM | 7 | 170 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 5932 | 11722752 | 2203404754944 | 2/5/2021 4:20:05 PM | 6 | 223 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 5380 | 19386368 | 2203443859456 | 2/5/2021 4:13:32 PM | 21 | 321 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 1016 | 18776064 | 2203414454272 | 2/5/2021 4:10:54 PM | 11 | 1000 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 840 | 6397952 | 2203388370944 | 2/10/2021 8:52:34 AM | 5 | 119 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 6740 | 15695872 | 2203582668800 | 2/5/2021 4:13:32 PM | 9 | 291 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 4916 | 5423104 | 2203379965952 | 2/5/2021 4:13:50 PM | 3 | 124 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2368 | 18735104 | 2203452645376 | 2/5/2021 4:13:33 PM | 8 | 321 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1232 | 73650176 | 2203508543488 | 2/5/2021 4:13:33 PM | 7 | 607 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2184 | 29900800 | 2203462324224 | 2/5/2021 4:10:56 PM | 26 | 636 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2288 | 9650176 | 2203397582848 | 2/5/2021 4:10:56 PM | 5 | 222 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 448 | 15011840 | 2203442925568 | 2/5/2021 4:10:55 PM | 8 | 259 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 2116 | 10051584 | 2203400081408 | 2/5/2021 4:10:55 PM | 5 | 227 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2592 | 36085760 | 2203469737984 | 2/5/2021 4:10:56 PM | 11 | 520 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2680 | 11874304 | 2203404525568 | 2/5/2021 4:10:56 PM | 7 | 257 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2308 | 12181504 | 2203405139968 | 2/5/2021 4:10:56 PM | 5 | 460 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 2584 | 14667776 | 2203483983872 | 2/5/2021 4:10:56 PM | 5 | 349 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1780 | 14794752 | 2203437895680 | 2/5/2021 4:10:55 PM | 6 | 365 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1840 | 9486336 | 2203396780032 | 2/5/2021 4:10:55 PM | 4 | 315 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 1664 | 13320192 | 2203409068032 | 2/5/2021 4:10:55 PM | 5 | 364 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1756 | 8552448 | 2203395289088 | 2/5/2021 4:10:55 PM | 3 | 171 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2000 | 7413760 | 2203392405504 | 2/5/2021 4:10:55 PM | 4 | 154 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1424 | 8376320 | 2203392831488 | 2/5/2021 4:10:55 PM | 5 | 179 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1868 | 8753152 | 2203399618560 | 2/5/2021 4:10:55 PM | 11 | 319 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1880 | 7421952 | 2203420962816 | 2/5/2021 4:10:55 PM | 5 | 141 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1576 | 11739136 | 2203432460288 | 2/5/2021 4:10:55 PM | 3 | 228 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 5052 | 30851072 | 2203581636608 | 2/10/2021 8:47:14 AM | 14 | 559 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 7088 | 13443072 | 2203432501248 | 2/10/2021 8:52:34 AM | 12 | 340 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1568 | 12427264 | 2203404304384 | 2/5/2021 4:10:55 PM | 4 | 253 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1292 | 5988352 | 2203393732608 | 2/5/2021 4:10:55 PM | 3 | 148 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1480 | 22605824 | 2203428864000 | 2/5/2021 4:10:55 PM | 7 | 444 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1524 | 21352448 | 2203429842944 | 2/5/2021 4:10:55 PM | 12 | 399 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 1248 | 10207232 | 2203407368192 | 2/5/2021 4:10:55 PM | 13 | 278 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2976 | 5709824 | 2203384336384 | 2/5/2021 4:10:56 PM | 3 | 128 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2968 | 6701056 | 2207683649536 | 2/5/2021 4:10:56 PM | 3 | 136 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2960 | 22994944 | 2203448229888 | 2/5/2021 4:10:56 PM | 16 | 355 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1620 | 5935104 | 2203389423616 | 2/5/2021 4:10:55 PM | 4 | 160 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 5520 | 6115328 | 2203384553472 | 2/10/2021 8:47:26 AM | 2 | 126 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1588 | 9285632 | 2203399778304 | 2/5/2021 4:10:55 PM | 5 | 439 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2992 | 13664256 | 2203421749248 | 2/5/2021 4:10:56 PM | 2 | 169 |
| System | Value Not Found | Value Not Found | 4 | 159744 | 3907584 | 2/5/2021 4:10:52 PM | 184 | 3063 |
| System Idle Process | Value Not Found | Value Not Found | 0 | 8192 | 4096 | 2/5/2021 4:10:52 PM | 2 | 0 |
| taskhostw.exe | C:\Windows\system32\taskhostw.exe | STUSTARWINDSRV1\Administrator | 5984 | 16601088 | 2203515064320 | 2/5/2021 4:12:28 PM | 9 | 249 |
| TiWorker.exe | C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.1450_none_56e6965b991df4af\TiWorker.exe | NT AUTHORITY\SYSTEM | 3816 | 28180480 | 2203448967168 | 2/10/2021 8:51:26 AM | 3 | 194 |
| TrustedInstaller.exe | C:\Windows\servicing\TrustedInstaller.exe | NT AUTHORITY\SYSTEM | 6252 | 7229440 | 2203389755392 | 2/10/2021 8:51:26 AM | 6 | 137 |
| VGAuthService.exe | C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe | NT AUTHORITY\SYSTEM | 3008 | 10702848 | 4409135104 | 2/5/2021 4:10:56 PM | 2 | 174 |
| vmtoolsd.exe | C:\Program Files\VMware\VMware Tools\vmtoolsd.exe | NT AUTHORITY\SYSTEM | 3000 | 24293376 | 2203467272192 | 2/5/2021 4:10:56 PM | 10 | 378 |
| vmtoolsd.exe | C:\Program Files\VMware\VMware Tools\vmtoolsd.exe | STUSTARWINDSRV1\Administrator | 5996 | 16887808 | 2203488935936 | 2/5/2021 4:12:35 PM | 3 | 265 |
| wininit.exe | Value Not Found | NT AUTHORITY\SYSTEM | 596 | 7196672 | 2203387449344 | 2/5/2021 4:10:53 PM | 1 | 170 |
| winlogon.exe | C:\Windows\system32\winlogon.exe | NT AUTHORITY\SYSTEM | 664 | 11444224 | 2203418316800 | 2/5/2021 4:10:53 PM | 2 | 258 |
| WmiPrvSE.exe | C:\Windows\sysWOW64\wbem\wmiprvse.exe | NT AUTHORITY\NETWORK SERVICE | 2164 | 8552448 | 70303744 | 2/7/2021 7:00:21 AM | 3 | 170 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\SYSTEM | 200 | 14692352 | 2203409743872 | 2/10/2021 8:51:26 AM | 9 | 299 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\SYSTEM | 5476 | 8814592 | 2203394338816 | 2/10/2021 8:47:11 AM | 6 | 175 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\NETWORK SERVICE | 3508 | 36671488 | 2203451547648 | 2/5/2021 4:12:08 PM | 13 | 719 |
| Name | Path | Start Name | Process Id | WorkingSet Size | Virtual Size | Creation Date | Thread Count | Handle Count |
|---|---|---|---|---|---|---|---|---|
| ApplicationFrameHost.exe | C:\Windows\system32\ApplicationFrameHost.exe | STUSTARWINDSRV2\Administrator | 3048 | 24412160 | 2203519619072 | 2/5/2021 4:14:07 PM | 1 | 259 |
| ccSvcHst.exe | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe | STUSTARWINDSRV2\Administrator | 4252 | 3727360 | 124403712 | 2/5/2021 4:12:24 PM | 17 | 442 |
| ccSvcHst.exe | C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe | NT AUTHORITY\SYSTEM | 2884 | 193810432 | 583360512 | 2/5/2021 4:10:55 PM | 87 | 2551 |
| clussvc.exe | C:\Windows\Cluster\clussvc.exe | NT AUTHORITY\SYSTEM | 3116 | 33566720 | 2203454488576 | 2/5/2021 4:10:56 PM | 61 | 1287 |
| CPrepSrv.exe | C:\Windows\System32\CprepSrv.exe | NT AUTHORITY\SYSTEM | 6724 | 12591104 | 2203411275776 | 2/10/2021 8:52:33 AM | 12 | 269 |
| csrss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 596 | 5406720 | 2203416125440 | 2/5/2021 4:10:53 PM | 12 | 403 |
| csrss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 512 | 5693440 | 2203410173952 | 2/5/2021 4:10:53 PM | 11 | 670 |
| ctfmon.exe | C:\Windows\system32\ctfmon.exe | STUSTARWINDSRV2\Administrator | 6152 | 16175104 | 2203456417792 | 2/5/2021 4:12:25 PM | 8 | 399 |
| dllhost.exe | C:\Windows\system32\DllHost.exe | STUSTARWINDSRV2\Administrator | 6228 | 11845632 | 2203503779840 | 2/9/2021 8:08:32 AM | 5 | 225 |
| dllhost.exe | C:\Windows\system32\dllhost.exe | NT AUTHORITY\SYSTEM | 3544 | 12890112 | 2203410583552 | 2/5/2021 4:12:08 PM | 9 | 238 |
| dwm.exe | C:\Windows\system32\dwm.exe | Window Manager\DWM-1 | 792 | 64483328 | 2203571871744 | 2/5/2021 4:10:54 PM | 12 | 635 |
| explorer.exe | C:\Windows\Explorer.EXE | STUSTARWINDSRV2\Administrator | 6452 | 115879936 | 2203881672704 | 2/5/2021 4:12:26 PM | 37 | 1861 |
| fontdrvhost.exe | C:\Windows\system32\fontdrvhost.exe | Font Driver Host\UMFD-1 | 896 | 5410816 | 2203418312704 | 2/5/2021 4:10:54 PM | 5 | 49 |
| fontdrvhost.exe | C:\Windows\system32\fontdrvhost.exe | Font Driver Host\UMFD-0 | 892 | 3825664 | 2203414392832 | 2/5/2021 4:10:54 PM | 5 | 49 |
| iexplore.exe | C:\Program Files\Internet Explorer\iexplore.exe | STUSTARWINDSRV2\Administrator | 7784 | 32854016 | 2203548884992 | 2/5/2021 4:13:26 PM | 8 | 606 |
| iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | STUSTARWINDSRV2\Administrator | 6404 | 103387136 | 188755968 | 2/5/2021 4:16:07 PM | 5 | 467 |
| iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | STUSTARWINDSRV2\Administrator | 7832 | 20828160 | 188755968 | 2/5/2021 4:13:27 PM | 5 | 470 |
| LogonUI.exe | C:\Windows\system32\LogonUI.exe | NT AUTHORITY\SYSTEM | 2928 | 54226944 | 2203659010048 | 2/9/2021 8:52:28 AM | 10 | 509 |
| lsass.exe | C:\Windows\system32\lsass.exe | NT AUTHORITY\SYSTEM | 744 | 26951680 | 2203421040640 | 2/5/2021 4:10:53 PM | 10 | 1847 |
| mmc.exe | C:\Windows\system32\mmc.exe | STUSTARWINDSRV2\Administrator | 3828 | 35450880 | 2204084908032 | 2/9/2021 8:08:34 AM | 15 | 741 |
| mmc.exe | C:\Windows\system32\mmc.exe | STUSTARWINDSRV2\Administrator | 1112 | 119685120 | 2204556865536 | 2/5/2021 4:12:34 PM | 39 | 2382 |
| msdtc.exe | C:\Windows\System32\msdtc.exe | NT AUTHORITY\NETWORK SERVICE | 4356 | 11001856 | 2203405463552 | 2/5/2021 4:12:11 PM | 9 | 234 |
| Registry | Value Not Found | NT AUTHORITY\SYSTEM | 88 | 157151232 | 161284096 | 2/5/2021 4:10:48 PM | 4 | 0 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 124 | 11800576 | 2203407843328 | 2/5/2021 4:12:15 PM | 11 | 230 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 5744 | 19681280 | 2203418001408 | 2/5/2021 4:12:19 PM | 9 | 384 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 8 | 15376384 | 2203422416896 | 2/5/2021 4:12:15 PM | 9 | 287 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 5788 | 17506304 | 2203416285184 | 2/5/2021 4:12:19 PM | 10 | 361 |
| rhs.exe | C:\Windows\Cluster\rhs.exe | NT AUTHORITY\SYSTEM | 2832 | 12869632 | 2203411111936 | 2/5/2021 4:12:15 PM | 11 | 273 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV2\Administrator | 6944 | 17313792 | 2203459080192 | 2/5/2021 4:12:28 PM | 4 | 229 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV2\Administrator | 608 | 18378752 | 2203468193792 | 2/5/2021 4:12:33 PM | 1 | 323 |
| RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | STUSTARWINDSRV2\Administrator | 7060 | 23855104 | 2203499380736 | 2/5/2021 4:12:28 PM | 5 | 423 |
| SearchUI.exe | C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe | STUSTARWINDSRV2\Administrator | 6880 | 143548416 | 2238599962624 | 2/5/2021 4:12:27 PM | 36 | 1149 |
| sepWscSvc64.exe | Value Not Found | NT AUTHORITY\SYSTEM | 2992 | 9293824 | 4377350144 | 2/5/2021 4:10:55 PM | 6 | 179 |
| services.exe | Value Not Found | NT AUTHORITY\SYSTEM | 728 | 14442496 | 2203404967936 | 2/5/2021 4:10:53 PM | 7 | 630 |
| ShellExperienceHost.exe | C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe | STUSTARWINDSRV2\Administrator | 6776 | 72634368 | 2203689074688 | 2/5/2021 4:12:27 PM | 14 | 856 |
| sihost.exe | C:\Windows\system32\sihost.exe | STUSTARWINDSRV2\Administrator | 5524 | 27439104 | 2203484864512 | 2/5/2021 4:12:24 PM | 6 | 477 |
| smartscreen.exe | C:\Windows\System32\smartscreen.exe | STUSTARWINDSRV2\Administrator | 864 | 26275840 | 2238103408640 | 2/5/2021 4:12:34 PM | 6 | 393 |
| smss.exe | Value Not Found | NT AUTHORITY\SYSTEM | 364 | 1245184 | 2203358597120 | 2/5/2021 4:10:51 PM | 2 | 53 |
| spoolsv.exe | C:\Windows\System32\spoolsv.exe | NT AUTHORITY\SYSTEM | 2368 | 17244160 | 2203460378624 | 2/5/2021 4:10:55 PM | 7 | 471 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 5480 | 12587008 | 2203409563648 | 2/5/2021 4:12:24 PM | 5 | 206 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1348 | 12804096 | 2203438395392 | 2/5/2021 4:14:13 PM | 3 | 370 |
| svchost.exe | C:\Windows\system32\svchost.exe | STUSTARWINDSRV2\Administrator | 5720 | 29683712 | 2203519307776 | 2/5/2021 4:12:24 PM | 3 | 375 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1760 | 6123520 | 2203384553472 | 2/10/2021 8:47:26 AM | 2 | 126 |
| svchost.exe | C:\Windows\system32\svchost.exe | STUSTARWINDSRV2\Administrator | 5436 | 15065088 | 2203433889792 | 2/5/2021 4:12:24 PM | 4 | 269 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 8072 | 14340096 | 2203580571648 | 2/5/2021 4:13:31 PM | 8 | 289 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 8000 | 20484096 | 2203443871744 | 2/5/2021 4:13:31 PM | 21 | 326 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 7632 | 12013568 | 2203406340096 | 2/5/2021 4:20:05 PM | 6 | 235 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 7012 | 74141696 | 2203510644736 | 2/5/2021 4:13:32 PM | 9 | 610 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 7636 | 11063296 | 2203396268032 | 2/5/2021 4:14:08 PM | 2 | 143 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 2400 | 5451776 | 2203379965952 | 2/5/2021 4:13:47 PM | 3 | 122 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 5596 | 18329600 | 2203450548224 | 2/5/2021 4:13:33 PM | 6 | 309 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 6160 | 9183232 | 2203406131200 | 2/5/2021 4:21:34 PM | 3 | 186 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 3044 | 29106176 | 2203577626624 | 2/10/2021 8:47:14 AM | 14 | 376 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 516 | 7520256 | 2203387826176 | 2/5/2021 4:12:25 PM | 4 | 171 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 888 | 12328960 | 2203398230016 | 2/5/2021 4:12:25 PM | 2 | 160 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 6244 | 14303232 | 2203426443264 | 2/5/2021 4:12:25 PM | 5 | 251 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 7852 | 18579456 | 2203423559680 | 2/6/2021 2:10:56 PM | 3 | 265 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 4120 | 10383360 | 2203544715264 | 2/6/2021 2:10:56 PM | 4 | 186 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2796 | 8323072 | 2203392192512 | 2/6/2021 2:11:37 PM | 7 | 170 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 1532 | 13479936 | 2203409068032 | 2/5/2021 4:10:54 PM | 6 | 372 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1544 | 12312576 | 2203404304384 | 2/5/2021 4:10:54 PM | 5 | 253 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1480 | 20422656 | 2203425648640 | 2/5/2021 4:10:54 PM | 12 | 408 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1248 | 6033408 | 2203392684032 | 2/5/2021 4:10:54 PM | 2 | 159 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1360 | 21004288 | 2203429609472 | 2/5/2021 4:10:54 PM | 8 | 435 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1580 | 11763712 | 2203431411712 | 2/5/2021 4:10:54 PM | 2 | 228 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1768 | 14831616 | 2203440517120 | 2/5/2021 4:10:54 PM | 10 | 370 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1788 | 7303168 | 2203429355520 | 2/5/2021 4:10:54 PM | 5 | 159 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1732 | 8527872 | 2203395149824 | 2/5/2021 4:10:54 PM | 2 | 174 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1608 | 9224192 | 2203398729728 | 2/5/2021 4:10:54 PM | 4 | 435 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1632 | 5890048 | 2203387326464 | 2/5/2021 4:10:54 PM | 2 | 162 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 1224 | 10121216 | 2203405324288 | 2/5/2021 4:10:54 PM | 11 | 269 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 988 | 20172800 | 2203412348928 | 2/5/2021 4:10:54 PM | 9 | 1031 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 64 | 8290304 | 2203395432448 | 2/5/2021 4:10:54 PM | 4 | 276 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 872 | 23891968 | 2203434962944 | 2/5/2021 4:10:54 PM | 11 | 857 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 3024 | 13750272 | 2203420700672 | 2/5/2021 4:10:56 PM | 1 | 170 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 852 | 3969024 | 2203373514752 | 2/5/2021 4:10:53 PM | 1 | 85 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1044 | 7233536 | 2203392397312 | 2/5/2021 4:10:54 PM | 5 | 152 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1128 | 12115968 | 2203401560064 | 2/5/2021 4:10:54 PM | 1 | 149 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1180 | 8462336 | 2203390881792 | 2/5/2021 4:10:54 PM | 5 | 238 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1116 | 10141696 | 2203397951488 | 2/5/2021 4:10:54 PM | 1 | 212 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1052 | 8134656 | 2203391627264 | 2/5/2021 4:10:54 PM | 4 | 219 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1064 | 8765440 | 2203388698624 | 2/5/2021 4:10:54 PM | 4 | 140 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2760 | 36192256 | 2203472293888 | 2/5/2021 4:10:55 PM | 9 | 512 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 2836 | 6877184 | 2203389165568 | 2/5/2021 4:10:55 PM | 1 | 133 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 2724 | 16031744 | 2203483983872 | 2/5/2021 4:10:55 PM | 5 | 256 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2740 | 12283904 | 2203406622720 | 2/5/2021 4:10:55 PM | 7 | 254 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2904 | 24084480 | 2203448229888 | 2/5/2021 4:10:55 PM | 16 | 355 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 3004 | 6475776 | 2203389419520 | 2/10/2021 8:52:34 AM | 6 | 119 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 3160 | 12648448 | 2203414351872 | 2/5/2021 4:10:56 PM | 11 | 387 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2920 | 6725632 | 2207682600960 | 2/5/2021 4:10:55 PM | 2 | 136 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2960 | 5705728 | 2203384336384 | 2/5/2021 4:10:55 PM | 3 | 128 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 2416 | 12304384 | 2203405139968 | 2/5/2021 4:10:55 PM | 5 | 460 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\SYSTEM | 1396 | 14983168 | 2203440828416 | 2/5/2021 4:10:55 PM | 6 | 256 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 2016 | 7979008 | 2203391782912 | 2/5/2021 4:10:55 PM | 3 | 166 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 1972 | 7409664 | 2203392405504 | 2/5/2021 4:10:55 PM | 4 | 154 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1804 | 8867840 | 2203395862528 | 2/5/2021 4:10:54 PM | 7 | 319 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2292 | 30015488 | 2203458129920 | 2/5/2021 4:10:55 PM | 22 | 712 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\LOCAL SERVICE | 1832 | 9441280 | 2203396780032 | 2/5/2021 4:10:54 PM | 4 | 314 |
| svchost.exe | C:\Windows\System32\svchost.exe | NT AUTHORITY\NETWORK SERVICE | 2076 | 10027008 | 2203399643136 | 2/5/2021 4:10:55 PM | 5 | 229 |
| svchost.exe | C:\Windows\system32\svchost.exe | NT AUTHORITY\SYSTEM | 2152 | 9707520 | 2203395485696 | 2/5/2021 4:10:55 PM | 3 | 219 |
| System | Value Not Found | Value Not Found | 4 | 159744 | 3907584 | 2/5/2021 4:10:51 PM | 192 | 2936 |
| System Idle Process | Value Not Found | Value Not Found | 0 | 8192 | 4096 | 2/5/2021 4:10:51 PM | 2 | 0 |
| taskhostw.exe | C:\Windows\system32\taskhostw.exe | STUSTARWINDSRV2\Administrator | 5856 | 15454208 | 2203510083584 | 2/5/2021 4:12:24 PM | 4 | 237 |
| TiWorker.exe | C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.1450_none_56e6965b991df4af\TiWorker.exe | NT AUTHORITY\SYSTEM | 7556 | 28094464 | 2203449982976 | 2/10/2021 8:51:48 AM | 5 | 194 |
| TrustedInstaller.exe | C:\Windows\servicing\TrustedInstaller.exe | NT AUTHORITY\SYSTEM | 5192 | 7438336 | 2203390279680 | 2/10/2021 8:51:48 AM | 7 | 137 |
| VGAuthService.exe | C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe | NT AUTHORITY\SYSTEM | 2976 | 10711040 | 4409135104 | 2/5/2021 4:10:55 PM | 2 | 174 |
| vmtoolsd.exe | C:\Program Files\VMware\VMware Tools\vmtoolsd.exe | STUSTARWINDSRV2\Administrator | 1728 | 16846848 | 2203488935936 | 2/5/2021 4:12:34 PM | 3 | 265 |
| vmtoolsd.exe | C:\Program Files\VMware\VMware Tools\vmtoolsd.exe | NT AUTHORITY\SYSTEM | 2984 | 24289280 | 2203466223616 | 2/5/2021 4:10:55 PM | 9 | 376 |
| wininit.exe | Value Not Found | NT AUTHORITY\SYSTEM | 588 | 7188480 | 2203387449344 | 2/5/2021 4:10:53 PM | 1 | 170 |
| winlogon.exe | C:\Windows\system32\winlogon.exe | NT AUTHORITY\SYSTEM | 652 | 11374592 | 2203421483008 | 2/5/2021 4:10:53 PM | 2 | 259 |
| WmiPrvSE.exe | C:\Windows\sysWOW64\wbem\wmiprvse.exe | NT AUTHORITY\NETWORK SERVICE | 2464 | 8540160 | 70303744 | 2/7/2021 7:00:31 AM | 3 | 170 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\SYSTEM | 3768 | 18792448 | 2203442806784 | 2/5/2021 4:12:08 PM | 8 | 293 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\SYSTEM | 7920 | 16728064 | 2203415805952 | 2/10/2021 8:51:48 AM | 15 | 357 |
| WmiPrvSE.exe | C:\Windows\system32\wbem\wmiprvse.exe | NT AUTHORITY\NETWORK SERVICE | 3784 | 35876864 | 2203453325312 | 2/5/2021 4:12:08 PM | 16 | 730 |
| Manufacturer | Model | Driver Name | Number of Ports | Driver Version | Firmware Version | Serial Number | Status | Optional ROM Version | Unique Adapter ID |
|---|---|---|---|---|---|---|---|---|---|
| LSI Corporation | SAS3444 | lsi_sas | 8 | 1.34.03.83 | 00.00.00.00 | The SAS controller is functioning normally. | 05.02.00.00 | 5766020826162429424 | |
| LSI Corporation | SAS3444 | lsi_sas | 8 | 1.34.03.83 | 01.03.41.32 | The SAS controller is functioning normally. | 05.02.00.00 | 5766020826162429168 |
| Manufacturer | Model | Driver Name | Number of Ports | Driver Version | Firmware Version | Serial Number | Status | Optional ROM Version | Unique Adapter ID |
|---|---|---|---|---|---|---|---|---|---|
| LSI Corporation | SAS3444 | lsi_sas | 8 | 1.34.03.83 | 00.00.00.00 | The SAS controller is functioning normally. | 05.02.00.00 | 5766020817768802272 | |
| LSI Corporation | SAS3444 | lsi_sas | 8 | 1.34.03.83 | 01.03.41.32 | The SAS controller is functioning normally. | 05.02.00.00 | 5766020817768802016 |
| Display Name | Name | State | Path | Type | Error Control | Start Name | Start Mode | Started |
|---|---|---|---|---|---|---|---|---|
| ActiveX Installer (AxInstSV) | AxInstSV | Stopped | C:\Windows\system32\svchost.exe -k AxInstSVGroup | Share Process | Normal | LocalSystem | Disabled | False |
| AllJoyn Router Service | AJRouter | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| App Readiness | AppReadiness | Stopped | C:\Windows\System32\svchost.exe -k AppReadiness -p | Share Process | Normal | LocalSystem | Manual | False |
| Application Identity | AppIDSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Manual | False |
| Application Information | Appinfo | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Application Layer Gateway Service | ALG | Stopped | C:\Windows\System32\alg.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Application Management | AppMgmt | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| AppX Deployment Service (AppXSVC) | AppXSvc | Stopped | C:\Windows\system32\svchost.exe -k wsappx -p | Share Process | Normal | LocalSystem | Manual | False |
| Auto Time Zone Updater | tzautoupdate | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| AVCTP service | BthAvctpSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Background Intelligent Transfer Service | BITS | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Background Tasks Infrastructure Service | BrokerInfrastructure | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Base Filtering Engine | BFE | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Bluetooth Audio Gateway Service | BTAGService | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Bluetooth Support Service | bthserv | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Capability Access Manager Service | camsvc | Stopped | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | False |
| CaptureService_71fb6 | CaptureService_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Unknown | Normal | Value Not Found | Manual | False |
| Certificate Propagation | CertPropSvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs | Share Process | Normal | LocalSystem | Manual | False |
| Client License Service (ClipSVC) | ClipSVC | Stopped | C:\Windows\System32\svchost.exe -k wsappx -p | Share Process | Normal | LocalSystem | Manual | False |
| Clipboard User Service_71fb6 | cbdhsvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | Unknown | Normal | Value Not Found | Manual | False |
| Cluster Service | ClusSvc | Running | C:\Windows\Cluster\clussvc.exe -s | Own Process | Normal | LocalSystem | Auto | True |
| CNG Key Isolation | KeyIso | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Manual | True |
| COM+ Event System | EventSystem | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| COM+ System Application | COMSysApp | Running | C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Own Process | Normal | LocalSystem | Manual | True |
| Connected Devices Platform Service | CDPSvc | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Connected Devices Platform User Service_71fb6 | CDPUserSvc_71fb6 | Running | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Normal | Value Not Found | Auto | True |
| Connected User Experiences and Telemetry | DiagTrack | Running | C:\Windows\System32\svchost.exe -k utcsvc -p | Own Process | Normal | LocalSystem | Auto | True |
| ConsentUX_71fb6 | ConsentUxUserSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Manual | False |
| Contact Data_71fb6 | PimIndexMaintenanceSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| CoreMessaging | CoreMessagingRegistrar | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| CPrepSrv | CPrepSrv | Running | C:\Windows\System32\CprepSrv.exe | Own Process | Normal | LocalSystem | Manual | True |
| Credential Manager | VaultSvc | Stopped | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Manual | False |
| Cryptographic Services | CryptSvc | Running | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT Authority\NetworkService | Auto | True |
| Data Sharing Service | DsSvc | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Ignore | LocalSystem | Manual | True |
| DCOM Server Process Launcher | DcomLaunch | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Delivery Optimization | DoSvc | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| Device Association Service | DeviceAssociationService | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Device Install Service | DeviceInstall | Stopped | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Manual | False |
| Device Management Enrollment Service | DmEnrollmentSvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Own Process | Normal | LocalSystem | Manual | False |
| Device Management Wireless Application Protocol (WAP) Push message Routing Service | dmwappushservice | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Device Setup Manager | DsmSvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| DevicePicker_71fb6 | DevicePickerUserSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Disabled | False |
| DevicesFlow_71fb6 | DevicesFlowUserSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Manual | False |
| DevQuery Background Discovery Broker | DevQueryBroker | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| DHCP Client | Dhcp | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Diagnostic Policy Service | DPS | Running | C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Diagnostic Service Host | WdiServiceHost | Stopped | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Diagnostic System Host | WdiSystemHost | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Distributed Link Tracking Client | TrkWks | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Auto | True |
| Distributed Transaction Coordinator | MSDTC | Running | C:\Windows\System32\msdtc.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| DNS Client | Dnscache | Running | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Downloaded Maps Manager | MapsBroker | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Own Process | Normal | NT AUTHORITY\NetworkService | Disabled | False |
| Embedded Mode | embeddedmode | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Encrypting File System (EFS) | EFS | Stopped | C:\Windows\System32\lsass.exe | Share Process | Normal | LocalSystem | Manual | False |
| Enterprise App Management Service | EntAppSvc | Stopped | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | False |
| Extensible Authentication Protocol | Eaphost | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| FcSrv | FcSrv | Stopped | C:\Windows\System32\FcSrv.exe | Own Process | Normal | LocalSystem | Manual | False |
| File Server Resource Manager | SrmSvc | Running | C:\Windows\system32\svchost.exe -k srmsvcs | Own Process | Normal | LocalSystem | Auto | True |
| File Server Storage Reports Manager | SrmReports | Stopped | C:\Windows\system32\srmhost.exe | Own Process | Normal | LocalSystem | Manual | False |
| Function Discovery Provider Host | fdPHost | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Function Discovery Resource Publication | FDResPub | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Geolocation Service | lfsvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| GraphicsPerfSvc | GraphicsPerfSvc | Stopped | C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup | Share Process | Ignore | LocalSystem | Disabled | False |
| Group Policy Client | gpsvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Human Interface Device Service | hidserv | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| HV Host Service | HvHost | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Data Exchange Service | vmickvpexchange | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Guest Service Interface | vmicguestinterface | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Guest Shutdown Service | vmicshutdown | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Heartbeat Service | vmicheartbeat | Stopped | C:\Windows\system32\svchost.exe -k ICService -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V PowerShell Direct Service | vmicvmsession | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Remote Desktop Virtualization Service | vmicrdv | Stopped | C:\Windows\system32\svchost.exe -k ICService -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Time Synchronization Service | vmictimesync | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Hyper-V Volume Shadow Copy Requestor | vmicvss | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| IKE and AuthIP IPsec Keying Modules | IKEEXT | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Internet Connection Sharing (ICS) | SharedAccess | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| IP Helper | iphlpsvc | Running | C:\Windows\System32\svchost.exe -k NetSvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| IPsec Policy Agent | PolicyAgent | Stopped | C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| KDC Proxy Server service (KPS) | KPSSVC | Stopped | C:\Windows\system32\svchost.exe -k KpsSvcGroup | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| KtmRm for Distributed Transaction Coordinator | KtmRm | Running | C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | True |
| Link-Layer Topology Discovery Mapper | lltdsvc | Stopped | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Local Session Manager | LSM | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Microsoft (R) Diagnostics Hub Standard Collector Service | diagnosticshub.standardcollector.service | Stopped | C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe | Own Process | Normal | LocalSystem | Manual | False |
| Microsoft Account Sign-in Assistant | wlidsvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Microsoft App-V Client | AppVClient | Stopped | C:\Windows\system32\AppVClient.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Microsoft iSCSI Initiator Service | MSiSCSI | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Microsoft Passport | NgcSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Microsoft Passport Container | NgcCtnrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Microsoft Software Shadow Copy Provider | swprv | Stopped | C:\Windows\System32\svchost.exe -k swprv | Own Process | Normal | LocalSystem | Manual | False |
| Microsoft Storage Spaces SMP | smphost | Stopped | C:\Windows\System32\svchost.exe -k smphost | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Microsoft Store Install Service | InstallService | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Own Process | Ignore | LocalSystem | Manual | False |
| Net.Tcp Port Sharing Service | NetTcpPortSharing | Stopped | C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Netlogon | Netlogon | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Auto | True |
| Network Connection Broker | NcbService | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Network Connections | Netman | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Network Connectivity Assistant | NcaSvc | Stopped | C:\Windows\System32\svchost.exe -k NetSvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Network List Service | netprofm | Running | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Network Location Awareness | NlaSvc | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Network Setup Service | NetSetupSvc | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Network Store Interface Service | nsi | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Offline Files | CscService | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Disabled | False |
| OpenSSH Authentication Agent | ssh-agent | Stopped | C:\Windows\System32\OpenSSH\ssh-agent.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Optimize drives | defragsvc | Stopped | C:\Windows\system32\svchost.exe -k defragsvc | Own Process | Normal | localSystem | Manual | False |
| Payments and NFC/SE Manager | SEMgrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Own Process | Ignore | NT AUTHORITY\LocalService | Disabled | False |
| Performance Counter DLL Host | PerfHost | Stopped | C:\Windows\SysWow64\perfhost.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Performance Logs & Alerts | pla | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Phone Service | PhoneSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Disabled | False |
| Plug and Play | PlugPlay | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Manual | True |
| Portable Device Enumerator Service | WPDBusEnum | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted | Share Process | Normal | LocalSystem | Manual | False |
| Power | Power | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Print Spooler | Spooler | Running | C:\Windows\System32\spoolsv.exe | Own Process | Normal | LocalSystem | Auto | True |
| Printer Extensions and Notifications | PrintNotify | Stopped | C:\Windows\system32\svchost.exe -k print | Share Process | Normal | LocalSystem | Manual | False |
| PrintWorkflow_71fb6 | PrintWorkflowUserSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k PrintWorkflow | Unknown | Normal | Value Not Found | Manual | False |
| Problem Reports and Solutions Control Panel Support | wercplsupport | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Program Compatibility Assistant Service | PcaSvc | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Quality Windows Audio Video Experience | QWAVE | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Radio Management Service | RmSvc | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Remote Access Auto Connection Manager | RasAuto | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Remote Access Connection Manager | RasMan | Stopped | C:\Windows\System32\svchost.exe -k netsvcs | Share Process | Normal | localSystem | Manual | False |
| Remote Desktop Configuration | SessionEnv | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Remote Desktop Services | TermService | Stopped | C:\Windows\System32\svchost.exe -k termsvcs | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| Remote Desktop Services UserMode Port Redirector | UmRdpService | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | localSystem | Manual | False |
| Remote Procedure Call (RPC) | RpcSs | Running | C:\Windows\system32\svchost.exe -k rpcss -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | C:\Windows\system32\locator.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Remote Registry | RemoteRegistry | Running | C:\Windows\system32\svchost.exe -k localService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Resultant Set of Policy Provider | RSoPProv | Stopped | C:\Windows\system32\RSoPProv.exe | Share Process | Normal | LocalSystem | Manual | False |
| Routing and Remote Access | RemoteAccess | Stopped | C:\Windows\System32\svchost.exe -k netsvcs | Share Process | Normal | localSystem | Disabled | False |
| RPC Endpoint Mapper | RpcEptMapper | Running | C:\Windows\system32\svchost.exe -k RPCSS -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Secondary Logon | seclogon | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Secure Socket Tunneling Protocol Service | SstpSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Manual | False |
| Security Accounts Manager | SamSs | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Auto | True |
| Sensor Data Service | SensorDataService | Stopped | C:\Windows\System32\SensorDataService.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Sensor Monitoring Service | SensrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Sensor Service | SensorService | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Server | LanmanServer | Running | C:\Windows\System32\svchost.exe -k smbsvcs | Share Process | Normal | LocalSystem | Auto | True |
| Shared PC Account Manager | shpamsvc | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Shell Hardware Detection | ShellHWDetection | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Ignore | LocalSystem | Auto | True |
| Smart Card | SCardSvr | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Smart Card Device Enumeration Service | ScDeviceEnum | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted | Share Process | Normal | LocalSystem | Disabled | False |
| Smart Card Removal Policy | SCPolicySvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs | Share Process | Normal | LocalSystem | Manual | False |
| SMB Witness | SmbWitness | Running | C:\Windows\System32\svchost.exe -k SmbWitness | Own Process | Normal | LocalSystem | Manual | True |
| SNMP Trap | SNMPTRAP | Stopped | C:\Windows\System32\snmptrap.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Software Protection | sppsvc | Stopped | C:\Windows\system32\sppsvc.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Auto | False |
| Special Administration Console Helper | sacsvr | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Spot Verifier | svsvc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| SSDP Discovery | SSDPSRV | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| State Repository Service | StateRepository | Running | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | True |
| Still Image Acquisition Events | WiaRpc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Storage Service | StorSvc | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Storage Tiers Management | TieringEngineService | Stopped | C:\Windows\system32\TieringEngineService.exe | Own Process | Normal | localSystem | Manual | False |
| Symantec Endpoint Protection | SepMasterService | Running | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\sms.dll" /prefetch:1 | Own Process | Normal | LocalSystem | Auto | True |
| Symantec Endpoint Protection Local Proxy Service | SepLpsService | Stopped | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection Local Proxy Service" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\LPSSvc.dll" /prefetch:3 | Own Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Symantec Endpoint Protection WSC Service | sepWscSvc | Running | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin64\sepWscSvc64.exe" | Own Process | Normal | LocalSystem | Auto | True |
| Symantec Network Access Control | SNAC | Stopped | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin64\snac64.exe" | Own Process | Normal | LocalSystem | Manual | False |
| SysMain | SysMain | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Ignore | LocalSystem | Auto | True |
| System Event Notification Service | SENS | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| System Events Broker | SystemEventsBroker | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| System Guard Runtime Monitor Broker | SgrmBroker | Stopped | C:\Windows\system32\SgrmBroker.exe | Own Process | Normal | LocalSystem | Manual | False |
| Target Manager | TargetMgr | Stopped | C:\Windows\Cluster\TargetMgr.exe -s | Own Process | Normal | LocalSystem | Disabled | False |
| Task Scheduler | Schedule | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| TCP/IP NetBIOS Helper | lmhosts | Running | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Telephony | tapisrv | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Themes | Themes | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Time Broker | TimeBrokerSvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Touch Keyboard and Handwriting Panel Service | TabletInputService | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Update Orchestrator Service | UsoSvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| UPnP Device Host | upnphost | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| User Access Logging Service | UALSVC | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Auto | True |
| User Data Access_71fb6 | UserDataSvc_71fb6 | Stopped | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| User Data Storage_71fb6 | UnistoreSvc_71fb6 | Stopped | C:\Windows\System32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| User Experience Virtualization Service | UevAgentService | Stopped | C:\Windows\system32\AgentService.exe | Own Process | Normal | LocalSystem | Disabled | False |
| User Manager | UserManager | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| User Profile Service | ProfSvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Virtual Disk | vds | Stopped | C:\Windows\System32\vds.exe | Own Process | Normal | LocalSystem | Manual | False |
| VMware Alias Manager and Ticket Service | VGAuthService | Running | "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe" | Own Process | Normal | LocalSystem | Auto | True |
| VMware CAF AMQP Communication Service | VMwareCAFCommAmqpListener | Stopped | "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\CommAmqpListener.exe" | Own Process | Normal | LocalSystem | Manual | False |
| VMware CAF Management Agent Service | VMwareCAFManagementAgentHost | Stopped | "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\ManagementAgentHost.exe" | Own Process | Normal | LocalSystem | Manual | False |
| VMware Snapshot Provider | vmvss | Stopped | C:\Windows\system32\dllhost.exe /Processid:{9DFE305A-C6D5-458F-8A5B-4C45BD07AA87} | Own Process | Normal | LocalSystem | Manual | False |
| VMware Tools | VMTools | Running | "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" | Own Process | Normal | LocalSystem | Auto | True |
| Volume Shadow Copy | VSS | Stopped | C:\Windows\system32\vssvc.exe | Own Process | Normal | LocalSystem | Manual | False |
| WalletService | WalletService | Stopped | C:\Windows\System32\svchost.exe -k appmodel -p | Share Process | Ignore | LocalSystem | Disabled | False |
| WarpJITSvc | WarpJITSvc | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted | Own Process | Ignore | NT Authority\LocalService | Manual | False |
| Web Account Manager | TokenBroker | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Windows Audio | Audiosrv | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Audio Endpoint Builder | AudioEndpointBuilder | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Windows Biometric Service | WbioSrvc | Stopped | C:\Windows\system32\svchost.exe -k WbioSvcGroup | Share Process | Normal | LocalSystem | Manual | False |
| Windows Camera Frame Server | FrameServer | Stopped | C:\Windows\System32\svchost.exe -k Camera | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Connection Manager | Wcmsvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Own Process | Normal | NT Authority\LocalService | Auto | True |
| Windows Defender Advanced Threat Protection Service | Sense | Stopped | "C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe" | Own Process | Normal | LocalSystem | Manual | False |
| Windows Defender Antivirus Network Inspection Service | WdNisSvc | Stopped | "C:\Program Files\Windows Defender\NisSrv.exe" | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Defender Antivirus Service | WinDefend | Stopped | "C:\Program Files\Windows Defender\MsMpEng.exe" | Own Process | Normal | LocalSystem | Manual | False |
| Windows Defender Firewall | mpssvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Windows Encryption Provider Host Service | WEPHOSTSVC | Stopped | C:\Windows\system32\svchost.exe -k WepHostSvcGroup | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Error Reporting Service | WerSvc | Stopped | C:\Windows\System32\svchost.exe -k WerSvcGroup | Own Process | Ignore | localSystem | Manual | False |
| Windows Event Collector | Wecsvc | Stopped | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Windows Event Log | EventLog | Running | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Font Cache Service | FontCache | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Image Acquisition (WIA) | stisvc | Stopped | C:\Windows\system32\svchost.exe -k imgsvc | Own Process | Normal | NT Authority\LocalService | Manual | False |
| Windows Insider Service | wisvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Windows Installer | msiserver | Stopped | C:\Windows\system32\msiexec.exe /V | Own Process | Normal | LocalSystem | Manual | False |
| Windows License Manager Service | LicenseManager | Running | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Ignore | NT Authority\LocalService | Manual | True |
| Windows Management Instrumentation | Winmgmt | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Ignore | localSystem | Auto | True |
| Windows Media Player Network Sharing Service | WMPNetworkSvc | Stopped | "C:\Program Files\Windows Media Player\wmpnetwk.exe" | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Windows Mobile Hotspot Service | icssvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Disabled | False |
| Windows Modules Installer | TrustedInstaller | Running | C:\Windows\servicing\TrustedInstaller.exe | Own Process | Normal | localSystem | Manual | True |
| Windows Push Notifications System Service | WpnService | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Windows Push Notifications User Service_71fb6 | WpnUserService_71fb6 | Running | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Auto | True |
| Windows PushToInstall Service | PushToInstall | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Ignore | LocalSystem | Disabled | False |
| Windows Remote Management (WS-Management) | WinRM | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Own Process | Normal | LocalSystem | Auto | True |
| Windows Search | WSearch | Stopped | C:\Windows\system32\SearchIndexer.exe /Embedding | Own Process | Normal | LocalSystem | Disabled | False |
| Windows Security Service | SecurityHealthService | Stopped | C:\Windows\system32\SecurityHealthService.exe | Own Process | Normal | LocalSystem | Manual | False |
| Windows Time | W32Time | Running | C:\Windows\system32\svchost.exe -k LocalService | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Update | wuauserv | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Windows Update Medic Service | WaaSMedicSvc | Running | C:\Windows\system32\svchost.exe -k wusvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| WinHTTP Web Proxy Auto-Discovery Service | WinHttpAutoProxySvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Wired AutoConfig | dot3svc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | localSystem | Manual | False |
| WMI Performance Adapter | wmiApSrv | Stopped | C:\Windows\system32\wbem\WmiApSrv.exe | Own Process | Normal | localSystem | Manual | False |
| Workstation | LanmanWorkstation | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Display Name | Name | State | Path | Type | Error Control | Start Name | Start Mode | Started |
|---|---|---|---|---|---|---|---|---|
| ActiveX Installer (AxInstSV) | AxInstSV | Stopped | C:\Windows\system32\svchost.exe -k AxInstSVGroup | Share Process | Normal | LocalSystem | Disabled | False |
| AllJoyn Router Service | AJRouter | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| App Readiness | AppReadiness | Stopped | C:\Windows\System32\svchost.exe -k AppReadiness -p | Share Process | Normal | LocalSystem | Manual | False |
| Application Identity | AppIDSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Manual | False |
| Application Information | Appinfo | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Application Layer Gateway Service | ALG | Stopped | C:\Windows\System32\alg.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Application Management | AppMgmt | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| AppX Deployment Service (AppXSVC) | AppXSvc | Stopped | C:\Windows\system32\svchost.exe -k wsappx -p | Share Process | Normal | LocalSystem | Manual | False |
| Auto Time Zone Updater | tzautoupdate | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| AVCTP service | BthAvctpSvc | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Background Intelligent Transfer Service | BITS | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Background Tasks Infrastructure Service | BrokerInfrastructure | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Base Filtering Engine | BFE | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Bluetooth Audio Gateway Service | BTAGService | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Bluetooth Support Service | bthserv | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Capability Access Manager Service | camsvc | Stopped | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | False |
| CaptureService_8fbe4 | CaptureService_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Unknown | Normal | Value Not Found | Manual | False |
| Certificate Propagation | CertPropSvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs | Share Process | Normal | LocalSystem | Manual | False |
| Client License Service (ClipSVC) | ClipSVC | Stopped | C:\Windows\System32\svchost.exe -k wsappx -p | Share Process | Normal | LocalSystem | Manual | False |
| Clipboard User Service_8fbe4 | cbdhsvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | Unknown | Normal | Value Not Found | Manual | False |
| Cluster Service | ClusSvc | Running | C:\Windows\Cluster\clussvc.exe -s | Own Process | Normal | LocalSystem | Auto | True |
| CNG Key Isolation | KeyIso | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Manual | True |
| COM+ Event System | EventSystem | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| COM+ System Application | COMSysApp | Running | C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Own Process | Normal | LocalSystem | Manual | True |
| Connected Devices Platform Service | CDPSvc | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Connected Devices Platform User Service_8fbe4 | CDPUserSvc_8fbe4 | Running | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Normal | Value Not Found | Auto | True |
| Connected User Experiences and Telemetry | DiagTrack | Running | C:\Windows\System32\svchost.exe -k utcsvc -p | Own Process | Normal | LocalSystem | Auto | True |
| ConsentUX_8fbe4 | ConsentUxUserSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Manual | False |
| Contact Data_8fbe4 | PimIndexMaintenanceSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| CoreMessaging | CoreMessagingRegistrar | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| CPrepSrv | CPrepSrv | Running | C:\Windows\System32\CprepSrv.exe | Own Process | Normal | LocalSystem | Manual | True |
| Credential Manager | VaultSvc | Stopped | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Manual | False |
| Cryptographic Services | CryptSvc | Running | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT Authority\NetworkService | Auto | True |
| Data Sharing Service | DsSvc | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Ignore | LocalSystem | Manual | True |
| DCOM Server Process Launcher | DcomLaunch | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Delivery Optimization | DoSvc | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| Device Association Service | DeviceAssociationService | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Device Install Service | DeviceInstall | Stopped | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Manual | False |
| Device Management Enrollment Service | DmEnrollmentSvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Own Process | Normal | LocalSystem | Manual | False |
| Device Management Wireless Application Protocol (WAP) Push message Routing Service | dmwappushservice | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Device Setup Manager | DsmSvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| DevicePicker_8fbe4 | DevicePickerUserSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Disabled | False |
| DevicesFlow_8fbe4 | DevicesFlowUserSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k DevicesFlow | Unknown | Normal | Value Not Found | Manual | False |
| DevQuery Background Discovery Broker | DevQueryBroker | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| DHCP Client | Dhcp | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Diagnostic Policy Service | DPS | Running | C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Diagnostic Service Host | WdiServiceHost | Stopped | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Diagnostic System Host | WdiSystemHost | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Distributed Link Tracking Client | TrkWks | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Auto | True |
| Distributed Transaction Coordinator | MSDTC | Running | C:\Windows\System32\msdtc.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| DNS Client | Dnscache | Running | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Downloaded Maps Manager | MapsBroker | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Own Process | Normal | NT AUTHORITY\NetworkService | Disabled | False |
| Embedded Mode | embeddedmode | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Encrypting File System (EFS) | EFS | Stopped | C:\Windows\System32\lsass.exe | Share Process | Normal | LocalSystem | Manual | False |
| Enterprise App Management Service | EntAppSvc | Stopped | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | False |
| Extensible Authentication Protocol | Eaphost | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| FcSrv | FcSrv | Stopped | C:\Windows\System32\FcSrv.exe | Own Process | Normal | LocalSystem | Manual | False |
| File Server Resource Manager | SrmSvc | Running | C:\Windows\system32\svchost.exe -k srmsvcs | Own Process | Normal | LocalSystem | Auto | True |
| File Server Storage Reports Manager | SrmReports | Stopped | C:\Windows\system32\srmhost.exe | Own Process | Normal | LocalSystem | Manual | False |
| Function Discovery Provider Host | fdPHost | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Function Discovery Resource Publication | FDResPub | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Geolocation Service | lfsvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| GraphicsPerfSvc | GraphicsPerfSvc | Stopped | C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup | Share Process | Ignore | LocalSystem | Disabled | False |
| Group Policy Client | gpsvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Human Interface Device Service | hidserv | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| HV Host Service | HvHost | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Data Exchange Service | vmickvpexchange | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Guest Service Interface | vmicguestinterface | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Guest Shutdown Service | vmicshutdown | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Heartbeat Service | vmicheartbeat | Stopped | C:\Windows\system32\svchost.exe -k ICService -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V PowerShell Direct Service | vmicvmsession | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Remote Desktop Virtualization Service | vmicrdv | Stopped | C:\Windows\system32\svchost.exe -k ICService -p | Share Process | Normal | LocalSystem | Manual | False |
| Hyper-V Time Synchronization Service | vmictimesync | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Hyper-V Volume Shadow Copy Requestor | vmicvss | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| IKE and AuthIP IPsec Keying Modules | IKEEXT | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Internet Connection Sharing (ICS) | SharedAccess | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| IP Helper | iphlpsvc | Running | C:\Windows\System32\svchost.exe -k NetSvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| IPsec Policy Agent | PolicyAgent | Stopped | C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| KDC Proxy Server service (KPS) | KPSSVC | Stopped | C:\Windows\system32\svchost.exe -k KpsSvcGroup | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| KtmRm for Distributed Transaction Coordinator | KtmRm | Running | C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | True |
| Link-Layer Topology Discovery Mapper | lltdsvc | Stopped | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Local Session Manager | LSM | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Microsoft (R) Diagnostics Hub Standard Collector Service | diagnosticshub.standardcollector.service | Stopped | C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe | Own Process | Normal | LocalSystem | Manual | False |
| Microsoft Account Sign-in Assistant | wlidsvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Microsoft App-V Client | AppVClient | Stopped | C:\Windows\system32\AppVClient.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Microsoft iSCSI Initiator Service | MSiSCSI | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Microsoft Passport | NgcSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Microsoft Passport Container | NgcCtnrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Microsoft Software Shadow Copy Provider | swprv | Stopped | C:\Windows\System32\svchost.exe -k swprv | Own Process | Normal | LocalSystem | Manual | False |
| Microsoft Storage Spaces SMP | smphost | Stopped | C:\Windows\System32\svchost.exe -k smphost | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Microsoft Store Install Service | InstallService | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Own Process | Ignore | LocalSystem | Manual | False |
| Net.Tcp Port Sharing Service | NetTcpPortSharing | Stopped | C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Netlogon | Netlogon | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Auto | True |
| Network Connection Broker | NcbService | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Network Connections | Netman | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Network Connectivity Assistant | NcaSvc | Stopped | C:\Windows\System32\svchost.exe -k NetSvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Network List Service | netprofm | Running | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Network Location Awareness | NlaSvc | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Network Setup Service | NetSetupSvc | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Network Store Interface Service | nsi | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Offline Files | CscService | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Disabled | False |
| OpenSSH Authentication Agent | ssh-agent | Stopped | C:\Windows\System32\OpenSSH\ssh-agent.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Optimize drives | defragsvc | Stopped | C:\Windows\system32\svchost.exe -k defragsvc | Own Process | Normal | localSystem | Manual | False |
| Payments and NFC/SE Manager | SEMgrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Own Process | Ignore | NT AUTHORITY\LocalService | Disabled | False |
| Performance Counter DLL Host | PerfHost | Stopped | C:\Windows\SysWow64\perfhost.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Performance Logs & Alerts | pla | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Phone Service | PhoneSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Disabled | False |
| Plug and Play | PlugPlay | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Manual | True |
| Portable Device Enumerator Service | WPDBusEnum | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted | Share Process | Normal | LocalSystem | Manual | False |
| Power | Power | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| Print Spooler | Spooler | Running | C:\Windows\System32\spoolsv.exe | Own Process | Normal | LocalSystem | Auto | True |
| Printer Extensions and Notifications | PrintNotify | Stopped | C:\Windows\system32\svchost.exe -k print | Share Process | Normal | LocalSystem | Manual | False |
| PrintWorkflow_8fbe4 | PrintWorkflowUserSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k PrintWorkflow | Unknown | Normal | Value Not Found | Manual | False |
| Problem Reports and Solutions Control Panel Support | wercplsupport | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Program Compatibility Assistant Service | PcaSvc | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Quality Windows Audio Video Experience | QWAVE | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Radio Management Service | RmSvc | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Remote Access Auto Connection Manager | RasAuto | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Remote Access Connection Manager | RasMan | Running | C:\Windows\System32\svchost.exe -k netsvcs | Share Process | Normal | localSystem | Auto | True |
| Remote Desktop Configuration | SessionEnv | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | localSystem | Manual | False |
| Remote Desktop Services | TermService | Stopped | C:\Windows\System32\svchost.exe -k termsvcs | Share Process | Normal | NT Authority\NetworkService | Manual | False |
| Remote Desktop Services UserMode Port Redirector | UmRdpService | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | localSystem | Manual | False |
| Remote Procedure Call (RPC) | RpcSs | Running | C:\Windows\system32\svchost.exe -k rpcss -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | C:\Windows\system32\locator.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Remote Registry | RemoteRegistry | Running | C:\Windows\system32\svchost.exe -k localService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Resultant Set of Policy Provider | RSoPProv | Stopped | C:\Windows\system32\RSoPProv.exe | Share Process | Normal | LocalSystem | Manual | False |
| Routing and Remote Access | RemoteAccess | Stopped | C:\Windows\System32\svchost.exe -k netsvcs | Share Process | Normal | localSystem | Disabled | False |
| RPC Endpoint Mapper | RpcEptMapper | Running | C:\Windows\system32\svchost.exe -k RPCSS -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| Secondary Logon | seclogon | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Secure Socket Tunneling Protocol Service | SstpSvc | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT Authority\LocalService | Manual | True |
| Security Accounts Manager | SamSs | Running | C:\Windows\system32\lsass.exe | Share Process | Normal | LocalSystem | Auto | True |
| Sensor Data Service | SensorDataService | Stopped | C:\Windows\System32\SensorDataService.exe | Own Process | Normal | LocalSystem | Disabled | False |
| Sensor Monitoring Service | SensrSvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Sensor Service | SensorService | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Server | LanmanServer | Running | C:\Windows\System32\svchost.exe -k smbsvcs | Share Process | Normal | LocalSystem | Auto | True |
| Shared PC Account Manager | shpamsvc | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Shell Hardware Detection | ShellHWDetection | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Ignore | LocalSystem | Auto | True |
| Smart Card | SCardSvr | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Smart Card Device Enumeration Service | ScDeviceEnum | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted | Share Process | Normal | LocalSystem | Disabled | False |
| Smart Card Removal Policy | SCPolicySvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs | Share Process | Normal | LocalSystem | Manual | False |
| SMB Witness | SmbWitness | Running | C:\Windows\System32\svchost.exe -k SmbWitness | Own Process | Normal | LocalSystem | Manual | True |
| SNMP Trap | SNMPTRAP | Stopped | C:\Windows\System32\snmptrap.exe | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Software Protection | sppsvc | Stopped | C:\Windows\system32\sppsvc.exe | Own Process | Normal | NT AUTHORITY\NetworkService | Auto | False |
| Special Administration Console Helper | sacsvr | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| Spot Verifier | svsvc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| SSDP Discovery | SSDPSRV | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| State Repository Service | StateRepository | Running | C:\Windows\system32\svchost.exe -k appmodel -p | Share Process | Normal | LocalSystem | Manual | True |
| Still Image Acquisition Events | WiaRpc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Storage Service | StorSvc | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Storage Tiers Management | TieringEngineService | Stopped | C:\Windows\system32\TieringEngineService.exe | Own Process | Normal | localSystem | Manual | False |
| Symantec Endpoint Protection | SepMasterService | Running | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\sms.dll" /prefetch:1 | Own Process | Normal | LocalSystem | Auto | True |
| Symantec Endpoint Protection Local Proxy Service | SepLpsService | Stopped | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection Local Proxy Service" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin\LPSSvc.dll" /prefetch:3 | Own Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| Symantec Endpoint Protection WSC Service | sepWscSvc | Running | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin64\sepWscSvc64.exe" | Own Process | Normal | LocalSystem | Auto | True |
| Symantec Network Access Control | SNAC | Stopped | "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Bin64\snac64.exe" | Own Process | Normal | LocalSystem | Manual | False |
| SysMain | SysMain | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Ignore | LocalSystem | Auto | True |
| System Event Notification Service | SENS | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| System Events Broker | SystemEventsBroker | Running | C:\Windows\system32\svchost.exe -k DcomLaunch -p | Share Process | Normal | LocalSystem | Auto | True |
| System Guard Runtime Monitor Broker | SgrmBroker | Stopped | C:\Windows\system32\SgrmBroker.exe | Own Process | Normal | LocalSystem | Manual | False |
| Target Manager | TargetMgr | Stopped | C:\Windows\Cluster\TargetMgr.exe -s | Own Process | Normal | LocalSystem | Disabled | False |
| Task Scheduler | Schedule | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| TCP/IP NetBIOS Helper | lmhosts | Running | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Telephony | tapisrv | Stopped | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Themes | Themes | Running | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Time Broker | TimeBrokerSvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Touch Keyboard and Handwriting Panel Service | TabletInputService | Running | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | True |
| Update Orchestrator Service | UsoSvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| UPnP Device Host | upnphost | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | Share Process | Normal | NT AUTHORITY\LocalService | Disabled | False |
| User Access Logging Service | UALSVC | Running | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Auto | True |
| User Data Access_8fbe4 | UserDataSvc_8fbe4 | Stopped | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| User Data Storage_8fbe4 | UnistoreSvc_8fbe4 | Stopped | C:\Windows\System32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Manual | False |
| User Experience Virtualization Service | UevAgentService | Stopped | C:\Windows\system32\AgentService.exe | Own Process | Normal | LocalSystem | Disabled | False |
| User Manager | UserManager | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| User Profile Service | ProfSvc | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Virtual Disk | vds | Stopped | C:\Windows\System32\vds.exe | Own Process | Normal | LocalSystem | Manual | False |
| VMware Alias Manager and Ticket Service | VGAuthService | Running | "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe" | Own Process | Normal | LocalSystem | Auto | True |
| VMware CAF AMQP Communication Service | VMwareCAFCommAmqpListener | Stopped | "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\CommAmqpListener.exe" | Own Process | Normal | LocalSystem | Manual | False |
| VMware CAF Management Agent Service | VMwareCAFManagementAgentHost | Stopped | "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\ManagementAgentHost.exe" | Own Process | Normal | LocalSystem | Manual | False |
| VMware Snapshot Provider | vmvss | Stopped | C:\Windows\system32\dllhost.exe /Processid:{9DFE305A-C6D5-458F-8A5B-4C45BD07AA87} | Own Process | Normal | LocalSystem | Manual | False |
| VMware Tools | VMTools | Running | "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" | Own Process | Normal | LocalSystem | Auto | True |
| Volume Shadow Copy | VSS | Stopped | C:\Windows\system32\vssvc.exe | Own Process | Normal | LocalSystem | Manual | False |
| WalletService | WalletService | Stopped | C:\Windows\System32\svchost.exe -k appmodel -p | Share Process | Ignore | LocalSystem | Disabled | False |
| WarpJITSvc | WarpJITSvc | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted | Own Process | Ignore | NT Authority\LocalService | Manual | False |
| Web Account Manager | TokenBroker | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Windows Audio | Audiosrv | Stopped | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Audio Endpoint Builder | AudioEndpointBuilder | Stopped | C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | LocalSystem | Manual | False |
| Windows Biometric Service | WbioSrvc | Stopped | C:\Windows\system32\svchost.exe -k WbioSvcGroup | Share Process | Normal | LocalSystem | Manual | False |
| Windows Camera Frame Server | FrameServer | Stopped | C:\Windows\System32\svchost.exe -k Camera | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Connection Manager | Wcmsvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Own Process | Normal | NT Authority\LocalService | Auto | True |
| Windows Defender Advanced Threat Protection Service | Sense | Stopped | "C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe" | Own Process | Normal | LocalSystem | Manual | False |
| Windows Defender Antivirus Network Inspection Service | WdNisSvc | Stopped | "C:\Program Files\Windows Defender\NisSrv.exe" | Own Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Defender Antivirus Service | WinDefend | Stopped | "C:\Program Files\Windows Defender\MsMpEng.exe" | Own Process | Normal | LocalSystem | Manual | False |
| Windows Defender Firewall | mpssvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | Share Process | Normal | NT Authority\LocalService | Auto | True |
| Windows Encryption Provider Host Service | WEPHOSTSVC | Stopped | C:\Windows\system32\svchost.exe -k WepHostSvcGroup | Share Process | Normal | NT AUTHORITY\LocalService | Manual | False |
| Windows Error Reporting Service | WerSvc | Stopped | C:\Windows\System32\svchost.exe -k WerSvcGroup | Own Process | Ignore | localSystem | Manual | False |
| Windows Event Collector | Wecsvc | Stopped | C:\Windows\system32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Windows Event Log | EventLog | Running | C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Font Cache Service | FontCache | Running | C:\Windows\system32\svchost.exe -k LocalService -p | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Image Acquisition (WIA) | stisvc | Stopped | C:\Windows\system32\svchost.exe -k imgsvc | Own Process | Normal | NT Authority\LocalService | Manual | False |
| Windows Insider Service | wisvc | Stopped | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Disabled | False |
| Windows Installer | msiserver | Stopped | C:\Windows\system32\msiexec.exe /V | Own Process | Normal | LocalSystem | Manual | False |
| Windows License Manager Service | LicenseManager | Running | C:\Windows\System32\svchost.exe -k LocalService -p | Share Process | Ignore | NT Authority\LocalService | Manual | True |
| Windows Management Instrumentation | Winmgmt | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Ignore | localSystem | Auto | True |
| Windows Media Player Network Sharing Service | WMPNetworkSvc | Stopped | "C:\Program Files\Windows Media Player\wmpnetwk.exe" | Own Process | Normal | NT AUTHORITY\NetworkService | Manual | False |
| Windows Mobile Hotspot Service | icssvc | Stopped | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT Authority\LocalService | Disabled | False |
| Windows Modules Installer | TrustedInstaller | Running | C:\Windows\servicing\TrustedInstaller.exe | Own Process | Normal | localSystem | Manual | True |
| Windows Push Notifications System Service | WpnService | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Auto | True |
| Windows Push Notifications User Service_8fbe4 | WpnUserService_8fbe4 | Running | C:\Windows\system32\svchost.exe -k UnistackSvcGroup | Unknown | Ignore | Value Not Found | Auto | True |
| Windows PushToInstall Service | PushToInstall | Stopped | C:\Windows\System32\svchost.exe -k netsvcs -p | Share Process | Ignore | LocalSystem | Disabled | False |
| Windows Remote Management (WS-Management) | WinRM | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Own Process | Normal | LocalSystem | Auto | True |
| Windows Search | WSearch | Stopped | C:\Windows\system32\SearchIndexer.exe /Embedding | Own Process | Normal | LocalSystem | Disabled | False |
| Windows Security Service | SecurityHealthService | Stopped | C:\Windows\system32\SecurityHealthService.exe | Own Process | Normal | LocalSystem | Manual | False |
| Windows Time | W32Time | Running | C:\Windows\system32\svchost.exe -k LocalService | Share Process | Normal | NT AUTHORITY\LocalService | Auto | True |
| Windows Update | wuauserv | Running | C:\Windows\system32\svchost.exe -k netsvcs -p | Share Process | Normal | LocalSystem | Manual | True |
| Windows Update Medic Service | WaaSMedicSvc | Stopped | C:\Windows\system32\svchost.exe -k wusvcs -p | Share Process | Normal | LocalSystem | Manual | False |
| WinHTTP Web Proxy Auto-Discovery Service | WinHttpAutoProxySvc | Running | C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p | Share Process | Normal | NT AUTHORITY\LocalService | Manual | True |
| Wired AutoConfig | dot3svc | Stopped | C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p | Share Process | Normal | localSystem | Manual | False |
| WMI Performance Adapter | wmiApSrv | Stopped | C:\Windows\system32\wbem\WmiApSrv.exe | Own Process | Normal | localSystem | Manual | False |
| Workstation | LanmanWorkstation | Running | C:\Windows\System32\svchost.exe -k NetworkService -p | Share Process | Normal | NT AUTHORITY\NetworkService | Auto | True |
| KB Article | Title | Support | Security Bulletins |
|---|---|---|---|
| 4570333 | 2020-09 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB4570333) | https://support.microsoft.com/help/4570333 | |
| 4576627 | 2020-09 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB4576627) | http://support.microsoft.com |
| KB Article | Title | Support | Security Bulletins |
|---|---|---|---|
| 4570333 | 2020-09 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB4570333) | https://support.microsoft.com/help/4570333 | |
| 4576627 | 2020-09 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB4576627) | http://support.microsoft.com |
| Name | Description | Path | Version | Service Type | Started | Start Mode | State |
|---|---|---|---|---|---|---|---|
| 1394ohci | 1394 OHCI Compliant Host Controller | C:\Windows\system32\drivers\1394ohci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| 3ware | 3ware | C:\Windows\system32\drivers\3ware.sys | 5.1.0.51 | Kernel Driver | False | Manual | Stopped |
| ACPI | Microsoft ACPI Driver | C:\Windows\system32\drivers\ACPI.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| AcpiDev | ACPI Devices driver | C:\Windows\system32\drivers\AcpiDev.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| acpiex | Microsoft ACPIEx Driver | C:\Windows\system32\Drivers\acpiex.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| acpipagr | ACPI Processor Aggregator Driver | C:\Windows\system32\drivers\acpipagr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| AcpiPmi | ACPI Power Meter Driver | C:\Windows\system32\drivers\acpipmi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| acpitime | ACPI Wake Alarm Driver | C:\Windows\system32\drivers\acpitime.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ADP80XX | ADP80XX | C:\Windows\system32\drivers\ADP80XX.SYS | 1.3.0.10769 | Kernel Driver | False | Manual | Stopped |
| AFD | Ancillary Function Driver for Winsock | C:\Windows\system32\drivers\afd.sys | 10.0.17763.1432 | Kernel Driver | True | System | Running |
| afunix | afunix | C:\Windows\system32\drivers\afunix.sys | 10.0.17763.1369 | Kernel Driver | True | System | Running |
| ahcache | Application Compatibility Cache | C:\Windows\system32\DRIVERS\ahcache.sys | 10.0.17763.1432 | Kernel Driver | True | System | Running |
| AmdK8 | AMD K8 Processor Driver | C:\Windows\system32\drivers\amdk8.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| AmdPPM | AMD Processor Driver | C:\Windows\system32\drivers\amdppm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| amdsata | amdsata | C:\Windows\system32\drivers\amdsata.sys | 1.1.3.277 | Kernel Driver | False | Manual | Stopped |
| amdsbs | amdsbs | C:\Windows\system32\drivers\amdsbs.sys | 3.7.1540.43 | Kernel Driver | False | Manual | Stopped |
| amdxata | amdxata | C:\Windows\system32\drivers\amdxata.sys | 1.1.3.277 | Kernel Driver | False | Manual | Stopped |
| AppID | AppID Driver | C:\Windows\system32\drivers\appid.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| applockerfltr | Smartlocker Filter Driver | C:\Windows\system32\drivers\applockerfltr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| AppvStrm | AppvStrm | C:\Windows\system32\drivers\AppvStrm.sys | 10.0.17763.1007 | File System Driver | False | Manual | Stopped |
| AppvVemgr | AppvVemgr | C:\Windows\system32\drivers\AppvVemgr.sys | 10.0.17763.348 | File System Driver | False | Manual | Stopped |
| AppvVfs | AppvVfs | C:\Windows\system32\drivers\AppvVfs.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| arcsas | Adaptec SAS/SATA-II RAID Storport's Miniport Driver | C:\Windows\system32\drivers\arcsas.sys | 7.5.0.32048 | Kernel Driver | False | Manual | Stopped |
| AsyncMac | RAS Asynchronous Media Driver | C:\Windows\system32\drivers\asyncmac.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| atapi | IDE Channel | C:\Windows\system32\drivers\atapi.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| b06bdrv | QLogic Network Adapter VBD | C:\Windows\system32\drivers\bxvbda.sys | 7.12.31.105 | Kernel Driver | False | Manual | Stopped |
| bam | Background Activity Moderator Driver | C:\Windows\system32\drivers\bam.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| BasicDisplay | BasicDisplay | C:\Windows\system32\DriverStore\FileRepository\basicdisplay.inf_amd64_5103ac179273be89\BasicDisplay.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| BasicRender | BasicRender | C:\Windows\system32\DriverStore\FileRepository\basicrender.inf_amd64_0b8d03c3bc0e7fd9\BasicRender.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| bcmfn2 | bcmfn2 Service | C:\Windows\system32\drivers\bcmfn2.sys | 6.3.9600.17336 | Kernel Driver | False | Manual | Stopped |
| Beep | Beep | C:\Windows\system32\drivers\Beep.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| bfadfcoei | bfadfcoei | C:\Windows\system32\drivers\bfadfcoei.sys | 10.0.10060.0 | Kernel Driver | False | Manual | Stopped |
| bfadi | bfadi | C:\Windows\system32\drivers\bfadi.sys | 10.0.10060.0 | Kernel Driver | False | Manual | Stopped |
| BHDrvx64 | BHDrvx64 | \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Data\Definitions\BASHDefs\20210201.001\BHDrvx64.sys | 12.1.0.271 | Kernel Driver | True | System | Running |
| bindflt | Windows Bind Filter Driver | C:\Windows\system32\drivers\bindflt.sys | 10.0.17763.1075 | File System Driver | False | Manual | Stopped |
| bowser | Browser | C:\Windows\system32\DRIVERS\bowser.sys | 10.0.17763.652 | File System Driver | True | Manual | Running |
| BthEnum | Bluetooth Enumerator Service | C:\Windows\system32\drivers\BthEnum.sys | 10.0.17763.194 | Kernel Driver | False | Manual | Stopped |
| BthLEEnum | Bluetooth Low Energy Driver | C:\Windows\system32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys | 10.0.17763.592 | Kernel Driver | False | Manual | Stopped |
| BthMini | Bluetooth Radio Driver | C:\Windows\system32\drivers\BTHMINI.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| BTHPORT | Bluetooth Port Driver | C:\Windows\system32\drivers\BTHport.sys | 10.0.17763.678 | Kernel Driver | False | Manual | Stopped |
| BTHUSB | Bluetooth Radio USB Driver | C:\Windows\system32\drivers\BTHUSB.sys | 10.0.17763.678 | Kernel Driver | False | Manual | Stopped |
| bttflt | Microsoft Hyper-V VHDPMEM BTT Filter | C:\Windows\system32\drivers\bttflt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| buttonconverter | Service for Portable Device Control devices | C:\Windows\system32\drivers\buttonconverter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| bxfcoe | QLogic FCoE Offload driver | C:\Windows\system32\drivers\bxfcoe.sys | 7.14.15.2 | Kernel Driver | False | Manual | Stopped |
| bxois | QLogic Offload iSCSI Driver | C:\Windows\system32\drivers\bxois.sys | 7.14.7.2 | Kernel Driver | False | Manual | Stopped |
| CapImg | HID driver for CapImg touch screen | C:\Windows\system32\drivers\capimg.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Cbafilt | Cbafilt | C:\Windows\system32\drivers\cbafilt.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| CCFFilter | Cluster Client Failover Filter | C:\Windows\system32\drivers\CCFFilter.sys | 10.0.17763.652 | File System Driver | True | Auto | Running |
| ccSettings_{32447444-08D5-4B62-AF83-EE909CE470C6} | Symantec Endpoint Protection 14.2.3335.1000.105 Settings Manager | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\ccSetx64.sys | 13.4.0.26 | Kernel Driver | True | System | Running |
| cdfs | CD/DVD File System Reader | C:\Windows\system32\DRIVERS\cdfs.sys | 10.0.17763.379 | File System Driver | False | Disabled | Stopped |
| cdrom | CD-ROM Driver | C:\Windows\system32\drivers\cdrom.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| cht4iscsi | cht4iscsi | C:\Windows\system32\drivers\cht4sx64.sys | 6.9.12.400 | Kernel Driver | False | Manual | Stopped |
| cht4vbd | Chelsio Virtual Bus Driver | C:\Windows\system32\drivers\cht4vx64.sys | 6.9.12.400 | Kernel Driver | False | Manual | Stopped |
| CldFlt | Windows Cloud Files Filter Driver | C:\Windows\system32\drivers\cldflt.sys | 10.0.17763.1007 | File System Driver | True | Auto | Running |
| CLFS | Common Log (CLFS) | C:\Windows\system32\drivers\CLFS.sys | 10.0.17763.1457 | Kernel Driver | True | Boot | Running |
| clusbflt | Cluster BFlt Driver | C:\Windows\system32\drivers\clusbflt.sys | 10.0.17763.1369 | Kernel Driver | True | Boot | Running |
| ClusDisk | Cluster Disk Driver | C:\Windows\system32\drivers\ClusDisk.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| clusport | clusport | C:\Windows\system32\drivers\clusport.sys | 10.0.17763.1192 | Kernel Driver | True | Boot | Running |
| CmBatt | Microsoft ACPI Control Method Battery Driver | C:\Windows\system32\drivers\CmBatt.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| CNG | CNG | C:\Windows\system32\Drivers\cng.sys | 10.0.17763.1217 | Kernel Driver | True | Boot | Running |
| cnghwassist | CNG Hardware Assist algorithm provider | C:\Windows\system32\DRIVERS\cnghwassist.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| CompositeBus | Composite Bus Enumerator Driver | C:\Windows\system32\DriverStore\FileRepository\compositebus.inf_amd64_e4d35af746093dc3\CompositeBus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| condrv | Console Driver | C:\Windows\system32\drivers\condrv.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| CSC | Offline Files Driver | C:\Windows\system32\drivers\csc.sys | 10.0.17763.1131 | Kernel Driver | False | Disabled | Stopped |
| CsvFlt | CSV Mini-Filter Driver | C:\Windows\system32\drivers\CsvFlt.sys | 10.0.17763.529 | File System Driver | True | Manual | Running |
| CsvFs | Csv File System Driver | C:\Windows\system32\drivers\CsvFs.sys | 10.0.17763.1432 | File System Driver | True | Manual | Running |
| CsvNSFlt | CSV NameSpace Filter Driver | C:\Windows\system32\drivers\CsvNSFlt.sys | 10.0.17763.1 | File System Driver | True | Manual | Running |
| csvvbus | CSV Volume Bus | C:\Windows\system32\drivers\csvvbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| dam | Desktop Activity Moderator Driver | C:\Windows\system32\drivers\dam.sys | 10.0.17763.404 | Kernel Driver | False | System | Stopped |
| Datascrn | Datascrn | C:\Windows\system32\drivers\datascrn.sys | 10.0.17763.1131 | File System Driver | True | Boot | Running |
| Dfsc | DFS Namespace Client Driver | C:\Windows\system32\Drivers\dfsc.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| Disk | Disk Driver | C:\Windows\system32\drivers\disk.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| dmvsc | dmvsc | C:\Windows\system32\drivers\dmvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| drmkaud | Microsoft Trusted Audio Drivers | C:\Windows\system32\drivers\drmkaud.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| DXGKrnl | LDDM Graphics Subsystem | C:\Windows\system32\drivers\dxgkrnl.sys | 10.0.17763.1457 | Kernel Driver | True | System | Running |
| e1iexpress | Intel(R) PRO/1000 PCI Express Network Connection Driver I | C:\Windows\system32\drivers\e1i63x64.sys | 12.15.22.6 | Kernel Driver | True | Manual | Running |
| ebdrv | QLogic 10 Gigabit Ethernet Adapter VBD | C:\Windows\system32\drivers\evbda.sys | 7.13.65.105 | Kernel Driver | False | Manual | Stopped |
| eeCtrl | Symantec Eraser Control driver | \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys | 119.1.1.25 | Kernel Driver | True | System | Running |
| EhStorClass | Enhanced Storage Filter Driver | C:\Windows\system32\drivers\EhStorClass.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| EhStorTcgDrv | Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols | C:\Windows\system32\drivers\EhStorTcgDrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| elxfcoe | elxfcoe | C:\Windows\system32\drivers\elxfcoe.sys | 11.0.247.8000 | Kernel Driver | False | Manual | Stopped |
| elxstor | elxstor | C:\Windows\system32\drivers\elxstor.sys | 11.4.225.8009 | Kernel Driver | False | Manual | Stopped |
| EraserUtilRebootDrv | EraserUtilRebootDrv | \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys | 119.1.1.25 | Kernel Driver | True | Manual | Running |
| ErrDev | Microsoft Hardware Error Device Driver | C:\Windows\system32\drivers\errdev.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| exfat | exFAT File System Driver | C:\Windows\system32\drivers\exfat.sys | 10.0.17763.379 | File System Driver | False | Manual | Stopped |
| fastfat | FAT12/16/32 File System Driver | C:\Windows\system32\drivers\fastfat.sys | 10.0.17763.379 | File System Driver | False | Manual | Stopped |
| fcvsc | fcvsc | C:\Windows\system32\drivers\fcvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| fdc | Floppy Disk Controller Driver | C:\Windows\system32\drivers\fdc.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| FileCrypt | FileCrypt | C:\Windows\system32\drivers\filecrypt.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| FileInfo | File Information FS MiniFilter | C:\Windows\system32\drivers\fileinfo.sys | 10.0.17763.194 | File System Driver | False | Manual | Stopped |
| Filetrace | Filetrace | C:\Windows\system32\drivers\filetrace.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| flpydisk | Floppy Disk Driver | C:\Windows\system32\drivers\flpydisk.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| FltMgr | FltMgr | C:\Windows\system32\drivers\fltmgr.sys | 10.0.17763.831 | File System Driver | True | Boot | Running |
| FsDepends | File System Dependency Minifilter | C:\Windows\system32\drivers\FsDepends.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| gencounter | Microsoft Hyper-V Generation Counter | C:\Windows\system32\drivers\vmgencounter.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| genericusbfn | Generic USB Function Class | C:\Windows\system32\drivers\genericusbfn.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| GPIOClx0101 | Microsoft GPIO Class Extension Driver | C:\Windows\system32\Drivers\msgpioclx.sys | 10.0.17763.107 | Kernel Driver | False | Manual | Stopped |
| HDAudBus | Microsoft UAA Bus Driver for High Definition Audio | C:\Windows\system32\drivers\HDAudBus.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HidBatt | HID UPS Battery Driver | C:\Windows\system32\drivers\HidBatt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| hidinterrupt | Common Driver for HID Buttons implemented with interrupts | C:\Windows\system32\drivers\hidinterrupt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HidUsb | Microsoft HID Class Driver | C:\Windows\system32\drivers\hidusb.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HpSAMD | HpSAMD | C:\Windows\system32\drivers\HpSAMD.sys | 8.0.4.0 | Kernel Driver | False | Manual | Stopped |
| HTTP | HTTP Service | C:\Windows\system32\drivers\HTTP.sys | 10.0.17763.1432 | Kernel Driver | True | Manual | Running |
| hvcrash | hvcrash | C:\Windows\system32\drivers\hvcrash.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| hvservice | Hypervisor/Virtual Machine Support Driver | C:\Windows\system32\drivers\hvservice.sys | 10.0.17763.864 | Kernel Driver | False | Manual | Stopped |
| HwNClx0101 | Microsoft Hardware Notifications Class Extension Driver | C:\Windows\system32\Drivers\mshwnclx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| hwpolicy | Hardware Policy Driver | C:\Windows\system32\drivers\hwpolicy.sys | 10.0.17763.1131 | Kernel Driver | False | Boot | Stopped |
| hyperkbd | hyperkbd | C:\Windows\system32\drivers\hyperkbd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HyperVideo | HyperVideo | C:\Windows\system32\drivers\HyperVideo.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| i8042prt | PS/2 Keyboard and Mouse Port Driver | C:\Windows\system32\drivers\i8042prt.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| iaLPSSi_GPIO | Intel(R) Serial IO GPIO Controller Driver | C:\Windows\system32\drivers\iaLPSSi_GPIO.sys | 1.1.250.0 | Kernel Driver | False | Manual | Stopped |
| iaLPSSi_I2C | Intel(R) Serial IO I2C Controller Driver | C:\Windows\system32\drivers\iaLPSSi_I2C.sys | 1.1.253.0 | Kernel Driver | False | Manual | Stopped |
| iaStorAVC | Intel Chipset SATA RAID Controller | C:\Windows\system32\drivers\iaStorAVC.sys | 15.44.0.1010 | Kernel Driver | False | Manual | Stopped |
| iaStorV | Intel RAID Controller Windows 7 | C:\Windows\system32\drivers\iaStorV.sys | 8.6.2.1019 | Kernel Driver | False | Manual | Stopped |
| ibbus | Mellanox InfiniBand Bus/AL (Filter Driver) | C:\Windows\system32\drivers\ibbus.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| IndirectKmd | Indirect Displays Kernel-Mode Driver | C:\Windows\system32\drivers\IndirectKmd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| intelide | intelide | C:\Windows\system32\drivers\intelide.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| intelpep | Intel(R) Power Engine Plug-in Driver | C:\Windows\system32\drivers\intelpep.sys | 10.0.17763.503 | Kernel Driver | True | Boot | Running |
| intelppm | Intel Processor Driver | C:\Windows\system32\drivers\intelppm.sys | 10.0.17763.1432 | Kernel Driver | True | Manual | Running |
| IpFilterDriver | IP Traffic Filter Driver | C:\Windows\system32\DRIVERS\ipfltdrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPMIDRV | IPMIDRV | C:\Windows\system32\drivers\IPMIDrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPNAT | IP Network Address Translator | C:\Windows\system32\drivers\ipnat.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPsecGW | Windows IPsec Gateway Driver | C:\Windows\system32\drivers\ipsecgw.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPT | IPT | C:\Windows\system32\drivers\ipt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| isapnp | isapnp | C:\Windows\system32\drivers\isapnp.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| iScsiPrt | iScsiPort Driver | C:\Windows\system32\drivers\msiscsi.sys | 10.0.17763.593 | Kernel Driver | True | Manual | Running |
| ItSas35i | ItSas35i | C:\Windows\system32\drivers\ItSas35i.sys | 2.60.59.80 | Kernel Driver | False | Manual | Stopped |
| kbdclass | Keyboard Class Driver | C:\Windows\system32\drivers\kbdclass.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| kbdhid | Keyboard HID Driver | C:\Windows\system32\drivers\kbdhid.sys | 10.0.17763.348 | Kernel Driver | False | Manual | Stopped |
| kdnic | Microsoft Kernel Debug Network Miniport (NDIS 6.20) | C:\Windows\system32\drivers\kdnic.sys | 6.1.0.0 | Kernel Driver | True | Manual | Running |
| KSecDD | KSecDD | C:\Windows\system32\Drivers\ksecdd.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| KSecPkg | KSecPkg | C:\Windows\system32\Drivers\ksecpkg.sys | 10.0.17763.503 | Kernel Driver | True | Boot | Running |
| ksthunk | Kernel Streaming Thunks | C:\Windows\system32\drivers\ksthunk.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| lltdio | Link-Layer Topology Discovery Mapper I/O Driver | C:\Windows\system32\drivers\lltdio.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| LSI_SAS | LSI_SAS | C:\Windows\system32\drivers\lsi_sas.sys | 1.34.3.83 | Kernel Driver | True | Boot | Running |
| LSI_SAS2i | LSI_SAS2i | C:\Windows\system32\drivers\lsi_sas2i.sys | 2.0.79.82 | Kernel Driver | False | Manual | Stopped |
| LSI_SAS3i | LSI_SAS3i | C:\Windows\system32\drivers\lsi_sas3i.sys | 2.51.24.80 | Kernel Driver | False | Manual | Stopped |
| LSI_SSS | LSI_SSS | C:\Windows\system32\drivers\lsi_sss.sys | 2.10.61.81 | Kernel Driver | False | Manual | Stopped |
| luafv | UAC File Virtualization | C:\Windows\system32\drivers\luafv.sys | 10.0.17763.437 | File System Driver | True | Auto | Running |
| mausbhost | MA-USB Host Controller Driver | C:\Windows\system32\drivers\mausbhost.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mausbip | MA-USB IP Filter Driver | C:\Windows\system32\drivers\mausbip.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| megasas | megasas | C:\Windows\system32\drivers\megasas.sys | 6.706.6.0 | Kernel Driver | False | Manual | Stopped |
| megasas2i | megasas2i | C:\Windows\system32\drivers\MegaSas2i.sys | 6.714.5.0 | Kernel Driver | False | Manual | Stopped |
| megasas35i | megasas35i | C:\Windows\system32\drivers\megasas35i.sys | 7.705.8.0 | Kernel Driver | False | Manual | Stopped |
| megasr | megasr | C:\Windows\system32\drivers\megasr.sys | 15.2.2013.129 | Kernel Driver | False | Manual | Stopped |
| Microsoft_Bluetooth_AvrcpTransport | Microsoft Bluetooth Avrcp Transport Driver | C:\Windows\system32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mlx4_bus | Mellanox ConnectX Bus Enumerator | C:\Windows\system32\drivers\mlx4_bus.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| MMCSS | Multimedia Class Scheduler | C:\Windows\system32\drivers\mmcss.sys | 10.0.17763.194 | Kernel Driver | False | Manual | Stopped |
| Modem | Modem | C:\Windows\system32\drivers\modem.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| monitor | Microsoft Monitor Class Function Driver Service | C:\Windows\system32\drivers\monitor.sys | 10.0.17763.771 | Kernel Driver | True | Manual | Running |
| mouclass | Mouse Class Driver | C:\Windows\system32\drivers\mouclass.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| mouhid | Mouse HID Driver | C:\Windows\system32\drivers\mouhid.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mountmgr | Mount Point Manager | C:\Windows\system32\drivers\mountmgr.sys | 10.0.17763.831 | Kernel Driver | True | Boot | Running |
| mpio | Microsoft Multi-Path Bus Driver | C:\Windows\system32\drivers\mpio.sys | 10.0.17763.1007 | Kernel Driver | True | Boot | Running |
| mpsdrv | Windows Defender Firewall Authorization Driver | C:\Windows\system32\drivers\mpsdrv.sys | 10.0.17763.404 | Kernel Driver | True | Manual | Running |
| mrxsmb | SMB MiniRedirector Wrapper and Engine | C:\Windows\system32\DRIVERS\mrxsmb.sys | 10.0.17763.1369 | File System Driver | True | Manual | Running |
| mrxsmb20 | SMB 2.0 MiniRedirector | C:\Windows\system32\DRIVERS\mrxsmb20.sys | 10.0.17763.1432 | File System Driver | True | Manual | Running |
| MsBridge | Microsoft MAC Bridge | C:\Windows\system32\drivers\bridge.sys | 10.0.17763.379 | Kernel Driver | False | Manual | Stopped |
| msdsm | Microsoft Multi-Path Device Specific Module | C:\Windows\system32\drivers\msdsm.sys | 10.0.17763.652 | Kernel Driver | True | Boot | Running |
| Msfs | Msfs | C:\Windows\system32\drivers\Msfs.sys | 10.0.17763.771 | File System Driver | True | System | Running |
| msgpiowin32 | Common Driver for Buttons, DockMode and Laptop/Slate Indicator | C:\Windows\system32\drivers\msgpiowin32.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mshidkmdf | Pass-through HID to KMDF Filter Driver | C:\Windows\system32\drivers\mshidkmdf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mshidumdf | Pass-through HID to UMDF Driver | C:\Windows\system32\drivers\mshidumdf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| msisadrv | msisadrv | C:\Windows\system32\drivers\msisadrv.sys | 10.0.17763.771 | Kernel Driver | True | Boot | Running |
| MSKSSRV | Microsoft Streaming Service Proxy | C:\Windows\system32\drivers\MSKSSRV.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsLbfoProvider | Microsoft Load Balancing/Failover Provider | C:\Windows\system32\drivers\MsLbfoProvider.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsLldp | Microsoft Link-Layer Discovery Protocol | C:\Windows\system32\drivers\mslldp.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| MSPCLOCK | Microsoft Streaming Clock Proxy | C:\Windows\system32\drivers\MSPCLOCK.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MSPQM | Microsoft Streaming Quality Manager Proxy | C:\Windows\system32\drivers\MSPQM.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsRPC | MsRPC | C:\Windows\system32\drivers\MsRPC.sys | 10.0.17763.1457 | Kernel Driver | False | Manual | Stopped |
| MsSecFlt | Microsoft Security Events Component Minifilter | C:\Windows\system32\drivers\mssecflt.sys | 10.0.17763.1369 | Kernel Driver | True | Boot | Running |
| mssmbios | Microsoft System Management BIOS Driver | C:\Windows\system32\drivers\mssmbios.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| MSTEE | Microsoft Streaming Tee/Sink-to-Sink Converter | C:\Windows\system32\drivers\MSTEE.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MTConfig | Microsoft Input Configuration Driver | C:\Windows\system32\drivers\MTConfig.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Mup | Mup | C:\Windows\system32\Drivers\mup.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| mvumis | mvumis | C:\Windows\system32\drivers\mvumis.sys | 1.0.5.1016 | Kernel Driver | False | Manual | Stopped |
| ndfltr | NetworkDirect Service | C:\Windows\system32\drivers\ndfltr.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| NDIS | NDIS System Driver | C:\Windows\system32\drivers\ndis.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| NdisCap | Microsoft NDIS Capture | C:\Windows\system32\drivers\ndiscap.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisImPlatform | Microsoft Network Adapter Multiplexor Protocol | C:\Windows\system32\drivers\NdisImPlatform.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisTapi | Remote Access NDIS TAPI Driver | C:\Windows\system32\DRIVERS\ndistapi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Ndisuio | NDIS Usermode I/O Protocol | C:\Windows\system32\drivers\ndisuio.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisVirtualBus | Microsoft Virtual Network Adapter Enumerator | C:\Windows\system32\drivers\NdisVirtualBus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| NdisWan | Remote Access NDIS WAN Driver | C:\Windows\system32\drivers\ndiswan.sys | 10.0.17763.1098 | Kernel Driver | False | Manual | Stopped |
| ndiswanlegacy | Remote Access LEGACY NDIS WAN Driver | C:\Windows\system32\DRIVERS\ndiswan.sys | 10.0.17763.1098 | Kernel Driver | False | Manual | Stopped |
| ndproxy | NDIS Proxy Driver | C:\Windows\system32\DRIVERS\NDProxy.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| NetAdapterCx | Network Adapter Wdf Class Extension Library | C:\Windows\system32\drivers\NetAdapterCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NetBIOS | NetBIOS Interface | C:\Windows\system32\drivers\netbios.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| NetBT | NetBT | C:\Windows\system32\DRIVERS\netbt.sys | 10.0.17763.437 | Kernel Driver | True | System | Running |
| Netft | Cluster Virtual Miniport Driver | C:\Windows\system32\drivers\netft.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| netvsc | netvsc | C:\Windows\system32\drivers\netvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| Npfs | Npfs | C:\Windows\system32\drivers\Npfs.sys | 10.0.17763.831 | File System Driver | True | System | Running |
| npsvctrig | Named pipe service trigger provider | C:\Windows\system32\drivers\npsvctrig.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| nsiproxy | NSI Proxy Service Driver | C:\Windows\system32\drivers\nsiproxy.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| Ntfs | Ntfs | C:\Windows\system32\drivers\Ntfs.sys | 10.0.17763.1457 | File System Driver | True | Manual | Running |
| Null | Null | C:\Windows\system32\drivers\Null.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| nvdimm | Microsoft NVDIMM device driver | C:\Windows\system32\drivers\nvdimm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| nvraid | nvraid | C:\Windows\system32\drivers\nvraid.sys | 10.6.0.23 | Kernel Driver | False | Manual | Stopped |
| nvstor | nvstor | C:\Windows\system32\drivers\nvstor.sys | 10.6.0.23 | Kernel Driver | False | Manual | Stopped |
| Parport | Parallel port driver | C:\Windows\system32\drivers\parport.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| partmgr | Partition driver | C:\Windows\system32\drivers\partmgr.sys | 10.0.17763.168 | Kernel Driver | True | Boot | Running |
| pci | PCI Bus Driver | C:\Windows\system32\drivers\pci.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| pciide | pciide | C:\Windows\system32\drivers\pciide.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pcmcia | pcmcia | C:\Windows\system32\drivers\pcmcia.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pcw | Performance Counters for Windows Driver | C:\Windows\system32\drivers\pcw.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| pdc | pdc | C:\Windows\system32\drivers\pdc.sys | 10.0.17763.404 | Kernel Driver | True | Boot | Running |
| PEAUTH | PEAUTH | C:\Windows\system32\drivers\peauth.sys | 10.0.17763.1432 | Kernel Driver | True | Auto | Running |
| percsas2i | percsas2i | C:\Windows\system32\drivers\percsas2i.sys | 6.805.3.0 | Kernel Driver | False | Manual | Stopped |
| percsas3i | percsas3i | C:\Windows\system32\drivers\percsas3i.sys | 6.604.6.0 | Kernel Driver | False | Manual | Stopped |
| PktMon | Packet Monitor Driver | C:\Windows\system32\drivers\PktMon.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pmem | Microsoft persistent memory disk driver | C:\Windows\system32\drivers\pmem.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| PNPMEM | Microsoft Memory Module Driver | C:\Windows\system32\drivers\pnpmem.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| PptpMiniport | WAN Miniport (PPTP) | C:\Windows\system32\drivers\raspptp.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Processor | Processor Driver | C:\Windows\system32\drivers\processr.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| Psched | QoS Packet Scheduler | C:\Windows\system32\drivers\pacer.sys | 10.0.17763.1397 | Kernel Driver | True | System | Running |
| qebdrv | QLogic FastLinQ Ethernet VBD | C:\Windows\system32\drivers\qevbda.sys | 8.33.20.103 | Kernel Driver | False | Manual | Stopped |
| qefcoe | QLogic FCoE driver | C:\Windows\system32\drivers\qefcoe.sys | 8.33.4.2 | Kernel Driver | False | Manual | Stopped |
| qeois | QLogic 40G iSCSI Driver | C:\Windows\system32\drivers\qeois.sys | 8.33.5.2 | Kernel Driver | False | Manual | Stopped |
| ql2300i | QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) | C:\Windows\system32\drivers\ql2300i.sys | 9.1.15.1 | Kernel Driver | False | Manual | Stopped |
| ql40xx2i | QLogic iSCSI Miniport Inbox Driver | C:\Windows\system32\drivers\ql40xx2i.sys | 2.1.5.0 | Kernel Driver | False | Manual | Stopped |
| qlfcoei | QLogic [FCoE] STOR Miniport Inbox Driver (wx64) | C:\Windows\system32\drivers\qlfcoei.sys | 9.1.11.3 | Kernel Driver | False | Manual | Stopped |
| Quota | Quota | C:\Windows\system32\drivers\quota.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| QWAVEdrv | QWAVE driver | C:\Windows\system32\drivers\qwavedrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Ramdisk | Windows RAM Disk Driver | C:\Windows\system32\DRIVERS\ramdisk.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasAcd | Remote Access Auto Connection Driver | C:\Windows\system32\DRIVERS\rasacd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasAgileVpn | WAN Miniport (IKEv2) | C:\Windows\system32\drivers\AgileVpn.sys | 10.0.17763.1098 | Kernel Driver | False | Manual | Stopped |
| RasGre | WAN Miniport (GRE) | C:\Windows\system32\drivers\rasgre.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Rasl2tp | WAN Miniport (L2TP) | C:\Windows\system32\drivers\rasl2tp.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasPppoe | Remote Access PPPOE Driver | C:\Windows\system32\DRIVERS\raspppoe.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasSstp | WAN Miniport (SSTP) | C:\Windows\system32\drivers\rassstp.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| rdbss | Redirected Buffering Sub System | C:\Windows\system32\DRIVERS\rdbss.sys | 10.0.17763.1369 | File System Driver | True | System | Running |
| rdpbus | Remote Desktop Device Redirector Bus Driver | C:\Windows\system32\drivers\rdpbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| RDPDR | Remote Desktop Device Redirector Driver | C:\Windows\system32\drivers\rdpdr.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| RdpVideoMiniport | Remote Desktop Video Miniport Driver | C:\Windows\system32\drivers\rdpvideominiport.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ReFS | ReFS | C:\Windows\system32\drivers\ReFS.sys | 10.0.17763.1369 | File System Driver | False | Manual | Stopped |
| ReFSv1 | ReFSv1 | C:\Windows\system32\drivers\ReFSv1.sys | 10.0.17763.404 | File System Driver | False | Manual | Stopped |
| ResumeKeyFilter | Resume Key Filter | C:\Windows\system32\drivers\ResumeKeyFilter.sys | 10.0.17763.1 | File System Driver | True | Auto | Running |
| RFCOMM | Bluetooth Device (RFCOMM Protocol TDI) | C:\Windows\system32\drivers\rfcomm.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| rhproxy | Resource Hub proxy driver | C:\Windows\system32\drivers\rhproxy.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| rspndr | Link-Layer Topology Discovery Responder | C:\Windows\system32\drivers\rspndr.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| s3cap | s3cap | C:\Windows\system32\drivers\vms3cap.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sacdrv | sacdrv | C:\Windows\system32\DRIVERS\sacdrv.sys | 10.0.17763.1 | Kernel Driver | False | Boot | Stopped |
| sbp2port | SBP-2 Transport/Protocol Bus Driver | C:\Windows\system32\drivers\sbp2port.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| scfilter | Smart card PnP Class Filter Driver | C:\Windows\system32\DRIVERS\scfilter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| scmbus | Microsoft Storage Class Memory Bus Driver | C:\Windows\system32\drivers\scmbus.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| sdbus | sdbus | C:\Windows\system32\drivers\sdbus.sys | 10.0.17763.1131 | Kernel Driver | False | Manual | Stopped |
| SDFRd | SDF Reflector | C:\Windows\system32\drivers\SDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sdstor | SD Storage Port Driver | C:\Windows\system32\drivers\sdstor.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SerCx | Serial UART Support Library | C:\Windows\system32\drivers\SerCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SerCx2 | Serial UART Support Library | C:\Windows\system32\drivers\SerCx2.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Serenum | Serenum Filter Driver | C:\Windows\system32\drivers\serenum.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| Serial | Serial port driver | C:\Windows\system32\drivers\serial.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| sermouse | Serial Mouse Driver | C:\Windows\system32\drivers\sermouse.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sfloppy | High-Capacity Floppy Disk Drive | C:\Windows\system32\drivers\sfloppy.sys | 10.0.17763.1131 | Kernel Driver | False | Manual | Stopped |
| SgrmAgent | System Guard Runtime Monitor Agent | C:\Windows\system32\drivers\SgrmAgent.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| SiSRaid2 | SiSRaid2 | C:\Windows\system32\drivers\SiSRaid2.sys | 5.1.1039.2600 | Kernel Driver | False | Manual | Stopped |
| SiSRaid4 | SiSRaid4 | C:\Windows\system32\drivers\sisraid4.sys | 5.1.1039.3600 | Kernel Driver | False | Manual | Stopped |
| SmartSAMD | SmartSAMD | C:\Windows\system32\drivers\SmartSAMD.sys | 1.50.0.0 | Kernel Driver | False | Manual | Stopped |
| smbdirect | smbdirect | C:\Windows\system32\DRIVERS\smbdirect.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| spaceport | Storage Spaces Driver | C:\Windows\system32\drivers\spaceport.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| SpbCx | Simple Peripheral Bus Support Library | C:\Windows\system32\drivers\SpbCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SRTSP | Symantec Real Time Storage Protection x64 | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SRTSP64.SYS | 15.7.0.170 | File System Driver | True | System | Running |
| SRTSPX | Symantec Real Time Storage Protection (PEL) x64 | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SRTSPX64.SYS | 15.7.0.170 | Kernel Driver | True | System | Running |
| srv2 | Server SMB 2.xxx Driver | C:\Windows\system32\DRIVERS\srv2.sys | 10.0.17763.592 | File System Driver | True | Manual | Running |
| srvnet | srvnet | C:\Windows\system32\DRIVERS\srvnet.sys | 10.0.17763.1075 | File System Driver | True | Manual | Running |
| stexstor | stexstor | C:\Windows\system32\drivers\stexstor.sys | 5.1.0.10 | Kernel Driver | False | Manual | Stopped |
| storahci | Microsoft Standard SATA AHCI Driver | C:\Windows\system32\drivers\storahci.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| storflt | Microsoft Hyper-V Storage Accelerator | C:\Windows\system32\drivers\vmstorfl.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| stornvme | Microsoft Standard NVM Express Driver | C:\Windows\system32\drivers\stornvme.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| storqosflt | Storage QoS Filter Driver | C:\Windows\system32\drivers\storqosflt.sys | 10.0.17763.348 | File System Driver | True | Auto | Running |
| storufs | Microsoft Universal Flash Storage (UFS) Driver | C:\Windows\system32\drivers\storufs.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| storvsc | storvsc | C:\Windows\system32\drivers\storvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| svhdxflt | Shared VHDX File Access Filter Driver | C:\Windows\system32\drivers\svhdxflt.sys | 10.0.17763.1 | File System Driver | True | Auto | Running |
| swenum | Software Bus Driver | C:\Windows\system32\DriverStore\FileRepository\swenum.inf_amd64_31f554b660026323\swenum.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| SymEFASI | Symantec Extended File Attributes (SI) | C:\Windows\system32\drivers\symefasi\0603030.024\symefasi64.sys | 6.3.3.35 | File System Driver | True | Boot | Running |
| SymELAM | Symantec ELAM Driver | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SymELAM.sys | 2.0.1.115 | Kernel Driver | False | Boot | Stopped |
| SymEvent | SymEvent | \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS | 14.0.6.27 | Kernel Driver | True | Manual | Running |
| SymIRON | Symantec Iron Driver | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\Ironx64.SYS | 7.0.7.11 | Kernel Driver | True | System | Running |
| Synth3dVsc | Synth3dVsc | C:\Windows\system32\drivers\Synth3dVsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| Tcpip | TCP/IP Protocol Driver | C:\Windows\system32\drivers\tcpip.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| Tcpip6 | @todo.dll,-100;Microsoft IPv6 Protocol Driver | C:\Windows\system32\drivers\tcpip.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| tcpipreg | TCP/IP Registry Compatibility | C:\Windows\system32\drivers\tcpipreg.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| tdx | NetIO Legacy TDI Support Driver | C:\Windows\system32\DRIVERS\tdx.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| terminpt | Microsoft Remote Desktop Input Driver | C:\Windows\system32\drivers\terminpt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| TPM | TPM | C:\Windows\system32\drivers\tpm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| TsUsbFlt | Remote Desktop USB Hub Class Filter Driver | C:\Windows\system32\drivers\tsusbflt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| TsUsbGD | Remote Desktop Generic USB Device | C:\Windows\system32\drivers\TsUsbGD.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| tsusbhub | Remote Desktop USB Hub | C:\Windows\system32\drivers\tsusbhub.sys | 10.0.17763.973 | Kernel Driver | False | Manual | Stopped |
| tunnel | Microsoft Tunnel Miniport Adapter Driver | C:\Windows\system32\drivers\tunnel.sys | 10.0.17763.864 | Kernel Driver | False | Manual | Stopped |
| UASPStor | USB Attached SCSI (UAS) Driver | C:\Windows\system32\drivers\uaspstor.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmCx0101 | USB Connector Manager KMDF Class Extension | C:\Windows\system32\Drivers\UcmCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmTcpciCx0101 | UCM-TCPCI KMDF Class Extension | C:\Windows\system32\Drivers\UcmTcpciCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmUcsi | USB Connector Manager UCSI Client | C:\Windows\system32\drivers\UcmUcsi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmUcsiAcpiClient | UCM-UCSI ACPI Client | C:\Windows\system32\drivers\UcmUcsiAcpiClient.sys | 10.0.17763.719 | Kernel Driver | False | Manual | Stopped |
| UcmUcsiCx0101 | UCM-UCSI KMDF Class Extension | C:\Windows\system32\Drivers\UcmUcsiCx.sys | 10.0.17763.737 | Kernel Driver | False | Manual | Stopped |
| Ucx01000 | USB Host Support Library | C:\Windows\system32\drivers\ucx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UdeCx | USB Device Emulation Support Library | C:\Windows\system32\drivers\udecx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| udfs | udfs | C:\Windows\system32\DRIVERS\udfs.sys | 10.0.17763.379 | File System Driver | False | Disabled | Stopped |
| UEFI | Microsoft UEFI Driver | C:\Windows\system32\drivers\UEFI.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| UevAgentDriver | UevAgentDriver | C:\Windows\system32\drivers\UevAgentDriver.sys | 10.0.17763.1 | File System Driver | False | Disabled | Stopped |
| Ufx01000 | USB Function Class Extension | C:\Windows\system32\drivers\ufx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UfxChipidea | USB Chipidea Controller | C:\Windows\system32\drivers\UfxChipidea.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ufxsynopsys | USB Synopsys Controller | C:\Windows\system32\drivers\ufxsynopsys.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| umbus | UMBus Enumerator Driver | C:\Windows\system32\drivers\umbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| UmPass | Microsoft UMPass Driver | C:\Windows\system32\drivers\umpass.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsChipidea | Chipidea USB Role-Switch Driver | C:\Windows\system32\drivers\urschipidea.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsCx01000 | USB Role-Switch Support Library | C:\Windows\system32\drivers\urscx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsSynopsys | Synopsys USB Role-Switch Driver | C:\Windows\system32\drivers\urssynopsys.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbccgp | Microsoft USB Generic Parent Driver | C:\Windows\system32\drivers\usbccgp.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| usbehci | Microsoft USB 2.0 Enhanced Host Controller Miniport Driver | C:\Windows\system32\drivers\usbehci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbhub | Microsoft USB Standard Hub Driver | C:\Windows\system32\drivers\usbhub.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBHUB3 | SuperSpeed Hub | C:\Windows\system32\drivers\UsbHub3.sys | 10.0.17763.1192 | Kernel Driver | False | Manual | Stopped |
| usbohci | Microsoft USB Open Host Controller Miniport Driver | C:\Windows\system32\drivers\usbohci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbprint | Microsoft USB PRINTER Class | C:\Windows\system32\drivers\usbprint.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbser | Microsoft USB Serial Driver | C:\Windows\system32\drivers\usbser.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBSTOR | USB Mass Storage Driver | C:\Windows\system32\drivers\USBSTOR.SYS | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbuhci | Microsoft USB Universal Host Controller Miniport Driver | C:\Windows\system32\drivers\usbuhci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBXHCI | USB xHCI Compliant Host Controller | C:\Windows\system32\drivers\USBXHCI.SYS | 10.0.17763.1075 | Kernel Driver | False | Manual | Stopped |
| vdrvroot | Microsoft Virtual Drive Enumerator | C:\Windows\system32\drivers\vdrvroot.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| VerifierExt | Driver Verifier Extension | C:\Windows\system32\drivers\VerifierExt.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| vhdmp | vhdmp | C:\Windows\system32\drivers\vhdmp.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| vhf | Virtual HID Framework (VHF) Driver | C:\Windows\system32\drivers\vhf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| vm3dmp | vm3dmp | C:\Windows\system32\DRIVERS\vm3dmp.sys | 8.16.1.24 | Kernel Driver | True | Manual | Running |
| vm3dmp_loader | vm3dmp_loader | C:\Windows\system32\DRIVERS\vm3dmp_loader.sys | 8.16.1.24 | Kernel Driver | True | Manual | Running |
| vm3dmp-debug | vm3dmp-debug | C:\Windows\system32\DRIVERS\vm3dmp-debug.sys | 8.16.1.24 | Kernel Driver | False | Manual | Stopped |
| vm3dmp-stats | vm3dmp-stats | C:\Windows\system32\DRIVERS\vm3dmp-stats.sys | 8.16.1.24 | Kernel Driver | False | Manual | Stopped |
| vmbus | Virtual Machine Bus | C:\Windows\system32\drivers\vmbus.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| VMBusHID | VMBusHID | C:\Windows\system32\drivers\VMBusHID.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| vmci | VMware VMCI Bus Driver | C:\Windows\system32\drivers\vmci.sys | 9.8.16.0 | Kernel Driver | True | Boot | Running |
| vmgid | Microsoft Hyper-V Guest Infrastructure Driver | C:\Windows\system32\drivers\vmgid.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| VMMemCtl | Memory Control Driver | C:\Windows\system32\DRIVERS\vmmemctl.sys | 7.4.2.0 | Kernel Driver | True | Auto | Running |
| vmmouse | VMware Pointing Device | C:\Windows\system32\drivers\vmmouse.sys | 12.5.7.0 | Kernel Driver | True | Manual | Running |
| vmxnet3ndis6 | vmxnet3 NDIS 6 Ethernet Adapter Driver | C:\Windows\system32\drivers\vmxnet3.sys | 1.8.16.0 | Kernel Driver | True | Manual | Running |
| volmgr | Volume Manager Driver | C:\Windows\system32\drivers\volmgr.sys | 10.0.17763.1158 | Kernel Driver | True | Boot | Running |
| volmgrx | Dynamic Volume Manager | C:\Windows\system32\drivers\volmgrx.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| volsnap | Volume Shadow Copy driver | C:\Windows\system32\drivers\volsnap.sys | 10.0.17763.831 | Kernel Driver | True | Boot | Running |
| volume | Volume driver | C:\Windows\system32\drivers\volume.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| vpci | Microsoft Hyper-V Virtual PCI Bus | C:\Windows\system32\drivers\vpci.sys | 10.0.17763.292 | Kernel Driver | False | Manual | Stopped |
| vsmraid | vsmraid | C:\Windows\system32\drivers\vsmraid.sys | 7.0.9600.6352 | Kernel Driver | False | Manual | Stopped |
| vsock | vSockets Virtual Machine Communication Interface Sockets driver | C:\Windows\system32\DRIVERS\vsock.sys | 9.8.12.0 | Kernel Driver | True | Boot | Running |
| VSTXRAID | VIA StorX Storage RAID Controller Windows Driver | C:\Windows\system32\drivers\vstxraid.sys | 8.0.9200.8110 | Kernel Driver | False | Manual | Stopped |
| WacomPen | Wacom Serial Pen HID Driver | C:\Windows\system32\drivers\wacompen.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| wanarp | Remote Access IP ARP Driver | C:\Windows\system32\DRIVERS\wanarp.sys | 10.0.17763.1075 | Kernel Driver | False | Manual | Stopped |
| wanarpv6 | Remote Access IPv6 ARP Driver | C:\Windows\system32\DRIVERS\wanarp.sys | 10.0.17763.1075 | Kernel Driver | False | Manual | Stopped |
| wcifs | Windows Container Isolation | C:\Windows\system32\drivers\wcifs.sys | 10.0.17763.1007 | File System Driver | True | Auto | Running |
| wcnfs | Windows Container Name Virtualization | C:\Windows\system32\drivers\wcnfs.sys | 10.0.17763.194 | File System Driver | False | Manual | Stopped |
| WdBoot | Windows Defender Antivirus Boot Driver | C:\Windows\system32\drivers\WdBoot.sys | 4.18.1807.18075 | Kernel Driver | False | Manual | Stopped |
| Wdf01000 | Kernel Mode Driver Frameworks service | C:\Windows\system32\drivers\Wdf01000.sys | 1.27.17763.1192 | Kernel Driver | True | Boot | Running |
| WdFilter | Windows Defender Antivirus Mini-Filter Driver | C:\Windows\system32\drivers\WdFilter.sys | 4.18.1807.18075 | File System Driver | False | Manual | Stopped |
| WdmCompanionFilter | WdmCompanionFilter | C:\Windows\system32\drivers\WdmCompanionFilter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WdNisDrv | Windows Defender Antivirus Network Inspection System Driver | C:\Windows\system32\Drivers\WdNisDrv.sys | 4.18.1807.18075 | Kernel Driver | False | Manual | Stopped |
| WFPLWFS | Microsoft Windows Filtering Platform | C:\Windows\system32\drivers\wfplwfs.sys | 10.0.17763.771 | Kernel Driver | True | Boot | Running |
| WIMMount | WIMMount | C:\Windows\system32\drivers\wimmount.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| WindowsTrustedRT | Windows Trusted Execution Environment Class Extension | C:\Windows\system32\drivers\WindowsTrustedRT.sys | 10.0.17763.292 | Kernel Driver | True | Boot | Running |
| WindowsTrustedRTProxy | Microsoft Windows Trusted Runtime Secure Service | C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| WinMad | WinMad Service | C:\Windows\system32\drivers\winmad.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| WinNat | Windows NAT Driver | C:\Windows\system32\drivers\winnat.sys | 10.0.17763.1192 | Kernel Driver | False | Manual | Stopped |
| WinQuic | WinQuic | C:\Windows\system32\drivers\winquic.sys | 10.0.17763.404 | Kernel Driver | True | Manual | Running |
| WINUSB | WinUsb Driver | C:\Windows\system32\drivers\WinUSB.SYS | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WinVerbs | WinVerbs Service | C:\Windows\system32\drivers\winverbs.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| WmiAcpi | Microsoft Windows Management Interface for ACPI | C:\Windows\system32\drivers\wmiacpi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Wof | Windows Overlay File System Filter Driver | C:\Windows\system32\drivers\Wof.sys | 10.0.17763.802 | File System Driver | True | Boot | Running |
| WpdUpFltr | WPD Upper Class Filter Driver | C:\Windows\system32\drivers\WpdUpFltr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ws2ifsl | Windows Socket 2.0 Non-IFS Service Provider Support Environment | C:\Windows\system32\drivers\ws2ifsl.sys | 10.0.17763.737 | Kernel Driver | True | System | Running |
| WudfPf | User Mode Driver Frameworks Platform Driver | C:\Windows\system32\drivers\WudfPf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WUDFRd | Windows Driver Foundation - User-mode Driver Framework Reflector | C:\Windows\system32\drivers\WUDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WUDFWpdFs | WPD File System driver | C:\Windows\system32\DRIVERS\WUDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Name | Description | Path | Version | Service Type | Started | Start Mode | State |
|---|---|---|---|---|---|---|---|
| 1394ohci | 1394 OHCI Compliant Host Controller | C:\Windows\system32\drivers\1394ohci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| 3ware | 3ware | C:\Windows\system32\drivers\3ware.sys | 5.1.0.51 | Kernel Driver | False | Manual | Stopped |
| ACPI | Microsoft ACPI Driver | C:\Windows\system32\drivers\ACPI.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| AcpiDev | ACPI Devices driver | C:\Windows\system32\drivers\AcpiDev.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| acpiex | Microsoft ACPIEx Driver | C:\Windows\system32\Drivers\acpiex.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| acpipagr | ACPI Processor Aggregator Driver | C:\Windows\system32\drivers\acpipagr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| AcpiPmi | ACPI Power Meter Driver | C:\Windows\system32\drivers\acpipmi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| acpitime | ACPI Wake Alarm Driver | C:\Windows\system32\drivers\acpitime.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ADP80XX | ADP80XX | C:\Windows\system32\drivers\ADP80XX.SYS | 1.3.0.10769 | Kernel Driver | False | Manual | Stopped |
| AFD | Ancillary Function Driver for Winsock | C:\Windows\system32\drivers\afd.sys | 10.0.17763.1432 | Kernel Driver | True | System | Running |
| afunix | afunix | C:\Windows\system32\drivers\afunix.sys | 10.0.17763.1369 | Kernel Driver | True | System | Running |
| ahcache | Application Compatibility Cache | C:\Windows\system32\DRIVERS\ahcache.sys | 10.0.17763.1432 | Kernel Driver | True | System | Running |
| AmdK8 | AMD K8 Processor Driver | C:\Windows\system32\drivers\amdk8.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| AmdPPM | AMD Processor Driver | C:\Windows\system32\drivers\amdppm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| amdsata | amdsata | C:\Windows\system32\drivers\amdsata.sys | 1.1.3.277 | Kernel Driver | False | Manual | Stopped |
| amdsbs | amdsbs | C:\Windows\system32\drivers\amdsbs.sys | 3.7.1540.43 | Kernel Driver | False | Manual | Stopped |
| amdxata | amdxata | C:\Windows\system32\drivers\amdxata.sys | 1.1.3.277 | Kernel Driver | False | Manual | Stopped |
| AppID | AppID Driver | C:\Windows\system32\drivers\appid.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| applockerfltr | Smartlocker Filter Driver | C:\Windows\system32\drivers\applockerfltr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| AppvStrm | AppvStrm | C:\Windows\system32\drivers\AppvStrm.sys | 10.0.17763.1007 | File System Driver | False | Manual | Stopped |
| AppvVemgr | AppvVemgr | C:\Windows\system32\drivers\AppvVemgr.sys | 10.0.17763.348 | File System Driver | False | Manual | Stopped |
| AppvVfs | AppvVfs | C:\Windows\system32\drivers\AppvVfs.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| arcsas | Adaptec SAS/SATA-II RAID Storport's Miniport Driver | C:\Windows\system32\drivers\arcsas.sys | 7.5.0.32048 | Kernel Driver | False | Manual | Stopped |
| AsyncMac | RAS Asynchronous Media Driver | C:\Windows\system32\drivers\asyncmac.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| atapi | IDE Channel | C:\Windows\system32\drivers\atapi.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| b06bdrv | QLogic Network Adapter VBD | C:\Windows\system32\drivers\bxvbda.sys | 7.12.31.105 | Kernel Driver | False | Manual | Stopped |
| bam | Background Activity Moderator Driver | C:\Windows\system32\drivers\bam.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| BasicDisplay | BasicDisplay | C:\Windows\system32\DriverStore\FileRepository\basicdisplay.inf_amd64_5103ac179273be89\BasicDisplay.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| BasicRender | BasicRender | C:\Windows\system32\DriverStore\FileRepository\basicrender.inf_amd64_0b8d03c3bc0e7fd9\BasicRender.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| bcmfn2 | bcmfn2 Service | C:\Windows\system32\drivers\bcmfn2.sys | 6.3.9600.17336 | Kernel Driver | False | Manual | Stopped |
| Beep | Beep | C:\Windows\system32\drivers\Beep.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| bfadfcoei | bfadfcoei | C:\Windows\system32\drivers\bfadfcoei.sys | 10.0.10060.0 | Kernel Driver | False | Manual | Stopped |
| bfadi | bfadi | C:\Windows\system32\drivers\bfadi.sys | 10.0.10060.0 | Kernel Driver | False | Manual | Stopped |
| BHDrvx64 | BHDrvx64 | \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.2.3335.1000.105\Data\Definitions\BASHDefs\20210201.001\BHDrvx64.sys | 12.1.0.271 | Kernel Driver | True | System | Running |
| bindflt | Windows Bind Filter Driver | C:\Windows\system32\drivers\bindflt.sys | 10.0.17763.1075 | File System Driver | False | Manual | Stopped |
| bowser | Browser | C:\Windows\system32\DRIVERS\bowser.sys | 10.0.17763.652 | File System Driver | True | Manual | Running |
| BthEnum | Bluetooth Enumerator Service | C:\Windows\system32\drivers\BthEnum.sys | 10.0.17763.194 | Kernel Driver | False | Manual | Stopped |
| BthLEEnum | Bluetooth Low Energy Driver | C:\Windows\system32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys | 10.0.17763.592 | Kernel Driver | False | Manual | Stopped |
| BthMini | Bluetooth Radio Driver | C:\Windows\system32\drivers\BTHMINI.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| BTHPORT | Bluetooth Port Driver | C:\Windows\system32\drivers\BTHport.sys | 10.0.17763.678 | Kernel Driver | False | Manual | Stopped |
| BTHUSB | Bluetooth Radio USB Driver | C:\Windows\system32\drivers\BTHUSB.sys | 10.0.17763.678 | Kernel Driver | False | Manual | Stopped |
| bttflt | Microsoft Hyper-V VHDPMEM BTT Filter | C:\Windows\system32\drivers\bttflt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| buttonconverter | Service for Portable Device Control devices | C:\Windows\system32\drivers\buttonconverter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| bxfcoe | QLogic FCoE Offload driver | C:\Windows\system32\drivers\bxfcoe.sys | 7.14.15.2 | Kernel Driver | False | Manual | Stopped |
| bxois | QLogic Offload iSCSI Driver | C:\Windows\system32\drivers\bxois.sys | 7.14.7.2 | Kernel Driver | False | Manual | Stopped |
| CapImg | HID driver for CapImg touch screen | C:\Windows\system32\drivers\capimg.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Cbafilt | Cbafilt | C:\Windows\system32\drivers\cbafilt.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| CCFFilter | Cluster Client Failover Filter | C:\Windows\system32\drivers\CCFFilter.sys | 10.0.17763.652 | File System Driver | True | Auto | Running |
| ccSettings_{32447444-08D5-4B62-AF83-EE909CE470C6} | Symantec Endpoint Protection 14.2.3335.1000.105 Settings Manager | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\ccSetx64.sys | 13.4.0.26 | Kernel Driver | True | System | Running |
| cdfs | CD/DVD File System Reader | C:\Windows\system32\DRIVERS\cdfs.sys | 10.0.17763.379 | File System Driver | False | Disabled | Stopped |
| cdrom | CD-ROM Driver | C:\Windows\system32\drivers\cdrom.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| cht4iscsi | cht4iscsi | C:\Windows\system32\drivers\cht4sx64.sys | 6.9.12.400 | Kernel Driver | False | Manual | Stopped |
| cht4vbd | Chelsio Virtual Bus Driver | C:\Windows\system32\drivers\cht4vx64.sys | 6.9.12.400 | Kernel Driver | False | Manual | Stopped |
| CldFlt | Windows Cloud Files Filter Driver | C:\Windows\system32\drivers\cldflt.sys | 10.0.17763.1007 | File System Driver | True | Auto | Running |
| CLFS | Common Log (CLFS) | C:\Windows\system32\drivers\CLFS.sys | 10.0.17763.1457 | Kernel Driver | True | Boot | Running |
| clusbflt | Cluster BFlt Driver | C:\Windows\system32\drivers\clusbflt.sys | 10.0.17763.1369 | Kernel Driver | True | Boot | Running |
| ClusDisk | Cluster Disk Driver | C:\Windows\system32\drivers\ClusDisk.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| clusport | clusport | C:\Windows\system32\drivers\clusport.sys | 10.0.17763.1192 | Kernel Driver | True | Boot | Running |
| CmBatt | Microsoft ACPI Control Method Battery Driver | C:\Windows\system32\drivers\CmBatt.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| CNG | CNG | C:\Windows\system32\Drivers\cng.sys | 10.0.17763.1217 | Kernel Driver | True | Boot | Running |
| cnghwassist | CNG Hardware Assist algorithm provider | C:\Windows\system32\DRIVERS\cnghwassist.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| CompositeBus | Composite Bus Enumerator Driver | C:\Windows\system32\DriverStore\FileRepository\compositebus.inf_amd64_e4d35af746093dc3\CompositeBus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| condrv | Console Driver | C:\Windows\system32\drivers\condrv.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| CSC | Offline Files Driver | C:\Windows\system32\drivers\csc.sys | 10.0.17763.1131 | Kernel Driver | False | Disabled | Stopped |
| CsvFlt | CSV Mini-Filter Driver | C:\Windows\system32\drivers\CsvFlt.sys | 10.0.17763.529 | File System Driver | True | Manual | Running |
| CsvFs | Csv File System Driver | C:\Windows\system32\drivers\CsvFs.sys | 10.0.17763.1432 | File System Driver | True | Manual | Running |
| CsvNSFlt | CSV NameSpace Filter Driver | C:\Windows\system32\drivers\CsvNSFlt.sys | 10.0.17763.1 | File System Driver | True | Manual | Running |
| csvvbus | CSV Volume Bus | C:\Windows\system32\drivers\csvvbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| dam | Desktop Activity Moderator Driver | C:\Windows\system32\drivers\dam.sys | 10.0.17763.404 | Kernel Driver | False | System | Stopped |
| Datascrn | Datascrn | C:\Windows\system32\drivers\datascrn.sys | 10.0.17763.1131 | File System Driver | True | Boot | Running |
| Dfsc | DFS Namespace Client Driver | C:\Windows\system32\Drivers\dfsc.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| Disk | Disk Driver | C:\Windows\system32\drivers\disk.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| dmvsc | dmvsc | C:\Windows\system32\drivers\dmvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| drmkaud | Microsoft Trusted Audio Drivers | C:\Windows\system32\drivers\drmkaud.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| DXGKrnl | LDDM Graphics Subsystem | C:\Windows\system32\drivers\dxgkrnl.sys | 10.0.17763.1457 | Kernel Driver | True | System | Running |
| e1iexpress | Intel(R) PRO/1000 PCI Express Network Connection Driver I | C:\Windows\system32\drivers\e1i63x64.sys | 12.15.22.6 | Kernel Driver | True | Manual | Running |
| ebdrv | QLogic 10 Gigabit Ethernet Adapter VBD | C:\Windows\system32\drivers\evbda.sys | 7.13.65.105 | Kernel Driver | False | Manual | Stopped |
| eeCtrl | Symantec Eraser Control driver | \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys | 119.1.1.25 | Kernel Driver | True | System | Running |
| EhStorClass | Enhanced Storage Filter Driver | C:\Windows\system32\drivers\EhStorClass.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| EhStorTcgDrv | Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols | C:\Windows\system32\drivers\EhStorTcgDrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| elxfcoe | elxfcoe | C:\Windows\system32\drivers\elxfcoe.sys | 11.0.247.8000 | Kernel Driver | False | Manual | Stopped |
| elxstor | elxstor | C:\Windows\system32\drivers\elxstor.sys | 11.4.225.8009 | Kernel Driver | False | Manual | Stopped |
| EraserUtilRebootDrv | EraserUtilRebootDrv | \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys | 119.1.1.25 | Kernel Driver | True | Manual | Running |
| ErrDev | Microsoft Hardware Error Device Driver | C:\Windows\system32\drivers\errdev.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| exfat | exFAT File System Driver | C:\Windows\system32\drivers\exfat.sys | 10.0.17763.379 | File System Driver | False | Manual | Stopped |
| fastfat | FAT12/16/32 File System Driver | C:\Windows\system32\drivers\fastfat.sys | 10.0.17763.379 | File System Driver | False | Manual | Stopped |
| fcvsc | fcvsc | C:\Windows\system32\drivers\fcvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| fdc | Floppy Disk Controller Driver | C:\Windows\system32\drivers\fdc.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| FileCrypt | FileCrypt | C:\Windows\system32\drivers\filecrypt.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| FileInfo | File Information FS MiniFilter | C:\Windows\system32\drivers\fileinfo.sys | 10.0.17763.194 | File System Driver | False | Manual | Stopped |
| Filetrace | Filetrace | C:\Windows\system32\drivers\filetrace.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| flpydisk | Floppy Disk Driver | C:\Windows\system32\drivers\flpydisk.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| FltMgr | FltMgr | C:\Windows\system32\drivers\fltmgr.sys | 10.0.17763.831 | File System Driver | True | Boot | Running |
| FsDepends | File System Dependency Minifilter | C:\Windows\system32\drivers\FsDepends.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| gencounter | Microsoft Hyper-V Generation Counter | C:\Windows\system32\drivers\vmgencounter.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| genericusbfn | Generic USB Function Class | C:\Windows\system32\drivers\genericusbfn.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| GPIOClx0101 | Microsoft GPIO Class Extension Driver | C:\Windows\system32\Drivers\msgpioclx.sys | 10.0.17763.107 | Kernel Driver | False | Manual | Stopped |
| HDAudBus | Microsoft UAA Bus Driver for High Definition Audio | C:\Windows\system32\drivers\HDAudBus.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HidBatt | HID UPS Battery Driver | C:\Windows\system32\drivers\HidBatt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| hidinterrupt | Common Driver for HID Buttons implemented with interrupts | C:\Windows\system32\drivers\hidinterrupt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HidUsb | Microsoft HID Class Driver | C:\Windows\system32\drivers\hidusb.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HpSAMD | HpSAMD | C:\Windows\system32\drivers\HpSAMD.sys | 8.0.4.0 | Kernel Driver | False | Manual | Stopped |
| HTTP | HTTP Service | C:\Windows\system32\drivers\HTTP.sys | 10.0.17763.1432 | Kernel Driver | True | Manual | Running |
| hvcrash | hvcrash | C:\Windows\system32\drivers\hvcrash.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| hvservice | Hypervisor/Virtual Machine Support Driver | C:\Windows\system32\drivers\hvservice.sys | 10.0.17763.864 | Kernel Driver | False | Manual | Stopped |
| HwNClx0101 | Microsoft Hardware Notifications Class Extension Driver | C:\Windows\system32\Drivers\mshwnclx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| hwpolicy | Hardware Policy Driver | C:\Windows\system32\drivers\hwpolicy.sys | 10.0.17763.1131 | Kernel Driver | False | Boot | Stopped |
| hyperkbd | hyperkbd | C:\Windows\system32\drivers\hyperkbd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| HyperVideo | HyperVideo | C:\Windows\system32\drivers\HyperVideo.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| i8042prt | PS/2 Keyboard and Mouse Port Driver | C:\Windows\system32\drivers\i8042prt.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| iaLPSSi_GPIO | Intel(R) Serial IO GPIO Controller Driver | C:\Windows\system32\drivers\iaLPSSi_GPIO.sys | 1.1.250.0 | Kernel Driver | False | Manual | Stopped |
| iaLPSSi_I2C | Intel(R) Serial IO I2C Controller Driver | C:\Windows\system32\drivers\iaLPSSi_I2C.sys | 1.1.253.0 | Kernel Driver | False | Manual | Stopped |
| iaStorAVC | Intel Chipset SATA RAID Controller | C:\Windows\system32\drivers\iaStorAVC.sys | 15.44.0.1010 | Kernel Driver | False | Manual | Stopped |
| iaStorV | Intel RAID Controller Windows 7 | C:\Windows\system32\drivers\iaStorV.sys | 8.6.2.1019 | Kernel Driver | False | Manual | Stopped |
| ibbus | Mellanox InfiniBand Bus/AL (Filter Driver) | C:\Windows\system32\drivers\ibbus.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| IndirectKmd | Indirect Displays Kernel-Mode Driver | C:\Windows\system32\drivers\IndirectKmd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| intelide | intelide | C:\Windows\system32\drivers\intelide.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| intelpep | Intel(R) Power Engine Plug-in Driver | C:\Windows\system32\drivers\intelpep.sys | 10.0.17763.503 | Kernel Driver | True | Boot | Running |
| intelppm | Intel Processor Driver | C:\Windows\system32\drivers\intelppm.sys | 10.0.17763.1432 | Kernel Driver | True | Manual | Running |
| IpFilterDriver | IP Traffic Filter Driver | C:\Windows\system32\DRIVERS\ipfltdrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPMIDRV | IPMIDRV | C:\Windows\system32\drivers\IPMIDrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPNAT | IP Network Address Translator | C:\Windows\system32\drivers\ipnat.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPsecGW | Windows IPsec Gateway Driver | C:\Windows\system32\drivers\ipsecgw.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| IPT | IPT | C:\Windows\system32\drivers\ipt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| isapnp | isapnp | C:\Windows\system32\drivers\isapnp.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| iScsiPrt | iScsiPort Driver | C:\Windows\system32\drivers\msiscsi.sys | 10.0.17763.593 | Kernel Driver | True | Manual | Running |
| ItSas35i | ItSas35i | C:\Windows\system32\drivers\ItSas35i.sys | 2.60.59.80 | Kernel Driver | False | Manual | Stopped |
| kbdclass | Keyboard Class Driver | C:\Windows\system32\drivers\kbdclass.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| kbdhid | Keyboard HID Driver | C:\Windows\system32\drivers\kbdhid.sys | 10.0.17763.348 | Kernel Driver | False | Manual | Stopped |
| kdnic | Microsoft Kernel Debug Network Miniport (NDIS 6.20) | C:\Windows\system32\drivers\kdnic.sys | 6.1.0.0 | Kernel Driver | True | Manual | Running |
| KSecDD | KSecDD | C:\Windows\system32\Drivers\ksecdd.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| KSecPkg | KSecPkg | C:\Windows\system32\Drivers\ksecpkg.sys | 10.0.17763.503 | Kernel Driver | True | Boot | Running |
| ksthunk | Kernel Streaming Thunks | C:\Windows\system32\drivers\ksthunk.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| lltdio | Link-Layer Topology Discovery Mapper I/O Driver | C:\Windows\system32\drivers\lltdio.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| LSI_SAS | LSI_SAS | C:\Windows\system32\drivers\lsi_sas.sys | 1.34.3.83 | Kernel Driver | True | Boot | Running |
| LSI_SAS2i | LSI_SAS2i | C:\Windows\system32\drivers\lsi_sas2i.sys | 2.0.79.82 | Kernel Driver | False | Manual | Stopped |
| LSI_SAS3i | LSI_SAS3i | C:\Windows\system32\drivers\lsi_sas3i.sys | 2.51.24.80 | Kernel Driver | False | Manual | Stopped |
| LSI_SSS | LSI_SSS | C:\Windows\system32\drivers\lsi_sss.sys | 2.10.61.81 | Kernel Driver | False | Manual | Stopped |
| luafv | UAC File Virtualization | C:\Windows\system32\drivers\luafv.sys | 10.0.17763.437 | File System Driver | True | Auto | Running |
| mausbhost | MA-USB Host Controller Driver | C:\Windows\system32\drivers\mausbhost.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mausbip | MA-USB IP Filter Driver | C:\Windows\system32\drivers\mausbip.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| megasas | megasas | C:\Windows\system32\drivers\megasas.sys | 6.706.6.0 | Kernel Driver | False | Manual | Stopped |
| megasas2i | megasas2i | C:\Windows\system32\drivers\MegaSas2i.sys | 6.714.5.0 | Kernel Driver | False | Manual | Stopped |
| megasas35i | megasas35i | C:\Windows\system32\drivers\megasas35i.sys | 7.705.8.0 | Kernel Driver | False | Manual | Stopped |
| megasr | megasr | C:\Windows\system32\drivers\megasr.sys | 15.2.2013.129 | Kernel Driver | False | Manual | Stopped |
| Microsoft_Bluetooth_AvrcpTransport | Microsoft Bluetooth Avrcp Transport Driver | C:\Windows\system32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mlx4_bus | Mellanox ConnectX Bus Enumerator | C:\Windows\system32\drivers\mlx4_bus.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| MMCSS | Multimedia Class Scheduler | C:\Windows\system32\drivers\mmcss.sys | 10.0.17763.194 | Kernel Driver | False | Manual | Stopped |
| Modem | Modem | C:\Windows\system32\drivers\modem.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| monitor | Microsoft Monitor Class Function Driver Service | C:\Windows\system32\drivers\monitor.sys | 10.0.17763.771 | Kernel Driver | True | Manual | Running |
| mouclass | Mouse Class Driver | C:\Windows\system32\drivers\mouclass.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| mouhid | Mouse HID Driver | C:\Windows\system32\drivers\mouhid.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mountmgr | Mount Point Manager | C:\Windows\system32\drivers\mountmgr.sys | 10.0.17763.831 | Kernel Driver | True | Boot | Running |
| mpio | Microsoft Multi-Path Bus Driver | C:\Windows\system32\drivers\mpio.sys | 10.0.17763.1007 | Kernel Driver | True | Boot | Running |
| mpsdrv | Windows Defender Firewall Authorization Driver | C:\Windows\system32\drivers\mpsdrv.sys | 10.0.17763.404 | Kernel Driver | True | Manual | Running |
| mrxsmb | SMB MiniRedirector Wrapper and Engine | C:\Windows\system32\DRIVERS\mrxsmb.sys | 10.0.17763.1369 | File System Driver | True | Manual | Running |
| mrxsmb20 | SMB 2.0 MiniRedirector | C:\Windows\system32\DRIVERS\mrxsmb20.sys | 10.0.17763.1432 | File System Driver | True | Manual | Running |
| MsBridge | Microsoft MAC Bridge | C:\Windows\system32\drivers\bridge.sys | 10.0.17763.379 | Kernel Driver | False | Manual | Stopped |
| msdsm | Microsoft Multi-Path Device Specific Module | C:\Windows\system32\drivers\msdsm.sys | 10.0.17763.652 | Kernel Driver | True | Boot | Running |
| Msfs | Msfs | C:\Windows\system32\drivers\Msfs.sys | 10.0.17763.771 | File System Driver | True | System | Running |
| msgpiowin32 | Common Driver for Buttons, DockMode and Laptop/Slate Indicator | C:\Windows\system32\drivers\msgpiowin32.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mshidkmdf | Pass-through HID to KMDF Filter Driver | C:\Windows\system32\drivers\mshidkmdf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| mshidumdf | Pass-through HID to UMDF Driver | C:\Windows\system32\drivers\mshidumdf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| msisadrv | msisadrv | C:\Windows\system32\drivers\msisadrv.sys | 10.0.17763.771 | Kernel Driver | True | Boot | Running |
| MSKSSRV | Microsoft Streaming Service Proxy | C:\Windows\system32\drivers\MSKSSRV.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsLbfoProvider | Microsoft Load Balancing/Failover Provider | C:\Windows\system32\drivers\MsLbfoProvider.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsLldp | Microsoft Link-Layer Discovery Protocol | C:\Windows\system32\drivers\mslldp.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| MSPCLOCK | Microsoft Streaming Clock Proxy | C:\Windows\system32\drivers\MSPCLOCK.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MSPQM | Microsoft Streaming Quality Manager Proxy | C:\Windows\system32\drivers\MSPQM.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MsRPC | MsRPC | C:\Windows\system32\drivers\MsRPC.sys | 10.0.17763.1457 | Kernel Driver | False | Manual | Stopped |
| MsSecFlt | Microsoft Security Events Component Minifilter | C:\Windows\system32\drivers\mssecflt.sys | 10.0.17763.1369 | Kernel Driver | True | Boot | Running |
| mssmbios | Microsoft System Management BIOS Driver | C:\Windows\system32\drivers\mssmbios.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| MSTEE | Microsoft Streaming Tee/Sink-to-Sink Converter | C:\Windows\system32\drivers\MSTEE.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| MTConfig | Microsoft Input Configuration Driver | C:\Windows\system32\drivers\MTConfig.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Mup | Mup | C:\Windows\system32\Drivers\mup.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| mvumis | mvumis | C:\Windows\system32\drivers\mvumis.sys | 1.0.5.1016 | Kernel Driver | False | Manual | Stopped |
| ndfltr | NetworkDirect Service | C:\Windows\system32\drivers\ndfltr.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| NDIS | NDIS System Driver | C:\Windows\system32\drivers\ndis.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| NdisCap | Microsoft NDIS Capture | C:\Windows\system32\drivers\ndiscap.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisImPlatform | Microsoft Network Adapter Multiplexor Protocol | C:\Windows\system32\drivers\NdisImPlatform.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisTapi | Remote Access NDIS TAPI Driver | C:\Windows\system32\DRIVERS\ndistapi.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| Ndisuio | NDIS Usermode I/O Protocol | C:\Windows\system32\drivers\ndisuio.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NdisVirtualBus | Microsoft Virtual Network Adapter Enumerator | C:\Windows\system32\drivers\NdisVirtualBus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| NdisWan | Remote Access NDIS WAN Driver | C:\Windows\system32\drivers\ndiswan.sys | 10.0.17763.1098 | Kernel Driver | True | Manual | Running |
| ndiswanlegacy | Remote Access LEGACY NDIS WAN Driver | C:\Windows\system32\DRIVERS\ndiswan.sys | 10.0.17763.1098 | Kernel Driver | False | Manual | Stopped |
| ndproxy | NDIS Proxy Driver | C:\Windows\system32\DRIVERS\NDProxy.sys | 10.0.17763.652 | Kernel Driver | True | Manual | Running |
| NetAdapterCx | Network Adapter Wdf Class Extension Library | C:\Windows\system32\drivers\NetAdapterCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| NetBIOS | NetBIOS Interface | C:\Windows\system32\drivers\netbios.sys | 10.0.17763.1 | File System Driver | True | System | Running |
| NetBT | NetBT | C:\Windows\system32\DRIVERS\netbt.sys | 10.0.17763.437 | Kernel Driver | True | System | Running |
| Netft | Cluster Virtual Miniport Driver | C:\Windows\system32\drivers\netft.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| netvsc | netvsc | C:\Windows\system32\drivers\netvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| Npfs | Npfs | C:\Windows\system32\drivers\Npfs.sys | 10.0.17763.831 | File System Driver | True | System | Running |
| npsvctrig | Named pipe service trigger provider | C:\Windows\system32\drivers\npsvctrig.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| nsiproxy | NSI Proxy Service Driver | C:\Windows\system32\drivers\nsiproxy.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| Ntfs | Ntfs | C:\Windows\system32\drivers\Ntfs.sys | 10.0.17763.1457 | File System Driver | True | Manual | Running |
| Null | Null | C:\Windows\system32\drivers\Null.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| nvdimm | Microsoft NVDIMM device driver | C:\Windows\system32\drivers\nvdimm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| nvraid | nvraid | C:\Windows\system32\drivers\nvraid.sys | 10.6.0.23 | Kernel Driver | False | Manual | Stopped |
| nvstor | nvstor | C:\Windows\system32\drivers\nvstor.sys | 10.6.0.23 | Kernel Driver | False | Manual | Stopped |
| Parport | Parallel port driver | C:\Windows\system32\drivers\parport.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| partmgr | Partition driver | C:\Windows\system32\drivers\partmgr.sys | 10.0.17763.168 | Kernel Driver | True | Boot | Running |
| pci | PCI Bus Driver | C:\Windows\system32\drivers\pci.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| pciide | pciide | C:\Windows\system32\drivers\pciide.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pcmcia | pcmcia | C:\Windows\system32\drivers\pcmcia.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pcw | Performance Counters for Windows Driver | C:\Windows\system32\drivers\pcw.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| pdc | pdc | C:\Windows\system32\drivers\pdc.sys | 10.0.17763.404 | Kernel Driver | True | Boot | Running |
| PEAUTH | PEAUTH | C:\Windows\system32\drivers\peauth.sys | 10.0.17763.1432 | Kernel Driver | True | Auto | Running |
| percsas2i | percsas2i | C:\Windows\system32\drivers\percsas2i.sys | 6.805.3.0 | Kernel Driver | False | Manual | Stopped |
| percsas3i | percsas3i | C:\Windows\system32\drivers\percsas3i.sys | 6.604.6.0 | Kernel Driver | False | Manual | Stopped |
| PktMon | Packet Monitor Driver | C:\Windows\system32\drivers\PktMon.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| pmem | Microsoft persistent memory disk driver | C:\Windows\system32\drivers\pmem.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| PNPMEM | Microsoft Memory Module Driver | C:\Windows\system32\drivers\pnpmem.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| PptpMiniport | WAN Miniport (PPTP) | C:\Windows\system32\drivers\raspptp.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| Processor | Processor Driver | C:\Windows\system32\drivers\processr.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| Psched | QoS Packet Scheduler | C:\Windows\system32\drivers\pacer.sys | 10.0.17763.1397 | Kernel Driver | True | System | Running |
| qebdrv | QLogic FastLinQ Ethernet VBD | C:\Windows\system32\drivers\qevbda.sys | 8.33.20.103 | Kernel Driver | False | Manual | Stopped |
| qefcoe | QLogic FCoE driver | C:\Windows\system32\drivers\qefcoe.sys | 8.33.4.2 | Kernel Driver | False | Manual | Stopped |
| qeois | QLogic 40G iSCSI Driver | C:\Windows\system32\drivers\qeois.sys | 8.33.5.2 | Kernel Driver | False | Manual | Stopped |
| ql2300i | QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) | C:\Windows\system32\drivers\ql2300i.sys | 9.1.15.1 | Kernel Driver | False | Manual | Stopped |
| ql40xx2i | QLogic iSCSI Miniport Inbox Driver | C:\Windows\system32\drivers\ql40xx2i.sys | 2.1.5.0 | Kernel Driver | False | Manual | Stopped |
| qlfcoei | QLogic [FCoE] STOR Miniport Inbox Driver (wx64) | C:\Windows\system32\drivers\qlfcoei.sys | 9.1.11.3 | Kernel Driver | False | Manual | Stopped |
| Quota | Quota | C:\Windows\system32\drivers\quota.sys | 10.0.17763.1 | File System Driver | True | Boot | Running |
| QWAVEdrv | QWAVE driver | C:\Windows\system32\drivers\qwavedrv.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Ramdisk | Windows RAM Disk Driver | C:\Windows\system32\DRIVERS\ramdisk.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasAcd | Remote Access Auto Connection Driver | C:\Windows\system32\DRIVERS\rasacd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| RasAgileVpn | WAN Miniport (IKEv2) | C:\Windows\system32\drivers\AgileVpn.sys | 10.0.17763.1098 | Kernel Driver | True | Manual | Running |
| RasGre | WAN Miniport (GRE) | C:\Windows\system32\drivers\rasgre.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| Rasl2tp | WAN Miniport (L2TP) | C:\Windows\system32\drivers\rasl2tp.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| RasPppoe | Remote Access PPPOE Driver | C:\Windows\system32\DRIVERS\raspppoe.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| RasSstp | WAN Miniport (SSTP) | C:\Windows\system32\drivers\rassstp.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| rdbss | Redirected Buffering Sub System | C:\Windows\system32\DRIVERS\rdbss.sys | 10.0.17763.1369 | File System Driver | True | System | Running |
| rdpbus | Remote Desktop Device Redirector Bus Driver | C:\Windows\system32\drivers\rdpbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| RDPDR | Remote Desktop Device Redirector Driver | C:\Windows\system32\drivers\rdpdr.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| RdpVideoMiniport | Remote Desktop Video Miniport Driver | C:\Windows\system32\drivers\rdpvideominiport.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ReFS | ReFS | C:\Windows\system32\drivers\ReFS.sys | 10.0.17763.1369 | File System Driver | False | Manual | Stopped |
| ReFSv1 | ReFSv1 | C:\Windows\system32\drivers\ReFSv1.sys | 10.0.17763.404 | File System Driver | False | Manual | Stopped |
| ResumeKeyFilter | Resume Key Filter | C:\Windows\system32\drivers\ResumeKeyFilter.sys | 10.0.17763.1 | File System Driver | True | Auto | Running |
| RFCOMM | Bluetooth Device (RFCOMM Protocol TDI) | C:\Windows\system32\drivers\rfcomm.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| rhproxy | Resource Hub proxy driver | C:\Windows\system32\drivers\rhproxy.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| rspndr | Link-Layer Topology Discovery Responder | C:\Windows\system32\drivers\rspndr.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| s3cap | s3cap | C:\Windows\system32\drivers\vms3cap.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sacdrv | sacdrv | C:\Windows\system32\DRIVERS\sacdrv.sys | 10.0.17763.1 | Kernel Driver | False | Boot | Stopped |
| sbp2port | SBP-2 Transport/Protocol Bus Driver | C:\Windows\system32\drivers\sbp2port.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| scfilter | Smart card PnP Class Filter Driver | C:\Windows\system32\DRIVERS\scfilter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| scmbus | Microsoft Storage Class Memory Bus Driver | C:\Windows\system32\drivers\scmbus.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| sdbus | sdbus | C:\Windows\system32\drivers\sdbus.sys | 10.0.17763.1131 | Kernel Driver | False | Manual | Stopped |
| SDFRd | SDF Reflector | C:\Windows\system32\drivers\SDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sdstor | SD Storage Port Driver | C:\Windows\system32\drivers\sdstor.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SerCx | Serial UART Support Library | C:\Windows\system32\drivers\SerCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SerCx2 | Serial UART Support Library | C:\Windows\system32\drivers\SerCx2.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Serenum | Serenum Filter Driver | C:\Windows\system32\drivers\serenum.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| Serial | Serial port driver | C:\Windows\system32\drivers\serial.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| sermouse | Serial Mouse Driver | C:\Windows\system32\drivers\sermouse.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| sfloppy | High-Capacity Floppy Disk Drive | C:\Windows\system32\drivers\sfloppy.sys | 10.0.17763.1131 | Kernel Driver | False | Manual | Stopped |
| SgrmAgent | System Guard Runtime Monitor Agent | C:\Windows\system32\drivers\SgrmAgent.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| SiSRaid2 | SiSRaid2 | C:\Windows\system32\drivers\SiSRaid2.sys | 5.1.1039.2600 | Kernel Driver | False | Manual | Stopped |
| SiSRaid4 | SiSRaid4 | C:\Windows\system32\drivers\sisraid4.sys | 5.1.1039.3600 | Kernel Driver | False | Manual | Stopped |
| SmartSAMD | SmartSAMD | C:\Windows\system32\drivers\SmartSAMD.sys | 1.50.0.0 | Kernel Driver | False | Manual | Stopped |
| smbdirect | smbdirect | C:\Windows\system32\DRIVERS\smbdirect.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| spaceport | Storage Spaces Driver | C:\Windows\system32\drivers\spaceport.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| SpbCx | Simple Peripheral Bus Support Library | C:\Windows\system32\drivers\SpbCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| SRTSP | Symantec Real Time Storage Protection x64 | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SRTSP64.SYS | 15.7.0.170 | File System Driver | True | System | Running |
| SRTSPX | Symantec Real Time Storage Protection (PEL) x64 | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SRTSPX64.SYS | 15.7.0.170 | Kernel Driver | True | System | Running |
| srv2 | Server SMB 2.xxx Driver | C:\Windows\system32\DRIVERS\srv2.sys | 10.0.17763.592 | File System Driver | True | Manual | Running |
| srvnet | srvnet | C:\Windows\system32\DRIVERS\srvnet.sys | 10.0.17763.1075 | File System Driver | True | Manual | Running |
| stexstor | stexstor | C:\Windows\system32\drivers\stexstor.sys | 5.1.0.10 | Kernel Driver | False | Manual | Stopped |
| storahci | Microsoft Standard SATA AHCI Driver | C:\Windows\system32\drivers\storahci.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| storflt | Microsoft Hyper-V Storage Accelerator | C:\Windows\system32\drivers\vmstorfl.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| stornvme | Microsoft Standard NVM Express Driver | C:\Windows\system32\drivers\stornvme.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| storqosflt | Storage QoS Filter Driver | C:\Windows\system32\drivers\storqosflt.sys | 10.0.17763.348 | File System Driver | True | Auto | Running |
| storufs | Microsoft Universal Flash Storage (UFS) Driver | C:\Windows\system32\drivers\storufs.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| storvsc | storvsc | C:\Windows\system32\drivers\storvsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| svhdxflt | Shared VHDX File Access Filter Driver | C:\Windows\system32\drivers\svhdxflt.sys | 10.0.17763.1 | File System Driver | True | Auto | Running |
| swenum | Software Bus Driver | C:\Windows\system32\DriverStore\FileRepository\swenum.inf_amd64_31f554b660026323\swenum.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| SymEFASI | Symantec Extended File Attributes (SI) | C:\Windows\system32\drivers\symefasi\0603030.024\symefasi64.sys | 6.3.3.35 | File System Driver | True | Boot | Running |
| SymELAM | Symantec ELAM Driver | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\SymELAM.sys | 2.0.1.115 | Kernel Driver | False | Boot | Stopped |
| SymEvent | SymEvent | \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS | 14.0.6.27 | Kernel Driver | True | Manual | Running |
| SymIRON | Symantec Iron Driver | C:\Windows\system32\Drivers\SEP\0E020D07\03E8.105\x64\Ironx64.SYS | 7.0.7.11 | Kernel Driver | True | System | Running |
| Synth3dVsc | Synth3dVsc | C:\Windows\system32\drivers\Synth3dVsc.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| Tcpip | TCP/IP Protocol Driver | C:\Windows\system32\drivers\tcpip.sys | 10.0.17763.1432 | Kernel Driver | True | Boot | Running |
| Tcpip6 | @todo.dll,-100;Microsoft IPv6 Protocol Driver | C:\Windows\system32\drivers\tcpip.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| tcpipreg | TCP/IP Registry Compatibility | C:\Windows\system32\drivers\tcpipreg.sys | 10.0.17763.1 | Kernel Driver | True | Auto | Running |
| tdx | NetIO Legacy TDI Support Driver | C:\Windows\system32\DRIVERS\tdx.sys | 10.0.17763.1 | Kernel Driver | True | System | Running |
| terminpt | Microsoft Remote Desktop Input Driver | C:\Windows\system32\drivers\terminpt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| TPM | TPM | C:\Windows\system32\drivers\tpm.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| TsUsbFlt | Remote Desktop USB Hub Class Filter Driver | C:\Windows\system32\drivers\tsusbflt.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| TsUsbGD | Remote Desktop Generic USB Device | C:\Windows\system32\drivers\TsUsbGD.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| tsusbhub | Remote Desktop USB Hub | C:\Windows\system32\drivers\tsusbhub.sys | 10.0.17763.973 | Kernel Driver | False | Manual | Stopped |
| tunnel | Microsoft Tunnel Miniport Adapter Driver | C:\Windows\system32\drivers\tunnel.sys | 10.0.17763.864 | Kernel Driver | False | Manual | Stopped |
| UASPStor | USB Attached SCSI (UAS) Driver | C:\Windows\system32\drivers\uaspstor.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmCx0101 | USB Connector Manager KMDF Class Extension | C:\Windows\system32\Drivers\UcmCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmTcpciCx0101 | UCM-TCPCI KMDF Class Extension | C:\Windows\system32\Drivers\UcmTcpciCx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmUcsi | USB Connector Manager UCSI Client | C:\Windows\system32\drivers\UcmUcsi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UcmUcsiAcpiClient | UCM-UCSI ACPI Client | C:\Windows\system32\drivers\UcmUcsiAcpiClient.sys | 10.0.17763.719 | Kernel Driver | False | Manual | Stopped |
| UcmUcsiCx0101 | UCM-UCSI KMDF Class Extension | C:\Windows\system32\Drivers\UcmUcsiCx.sys | 10.0.17763.737 | Kernel Driver | False | Manual | Stopped |
| Ucx01000 | USB Host Support Library | C:\Windows\system32\drivers\ucx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UdeCx | USB Device Emulation Support Library | C:\Windows\system32\drivers\udecx.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| udfs | udfs | C:\Windows\system32\DRIVERS\udfs.sys | 10.0.17763.379 | File System Driver | False | Disabled | Stopped |
| UEFI | Microsoft UEFI Driver | C:\Windows\system32\drivers\UEFI.sys | 10.0.17763.652 | Kernel Driver | False | Manual | Stopped |
| UevAgentDriver | UevAgentDriver | C:\Windows\system32\drivers\UevAgentDriver.sys | 10.0.17763.1 | File System Driver | False | Disabled | Stopped |
| Ufx01000 | USB Function Class Extension | C:\Windows\system32\drivers\ufx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UfxChipidea | USB Chipidea Controller | C:\Windows\system32\drivers\UfxChipidea.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ufxsynopsys | USB Synopsys Controller | C:\Windows\system32\drivers\ufxsynopsys.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| umbus | UMBus Enumerator Driver | C:\Windows\system32\drivers\umbus.sys | 10.0.17763.1 | Kernel Driver | True | Manual | Running |
| UmPass | Microsoft UMPass Driver | C:\Windows\system32\drivers\umpass.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsChipidea | Chipidea USB Role-Switch Driver | C:\Windows\system32\drivers\urschipidea.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsCx01000 | USB Role-Switch Support Library | C:\Windows\system32\drivers\urscx01000.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| UrsSynopsys | Synopsys USB Role-Switch Driver | C:\Windows\system32\drivers\urssynopsys.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbccgp | Microsoft USB Generic Parent Driver | C:\Windows\system32\drivers\usbccgp.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| usbehci | Microsoft USB 2.0 Enhanced Host Controller Miniport Driver | C:\Windows\system32\drivers\usbehci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbhub | Microsoft USB Standard Hub Driver | C:\Windows\system32\drivers\usbhub.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBHUB3 | SuperSpeed Hub | C:\Windows\system32\drivers\UsbHub3.sys | 10.0.17763.1192 | Kernel Driver | False | Manual | Stopped |
| usbohci | Microsoft USB Open Host Controller Miniport Driver | C:\Windows\system32\drivers\usbohci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbprint | Microsoft USB PRINTER Class | C:\Windows\system32\drivers\usbprint.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbser | Microsoft USB Serial Driver | C:\Windows\system32\drivers\usbser.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBSTOR | USB Mass Storage Driver | C:\Windows\system32\drivers\USBSTOR.SYS | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| usbuhci | Microsoft USB Universal Host Controller Miniport Driver | C:\Windows\system32\drivers\usbuhci.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| USBXHCI | USB xHCI Compliant Host Controller | C:\Windows\system32\drivers\USBXHCI.SYS | 10.0.17763.1075 | Kernel Driver | False | Manual | Stopped |
| vdrvroot | Microsoft Virtual Drive Enumerator | C:\Windows\system32\drivers\vdrvroot.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| VerifierExt | Driver Verifier Extension | C:\Windows\system32\drivers\VerifierExt.sys | 10.0.17763.1 | Kernel Driver | False | Disabled | Stopped |
| vhdmp | vhdmp | C:\Windows\system32\drivers\vhdmp.sys | 10.0.17763.1432 | Kernel Driver | False | Manual | Stopped |
| vhf | Virtual HID Framework (VHF) Driver | C:\Windows\system32\drivers\vhf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| vm3dmp | vm3dmp | C:\Windows\system32\DRIVERS\vm3dmp.sys | 8.16.1.24 | Kernel Driver | True | Manual | Running |
| vm3dmp_loader | vm3dmp_loader | C:\Windows\system32\DRIVERS\vm3dmp_loader.sys | 8.16.1.24 | Kernel Driver | True | Manual | Running |
| vm3dmp-debug | vm3dmp-debug | C:\Windows\system32\DRIVERS\vm3dmp-debug.sys | 8.16.1.24 | Kernel Driver | False | Manual | Stopped |
| vm3dmp-stats | vm3dmp-stats | C:\Windows\system32\DRIVERS\vm3dmp-stats.sys | 8.16.1.24 | Kernel Driver | False | Manual | Stopped |
| vmbus | Virtual Machine Bus | C:\Windows\system32\drivers\vmbus.sys | 10.0.17763.771 | Kernel Driver | False | Manual | Stopped |
| VMBusHID | VMBusHID | C:\Windows\system32\drivers\VMBusHID.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| vmci | VMware VMCI Bus Driver | C:\Windows\system32\drivers\vmci.sys | 9.8.16.0 | Kernel Driver | True | Boot | Running |
| vmgid | Microsoft Hyper-V Guest Infrastructure Driver | C:\Windows\system32\drivers\vmgid.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| VMMemCtl | Memory Control Driver | C:\Windows\system32\DRIVERS\vmmemctl.sys | 7.4.2.0 | Kernel Driver | True | Auto | Running |
| vmmouse | VMware Pointing Device | C:\Windows\system32\drivers\vmmouse.sys | 12.5.7.0 | Kernel Driver | True | Manual | Running |
| vmxnet3ndis6 | vmxnet3 NDIS 6 Ethernet Adapter Driver | C:\Windows\system32\drivers\vmxnet3.sys | 1.8.16.0 | Kernel Driver | True | Manual | Running |
| volmgr | Volume Manager Driver | C:\Windows\system32\drivers\volmgr.sys | 10.0.17763.1158 | Kernel Driver | True | Boot | Running |
| volmgrx | Dynamic Volume Manager | C:\Windows\system32\drivers\volmgrx.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| volsnap | Volume Shadow Copy driver | C:\Windows\system32\drivers\volsnap.sys | 10.0.17763.831 | Kernel Driver | True | Boot | Running |
| volume | Volume driver | C:\Windows\system32\drivers\volume.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| vpci | Microsoft Hyper-V Virtual PCI Bus | C:\Windows\system32\drivers\vpci.sys | 10.0.17763.292 | Kernel Driver | False | Manual | Stopped |
| vsmraid | vsmraid | C:\Windows\system32\drivers\vsmraid.sys | 7.0.9600.6352 | Kernel Driver | False | Manual | Stopped |
| vsock | vSockets Virtual Machine Communication Interface Sockets driver | C:\Windows\system32\DRIVERS\vsock.sys | 9.8.12.0 | Kernel Driver | True | Boot | Running |
| VSTXRAID | VIA StorX Storage RAID Controller Windows Driver | C:\Windows\system32\drivers\vstxraid.sys | 8.0.9200.8110 | Kernel Driver | False | Manual | Stopped |
| WacomPen | Wacom Serial Pen HID Driver | C:\Windows\system32\drivers\wacompen.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| wanarp | Remote Access IP ARP Driver | C:\Windows\system32\DRIVERS\wanarp.sys | 10.0.17763.1075 | Kernel Driver | True | Auto | Running |
| wanarpv6 | Remote Access IPv6 ARP Driver | C:\Windows\system32\DRIVERS\wanarp.sys | 10.0.17763.1075 | Kernel Driver | False | Manual | Stopped |
| wcifs | Windows Container Isolation | C:\Windows\system32\drivers\wcifs.sys | 10.0.17763.1007 | File System Driver | True | Auto | Running |
| wcnfs | Windows Container Name Virtualization | C:\Windows\system32\drivers\wcnfs.sys | 10.0.17763.194 | File System Driver | False | Manual | Stopped |
| WdBoot | Windows Defender Antivirus Boot Driver | C:\Windows\system32\drivers\WdBoot.sys | 4.18.1807.18075 | Kernel Driver | False | Manual | Stopped |
| Wdf01000 | Kernel Mode Driver Frameworks service | C:\Windows\system32\drivers\Wdf01000.sys | 1.27.17763.1192 | Kernel Driver | True | Boot | Running |
| WdFilter | Windows Defender Antivirus Mini-Filter Driver | C:\Windows\system32\drivers\WdFilter.sys | 4.18.1807.18075 | File System Driver | False | Manual | Stopped |
| WdmCompanionFilter | WdmCompanionFilter | C:\Windows\system32\drivers\WdmCompanionFilter.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WdNisDrv | Windows Defender Antivirus Network Inspection System Driver | C:\Windows\system32\Drivers\WdNisDrv.sys | 4.18.1807.18075 | Kernel Driver | False | Manual | Stopped |
| WFPLWFS | Microsoft Windows Filtering Platform | C:\Windows\system32\drivers\wfplwfs.sys | 10.0.17763.771 | Kernel Driver | True | Boot | Running |
| WIMMount | WIMMount | C:\Windows\system32\drivers\wimmount.sys | 10.0.17763.1 | File System Driver | False | Manual | Stopped |
| WindowsTrustedRT | Windows Trusted Execution Environment Class Extension | C:\Windows\system32\drivers\WindowsTrustedRT.sys | 10.0.17763.292 | Kernel Driver | True | Boot | Running |
| WindowsTrustedRTProxy | Microsoft Windows Trusted Runtime Secure Service | C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys | 10.0.17763.1 | Kernel Driver | True | Boot | Running |
| WinMad | WinMad Service | C:\Windows\system32\drivers\winmad.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| WinNat | Windows NAT Driver | C:\Windows\system32\drivers\winnat.sys | 10.0.17763.1192 | Kernel Driver | False | Manual | Stopped |
| WinQuic | WinQuic | C:\Windows\system32\drivers\winquic.sys | 10.0.17763.404 | Kernel Driver | True | Manual | Running |
| WINUSB | WinUsb Driver | C:\Windows\system32\drivers\WinUSB.SYS | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WinVerbs | WinVerbs Service | C:\Windows\system32\drivers\winverbs.sys | 5.50.14643.0 | Kernel Driver | False | Manual | Stopped |
| WmiAcpi | Microsoft Windows Management Interface for ACPI | C:\Windows\system32\drivers\wmiacpi.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Wof | Windows Overlay File System Filter Driver | C:\Windows\system32\drivers\Wof.sys | 10.0.17763.802 | File System Driver | True | Boot | Running |
| WpdUpFltr | WPD Upper Class Filter Driver | C:\Windows\system32\drivers\WpdUpFltr.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| ws2ifsl | Windows Socket 2.0 Non-IFS Service Provider Support Environment | C:\Windows\system32\drivers\ws2ifsl.sys | 10.0.17763.737 | Kernel Driver | True | System | Running |
| WudfPf | User Mode Driver Frameworks Platform Driver | C:\Windows\system32\drivers\WudfPf.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WUDFRd | Windows Driver Foundation - User-mode Driver Framework Reflector | C:\Windows\system32\drivers\WUDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| WUDFWpdFs | WPD File System driver | C:\Windows\system32\DRIVERS\WUDFRd.sys | 10.0.17763.1 | Kernel Driver | False | Manual | Stopped |
| Item | Value |
|---|---|
| System Name | STUSTARWINDSRV1 |
| System Manufacturer | VMware, Inc. |
| System Model | VMware Virtual Platform |
| User Name | STUSTARWINDSRV1\Administrator |
| Domain | student.local |
| Time Zone | Eastern Standard Time |
| Daylight in Effect | False |
| System Type | 64-bit x64 Family |
| Number Of Processors | 1 |
| Processor #1 | GenuineIntel Intel64 Family 6 Model 45 Stepping 2 at 1.95 GHz |
| Item | Value |
|---|---|
| System Name | STUSTARWINDSRV2 |
| System Manufacturer | VMware, Inc. |
| System Model | VMware Virtual Platform |
| User Name | STUSTARWINDSRV2\Administrator |
| Domain | student.local |
| Time Zone | Eastern Standard Time |
| Daylight in Effect | False |
| System Type | 64-bit x64 Family |
| Number Of Processors | 1 |
| Processor #1 | GenuineIntel Intel64 Family 6 Model 45 Stepping 2 at 1.95 GHz |
| Fqdn | Domain | Domain Role | Site Name | Organizational Unit |
|---|---|---|---|---|
| StuStarWindSrv1.student.local | student.local | Member Server | Default-First-Site-Name | Computers |
| StuStarWindSrv2.student.local | student.local | Member Server | Default-First-Site-Name | Computers |
| Prefix | Prefix Length |
|---|---|
| 172.16.10.0 | 24 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv1.student.local - ISCSI |
| DHCP Enabled | False |
| Connected to iSCSI target | False |
| IP Address | 172.16.10.10 |
| Prefix Length | 24 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv2.student.local - ISCSIHB |
| DHCP Enabled | False |
| Connected to iSCSI target | False |
| IP Address | 172.16.10.20 |
| Prefix Length | 24 |
| Prefix | Prefix Length |
|---|---|
| 172.25.4.0 | 22 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv1.student.local - Ethernet |
| DHCP Enabled | True |
| Connected to iSCSI target | False |
| IP Address | 172.25.4.12 |
| Prefix Length | 22 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv2.student.local - Ethernet |
| DHCP Enabled | True |
| Connected to iSCSI target | False |
| IP Address | 172.25.4.19 |
| Prefix Length | 22 |
| Prefix | Prefix Length |
|---|---|
| 172.16.20.0 | 24 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv1.student.local - SYNC |
| DHCP Enabled | False |
| Connected to iSCSI target | False |
| IP Address | 172.16.20.10 |
| Prefix Length | 24 |
| Item | Value |
|---|---|
| Network Interface | StuStarWindSrv2.student.local - Ethernet 2 |
| DHCP Enabled | False |
| Connected to iSCSI target | False |
| IP Address | 172.16.20.20 |
| Prefix Length | 24 |
| Node | State | Information Details |
|---|---|---|
| StuStarWindSrv1 | Up | |
| StuStarWindSrv2 | Paused |
| Item | Name |
|---|---|
| Adapter Name | ISCSI |
| Adapter Description | vmxnet3 Ethernet Adapter |
| Physical Address | 00-50-56-A3-FA-68 |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::7448:72fd:1e5d:fe9%9 |
| Prefix Length | 64 |
| IP Address | 172.16.10.10 |
| Prefix Length | 24 |
| Item | Name |
|---|---|
| Adapter Name | Ethernet |
| Adapter Description | vmxnet3 Ethernet Adapter #2 |
| Physical Address | 00-50-56-A3-F7-48 |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | 192.168.70.4, 192.168.17.31, 192.168.17.32 |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::44a1:7b13:cbb9:7e7a%7 |
| Prefix Length | 64 |
| IP Address | 172.25.4.12 |
| Prefix Length | 22 |
| Item | Name |
|---|---|
| Adapter Name | Local Area Connection* 1 |
| Adapter Description | Microsoft Failover Cluster Virtual Adapter |
| Physical Address | 02-36-35-54-85-BE |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::2486:6c4a:a1fc:9910%8 |
| Prefix Length | 64 |
| IP Address | 169.254.2.163 |
| Prefix Length | 16 |
| Item | Name |
|---|---|
| Adapter Name | SYNC |
| Adapter Description | Intel(R) 82574L Gigabit Network Connection |
| Physical Address | 00-50-56-A3-64-CF |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::5854:42e8:c2f7:ad73%4 |
| Prefix Length | 64 |
| IP Address | 172.16.20.10 |
| Prefix Length | 24 |
| Item | Name |
|---|---|
| Adapter Name | Loopback Pseudo-Interface 1 |
| Adapter Description | Software Loopback Interface 1 |
| Physical Address | |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | |
| IP Address | ::1 |
| Prefix Length | 128 |
| IP Address | 127.0.0.1 |
| Prefix Length | 8 |
| Item | Name |
|---|---|
| Adapter Name | ISCSIHB |
| Adapter Description | vmxnet3 Ethernet Adapter |
| Physical Address | 00-50-56-A3-58-08 |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::b9ed:c485:d203:666%17 |
| Prefix Length | 64 |
| IP Address | 172.16.10.20 |
| Prefix Length | 24 |
| Item | Name |
|---|---|
| Adapter Name | Ethernet |
| Adapter Description | vmxnet3 Ethernet Adapter #2 |
| Physical Address | 00-50-56-A3-70-B1 |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | 192.168.70.4, 192.168.17.31, 192.168.17.32 |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::5c72:91eb:9157:c06b%13 |
| Prefix Length | 64 |
| IP Address | 172.25.4.19 |
| Prefix Length | 22 |
| IP Address | 172.25.4.135 |
| Prefix Length | 22 |
| Item | Name |
|---|---|
| Adapter Name | Local Area Connection* 1 |
| Adapter Description | Microsoft Failover Cluster Virtual Adapter |
| Physical Address | 02-8B-6E-04-34-E7 |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::6c8e:b36f:7478:8f4f%4 |
| Prefix Length | 64 |
| IP Address | 169.254.1.214 |
| Prefix Length | 16 |
| Item | Name |
|---|---|
| Adapter Name | Ethernet 2 |
| Adapter Description | Intel(R) 82574L Gigabit Network Connection |
| Physical Address | 00-50-56-A3-43-AC |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | student.local |
| IP Address | fe80::bd4a:69cf:2cbd:a84a%16 |
| Prefix Length | 64 |
| IP Address | 172.16.20.20 |
| Prefix Length | 24 |
| Item | Name |
|---|---|
| Adapter Name | Loopback Pseudo-Interface 1 |
| Adapter Description | Software Loopback Interface 1 |
| Physical Address | |
| Status | Operational |
| LBFO Enabled | No |
| DNS Servers | |
| DNS Suffix Search Order | |
| IP Address | ::1 |
| Prefix Length | 128 |
| IP Address | 127.0.0.1 |
| Prefix Length | 8 |
| Device-specific module (DSM) Name | Major Version | Minor Version | Product Build | QFE Number |
|---|---|---|---|---|
| Microsoft DSM | 10 | 0 | 17763 | 652 |
| Device-specific module (DSM) Name | Major Version | Minor Version | Product Build | QFE Number |
|---|---|---|---|---|
| Microsoft DSM | 10 | 0 | 17763 | 652 |
| Node | Operating System Supports Clustering |
|---|---|
| StuStarWindSrv1.student.local | Supported |
| StuStarWindSrv2.student.local | Supported |
| Node | Installation Type |
|---|---|
| StuStarWindSrv1.student.local | Full Install |
| StuStarWindSrv2.student.local | Full Install |
| Node | Operating System | Version | Manufacturer |
|---|---|---|---|
| StuStarWindSrv1.student.local | Microsoft Windows Server 2019 Standard | 10.0.17763 | Microsoft Corporation |
| StuStarWindSrv2.student.local | Microsoft Windows Server 2019 Standard | 10.0.17763 | Microsoft Corporation |
| Voter Name | State | Assigned Vote | Current Vote |
|---|---|---|---|
| Cluster Disk 1 | Offline | 1 | 1 |
| StuStarWindSrv1 | Up | 1 | 1 |
| StuStarWindSrv2 | Paused | 1 | 1 |
| Service | Display Name | Running | Starts Automatically |
|---|---|---|---|
| RPCSs | Remote Procedure Call (RPC) | Yes | Yes |
| RemoteRegistry | Remote Registry | Yes | Yes |
| Lanmanserver | Server | Yes | Yes |
| Lanmanworkstation | Workstation | Yes | Yes |
| WinMgmt | Windows Management Instrumentation | Yes | Yes |
| Service | Display Name | Running | Starts Automatically |
|---|---|---|---|
| RPCSs | Remote Procedure Call (RPC) | Yes | Yes |
| RemoteRegistry | Remote Registry | Yes | Yes |
| Lanmanserver | Server | Yes | Yes |
| Lanmanworkstation | Workstation | Yes | Yes |
| WinMgmt | Windows Management Instrumentation | Yes | Yes |
| Node | System Drive |
|---|---|
| StuStarWindSrv1.student.local | C: |
| StuStarWindSrv2.student.local | C: |