上传记录 46415b66436f23ac5f601284
| 租户 | club-a |
|---|---|
| 设备 | mg-6af6953d-0b8d-4a3c-8d9c-51feb2438b08 |
| 账号/别名 | 本机测试机 |
| 会话 | sess-20260922T184531Z |
| 来源 | exe |
| 客户端采集时间 | 2026-09-22 18:45:45 |
| 服务器接收时间 | 2026-09-22 18:45:46.339000 |
| SHA-256 | 0941f4f2d08097dbb3368f87f473d37bef2fb0cb90230748a31055724efedc93 |
| 字节数 | 102374 |
原始指标 JSON（只读）
{
"account_alias": "本机测试机",
"collected_at": "2026-09-22T18:45:45Z",
"device_id": "mg-6af6953d-0b8d-4a3c-8d9c-51feb2438b08",
"metrics": {
"drivers": [
{
"Name": "1394ohci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\1394ohci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "3ware",
"PathName": "C:\\WINDOWS\\system32\\drivers\\3ware.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ACPI",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ACPI.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "AcpiAudioCompositorInbox",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\acpiaudiocompositor.inf_amd64_3a22a3df84b6fbc6\\AcpiAudioCompositor.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AcpiDev",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AcpiDev.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "acpiex",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\acpiex.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "acpipagr",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\acpipagr.inf_amd64_d1093347a27ff89c\\acpipagr.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "AcpiPmi",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\acpipmi.inf_amd64_3ced06eb61dcc792\\acpipmi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "acpitime",
"PathName": "C:\\WINDOWS\\system32\\drivers\\acpitime.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Acx01000",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Acx01000.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ADP80XX",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ADP80XX.SYS",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "aehd",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\aehd.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "AFD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\afd.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "afunix",
"PathName": "C:\\WINDOWS\\system32\\drivers\\afunix.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "ahcache",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\ahcache.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "amdgpio2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdgpio2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "amdi2c",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdi2c.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AmdK8",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdk8.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AmdPPM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdppm.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "amdsata",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdsata.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "amdsbs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdsbs.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "amdwps",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdwps.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "amdxata",
"PathName": "C:\\WINDOWS\\system32\\drivers\\amdxata.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "androidusb",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\androidusb.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppID",
"PathName": "C:\\WINDOWS\\system32\\drivers\\appid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppleKmdfFilter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppleKmdfFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppleLowerFilter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppleLowerFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppleSSD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppleSSD.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "applockerfltr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\applockerfltr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppvStrm",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppvStrm.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppvVemgr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppvVemgr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AppvVfs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AppvVfs.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "arcsas",
"PathName": "C:\\WINDOWS\\system32\\drivers\\arcsas.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "AsyncMac",
"PathName": "C:\\WINDOWS\\system32\\drivers\\asyncmac.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "atapi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\atapi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "b06bdrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bxvbda.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "bam",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bam.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "BasicDisplay",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_9f34636ebdd89def\\BasicDisplay.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "BasicRender",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\basicrender.inf_amd64_cf45ae7c2c82746d\\BasicRender.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "bcmfn2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bcmfn2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Beep",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Beep.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "bfs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bfs.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "bindflt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bindflt.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "bowser",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\bowser.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthA2dp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BthA2dp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthEnum",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BthEnum.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthHFAud",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BthHfAud.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthHFEnum",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bthhfenum.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthLEEnum",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Microsoft.Bluetooth.Legacy.LEEnumerator.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthMini",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BTHMINI.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "BTHMODEM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bthmodem.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BthPan",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bthpan.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BTHPORT",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BTHport.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "BTHUSB",
"PathName": "C:\\WINDOWS\\system32\\drivers\\BTHUSB.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "bttflt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bttflt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "buttonconverter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\buttonconverter.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "CAD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\CAD.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "CDD",
"PathName": "C:\\WINDOWS\\system32\\cdd.dll",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "cdfs",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\cdfs.sys",
"StartMode": "Disabled",
"State": "Running"
},
{
"Name": "cdrom",
"PathName": "C:\\WINDOWS\\system32\\drivers\\cdrom.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "cht4iscsi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\cht4sx64.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "cht4vbd",
"PathName": "C:\\WINDOWS\\system32\\drivers\\cht4vx64.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "CimFS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\CimFS.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "circlass",
"PathName": "C:\\WINDOWS\\system32\\drivers\\circlass.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "CldFlt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\cldflt.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "CLFS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\CLFS.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "CmBatt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\CmBatt.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "CNG",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\cng.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "cnghwassist",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\cnghwassist.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "CompositeBus",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\compositebus.inf_amd64_8cf6fa9d3afdfa25\\CompositeBus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "condrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\condrv.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "CSC",
"PathName": "C:\\WINDOWS\\system32\\drivers\\csc.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "dam",
"PathName": "C:\\WINDOWS\\system32\\drivers\\dam.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "devmap",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\devmap.inf_amd64_be39703ead246fc4\\devmap.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Dfsc",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\dfsc.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "disk",
"PathName": "C:\\WINDOWS\\system32\\drivers\\disk.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "DisplayMux",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\displaymux.inf_amd64_da65a70f0c3ce0f3\\DisplayMux.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "dmvsc",
"PathName": "C:\\WINDOWS\\system32\\drivers\\dmvsc.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "drmkaud",
"PathName": "C:\\WINDOWS\\system32\\drivers\\drmkaud.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "DXGKrnl",
"PathName": "C:\\WINDOWS\\system32\\drivers\\dxgkrnl.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "ebdrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\evbda.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ebdrv0",
"PathName": "C:\\WINDOWS\\system32\\drivers\\evbd0a.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "EDWPDFilter",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\edwpdfilter.inf_amd64_3f168a71bd21ea27\\EDWPDFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "EhStorClass",
"PathName": "C:\\WINDOWS\\system32\\drivers\\EhStorClass.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "EhStorTcgDrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\EhStorTcgDrv.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ErrDev",
"PathName": "C:\\WINDOWS\\system32\\drivers\\errdev.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ExecutionContext",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\ExecutionContext.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "exfat",
"PathName": "C:\\WINDOWS\\system32\\drivers\\exfat.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "fastfat",
"PathName": "C:\\WINDOWS\\system32\\drivers\\fastfat.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "fdc",
"PathName": "C:\\WINDOWS\\system32\\drivers\\fdc.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "FileCrypt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\filecrypt.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "FileInfo",
"PathName": "C:\\WINDOWS\\system32\\drivers\\fileinfo.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "Filetrace",
"PathName": "C:\\WINDOWS\\system32\\drivers\\filetrace.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "flpydisk",
"PathName": "C:\\WINDOWS\\system32\\drivers\\flpydisk.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "FltMgr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\fltmgr.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "FsDepends",
"PathName": "C:\\WINDOWS\\system32\\drivers\\FsDepends.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "fvevol",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\fvevol.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "gameflt",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\gameflt.inf_amd64_c03f7ce96acee3d6\\gameflt.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "gencounter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vmgencounter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "genericusbfn",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\genericusbfn.inf_amd64_71c810ddc0116541\\genericusbfn.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "GenPass",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\genpass.inf_amd64_0c82d80c9252c9bd\\genpass.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "GPIOClx0101",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\msgpioclx.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "HdAudAddService",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HdAudio.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HDAudBus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HDAudBus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "HidBatt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HidBatt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HidBth",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidbth.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HidEventFilter",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\hideventfilter.inf_amd64_11ad2b4276308b53\\HidEventFilter.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "hidi2c",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidi2c.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "hidinterrupt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidinterrupt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HidIr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidir.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "hidspi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidspi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HidSpiCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HidSpiCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HidUsb",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hidusb.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "HpSAMD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HpSAMD.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "hrdevmon",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\hrdevmon.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "hrndis6",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\hrndis6.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "hrwfpdrv",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\hrwfpdrv.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "Hsp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Hsp.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HTTP",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HTTP.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "hvcrash",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hvcrash.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "hvservice",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hvservice.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HwNClx0101",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\mshwnclx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "hwpolicy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hwpolicy.sys",
"StartMode": "Boot",
"State": "Stopped"
},
{
"Name": "hyperkbd",
"PathName": "C:\\WINDOWS\\system32\\drivers\\hyperkbd.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "HyperVideo",
"PathName": "C:\\WINDOWS\\system32\\drivers\\HyperVideo.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "I3CHost",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\i3chost.inf_amd64_e4de3766c4cde4e1\\i3chost.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "i8042prt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\i8042prt.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "iagpio",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iagpio.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iai2c",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iai2c.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_GPIO2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_GPIO2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_GPIO2_BXT_P",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_GPIO2_BXT_P.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_GPIO2_CNL",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_GPIO2_CNL.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_GPIO2_GLK",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_GPIO2_GLK.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_I2C",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_I2C.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_I2C_BXT_P",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_I2C_BXT_P.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_I2C_CNL",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_I2C_CNL.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2i_I2C_GLK",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSS2i_I2C_GLK.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSS2_GPIO2_ADL",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\\iaLPSS2_GPIO2_ADL.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "iaLPSS2_I2C_ADL",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\\iaLPSS2_I2C_ADL.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "iaLPSSi_GPIO",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSSi_GPIO.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaLPSSi_I2C",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaLPSSi_I2C.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaStorAVC",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaStorAVC.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iaStorV",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iaStorV.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ibbus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ibbus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ibtusb",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ibtusb.inf_amd64_9b157f5f4cc71af6\\ibtusb.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "igfxn",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\iigd_dch.inf_amd64_f6ea1f36cd61d64f\\igdkmdn64.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IndirectKmd",
"PathName": "C:\\WINDOWS\\system32\\drivers\\IndirectKmd.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IntcAudioBus",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\intcaudiobus.inf_amd64_57efe6674f5d80d1\\IntcAudioBus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IntcAzAudAddService",
"PathName": "C:\\WINDOWS\\system32\\drivers\\RTKVHD64.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IntcOED",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\intcoed.inf_amd64_6a3c518c5fadd973\\IntcOED.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IntcUSB",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\intcusb.inf_amd64_3d9128c19ff45b08\\IntcUSB.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IntelGNA",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\gna.inf_amd64_04d4eecc5838a558\\gna.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "intelide",
"PathName": "C:\\WINDOWS\\system32\\drivers\\intelide.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "intelpep",
"PathName": "C:\\WINDOWS\\system32\\drivers\\intelpep.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "intelpmax",
"PathName": "C:\\WINDOWS\\system32\\drivers\\intelpmax.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "IntelPMT",
"PathName": "C:\\WINDOWS\\system32\\drivers\\IntelPMT.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "intelppm",
"PathName": "C:\\WINDOWS\\system32\\drivers\\intelppm.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "iorate",
"PathName": "C:\\WINDOWS\\system32\\drivers\\iorate.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "IpFilterDriver",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\ipfltdrv.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ipf_cpu",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ipf_cpu.inf_amd64_a232fd65d8604eb5\\ipf_cpu.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "ipf_lf",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ipf_cpu.inf_amd64_a232fd65d8604eb5\\ipf_lf.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "IPMIDRV",
"PathName": "C:\\WINDOWS\\system32\\drivers\\IPMIDrv.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "IPNAT",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ipnat.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "IPT",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ipt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "isapnp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\isapnp.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "iScsiPrt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msiscsi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ItSas35i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ItSas35i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "JYNetFilter",
"PathName": "\\??\\C:\\Users\\27806\\AppData\\Local\\QiYou\\JYNetFilter8.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "JYWinRing0_130",
"PathName": "\\??\\C:\\Program Files (x86)\\QiYou\\driver\\driver_x64\\JYWinRing0.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "kbdclass",
"PathName": "C:\\WINDOWS\\system32\\drivers\\kbdclass.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "kbdhid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\kbdhid.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "kbldfltr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\kbldfltr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "kdnic",
"PathName": "C:\\WINDOWS\\system32\\drivers\\kdnic.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "kdnic_legacy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\kdnic_legacy.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "KSecDD",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\ksecdd.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "KSecPkg",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\ksecpkg.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "KslD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wd\\KslD.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ksthunk",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ksthunk.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "libusb0",
"PathName": "C:\\WINDOWS\\system32\\drivers\\libusb0.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "lltdio",
"PathName": "C:\\WINDOWS\\system32\\drivers\\lltdio.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "LSI_SAS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\lsi_sas.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "LSI_SAS2i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\lsi_sas2i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "LSI_SAS3i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\lsi_sas3i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "luafv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\luafv.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "mausbhost",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mausbhost.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "mausbip",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mausbip.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MbbCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MbbCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MBfilt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MBfilt64.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "megasas2i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MegaSas2i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "megasas35i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\megasas35i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "megasr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\megasr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MEIx64",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\heci.inf_amd64_6b6e8cc42a3d1f09\\x64\\TeeDriverW10x64.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Microsoft_Bluetooth_AvrcpTransport",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Microsoft.Bluetooth.AvrcpTransport.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "MiServiceDaemon",
"PathName": "\\??\\C:\\Program Files (x86)\\Timi Personal Computing\\MiService\\3.4.1.1132\\Drivers\\MiServiceDaemon.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "mlx4_bus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mlx4_bus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MMCSS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mmcss.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "Modem",
"PathName": "C:\\WINDOWS\\system32\\drivers\\modem.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "monitor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\monitor.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mouclass",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mouclass.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mouhid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mouhid.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mountmgr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mountmgr.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "mpi3drvi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mpi3drvi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "mpsdrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mpsdrv.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "MRxDAV",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mrxdav.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mrxsmb",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\mrxsmb.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mrxsmb20",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\mrxsmb20.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "MsBridge",
"PathName": "C:\\WINDOWS\\system32\\drivers\\bridge.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Msfs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Msfs.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "msgpiowin32",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msgpiowin32.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "mshidkmdf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mshidkmdf.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "mshidumdf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mshidumdf.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "msisadrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msisadrv.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "MSKSSRV",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MSKSSRV.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "MsLldp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mslldp.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "MSPCLOCK",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MSPCLOCK.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MSPQM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MSPQM.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MsQuic",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msquic.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MsQuicPrev",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msquicprev.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MsRPC",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MsRPC.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MsSecCore",
"PathName": "C:\\WINDOWS\\system32\\drivers\\msseccore.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "MsSecFlt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mssecflt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MsSecWfp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mssecwfp.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "mssmbios",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mssmbios.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "MSTEE",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MSTEE.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "MTConfig",
"PathName": "C:\\WINDOWS\\system32\\drivers\\MTConfig.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "MuMuNxSup",
"PathName": "\\??\\C:\\Program Files\\MuMuNxVbox\\LoadedDrivers\\MuMuNxSup.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "MuMuVMMDrv",
"PathName": "\\??\\C:\\Program Files\\MuMuVMMVbox\\LoadedDrivers\\MuMuVMMDrv.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "Mup",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\mup.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "mvumis",
"PathName": "C:\\WINDOWS\\system32\\drivers\\mvumis.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NativeWifiP",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\nwifi.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "ndfltr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ndfltr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NDIS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ndis.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "NdisCap",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ndiscap.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "NdisImPlatform",
"PathName": "C:\\WINDOWS\\system32\\drivers\\NdisImPlatform.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NdisTapi",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\ndistapi.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Ndisuio",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ndisuio.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "NdisVirtualBus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\NdisVirtualBus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "NdisWan",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ndiswan.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "ndiswanlegacy",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\ndiswan.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NDKPerf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\NDKPerf.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NDKPing",
"PathName": "C:\\WINDOWS\\system32\\drivers\\NDKPing.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ndproxy",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\NDProxy.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Ndu",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Ndu.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "NetAdapterCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\netadaptercx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NetBIOS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\netbios.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "NetBT",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\netbt.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "netvsc",
"PathName": "C:\\WINDOWS\\system32\\drivers\\netvsc.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NetworkPrivacyPolicy",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\networkprivacypolicy.inf_amd64_95f202ccc263e8c7\\NetworkPrivacyPolicy.sys",
"StartMode": "Auto",
"State": "Stopped"
},
{
"Name": "Netwtw14",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Netwtw14.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Npfs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Npfs.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "npsvctrig",
"PathName": "C:\\WINDOWS\\system32\\drivers\\npsvctrig.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "nsiproxy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nsiproxy.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "Ntfs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Ntfs.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Null",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Null.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "nvdimm",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvdimm.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "NVHDA",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvhda64v.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "nvlddmkm",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\nvtfsi.inf_amd64_ddba0af1c493e970\\nvlddmkm.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "nvmedisk",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvmedisk.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "nvpcf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvpcf.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "nvraid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvraid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "nvstor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvstor.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "nvvad_WaveExtensible",
"PathName": "C:\\WINDOWS\\system32\\drivers\\nvvad64v.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "OrayUSBVHCI",
"PathName": "C:\\WINDOWS\\system32\\drivers\\OrayUSBVHCI.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "OrayVGC",
"PathName": "C:\\WINDOWS\\system32\\drivers\\OrayVGC.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "orayvhid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\orayvhid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "P9Rdr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\p9rdr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Parport",
"PathName": "C:\\WINDOWS\\system32\\drivers\\parport.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "partmgr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\partmgr.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "pci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pci.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "pciide",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pciide.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "pcmcia",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pcmcia.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "pcw",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pcw.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "pdc",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pdc.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "PEAUTH",
"PathName": "C:\\WINDOWS\\system32\\drivers\\peauth.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "percsas2i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\percsas2i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "percsas3i",
"PathName": "C:\\WINDOWS\\system32\\drivers\\percsas3i.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PktMon",
"PathName": "C:\\WINDOWS\\system32\\drivers\\PktMon.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PktMonApi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\PktMonApi.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PlutonHeci",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\pluton-heci.inf_amd64_61361c9f4d99dfff\\pluton-heci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PlutonHsp2",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\plutonhsp2.inf_amd64_f09065190be08d98\\PlutonHsp2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "pmem",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pmem.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PNPMEM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pnpmem.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "portcfg",
"PathName": "C:\\WINDOWS\\system32\\drivers\\portcfg.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "PptpMiniport",
"PathName": "C:\\WINDOWS\\system32\\drivers\\raspptp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "PRM",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\prm.inf_amd64_7c38475757a1f016\\PRM.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "Processor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\processr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Psched",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pacer.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "pvscsi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\pvscsii.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "QMTAP_tap0924",
"PathName": "C:\\WINDOWS\\system32\\drivers\\QMTAP_tap0924.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "QWAVEdrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\qwavedrv.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Ramdisk",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ramdisk.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "RasAcd",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\rasacd.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "RasAgileVpn",
"PathName": "C:\\WINDOWS\\system32\\drivers\\AgileVpn.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Rasl2tp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rasl2tp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "RasPppoe",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\raspppoe.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "RasSstp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rassstp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "rdbss",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\rdbss.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "rdpbus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rdpbus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "RDPDR",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rdpdr.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "rdyboost",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rdyboost.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "ReFS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ReFS.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ReFSv1",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ReFSv1.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "RFCOMM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rfcomm.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "rhproxy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rhproxy.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "rspndr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rspndr.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "rt640x64",
"PathName": "C:\\WINDOWS\\system32\\drivers\\rt640x64.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "s3cap",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vms3cap.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "sbp2port",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sbp2port.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "scfilter",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\scfilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "scmbus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\scmbus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "sdbus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sdbus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SdcaHidInbox",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\sdcahid.inf_amd64_61ebd70adbe28135\\SdcaHid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SdcaMfdInbox",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\sdcamfd.inf_amd64_9c5d407de2184808\\SdcaMfd.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "sdstor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sdstor.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SerCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\SerCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SerCx2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\SerCx2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Serenum",
"PathName": "C:\\WINDOWS\\system32\\drivers\\serenum.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Serial",
"PathName": "C:\\WINDOWS\\system32\\drivers\\serial.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "sermouse",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sermouse.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "sfloppy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sfloppy.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SiSRaid2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\SiSRaid2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SiSRaid4",
"PathName": "C:\\WINDOWS\\system32\\drivers\\sisraid4.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "SmartSAMD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\SmartSAMD.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "smbdirect",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\smbdirect.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "spacedeskDriverBus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\spacedeskDriverBus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "spacedeskKtmInputMouse",
"PathName": "C:\\WINDOWS\\system32\\drivers\\spacedeskKtmInputMouse.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "spaceparser",
"PathName": "C:\\WINDOWS\\system32\\drivers\\spaceparser.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "spaceport",
"PathName": "C:\\WINDOWS\\system32\\drivers\\spaceport.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "SpbCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\SpbCx.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "sprdvcom",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\sprdvcom.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "srv2",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\srv2.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "srvnet",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\srvnet.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "SSPORT",
"PathName": "\\??\\C:\\WINDOWS\\system32\\Drivers\\SSPORT.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "stexstor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\stexstor.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "storahci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\storahci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "storflt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vmstorfl.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "stornvme",
"PathName": "C:\\WINDOWS\\system32\\drivers\\stornvme.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "storqosflt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\storqosflt.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "storufs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\storufs.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "storvsc",
"PathName": "C:\\WINDOWS\\system32\\drivers\\storvsc.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "swenum",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\swenum.inf_amd64_8b9dd76f362e3ec6\\swenum.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "sysdiag",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\sysdiag.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "Tcpip",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tcpip.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "Tcpip6",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tcpip.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "tcpipreg",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tcpipreg.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "tdx",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\tdx.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "terminpt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\terminpt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ThermalFilter",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\c_thermal.inf_amd64_b0db444d499ca6d4\\ThermalFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ToDeskAudio",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ToDeskAudio.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "TPM",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tpm.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "TsUsbFlt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tsusbflt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "TsUsbGD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\TsUsbGD.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "tsusbhub",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tsusbhub.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "tunnel",
"PathName": "C:\\WINDOWS\\system32\\drivers\\tunnel.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UASPStor",
"PathName": "C:\\WINDOWS\\system32\\drivers\\uaspstor.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UcmCx0101",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\UcmCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UcmTcpciCx0101",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\UcmTcpciCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UcmUcsiAcpiClient",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UcmUcsiAcpiClient.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UcmUcsiCx0101",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\UcmUcsiCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UCPD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UCPD.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "Ucx01000",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ucx01000.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "UdeCx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\udecx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "udfs",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\udfs.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "UEFI",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\uefi.inf_amd64_0dab6d8c22d34611\\UEFI.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "UevAgentDriver",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UevAgentDriver.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "Ufx01000",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ufx01000.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UfxChipidea",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\ufxchipidea.inf_amd64_6e8bb2ed82835828\\UfxChipidea.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ufxsynopsys",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ufxsynopsys.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "uiomap",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\uiomap.inf_amd64_e6e3e44178152d2b\\uiomap.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "umbus",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\umbus.inf_amd64_914dd46b4b013b1b\\umbus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "UmPass",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\umpass.inf_amd64_06e016c9ffecbf73\\umpass.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "UnionFS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UnionFS.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "UrsChipidea",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\urschipidea.inf_amd64_37fb14618bce547b\\urschipidea.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UrsCx01000",
"PathName": "C:\\WINDOWS\\system32\\drivers\\urscx01000.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "UrsSynopsys",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\urssynopsys.inf_amd64_ef0be23d0f063014\\urssynopsys.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usb-platformdetection",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\usb-platformdetection.inf_amd64_de12f84035b68c95\\usb-platformdetection.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Usb4DeviceRouter",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\usb4devicerouter.inf_amd64_09a12e7a805b5eba\\Usb4DeviceRouter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Usb4HostRouter",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\usb4hostrouter.inf_amd64_cdce2a72e414b155\\Usb4HostRouter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbaudio",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbaudio.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "usbaudio2",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbaudio2.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbccgp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbccgp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "usbcir",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbcir.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbehci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbehci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbhub",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbhub.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "USBHUB3",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UsbHub3.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "usbohci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbohci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbprint",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbprint.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbscan",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\sti.inf_amd64_8ce330c68e1a560b\\usbscan.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbser",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbser.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "USBSTOR",
"PathName": "C:\\WINDOWS\\system32\\drivers\\USBSTOR.SYS",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "usbuhci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\usbuhci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "usbvideo",
"PathName": "C:\\WINDOWS\\system32\\Drivers\\usbvideo.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "USBXHCI",
"PathName": "C:\\WINDOWS\\system32\\drivers\\USBXHCI.SYS",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "UWACPIDriver",
"PathName": "C:\\WINDOWS\\system32\\drivers\\UWACPIDriver.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "vdrvroot",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vdrvroot.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "VerifierExt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\VerifierExt.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vhdmp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vhdmp.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vhf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vhf.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Vid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Vid.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "VirtualCamera",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\virtualcamera.inf_amd64_70ec35fcfb21d410\\VirtualCamera.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "VirtualRender",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\vrd.inf_amd64_4dd0e6d66a75bb7e\\vrd.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vmbus",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vmbus.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "VMBusHID",
"PathName": "C:\\WINDOWS\\system32\\drivers\\VMBusHID.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vmgid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vmgid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "volmgr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\volmgr.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "volmgrx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\volmgrx.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "volsnap",
"PathName": "C:\\WINDOWS\\system32\\drivers\\volsnap.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "volume",
"PathName": "C:\\WINDOWS\\system32\\drivers\\volume.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "vpci",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vpci.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vsmraid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vsmraid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "VSTXRAID",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vstxraid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "vwifibus",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\netvwifibus.inf_amd64_ab4e111fe8221178\\vwifibus.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "vwififlt",
"PathName": "C:\\WINDOWS\\system32\\drivers\\vwififlt.sys",
"StartMode": "System",
"State": "Running"
},
{
"Name": "vwifimp",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\netvwifimp.inf_amd64_2b7a99c97634cfaa\\vwifimp.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "WacomPen",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wacompen.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "wanarp",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\wanarp.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "wanarpv6",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\wanarp.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "wcifs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wcifs.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "WdAiNisDrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wd\\WdAiNisDrv.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "WdBoot",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wd\\WdBoot.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Wdf01000",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Wdf01000.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "WdFilter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wd\\WdFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "wdiwifi",
"PathName": "C:\\WINDOWS\\system32\\DRIVERS\\wdiwifi.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "WdmCompanionFilter",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WdmCompanionFilter.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WdNisDrv",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wd\\WdNisDrv.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WFPLWFS",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wfplwfs.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "Wificx",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WifiCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WIMMount",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wimmount.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WinAccelCx0101",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WinAccelCx.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WindowsTrustedRT",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WindowsTrustedRT.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "WindowsTrustedRTProxy",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WindowsTrustedRTProxy.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "wini3ctarget",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\wini3ctarget.inf_amd64_549b568fc038709c\\wini3ctarget.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WinMad",
"PathName": "C:\\WINDOWS\\system32\\drivers\\winmad.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WinNat",
"PathName": "C:\\WINDOWS\\system32\\drivers\\winnat.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "wintun",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wintun.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WINUSB",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WinUsb.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WinVerbs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\winverbs.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WmiAcpi",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wmiacpi.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "Wof",
"PathName": "C:\\WINDOWS\\system32\\drivers\\Wof.sys",
"StartMode": "Boot",
"State": "Running"
},
{
"Name": "WOVAD",
"PathName": "C:\\WINDOWS\\system32\\drivers\\womic.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "WpdUpFltr",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WpdUpFltr.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "ws2ifsl",
"PathName": "C:\\WINDOWS\\system32\\drivers\\ws2ifsl.sys",
"StartMode": "Disabled",
"State": "Stopped"
},
{
"Name": "wtd",
"PathName": "C:\\WINDOWS\\system32\\drivers\\wtd.sys",
"StartMode": "Auto",
"State": "Running"
},
{
"Name": "WudfPf",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WudfPf.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "WUDFRd",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WUDFRd.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "WUDFWpdFs",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WUDFRd.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "WUDFWpdMtp",
"PathName": "C:\\WINDOWS\\system32\\drivers\\WUDFRd.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "xboxgip",
"PathName": "C:\\WINDOWS\\system32\\drivers\\xboxgip.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "XiaomiBusEnumerator",
"PathName": "C:\\WINDOWS\\system32\\drivers\\XiaomiBusEnumerator.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "xinputhid",
"PathName": "C:\\WINDOWS\\system32\\drivers\\xinputhid.sys",
"StartMode": "Manual",
"State": "Stopped"
},
{
"Name": "Xvdd",
"PathName": "C:\\WINDOWS\\system32\\DriverStore\\FileRepository\\xvdd.inf_amd64_1e22073ba7136f03\\xvdd.sys",
"StartMode": "Manual",
"State": "Running"
},
{
"Name": "ABC_FTKBD",
"PathName": "\\??\\C:\\WINDOWS\\system32\\drivers\\ABC_FTKBD.sys",
"StartMode": "Auto",
"State": "Running"
}
],
"event_type": "boot_check",
"game_running": false,
"kernel_dma_protection": false,
"pci_devices": [],
"process_count": 538,
"processes": [
{
"name": "[System Process]",
"pid": 0
},
{
"name": "System",
"pid": 4
},
{
"name": "Registry",
"pid": 272
},
{
"name": "smss.exe",
"pid": 848
},
{
"name": "csrss.exe",
"pid": 1144
},
{
"name": "wininit.exe",
"pid": 1260
},
{
"name": "csrss.exe",
"pid": 1268
},
{
"name": "services.exe",
"pid": 1340
},
{
"name": "lsass.exe",
"pid": 1348
},
{
"name": "svchost.exe",
"pid": 1492
},
{
"name": "fontdrvhost.exe",
"pid": 1500
},
{
"name": "WUDFHost.exe",
"pid": 1556
},
{
"name": "svchost.exe",
"pid": 1632
},
{
"name": "svchost.exe",
"pid": 1680
},
{
"name": "WUDFHost.exe",
"pid": 1796
},
{
"name": "WUDFHost.exe",
"pid": 1884
},
{
"name": "winlogon.exe",
"pid": 1924
},
{
"name": "WUDFHost.exe",
"pid": 1000
},
{
"name": "fontdrvhost.exe",
"pid": 1036
},
{
"name": "svchost.exe",
"pid": 1972
},
{
"name": "svchost.exe",
"pid": 2072
},
{
"name": "svchost.exe",
"pid": 2100
},
{
"name": "svchost.exe",
"pid": 2124
},
{
"name": "svchost.exe",
"pid": 2132
},
{
"name": "dwm.exe",
"pid": 2208
},
{
"name": "WUDFHost.exe",
"pid": 2252
},
{
"name": "svchost.exe",
"pid": 2300
},
{
"name": "svchost.exe",
"pid": 2436
},
{
"name": "svchost.exe",
"pid": 2496
},
{
"name": "svchost.exe",
"pid": 2512
},
{
"name": "svchost.exe",
"pid": 2520
},
{
"name": "svchost.exe",
"pid": 2688
},
{
"name": "IntelCpHDCPSvc.exe",
"pid": 2740
},
{
"name": "svchost.exe",
"pid": 2752
},
{
"name": "svchost.exe",
"pid": 2764
},
{
"name": "svchost.exe",
"pid": 2788
},
{
"name": "svchost.exe",
"pid": 2844
},
{
"name": "svchost.exe",
"pid": 2852
},
{
"name": "svchost.exe",
"pid": 2864
},
{
"name": "svchost.exe",
"pid": 2972
},
{
"name": "svchost.exe",
"pid": 3164
},
{
"name": "HrASDaemon.exe",
"pid": 3572
},
{
"name": "svchost.exe",
"pid": 3840
},
{
"name": "NVDisplay.Container.exe",
"pid": 3916
},
{
"name": "svchost.exe",
"pid": 4004
},
{
"name": "svchost.exe",
"pid": 4012
},
{
"name": "svchost.exe",
"pid": 3292
},
{
"name": "svchost.exe",
"pid": 3264
},
{
"name": "svchost.exe",
"pid": 3180
},
{
"name": "Memory Compression",
"pid": 4120
},
{
"name": "svchost.exe",
"pid": 4176
},
{
"name": "svchost.exe",
"pid": 4236
},
{
"name": "svchost.exe",
"pid": 4248
},
{
"name": "svchost.exe",
"pid": 4292
},
{
"name": "svchost.exe",
"pid": 4372
},
{
"name": "CTAudSvc.exe",
"pid": 4500
},
{
"name": "svchost.exe",
"pid": 4556
},
{
"name": "svchost.exe",
"pid": 4604
},
{
"name": "svchost.exe",
"pid": 4628
},
{
"name": "svchost.exe",
"pid": 4744
},
{
"name": "svchost.exe",
"pid": 4804
},
{
"name": "svchost.exe",
"pid": 4872
},
{
"name": "svchost.exe",
"pid": 4948
},
{
"name": "spoolsv.exe",
"pid": 5016
},
{
"name": "svchost.exe",
"pid": 3596
},
{
"name": "svchost.exe",
"pid": 4148
},
{
"name": "AdobeUpdateService.exe",
"pid": 5384
},
{
"name": "AppleMobileDeviceService.exe",
"pid": 5432
},
{
"name": "Creative.VADMonitorService.exe",
"pid": 5440
},
{
"name": "svchost.exe",
"pid": 5464
},
{
"name": "dist_service.exe",
"pid": 5472
},
{
"name": "DistributedService.exe",
"pid": 5516
},
{
"name": "handoff_svc.exe",
"pid": 5524
},
{
"name": "OneApp.IGCC.WinService.exe",
"pid": 5548
},
{
"name": "IntelAudioService.exe",
"pid": 5564
},
{
"name": "micont_service.exe",
"pid": 5572
},
{
"name": "GCUBridge.exe",
"pid": 5580
},
{
"name": "MAFSvr.exe",
"pid": 5588
},
{
"name": "ipf_uf.exe",
"pid": 5600
},
{
"name": "MiService.exe",
"pid": 5608
},
{
"name": "MiPlayCastService.exe",
"pid": 5616
},
{
"name": "nginx_server.exe",
"pid": 5632
},
{
"name": "RtkAudUService64.exe",
"pid": 5640
},
{
"name": "svchost.exe",
"pid": 5648
},
{
"name": "svchost.exe",
"pid": 5656
},
{
"name": "spacedeskService.exe",
"pid": 5664
},
{
"name": "jhi_service.exe",
"pid": 5676
},
{
"name": "svchost.exe",
"pid": 5696
},
{
"name": "svchost.exe",
"pid": 5708
},
{
"name": "svchost.exe",
"pid": 5716
},
{
"name": "MuMuRemoteService.exe",
"pid": 5724
},
{
"name": "svchost.exe",
"pid": 5732
},
{
"name": "svchost.exe",
"pid": 5740
},
{
"name": "svchost.exe",
"pid": 5752
},
{
"name": "Red Giant Service.exe",
"pid": 5768
},
{
"name": "svchost.exe",
"pid": 5764
},
{
"name": "svchost.exe",
"pid": 5780
},
{
"name": "ToDesk.exe",
"pid": 5800
},
{
"name": "TFSPEQService.exe",
"pid": 5824
},
{
"name": "nvcontainer.exe",
"pid": 5836
},
{
"name": "svchost.exe",
"pid": 5856
},
{
"name": "QBUpdateService.exe",
"pid": 6004
},
{
"name": "lmclientHelperService.exe",
"pid": 6152
},
{
"name": "svchost.exe",
"pid": 6560
},
{
"name": "svchost.exe",
"pid": 7132
},
{
"name": "NVDisplay.Container.exe",
"pid": 7324
},
{
"name": "svchost.exe",
"pid": 7724
},
{
"name": "crashpad_handler.exe",
"pid": 7800
},
{
"name": "WmiPrvSE.exe",
"pid": 8092
},
{
"name": "MuMuRemoteBackend.exe",
"pid": 8276
},
{
"name": "MumuRemoteHealthd.exe",
"pid": 8420
},
{
"name": "crashpad_handler.exe",
"pid": 9536
},
{
"name": "nvcontainer.exe",
"pid": 10088
},
{
"name": "WmiPrvSE.exe",
"pid": 10160
},
{
"name": "crashpad_handler.exe",
"pid": 10532
},
{
"name": "svchost.exe",
"pid": 8752
},
{
"name": "svchost.exe",
"pid": 11368
},
{
"name": "svchost.exe",
"pid": 11508
},
{
"name": "svchost.exe",
"pid": 11524
},
{
"name": "MSPCManagerService.exe",
"pid": 11704
},
{
"name": "wlanext.exe",
"pid": 12384
},
{
"name": "WUDFHost.exe",
"pid": 12512
},
{
"name": "AggregatorHost.exe",
"pid": 12624
},
{
"name": "svchost.exe",
"pid": 13248
},
{
"name": "svchost.exe",
"pid": 13648
},
{
"name": "wetype_service.exe",
"pid": 13948
},
{
"name": "XiaoaiService.exe",
"pid": 13956
},
{
"name": "wallpaperservice32.exe",
"pid": 13964
},
{
"name": "svchost.exe",
"pid": 13972
},
{
"name": "WMIRegistrationService.exe",
"pid": 13980
},
{
"name": "svchost.exe",
"pid": 13988
},
{
"name": "svchost.exe",
"pid": 13348
},
{
"name": "dasHost.exe",
"pid": 3208
},
{
"name": "svchost.exe",
"pid": 5208
},
{
"name": "svchost.exe",
"pid": 13380
},
{
"name": "WUDFHost.exe",
"pid": 14448
},
{
"name": "svchost.exe",
"pid": 14540
},
{
"name": "svchost.exe",
"pid": 14620
},
{
"name": "svchost.exe",
"pid": 15144
},
{
"name": "svchost.exe",
"pid": 15628
},
{
"name": "svchost.exe",
"pid": 16008
},
{
"name": "unsecapp.exe",
"pid": 16152
},
{
"name": "ipf_helper.exe",
"pid": 8384
},
{
"name": "spacedeskServiceTray.exe",
"pid": 8672
},
{
"name": "wallpaper32.exe",
"pid": 12768
},
{
"name": "nvcontainer.exe",
"pid": 10080
},
{
"name": "nvcontainer.exe",
"pid": 15676
},
{
"name": "sihost.exe",
"pid": 12048
},
{
"name": "svchost.exe",
"pid": 16196
},
{
"name": "svchost.exe",
"pid": 12076
},
{
"name": "svchost.exe",
"pid": 16392
},
{
"name": "svchost.exe",
"pid": 16424
},
{
"name": "PopBlock.exe",
"pid": 16628
},
{
"name": "GameAssistant.exe",
"pid": 16668
},
{
"name": "taskhostw.exe",
"pid": 16676
},
{
"name": "svchost.exe",
"pid": 16724
},
{
"name": "svchost.exe",
"pid": 17264
},
{
"name": "explorer.exe",
"pid": 15940
},
{
"name": "svchost.exe",
"pid": 17620
},
{
"name": "GCUService.exe",
"pid": 17736
},
{
"name": "CrossDeviceResume.exe",
"pid": 17772
},
{
"name": "ToDesk.exe",
"pid": 17780
},
{
"name": "CrossDeviceService.exe",
"pid": 18552
},
{
"name": "nvsphelper64.exe",
"pid": 19236
},
{
"name": "svchost.exe",
"pid": 18696
},
{
"name": "wetype_server.exe",
"pid": 19508
},
{
"name": "conhost.exe",
"pid": 19520
},
{
"name": "wetype_update.exe",
"pid": 19660
},
{
"name": "wetype_renderer.exe",
"pid": 19724
},
{
"name": "Widgets.exe",
"pid": 20104
},
{
"name": "UserOOBEBroker.exe",
"pid": 20684
},
{
"name": "RuntimeBroker.exe",
"pid": 22320
},
{
"name": "ctfmon.exe",
"pid": 23288
},
{
"name": "TabTip.exe",
"pid": 23332
},
{
"name": "ChsIME.exe",
"pid": 22020
},
{
"name": "TextInputHost.exe",
"pid": 18168
},
{
"name": "QQLiveService.exe",
"pid": 27360
},
{
"name": "crashpad_handler.exe",
"pid": 27456
},
{
"name": "svchost.exe",
"pid": 28200
},
{
"name": "PhoneExperienceHost.exe",
"pid": 24400
},
{
"name": "QQLiveLCService.exe",
"pid": 27984
},
{
"name": "svchost.exe",
"pid": 27400
},
{
"name": "wps.exe",
"pid": 16608
},
{
"name": "svchost.exe",
"pid": 29448
},
{
"name": "svchost.exe",
"pid": 6116
},
{
"name": "svchost.exe",
"pid": 5940
},
{
"name": "dllhost.exe",
"pid": 11804
},
{
"name": "SecurityHealthSystray.exe",
"pid": 14104
},
{
"name": "SecurityHealthService.exe",
"pid": 16904
},
{
"name": "dllhost.exe",
"pid": 3360
},
{
"name": "dasHost.exe",
"pid": 22864
},
{
"name": "svchost.exe",
"pid": 23604
},
{
"name": "Wallpaper.exe",
"pid": 21556
},
{
"name": "Clean.exe",
"pid": 20632
},
{
"name": "PluginsManager.exe",
"pid": 3232
},
{
"name": "LocalServer.exe",
"pid": 23548
},
{
"name": "RtkAudUService64.exe",
"pid": 7216
},
{
"name": "svchost.exe",
"pid": 30192
},
{
"name": "WidgetService.exe",
"pid": 30352
},
{
"name": "OSDTpDetect.exe",
"pid": 22904
},
{
"name": "XiaomiPcManager.exe",
"pid": 18200
},
{
"name": "PcClipboard.exe",
"pid": 26228
},
{
"name": "MiPCAudio.exe",
"pid": 30692
},
{
"name": "msedgewebview2.exe",
"pid": 31504
},
{
"name": "msedgewebview2.exe",
"pid": 31528
},
{
"name": "msedgewebview2.exe",
"pid": 21732
},
{
"name": "msedgewebview2.exe",
"pid": 30740
},
{
"name": "msedgewebview2.exe",
"pid": 3604
},
{
"name": "msedgewebview2.exe",
"pid": 16948
},
{
"name": "YunDetectService.exe",
"pid": 21240
},
{
"name": "cloudmusic.exe",
"pid": 34440
},
{
"name": "cloudmusic_reporter.exe",
"pid": 34800
},
{
"name": "cloudmusic.exe",
"pid": 31148
},
{
"name": "cloudmusic.exe",
"pid": 34432
},
{
"name": "svchost.exe",
"pid": 36332
},
{
"name": "svchost.exe",
"pid": 36432
},
{
"name": "svchost.exe",
"pid": 22824
},
{
"name": "svchost.exe",
"pid": 9472
},
{
"name": "wsctrlsvc.exe",
"pid": 4956
},
{
"name": "figma_agent.exe",
"pid": 19804
},
{
"name": "ShellExperienceHost.exe",
"pid": 32788
},
{
"name": "RuntimeBroker.exe",
"pid": 36116
},
{
"name": "Doubao.exe",
"pid": 35304
},
{
"name": "Doubao.exe",
"pid": 28152
},
{
"name": "Doubao.exe",
"pid": 36844
},
{
"name": "Doubao.exe",
"pid": 2032
},
{
"name": "Doubao.exe",
"pid": 32168
},
{
"name": "Doubao.exe",
"pid": 28592
},
{
"name": "Doubao.exe",
"pid": 32244
},
{
"name": "aha_doctor.exe",
"pid": 15032
},
{
"name": "Doubao.exe",
"pid": 32176
},
{
"name": "Doubao.exe",
"pid": 38368
},
{
"name": "Doubao.exe",
"pid": 11984
},
{
"name": "Doubao.exe",
"pid": 39368
},
{
"name": "Doubao.exe",
"pid": 39740
},
{
"name": "Doubao.exe",
"pid": 13028
},
{
"name": "Doubao.exe",
"pid": 32132
},
{
"name": "DynamicDependencyLifetimeManagerShadow.exe",
"pid": 1964
},
{
"name": "PushNotificationsLongRunningTask.exe",
"pid": 32004
},
{
"name": "SystrayComponent.exe",
"pid": 38736
},
{
"name": "snipaste.exe",
"pid": 39616
},
{
"name": "RuntimeBroker.exe",
"pid": 39660
},
{
"name": "PAD.Console.Host.exe",
"pid": 3652
},
{
"name": "PAD.AutomationServer.exe",
"pid": 19876
},
{
"name": "RuntimeBroker.exe",
"pid": 12324
},
{
"name": "PAD.BridgeToUIAutomation2.exe",
"pid": 39424
},
{
"name": "conhost.exe",
"pid": 17236
},
{
"name": "CCXProcess.exe",
"pid": 27068
},
{
"name": "node.exe",
"pid": 32312
},
{
"name": "conhost.exe",
"pid": 36740
},
{
"name": "svchost.exe",
"pid": 17000
},
{
"name": "AdobeIPCBroker.exe",
"pid": 37456
},
{
"name": "Creative.App.exe",
"pid": 19544
},
{
"name": "hpwuschd2.exe",
"pid": 34868
},
{
"name": "HPStatusAlerts.exe",
"pid": 16616
},
{
"name": "Creative Cloud.exe",
"pid": 11964
},
{
"name": "Creative Cloud UI Helper.exe",
"pid": 37932
},
{
"name": "Creative Cloud UI Helper.exe",
"pid": 3304
},
{
"name": "Creative Cloud UI Helper.exe",
"pid": 37412
},
{
"name": "Adobe Desktop Service.exe",
"pid": 40072
},
{
"name": "Creative Cloud Helper.exe",
"pid": 34652
},
{
"name": "CoreSync.exe",
"pid": 41484
},
{
"name": "AdobeNotificationClient.exe",
"pid": 39984
},
{
"name": "RuntimeBroker.exe",
"pid": 40280
},
{
"name": "svchost.exe",
"pid": 24504
},
{
"name": "lmclient.exe",
"pid": 4964
},
{
"name": "svchost.exe",
"pid": 36824
},
{
"name": "Locator.exe",
"pid": 15776
},
{
"name": "WmiApSrv.exe",
"pid": 8376
},
{
"name": "svchost.exe",
"pid": 31944
},
{
"name": "svchost.exe",
"pid": 42376
},
{
"name": "SearchHost.exe",
"pid": 42344
},
{
"name": "RuntimeBroker.exe",
"pid": 46980
},
{
"name": "msedgewebview2.exe",
"pid": 47068
},
{
"name": "msedgewebview2.exe",
"pid": 15888
},
{
"name": "msedgewebview2.exe",
"pid": 17864
},
{
"name": "msedgewebview2.exe",
"pid": 46260
},
{
"name": "msedgewebview2.exe",
"pid": 21928
},
{
"name": "msedgewebview2.exe",
"pid": 11696
},
{
"name": "ApplicationFrameHost.exe",
"pid": 34012
},
{
"name": "explorer.exe",
"pid": 46972
},
{
"name": "SogouCloud.exe",
"pid": 48644
},
{
"name": "SGTool.exe",
"pid": 50156
},
{
"name": "msedgewebview2.exe",
"pid": 52772
},
{
"name": "msedgewebview2.exe",
"pid": 51024
},
{
"name": "msedgewebview2.exe",
"pid": 46784
},
{
"name": "msedgewebview2.exe",
"pid": 30664
},
{
"name": "RuntimeBroker.exe",
"pid": 20708
},
{
"name": "msedgewebview2.exe",
"pid": 59340
},
{
"name": "msedgewebview2.exe",
"pid": 44776
},
{
"name": "taskhostw.exe",
"pid": 64896
},
{
"name": "svchost.exe",
"pid": 51904
},
{
"name": "svchost.exe",
"pid": 65700
},
{
"name": "svchost.exe",
"pid": 66948
},
{
"name": "svchost.exe",
"pid": 45432
},
{
"name": "SGTool.exe",
"pid": 61872
},
{
"name": "TsService.exe",
"pid": 53572
},
{
"name": "crashpad_handler_.exe",
"pid": 23648
},
{
"name": "svchost.exe",
"pid": 39284
},
{
"name": "code-sidecar.exe",
"pid": 48692
},
{
"name": "conhost.exe",
"pid": 59516
},
{
"name": "bash.exe",
"pid": 56624
},
{
"name": "node.exe",
"pid": 16248
},
{
"name": "python.exe",
"pid": 19444
},
{
"name": "conhost.exe",
"pid": 17700
},
{
"name": "douyin_guard.exe",
"pid": 68232
},
{
"name": "AweSun.exe",
"pid": 63780
},
{
"name": "AweSun.exe",
"pid": 43560
},
{
"name": "AweSun.exe",
"pid": 65572
},
{
"name": "unsecapp.exe",
"pid": 50656
},
{
"name": "dllhost.exe",
"pid": 61064
},
{
"name": "dllhost.exe",
"pid": 70640
},
{
"name": "dllhost.exe",
"pid": 7460
},
{
"name": "dllhost.exe",
"pid": 24892
},
{
"name": "dllhost.exe",
"pid": 34768
},
{
"name": "gwps.exe",
"pid": 9912
},
{
"name": "conhost.exe",
"pid": 57836
},
{
"name": "explorer.exe",
"pid": 41636
},
{
"name": "svchost.exe",
"pid": 73404
},
{
"name": "MidiSrv.exe",
"pid": 71812
},
{
"name": "ios_webkit_debug_proxy.exe",
"pid": 70664
},
{
"name": "HipsTray.exe",
"pid": 37544
},
{
"name": "lmclientCore.exe",
"pid": 59364
},
{
"name": "conhost.exe",
"pid": 74820
},
{
"name": "MuMuNxService.exe",
"pid": 63440
},
{
"name": "crashpad_handler.exe",
"pid": 9736
},
{
"name": "QyKernel.exe",
"pid": 72340
},
{
"name": "QiyiService.exe",
"pid": 7448
},
{
"name": "BaiduNetdisk.exe",
"pid": 8888
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 74188
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 62048
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 73824
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 43792
},
{
"name": "baidunetdiskhost.exe",
"pid": 58864
},
{
"name": "crashpad_handler.exe",
"pid": 44304
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 61708
},
{
"name": "baidunetdiskhost.exe",
"pid": 24360
},
{
"name": "crashpad_handler.exe",
"pid": 45956
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 480
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 35984
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 6348
},
{
"name": "BaiduNetdiskUnite.exe",
"pid": 70764
},
{
"name": "HipsDaemon.exe",
"pid": 71716
},
{
"name": "TRAE SOLO CN.exe",
"pid": 8544
},
{
"name": "TRAE SOLO CN.exe",
"pid": 40388
},
{
"name": "TRAE SOLO CN.exe",
"pid": 59348
},
{
"name": "aha_doctor.exe",
"pid": 42860
},
{
"name": "TRAE SOLO CN.exe",
"pid": 36760
},
{
"name": "TRAE SOLO CN.exe",
"pid": 48028
},
{
"name": "TRAE SOLO CN.exe",
"pid": 46348
},
{
"name": "TRAE SOLO CN.exe",
"pid": 60780
},
{
"name": "TRAE SOLO CN.exe",
"pid": 45812
},
{
"name": "TRAE SOLO CN.exe",
"pid": 50056
},
{
"name": "TRAE SOLO CN.exe",
"pid": 24000
},
{
"name": "TRAE SOLO CN.exe",
"pid": 15604
},
{
"name": "TRAE SOLO CN.exe",
"pid": 58388
},
{
"name": "agent-tool-host.exe",
"pid": 10996
},
{
"name": "agent-tool-host.exe",
"pid": 58988
},
{
"name": "conhost.exe",
"pid": 2872
},
{
"name": "conhost.exe",
"pid": 35948
},
{
"name": "TRAE SOLO CN.exe",
"pid": 17152
},
{
"name": "kernelUpdate.exe",
"pid": 46408
},
{
"name": "conhost.exe",
"pid": 12016
},
{
"name": "Creative Cloud UI Helper.exe",
"pid": 14780
},
{
"name": "ChatGPT.exe",
"pid": 27832
},
{
"name": "ChatGPT.exe",
"pid": 22712
},
{
"name": "ChatGPT.exe",
"pid": 42616
},
{
"name": "ChatGPT.exe",
"pid": 5320
},
{
"name": "ChatGPT.exe",
"pid": 25284
},
{
"name": "ChatGPT.exe",
"pid": 62592
},
{
"name": "ChatGPT.exe",
"pid": 43916
},
{
"name": "codex.exe",
"pid": 53700
},
{
"name": "conhost.exe",
"pid": 16720
},
{
"name": "codex-computer-use-swift.exe",
"pid": 72912
},
{
"name": "conhost.exe",
"pid": 27820
},
{
"name": "ChatGPT.exe",
"pid": 71516
},
{
"name": "douyin.exe",
"pid": 57632
},
{
"name": "douyin.exe",
"pid": 52080
},
{
"name": "douyin.exe",
"pid": 51328
},
{
"name": "awesun_guard.exe",
"pid": 68724
},
{
"name": "conhost.exe",
"pid": 78380
},
{
"name": "svchost.exe",
"pid": 67104
},
{
"name": "abcEBService.exe",
"pid": 7468
},
{
"name": "DBSer_ABC.exe",
"pid": 70540
},
{
"name": "DBMon_ABC.exe",
"pid": 27792
},
{
"name": "DBSvr_ABC.exe",
"pid": 66744
},
{
"name": "D4WebServer_wss_ABC.exe",
"pid": 51092
},
{
"name": "colorcpl.exe",
"pid": 77036
},
{
"name": "SystemSettings.exe",
"pid": 78236
},
{
"name": "NVIDIA Overlay.exe",
"pid": 76680
},
{
"name": "NVIDIA Overlay.exe",
"pid": 63500
},
{
"name": "NVIDIA Overlay.exe",
"pid": 63724
},
{
"name": "NVIDIA Overlay.exe",
"pid": 17628
},
{
"name": "NVIDIA Overlay.exe",
"pid": 48304
},
{
"name": "svchost.exe",
"pid": 37032
},
{
"name": "ios_webkit_debug_proxy.exe",
"pid": 9372
},
{
"name": "SearchIndexer.exe",
"pid": 25828
},
{
"name": "Weixin.exe",
"pid": 70532
},
{
"name": "crashpad_handler.exe",
"pid": 13224
},
{
"name": "WeChatAppEx.exe",
"pid": 51764
},
{
"name": "WeChatAppEx.exe",
"pid": 25648
},
{
"name": "WeChatAppEx.exe",
"pid": 1112
},
{
"name": "Weixin.exe",
"pid": 79468
},
{
"name": "WeChatAppEx.exe",
"pid": 47604
},
{
"name": "WeChatAppEx.exe",
"pid": 61048
},
{
"name": "WeChatAppEx.exe",
"pid": 57852
},
{
"name": "Weixin.exe",
"pid": 64884
},
{
"name": "Weixin.exe",
"pid": 72624
},
{
"name": "Weixin.exe",
"pid": 27884
},
{
"name": "Weixin.exe",
"pid": 79032
},
{
"name": "WeChatAppEx.exe",
"pid": 69424
},
{
"name": "WeChatAppEx.exe",
"pid": 76468
},
{
"name": "WeChatAppEx.exe",
"pid": 77108
},
{
"name": "ShellHost.exe",
"pid": 55512
},
{
"name": "gamingservices.exe",
"pid": 33896
},
{
"name": "gamingservicesnet.exe",
"pid": 57072
},
{
"name": "GameInputSvc.exe",
"pid": 25504
},
{
"name": "GameInputSvc.exe",
"pid": 75076
},
{
"name": "GameInputRedistService.exe",
"pid": 65548
},
{
"name": "GameInputRedistService.exe",
"pid": 68520
},
{
"name": "svchost.exe",
"pid": 57980
},
{
"name": "dllhost.exe",
"pid": 11108
},
{
"name": "svchost.exe",
"pid": 69980
},
{
"name": "crashpad_handler_.exe",
"pid": 68628
},
{
"name": "QQBrowser.exe",
"pid": 16516
},
{
"name": "Qoder IDE.exe",
"pid": 15732
},
{
"name": "Qoder IDE.exe",
"pid": 70820
},
{
"name": "Qoder IDE.exe",
"pid": 72724
},
{
"name": "Qoder IDE.exe",
"pid": 64404
},
{
"name": "Qoder.exe",
"pid": 37076
},
{
"name": "conhost.exe",
"pid": 70444
},
{
"name": "cmd.exe",
"pid": 67692
},
{
"name": "node.exe",
"pid": 77124
},
{
"name": "Qoder IDE.exe",
"pid": 73332
},
{
"name": "cmd.exe",
"pid": 32972
},
{
"name": "node.exe",
"pid": 57084
},
{
"name": "Qoder IDE.exe",
"pid": 74688
},
{
"name": "Qoder IDE.exe",
"pid": 41980
},
{
"name": "Qoder IDE.exe",
"pid": 11568
},
{
"name": "Doubao.exe",
"pid": 62292
},
{
"name": "msedge.exe",
"pid": 34624
},
{
"name": "msedge.exe",
"pid": 32856
},
{
"name": "msedge.exe",
"pid": 54856
},
{
"name": "msedge.exe",
"pid": 74868
},
{
"name": "msedge.exe",
"pid": 47900
},
{
"name": "msedge.exe",
"pid": 77332
},
{
"name": "cmd.exe",
"pid": 67268
},
{
"name": "conhost.exe",
"pid": 47988
},
{
"name": "extension-host.exe",
"pid": 32356
},
{
"name": "Qoder IDE.exe",
"pid": 9792
},
{
"name": "Qoder IDE.exe",
"pid": 17160
},
{
"name": "Qoder IDE.exe",
"pid": 76080
},
{
"name": "Qoder IDE.exe",
"pid": 35116
},
{
"name": "Qoder IDE.exe",
"pid": 25528
},
{
"name": "msedge.exe",
"pid": 12464
},
{
"name": "msedge.exe",
"pid": 70220
},
{
"name": "RuntimeBroker.exe",
"pid": 19840
},
{
"name": "msedge.exe",
"pid": 67572
},
{
"name": "aria2.exe",
"pid": 41844
},
{
"name": "conhost.exe",
"pid": 53664
},
{
"name": "msedge.exe",
"pid": 46064
},
{
"name": "msedge.exe",
"pid": 50276
},
{
"name": "Qoder IDE.exe",
"pid": 35332
},
{
"name": "msedge.exe",
"pid": 51524
},
{
"name": "msedge.exe",
"pid": 75548
},
{
"name": "msedge.exe",
"pid": 75048
},
{
"name": "msedge.exe",
"pid": 76204
},
{
"name": "msedge.exe",
"pid": 32532
},
{
"name": "msedge.exe",
"pid": 25432
},
{
"name": "msedge.exe",
"pid": 38540
},
{
"name": "msedge.exe",
"pid": 56160
},
{
"name": "msedge.exe",
"pid": 2268
},
{
"name": "WeChatAppEx.exe",
"pid": 51692
},
{
"name": "msedge.exe",
"pid": 32572
},
{
"name": "QQBrowser.exe",
"pid": 1744
},
{
"name": "QQBrowser.exe",
"pid": 68164
},
{
"name": "QQBrowser.exe",
"pid": 57276
},
{
"name": "QQBrowser.exe",
"pid": 24388
},
{
"name": "QQBrowser.exe",
"pid": 62676
},
{
"name": "QQBrowser.exe",
"pid": 75356
},
{
"name": "QQBrowser.exe",
"pid": 59220
},
{
"name": "QQBrowser.exe",
"pid": 54440
},
{
"name": "QQBrowser.exe",
"pid": 73772
},
{
"name": "QQBrowser.exe",
"pid": 78740
},
{
"name": "QQBrowser.exe",
"pid": 32604
},
{
"name": "QQBrowser.exe",
"pid": 79460
},
{
"name": "QQBrowser.exe",
"pid": 42308
},
{
"name": "QQBrowser.exe",
"pid": 65280
},
{
"name": "QQBrowser.exe",
"pid": 61116
},
{
"name": "QQBrowser.exe",
"pid": 68848
},
{
"name": "QQBrowser.exe",
"pid": 61172
},
{
"name": "QQBrowser.exe",
"pid": 54788
},
{
"name": "QQBrowser.exe",
"pid": 18372
},
{
"name": "QQBrowser.exe",
"pid": 33776
},
{
"name": "QQBrowser.exe",
"pid": 28428
},
{
"name": "QQBrowser.exe",
"pid": 69952
},
{
"name": "QQBrowser.exe",
"pid": 46196
},
{
"name": "QQBrowser.exe",
"pid": 20908
},
{
"name": "QQBrowser.exe",
"pid": 26760
},
{
"name": "QQBrowser.exe",
"pid": 49432
},
{
"name": "QQBrowser.exe",
"pid": 46088
},
{
"name": "wpscloudsvr.exe",
"pid": 60192
},
{
"name": "wps.exe",
"pid": 69736
},
{
"name": "promecefpluginhost.exe",
"pid": 33228
},
{
"name": "promecefpluginhost.exe",
"pid": 62640
},
{
"name": "audiodg.exe",
"pid": 35880
},
{
"name": "Qoder IDE.exe",
"pid": 41624
},
{
"name": "conhost.exe",
"pid": 16908
},
{
"name": "powershell.exe",
"pid": 16812
},
{
"name": "python.exe",
"pid": 7100
},
{
"name": "conhost.exe",
"pid": 34460
},
{
"name": "Qoder IDE.exe",
"pid": 35104
},
{
"name": "conhost.exe",
"pid": 67132
},
{
"name": "powershell.exe",
"pid": 32976
},
{
"name": "conhost.exe",
"pid": 3912
},
{
"name": "powershell.exe",
"pid": 69420
},
{
"name": "msedge.exe",
"pid": 71592
},
{
"name": "msedge.exe",
"pid": 62928
},
{
"name": "svchost.exe",
"pid": 68096
},
{
"name": "SearchFilterHost.exe",
"pid": 55004
},
{
"name": "SearchFilterHost.exe",
"pid": 76628
},
{
"name": "SearchFilterHost.exe",
"pid": 60936
},
{
"name": "SearchFilterHost.exe",
"pid": 71424
},
{
"name": "svchost.exe",
"pid": 25356
},
{
"name": "SearchProtocolHost.exe",
"pid": 77220
},
{
"name": "msedge.exe",
"pid": 37640
},
{
"name": "msedge.exe",
"pid": 32568
},
{
"name": "HPLJUTSCH.exe",
"pid": 78404
},
{
"name": "smartscreen.exe",
"pid": 44632
},
{
"name": "appshot_bare_modifier_monitor.exe",
"pid": 32880
},
{
"name": "conhost.exe",
"pid": 28328
},
{
"name": "cmd.exe",
"pid": 60640
},
{
"name": "node.exe",
"pid": 33612
},
{
"name": "cmd.exe",
"pid": 61968
},
{
"name": "node.exe",
"pid": 54196
},
{
"name": "node.exe",
"pid": 68808
},
{
"name": "svchost.exe",
"pid": 76208
},
{
"name": "DeltaGuard-Client-0.2.exe",
"pid": 54564
}
],
"secure_boot": null,
"services": [
{
"DisplayName": "AdobeUpdateService",
"Name": "AdobeUpdateService",
"PathName": "\"C:\\Program Files (x86)\\Common Files\\Adobe\\Adobe Desktop Common\\ElevationManager\\AdobeUpdateService.exe\""
},
{
"DisplayName": "Application Information",
"Name": "Appinfo",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Apple Mobile Device Service",
"Name": "Apple Mobile Device Service",
"PathName": "\"C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\AppleMobileDeviceService.exe\""
},
{
"DisplayName": "Application Management",
"Name": "AppMgmt",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "AppX Deployment Service (AppXSVC)",
"Name": "AppXSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k wsappx -p"
},
{
"DisplayName": "Windows Audio Endpoint Builder",
"Name": "AudioEndpointBuilder",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Windows Audio",
"Name": "Audiosrv",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "AweSunService",
"Name": "AweSunService",
"PathName": "\"C:\\Program Files\\Oray\\SunLogin\\SunloginClient\\AweSun.exe\" --mod=service"
},
{
"DisplayName": "Base Filtering Engine",
"Name": "BFE",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p"
},
{
"DisplayName": "Background Intelligent Transfer Service",
"Name": "BITS",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Background Tasks Infrastructure Service",
"Name": "BrokerInfrastructure",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "������Ƶ���ط���",
"Name": "BTAGService",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted"
},
{
"DisplayName": "AVCTP ����",
"Name": "BthAvctpSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceRedirectionGuard -p"
},
{
"DisplayName": "����֧�ַ���",
"Name": "bthserv",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "���ܷ��ʹ���������",
"Name": "camsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k osprivacy -p"
},
{
"DisplayName": "�����豸ƽ̨����",
"Name": "CDPSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Certificate Propagation",
"Name": "CertPropSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs"
},
{
"DisplayName": "CoreMessaging",
"Name": "CoreMessagingRegistrar",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetwork -p"
},
{
"DisplayName": "Intel(R) Content Protection HDCP Service",
"Name": "cplspcon",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\iigd_dch.inf_amd64_f6ea1f36cd61d64f\\IntelCpHDCPSvc.exe"
},
{
"DisplayName": "VoiceDetect Monitor Service",
"Name": "Creative.VADMonitorService",
"PathName": "\"C:\\Program Files (x86)\\Creative\\Creative App\\Creative.VADMonitorService.exe\""
},
{
"DisplayName": "Cryptographic Services",
"Name": "CryptSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p"
},
{
"DisplayName": "Creative Audio Service",
"Name": "CTAudSvcService",
"PathName": "C:\\Program Files (x86)\\Creative\\Shared Files\\CTAudSvc.exe"
},
{
"DisplayName": "DCOM Server Process Launcher",
"Name": "DcomLaunch",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "Device Association Service",
"Name": "DeviceAssociationService",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Device Install Service",
"Name": "DeviceInstall",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "DHCP Client",
"Name": "Dhcp",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "Connected User Experiences and Telemetry",
"Name": "DiagTrack",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k utcsvc -p"
},
{
"DisplayName": "��ʾ���Է���",
"Name": "DispBrokerDesktopSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "��ʾ��ǿ����",
"Name": "DisplayEnhancementService",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "XiaoMi Distributed Service",
"Name": "DistributedService",
"PathName": "\"C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\DistributedService.exe\""
},
{
"DisplayName": "XiaoMi Dist Service",
"Name": "dist_service",
"PathName": "\"C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\dist_service.exe\""
},
{
"DisplayName": "DNS Client",
"Name": "Dnscache",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p"
},
{
"DisplayName": "Delivery Optimization",
"Name": "DoSvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p"
},
{
"DisplayName": "�����ͻ��������Ż�����",
"Name": "douyin_performance_service",
"PathName": "C:\\WINDOWS\\system32\\svchost -k douyin_performance_service"
},
{
"DisplayName": "Diagnostic Policy Service",
"Name": "DPS",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNoNetwork -p"
},
{
"DisplayName": "Device Setup Manager",
"Name": "DsmSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Data Sharing Service",
"Name": "DsSvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "����ʹ����",
"Name": "DusmSvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc"
},
{
"DisplayName": "Windows Event Log",
"Name": "EventLog",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "COM+ Event System",
"Name": "EventSystem",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceRedirectionGuard -p"
},
{
"DisplayName": "Function Discovery Provider Host",
"Name": "fdPHost",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Function Discovery Resource Publication",
"Name": "FDResPub",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p"
},
{
"DisplayName": "Windows Font Cache Service",
"Name": "FontCache",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Windows Camera Frame Server",
"Name": "FrameServer",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k Camera"
},
{
"DisplayName": "GameInput Service",
"Name": "GameInputSvc",
"PathName": "C:\\WINDOWS\\System32\\GameInputSvc.exe"
},
{
"DisplayName": "GCUBridge",
"Name": "GCUBridge",
"PathName": "C:\\Program Files\\OEM\\��е�����羺����̨\\UniwillService\\GCUBridge.exe"
},
{
"DisplayName": "Group Policy Client",
"Name": "gpsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k GPSvcGroup"
},
{
"DisplayName": "XiaoMi Handoff Service",
"Name": "handoff_service",
"PathName": "\"C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\handoff\\handoff_svc.exe\""
},
{
"DisplayName": "Human Interface Device Service",
"Name": "hidserv",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Huorong Internet Security Daemon",
"Name": "HipsDaemon",
"PathName": "\"C:\\Program Files\\Huorong\\Sysdiag\\bin\\HipsDaemon.exe\" -sHipsDaemon"
},
{
"DisplayName": "Huorong App Store Daemon",
"Name": "HrASDaemon",
"PathName": "\"C:\\Program Files\\Huorong\\AppStore\\bin\\HrASDaemon.exe\" -sHrASDaemon"
},
{
"DisplayName": "Huorong Windows Security Center",
"Name": "HRWSCCtrl",
"PathName": "\"C:\\Program Files\\Huorong\\Sysdiag\\bin\\wsctrlsvc.exe\" /svc_run"
},
{
"DisplayName": "Intel(R) Graphics Command Center Service",
"Name": "igccservice",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\igcc_dch.inf_amd64_564a6f565b40bd5f\\OneApp.IGCC.WinService.exe"
},
{
"DisplayName": "IKE and AuthIP IPsec Keying Modules",
"Name": "IKEEXT",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Microsoft Store ��װ����",
"Name": "InstallService",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Intel(R) Audio Service",
"Name": "IntelAudioService",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\intcoed.inf_amd64_6a3c518c5fadd973\\\\AS\\\\IAS\\\\IntelAudioService.exe"
},
{
"DisplayName": "�嵥�ͼ�������������",
"Name": "InventorySvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k InvSvcGroup -p"
},
{
"DisplayName": "Intel(R) Innovation Platform Framework Service",
"Name": "ipfsvc",
"PathName": "\"C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\ipf_cpu.inf_amd64_a232fd65d8604eb5\\ipf_uf.exe\""
},
{
"DisplayName": "IP Helper",
"Name": "iphlpsvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k NetSvcs -p"
},
{
"DisplayName": "Intel(R) Dynamic Application Loader Host Interface Service",
"Name": "jhi_service",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\dal.inf_amd64_af50fdb80983f7bc\\jhi_service.exe"
},
{
"DisplayName": "CNG Key Isolation",
"Name": "KeyIso",
"PathName": "C:\\WINDOWS\\system32\\lsass.exe"
},
{
"DisplayName": "Server",
"Name": "LanmanServer",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Workstation",
"Name": "LanmanWorkstation",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p"
},
{
"DisplayName": "Geolocation Service",
"Name": "lfsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcsRedirectionGuard -p"
},
{
"DisplayName": "Windows ����֤����������",
"Name": "LicenseManager",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "lmclientHelperService",
"Name": "lmclientHelperService",
"PathName": "C:\\Users\\27806\\AppData\\Local\\Programs\\lmclient\\lmclientHelperService.exe"
},
{
"DisplayName": "TCP/IP NetBIOS Helper",
"Name": "lmhosts",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "LSM",
"Name": "LSM",
"PathName": null
},
{
"DisplayName": "MAFSvr",
"Name": "MAFSvr",
"PathName": "\"C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\MAFSvr.exe\""
},
{
"DisplayName": "XiaoMi Continuity Service",
"Name": "micont_service",
"PathName": "\"C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\micont_service.exe\""
},
{
"DisplayName": "Windows MIDI ����",
"Name": "midisrv",
"PathName": "C:\\WINDOWS\\system32\\midisrv.exe"
},
{
"DisplayName": "MiPlayCastService",
"Name": "MiPlayCastService",
"PathName": "C:\\Program Files\\MI\\XiaomiPCManager\\4.3.0.1881\\MiPlayCastService.exe"
},
{
"DisplayName": "MiService",
"Name": "MiService",
"PathName": "\"C:\\Program Files (x86)\\Timi Personal Computing\\MiService\\3.4.1.1132\\MiService.exe\""
},
{
"DisplayName": "Windows Defender Firewall",
"Name": "mpssvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p"
},
{
"DisplayName": "MuMuRemoteService",
"Name": "MuMuRemoteService",
"PathName": "\"C:\\Program Files\\Netease\\MuMu Player 12\\nx_main\\MuMuRemoteService.exe\" --service"
},
{
"DisplayName": "Network Connection Broker",
"Name": "NcbService",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Network Connections",
"Name": "Netman",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Network List Service",
"Name": "netprofm",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netprofm -p"
},
{
"DisplayName": "Microsoft Passport Container",
"Name": "NgcCtnrSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "Microsoft Passport",
"Name": "NgcSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "nginx",
"Name": "nginx",
"PathName": "\"C:\\BtSoft\\nginx\\nginx_server.exe\" "
},
{
"DisplayName": "Network Store Interface Service",
"Name": "nsi",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "NVIDIA LocalSystem Container",
"Name": "NvContainerLocalSystem",
"PathName": "\"C:\\Program Files\\NVIDIA Corporation\\NvContainer\\nvcontainer.exe\" -s NvContainerLocalSystem -a -f \"C:\\ProgramData\\NVIDIA Corporation\\NVIDIA App\\NvContainer\\NvContainerLocalSystem.log\" -l 3 -d \"C:\\Program Files\\NVIDIA Corporation\\NvContainer\\plugins\\LocalSystem\" -r -p 30000 -ert"
},
{
"DisplayName": "NVIDIA Display Container LS",
"Name": "NVDisplay.ContainerLocalSystem",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\nvtfsi.inf_amd64_ddba0af1c493e970\\Display.NvContainer\\NVDisplay.Container.exe -arg <ExeDir>\\arguments.txt"
},
{
"DisplayName": "Program Compatibility Assistant Service",
"Name": "PcaSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Microsoft PC Manager Service",
"Name": "PCManager Service Store",
"PathName": "\"C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftPCManager_3.15.5.0_x64__8wekyb3d8bbwe\\PCManager\\MSPCManagerService.exe\""
},
{
"DisplayName": "Phone Service",
"Name": "PhoneSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Plug and Play",
"Name": "PlugPlay",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "IPsec Policy Agent",
"Name": "PolicyAgent",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkServiceNetworkRestricted -p"
},
{
"DisplayName": "Power",
"Name": "Power",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "User Profile Service",
"Name": "ProfSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UserProfileService -p"
},
{
"DisplayName": "QQBrowserUpdateService",
"Name": "QQBrowserUpdateService",
"PathName": "\"C:\\Program Files\\Tencent\\QQBrowser\\QBUpdateService.exe\""
},
{
"DisplayName": "Quality Windows Audio Video Experience",
"Name": "QWAVE",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p"
},
{
"DisplayName": "Remote Access Connection Manager",
"Name": "RasMan",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs"
},
{
"DisplayName": "Red Giant Service",
"Name": "Red Giant Service",
"PathName": "\"C:\\Program Files\\Red Giant\\Services\\Red Giant Service.exe\""
},
{
"DisplayName": "���ߵ���������",
"Name": "RmSvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted"
},
{
"DisplayName": "RPC Endpoint Mapper",
"Name": "RpcEptMapper",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k RPCSS -p"
},
{
"DisplayName": "Remote Procedure Call (RPC) Locator",
"Name": "RpcLocator",
"PathName": "C:\\WINDOWS\\system32\\locator.exe"
},
{
"DisplayName": "Remote Procedure Call (RPC)",
"Name": "RpcSs",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k rpcss -p"
},
{
"DisplayName": "Realtek Audio Universal Service",
"Name": "RtkAudioUniversalService",
"PathName": "\"C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\realtekservice.inf_amd64_18daf79b2c8abbf6\\RtkAudUService64.exe\""
},
{
"DisplayName": "Security Accounts Manager",
"Name": "SamSs",
"PathName": "C:\\WINDOWS\\system32\\lsass.exe"
},
{
"DisplayName": "Task Scheduler",
"Name": "Schedule",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Secondary Logon",
"Name": "seclogon",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Windows ��ȫ���ķ���",
"Name": "SecurityHealthService",
"PathName": "C:\\WINDOWS\\system32\\SecurityHealthService.exe"
},
{
"DisplayName": "System Event Notification Service",
"Name": "SENS",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcsRedirectionGuard -p"
},
{
"DisplayName": "Sensor Service",
"Name": "SensorService",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Remote Desktop Configuration",
"Name": "SessionEnv",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Shell Hardware Detection",
"Name": "ShellHWDetection",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "spacedeskService",
"Name": "spacedeskService",
"PathName": "C:\\WINDOWS\\System32\\spacedeskService.exe"
},
{
"DisplayName": "Print Spooler",
"Name": "Spooler",
"PathName": "C:\\WINDOWS\\System32\\spoolsv.exe"
},
{
"DisplayName": "SSDP Discovery",
"Name": "SSDPSRV",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonationRedirectionGuard -p"
},
{
"DisplayName": "Secure Socket Tunneling Protocol Service",
"Name": "SstpSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "State Repository Service",
"Name": "StateRepository",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k appmodel -p"
},
{
"DisplayName": "Windows Image Acquisition (WIA)",
"Name": "StiSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k imgsvc"
},
{
"DisplayName": "Storage Service",
"Name": "StorSvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "SysMain",
"Name": "SysMain",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "System Events Broker",
"Name": "SystemEventsBroker",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p"
},
{
"DisplayName": "Telephony",
"Name": "TapiSrv",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p"
},
{
"DisplayName": "Remote Desktop Services",
"Name": "TermService",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService"
},
{
"DisplayName": "Text Input Management Service",
"Name": "TextInputManagementService",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "TFSPEQService",
"Name": "TFSPEQService",
"PathName": "\"C:\\WINDOWS\\TFSPEQService.exe\""
},
{
"DisplayName": "Themes",
"Name": "Themes",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Time Broker",
"Name": "TimeBrokerSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "ToDesk Service",
"Name": "ToDesk_Service",
"PathName": "\"C:\\Program Files\\ToDesk\\ToDesk.exe\" --runservice"
},
{
"DisplayName": "Web �˻�������",
"Name": "TokenBroker",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Distributed Link Tracking Client",
"Name": "TrkWks",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Remote Desktop Services UserMode Port Redirector",
"Name": "UmRdpService",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "UPnP Device Host",
"Name": "upnphost",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonationRedirectionGuard -p"
},
{
"DisplayName": "User Manager",
"Name": "UserManager",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "���� Orchestrator ����",
"Name": "UsoSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Credential Manager",
"Name": "VaultSvc",
"PathName": "C:\\WINDOWS\\system32\\lsass.exe"
},
{
"DisplayName": "Windows Time",
"Name": "W32Time",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService"
},
{
"DisplayName": "Wallpaper Engine Service",
"Name": "Wallpaper Engine Service",
"PathName": "\"C:\\WINDOWS\\SysWOW64\\wallpaperservice32.exe\" -p \"C:\\Program Files (x86)\\Steam\\steamapps\\common\\wallpaper_engine\\wallpaper32.exe\""
},
{
"DisplayName": "Windows Connection Manager",
"Name": "Wcmsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc"
},
{
"DisplayName": "Windows Connect Now - Config Registrar",
"Name": "wcncsvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceAndNoImpersonation -p"
},
{
"DisplayName": "Diagnostic Service Host",
"Name": "WdiServiceHost",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Diagnostic System Host",
"Name": "WdiSystemHost",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "WebClient",
"Name": "WebClient",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Web ���������",
"Name": "webthreatdefsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k WebThreatDefense -p"
},
{
"DisplayName": "WeType Management Service",
"Name": "WeType Management Service",
"PathName": "\"C:\\Program Files\\Tencent\\WeType\\2.1.0.36\\wetype_service.exe\""
},
{
"DisplayName": "Windows ����״�����Ż�����",
"Name": "whesvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k whesvc -p"
},
{
"DisplayName": "WinHTTP Web Proxy Auto-Discovery Service",
"Name": "WinHttpAutoProxySvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceHttp -p"
},
{
"DisplayName": "Windows Management Instrumentation",
"Name": "Winmgmt",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "WLAN AutoConfig",
"Name": "WlanSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Microsoft Account Sign-in Assistant",
"Name": "wlidsvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "WMI Performance Adapter",
"Name": "wmiApSrv",
"PathName": "C:\\WINDOWS\\system32\\wbem\\WmiApSrv.exe"
},
{
"DisplayName": "Intel(R) Management Engine WMI Provider Registration",
"Name": "WMIRegistrationService",
"PathName": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\mewmiprov.inf_amd64_d51901c26227fb29\\WMIRegistrationService.exe"
},
{
"DisplayName": "Windows ����֪ͨϵͳ����",
"Name": "WpnService",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Windows AI ��������",
"Name": "WSAIFabricSvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k WSAIFabricSvcGroup -p"
},
{
"DisplayName": "��ȫ����",
"Name": "wscsvc",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p"
},
{
"DisplayName": "Windows Search",
"Name": "WSearch",
"PathName": "C:\\WINDOWS\\system32\\SearchIndexer.exe /Embedding"
},
{
"DisplayName": "Windows ����",
"Name": "wuauserv",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p"
},
{
"DisplayName": "Microsoft ʹ����������������",
"Name": "wuqisvc",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k WuqiSvcGroup -p"
},
{
"DisplayName": "XiaoaiService",
"Name": "XiaoaiService",
"PathName": "\"C:\\Program Files\\MI\\XiaoaiService\\1.3.0.186\\XiaoaiService.exe\""
},
{
"DisplayName": "�����û�֧�ַ���_1e4ad0",
"Name": "BluetoothUserService_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k BthAppGroup -p"
},
{
"DisplayName": "�������û�����_1e4ad0",
"Name": "cbdhsvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k ClipboardSvcGroup -p"
},
{
"DisplayName": "�����豸ƽ̨�û�����_1e4ad0",
"Name": "CDPUserSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup"
},
{
"DisplayName": "DevicesFlow_1e4ad0",
"Name": "DevicesFlowUserSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow"
},
{
"DisplayName": "���ڲ��ŻỰ����������_1e4ad0",
"Name": "NPSMSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p"
},
{
"DisplayName": "Contact Data_1e4ad0",
"Name": "PimIndexMaintenanceSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup"
},
{
"DisplayName": "Udk �û�����_1e4ad0",
"Name": "UdkUserSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UdkSvcGroup"
},
{
"DisplayName": "User Data Storage_1e4ad0",
"Name": "UnistoreSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\System32\\svchost.exe -k UnistackSvcGroup"
},
{
"DisplayName": "User Data Access_1e4ad0",
"Name": "UserDataSvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup"
},
{
"DisplayName": "Web ��в�����û�����_1e4ad0",
"Name": "webthreatdefusersvc_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p"
},
{
"DisplayName": "Windows Push Notifications User Service_1e4ad0",
"Name": "WpnUserService_1e4ad0",
"PathName": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup"
},
{
"DisplayName": "TxQBService",
"Name": "TxQBService",
"PathName": "\"C:\\Program Files\\Tencent\\QQBrowser\\TsService.exe\""
},
{
"DisplayName": "IQIYI Video Platform Service",
"Name": "QiyiService",
"PathName": "\"C:\\Program Files\\IQIYI Video\\LStyle\\14.9.5.10283\\Service\\QiyiService.exe\""
},
{
"DisplayName": "abcEBService",
"Name": "abcEBService",
"PathName": "\"C:\\Program Files (x86)\\�й�ũҵ����\\�й�ũҵ������������\\abcEBService.exe\""
},
{
"DisplayName": "OnKey Service of DB USB KEY for ABC",
"Name": "OnKey Service of DB USB KEY for ABC",
"PathName": "C:\\WINDOWS\\SysWOW64\\DBSer_ABC.exe"
},
{
"DisplayName": "Gaming Services",
"Name": "GamingServicesNet",
"PathName": "\"C:\\Program Files\\WindowsApps\\Microsoft.GamingServices_38.117.18001.0_x64__8wekyb3d8bbwe\\GamingServicesNet.exe\""
},
{
"DisplayName": "Gaming Services",
"Name": "GamingServices",
"PathName": "\"C:\\Program Files\\WindowsApps\\Microsoft.GamingServices_38.117.18001.0_x64__8wekyb3d8bbwe\\GamingServices.exe\""
},
{
"DisplayName": "GameInput Redist Service",
"Name": "GameInputRedistService",
"PathName": "\"C:\\Program Files\\Microsoft GameInput\\x64\\GameInputRedistService.exe\""
}
],
"suspicious_process_count": 0,
"tpm_present": null,
"usb_hid_devices": [
{
"DeviceID": "HID\\VID_046D&PID_C34A&MI_01&COL01\\7&5870B28&0&0000",
"Manufacturer": "(������)",
"Name": "HID Keyboard Device"
},
{
"DeviceID": "HID\\UNIW0001&COL01\\5&26C74C0&0&0000",
"Manufacturer": "Microsoft",
"Name": "HID-compliant mouse"
},
{
"DeviceID": "HID\\CONVERTEDDEVICE&COL01\\5&36801E08&0&0000",
"Manufacturer": "(������)",
"Name": "HID Keyboard Device"
},
{
"DeviceID": "HID\\INTC816&COL01\\3&10839A5C&0&0000",
"Manufacturer": "(������)",
"Name": "HID Keyboard Device"
},
{
"DeviceID": "USB\\ROOT_HUB30\\4&28E79C69&0&0",
"Manufacturer": "(�� USB ������)",
"Name": "USB ��������(USB 3.0)"
},
{
"DeviceID": "USB\\VID_2B7E&PID_B651\\INTEGRATED_CAMERA",
"Manufacturer": "(�� USB ��������)",
"Name": "USB Composite Device"
},
{
"DeviceID": "USB\\VID_0D8C&PID_0013\\5&19F74E4B&0&3",
"Manufacturer": "(�� USB ��������)",
"Name": "USB Composite Device"
},
{
"DeviceID": "HID\\{00001812-0000-1000-8000-00805F9B34FB}_DEV_VID&02000E_PID&3412_REV&0506_DDDE9111B238\\9&7FB847C&0&0000",
"Manufacturer": "Microsoft",
"Name": "HID-compliant mouse"
},
{
"DeviceID": "HID\\VID_046D&PID_C34A&MI_00\\7&1D4A976D&0&0000",
"Manufacturer": "(������)",
"Name": "HID Keyboard Device"
},
{
"DeviceID": "USB\\VID_046D&PID_C34A\\5&19F74E4B&0&1",
"Manufacturer": "(�� USB ��������)",
"Name": "USB Composite Device"
},
{
"DeviceID": "ACPI\\MSFT0001\\4&6EA17BE&0",
"Manufacturer": "(������)",
"Name": "PS/2 ������"
},
{
"DeviceID": "PCI\\VEN_8086&DEV_51ED&SUBSYS_12951D05&REV_01\\3&11583659&0&A0",
"Manufacturer": "ͨ�� USB xHCI ����������",
"Name": "Intel(R) USB 3.10 ����չ���������� - 1.20 (Microsoft)"
}
]
},
"session_id": "sess-20260922T184531Z",
"source": "exe",
"tenant_id": "club-a"
}
本页为查挂平台云端最小实现：EXE 采集 → 授权上传 → 服务端存储与状态计算。所有结论 verdict 仍为 null，需后续接入分析模块与人工复核。