mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
lolbas
This commit is contained in:
d1vious
Submodule
+1
Submodule bin/lolba_enrichment/LOLBAS added at 8810e30f0a
@@ -124,11 +124,9 @@ def write_csv(lolbas, OUTPUT_PATH):
|
||||
if get_lolbas_paths(lolba):
|
||||
full_paths = get_lolbas_paths(lolba)
|
||||
for full_path in full_paths:
|
||||
lolba_file_paths = get_lolbas_paths(lolba)
|
||||
lolba_file_name = lolba['Name'].lower()
|
||||
lolba_description = lolba['Description']
|
||||
for lolba_file_path in lolba_file_paths:
|
||||
writer.writerow({'lolbas_file_name': lolba_file_name, 'lolbas_file_path': lolba_file_path.lower(), 'description': lolba_description})
|
||||
writer.writerow({'lolbas_file_name': lolba_file_name, 'lolbas_file_path': full_path.lower(), 'description': lolba_description})
|
||||
|
||||
|
||||
def write_yaml(detection, VERBOSE, detection_output_path):
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
+488
-27
@@ -1,27 +1,488 @@
|
||||
lolbas_file_name,lolbas_file_path,description
|
||||
remcom.exe,This process is an open source replacement to psexec and is not typically seen in an enterprise environment.
|
||||
pwdump.exe,This process is associated with a tool used to dump password hashes on a Windows system.
|
||||
pwdump2.exe,This process is associated with a tool used to dump password hashes on a Windows system.
|
||||
nc.exe,This process is an open source tool used for network communications.
|
||||
wce.exe,This process is associated with a tool used to dump hashes and execute pass-the-hash and pass-the-ticket attacks.
|
||||
cain.exe,This process is associated with a tool used to collect user credentials and execute attacks.
|
||||
nmap.exe,This process is an open source network mapping tool used to identify hosts and listening services on a network.
|
||||
kidlogger.exe,This process is associated with a tool used to collect keyboard input on a host.
|
||||
isass.exe,This process name is used by attackers to hide in plain sight and look like a legitimate Windows system process.
|
||||
svch0st.exe,This process name is used by attackers to hide in plain sight and look like a legitimate Windows system process.
|
||||
at.exe,This process is used to schedule other processes to run. schtasks.exe should be used instead as it provides more flexibility.
|
||||
getmail.exe,This process is seen to be used by attackers to extract email files from host machines.
|
||||
ntdll.exe,This process was identified as malicious by DHS Alert TA18-074A.
|
||||
netpass.exe,This process was identified as malicious by DHS Alert TA18-201A and attackers use this tool to recover all network passwords stored on your system for the current logged-on user.
|
||||
WebBrowserPassView.exe,This process was identified as malicious by DHS Alert TA18-201A and is used by attackers as a password recovery tool that reveals the passwords stored in Web Browsers.
|
||||
OutlookAddressBookView.exe,This process was identified as malicious by DHS Alert TA18-201A and is used by attackers to steal the details of all recipients stored in the address books of Microsoft Outlook.
|
||||
mailpv.exe,This process was identified by DHS Alert TA18-201A and attackers use this tool is a password-recovery tool that reveals the passwords and other account details from various email clients.
|
||||
NLBrute.exe,A RDP brute force tool found in botnets for further expansion and and acquisition of targets. This process was identified in the SamSam Ransomware Campaign and attackers use this tool to brute force RDP instances with a range of commonly used passwords.
|
||||
selfdel.exe,This executable was delivered in the SamSam Ransomware Campain and the attackers levereged this binary to delete its malicilous activities.
|
||||
masscan.exe,This executable was delivered in the XMRig Crypto Miner
|
||||
Massscan_GUI.exe,This executable was delivered in the XMRig Crypto Miner
|
||||
KPortScan3.exe,This executable was delivered in the XMRig Crypto Miner and is commonly used by attackers to scan the internet
|
||||
NLAChecker.exe,A scanner tool that checks for Windows hosts for Network Level Authentication. This tool allows attackers to detect Windows Servers with RDP without NLA enabled which facilitates the use of brute force non microsoft rdp tools or exploits
|
||||
ns.exe,A commonly used tool used by attackers to scan and map file shares
|
||||
SilverBullet.exe,Malware was discovered in our monitoring of honey pots that abuses this open source software for scanning and connecting to hosts.
|
||||
kportscan3.exe, KPortScan 3.0 is a widely used port scanning tool on Hacking Forums to perform network scanning on the internal networks.
|
||||
lolbas_file_name,lolbas_file_path,description
|
||||
eventvwr.exe,c:\windows\system32\eventvwr.exe,Displays Windows Event Logs in a GUI window.
|
||||
eventvwr.exe,c:\windows\syswow64\eventvwr.exe,Displays Windows Event Logs in a GUI window.
|
||||
rasautou.exe,c:\windows\system32\rasautou.exe,Windows Remote Access Dialer
|
||||
regedit.exe,c:\windows\system32\regedit.exe,Used by Windows to manipulate registry
|
||||
regedit.exe,c:\windows\syswow64\regedit.exe,Used by Windows to manipulate registry
|
||||
regsvr32.exe,c:\windows\system32\regsvr32.exe,Used by Windows to register dlls
|
||||
regsvr32.exe,c:\windows\syswow64\regsvr32.exe,Used by Windows to register dlls
|
||||
control.exe,c:\windows\system32\control.exe,Binary used to launch controlpanel items in Windows
|
||||
control.exe,c:\windows\syswow64\control.exe,Binary used to launch controlpanel items in Windows
|
||||
configsecuritypolicy.exe,c:\programdata\microsoft\windows defender\platform\4.18.2008.9-0\configsecuritypolicy.exe,Binary part of Windows Defender. Used to manage settings in Windows Defender. you can configure different pilot collections for each of the co-management workloads. Being able to use different pilot collections allows you to take a more granular approach when shifting workloads.
|
||||
scriptrunner.exe,c:\windows\system32\scriptrunner.exe,
|
||||
scriptrunner.exe,c:\windows\syswow64\scriptrunner.exe,
|
||||
offlinescannershell.exe,c:\program files\windows defender\offline\offlinescannershell.exe,Windows Defender Offline Shell
|
||||
atbroker.exe,c:\windows\system32\atbroker.exe,Helper binary for Assistive Technology (AT)
|
||||
atbroker.exe,c:\windows\syswow64\atbroker.exe,Helper binary for Assistive Technology (AT)
|
||||
mmc.exe,c:\windows\system32\mmc.exe,Load snap-ins to locally and remotely manage Windows systems
|
||||
mmc.exe,c:\windows\syswow64\mmc.exe,Load snap-ins to locally and remotely manage Windows systems
|
||||
mavinject.exe,c:\windows\system32\mavinject.exe,Used by App-v in Windows
|
||||
mavinject.exe,c:\windows\syswow64\mavinject.exe,Used by App-v in Windows
|
||||
ftp.exe,c:\windows\system32\ftp.exe,A binary designed for connecting to FTP servers
|
||||
ftp.exe,c:\windows\syswow64\ftp.exe,A binary designed for connecting to FTP servers
|
||||
ttdinject.exe,c:\windows\system32\ttdinject.exe,Used by Windows 1809 and newer to Debug Time Travel (Underlying call of tttracer.exe)
|
||||
ttdinject.exe,c:\windows\syswow64\ttdinject.exe,Used by Windows 1809 and newer to Debug Time Travel (Underlying call of tttracer.exe)
|
||||
certoc.exe,c:\windows\system32\certoc.exe,Used for installing certificates
|
||||
certoc.exe,c:\windows\syswow64\certoc.exe,Used for installing certificates
|
||||
at.exe,c:\windows\system32\at.exe,Schedule periodic tasks
|
||||
at.exe,c:\windows\syswow64\at.exe,Schedule periodic tasks
|
||||
netsh.exe,c:\windows\system32\netsh.exe,Netsh is a Windows tool used to manipulate network interface settings.
|
||||
netsh.exe,c:\windows\syswow64\netsh.exe,Netsh is a Windows tool used to manipulate network interface settings.
|
||||
pnputil.exe,c:\windows\system32\pnputil.exe,Used for installing drivers
|
||||
ie4uinit.exe,c:\windows\system32\ie4uinit.exe,
|
||||
ie4uinit.exe,c:\windows\syswow64\ie4uinit.exe,
|
||||
ie4uinit.exe,c:\windows\system32\ieuinit.inf,
|
||||
ie4uinit.exe,c:\windows\syswow64\ieuinit.inf,
|
||||
infdefaultinstall.exe,c:\windows\system32\infdefaultinstall.exe,Binary used to perform installation based on content inside inf files
|
||||
infdefaultinstall.exe,c:\windows\syswow64\infdefaultinstall.exe,Binary used to perform installation based on content inside inf files
|
||||
forfiles.exe,c:\windows\system32\forfiles.exe,Selects and executes a command on a file or set of files. This command is useful for batch processing.
|
||||
forfiles.exe,c:\windows\syswow64\forfiles.exe,Selects and executes a command on a file or set of files. This command is useful for batch processing.
|
||||
register-cimprovider.exe,c:\windows\system32\register-cimprovider.exe,Used to register new wmi providers
|
||||
register-cimprovider.exe,c:\windows\syswow64\register-cimprovider.exe,Used to register new wmi providers
|
||||
tttracer.exe,c:\windows\system32\tttracer.exe,Used by Windows 1809 and newer to Debug Time Travel
|
||||
tttracer.exe,c:\windows\syswow64\tttracer.exe,Used by Windows 1809 and newer to Debug Time Travel
|
||||
xwizard.exe,c:\windows\system32\xwizard.exe,
|
||||
xwizard.exe,c:\windows\syswow64\xwizard.exe,
|
||||
pcalua.exe,c:\windows\system32\pcalua.exe,Program Compatibility Assistant
|
||||
print.exe,c:\windows\system32\print.exe,Used by Windows to send files to the printer
|
||||
print.exe,c:\windows\syswow64\print.exe,Used by Windows to send files to the printer
|
||||
runscripthelper.exe,c:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_10.0.16299.15_none_c2df1bba78111118\runscripthelper.exe,
|
||||
runscripthelper.exe,c:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_10.0.16299.192_none_ad4699b571e00c4a\runscripthelper.exe,
|
||||
regasm.exe,c:\windows\microsoft.net\framework\v2.0.50727\regasm.exe,Part of .NET
|
||||
regasm.exe,c:\windows\microsoft.net\framework64\v2.0.50727\regasm.exe,Part of .NET
|
||||
regasm.exe,c:\windows\microsoft.net\framework\v4.0.30319\regasm.exe,Part of .NET
|
||||
regasm.exe,c:\windows\microsoft.net\framework64\v4.0.30319\regasm.exe,Part of .NET
|
||||
cmd.exe,c:\windows\system32\cmd.exe,The command-line interpreter in Windows
|
||||
cmd.exe,c:\windows\syswow64\cmd.exe,The command-line interpreter in Windows
|
||||
msbuild.exe,c:\windows\microsoft.net\framework\v2.0.50727\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\windows\microsoft.net\framework64\v2.0.50727\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\windows\microsoft.net\framework\v3.5\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\windows\microsoft.net\framework64\v3.5\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\windows\microsoft.net\framework\v4.0.30319\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\windows\microsoft.net\framework64\v4.0.30319\msbuild.exe,Used to compile and execute code
|
||||
msbuild.exe,c:\program files (x86)\msbuild\14.0\bin\msbuild.exe,Used to compile and execute code
|
||||
certutil.exe,c:\windows\system32\certutil.exe,Windows binary used for handling certificates
|
||||
certutil.exe,c:\windows\syswow64\certutil.exe,Windows binary used for handling certificates
|
||||
vbc.exe,c:\windows\microsoft.net\framework64\v4.0.30319\vbc.exe,Binary file used for compile vbs code
|
||||
vbc.exe,c:\windows\microsoft.net\framework64\v3.5\vbc.exe,Binary file used for compile vbs code
|
||||
psr.exe,c:\windows\system32\psr.exe,"Windows Problem Steps Recorder, used to record screen and clicks."
|
||||
psr.exe,c:\windows\syswow64\psr.exe,"Windows Problem Steps Recorder, used to record screen and clicks."
|
||||
extexport.exe,c:\program files\internet explorer\extexport.exe,
|
||||
extexport.exe,c:\program files (x86)\internet explorer\extexport.exe,
|
||||
rpcping.exe,c:\windows\system32\rpcping.exe,Used to verify rpc connection
|
||||
rpcping.exe,c:\windows\syswow64\rpcping.exe,Used to verify rpc connection
|
||||
msdt.exe,c:\windows\system32\msdt.exe,Microsoft diagnostics tool
|
||||
msdt.exe,c:\windows\syswow64\msdt.exe,Microsoft diagnostics tool
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\64kb6472.inf_amd64_3daef03bbe98572b\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_0e9c57ae3396e055\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_209bd95d56b1ac2d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_3fa2a843f8b7f16d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_85c860f05274baa0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_f7412e3e3404de80\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_feb9f1cf05b0de58\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_component.inf_amd64_0219cc1c7085a93f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_component.inf_amd64_df4f60b1cae9b14a\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_16eb18b0e2526e57\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_1c77f1231c19bc72\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_31c60cc38cfcca28\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_82f69cea8b2d928f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_b4d94f3e41ceb839\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_0606619cc97463de\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_0e95edab338ad669\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_22aac1442d387216\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_2461d914696db722\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_29d727269a34edf5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_2caf76dbce56546d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_353320edb98da643\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_4ea0ed0af1507894\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_56a48f4f1c2da7a7\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_64f23fdadb76a511\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_668dd0c6d3f9fa0e\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6be8e5b7f731a6e5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6dad7e4e9a8fa889\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6df442103a1937a4\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_767e7683f9ad126c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_8644298f665a12c4\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_868acf86149aef5d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_93239c65f222d453\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_9de8154b682af864\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_a7428663aca90897\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_ad7cb5e55a410add\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_afbf41cf8ab202d7\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_d193c96475eaa96e\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_db953c52208ada71\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_e7523682cc7528cc\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_e9f341319ca84274\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_f3a64c75ee4defb7\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_f51939e52b944f4b\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_4938423c9b9639d7\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_c8e108d4a62c59d5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_deecec7d232ced2b\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_01ee1299f4982efe\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_02edfc87000937e4\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0541b698fc6e40b0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0707757077710fff\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0b3e3ed3ace9602a\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0cff362f9dff4228\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_16ed7d82b93e4f68\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1a33d2f73651d989\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1aca2a92a37fce23\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1af2dd3e4df5fd61\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1d571527c7083952\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_23f7302c2b9ee813\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_24de78387e6208e4\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_250db833a1cd577e\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_25e7c5a58c052bc5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_28d80681d3523b1c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_2dda3b1147a3a572\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_31ba00ea6900d67d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_329877a66f240808\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_42af9f4718aa1395\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_4645af5c659ae51a\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_48c2e68e54c92258\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_48e7e903a369eae2\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_491d20003583dabe\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_4b34c18659561116\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_51ce968bf19942c2\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_555cfc07a674ecdd\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_561bd21d54545ed3\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_579a75f602cc2dce\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_57f66a4f0a97f1a3\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_587befb80671fb38\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_62f096fe77e085c0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6ae0ddbb4a38e23c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6bb02522ea3fdb0d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6d34ac0763025a06\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_712b6a0adbaabc0a\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_78b09d9681a2400f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_842874489af34daa\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_88084eb1fe7cebc3\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_89033455cb08186f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_8a9535cd18c90bc3\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_8c1fc948b5a01c52\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_9088b61921a6ff9f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_90f68cd0dc48b625\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_95cb371d046d4b4c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_a58de0cf5f3e9dca\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_abe9d37302f8b1ae\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_acb3edda7b82982f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_aebc5a8535dd3184\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_b5d4c82c67b39358\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_b846bbf1e81ea3cf\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_babb2e8b8072ff3b\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_bc75cebf5edbbc50\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_be91293cf20d4372\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c11f4d5f0bc4c592\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c4e5173126d31cf0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c4f600ffe34acc7b\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c8634ed19e331cda\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c9081e50bcffa972\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_ceddadac8a2b489e\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d4406f0ad6ec2581\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d5877a2e0e6374b6\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d8ca5f86add535ef\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_e8abe176c7b553b5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_eabb3ac2c517211f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_f8d8be8fea71e1a0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_fe5e116bb07c0629\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_fe73d2ebaa05fb95\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\igdlh64_kbl_kit127397.inf_amd64_e1da8ee9e92ccadb\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\k127153.inf_amd64_364f43f2a27f7bd7\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\k127153.inf_amd64_3f3936d8dec668b8\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\k127793.inf_amd64_3ab7883eddccbf0f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki129523.inf_amd64_32947eecf8f3e231\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki126950.inf_amd64_fa7f56314967630d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki126951.inf_amd64_94804e3918169543\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki126973.inf_amd64_06dde156632145e3\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki126974.inf_amd64_9168fc04b8275db9\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127005.inf_amd64_753576c4406c1193\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127018.inf_amd64_0f67ff47e9e30716\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127021.inf_amd64_0d68af55c12c7c17\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127171.inf_amd64_368f8c7337214025\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127176.inf_amd64_86c658cabfb17c9c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127390.inf_amd64_e1ccb879ece8f084\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127678.inf_amd64_8427d3a09f47dfc1\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127727.inf_amd64_cf8e31692f82192e\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127807.inf_amd64_fc915899816dbc5d\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki127850.inf_amd64_6ad8d99023b59fd5\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki128602.inf_amd64_6ff790822fd674ab\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki128916.inf_amd64_3509e1eb83b83cfb\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki129407.inf_amd64_f26f36ac54ce3076\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki129633.inf_amd64_d9b8af875f664a8c\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki129866.inf_amd64_e7cdca9882c16f55\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130274.inf_amd64_bafd2440fa1ffdd6\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130350.inf_amd64_696b7c6764071b63\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130409.inf_amd64_0d8d61270dfb4560\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130471.inf_amd64_26ad6921447aa568\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130624.inf_amd64_d85487143eec5e1a\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130825.inf_amd64_ee3ba427c553f15f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki130871.inf_amd64_382f7c369d4bf777\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki131064.inf_amd64_5d13f27a9a9843fa\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki131176.inf_amd64_fb4fe914575fdd15\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki131191.inf_amd64_d668106cb6f2eae0\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki131622.inf_amd64_0058d71ace34db73\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132032.inf_amd64_f29660d80998e019\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132337.inf_amd64_223d6831ffa64ab1\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132535.inf_amd64_7875dff189ab2fa2\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132544.inf_amd64_b8c1f31373153db4\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132574.inf_amd64_54c9b905b975ee55\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\ki132869.inf_amd64_052eb72d070df60f\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
gfxdownloadwrapper.exe,c:\windows\system32\driverstore\filerepository\kit126731.inf_amd64_1905c9d5f38631d9\,"Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path."
|
||||
dnscmd.exe,c:\windows\system32\dnscmd.exe,A command-line interface for managing DNS servers
|
||||
dnscmd.exe,c:\windows\syswow64\dnscmd.exe,A command-line interface for managing DNS servers
|
||||
wab.exe,c:\program files\windows mail\wab.exe,Windows address book manager
|
||||
wab.exe,c:\program files (x86)\windows mail\wab.exe,Windows address book manager
|
||||
msconfig.exe,c:\windows\system32\msconfig.exe,"MSConfig is a troubleshooting tool which is used to temporarily disable or re-enable software, device drivers or Windows services that run during startup process to help the user determine the cause of a problem with Windows"
|
||||
wscript.exe,c:\windows\system32\wscript.exe,Used by Windows to execute scripts
|
||||
wscript.exe,c:\windows\syswow64\wscript.exe,Used by Windows to execute scripts
|
||||
makecab.exe,c:\windows\system32\makecab.exe,Binary to package existing files into a cabinet (.cab) file
|
||||
makecab.exe,c:\windows\syswow64\makecab.exe,Binary to package existing files into a cabinet (.cab) file
|
||||
datasvcutil.exe,c:\windows\microsoft.net\framework64\v3.5\datasvcutil.exe,DataSvcUtil.exe is a command-line tool provided by WCF Data Services that consumes an Open Data Protocol (OData) feed and generates the client data service classes that are needed to access a data service from a .NET Framework client application.
|
||||
cmdl32.exe,c:\windows\system32\cmdl32.exe,Microsoft Connection Manager Auto-Download
|
||||
cmdl32.exe,c:\windows\syswow64\cmdl32.exe,Microsoft Connection Manager Auto-Download
|
||||
mshta.exe,c:\windows\system32\mshta.exe,Used by Windows to execute html applications. (.hta)
|
||||
mshta.exe,c:\windows\syswow64\mshta.exe,Used by Windows to execute html applications. (.hta)
|
||||
cmdkey.exe,c:\windows\system32\cmdkey.exe,"creates, lists, and deletes stored user names and passwords or credentials."
|
||||
cmdkey.exe,c:\windows\syswow64\cmdkey.exe,"creates, lists, and deletes stored user names and passwords or credentials."
|
||||
ilasm.exe,c:\windows\microsoft.net\framework\v4.0.30319\ilasm.exe,used for compile c# code into dll or exe.
|
||||
ilasm.exe,c:\windows\microsoft.net\framework64\v4.0.30319\ilasm.exe,used for compile c# code into dll or exe.
|
||||
rdrleakdiag.exe,c:\windows\system32\rdrleakdiag.exe,Microsoft Windows resource leak diagnostic tool
|
||||
rdrleakdiag.exe,c:\windows\syswow64\rdrleakdiag.exe,Microsoft Windows resource leak diagnostic tool
|
||||
mpcmdrun.exe,c:\programdata\microsoft\windows defender\platform\4.18.2008.4-0\mpcmdrun.exe,Binary part of Windows Defender. Used to manage settings in Windows Defender
|
||||
mpcmdrun.exe,c:\programdata\microsoft\windows defender\platform\4.18.2008.7-0\mpcmdrun.exe,Binary part of Windows Defender. Used to manage settings in Windows Defender
|
||||
mpcmdrun.exe,c:\programdata\microsoft\windows defender\platform\4.18.2008.9-0\mpcmdrun.exe,Binary part of Windows Defender. Used to manage settings in Windows Defender
|
||||
jsc.exe,c:\windows\microsoft.net\framework\v4.0.30319\jsc.exe,Binary file used by .NET to compile javascript code to .exe or .dll format
|
||||
jsc.exe,c:\windows\microsoft.net\framework64\v4.0.30319\jsc.exe,Binary file used by .NET to compile javascript code to .exe or .dll format
|
||||
jsc.exe,c:\windows\microsoft.net\framework\v2.0.50727\jsc.exe,Binary file used by .NET to compile javascript code to .exe or .dll format
|
||||
jsc.exe,c:\windows\microsoft.net\framework64\v2.0.50727\jsc.exe,Binary file used by .NET to compile javascript code to .exe or .dll format
|
||||
cmstp.exe,c:\windows\system32\cmstp.exe,Installs or removes a Connection Manager service profile.
|
||||
cmstp.exe,c:\windows\syswow64\cmstp.exe,Installs or removes a Connection Manager service profile.
|
||||
stordiag.exe,c:\windows\system32\stordiag.exe,Storage diagnostic tool
|
||||
stordiag.exe,c:\windows\syswow64\stordiag.exe,Storage diagnostic tool
|
||||
odbcconf.exe,c:\windows\system32\odbcconf.exe,Used in Windows for managing ODBC connections
|
||||
odbcconf.exe,c:\windows\syswow64\odbcconf.exe,Used in Windows for managing ODBC connections
|
||||
wlrmdr.exe,c:\windows\system32\wlrmdr.exe,Windows Logon Reminder executable
|
||||
printbrm.exe,c:\windows\system32\spool\tools\printbrm.exe,Printer Migration Command-Line Tool
|
||||
dfsvc.exe,c:\windows\microsoft.net\framework\v2.0.50727\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfsvc.exe,c:\windows\microsoft.net\framework64\v2.0.50727\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfsvc.exe,c:\windows\microsoft.net\framework\v4.0.30319\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfsvc.exe,c:\windows\microsoft.net\framework64\v4.0.30319\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
extrac32.exe,c:\windows\system32\extrac32.exe,
|
||||
extrac32.exe,c:\windows\syswow64\extrac32.exe,
|
||||
rundll32.exe,c:\windows\system32\rundll32.exe,Used by Windows to execute dll files
|
||||
rundll32.exe,c:\windows\syswow64\rundll32.exe,Used by Windows to execute dll files
|
||||
runonce.exe,c:\windows\system32\runonce.exe,
|
||||
runonce.exe,c:\windows\syswow64\runonce.exe,
|
||||
explorer.exe,c:\windows\explorer.exe,Binary used for managing files and system components within Windows
|
||||
explorer.exe,c:\windows\syswow64\explorer.exe,Binary used for managing files and system components within Windows
|
||||
wuauclt.exe,c:\windows\system32\wuauclt.exe,Windows Update Client
|
||||
wsreset.exe,c:\windows\system32\wsreset.exe,Used to reset Windows Store settings according to its manifest file
|
||||
finger.exe,c:\windows\system32\finger.exe,Displays information about a user or users on a specified remote computer that is running the Finger service or daemon
|
||||
finger.exe,c:\windows\syswow64\finger.exe,Displays information about a user or users on a specified remote computer that is running the Finger service or daemon
|
||||
regini.exe,c:\windows\system32\regini.exe,Used to manipulate the registry
|
||||
regini.exe,c:\windows\syswow64\regini.exe,Used to manipulate the registry
|
||||
reg.exe,c:\windows\system32\reg.exe,Used to manipulate the registry
|
||||
reg.exe,c:\windows\syswow64\reg.exe,Used to manipulate the registry
|
||||
syncappvpublishingserver.exe,c:\windows\system32\syncappvpublishingserver.exe,Used by App-v to get App-v server lists
|
||||
syncappvpublishingserver.exe,c:\windows\syswow64\syncappvpublishingserver.exe,Used by App-v to get App-v server lists
|
||||
bitsadmin.exe,c:\windows\system32\bitsadmin.exe,Used for managing background intelligent transfer
|
||||
bitsadmin.exe,c:\windows\syswow64\bitsadmin.exe,Used for managing background intelligent transfer
|
||||
msiexec.exe,c:\windows\system32\msiexec.exe,Used by Windows to execute msi files
|
||||
msiexec.exe,c:\windows\syswow64\msiexec.exe,Used by Windows to execute msi files
|
||||
regsvcs.exe,c:\windows\system32\regsvcs.exe,Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies
|
||||
regsvcs.exe,c:\windows\syswow64\regsvcs.exe,Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies
|
||||
gpscript.exe,c:\windows\system32\gpscript.exe,Used by group policy to process scripts
|
||||
gpscript.exe,c:\windows\syswow64\gpscript.exe,Used by group policy to process scripts
|
||||
diskshadow.exe,c:\windows\system32\diskshadow.exe,Diskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS).
|
||||
diskshadow.exe,c:\windows\syswow64\diskshadow.exe,Diskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS).
|
||||
ieexec.exe,c:\windows\microsoft.net\framework\v2.0.50727\ieexec.exe,The IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL.
|
||||
ieexec.exe,c:\windows\microsoft.net\framework64\v2.0.50727\ieexec.exe,The IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL.
|
||||
diantz.exe,c:\windows\system32\diantz.exe,Binary that package existing files into a cabinet (.cab) file
|
||||
diantz.exe,c:\windows\syswow64\diantz.exe,Binary that package existing files into a cabinet (.cab) file
|
||||
desktopimgdownldr.exe,c:\windows\system32\desktopimgdownldr.exe,Windows binary used to configure lockscreen/desktop image
|
||||
appinstaller.exe,c:\program files\windowsapps\microsoft.desktopappinstaller_1.11.2521.0_x64__8wekyb3d8bbwe\appinstaller.exe,Tool used for installation of AppX/MSIX applications on Windows 10
|
||||
sc.exe,c:\windows\system32\sc.exe,Used by Windows to manage services
|
||||
sc.exe,c:\windows\syswow64\sc.exe,Used by Windows to manage services
|
||||
replace.exe,c:\windows\system32\replace.exe,Used to replace file with another file
|
||||
replace.exe,c:\windows\syswow64\replace.exe,Used to replace file with another file
|
||||
schtasks.exe,c:\windows\system32\schtasks.exe,Schedule periodic tasks
|
||||
schtasks.exe,c:\windows\syswow64\schtasks.exe,Schedule periodic tasks
|
||||
microsoft.workflow.compiler.exe,c:\windows\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe,A utility included with .NET that is capable of compiling and executing C# or VB.net code.
|
||||
expand.exe,c:\windows\system32\expand.exe,Binary that expands one or more compressed files
|
||||
expand.exe,c:\windows\syswow64\expand.exe,Binary that expands one or more compressed files
|
||||
conhost.exe,c:\windows\system32\conhost.exe,Console Window host
|
||||
bash.exe,c:\windows\system32\bash.exe,File used by Windows subsystem for Linux
|
||||
bash.exe,c:\windows\syswow64\bash.exe,File used by Windows subsystem for Linux
|
||||
pcwrun.exe,c:\windows\system32\pcwrun.exe,Program Compatibility Wizard
|
||||
fltmc.exe,c:\windows\system32\fltmc.exe,Filter Manager Control Program used by Windows
|
||||
wmic.exe,c:\windows\system32\wbem\wmic.exe,The WMI command-line (WMIC) utility provides a command-line interface for WMI
|
||||
wmic.exe,c:\windows\syswow64\wbem\wmic.exe,The WMI command-line (WMIC) utility provides a command-line interface for WMI
|
||||
workfolders.exe,c:\windows\system32\workfolders.exe,Work Folders
|
||||
settingsynchost.exe,c:\windows\system32\settingsynchost.exe,Host Process for Setting Synchronization
|
||||
settingsynchost.exe,c:\windows\syswow64\settingsynchost.exe,Host Process for Setting Synchronization
|
||||
pktmon.exe,c:\windows\system32\pktmon.exe,Capture Network Packets on the windows 10 with October 2018 Update or later.
|
||||
pktmon.exe,c:\windows\syswow64\pktmon.exe,Capture Network Packets on the windows 10 with October 2018 Update or later.
|
||||
aspnet_compiler.exe,c:\windows\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe,ASP.NET Compilation Tool
|
||||
aspnet_compiler.exe,c:\windows\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe,ASP.NET Compilation Tool
|
||||
cscript.exe,c:\windows\system32\cscript.exe,Binary used to execute scripts in Windows
|
||||
cscript.exe,c:\windows\syswow64\cscript.exe,Binary used to execute scripts in Windows
|
||||
installutil.exe,c:\windows\microsoft.net\framework\v2.0.50727\installutil.exe,The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
|
||||
installutil.exe,c:\windows\microsoft.net\framework64\v2.0.50727\installutil.exe,The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
|
||||
installutil.exe,c:\windows\microsoft.net\framework\v4.0.30319\installutil.exe,The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
|
||||
installutil.exe,c:\windows\microsoft.net\framework64\v4.0.30319\installutil.exe,The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
|
||||
esentutl.exe,c:\windows\system32\esentutl.exe,Binary for working with Microsoft Joint Engine Technology (JET) database
|
||||
esentutl.exe,c:\windows\syswow64\esentutl.exe,Binary for working with Microsoft Joint Engine Technology (JET) database
|
||||
hh.exe,c:\windows\hh.exe,Binary used for processing chm files in Windows
|
||||
hh.exe,c:\windows\syswow64\hh.exe,Binary used for processing chm files in Windows
|
||||
findstr.exe,c:\windows\system32\findstr.exe,
|
||||
findstr.exe,c:\windows\syswow64\findstr.exe,
|
||||
verclsid.exe,c:\windows\system32\verclsid.exe,
|
||||
verclsid.exe,c:\windows\syswow64\verclsid.exe,
|
||||
certreq.exe,c:\windows\system32\certreq.exe,Used for requesting and managing certificates
|
||||
certreq.exe,c:\windows\syswow64\certreq.exe,Used for requesting and managing certificates
|
||||
csc.exe,c:\windows\microsoft.net\framework\v4.0.30319\csc.exe,Binary file used by .NET to compile C# code
|
||||
csc.exe,c:\windows\microsoft.net\framework64\v4.0.30319\csc.exe,Binary file used by .NET to compile C# code
|
||||
imewdbld.exe,c:\windows\system32\ime\shared\imewdbld.exe,Microsoft IME Open Extended Dictionary Module
|
||||
presentationhost.exe,c:\windows\system32\presentationhost.exe,File is used for executing Browser applications
|
||||
presentationhost.exe,c:\windows\syswow64\presentationhost.exe,File is used for executing Browser applications
|
||||
shell32.dll,c:\windows\system32\shell32.dll,Windows Shell Common Dll
|
||||
shell32.dll,c:\windows\syswow64\shell32.dll,Windows Shell Common Dll
|
||||
zipfldr.dll,c:\windows\system32\zipfldr.dll,Compressed Folder library
|
||||
zipfldr.dll,c:\windows\syswow64\zipfldr.dll,Compressed Folder library
|
||||
desk.cpl,c:\windows\system32\desk.cpl,Desktop Settings Control Panel
|
||||
desk.cpl,c:\windows\syswow64\desk.cpl,Desktop Settings Control Panel
|
||||
comsvcs.dll,c:\windows\system32\comsvcs.dll,COM+ Services
|
||||
setupapi.dll,c:\windows\system32\setupapi.dll,Windows Setup Application Programming Interface
|
||||
setupapi.dll,c:\windows\syswow64\setupapi.dll,Windows Setup Application Programming Interface
|
||||
mshtml.dll,c:\windows\system32\mshtml.dll,Microsoft HTML Viewer
|
||||
mshtml.dll,c:\windows\syswow64\mshtml.dll,Microsoft HTML Viewer
|
||||
advpack.dll,c:\windows\system32\advpack.dll,Utility for installing software and drivers with rundll32.exe
|
||||
advpack.dll,c:\windows\syswow64\advpack.dll,Utility for installing software and drivers with rundll32.exe
|
||||
pcwutl.dll,c:\windows\system32\pcwutl.dll,Microsoft HTML Viewer
|
||||
pcwutl.dll,c:\windows\syswow64\pcwutl.dll,Microsoft HTML Viewer
|
||||
shdocvw.dll,c:\windows\system32\shdocvw.dll,Shell Doc Object and Control Library.
|
||||
shdocvw.dll,c:\windows\syswow64\shdocvw.dll,Shell Doc Object and Control Library.
|
||||
ieframe.dll,c:\windows\system32\ieframe.dll,Internet Browser DLL for translating HTML code.
|
||||
ieframe.dll,c:\windows\syswow64\ieframe.dll,Internet Browser DLL for translating HTML code.
|
||||
dfshim.dll,c:\windows\microsoft.net\framework\v2.0.50727\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfshim.dll,c:\windows\microsoft.net\framework64\v2.0.50727\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfshim.dll,c:\windows\microsoft.net\framework\v4.0.30319\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
dfshim.dll,c:\windows\microsoft.net\framework64\v4.0.30319\dfsvc.exe,ClickOnce engine in Windows used by .NET
|
||||
url.dll,c:\windows\system32\url.dll,Internet Shortcut Shell Extension DLL.
|
||||
url.dll,c:\windows\syswow64\url.dll,Internet Shortcut Shell Extension DLL.
|
||||
ieadvpack.dll,c:\windows\system32\ieadvpack.dll,INF installer for Internet Explorer. Has much of the same functionality as advpack.dll.
|
||||
ieadvpack.dll,c:\windows\syswow64\ieadvpack.dll,INF installer for Internet Explorer. Has much of the same functionality as advpack.dll.
|
||||
syssetup.dll,c:\windows\system32\syssetup.dll,Windows NT System Setup
|
||||
syssetup.dll,c:\windows\syswow64\syssetup.dll,Windows NT System Setup
|
||||
winrm.vbs,c:\windows\system32\winrm.vbs,Script used for manage Windows RM settings
|
||||
winrm.vbs,c:\windows\syswow64\winrm.vbs,Script used for manage Windows RM settings
|
||||
manage-bde.wsf,c:\windows\system32\manage-bde.wsf,Script for managing BitLocker
|
||||
cl_mutexverifiers.ps1,c:\windows\diagnostics\system\windowsupdate\cl_mutexverifiers.ps1,
|
||||
cl_mutexverifiers.ps1,c:\windows\diagnostics\system\audio\cl_mutexverifiers.ps1,
|
||||
cl_mutexverifiers.ps1,c:\windows\diagnostics\system\windowsupdate\cl_mutexverifiers.ps1,
|
||||
cl_mutexverifiers.ps1,c:\windows\diagnostics\system\video\cl_mutexverifiers.ps1,
|
||||
cl_mutexverifiers.ps1,c:\windows\diagnostics\system\speech\cl_mutexverifiers.ps1,
|
||||
pubprn.vbs,c:\windows\system32\printing_admin_scripts\en-us\pubprn.vbs,
|
||||
pubprn.vbs,c:\windows\syswow64\printing_admin_scripts\en-us\pubprn.vbs,
|
||||
pester.bat,c:\program files\windowspowershell\modules\pester\3.4.0\bin\pester.bat,Used as part of the Powershell pester
|
||||
pester.bat,c:\program files\windowspowershell\modules\pester\*\bin\pester.bat,Used as part of the Powershell pester
|
||||
cl_loadassembly.ps1,c:\windows\diagnostics\system\audio\cl_loadassembly.ps1,PowerShell Diagnostic Script
|
||||
syncappvpublishingserver.vbs,c:\windows\system32\syncappvpublishingserver.vbs,Script used related to app-v and publishing server
|
||||
cl_invocation.ps1,c:\windows\diagnostics\system\aero\cl_invocation.ps1,Aero diagnostics script
|
||||
cl_invocation.ps1,c:\windows\diagnostics\system\audio\cl_invocation.ps1,Aero diagnostics script
|
||||
cl_invocation.ps1,c:\windows\diagnostics\system\windowsupdate\cl_invocation.ps1,Aero diagnostics script
|
||||
utilityfunctions.ps1,c:\windows\diagnostics\system\networking\utilityfunctions.ps1,PowerShell Diagnostic Script
|
||||
coregen.exe,c:\program files\microsoft silverlight\5.1.50918.0\coregen.exe,"Binary coregen.exe (Microsoft CoreCLR Native Image Generator) loads exported function GetCLRRuntimeHost from coreclr.dll or from .DLL in arbitrary path. Coregen is located within ""C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\"" or another version of Silverlight. Coregen is signed by Microsoft and bundled with Microsoft Silverlight."
|
||||
coregen.exe,c:\program files (x86)\microsoft silverlight\5.1.50918.0\coregen.exe,"Binary coregen.exe (Microsoft CoreCLR Native Image Generator) loads exported function GetCLRRuntimeHost from coreclr.dll or from .DLL in arbitrary path. Coregen is located within ""C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\"" or another version of Silverlight. Coregen is signed by Microsoft and bundled with Microsoft Silverlight."
|
||||
fsi.exe,c:\program files\dotnet\sdk\[sdk version]\fsharp\fsi.exe,64-bit FSharp (F#) Interpreter included with Visual Studio and DotNet Core SDK.
|
||||
fsi.exe,c:\program files (x86)\microsoft visual studio\2019\professional\common7\ide\commonextensions\microsoft\fsharp\fsi.exe,64-bit FSharp (F#) Interpreter included with Visual Studio and DotNet Core SDK.
|
||||
visualuiaverifynative.exe,c:\program files (x86)\windows kits\10\bin\[sdk version]\arm64\uiaverify\visualuiaverifynative.exe,A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
|
||||
visualuiaverifynative.exe,c:\program files (x86)\windows kits\10\bin\[sdk version]\x64\uiaverify\visualuiaverifynative.exe,A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
|
||||
visualuiaverifynative.exe,c:\program files (x86)\windows kits\10\bin\[sdk version]\uiaverify\visualuiaverifynative.exe,A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
|
||||
ntdsutil.exe,c:\windows\system32\ntdsutil.exe,Command line utility used to export Active Directory.
|
||||
sqltoolsps.exe,c:\program files (x86)\microsoft sql server\130\tools\binn\sqlps.exe,Tool included with Microsoft SQL that loads SQL Server cmdlts. A replacement for sqlps.exe. Successor to sqlps.exe in SQL Server 2016+.
|
||||
dump64.exe,c:\program files (x86)\microsoft visual studio\installer\feedback\dump64.exe,Memory dump tool that comes with Microsoft Visual Studio
|
||||
wsl.exe,c:\windows\system32\wsl.exe,Windows subsystem for Linux executable
|
||||
csi.exe,c:\program files (x86)\microsoft visual studio\2017\community\msbuild\15.0\bin\roslyn\csi.exe,Command line interface included with Visual Studio.
|
||||
csi.exe,c:\program files (x86)\microsoft web tools\packages\microsoft.net.compilers.x.y.z\tools\csi.exe,Command line interface included with Visual Studio.
|
||||
mftrace.exe,c:\program files (x86)\windows kits\10\bin\10.0.16299.0\x86,Trace log generation tool for Media Foundation Tools.
|
||||
mftrace.exe,c:\program files (x86)\windows kits\10\bin\10.0.16299.0\x64,Trace log generation tool for Media Foundation Tools.
|
||||
mftrace.exe,c:\program files (x86)\windows kits\10\bin\x86,Trace log generation tool for Media Foundation Tools.
|
||||
mftrace.exe,c:\program files (x86)\windows kits\10\bin\x64,Trace log generation tool for Media Foundation Tools.
|
||||
adplus.exe,c:\program files (x86)\windows kits\10\debuggers\x64\adplus.exe,Debugging tool included with Windows Debugging Tools
|
||||
adplus.exe,c:\program files (x86)\windows kits\10\debuggers\x86\adplus.exe,Debugging tool included with Windows Debugging Tools
|
||||
excel.exe,c:\program files (x86)\microsoft office 16\clientx86\root\office16\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office 16\clientx64\root\office16\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office\office16\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office\office16\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office 15\clientx86\root\office15\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office 15\clientx64\root\office15\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office\office15\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office\office15\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office 14\clientx86\root\office14\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office 14\clientx64\root\office14\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office\office14\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office\office14\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files (x86)\microsoft office\office12\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office\office12\excel.exe,Microsoft Office binary
|
||||
excel.exe,c:\program files\microsoft office\office12\excel.exe,Microsoft Office binary
|
||||
dotnet.exe,c:\program files\dotnet\dotnet.exe,dotnet.exe comes with .NET Framework
|
||||
sqlps.exe,c:\program files (x86)\microsoft sql server\100\tools\binn\sqlps.exe,"Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons."
|
||||
sqlps.exe,c:\program files (x86)\microsoft sql server\110\tools\binn\sqlps.exe,"Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons."
|
||||
sqlps.exe,c:\program files (x86)\microsoft sql server\120\tools\binn\sqlps.exe,"Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons."
|
||||
sqlps.exe,c:\program files (x86)\microsoft sql server\130\tools\binn\sqlps.exe,"Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons."
|
||||
sqlps.exe,c:\program files (x86)\microsoft sql server\150\tools\binn\sqlps.exe,"Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons."
|
||||
acccheckconsole.exe,c:\program files (x86)\windows kits\10\bin\10.0.22000.0\x86\accchecker\acccheckconsole.exe,Verifies UI accessibility requirements
|
||||
acccheckconsole.exe,c:\program files (x86)\windows kits\10\bin\10.0.22000.0\x64\accchecker\acccheckconsole.exe,Verifies UI accessibility requirements
|
||||
acccheckconsole.exe,c:\program files (x86)\windows kits\10\bin\10.0.22000.0\arm\accchecker\acccheckconsole.exe,Verifies UI accessibility requirements
|
||||
acccheckconsole.exe,c:\program files (x86)\windows kits\10\bin\10.0.22000.0\arm64\accchecker\acccheckconsole.exe,Verifies UI accessibility requirements
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office 16\clientx86\root\office16\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office 16\clientx64\root\office16\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office\office16\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office\office16\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office 15\clientx86\root\office15\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office 15\clientx64\root\office15\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office\office15\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office\office15\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office 14\clientx86\root\office14\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office 14\clientx64\root\office14\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office\office14\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office\office14\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files (x86)\microsoft office\office12\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office\office12\powerpnt.exe,Microsoft Office binary.
|
||||
powerpnt.exe,c:\program files\microsoft office\office12\powerpnt.exe,Microsoft Office binary.
|
||||
sqldumper.exe,c:\program files\microsoft sql server\90\shared\sqldumper.exe,Debugging utility included with Microsoft SQL.
|
||||
sqldumper.exe,c:\program files (x86)\microsoft office\root\vfs\programfilesx86\microsoft analysis\as oledb\140\sqldumper.exe,Debugging utility included with Microsoft SQL.
|
||||
remote.exe,c:\program files (x86)\windows kits\10\debuggers\x64\remote.exe,Debugging tool included with Windows Debugging Tools
|
||||
remote.exe,c:\program files (x86)\windows kits\10\debuggers\x86\remote.exe,Debugging tool included with Windows Debugging Tools
|
||||
appvlp.exe,c:\program files\microsoft office\root\client\appvlp.exe,Application Virtualization Utility Included with Microsoft Office 2016
|
||||
appvlp.exe,c:\program files (x86)\microsoft office\root\client\appvlp.exe,Application Virtualization Utility Included with Microsoft Office 2016
|
||||
agentexecutor.exe,c:\program files (x86)\microsoft intune management extension,Intune Management Extension included on Intune Managed Devices
|
||||
dxcap.exe,c:\windows\system32\dxcap.exe,DirectX diagnostics/debugger included with Visual Studio.
|
||||
dxcap.exe,c:\windows\syswow64\dxcap.exe,DirectX diagnostics/debugger included with Visual Studio.
|
||||
cdb.exe,c:\program files (x86)\windows kits\10\debuggers\x64\cdb.exe,Debugging tool included with Windows Debugging Tools.
|
||||
cdb.exe,c:\program files (x86)\windows kits\10\debuggers\x86\cdb.exe,Debugging tool included with Windows Debugging Tools.
|
||||
defaultpack.exe,c:\program files (x86)\microsoft\defaultpack\,This binary can be downloaded along side multiple software downloads on the microsoft website. It gets downloaded when the user forgets to uncheck the option to set Bing as the default search provider.
|
||||
devtoolslauncher.exe,c:\windows\system32\devtoolslauncher.exe,Binary will execute specified binary. Part of VS/VScode installation.
|
||||
vsiisexelauncher.exe,c:\program files (x86)\microsoft visual studio\2019\community\common7\ide\extensions\microsoft\web tools\projectsystem\vsiisexelauncher.exe,Binary will execute specified binary. Part of VS/VScode installation.
|
||||
winword.exe,c:\program files\microsoft office\root\office16\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office 16\clientx86\root\office16\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office 16\clientx64\root\office16\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office\office16\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office\office16\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office 15\clientx86\root\office15\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office 15\clientx64\root\office15\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office\office15\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office\office15\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office 14\clientx86\root\office14\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office 14\clientx64\root\office14\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office\office14\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office\office14\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files (x86)\microsoft office\office12\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office\office12\winword.exe,Microsoft Office binary
|
||||
winword.exe,c:\program files\microsoft office\office12\winword.exe,Microsoft Office binary
|
||||
fsianycpu.exe,c:\program files (x86)\microsoft visual studio\2019\professional\common7\ide\commonextensions\microsoft\fsharp\fsianycpu.exe,32/64-bit FSharp (F#) Interpreter included with Visual Studio.
|
||||
vsjitdebugger.exe,c:\windows\system32\vsjitdebugger.exe,Just-In-Time (JIT) debugger included with Visual Studio
|
||||
wfc.exe,c:\program files (x86)\microsoft sdks\windows\v10.0a\bin\netfx 4.8 tools\wfc.exe,The Workflow Command-line Compiler tool is included with the Windows Software Development Kit (SDK).
|
||||
msdeploy.exe,c:\program files (x86)\iis\microsoft web deploy v3\msdeploy.exe,Microsoft tool used to deploy Web Applications.
|
||||
|
||||
|
Reference in New Issue
Block a user