splunk-security_content/lookups/lolbas_file_path.csv

1	lolbas_file_name	lolbas_file_path	description
2	eventvwr.exe	c:\windows\system32\*	Displays Windows Event Logs in a GUI window.
3	eventvwr.exe	c:\windows\syswow64\*	Displays Windows Event Logs in a GUI window.
4	rasautou.exe	c:\windows\system32\*	Windows Remote Access Dialer
5	regedit.exe	c:\windows\system32\*	Used by Windows to manipulate registry
6	regedit.exe	c:\windows\syswow64\*	Used by Windows to manipulate registry
7	regsvr32.exe	c:\windows\system32\*	Used by Windows to register dlls
8	regsvr32.exe	c:\windows\syswow64\*	Used by Windows to register dlls
9	control.exe	c:\windows\system32\*	Binary used to launch controlpanel items in Windows
10	control.exe	c:\windows\syswow64\*	Binary used to launch controlpanel items in Windows
11	configsecuritypolicy.exe	c:\programdata\microsoft\windows defender\platform\4.18.2008.9-0\*	Binary part of Windows Defender. Used to manage settings in Windows Defender. you can configure different pilot collections for each of the co-management workloads. Being able to use different pilot collections allows you to take a more granular approach when shifting workloads.
12	scriptrunner.exe	c:\windows\system32\*	Execute binary through proxy binary to evade defensive counter measures
13	scriptrunner.exe	c:\windows\syswow64\*	Execute binary through proxy binary to evade defensive counter measures
14	offlinescannershell.exe	c:\program files\windows defender\offline\*	Windows Defender Offline Shell
15	atbroker.exe	c:\windows\system32\*	Helper binary for Assistive Technology (AT)
16	atbroker.exe	c:\windows\syswow64\*	Helper binary for Assistive Technology (AT)
17	mmc.exe	c:\windows\system32\*	Load snap-ins to locally and remotely manage Windows systems
18	mmc.exe	c:\windows\syswow64\*	Load snap-ins to locally and remotely manage Windows systems
19	mavinject.exe	c:\windows\system32\*	Used by App-v in Windows
20	mavinject.exe	c:\windows\syswow64\*	Used by App-v in Windows
21	ftp.exe	c:\windows\system32\*	A binary designed for connecting to FTP servers
22	ftp.exe	c:\windows\syswow64\*	A binary designed for connecting to FTP servers
23	ttdinject.exe	c:\windows\system32\*	Used by Windows 1809 and newer to Debug Time Travel (Underlying call of tttracer.exe)
24	ttdinject.exe	c:\windows\syswow64\*	Used by Windows 1809 and newer to Debug Time Travel (Underlying call of tttracer.exe)
25	certoc.exe	c:\windows\system32\*	Used for installing certificates
26	certoc.exe	c:\windows\syswow64\*	Used for installing certificates
27	at.exe	c:\windows\system32\*	Schedule periodic tasks
28	at.exe	c:\windows\syswow64\*	Schedule periodic tasks
29	netsh.exe	c:\windows\system32\*	Netsh is a Windows tool used to manipulate network interface settings.
30	netsh.exe	c:\windows\syswow64\*	Netsh is a Windows tool used to manipulate network interface settings.
31	pnputil.exe	c:\windows\system32\*	Used for installing drivers
32	ie4uinit.exe	c:\windows\system32\*	Executes commands from a specially prepared ie4uinit.inf file.
33	ie4uinit.exe	c:\windows\syswow64\*	Executes commands from a specially prepared ie4uinit.inf file.
34	infdefaultinstall.exe	c:\windows\system32\*	Binary used to perform installation based on content inside inf files
35	infdefaultinstall.exe	c:\windows\syswow64\*	Binary used to perform installation based on content inside inf files
36	forfiles.exe	c:\windows\system32\*	Selects and executes a command on a file or set of files. This command is useful for batch processing.
37	forfiles.exe	c:\windows\syswow64\*	Selects and executes a command on a file or set of files. This command is useful for batch processing.
38	register-cimprovider.exe	c:\windows\system32\*	Used to register new wmi providers
39	register-cimprovider.exe	c:\windows\syswow64\*	Used to register new wmi providers
40	tttracer.exe	c:\windows\system32\*	Used by Windows 1809 and newer to Debug Time Travel
41	tttracer.exe	c:\windows\syswow64\*	Used by Windows 1809 and newer to Debug Time Travel
42	xwizard.exe	c:\windows\system32\*	Execute custom class that has been added to the registry or download a file with Xwizard.exe
43	xwizard.exe	c:\windows\syswow64\*	Execute custom class that has been added to the registry or download a file with Xwizard.exe
44	pcalua.exe	c:\windows\system32\*	Program Compatibility Assistant
45	print.exe	c:\windows\system32\*	Used by Windows to send files to the printer
46	print.exe	c:\windows\syswow64\*	Used by Windows to send files to the printer
47	runscripthelper.exe	c:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_10.0.16299.15_none_c2df1bba78111118\*	Execute target PowerShell script
48	runscripthelper.exe	c:\windows\winsxs\amd64_microsoft-windows-u..ed-telemetry-client_31bf3856ad364e35_10.0.16299.192_none_ad4699b571e00c4a\*	Execute target PowerShell script
49	regasm.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	Part of .NET
50	regasm.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	Part of .NET
51	regasm.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	Part of .NET
52	regasm.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	Part of .NET
53	cmd.exe	c:\windows\system32\*	The command-line interpreter in Windows
54	cmd.exe	c:\windows\syswow64\*	The command-line interpreter in Windows
55	msbuild.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	Used to compile and execute code
56	msbuild.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	Used to compile and execute code
57	msbuild.exe	c:\windows\microsoft.net\framework\v3.5\*	Used to compile and execute code
58	msbuild.exe	c:\windows\microsoft.net\framework64\v3.5\*	Used to compile and execute code
59	msbuild.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	Used to compile and execute code
60	msbuild.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	Used to compile and execute code
61	msbuild.exe	c:\program files (x86)\msbuild\14.0\bin\*	Used to compile and execute code
62	certutil.exe	c:\windows\system32\*	Windows binary used for handling certificates
63	certutil.exe	c:\windows\syswow64\*	Windows binary used for handling certificates
64	vbc.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	Binary file used for compile vbs code
65	vbc.exe	c:\windows\microsoft.net\framework64\v3.5\*	Binary file used for compile vbs code
66	psr.exe	c:\windows\system32\*	Windows Problem Steps Recorder, used to record screen and clicks.
67	psr.exe	c:\windows\syswow64\*	Windows Problem Steps Recorder, used to record screen and clicks.
68	extexport.exe	c:\program files\internet explorer\*	Load a DLL located in the c:\test folder with a specific name.
69	extexport.exe	c:\program files (x86)\internet explorer\*	Load a DLL located in the c:\test folder with a specific name.
70	rpcping.exe	c:\windows\system32\*	Used to verify rpc connection
71	rpcping.exe	c:\windows\syswow64\*	Used to verify rpc connection
72	msdt.exe	c:\windows\system32\*	Microsoft diagnostics tool
73	msdt.exe	c:\windows\syswow64\*	Microsoft diagnostics tool
74	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\64kb6472.inf_amd64_3daef03bbe98572b\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
75	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_0e9c57ae3396e055\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
76	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_209bd95d56b1ac2d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
77	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_3fa2a843f8b7f16d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
78	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_85c860f05274baa0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
79	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_f7412e3e3404de80\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
80	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_comp.inf_amd64_feb9f1cf05b0de58\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
81	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_component.inf_amd64_0219cc1c7085a93f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
82	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_component.inf_amd64_df4f60b1cae9b14a\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
83	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_16eb18b0e2526e57\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
84	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_1c77f1231c19bc72\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
85	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_31c60cc38cfcca28\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
86	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_82f69cea8b2d928f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
87	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dc_comp.inf_amd64_b4d94f3e41ceb839\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
88	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_0606619cc97463de\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
89	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_0e95edab338ad669\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
90	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_22aac1442d387216\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
91	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_2461d914696db722\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
92	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_29d727269a34edf5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
93	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_2caf76dbce56546d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
94	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_353320edb98da643\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
95	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_4ea0ed0af1507894\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
96	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_56a48f4f1c2da7a7\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
97	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_64f23fdadb76a511\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
98	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_668dd0c6d3f9fa0e\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
99	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6be8e5b7f731a6e5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
100	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6dad7e4e9a8fa889\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
101	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_6df442103a1937a4\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
102	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_767e7683f9ad126c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
103	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_8644298f665a12c4\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
104	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_868acf86149aef5d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
105	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_92cf9d9d84f1d3db\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
106	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_93239c65f222d453\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
107	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_9de8154b682af864\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
108	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_a7428663aca90897\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
109	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_ad7cb5e55a410add\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
110	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_afbf41cf8ab202d7\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
111	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_d193c96475eaa96e\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
112	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_db953c52208ada71\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
113	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_e7523682cc7528cc\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
114	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_e9f341319ca84274\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
115	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_f3a64c75ee4defb7\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
116	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_f51939e52b944f4b\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
117	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_4938423c9b9639d7\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
118	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_c8e108d4a62c59d5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
119	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\cui_dch_comp.inf_amd64_deecec7d232ced2b\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
120	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_01ee1299f4982efe\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
121	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_02edfc87000937e4\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
122	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0541b698fc6e40b0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
123	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0707757077710fff\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
124	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0b3e3ed3ace9602a\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
125	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_0cff362f9dff4228\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
126	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_16ed7d82b93e4f68\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
127	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1a33d2f73651d989\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
128	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1aca2a92a37fce23\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
129	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1af2dd3e4df5fd61\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
130	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_1d571527c7083952\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
131	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_23f7302c2b9ee813\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
132	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_24de78387e6208e4\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
133	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_250db833a1cd577e\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
134	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_25e7c5a58c052bc5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
135	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_28d80681d3523b1c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
136	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_2dda3b1147a3a572\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
137	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_31ba00ea6900d67d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
138	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_329877a66f240808\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
139	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_42af9f4718aa1395\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
140	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_4645af5c659ae51a\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
141	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_48c2e68e54c92258\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
142	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_48e7e903a369eae2\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
143	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_491d20003583dabe\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
144	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_4b34c18659561116\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
145	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_51ce968bf19942c2\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
146	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_555cfc07a674ecdd\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
147	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_561bd21d54545ed3\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
148	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_579a75f602cc2dce\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
149	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_57f66a4f0a97f1a3\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
150	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_587befb80671fb38\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
151	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_62f096fe77e085c0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
152	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6ae0ddbb4a38e23c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
153	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6bb02522ea3fdb0d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
154	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_6d34ac0763025a06\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
155	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_712b6a0adbaabc0a\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
156	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_78b09d9681a2400f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
157	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_842874489af34daa\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
158	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_88084eb1fe7cebc3\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
159	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_89033455cb08186f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
160	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_8a9535cd18c90bc3\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
161	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_8c1fc948b5a01c52\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
162	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_9088b61921a6ff9f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
163	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_90f68cd0dc48b625\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
164	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_95cb371d046d4b4c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
165	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_a58de0cf5f3e9dca\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
166	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_abe9d37302f8b1ae\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
167	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_acb3edda7b82982f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
168	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_aebc5a8535dd3184\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
169	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_b5d4c82c67b39358\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
170	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_b846bbf1e81ea3cf\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
171	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_babb2e8b8072ff3b\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
172	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_bc75cebf5edbbc50\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
173	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_be91293cf20d4372\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
174	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c11f4d5f0bc4c592\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
175	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c4e5173126d31cf0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
176	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c4f600ffe34acc7b\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
177	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c8634ed19e331cda\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
178	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_c9081e50bcffa972\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
179	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_ceddadac8a2b489e\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
180	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d4406f0ad6ec2581\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
181	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d5877a2e0e6374b6\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
182	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_d8ca5f86add535ef\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
183	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_e8abe176c7b553b5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
184	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_eabb3ac2c517211f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
185	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_f8d8be8fea71e1a0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
186	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_fe5e116bb07c0629\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
187	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64.inf_amd64_fe73d2ebaa05fb95\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
188	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\igdlh64_kbl_kit127397.inf_amd64_e1da8ee9e92ccadb\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
189	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\k127153.inf_amd64_364f43f2a27f7bd7\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
190	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\k127153.inf_amd64_3f3936d8dec668b8\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
191	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\k127793.inf_amd64_3ab7883eddccbf0f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
192	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki129523.inf_amd64_32947eecf8f3e231\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
193	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki126950.inf_amd64_fa7f56314967630d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
194	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki126951.inf_amd64_94804e3918169543\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
195	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki126973.inf_amd64_06dde156632145e3\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
196	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki126974.inf_amd64_9168fc04b8275db9\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
197	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127005.inf_amd64_753576c4406c1193\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
198	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127018.inf_amd64_0f67ff47e9e30716\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
199	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127021.inf_amd64_0d68af55c12c7c17\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
200	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127171.inf_amd64_368f8c7337214025\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
201	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127176.inf_amd64_86c658cabfb17c9c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
202	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127390.inf_amd64_e1ccb879ece8f084\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
203	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127678.inf_amd64_8427d3a09f47dfc1\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
204	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127727.inf_amd64_cf8e31692f82192e\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
205	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127807.inf_amd64_fc915899816dbc5d\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
206	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki127850.inf_amd64_6ad8d99023b59fd5\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
207	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki128602.inf_amd64_6ff790822fd674ab\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
208	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki128916.inf_amd64_3509e1eb83b83cfb\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
209	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki129407.inf_amd64_f26f36ac54ce3076\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
210	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki129633.inf_amd64_d9b8af875f664a8c\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
211	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki129866.inf_amd64_e7cdca9882c16f55\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
212	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130274.inf_amd64_bafd2440fa1ffdd6\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
213	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130350.inf_amd64_696b7c6764071b63\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
214	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130409.inf_amd64_0d8d61270dfb4560\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
215	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130471.inf_amd64_26ad6921447aa568\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
216	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130624.inf_amd64_d85487143eec5e1a\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
217	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130825.inf_amd64_ee3ba427c553f15f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
218	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki130871.inf_amd64_382f7c369d4bf777\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
219	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki131064.inf_amd64_5d13f27a9a9843fa\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
220	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki131176.inf_amd64_fb4fe914575fdd15\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
221	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki131191.inf_amd64_d668106cb6f2eae0\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
222	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki131622.inf_amd64_0058d71ace34db73\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
223	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132032.inf_amd64_f29660d80998e019\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
224	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132337.inf_amd64_223d6831ffa64ab1\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
225	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132535.inf_amd64_7875dff189ab2fa2\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
226	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132544.inf_amd64_b8c1f31373153db4\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
227	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132574.inf_amd64_54c9b905b975ee55\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
228	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\ki132869.inf_amd64_052eb72d070df60f\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
229	gfxdownloadwrapper.exe	c:\windows\system32\driverstore\filerepository\kit126731.inf_amd64_1905c9d5f38631d9\*	Remote file download used by the Intel Graphics Control Panel, receives as first parameter a URL and a destination file path.
230	dnscmd.exe	c:\windows\system32\*	A command-line interface for managing DNS servers
231	dnscmd.exe	c:\windows\syswow64\*	A command-line interface for managing DNS servers
232	wab.exe	c:\program files\windows mail\*	Windows address book manager
233	wab.exe	c:\program files (x86)\windows mail\*	Windows address book manager
234	msconfig.exe	c:\windows\system32\*	MSConfig is a troubleshooting tool which is used to temporarily disable or re-enable software, device drivers or Windows services that run during startup process to help the user determine the cause of a problem with Windows
235	wscript.exe	c:\windows\system32\*	Used by Windows to execute scripts
236	wscript.exe	c:\windows\syswow64\*	Used by Windows to execute scripts
237	makecab.exe	c:\windows\system32\*	Binary to package existing files into a cabinet (.cab) file
238	makecab.exe	c:\windows\syswow64\*	Binary to package existing files into a cabinet (.cab) file
239	datasvcutil.exe	c:\windows\microsoft.net\framework64\v3.5\*	DataSvcUtil.exe is a command-line tool provided by WCF Data Services that consumes an Open Data Protocol (OData) feed and generates the client data service classes that are needed to access a data service from a .NET Framework client application.
240	cmdl32.exe	c:\windows\system32\*	Microsoft Connection Manager Auto-Download
241	cmdl32.exe	c:\windows\syswow64\*	Microsoft Connection Manager Auto-Download
242	mshta.exe	c:\windows\system32\*	Used by Windows to execute html applications. (.hta)
243	mshta.exe	c:\windows\syswow64\*	Used by Windows to execute html applications. (.hta)
244	cmdkey.exe	c:\windows\system32\*	creates, lists, and deletes stored user names and passwords or credentials.
245	cmdkey.exe	c:\windows\syswow64\*	creates, lists, and deletes stored user names and passwords or credentials.
246	ilasm.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	used for compile c# code into dll or exe.
247	ilasm.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	used for compile c# code into dll or exe.
248	rdrleakdiag.exe	c:\windows\system32\*	Microsoft Windows resource leak diagnostic tool
249	rdrleakdiag.exe	c:\windows\syswow64\*	Microsoft Windows resource leak diagnostic tool
250	mpcmdrun.exe	c:\programdata\microsoft\windows defender\platform\4.18.2008.4-0\*	Binary part of Windows Defender. Used to manage settings in Windows Defender
251	mpcmdrun.exe	c:\programdata\microsoft\windows defender\platform\4.18.2008.7-0\*	Binary part of Windows Defender. Used to manage settings in Windows Defender
252	mpcmdrun.exe	c:\programdata\microsoft\windows defender\platform\4.18.2008.9-0\*	Binary part of Windows Defender. Used to manage settings in Windows Defender
253	jsc.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	Binary file used by .NET to compile javascript code to .exe or .dll format
254	jsc.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	Binary file used by .NET to compile javascript code to .exe or .dll format
255	jsc.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	Binary file used by .NET to compile javascript code to .exe or .dll format
256	jsc.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	Binary file used by .NET to compile javascript code to .exe or .dll format
257	cmstp.exe	c:\windows\system32\*	Installs or removes a Connection Manager service profile.
258	cmstp.exe	c:\windows\syswow64\*	Installs or removes a Connection Manager service profile.
259	stordiag.exe	c:\windows\system32\*	Storage diagnostic tool
260	stordiag.exe	c:\windows\syswow64\*	Storage diagnostic tool
261	odbcconf.exe	c:\windows\system32\*	Used in Windows for managing ODBC connections
262	odbcconf.exe	c:\windows\syswow64\*	Used in Windows for managing ODBC connections
263	wlrmdr.exe	c:\windows\system32\*	Windows Logon Reminder executable
264	printbrm.exe	c:\windows\system32\spool\tools\*	Printer Migration Command-Line Tool
265	dfsvc.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	ClickOnce engine in Windows used by .NET
266	dfsvc.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	ClickOnce engine in Windows used by .NET
267	dfsvc.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	ClickOnce engine in Windows used by .NET
268	dfsvc.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	ClickOnce engine in Windows used by .NET
269	extrac32.exe	c:\windows\system32\*	Extract to ADS, copy or overwrite a file with Extrac32.exe
270	extrac32.exe	c:\windows\syswow64\*	Extract to ADS, copy or overwrite a file with Extrac32.exe
271	rundll32.exe	c:\windows\system32\*	Used by Windows to execute dll files
272	rundll32.exe	c:\windows\syswow64\*	Used by Windows to execute dll files
273	runonce.exe	c:\windows\system32\*	Executes a Run Once Task that has been configured in the registry
274	runonce.exe	c:\windows\syswow64\*	Executes a Run Once Task that has been configured in the registry
275	explorer.exe	c:\windows\*	Binary used for managing files and system components within Windows
276	explorer.exe	c:\windows\syswow64\*	Binary used for managing files and system components within Windows
277	wuauclt.exe	c:\windows\system32\*	Windows Update Client
278	wsreset.exe	c:\windows\system32\*	Used to reset Windows Store settings according to its manifest file
279	finger.exe	c:\windows\system32\*	Displays information about a user or users on a specified remote computer that is running the Finger service or daemon
280	finger.exe	c:\windows\syswow64\*	Displays information about a user or users on a specified remote computer that is running the Finger service or daemon
281	regini.exe	c:\windows\system32\*	Used to manipulate the registry
282	regini.exe	c:\windows\syswow64\*	Used to manipulate the registry
283	reg.exe	c:\windows\system32\*	Used to manipulate the registry
284	reg.exe	c:\windows\syswow64\*	Used to manipulate the registry
285	syncappvpublishingserver.exe	c:\windows\system32\*	Used by App-v to get App-v server lists
286	syncappvpublishingserver.exe	c:\windows\syswow64\*	Used by App-v to get App-v server lists
287	bitsadmin.exe	c:\windows\system32\*	Used for managing background intelligent transfer
288	bitsadmin.exe	c:\windows\syswow64\*	Used for managing background intelligent transfer
289	msiexec.exe	c:\windows\system32\*	Used by Windows to execute msi files
290	msiexec.exe	c:\windows\syswow64\*	Used by Windows to execute msi files
291	regsvcs.exe	c:\windows\system32\*	Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies
292	regsvcs.exe	c:\windows\syswow64\*	Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies
293	gpscript.exe	c:\windows\system32\*	Used by group policy to process scripts
294	gpscript.exe	c:\windows\syswow64\*	Used by group policy to process scripts
295	diskshadow.exe	c:\windows\system32\*	Diskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS).
296	diskshadow.exe	c:\windows\syswow64\*	Diskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS).
297	ieexec.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	The IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL.
298	ieexec.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	The IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL.
299	diantz.exe	c:\windows\system32\*	Binary that package existing files into a cabinet (.cab) file
300	diantz.exe	c:\windows\syswow64\*	Binary that package existing files into a cabinet (.cab) file
301	desktopimgdownldr.exe	c:\windows\system32\*	Windows binary used to configure lockscreen/desktop image
302	appinstaller.exe	c:\program files\windowsapps\microsoft.desktopappinstaller_1.11.2521.0_x64__8wekyb3d8bbwe\*	Tool used for installation of AppX/MSIX applications on Windows 10
303	sc.exe	c:\windows\system32\*	Used by Windows to manage services
304	sc.exe	c:\windows\syswow64\*	Used by Windows to manage services
305	replace.exe	c:\windows\system32\*	Used to replace file with another file
306	replace.exe	c:\windows\syswow64\*	Used to replace file with another file
307	schtasks.exe	c:\windows\system32\*	Schedule periodic tasks
308	schtasks.exe	c:\windows\syswow64\*	Schedule periodic tasks
309	microsoft.workflow.compiler.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	A utility included with .NET that is capable of compiling and executing C# or VB.net code.
310	expand.exe	c:\windows\system32\*	Binary that expands one or more compressed files
311	expand.exe	c:\windows\syswow64\*	Binary that expands one or more compressed files
312	conhost.exe	c:\windows\system32\*	Console Window host
313	bash.exe	c:\windows\system32\*	File used by Windows subsystem for Linux
314	bash.exe	c:\windows\syswow64\*	File used by Windows subsystem for Linux
315	pcwrun.exe	c:\windows\system32\*	Program Compatibility Wizard
316	fltmc.exe	c:\windows\system32\*	Filter Manager Control Program used by Windows
317	wmic.exe	c:\windows\system32\wbem\*	The WMI command-line (WMIC) utility provides a command-line interface for WMI
318	wmic.exe	c:\windows\syswow64\wbem\*	The WMI command-line (WMIC) utility provides a command-line interface for WMI
319	workfolders.exe	c:\windows\system32\*	Work Folders
320	settingsynchost.exe	c:\windows\system32\*	Host Process for Setting Synchronization
321	settingsynchost.exe	c:\windows\syswow64\*	Host Process for Setting Synchronization
322	pktmon.exe	c:\windows\system32\*	Capture Network Packets on the windows 10 with October 2018 Update or later.
323	pktmon.exe	c:\windows\syswow64\*	Capture Network Packets on the windows 10 with October 2018 Update or later.
324	aspnet_compiler.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	ASP.NET Compilation Tool
325	aspnet_compiler.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	ASP.NET Compilation Tool
326	cscript.exe	c:\windows\system32\*	Binary used to execute scripts in Windows
327	cscript.exe	c:\windows\syswow64\*	Binary used to execute scripts in Windows
328	installutil.exe	c:\windows\microsoft.net\framework\v2.0.50727\*	The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
329	installutil.exe	c:\windows\microsoft.net\framework64\v2.0.50727\*	The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
330	installutil.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
331	installutil.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies
332	esentutl.exe	c:\windows\system32\*	Binary for working with Microsoft Joint Engine Technology (JET) database
333	esentutl.exe	c:\windows\syswow64\*	Binary for working with Microsoft Joint Engine Technology (JET) database
334	hh.exe	c:\windows\*	Binary used for processing chm files in Windows
335	hh.exe	c:\windows\syswow64\*	Binary used for processing chm files in Windows
336	findstr.exe	c:\windows\system32\*	Write to ADS, discover, or download files with Findstr.exe
337	findstr.exe	c:\windows\syswow64\*	Write to ADS, discover, or download files with Findstr.exe
338	verclsid.exe	c:\windows\system32\*	Used to verify a COM object before it is instantiated by Windows Explorer
339	verclsid.exe	c:\windows\syswow64\*	Used to verify a COM object before it is instantiated by Windows Explorer
340	certreq.exe	c:\windows\system32\*	Used for requesting and managing certificates
341	certreq.exe	c:\windows\syswow64\*	Used for requesting and managing certificates
342	csc.exe	c:\windows\microsoft.net\framework\v4.0.30319\*	Binary file used by .NET to compile C# code
343	csc.exe	c:\windows\microsoft.net\framework64\v4.0.30319\*	Binary file used by .NET to compile C# code
344	imewdbld.exe	c:\windows\system32\ime\shared\*	Microsoft IME Open Extended Dictionary Module
345	presentationhost.exe	c:\windows\system32\*	File is used for executing Browser applications
346	presentationhost.exe	c:\windows\syswow64\*	File is used for executing Browser applications
347	shell32.dll	c:\windows\system32\*	Windows Shell Common Dll
348	shell32.dll	c:\windows\syswow64\*	Windows Shell Common Dll
349	zipfldr.dll	c:\windows\system32\*	Compressed Folder library
350	zipfldr.dll	c:\windows\syswow64\*	Compressed Folder library
351	desk.cpl	c:\windows\system32\*	Desktop Settings Control Panel
352	desk.cpl	c:\windows\syswow64\*	Desktop Settings Control Panel
353	comsvcs.dll	c:\windows\system32\*	COM+ Services
354	setupapi.dll	c:\windows\system32\*	Windows Setup Application Programming Interface
355	setupapi.dll	c:\windows\syswow64\*	Windows Setup Application Programming Interface
356	mshtml.dll	c:\windows\system32\*	Microsoft HTML Viewer
357	mshtml.dll	c:\windows\syswow64\*	Microsoft HTML Viewer
358	advpack.dll	c:\windows\system32\*	Utility for installing software and drivers with rundll32.exe
359	advpack.dll	c:\windows\syswow64\*	Utility for installing software and drivers with rundll32.exe
360	pcwutl.dll	c:\windows\system32\*	Microsoft HTML Viewer
361	pcwutl.dll	c:\windows\syswow64\*	Microsoft HTML Viewer
362	shdocvw.dll	c:\windows\system32\*	Shell Doc Object and Control Library.
363	shdocvw.dll	c:\windows\syswow64\*	Shell Doc Object and Control Library.
364	ieframe.dll	c:\windows\system32\*	Internet Browser DLL for translating HTML code.
365	ieframe.dll	c:\windows\syswow64\*	Internet Browser DLL for translating HTML code.
366	dfshim.dll	c:\windows\microsoft.net\framework\v2.0.50727\*	ClickOnce engine in Windows used by .NET
367	dfshim.dll	c:\windows\microsoft.net\framework64\v2.0.50727\*	ClickOnce engine in Windows used by .NET
368	dfshim.dll	c:\windows\microsoft.net\framework\v4.0.30319\*	ClickOnce engine in Windows used by .NET
369	dfshim.dll	c:\windows\microsoft.net\framework64\v4.0.30319\*	ClickOnce engine in Windows used by .NET
370	url.dll	c:\windows\system32\*	Internet Shortcut Shell Extension DLL.
371	url.dll	c:\windows\syswow64\*	Internet Shortcut Shell Extension DLL.
372	ieadvpack.dll	c:\windows\system32\*	INF installer for Internet Explorer. Has much of the same functionality as advpack.dll.
373	ieadvpack.dll	c:\windows\syswow64\*	INF installer for Internet Explorer. Has much of the same functionality as advpack.dll.
374	syssetup.dll	c:\windows\system32\*	Windows NT System Setup
375	syssetup.dll	c:\windows\syswow64\*	Windows NT System Setup
376	winrm.vbs	c:\windows\system32\*	Script used for manage Windows RM settings
377	winrm.vbs	c:\windows\syswow64\*	Script used for manage Windows RM settings
378	manage-bde.wsf	c:\windows\system32\*	Script for managing BitLocker
379	cl_mutexverifiers.ps1	c:\windows\diagnostics\system\windowsupdate\*	Proxy execution with CL_Mutexverifiers.ps1
380	cl_mutexverifiers.ps1	c:\windows\diagnostics\system\audio\*	Proxy execution with CL_Mutexverifiers.ps1
381	cl_mutexverifiers.ps1	c:\windows\diagnostics\system\video\*	Proxy execution with CL_Mutexverifiers.ps1
382	cl_mutexverifiers.ps1	c:\windows\diagnostics\system\speech\*	Proxy execution with CL_Mutexverifiers.ps1
383	pubprn.vbs	c:\windows\system32\printing_admin_scripts\en-us\*	Proxy execution with Pubprn.vbs
384	pubprn.vbs	c:\windows\syswow64\printing_admin_scripts\en-us\*	Proxy execution with Pubprn.vbs
385	pester.bat	c:\program files\windowspowershell\modules\pester\3.4.0\bin\*	Used as part of the Powershell pester
386	pester.bat	c:\program files\windowspowershell\modules\pester\*\bin\*	Used as part of the Powershell pester
387	cl_loadassembly.ps1	c:\windows\diagnostics\system\audio\*	PowerShell Diagnostic Script
388	syncappvpublishingserver.vbs	c:\windows\system32\*	Script used related to app-v and publishing server
389	cl_invocation.ps1	c:\windows\diagnostics\system\aero\*	Aero diagnostics script
390	cl_invocation.ps1	c:\windows\diagnostics\system\audio\*	Aero diagnostics script
391	cl_invocation.ps1	c:\windows\diagnostics\system\windowsupdate\*	Aero diagnostics script
392	utilityfunctions.ps1	c:\windows\diagnostics\system\networking\*	PowerShell Diagnostic Script
393	coregen.exe	c:\program files\microsoft silverlight\5.1.50918.0\*	Binary coregen.exe (Microsoft CoreCLR Native Image Generator) loads exported function GetCLRRuntimeHost from coreclr.dll or from .DLL in arbitrary path. Coregen is located within "C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\" or another version of Silverlight. Coregen is signed by Microsoft and bundled with Microsoft Silverlight.
394	coregen.exe	c:\program files (x86)\microsoft silverlight\5.1.50918.0\*	Binary coregen.exe (Microsoft CoreCLR Native Image Generator) loads exported function GetCLRRuntimeHost from coreclr.dll or from .DLL in arbitrary path. Coregen is located within "C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\" or another version of Silverlight. Coregen is signed by Microsoft and bundled with Microsoft Silverlight.
395	fsi.exe	c:\program files\dotnet\sdk\[sdk version]\fsharp\*	64-bit FSharp (F#) Interpreter included with Visual Studio and DotNet Core SDK.
396	fsi.exe	c:\program files (x86)\microsoft visual studio\2019\professional\common7\ide\commonextensions\microsoft\fsharp\*	64-bit FSharp (F#) Interpreter included with Visual Studio and DotNet Core SDK.
397	visualuiaverifynative.exe	c:\program files (x86)\windows kits\10\bin\[sdk version]\arm64\uiaverify\*	A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
398	visualuiaverifynative.exe	c:\program files (x86)\windows kits\10\bin\[sdk version]\x64\uiaverify\*	A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
399	visualuiaverifynative.exe	c:\program files (x86)\windows kits\10\bin\[sdk version]\uiaverify\*	A Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls.
400	ntdsutil.exe	c:\windows\system32\*	Command line utility used to export Active Directory.
401	sqltoolsps.exe	c:\program files (x86)\microsoft sql server\130\tools\binn\*	Tool included with Microsoft SQL that loads SQL Server cmdlts. A replacement for sqlps.exe. Successor to sqlps.exe in SQL Server 2016+.
402	dump64.exe	c:\program files (x86)\microsoft visual studio\installer\feedback\*	Memory dump tool that comes with Microsoft Visual Studio
403	wsl.exe	c:\windows\system32\*	Windows subsystem for Linux executable
404	csi.exe	c:\program files (x86)\microsoft visual studio\2017\community\msbuild\15.0\bin\roslyn\*	Command line interface included with Visual Studio.
405	csi.exe	c:\program files (x86)\microsoft web tools\packages\microsoft.net.compilers.x.y.z\tools\*	Command line interface included with Visual Studio.
406	mftrace.exe	c:\program files (x86)\windows kits\10\bin\10.0.16299.0\*	Trace log generation tool for Media Foundation Tools.
407	mftrace.exe	c:\program files (x86)\windows kits\10\bin\*	Trace log generation tool for Media Foundation Tools.
408	adplus.exe	c:\program files (x86)\windows kits\10\debuggers\x64\*	Debugging tool included with Windows Debugging Tools
409	adplus.exe	c:\program files (x86)\windows kits\10\debuggers\x86\*	Debugging tool included with Windows Debugging Tools
410	excel.exe	c:\program files (x86)\microsoft office 16\clientx86\root\office16\*	Microsoft Office binary
411	excel.exe	c:\program files\microsoft office 16\clientx64\root\office16\*	Microsoft Office binary
412	excel.exe	c:\program files (x86)\microsoft office\office16\*	Microsoft Office binary
413	excel.exe	c:\program files\microsoft office\office16\*	Microsoft Office binary
414	excel.exe	c:\program files (x86)\microsoft office 15\clientx86\root\office15\*	Microsoft Office binary
415	excel.exe	c:\program files\microsoft office 15\clientx64\root\office15\*	Microsoft Office binary
416	excel.exe	c:\program files (x86)\microsoft office\office15\*	Microsoft Office binary
417	excel.exe	c:\program files\microsoft office\office15\*	Microsoft Office binary
418	excel.exe	c:\program files (x86)\microsoft office 14\clientx86\root\office14\*	Microsoft Office binary
419	excel.exe	c:\program files\microsoft office 14\clientx64\root\office14\*	Microsoft Office binary
420	excel.exe	c:\program files (x86)\microsoft office\office14\*	Microsoft Office binary
421	excel.exe	c:\program files\microsoft office\office14\*	Microsoft Office binary
422	excel.exe	c:\program files (x86)\microsoft office\office12\*	Microsoft Office binary
423	excel.exe	c:\program files\microsoft office\office12\*	Microsoft Office binary
424	dotnet.exe	c:\program files\dotnet\*	dotnet.exe comes with .NET Framework
425	sqlps.exe	c:\program files (x86)\microsoft sql server\100\tools\binn\*	Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.
426	sqlps.exe	c:\program files (x86)\microsoft sql server\110\tools\binn\*	Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.
427	sqlps.exe	c:\program files (x86)\microsoft sql server\120\tools\binn\*	Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.
428	sqlps.exe	c:\program files (x86)\microsoft sql server\130\tools\binn\*	Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.
429	sqlps.exe	c:\program files (x86)\microsoft sql server\150\tools\binn\*	Tool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons.
430	acccheckconsole.exe	c:\program files (x86)\windows kits\10\bin\10.0.22000.0\x86\accchecker\*	Verifies UI accessibility requirements
431	acccheckconsole.exe	c:\program files (x86)\windows kits\10\bin\10.0.22000.0\x64\accchecker\*	Verifies UI accessibility requirements
432	acccheckconsole.exe	c:\program files (x86)\windows kits\10\bin\10.0.22000.0\arm\accchecker\*	Verifies UI accessibility requirements
433	acccheckconsole.exe	c:\program files (x86)\windows kits\10\bin\10.0.22000.0\arm64\accchecker\*	Verifies UI accessibility requirements
434	powerpnt.exe	c:\program files (x86)\microsoft office 16\clientx86\root\office16\*	Microsoft Office binary.
435	powerpnt.exe	c:\program files\microsoft office 16\clientx64\root\office16\*	Microsoft Office binary.
436	powerpnt.exe	c:\program files (x86)\microsoft office\office16\*	Microsoft Office binary.
437	powerpnt.exe	c:\program files\microsoft office\office16\*	Microsoft Office binary.
438	powerpnt.exe	c:\program files (x86)\microsoft office 15\clientx86\root\office15\*	Microsoft Office binary.
439	powerpnt.exe	c:\program files\microsoft office 15\clientx64\root\office15\*	Microsoft Office binary.
440	powerpnt.exe	c:\program files (x86)\microsoft office\office15\*	Microsoft Office binary.
441	powerpnt.exe	c:\program files\microsoft office\office15\*	Microsoft Office binary.
442	powerpnt.exe	c:\program files (x86)\microsoft office 14\clientx86\root\office14\*	Microsoft Office binary.
443	powerpnt.exe	c:\program files\microsoft office 14\clientx64\root\office14\*	Microsoft Office binary.
444	powerpnt.exe	c:\program files (x86)\microsoft office\office14\*	Microsoft Office binary.
445	powerpnt.exe	c:\program files\microsoft office\office14\*	Microsoft Office binary.
446	powerpnt.exe	c:\program files (x86)\microsoft office\office12\*	Microsoft Office binary.
447	powerpnt.exe	c:\program files\microsoft office\office12\*	Microsoft Office binary.
448	sqldumper.exe	c:\program files\microsoft sql server\90\shared\*	Debugging utility included with Microsoft SQL.
449	sqldumper.exe	c:\program files (x86)\microsoft office\root\vfs\programfilesx86\microsoft analysis\as oledb\140\*	Debugging utility included with Microsoft SQL.
450	remote.exe	c:\program files (x86)\windows kits\10\debuggers\x64\*	Debugging tool included with Windows Debugging Tools
451	remote.exe	c:\program files (x86)\windows kits\10\debuggers\x86\*	Debugging tool included with Windows Debugging Tools
452	appvlp.exe	c:\program files\microsoft office\root\client\*	Application Virtualization Utility Included with Microsoft Office 2016
453	appvlp.exe	c:\program files (x86)\microsoft office\root\client\*	Application Virtualization Utility Included with Microsoft Office 2016
454	agentexecutor.exe	c:\program files (x86)\*	Intune Management Extension included on Intune Managed Devices
455	dxcap.exe	c:\windows\system32\*	DirectX diagnostics/debugger included with Visual Studio.
456	dxcap.exe	c:\windows\syswow64\*	DirectX diagnostics/debugger included with Visual Studio.
457	cdb.exe	c:\program files (x86)\windows kits\10\debuggers\x64\*	Debugging tool included with Windows Debugging Tools.
458	cdb.exe	c:\program files (x86)\windows kits\10\debuggers\x86\*	Debugging tool included with Windows Debugging Tools.
459	defaultpack.exe	c:\program files (x86)\microsoft\defaultpack\*	This binary can be downloaded along side multiple software downloads on the microsoft website. It gets downloaded when the user forgets to uncheck the option to set Bing as the default search provider.
460	devtoolslauncher.exe	c:\windows\system32\*	Binary will execute specified binary. Part of VS/VScode installation.
461	vsiisexelauncher.exe	c:\program files (x86)\microsoft visual studio\2019\community\common7\ide\extensions\microsoft\web tools\projectsystem\*	Binary will execute specified binary. Part of VS/VScode installation.
462	winword.exe	c:\program files\microsoft office\root\office16\*	Microsoft Office binary
463	winword.exe	c:\program files (x86)\microsoft office 16\clientx86\root\office16\*	Microsoft Office binary
464	winword.exe	c:\program files\microsoft office 16\clientx64\root\office16\*	Microsoft Office binary
465	winword.exe	c:\program files (x86)\microsoft office\office16\*	Microsoft Office binary
466	winword.exe	c:\program files\microsoft office\office16\*	Microsoft Office binary
467	winword.exe	c:\program files (x86)\microsoft office 15\clientx86\root\office15\*	Microsoft Office binary
468	winword.exe	c:\program files\microsoft office 15\clientx64\root\office15\*	Microsoft Office binary
469	winword.exe	c:\program files (x86)\microsoft office\office15\*	Microsoft Office binary
470	winword.exe	c:\program files\microsoft office\office15\*	Microsoft Office binary
471	winword.exe	c:\program files (x86)\microsoft office 14\clientx86\root\office14\*	Microsoft Office binary
472	winword.exe	c:\program files\microsoft office 14\clientx64\root\office14\*	Microsoft Office binary
473	winword.exe	c:\program files (x86)\microsoft office\office14\*	Microsoft Office binary
474	winword.exe	c:\program files\microsoft office\office14\*	Microsoft Office binary
475	winword.exe	c:\program files (x86)\microsoft office\office12\*	Microsoft Office binary
476	winword.exe	c:\program files\microsoft office\office12\*	Microsoft Office binary
477	fsianycpu.exe	c:\program files (x86)\microsoft visual studio\2019\professional\common7\ide\commonextensions\microsoft\fsharp\*	32/64-bit FSharp (F#) Interpreter included with Visual Studio.
478	vsjitdebugger.exe	c:\windows\system32\*	Just-In-Time (JIT) debugger included with Visual Studio
479	wfc.exe	c:\program files (x86)\microsoft sdks\windows\v10.0a\bin\netfx 4.8 tools\*	The Workflow Command-line Compiler tool is included with the Windows Software Development Kit (SDK).
480	msdeploy.exe	c:\program files (x86)\iis\microsoft web deploy v3\*	Microsoft tool used to deploy Web Applications.