splunk-security_content/lookups/system32_executables.csv

1	filename	systemFile
2	arp.exe	true
3	adaptertroubleshooter.exe	true
4	applicationframehost.exe	true
5	atbroker.exe	true
6	authhost.exe	true
7	autoworkplace.exe	true
8	axinstui.exe	true
9	backgroundtransferhost.exe	true
10	bdehdcfg.exe	true
11	bdeuisrv.exe	true
12	bdeunlockwizard.exe	true
13	bitlockerdeviceencryption.exe	true
14	bitlockerwizard.exe	true
15	bitlockerwizardelev.exe	true
16	bytecodegenerator.exe	true
17	camerasettingsuihost.exe	true
18	castsrv.exe	true
19	certenrollctrl.exe	true
20	checknetisolation.exe	true
21	clipup.exe	true
22	cloudexperiencehostbroker.exe	true
23	cloudnotifications.exe	true
24	cloudstoragewizard.exe	true
25	compmgmtlauncher.exe	true
26	compattelrunner.exe	true
27	computerdefaults.exe	true
28	credentialuibroker.exe	true
29	dfdwiz.exe	true
30	dwwin.exe	true
31	dataexchangehost.exe	true
32	defrag.exe	true
33	devicedisplayobjectprovider.exe	true
34	deviceeject.exe	true
35	deviceenroller.exe	true
36	devicepairingwizard.exe	true
37	deviceproperties.exe	true
38	disksnapshot.exe	true
39	dism.exe	true
40	displayswitch.exe	true
41	dmnotificationbroker.exe	true
42	dmomacpmo.exe	true
43	dpiscaling.exe	true
44	dsmusertask.exe	true
45	dxpserver.exe	true
46	edpcleanup.exe	true
47	eosnotify.exe	true
48	eap3host.exe	true
49	easpoliciesbrokerhost.exe	true
50	easeofaccessdialog.exe	true
51	ehstorauthn.exe	true
52	fxscover.exe	true
53	fxssvc.exe	true
54	fxsunatd.exe	true
55	filehistory.exe	true
56	fondue.exe	true
57	gamepanel.exe	true
58	genvalobj.exe	true
59	gettingstarted.exe	true
60	hostname.exe	true
61	icsentitlementhost.exe	true
62	infdefaultinstall.exe	true
63	installagent.exe	true
64	languagecomponentsinstallercomhandler.exe	true
65	launchtm.exe	true
66	launchwinapp.exe	true
67	legacynetuxhost.exe	true
68	licensemanagershellext.exe	true
69	licensingui.exe	true
70	locationnotificationwindows.exe	true
71	locationnotifications.exe	true
72	locator.exe	true
73	lockapphost.exe	true
74	lockscreencontentserver.exe	true
75	logonui.exe	true
76	lsaiso.exe	true
77	mdeserver.exe	true
78	mdmagent.exe	true
79	mdmappinstaller.exe	true
80	mrinfo.exe	true
81	mrt.exe	true
82	mschedexe.exe	true
83	magnify.exe	true
84	mbaeparsertask.exe	true
85	mdres.exe	true
86	mdsched.exe	true
87	migautoplay.exe	true
88	mpsigstub.exe	true
89	msspellcheckinghost.exe	true
90	muiunattend.exe	true
91	multidigimon.exe	true
92	musnotification.exe	true
93	musnotificationux.exe	true
94	napstat.exe	true
95	netstat.exe	true
96	narrator.exe	true
97	netcfgnotifyobjecthost.exe	true
98	netevtfwdr.exe	true
99	netproj.exe	true
100	netplwiz.exe	true
101	networkuxbroker.exe	true
102	openwith.exe	true
103	optionalfeatures.exe	true
104	pathping.exe	true
105	ping.exe	true
106	passwordonwakesettingflyout.exe	true
107	pickerhost.exe	true
108	pkgmgr.exe	true
109	pnpunattend.exe	true
110	pnputil.exe	true
111	presentationhost.exe	true
112	presentationsettings.exe	true
113	printbrmui.exe	true
114	printdialoghost.exe	true
115	printdialoghost3d.exe	true
116	printisolationhost.exe	true
117	proximityuxhost.exe	true
118	rdspnf.exe	true
119	rmactivate.exe	true
120	rmactivate_isv.exe	true
121	rmactivate_ssp.exe	true
122	rmactivate_ssp_isv.exe	true
123	route.exe	true
124	rdpsa.exe	true
125	rdpsaproxy.exe	true
126	rdpsauachelper.exe	true
127	reagentc.exe	true
128	recoverydrive.exe	true
129	register-cimprovider.exe	true
130	registeriepkeys.exe	true
131	relpost.exe	true
132	remoteposworker.exe	true
133	rmclient.exe	true
134	robocopy.exe	true
135	rpcping.exe	true
136	runlegacycplelevated.exe	true
137	runtimebroker.exe	true
138	sihclient.exe	true
139	searchfilterhost.exe	true
140	searchindexer.exe	true
141	searchprotocolhost.exe	true
142	secedit.exe	true
143	sensordataservice.exe	true
144	setieinstalleddate.exe	true
145	settingsynchost.exe	true
146	slidetoshutdown.exe	true
147	smartscreensettings.exe	true
148	sndvol.exe	true
149	snippingtool.exe	true
150	soundrecorder.exe	true
151	spaceagent.exe	true
152	sppextcomobj.exe	true
153	srtasks.exe	true
154	stikynot.exe	true
155	synchost.exe	true
156	sysreseterr.exe	true
157	systempropertiesadvanced.exe	true
158	systempropertiescomputername.exe	true
159	systempropertiesdataexecutionprevention.exe	true
160	systempropertieshardware.exe	true
161	systempropertiesperformance.exe	true
162	systempropertiesprotection.exe	true
163	systempropertiesremote.exe	true
164	systemsettingsadminflows.exe	true
165	systemsettingsbroker.exe	true
166	systemsettingsremovedevice.exe	true
167	tcpsvcs.exe	true
168	tracert.exe	true
169	tstheme.exe	true
170	tswbprxy.exe	true
171	tapiunattend.exe	true
172	taskmgr.exe	true
173	thumbnailextractionhost.exe	true
174	tokenbrokercookies.exe	true
175	tpminit.exe	true
176	tswpfwrp.exe	true
177	ui0detect.exe	true
178	upgraderesultsui.exe	true
179	useraccountbroker.exe	true
180	useraccountcontrolsettings.exe	true
181	usoclient.exe	true
182	utilman.exe	true
183	vssvc.exe	true
184	vaultcmd.exe	true
185	vaultsysui.exe	true
186	wfs.exe	true
187	wmpdmc.exe	true
188	wpdshextautoplay.exe	true
189	wscollect.exe	true
190	wsmanhttpconfig.exe	true
191	wsreset.exe	true
192	wudfhost.exe	true
193	wwahost.exe	true
194	wallpaperhost.exe	true
195	webcache.exe	true
196	werfault.exe	true
197	werfaultsecure.exe	true
198	winsat.exe	true
199	windows.media.backgroundplayback.exe	true
200	windowsactiondialog.exe	true
201	windowsanytimeupgrade.exe	true
202	windowsanytimeupgraderesults.exe	true
203	windowsanytimeupgradeui.exe	true
204	windowsupdateelevatedinstaller.exe	true
205	workfolders.exe	true
206	wpcmon.exe	true
207	acu.exe	true
208	aitagent.exe	true
209	aitstatic.exe	true
210	alg.exe	true
211	appidcertstorecheck.exe	true
212	appidpolicyconverter.exe	true
213	at.exe	true
214	attrib.exe	true
215	audiodg.exe	true
216	auditpol.exe	true
217	autochk.exe	true
218	autoconv.exe	true
219	autofmt.exe	true
220	baaupdate.exe	true
221	backgroundtaskhost.exe	true
222	bcastdvr.exe	true
223	bcdboot.exe	true
224	bcdedit.exe	true
225	bdechangepin.exe	true
226	bdeunlock.exe	true
227	bitsadmin.exe	true
228	bootcfg.exe	true
229	bootim.exe	true
230	bootsect.exe	true
231	bridgeunattend.exe	true
232	browser_broker.exe	true
233	bthudtask.exe	true
234	cacls.exe	true
235	calc.exe	true
236	cdpreference.exe	true
237	certreq.exe	true
238	certutil.exe	true
239	change.exe	true
240	changepk.exe	true
241	charmap.exe	true
242	chglogon.exe	true
243	chgport.exe	true
244	chgusr.exe	true
245	chkdsk.exe	true
246	chkntfs.exe	true
247	choice.exe	true
248	cipher.exe	true
249	cleanmgr.exe	true
250	cliconfg.exe	true
251	clip.exe	true
252	cmd.exe	true
253	cmdkey.exe	true
254	cmdl32.exe	true
255	cmmon32.exe	true
256	cmstp.exe	true
257	cofire.exe	true
258	colorcpl.exe	true
259	comp.exe	true
260	compact.exe	true
261	conhost.exe	true
262	consent.exe	true
263	control.exe	true
264	convert.exe	true
265	credwiz.exe	true
266	cscript.exe	true
267	csrss.exe	true
268	ctfmon.exe	true
269	cttune.exe	true
270	cttunesvr.exe	true
271	dashost.exe	true
272	dccw.exe	true
273	dcomcnfg.exe	true
274	ddodiag.exe	true
275	dfrgui.exe	true
276	dialer.exe	true
277	diantz.exe	true
278	dinotify.exe	true
279	diskpart.exe	true
280	diskperf.exe	true
281	diskraid.exe	true
282	dispdiag.exe	true
283	djoin.exe	true
284	dllhost.exe	true
285	dllhst3g.exe	true
286	dmcertinst.exe	true
287	dmcfghost.exe	true
288	dmclient.exe	true
289	dnscacheugc.exe	true
290	doskey.exe	true
291	dpapimig.exe	true
292	dpnsvr.exe	true
293	driverquery.exe	true
294	drvcfg.exe	true
295	drvinst.exe	true
296	dsregcmd.exe	true
297	dstokenclean.exe	true
298	dvdplay.exe	true
299	dvdupgrd.exe	true
300	dwm.exe	true
301	dxdiag.exe	true
302	easinvoker.exe	true
303	efsui.exe	true
304	embeddedapplauncher.exe	true
305	esentutl.exe	true
306	eudcedit.exe	true
307	eventcreate.exe	true
308	eventvwr.exe	true
309	expand.exe	true
310	extrac32.exe	true
311	fc.exe	true
312	fhmanagew.exe	true
313	find.exe	true
314	findstr.exe	true
315	finger.exe	true
316	fixmapi.exe	true
317	fltmc.exe	true
318	fodhelper.exe	true
319	fontdrvhost.exe	true
320	fontview.exe	true
321	forfiles.exe	true
322	fsavailux.exe	true
323	fsquirt.exe	true
324	fsutil.exe	true
325	ftp.exe	true
326	fvenotify.exe	true
327	fveprompt.exe	true
328	getmac.exe	true
329	gpresult.exe	true
330	gpscript.exe	true
331	gpupdate.exe	true
332	grpconv.exe	true
333	hdwwiz.exe	true
334	help.exe	true
335	hwrcomp.exe	true
336	hwrreg.exe	true
337	icacls.exe	true
338	icardagt.exe	true
339	icsunattend.exe	true
340	ie4uinit.exe	true
341	ieunatt.exe	true
342	ieetwcollector.exe	true
343	iexpress.exe	true
344	immersivetpmvscmgrsvr.exe	true
345	ipconfig.exe	true
346	irftp.exe	true
347	iscsicli.exe	true
348	iscsicpl.exe	true
349	isoburn.exe	true
350	klist.exe	true
351	ksetup.exe	true
352	ktmutil.exe	true
353	label.exe	true
354	licensingdiag.exe	true
355	lodctr.exe	true
356	logagent.exe	true
357	logman.exe	true
358	logoff.exe	true
359	lpkinstall.exe	true
360	lpksetup.exe	true
361	lpremove.exe	true
362	lsass.exe	true
363	lsm.exe	true
364	makecab.exe	true
365	manage-bde.exe	true
366	mblctr.exe	true
367	mcbuilder.exe	true
368	mctadmin.exe	true
369	mfpmp.exe	true
370	mmc.exe	true
371	mobsync.exe	true
372	mountvol.exe	true
373	mpnotify.exe	true
374	msconfig.exe	true
375	msdt.exe	true
376	msdtc.exe	true
377	msfeedssync.exe	true
378	msg.exe	true
379	mshta.exe	true
380	msiexec.exe	true
381	msinfo32.exe	true
382	mspaint.exe	true
383	msra.exe	true
384	mstsc.exe	true
385	mtstocom.exe	true
386	nbtstat.exe	true
387	ndadmin.exe	true
388	net.exe	true
389	net1.exe	true
390	netbtugc.exe	true
391	netcfg.exe	true
392	netiougc.exe	true
393	netsh.exe	true
394	newdev.exe	true
395	nltest.exe	true
396	notepad.exe	true
397	nslookup.exe	true
398	ntoskrnl.exe	true
399	ntprint.exe	true
400	ocsetup.exe	true
401	odbcad32.exe	true
402	odbcconf.exe	true
403	omadmclient.exe	true
404	omadmprc.exe	true
405	openfiles.exe	true
406	osk.exe	true
407	p2phost.exe	true
408	pcalua.exe	true
409	pcaui.exe	true
410	pcawrk.exe	true
411	pcwrun.exe	true
412	perfmon.exe	true
413	phoneactivate.exe	true
414	plasrv.exe	true
415	poqexec.exe	true
416	powercfg.exe	true
417	prevhost.exe	true
418	print.exe	true
419	printfilterpipelinesvc.exe	true
420	printui.exe	true
421	proquota.exe	true
422	provtool.exe	true
423	psr.exe	true
424	pwlauncher.exe	true
425	qappsrv.exe	true
426	qprocess.exe	true
427	query.exe	true
428	quser.exe	true
429	qwinsta.exe	true
430	rasautou.exe	true
431	rasdial.exe	true
432	raserver.exe	true
433	rasphone.exe	true
434	rdpclip.exe	true
435	rdpinput.exe	true
436	rdrleakdiag.exe	true
437	recdisc.exe	true
438	recover.exe	true
439	reg.exe	true
440	regedt32.exe	true
441	regini.exe	true
442	regsvr32.exe	true
443	rekeywiz.exe	true
444	relog.exe	true
445	repair-bde.exe	true
446	replace.exe	true
447	reset.exe	true
448	resmon.exe	true
449	rmttpmvscmgrsvr.exe	true
450	rrinstaller.exe	true
451	rstrui.exe	true
452	runas.exe	true
453	rundll32.exe	true
454	runonce.exe	true
455	rwinsta.exe	true
456	sbunattend.exe	true
457	sc.exe	true
458	schtasks.exe	true
459	sdbinst.exe	true
460	sdchange.exe	true
461	sdclt.exe	true
462	sdiagnhost.exe	true
463	secinit.exe	true
464	services.exe	true
465	sessionmsg.exe	true
466	sethc.exe	true
467	setspn.exe	true
468	setupcl.exe	true
469	setupugc.exe	true
470	setx.exe	true
471	sfc.exe	true
472	shadow.exe	true
473	shrpubw.exe	true
474	shutdown.exe	true
475	sigverif.exe	true
476	sihost.exe	true
477	slui.exe	true
478	smss.exe	true
479	snmptrap.exe	true
480	sort.exe	true
481	spinstall.exe	true
482	spoolsv.exe	true
483	sppsvc.exe	true
484	spreview.exe	true
485	srdelayed.exe	true
486	subst.exe	true
487	svchost.exe	true
488	sxstrace.exe	true
489	syskey.exe	true
490	systeminfo.exe	true
491	systemreset.exe	true
492	systray.exe	true
493	tabcal.exe	true
494	takeown.exe	true
495	taskeng.exe	true
496	taskhost.exe	true
497	taskhostw.exe	true
498	taskkill.exe	true
499	tasklist.exe	true
500	taskmgr.exe	true
501	tcmsetup.exe	true
502	timeout.exe	true
503	tpmvscmgr.exe	true
504	tpmvscmgrsvr.exe	true
505	tracerpt.exe	true
506	tscon.exe	true
507	tsdiscon.exe	true
508	tskill.exe	true
509	typeperf.exe	true
510	tzsync.exe	true
511	tzutil.exe	true
512	ucsvc.exe	true
513	unlodctr.exe	true
514	unregmp2.exe	true
515	upnpcont.exe	true
516	userinit.exe	true
517	vds.exe	true
518	vdsldr.exe	true
519	verclsid.exe	true
520	verifier.exe	true
521	verifiergui.exe	true
522	vmicsvc.exe	true
523	vssadmin.exe	true
524	w32tm.exe	true
525	waitfor.exe	true
526	wbadmin.exe	true
527	wbengine.exe	true
528	wecutil.exe	true
529	wermgr.exe	true
530	wevtutil.exe	true
531	wextract.exe	true
532	where.exe	true
533	whoami.exe	true
534	wiaacmgr.exe	true
535	wiawow64.exe	true
536	wifitask.exe	true
537	wimserv.exe	true
538	wininit.exe	true
539	winload.exe	true
540	winlogon.exe	true
541	winresume.exe	true
542	winrs.exe	true
543	winrshost.exe	true
544	winver.exe	true
545	wisptis.exe	true
546	wkspbroker.exe	true
547	wksprt.exe	true
548	wlanext.exe	true
549	wlrmdr.exe	true
550	wowreg32.exe	true
551	wpnpinst.exe	true
552	wpr.exe	true
553	write.exe	true
554	wscript.exe	true
555	wsmprovhost.exe	true
556	wsqmcons.exe	true
557	wuapihost.exe	true
558	wuapp.exe	true
559	wuauclt.exe	true
560	wusa.exe	true
561	xcopy.exe	true
562	xpsrchvw.exe	true
563	xwizard.exe	true