Данные статистики
Описание события
Тип события: Telemetry.
Событие отправляется при сборе и передаче статистики, когда это разрешено политикой Telemetry.
Статистика отправляется в нескольких событиях. Каждое событие содержит определенный тип информации, заданных политикой Telemetry:
- Метаданные;
- Системная информация;
- Адаптеры;
- Апдейты;
- Автозапуск;
- Файлы браузера;
- Дефолтный браузер;
- Атрибуты файла;
- Хосты;
- Привязанность к домену;
- Ярлыки на рабочем столе;
- Фильтры сети;
- Настройки сети;
- Информация об ОС;
- Запущенные процессы;
- Установленные программы;
- Программы из реестра;
- Рутовые сертификаты;
- Сервисы;
- Таски;
- Тема ОС;
- "Пуск" common;
- "Пуск" user;
- Количество пользователей ОС.
Формат полей
|
Название поля |
Тип поля |
Описание |
|
|
array of objects |
Массив JSON-объектов с параметрами файлов Браузера с расширениями |
|
|
array of objects |
Массив JSON-объектов с параметрами host-файлов. |
|
|
array of objects |
Массив JSON-объектов с параметрами ссылок и URL'ов. |
|
|
array of objects |
Массив JSON-объектов приложений из реестра. |
|
|
array of objects |
Массив JSON-объектов установленных приложений из файловой системы. |
|
|
array of objects |
Массив JSON-объектов сетевых настроек. |
|
|
array of objects |
Массив JSON-объектов приложений для автозапуска из реестра. |
|
|
array of objects |
Массив JSON-объектов приложений для автозапуска из директории Common Startup. |
|
|
array of objects |
Массив JSON-объектов приложений для автозапуска из директории Startup. |
|
|
array of objects |
Массив JSON-объектов запланированных задач из службы Task Scheduler. |
|
|
array of objects |
Массив JSON-объектов сетевых фильтров из реестра. |
|
|
array of objects |
Массив JSON-объектов драйверов и сервисов из реестра. |
|
|
array of objects |
Массив JSON-объектов запущенных процессов. |
|
|
array of objects |
Массив JSON-объектов корневых сертификатов. |
|
|
array of objects |
Массив JSON-объектов настроек обновления Windows. |
|
|
boolean |
Принадлежит ли компьютер домену ( |
|
|
number |
Количество пользователей в системе. |
|
|
array of objects |
Массив JSON-объектов с компонентами безопасности Браузера. |
|
|
array of objects |
Массив JSON-объектов со временем сбора данных по каждому типу |
|
|
array of objects |
Массив JSON-объектов со cписком браузеров из реестра. |
|
|
array of objects |
Массив JSON-объектов с информацией об операционной системе. |
|
|
array of objects |
Массив JSON-объектов с количеством данных по каждому типу |
|
|
array of objects |
Массив JSON-объектов с информацией о файлах, которые прочитали при заполнении других типов. |
|
|
array of objects |
Массив JSON-объектов сетевых адаптеров из реестра. |
|
|
array of objects |
Массив JSON-объектов текущей темы оформления Windows. |
Примеры событий
1. Метаданные
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 395,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"UI": "23632AE3-643D-4A53-A8F6-13C009EE4557",
"admin": true,
"client_id": "4093765598995262956",
"extensions_prefs": {
"ahfgeienlihckogmohjhadlkjgocpleb": {
"account_extension_type": 0,
"active_permissions": {
"api": [
"management",
"system.display",
"system.storage",
"webstorePrivate",
"system.cpu",
"system.memory",
"system.network"
],
"explicit_host": [],
"manifest_permissions": [],
"scriptable_host": []
},
"app_launcher_ordinal": "t",
"commands": {},
"content_settings": [],
"creation_flags": 1,
"disable_reasons": [],
"events": [],
"first_install_time": "13404211300544306",
"from_webstore": false,
"incognito_content_settings": [],
"incognito_preferences": {},
"last_update_time": "13404211300544306",
"location": 5,
"manifest": {
"app": {
"launch": {
"web_url": "https://chrome.google.com/webstore"
},
"urls": [
"https://chrome.google.com/webstore"
]
},
"description": "Широкий выбор приложений, игр, расширений и тем для Яндекс Браузера.",
"icons": {
"16": "webstore_icon_16.png",
"128": "webstore_icon_128.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB",
"name": "Магазин приложений",
"permissions": [
"webstorePrivate",
"management",
"system.cpu",
"system.display",
"system.memory",
"system.network",
"system.storage"
],
"version": "0.2"
},
"needs_sync": true,
"page_ordinal": "n",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\resources\\web_store",
"preferences": {},
"regular_only_preferences": {},
"was_installed_by_default": false,
"was_installed_by_oem": false
},
"cegaacafklagkioanifdoaieklociapj": {
"account_extension_type": 0,
"active_permissions": {
"api": [
"metricsPrivate",
"storage",
"yandex.browser",
"yandex.reader",
"yandex.statistics"
],
"explicit_host": [
"chrome://resources/*",
"chrome://theme/*"
],
"manifest_permissions": [],
"scriptable_host": []
},
"commands": {},
"content_settings": [],
"creation_flags": 1,
"disable_reasons": [],
"events": [],
"first_install_time": "13404211300545466",
"from_webstore": false,
"incognito_content_settings": [],
"incognito_preferences": {},
"last_update_time": "13404211300545466",
"location": 5,
"manifest": {
"content_security_policy": "default-src 'self' chrome://resources blob:; script-src 'self' chrome://resources; object-src 'self'; style-src 'unsafe-inline' 'self' chrome://resources blob:; img-src 'self' chrome://resources blob: data:",
"description": "",
"incognito": "split",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCkZNMPe6cNGLt8oFnbnMzlKc+E9GHgWsTLjvV+e0fPI/0KUuwaolAwCX6ubXwcImdE+cBMfcOefJZHW3rJZE4aYvTwKndSERDdE5gtaRcJqm9d1CkhBEvc0FEO/lWmOq1BxTkSdV09ul3wJvxBzPFrsdt055gftkuPCZHeDg+szwIDAQAB",
"manifest_version": 2,
"mime_types": [
"application/epub+zip",
"application/x-fictionbook+xml",
"application/x-zip-compressed-fb2"
],
"mime_types_handler": "index.html",
"name": "BookReader",
"offline_enabled": true,
"permissions": [
"chrome://theme/",
"chrome://theme/*",
"chrome://resources/",
"chrome://resources/*",
"metricsPrivate",
"storage",
"yandex.browser",
"yandex.reader",
"yandex.statistics"
],
"version": "2.0",
"web_accessible_resources": [
"index.html"
]
},
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\resources\\yandex/book_reader",
"preferences": {},
"regular_only_preferences": {},
"was_installed_by_default": false,
"was_installed_by_oem": false
},
"fdflhjdbckannpfpcgadmpkienmpaiik": {
"account_extension_type": 0,
"active_permissions": {
"api": [
"management",
"addonsPrivate"
],
"explicit_host": [],
"manifest_permissions": [],
"scriptable_host": []
},
"app_launcher_ordinal": "w",
"commands": {},
"content_settings": [],
"creation_flags": 1,
"disable_reasons": [],
"events": [],
"first_install_time": "13404211300545178",
"from_webstore": false,
"incognito_content_settings": [],
"incognito_preferences": {},
"last_update_time": "13404211300545178",
"location": 5,
"manifest": {
"app": {
"launch": {
"web_url": "https://addons.opera.com/"
},
"urls": [
"https://addons.opera.com/"
]
},
"description": "Opera store hosted application",
"key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbEvssq8OpMbH2EFz5oSlXVUQ6s/n9SpMdBpmbqJ/NI8l4iAfCqlUaKtZJfl9BGCIk1un7YXElPGrUTo0QMq12r9iwqR88vcSgiXt2+ZlWaO3qM19PiZjA87F26yLXnrkPZe6FO3PBv79I8GoxDbofTebo6h97y1yr0jiAAc7Ix/69RGGjhsm8Ahys/8CWqoZpzuZo+2v5Xl1HkJx8gONO+aK5QV2DsSWaoZ0Cs7DMth3nJEhKP1690i7SQn1Dsfidc7jWxRkzoOcZ7pxbn3a8akdEJDKXXjFT/yly/gKEzXr0iMj/1G4o/ehYoHV4AWLsUC1pgJU7uB986f9cn4KQIDAQAB",
"manifest_version": 2,
"name": "Opera store",
"permissions": [
"addonsPrivate",
"management"
],
"version": "0.1"
},
"page_ordinal": "n",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\resources\\opera_store",
"preferences": {},
"regular_only_preferences": {},
"was_installed_by_default": false,
"was_installed_by_oem": false
},
"mhjfbmdgcfjbbpaeojofohoefgiehjai": {
"account_extension_type": 0,
"active_permissions": {
"api": [
"contentSettings",
"fileSystem",
"fileSystem.write",
"metricsPrivate",
"tabs",
"resourcesPrivate",
"pdfViewerPrivate"
],
"explicit_host": [
"chrome://resources/*",
"chrome://webui-test/*"
],
"manifest_permissions": [],
"scriptable_host": []
},
"commands": {},
"content_settings": [],
"creation_flags": 1,
"disable_reasons": [],
"events": [],
"first_install_time": "13404211300544820",
"from_webstore": false,
"incognito_content_settings": [],
"incognito_preferences": {},
"last_update_time": "13404211300544820",
"location": 5,
"manifest": {
"content_security_policy": "script-src 'self' 'wasm-eval' blob: filesystem: chrome://resources chrome://webui-test; object-src * blob: externalfile: file: filesystem: data:",
"description": "",
"incognito": "split",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN6hM0rsDYGbzQPQfOygqlRtQgKUXMfnSjhIBL7LnReAVBEd7ZmKtyN2qmSasMl4HZpMhVe2rPWVVwBDl6iyNE/Kok6E6v6V3vCLGsOpQAuuNVye/3QxzIldzG/jQAdWZiyXReRVapOhZtLjGfywCvlWq7Sl/e3sbc0vWybSDI2QIDAQAB",
"manifest_version": 2,
"mime_types": [
"application/pdf"
],
"mime_types_handler": "index.html",
"name": "Chromium PDF Viewer",
"offline_enabled": true,
"permissions": [
"chrome://resources/",
"chrome://webui-test/",
"contentSettings",
"metricsPrivate",
"pdfViewerPrivate",
"resourcesPrivate",
"tabs",
{
"fileSystem": [
"write"
]
}
],
"version": "1"
},
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\resources\\pdf",
"preferences": {},
"regular_only_preferences": {},
"was_installed_by_default": false,
"was_installed_by_oem": false
}
},
"machine_guid": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"machine_id": "84c40473414caf2ed4a7b1283e48bbf4",
"raw_extensions": [],
"security_center": {
"asp": [
{
"asp_definition_state": "up to date",
"asp_name": "Windows Defender",
"asp_product_id": "{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}",
"asp_security_state": "active",
"asp_version": null
}
],
"av": [
{
"av_definition_state": "up to date",
"av_name": "Windows Defender",
"av_product_id": "{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}",
"av_security_state": "active",
"av_version": null
}
],
"fw": []
}
},
"Timestamp": 1759759848489.71,
"UserID": "DESKTOP-IDDQD\\Alice"
}
2. Системная информация
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 396,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "961bd531-9d8b-481b-aebb-1e1feadba18b",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"config_version": 0,
"gather_times": {
"net_adapters": 0.799,
"auto_updates": 1.139,
"registry_autorun": 0.93,
"browser_files": 624.084,
"installed_browsers": 0.078,
"file_features": 557.783,
"hosts": 0.15,
"enrolled_to_domain": 1.093,
"links": 5.902,
"network_filters": 4.523,
"network_settings": 0.259,
"os_info": 0.269,
"processes": 29.629,
"fs_programs": 2.65,
"reg_programs": 0.758,
"rootcerts": 2.108,
"security_center": 14.394,
"services": 48.028,
"tasks": 212.663,
"theme": 0.037,
"user_common_startup": 0.354,
"user_startup": 0.24,
"winusers_count": 0.97
},
"limits": {
"net_adapters": "3,1",
"auto_updates": {
"WindowsAutoUpdate": "200,101",
"WindowsUpdate": "200,0"
},
"registry_autorun": {
"WOW64_32": {
"HKEY_CURRENT_USER": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": "100,2",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": "100,0"
},
"HKEY_LOCAL_MACHINE": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": "100,0"
}
},
"WOW64_64": {
"HKEY_CURRENT_USER": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": "100,2",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": "100,0"
},
"HKEY_LOCAL_MACHINE": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": "100,1",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": "100,0",
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": "100,0"
}
}
},
"browser_files": "100,43",
"hosts": "5120,824",
"links": "200,25",
"network_filters": {
"ndis": "100,21",
"spi_lsp": "100,42"
},
"network_settings": {
"HKEY_CURRENT_USER": "100,0",
"HKEY_LOCAL_MACHINE": "100,6"
},
"processes": "250,151",
"fs_programs": {
"Local": "200,15",
"Program Files": "200,19",
"Program Files (x86)": "200,14"
},
"reg_programs": {
"WOW64_32": "500,16",
"WOW64_64": "500,19"
},
"rootcerts": {
"CA": "200,4",
"MY": "200,0",
"ROOT": "200,13"
},
"services": "1000,631",
"tasks": "500,76",
"user_common_startup": {
"WOW64_32": "100,1",
"WOW64_64": "100,1"
},
"user_startup": {
"WOW64_32": "100,1",
"WOW64_64": "100,1"
}
},
"product_version": "25.8.4.834",
"serialize_version": 4
},
"Timestamp": 1759759848495.372,
"UserID": "DESKTOP-IDDQD\\Alice"
}
3. Адаптеры
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 397,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "704bfc3a-ec2a-415e-b0ba-9fc7f8438fee",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"net_adapters": [
{
"sha256": "F068454B8FDC6DF6A7796B516FAB1FFDA1588EB1ACEBDD93A6CEC29C1B6DCD99",
"type": 6
}
]
},
"Timestamp": 1759759848498.473,
"UserID": "DESKTOP-IDDQD\\Alice"
}
4. Апдейты
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 398,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "65024e00-f19d-438e-a58b-30ff0adab8dd",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"auto_updates": {
"WindowsAutoUpdate": {
"LastOnlineScanTimeForAppCategory": {
"855E8A7C-ECB4-4CA3-B045-1DFA50104289": {
"00C2490A-EF1D-43C9-BDBA-B84ECC77D2EA": "2025-10-06 08:11:06",
"06AA027C-C7AA-4CFE-AF76-D1FDA87F376A": "2025-10-06 08:11:06",
"0C7D3085-6C21-49A1-B267-52FDD722CA9D": "2025-10-06 08:11:06",
"16DB93BF-8748-449A-96BA-E9ED3A5F872D": "2025-10-06 08:11:06",
"1A36FD17-5161-4651-AE2D-13384E427EA8": "2025-10-06 08:11:06",
"20F45068-02FC-4701-9385-53AC85D8EAF9": "2025-10-06 08:11:06",
"214308D7-4262-449D-A78D-9A2306144B11": "2025-10-06 08:11:06",
"253402B1-6356-4131-B1CD-F4F3B6D2B03C": "2025-10-06 08:11:06",
"2830B57A-D6C7-4C7A-873E-AD2365CDF2BF": "2025-10-06 08:11:06",
"2F510DC1-4B62-4128-956E-A73D253CC9CB": "2025-10-06 08:11:06",
"3ECE63C1-AE51-4414-9064-B4FF1E0A9017": "2025-10-06 08:11:06",
"421BA874-F903-4965-9B82-D60F3BA3CAE0": "2025-10-06 08:11:06",
"454A759B-FF5B-4A79-80D3-1CF15EBA0908": "2025-10-06 08:11:06",
"579FC437-D398-411C-A6C5-D01FD4523B94": "2025-10-06 08:11:06",
"5E19CC61-8994-4797-BDC7-C21263F6282B": "2025-10-06 08:11:06",
"64293252-5926-453C-9494-2D4021F1C78D": "2025-10-06 08:11:06",
"64A79953-CF0B-44F9-B5C4-EE5DF3A15C63": "2025-10-06 08:11:06",
"64B22DF1-5A9C-4C88-AA1F-42CEFAF8B281": "2025-10-06 08:11:06",
"65B58C5C-5C7E-4B72-9D9F-9BDD15C506B3": "2025-10-06 08:11:06",
"6C3C7EF3-20FC-43A8-8CE2-1A89F35A1476": "2025-10-06 08:11:06",
"733893B8-533D-4292-BF27-23D218B39A95": "2025-10-06 08:11:06",
"793324A6-D078-4B96-9D4E-847113119E61": "2025-10-06 08:11:06",
"7CE6966C-0C33-4851-8958-285ABBA4D7CC": "2025-10-06 08:11:06",
"7F354D0E-A913-4AA0-815D-3FA9FBFF2BD8": "2025-10-06 08:11:06",
"86A75D59-8166-4E92-9F46-F3B39784ADA3": "2025-10-06 08:11:06",
"8D8DA3C7-FA5E-4A5C-8E87-92F77596BC5A": "2025-10-06 08:11:06",
"9607E6E2-46A5-4A17-AFCA-908FFC36D70B": "2025-10-06 08:11:06",
"9D523EC0-098C-4E19-9109-B08DC9C3829A": "2025-10-06 08:11:06",
"9DB724C9-966D-4AEB-9D3B-D6B2C77F3DE3": "2025-10-06 08:11:06",
"9F03273F-FE0B-4ED8-9BC8-C2F256375490": "2025-10-06 08:11:06",
"A72BAE09-DDA2-4B20-9A9F-D21BE62809DC": "2025-10-06 08:11:06",
"AF714B9A-BDCC-496C-8631-0853232DBEE9": "2025-10-06 08:11:06",
"B4F3025D-A236-44B0-8D4C-849BED549259": "2025-10-06 08:11:06",
"B7757AF6-9E6D-4D21-8272-C9137A2E9145": "2025-10-06 08:11:06",
"B90F3A9A-C043-41A7-A774-E51F6069283B": "2025-10-06 08:11:06",
"B99AEF9A-1685-4798-B4B1-3D94EE6D7184": "2025-10-06 08:11:06",
"BE437D05-6D78-42B6-9BC1-D38C6DE4A43D": "2025-10-06 08:11:06",
"C9EEB20E-619B-4923-85E1-6017FE8F14A9": "2025-10-06 08:11:06",
"CD5D53B1-33F7-4A95-B111-F51F187C7130": "2025-10-06 08:11:06",
"CFC4A10E-0356-451D-BB3E-C4FE5EDFD20C": "2025-10-06 08:11:06",
"D63C16B5-90E0-4DF5-83AE-8CA6F53997D5": "2025-10-06 08:11:06",
"DE4F0463-7DB2-48EE-959C-70E02541F4E6": "2025-10-06 08:11:06",
"E632FE90-A5BA-43AA-BF81-9DE8413E83D8": "2025-10-06 08:11:06",
"EAAC6C6B-10A4-4659-815B-44F151ECA61A": "2025-10-06 08:11:06",
"EB8C95FE-7294-45C1-8768-73CC6A769307": "2025-10-06 08:11:06",
"F022389F-F3A6-417E-AD23-704FBDF57117": "2025-10-06 08:11:06",
"F4CCC4C1-6E9A-49A0-8F19-46F1717C7BA3": "2025-10-06 08:11:06",
"F855810C-9F77-45FF-A0F5-CD0FEAA945C6": "2025-10-06 08:11:06"
}
},
"Power": {
"ContinueInstallAtShutdown-Final": "10",
"Firmware-Final": "30",
"FirmwareForcedInstall-Final": "35",
"OfferInstallAtShutdown-Final": "40"
},
"RebootRequired": {
"a9753e1b-d22f-4e6b-9b8b-0218fa732dcd": "1"
},
"RequestedAppCategories": {
"855E8A7C-ECB4-4CA3-B045-1DFA50104289": {
"00C2490A-EF1D-43C9-BDBA-B84ECC77D2EA": "2025-10-06 08:11:06",
"06AA027C-C7AA-4CFE-AF76-D1FDA87F376A": "2025-10-06 08:11:06",
"0C7D3085-6C21-49A1-B267-52FDD722CA9D": "2025-10-06 08:11:06",
"16DB93BF-8748-449A-96BA-E9ED3A5F872D": "2025-10-06 08:11:06",
"1A36FD17-5161-4651-AE2D-13384E427EA8": "2025-10-06 08:11:06",
"20F45068-02FC-4701-9385-53AC85D8EAF9": "2025-10-06 08:11:06",
"214308D7-4262-449D-A78D-9A2306144B11": "2025-10-06 08:11:06",
"253402B1-6356-4131-B1CD-F4F3B6D2B03C": "2025-10-06 08:11:06",
"2830B57A-D6C7-4C7A-873E-AD2365CDF2BF": "2025-10-06 08:11:06",
"2F510DC1-4B62-4128-956E-A73D253CC9CB": "2025-10-06 08:11:06",
"3ECE63C1-AE51-4414-9064-B4FF1E0A9017": "2025-10-06 08:11:06",
"421BA874-F903-4965-9B82-D60F3BA3CAE0": "2025-10-06 08:11:06",
"454A759B-FF5B-4A79-80D3-1CF15EBA0908": "2025-10-06 08:11:06",
"579FC437-D398-411C-A6C5-D01FD4523B94": "2025-10-06 08:11:06",
"5E19CC61-8994-4797-BDC7-C21263F6282B": "2025-10-06 08:11:06",
"64293252-5926-453C-9494-2D4021F1C78D": "2025-10-06 08:11:06",
"64A79953-CF0B-44F9-B5C4-EE5DF3A15C63": "2025-10-06 08:11:06",
"64B22DF1-5A9C-4C88-AA1F-42CEFAF8B281": "2025-10-06 08:11:06",
"65B58C5C-5C7E-4B72-9D9F-9BDD15C506B3": "2025-10-06 08:11:06",
"6C3C7EF3-20FC-43A8-8CE2-1A89F35A1476": "2025-10-06 08:11:06",
"733893B8-533D-4292-BF27-23D218B39A95": "2025-10-06 08:11:06",
"793324A6-D078-4B96-9D4E-847113119E61": "2025-10-06 08:11:06",
"7CE6966C-0C33-4851-8958-285ABBA4D7CC": "2025-10-06 08:11:06",
"7F354D0E-A913-4AA0-815D-3FA9FBFF2BD8": "2025-10-06 08:11:06",
"86A75D59-8166-4E92-9F46-F3B39784ADA3": "2025-10-06 08:11:06",
"8D8DA3C7-FA5E-4A5C-8E87-92F77596BC5A": "2025-10-06 08:11:06",
"9607E6E2-46A5-4A17-AFCA-908FFC36D70B": "2025-10-06 08:11:10",
"9D523EC0-098C-4E19-9109-B08DC9C3829A": "2025-10-06 08:12:43",
"9DB724C9-966D-4AEB-9D3B-D6B2C77F3DE3": "2025-10-06 08:11:06",
"9F03273F-FE0B-4ED8-9BC8-C2F256375490": "2025-10-06 08:11:06",
"A72BAE09-DDA2-4B20-9A9F-D21BE62809DC": "2025-10-06 08:11:06",
"AF714B9A-BDCC-496C-8631-0853232DBEE9": "2025-10-06 08:11:06",
"B4F3025D-A236-44B0-8D4C-849BED549259": "2025-10-06 08:11:06",
"B7757AF6-9E6D-4D21-8272-C9137A2E9145": "2025-10-06 08:11:06",
"B90F3A9A-C043-41A7-A774-E51F6069283B": "2025-10-06 08:11:06",
"B99AEF9A-1685-4798-B4B1-3D94EE6D7184": "2025-10-06 08:11:06",
"BE437D05-6D78-42B6-9BC1-D38C6DE4A43D": "2025-10-06 08:11:06",
"C9EEB20E-619B-4923-85E1-6017FE8F14A9": "2025-10-06 08:11:06",
"CD5D53B1-33F7-4A95-B111-F51F187C7130": "2025-10-06 08:11:06",
"CFC4A10E-0356-451D-BB3E-C4FE5EDFD20C": "2025-10-06 08:11:06",
"D63C16B5-90E0-4DF5-83AE-8CA6F53997D5": "2025-10-06 08:12:11",
"DE4F0463-7DB2-48EE-959C-70E02541F4E6": "2025-10-06 08:11:06",
"E632FE90-A5BA-43AA-BF81-9DE8413E83D8": "2025-10-06 08:11:06",
"EAAC6C6B-10A4-4659-815B-44F151ECA61A": "2025-10-06 08:12:43",
"EB8C95FE-7294-45C1-8768-73CC6A769307": "2025-10-06 08:11:06",
"F022389F-F3A6-417E-AD23-704FBDF57117": "2025-10-06 08:11:06",
"F4CCC4C1-6E9A-49A0-8F19-46F1717C7BA3": "2025-10-06 08:11:06",
"F855810C-9F77-45FF-A0F5-CD0FEAA945C6": "2025-10-06 08:11:06"
},
"8B24B027-1DEE-BABB-9A95-3517DFB9C552": {},
"9482F4B4-E343-43B6-B170-9A65BC822C77": {}
}
},
"WindowsUpdate": {}
}
},
"Timestamp": 1759759848501.275,
"UserID": "DESKTOP-IDDQD\\Alice"
}
5. Автозапуск
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 399,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "6f45eaf9-193c-434e-a0d9-d518da92cc0b",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"registry_autorun": {
"WOW64_32": {
"HKEY_CURRENT_USER": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": [
{
"id": "2",
"name": "YandexBrowserAutoLaunch_1AF074DE8A243FEDDA96B3150ADC2FA1",
"value": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --shutdown-if-not-closed-by-system-restart"
},
{
"id": "3",
"name": "OneDrive",
"value": "\"C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe\" /background"
}
],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": [],
"keys": []
},
"HKEY_LOCAL_MACHINE": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": [],
"keys": [
{
"id": "1",
"path": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Shell",
"value": "explorer.exe"
},
{
"id": "",
"path": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\AppInit_DLLs",
"value": ""
}
]
}
},
"WOW64_64": {
"HKEY_CURRENT_USER": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": [
{
"id": "2",
"name": "YandexBrowserAutoLaunch_1AF074DE8A243FEDDA96B3150ADC2FA1",
"value": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --shutdown-if-not-closed-by-system-restart"
},
{
"id": "3",
"name": "OneDrive",
"value": "\"C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe\" /background"
}
],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": [],
"keys": []
},
"HKEY_LOCAL_MACHINE": {
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run": [
{
"id": "5",
"name": "SecurityHealth",
"value": "C:\\WINDOWS\\system32\\SecurityHealthSystray.exe"
}
],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\Setup": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServicesOnce": [],
"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer\\Run": [],
"keys": [
{
"id": "1",
"path": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Shell",
"value": "explorer.exe"
},
{
"id": "4",
"path": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Userinit",
"value": "C:\\Windows\\system32\\userinit.exe,"
},
{
"id": "",
"path": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\AppInit_DLLs",
"value": ""
}
]
}
}
}
},
"Timestamp": 1759759848503.878,
"UserID": "DESKTOP-IDDQD\\Alice"
}
6. Файлы браузера
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 400,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "32246abb-b2ce-4c94-95eb-8230396f6b59",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"browser_files": [
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "Yandex",
"file_version": "25.8.4.834",
"internal_name": "yandexbrowser_exe",
"original_filename": "browser.exe",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "a6650b6334acea91c67420a5201c21d4bdd611a96e24b0b115952844b771ae77",
"size": "5694608",
"special_build": ""
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\cs.pak",
"sha256": "66c73411f9d09349b7c782feac6202db5d609e449c48286304f0a9af24e03f8a",
"size": "486920"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\de.pak",
"sha256": "46ebcd134ff8b6988167a595623c16b638860887341d04e7cd2debb3170df52d",
"size": "508502"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\en-US.pak",
"sha256": "13cc5b5b92482d05e5cbd1acbddacb49488ae2b7c4e66cb18e64c9b7977b6445",
"size": "410907"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\es.pak",
"sha256": "8a71f63ded488095d55118695bf34199724df4088d29ec406542329a73c65373",
"size": "492385"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\fr.pak",
"sha256": "2fc463751f6712ed47f0aa9313ec41e2886fb87e0694f867417d77268e9e212f",
"size": "528220"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\it.pak",
"sha256": "f91d5ac1681d0d25f15c3eb65993711e918c8c20cca1dd6fe2497f95766926ce",
"size": "485500"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\ja.pak",
"sha256": "349116c5923c14bdb08713b900ff99c09815c80a54e28e05a665cd135ec693e4",
"size": "584031"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\kk.pak",
"sha256": "ef021675b86daa0e5d0e7446f39f0b77e60d07627c9ce0b5965416491b49e5ed",
"size": "751569"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\pt-BR.pak",
"sha256": "2dbe5723bbfc8008304e0d482dd79971c5e5974da7ce766f10c73d3b952f8133",
"size": "484313"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\pt-PT.pak",
"sha256": "4b09aca571d08cd168d96b1f99f35658e63c87a1f9bc2ece8ac48a163492da0b",
"size": "484940"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\ru.pak",
"sha256": "d8586c1b1d8e6fc9043f357220ddefc309afa363c7123a803da323562931c165",
"size": "778621"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\tr.pak",
"sha256": "bdc903f57b1622d51e55b2b2d2b9e11361a0d686edfd9c0886b721a13e9687cb",
"size": "479301"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\uk.pak",
"sha256": "e5196419a6730931be1a78ba12381e052918f3f0c9b6d5b235b84fdb81eb3389",
"size": "785876"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\uz.pak",
"sha256": "15004fde89489e557ced54874cf7f4e48ac99155325ea07432c50aa0f46dc6ed",
"size": "477107"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\zh-CN.pak",
"sha256": "d58fb9d691fe8ce2348ec49c582aef4bb909ccfd17c205a09637774c5c6a6dab",
"size": "401896"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\Locales\\zh-TW.pak",
"sha256": "cff02e7059185826c2fca6b6aba4d46aab4d593b20529836ce3cd17b3827ba51",
"size": "404330"
},
{
"CN": "YANDEX LLC",
"company_name": "Igor Pavlov",
"company_short_name": "",
"file_description": "7z Plugin",
"file_version": "19.00",
"internal_name": "7z",
"original_filename": "7z.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\7z.dll",
"product_chromium_version": "",
"product_name": "7-Zip",
"product_short_name": "",
"product_version": "19.00",
"product_yandex_version": "",
"sha256": "bbedb8111bd30319d6d907c0565821f5abcc437a7a5d45fedfc449f0932f45a9",
"size": "2088080",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\abt-bindings.dll",
"sha256": "9431e2533e6180f2f1597e19dea09d9574a6cd92f2c2d881cdae9853fbb2f607",
"size": "4039824"
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\brodef.dll",
"sha256": "d5a3e9bc41b1c5090380880daa9f615b5337b6778d322fe15b64a85cf03dd5b0",
"size": "2453136"
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "chrome_dll",
"original_filename": "browser.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\browser.dll",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "c25e9094b434e36e5a7eb11a23ade63091d8e1a6d56dc42fb04801c7b96b33cd",
"size": "275966608",
"special_build": ""
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\browser_100_percent.pak",
"sha256": "2ad3a09a965642d7dc9d385b342f60eb3f69a5b856b09c4ef9689b92ebafc432",
"size": "6115174"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\browser_200_percent.pak",
"sha256": "104856b77914948e84708205be0e29ced949d2ec14ec11d4ed0ae0d276c6ac90",
"size": "18839831"
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "chrome_elf_dll",
"original_filename": "chrome_elf.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\browser_elf.dll",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "2ec3a0603e92b31bfe54db380430dfcc6cf902239bdc433363877646b090495c",
"size": "3068048",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "chrome_wer_dll",
"original_filename": "browser_wer.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\browser_wer.dll",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "c37361a11a5fc1204b41377e1cfb4b81f793f9e72e7570e108c656bc36b9995e",
"size": "126096",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\cspeechkit.dll",
"sha256": "029ddef4abe7ba95477508a8aa9f06d88c48cf725cfaa3985f0c76fef053fe5c",
"size": "12328080"
},
{
"CN": "Microsoft Corporation",
"company_name": "Microsoft Corporation",
"company_short_name": "",
"file_description": "Direct3D HLSL Compiler for Redistribution",
"file_version": "10.0.22621.2428 (WinBuild.160101.0800)",
"internal_name": "d3dcompiler_47.dll",
"original_filename": "d3dcompiler_47.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\d3dcompiler_47.dll",
"product_chromium_version": "",
"product_name": "Microsoft® Windows® Operating System",
"product_short_name": "",
"product_version": "10.0.22621.2428",
"product_yandex_version": "",
"sha256": "289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2",
"size": "4916728",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\dssm.dll",
"sha256": "77c82ee63b47e2ac4775e807b44f9704f2db6a0f13fb5aacb83c47c5f1f7a40a",
"size": "11210896"
},
{
"CN": "YANDEX LLC",
"company_name": "Microsoft(r) Corporation",
"company_short_name": "",
"file_description": "DirectX Compiler - Google Dawn Custom Build",
"file_version": "1.8.2505.0",
"internal_name": " ",
"original_filename": " ",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\dxcompiler.dll",
"product_chromium_version": "",
"product_name": "Microsoft(r) DirectX for Windows(r) - Google Dawn Custom Build",
"product_short_name": "",
"product_version": "1.8.2505.0",
"product_yandex_version": "",
"sha256": "546128de4f79e3b3e8bbd93f38937f12aacf4b2802a2c4df62709bdff563e681",
"size": "25861264",
"special_build": ""
},
{
"CN": "Microsoft Corporation",
"company_name": "Microsoft(r) Corporation",
"company_short_name": "",
"file_description": "DirectX IL for Redistribution",
"file_version": "101.7.2308.24",
"internal_name": "DirectX IL for Redistribution",
"original_filename": "dxil.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\dxil.dll",
"product_chromium_version": "",
"product_name": "",
"product_short_name": "",
"product_version": "101.7.2308.24 (release/github-release-1.7.2308, ShaderCompiler.dxcbin.0.231001.0+01e0098ba93c6973e72b7fa37b8ff7f019e383f7-101.7.2308.24.github-release-1.7.2308)",
"product_yandex_version": "",
"sha256": "473f5e853120a5b6ca583ac51f453664abae15c0db1d307f29c8bf7a7b89f96c",
"size": "1502800",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "eventlog_provider_dll",
"original_filename": "eventlog_provider.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\eventlog_provider.dll",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "2d7724eeab88e98b11dfffc44f92811c357c25bbfb1a1bd00c029706f66db97a",
"size": "21136",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "",
"company_short_name": "",
"file_description": "ANGLE libEGL Dynamic Link Library",
"file_version": "2.1 git hash: unknown hash",
"internal_name": "libEGL",
"original_filename": "libEGL.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\libEGL.dll",
"product_chromium_version": "",
"product_name": "ANGLE libEGL Dynamic Link Library",
"product_short_name": "",
"product_version": "2.1 git hash: unknown hash",
"product_yandex_version": "",
"sha256": "6732789049ad2ac67b62dc476bb2c8260168442e290b506d06a8141cbd0f4eb1",
"size": "513168",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "",
"company_short_name": "",
"file_description": "ANGLE libGLESv2 Dynamic Link Library",
"file_version": "2.1 git hash: unknown hash",
"internal_name": "libGLESv2",
"original_filename": "libGLESv2.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\libGLESv2.dll",
"product_chromium_version": "",
"product_name": "ANGLE libGLESv2 Dynamic Link Library",
"product_short_name": "",
"product_version": "2.1 git hash: unknown hash",
"product_yandex_version": "",
"sha256": "434d0ce9ce23ea2a0f0c8afe602468823979e6304c6fc93c0ff07fe528ff298e",
"size": "7940240",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "notification_helper_exe",
"original_filename": "notification_helper.exe",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\notification_helper.exe",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "2980f060418fff541467f2461f27895b62cf3d6c4ee1c8c463b7c5918736fe55",
"size": "3073680",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\offline_spellchecker.dll",
"sha256": "526636095b77bbb68ece4171dd5cbe75b289993f117a8d8f6c80c0afae02bd27",
"size": "6344336"
},
{
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\resources.pak",
"sha256": "0a3a6ccad03ba9efb00bdb6d01992e75a257c1c62a969e4293b7bcd66e6f8b4a",
"size": "18795349"
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "Yandex",
"file_version": "25.8.4.834",
"internal_name": "@INTERNAL_NAME@",
"original_filename": "",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\service_update.exe",
"product_chromium_version": "",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "80dddafdf3f8607d0617c0147e310e76e02bddf4676c1dabc04ee6491db769d8",
"size": "4277392",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "Yandex LLC",
"company_short_name": "",
"file_description": "Voice assistant",
"file_version": "5.7.1.1935",
"internal_name": "winsearchbar",
"original_filename": "",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\speechkit_action_lib64.dll",
"product_chromium_version": "",
"product_name": "Voice assistant",
"product_short_name": "",
"product_version": "5.7.1.1935",
"product_yandex_version": "",
"sha256": "8d11af1aa14db9e30aad09cea0761e6c288a0a171a04b2353836e9366af3c2e2",
"size": "3108248",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\textclassifier.dll",
"sha256": "7f56fa39fd1dffe311200ff665b13d15721de38cb25edeb84bad0cd5b17cd9b7",
"size": "8950928"
},
{
"CN": "YANDEX LLC",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\unpacki.dll",
"sha256": "51ef87559ab5fa2e272f9baec492aed4aeaba77b3a9999986c7a91363d12b6de",
"size": "962704"
},
{
"CN": "YANDEX LLC",
"company_name": "",
"company_short_name": "",
"file_description": "SwiftShader Vulkan 64-bit Dynamic Link Library",
"file_version": "5.0.0",
"internal_name": "Vulkan",
"original_filename": "vk_swiftshader.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\vk_swiftshader.dll",
"product_chromium_version": "",
"product_name": "SwiftShader Vulkan Dynamic Link Library",
"product_short_name": "",
"product_version": "5.0.0",
"product_yandex_version": "",
"sha256": "af27607685dfb1b7d27bbe7b3b388d5c25009ca7869170c8b5be027ec933936e",
"size": "5350032",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "",
"company_short_name": "",
"file_description": "1.4.315.0",
"file_version": "Vulkan Loader",
"internal_name": "",
"original_filename": "",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\vulkan-1.dll",
"product_chromium_version": "",
"product_name": "Vulkan Runtime",
"product_short_name": "",
"product_version": "Vulkan Loader",
"product_yandex_version": "",
"sha256": "59399c26cf08ebf3745d4602062319941a2833c0b8870a2be8fed61d78658ed2",
"size": "911504",
"special_build": ""
},
{
"CN": "YANDEX LLC",
"company_name": "YANDEX LLC",
"company_short_name": "YANDEX LLC",
"file_description": "@PRODUCT_FILE_DESCRIPTION@",
"file_version": "25.8.4.834",
"internal_name": "winrt_helper_dll",
"original_filename": "winrt_helper.dll",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\25.8.4.834\\winrt_helper.dll",
"product_chromium_version": "138.0.7204.251",
"product_name": "Yandex",
"product_short_name": "Yandex",
"product_version": "25.8.4.834",
"product_yandex_version": "25.8.4.834",
"sha256": "2b51cd26d858b4a8896a24ca469a5c99606304dff8c9cf0f631755dcceb347e2",
"size": "866960",
"special_build": ""
}
]
},
"Timestamp": 1759759848506.43,
"UserID": "DESKTOP-IDDQD\\Alice"
}
7. Дефолтный браузер
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 401,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "0b8e08af-0bcf-4a11-b56d-6d72acc3ef3b",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"installed_browsers": []
},
"Timestamp": 1759759848509.09,
"UserID": "DESKTOP-IDDQD\\Alice"
}
8. Атрибуты файла
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 402,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "a1897d4b-a1c2-4408-a13e-d1a2e0d85bdb",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"file_features": {
"files": {
"1": {
"file": "C:\\WINDOWS\\explorer.exe",
"spf": 1
},
"2": {
"cn": 2,
"file": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"sa": 32,
"sha": "A6650B6334ACEA91C67420A5201C21D4BDD611A96E24B0B115952844B771AE77",
"sz": 5694608,
"wt": 1759516770
},
"3": {
"cn": 1,
"file": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe"
},
"4": {
"file": "C:\\Windows\\system32\\userinit.exe",
"spf": 1
},
"5": {
"file": "C:\\WINDOWS\\system32\\SecurityHealthSystray.exe",
"spf": 1
},
"6": {
"file": "C:\\WINDOWS\\system32\\appidpolicyconverter.exe",
"spf": 1
},
"7": {
"file": "C:\\WINDOWS\\system32\\appidcertstorecheck.exe",
"spf": 1
},
"8": {
"file": "C:\\WINDOWS\\system32\\compattelrunner.exe",
"spf": 1
},
"9": {
"file": "-m:aeinv.dll",
"gen_err": 2
},
"10": {
"file": "-m:appraiser.dll",
"gen_err": 2
},
"11": {
"file": "-m:aemarebackup.dll",
"gen_err": 2
},
"12": {
"file": "C:\\WINDOWS\\system32\\rundll32.exe",
"spf": 1
},
"13": {
"file": "C:\\WINDOWS\\system32\\PcaSvc.dll",
"spf": 1
},
"14": {
"file": "Startupscan.dll",
"spf": 1
},
"15": {
"file": "C:\\WINDOWS\\system32\\AppHostRegistrationVerifier.exe",
"spf": 1
},
"16": {
"file": "Windows.Storage.ApplicationData.dll",
"spf": 1
},
"17": {
"file": "C:\\WINDOWS\\system32\\dstokenclean.exe",
"spf": 1
},
"18": {
"file": "C:\\WINDOWS\\system32\\AppxDeploymentClient.dll",
"spf": 1
},
"19": {
"file": "/d acproxy.dll",
"gen_err": 2
},
"20": {
"file": "BthUdTask.exe",
"spf": 1
},
"21": {
"file": "C:\\WINDOWS\\system32\\bcdboot.exe",
"spf": 1
},
"22": {
"file": "C:\\WINDOWS\\system32\\ClipESUConsumer.exe",
"spf": 1
},
"23": {
"file": "C:\\WINDOWS\\System32\\wsqmcons.exe",
"spf": 1
},
"24": {
"file": "C:\\WINDOWS\\system32\\defrag.exe",
"spf": 1
},
"25": {
"file": "C:\\WINDOWS\\system32\\devicecensus.exe",
"spf": 1
},
"26": {
"file": "C:\\WINDOWS\\system32\\directxdatabaseupdater.exe",
"spf": 1
},
"27": {
"file": "C:\\WINDOWS\\system32\\dxgiadaptercache.exe",
"spf": 1
},
"28": {
"file": "C:\\WINDOWS\\system32\\cleanmgr.exe",
"spf": 1
},
"29": {
"file": "dfdts.dll",
"spf": 1
},
"30": {
"file": "C:\\WINDOWS\\system32\\DFDWiz.exe",
"spf": 1
},
"31": {
"file": "C:\\WINDOWS\\system32\\disksnapshot.exe",
"spf": 1
},
"32": {
"file": "C:\\WINDOWS\\System32\\dusmtask.exe",
"spf": 1
},
"33": {
"file": "C:\\WINDOWS\\system32\\dmclient.exe",
"spf": 1
},
"34": {
"file": "C:\\WINDOWS\\System32\\LocationNotificationWindows.exe",
"spf": 1
},
"35": {
"file": "C:\\WINDOWS\\System32\\WindowsActionDialog.exe",
"spf": 1
},
"36": {
"file": "C:\\WINDOWS\\system32\\ProvTool.exe",
"spf": 1
},
"37": {
"file": "C:\\WINDOWS\\System32\\MbaeParserTask.exe",
"spf": 1
},
"38": {
"file": "C:\\WINDOWS\\system32\\lpremove.exe",
"spf": 1
},
"39": {
"file": "C:\\WINDOWS\\system32\\gatherNetworkInfo.vbs",
"spf": 1
},
"40": {
"file": "C:\\WINDOWS\\System32\\WiFiTask.exe",
"spf": 1
},
"41": {
"file": "C:\\WINDOWS\\System32\\drvinst.exe",
"spf": 1
},
"42": {
"file": "C:\\WINDOWS\\system32\\eduprintprov.exe",
"spf": 1
},
"43": {
"file": "C:\\WINDOWS\\System32\\rundll32.exe",
"spf": 1
},
"44": {
"file": "C:\\WINDOWS\\System32\\Windows.SharedPC.AccountManager.dll",
"spf": 1
},
"45": {
"file": "C:\\WINDOWS\\System32\\wpcmon.exe",
"spf": 1
},
"46": {
"file": "C:\\WINDOWS\\system32\\SpaceAgent.exe",
"spf": 1
},
"47": {
"file": "C:\\WINDOWS\\system32\\spaceman.exe",
"spf": 1
},
"48": {
"file": "C:\\WINDOWS\\system32\\speech_onecore\\common\\SpeechRuntime.exe",
"spf": 1
},
"49": {
"file": "C:\\WINDOWS\\system32\\Windows.StateRepositoryClient.dll",
"spf": 1
},
"50": {
"file": "C:\\WINDOWS\\system32\\ClipRenew.exe",
"spf": 1
},
"51": {
"file": "sysmain.dll",
"spf": 1
},
"52": {
"file": "C:\\WINDOWS\\system32\\srtasks.exe",
"spf": 1
},
"53": {
"file": "C:\\WINDOWS\\system32\\sc.exe",
"spf": 1
},
"54": {
"file": "C:\\WINDOWS\\system32\\tzsync.exe",
"spf": 1
},
"55": {
"file": "C:\\WINDOWS\\System32\\UNP\\UpdateNotificationMgr.exe",
"spf": 1
},
"56": {
"file": "sc.exe",
"spf": 1
},
"57": {
"cn": 4,
"file": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpCmdRun.exe"
},
"58": {
"file": "C:\\WINDOWS\\system32\\wermgr.exe",
"spf": 1
},
"59": {
"file": "bfe.dll",
"spf": 1
},
"60": {
"file": "C:\\Program Files\\Windows Media Player\\wmpnscfg.exe",
"spf": 1
},
"61": {
"file": "C:\\WINDOWS\\System32\\dsregcmd.exe",
"spf": 1
},
"62": {
"file": "C:\\WINDOWS\\System32\\XblGameSaveTask.exe",
"spf": 1
},
"63": {
"cn": 1,
"file": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe"
},
"64": {
"cn": 1,
"file": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\OneDriveLauncher.exe"
},
"65": {
"file": "C:\\WINDOWS\\system32\\mswsock.dll",
"spf": 1
},
"66": {
"file": "C:\\WINDOWS\\System32\\winrnr.dll",
"spf": 1
},
"67": {
"file": "C:\\WINDOWS\\System32\\mswsock.dll",
"spf": 1
},
"68": {
"file": "C:\\WINDOWS\\system32\\NLAapi.dll",
"spf": 1
},
"69": {
"file": "C:\\WINDOWS\\system32\\wshbth.dll",
"spf": 1
},
"70": {
"file": "C:\\WINDOWS\\system32\\pnrpnsp.dll",
"spf": 1
},
"71": {
"file": "C:\\WINDOWS\\system32\\napinsp.dll",
"spf": 1
},
"72": {
"file": "C:\\WINDOWS\\System32\\svchost.exe",
"spf": 1
},
"73": {
"file": "C:\\WINDOWS\\System32\\drivers\\bridge.sys",
"spf": 1
},
"74": {
"file": "C:\\WINDOWS\\system32\\drivers\\mslldp.sys",
"spf": 1
},
"75": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\nwifi.sys",
"spf": 1
},
"76": {
"file": "C:\\WINDOWS\\System32\\drivers\\ndiscap.sys",
"spf": 1
},
"77": {
"file": "C:\\WINDOWS\\System32\\drivers\\NdisImPlatform.sys",
"spf": 1
},
"78": {
"file": "C:\\WINDOWS\\System32\\drivers\\ndiswan.sys",
"spf": 1
},
"79": {
"file": "C:\\WINDOWS\\system32\\drivers\\ndisuio.sys",
"spf": 1
},
"80": {
"file": "C:\\WINDOWS\\system32\\drivers\\netbios.sys",
"spf": 1
},
"81": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\netbt.sys",
"spf": 1
},
"82": {
"file": "C:\\WINDOWS\\System32\\drivers\\pacer.sys",
"spf": 1
},
"83": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\raspppoe.sys",
"spf": 1
},
"84": {
"file": "C:\\WINDOWS\\System32\\drivers\\tcpip.sys",
"spf": 1
},
"85": {
"file": "C:\\WINDOWS\\System32\\drivers\\wfplwfs.sys",
"spf": 1
},
"86": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\xboxgip.sys"
},
"87": {
"file": "C:\\WINDOWS\\system32\\drivers\\lltdio.sys",
"spf": 1
},
"88": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\ndiswan.sys",
"spf": 1
},
"89": {
"file": "C:\\WINDOWS\\system32\\drivers\\rspndr.sys",
"spf": 1
},
"90": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\wanarp.sys",
"spf": 1
},
"91": {
"cn": 2,
"file": "C:\\Program Files (x86)\\Yandex\\YandexBrowser\\25.8.4.834\\service_update.exe",
"sa": 32,
"sha": "80DDDAFDF3F8607D0617C0147E310E76E02BDDF4676C1DABC04EE6491DB769D8",
"sz": 4277392,
"wt": 1759737574
},
"92": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\xinputhid.sys"
},
"93": {
"file": "C:\\WINDOWS\\system32\\svchost.exe",
"spf": 1
},
"94": {
"file": "C:\\WINDOWS\\system32\\XboxNetApiSvc.dll",
"spf": 1
},
"95": {
"file": "C:\\WINDOWS\\System32\\XboxGipSvc.dll",
"spf": 1
},
"96": {
"file": "C:\\WINDOWS\\System32\\XblGameSave.dll",
"spf": 1
},
"97": {
"file": "C:\\WINDOWS\\System32\\XblAuthManager.dll",
"spf": 1
},
"98": {
"file": "C:\\WINDOWS\\System32\\wwansvc.dll",
"spf": 1
},
"99": {
"file": "C:\\WINDOWS\\System32\\drivers\\WUDFRd.sys",
"spf": 1
},
"100": {
"file": "C:\\WINDOWS\\system32\\drivers\\WudfPf.sys",
"spf": 1
},
"101": {
"file": "C:\\WINDOWS\\system32\\wuaueng.dll",
"spf": 1
},
"102": {
"file": "C:\\WINDOWS\\system32\\SearchIndexer.exe",
"spf": 1
},
"103": {
"file": "C:\\WINDOWS\\System32\\wscsvc.dll",
"spf": 1
},
"104": {
"file": "C:\\WINDOWS\\system32\\drivers\\ws2ifsl.sys",
"spf": 1
},
"105": {
"file": "C:\\WINDOWS\\System32\\WpnUserService.dll",
"spf": 1
},
"106": {
"file": "C:\\WINDOWS\\system32\\WpnService.dll",
"spf": 1
},
"107": {
"file": "C:\\WINDOWS\\System32\\drivers\\WpdUpFltr.sys",
"spf": 1
},
"108": {
"file": "C:\\WINDOWS\\system32\\wpdbusenum.dll",
"spf": 1
},
"109": {
"file": "C:\\WINDOWS\\System32\\WpcDesktopMonSvc.dll",
"spf": 1
},
"110": {
"file": "C:\\WINDOWS\\system32\\workfolderssvc.dll",
"spf": 1
},
"111": {
"file": "C:\\Program Files\\Windows Media Player\\wmpnetwk.exe",
"spf": 1
},
"112": {
"file": "C:\\WINDOWS\\system32\\wbem\\WmiApSrv.exe",
"spf": 1
},
"113": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\wmiacpi.sys"
},
"114": {
"file": "C:\\WINDOWS\\system32\\Windows.Management.Service.dll",
"spf": 1
},
"115": {
"file": "C:\\WINDOWS\\System32\\lpasvc.dll",
"spf": 1
},
"116": {
"file": "C:\\WINDOWS\\system32\\wlidsvc.dll",
"spf": 1
},
"117": {
"file": "C:\\WINDOWS\\System32\\wlansvc.dll",
"spf": 1
},
"118": {
"file": "C:\\WINDOWS\\system32\\flightsettings.dll",
"spf": 1
},
"119": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\winverbs.sys"
},
"120": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\WinUSB.SYS"
},
"121": {
"file": "C:\\WINDOWS\\system32\\WsmSvc.dll",
"spf": 1
},
"122": {
"file": "C:\\WINDOWS\\system32\\drivers\\winnat.sys",
"spf": 1
},
"123": {
"file": "C:\\WINDOWS\\system32\\wbem\\WMIsvc.dll",
"spf": 1
},
"124": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\winmad.sys"
},
"125": {
"file": "C:\\WINDOWS\\system32\\winhttp.dll",
"spf": 1
},
"126": {
"cn": 5,
"file": "C:\\WINDOWS\\System32\\drivers\\WindowsTrustedRTProxy.sys"
},
"127": {
"file": "C:\\WINDOWS\\system32\\drivers\\WindowsTrustedRT.sys",
"spf": 1
},
"128": {
"cn": 4,
"file": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MsMpEng.exe"
},
"129": {
"file": "C:\\WINDOWS\\system32\\drivers\\wimmount.sys",
"spf": 1
},
"130": {
"file": "C:\\WINDOWS\\System32\\wiarpc.dll",
"spf": 1
},
"131": {
"file": "C:\\WINDOWS\\System32\\wfdsconmgrsvc.dll",
"spf": 1
},
"132": {
"file": "C:\\WINDOWS\\System32\\WerSvc.dll",
"spf": 1
},
"133": {
"file": "C:\\WINDOWS\\System32\\wercplsupport.dll",
"spf": 1
},
"134": {
"file": "C:\\WINDOWS\\system32\\wephostsvc.dll",
"spf": 1
},
"135": {
"file": "C:\\WINDOWS\\system32\\wecsvc.dll",
"spf": 1
},
"136": {
"file": "C:\\WINDOWS\\System32\\webclnt.dll",
"spf": 1
},
"137": {
"cn": 4,
"file": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\NisSrv.exe"
},
"138": {
"cn": 3,
"file": "C:\\WINDOWS\\system32\\drivers\\wd\\WdNisDrv.sys"
},
"139": {
"file": "C:\\WINDOWS\\system32\\drivers\\WdmCompanionFilter.sys",
"spf": 1
},
"140": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\wdiwifi.sys",
"spf": 1
},
"141": {
"file": "C:\\WINDOWS\\system32\\wdi.dll",
"spf": 1
},
"142": {
"cn": 3,
"file": "C:\\WINDOWS\\system32\\drivers\\wd\\WdFilter.sys"
},
"143": {
"file": "C:\\WINDOWS\\system32\\drivers\\Wdf01000.sys",
"spf": 1
},
"144": {
"cn": 7,
"file": "C:\\WINDOWS\\system32\\drivers\\wd\\WdBoot.sys"
},
"145": {
"file": "C:\\WINDOWS\\system32\\drivers\\wcnfs.sys",
"spf": 1
},
"146": {
"file": "C:\\WINDOWS\\System32\\wcncsvc.dll",
"spf": 1
},
"147": {
"file": "C:\\WINDOWS\\System32\\wcmsvc.dll",
"spf": 1
},
"148": {
"file": "C:\\WINDOWS\\system32\\drivers\\wcifs.sys",
"spf": 1
},
"149": {
"file": "C:\\WINDOWS\\System32\\wbiosrvc.dll",
"spf": 1
},
"150": {
"file": "C:\\WINDOWS\\system32\\wbengine.exe",
"spf": 1
},
"151": {
"file": "C:\\WINDOWS\\System32\\Windows.WARP.JITService.dll",
"spf": 1
},
"152": {
"file": "C:\\WINDOWS\\system32\\WalletService.dll",
"spf": 1
},
"153": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\wacompen.sys"
},
"154": {
"file": "C:\\WINDOWS\\System32\\WaaSMedicSvc.dll",
"spf": 1
},
"155": {
"file": "C:\\WINDOWS\\system32\\w32time.dll",
"spf": 1
},
"156": {
"file": "C:\\WINDOWS\\System32\\drivers\\vwififlt.sys",
"spf": 1
},
"157": {
"file": "C:\\WINDOWS\\System32\\drivers\\vwifibus.sys",
"spf": 1
},
"158": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vstxraid.sys"
},
"159": {
"file": "C:\\WINDOWS\\system32\\vssvc.exe",
"spf": 1
},
"160": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vsmraid.sys"
},
"161": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vpci.sys"
},
"162": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\volume.sys"
},
"163": {
"file": "C:\\WINDOWS\\System32\\drivers\\volsnap.sys",
"spf": 1
},
"164": {
"file": "C:\\WINDOWS\\System32\\drivers\\volmgrx.sys",
"spf": 1
},
"165": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\volmgr.sys"
},
"166": {
"file": "C:\\WINDOWS\\System32\\icsvcext.dll",
"spf": 1
},
"167": {
"file": "C:\\WINDOWS\\System32\\icsvc.dll",
"spf": 1
},
"168": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vmgid.sys"
},
"169": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\VMBusHID.sys"
},
"170": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vmbus.sys"
},
"171": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\vrd.inf_amd64_81fbd405ff2470fc\\vrd.sys"
},
"172": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\Vid.sys"
},
"173": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vhf.sys"
},
"174": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vhdmp.sys"
},
"175": {
"file": "C:\\WINDOWS\\System32\\drivers\\VerifierExt.sys",
"spf": 1
},
"176": {
"file": "C:\\WINDOWS\\System32\\vds.exe",
"spf": 1
},
"177": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vdrvroot.sys"
},
"178": {
"file": "C:\\WINDOWS\\system32\\lsass.exe",
"spf": 1
},
"179": {
"file": "C:\\Windows\\System32\\vaultsvc.dll",
"spf": 1
},
"180": {
"file": "C:\\WINDOWS\\System32\\vac.dll",
"spf": 1
},
"181": {
"file": "C:\\WINDOWS\\system32\\usosvc.dll",
"spf": 1
},
"182": {
"file": "C:\\WINDOWS\\System32\\usermgr.dll",
"spf": 1
},
"183": {
"file": "C:\\WINDOWS\\System32\\userdataservice.dll",
"spf": 1
},
"184": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\USBXHCI.SYS"
},
"185": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbuhci.sys"
},
"186": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\USBSTOR.SYS"
},
"187": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbser.sys"
},
"188": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbprint.sys"
},
"189": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbohci.sys"
},
"190": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\UsbHub3.sys"
},
"191": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbhub.sys"
},
"192": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbehci.sys"
},
"193": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbcir.sys"
},
"194": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbccgp.sys"
},
"195": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\usbaudio2.sys"
},
"196": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\system32\\drivers\\usbaudio.sys"
},
"197": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\urssynopsys.inf_amd64_057fa37902020500\\urssynopsys.sys"
},
"198": {
"file": "C:\\WINDOWS\\system32\\drivers\\urscx01000.sys",
"spf": 1
},
"199": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\urschipidea.inf_amd64_78ad1c14e33df968\\urschipidea.sys"
},
"200": {
"file": "C:\\WINDOWS\\System32\\upnphost.dll",
"spf": 1
},
"201": {
"file": "C:\\WINDOWS\\System32\\unistore.dll",
"spf": 1
},
"202": {
"file": "C:\\WINDOWS\\System32\\umrdp.dll",
"spf": 1
},
"203": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\umpass.sys"
},
"204": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\umbus.inf_amd64_b78a9c5b6fd62c27\\umbus.sys"
},
"205": {
"cn": 3,
"file": "C:\\Program Files\\Microsoft Update Health Tools\\uhssvc.exe"
},
"206": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ufxsynopsys.sys"
},
"207": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\ufxchipidea.inf_amd64_1c78775fffab6a0a\\UfxChipidea.sys"
},
"208": {
"file": "C:\\WINDOWS\\system32\\drivers\\ufx01000.sys",
"spf": 1
},
"209": {
"file": "C:\\WINDOWS\\system32\\AgentService.exe",
"spf": 1
},
"210": {
"file": "C:\\WINDOWS\\system32\\drivers\\UevAgentDriver.sys",
"spf": 1
},
"211": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\uefi.inf_amd64_c1628ffa62c8e54c\\UEFI.sys"
},
"212": {
"file": "C:\\WINDOWS\\System32\\windowsudk.shellcommon.dll",
"spf": 1
},
"213": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\udfs.sys",
"spf": 1
},
"214": {
"file": "C:\\WINDOWS\\system32\\drivers\\udecx.sys",
"spf": 1
},
"215": {
"file": "C:\\WINDOWS\\system32\\drivers\\ucx01000.sys",
"spf": 1
},
"216": {
"file": "C:\\WINDOWS\\system32\\drivers\\UCPD.sys",
"spf": 1
},
"217": {
"file": "C:\\WINDOWS\\System32\\Drivers\\UcmUcsiCx.sys",
"spf": 1
},
"218": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\UcmUcsiAcpiClient.sys"
},
"219": {
"file": "C:\\WINDOWS\\System32\\Drivers\\UcmTcpciCx.sys",
"spf": 1
},
"220": {
"file": "C:\\WINDOWS\\System32\\Drivers\\UcmCx.sys",
"spf": 1
},
"221": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\uaspstor.sys"
},
"222": {
"file": "C:\\WINDOWS\\system32\\tzautoupdate.dll",
"spf": 1
},
"223": {
"file": "C:\\WINDOWS\\System32\\drivers\\tunnel.sys",
"spf": 1
},
"224": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\tsusbhub.sys"
},
"225": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\TsUsbGD.sys"
},
"226": {
"file": "C:\\WINDOWS\\system32\\drivers\\tsusbflt.sys",
"spf": 1
},
"227": {
"file": "C:\\WINDOWS\\servicing\\TrustedInstaller.exe",
"spf": 1
},
"228": {
"file": "C:\\WINDOWS\\system32\\MitigationClient.dll",
"spf": 1
},
"229": {
"file": "C:\\WINDOWS\\System32\\trkwks.dll",
"spf": 1
},
"230": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\tpm.sys"
},
"231": {
"file": "C:\\WINDOWS\\System32\\TokenBroker.dll",
"spf": 1
},
"232": {
"file": "C:\\WINDOWS\\System32\\TimeBrokerServer.dll",
"spf": 1
},
"233": {
"file": "C:\\WINDOWS\\system32\\TieringEngineService.exe",
"spf": 1
},
"234": {
"file": "C:\\WINDOWS\\system32\\themeservice.dll",
"spf": 1
},
"235": {
"file": "C:\\WINDOWS\\System32\\termsrv.dll",
"spf": 1
},
"236": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\terminpt.sys"
},
"237": {
"cn": 5,
"file": "C:\\WINDOWS\\System32\\drivers\\IntelTA.sys"
},
"238": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\tdx.sys",
"spf": 1
},
"239": {
"file": "C:\\WINDOWS\\System32\\drivers\\tcpipreg.sys",
"spf": 1
},
"240": {
"file": "C:\\WINDOWS\\System32\\tapisrv.dll",
"spf": 1
},
"241": {
"file": "C:\\WINDOWS\\System32\\TabSvc.dll",
"spf": 1
},
"242": {
"file": "C:\\WINDOWS\\System32\\SystemEventsBrokerServer.dll",
"spf": 1
},
"243": {
"file": "C:\\WINDOWS\\system32\\sysmain.dll",
"spf": 1
},
"244": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\Synth3dVsc.sys"
},
"245": {
"file": "C:\\WINDOWS\\System32\\swprv.dll",
"spf": 1
},
"246": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\swenum.inf_amd64_16a14542b63c02af\\swenum.sys"
},
"247": {
"file": "C:\\WINDOWS\\system32\\svsvc.dll",
"spf": 1
},
"248": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\storvsc.sys"
},
"249": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\storufs.sys"
},
"250": {
"file": "C:\\WINDOWS\\system32\\storsvc.dll",
"spf": 1
},
"251": {
"file": "C:\\WINDOWS\\system32\\drivers\\storqosflt.sys",
"spf": 1
},
"252": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\stornvme.sys"
},
"253": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vmstorfl.sys"
},
"254": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\storahci.sys"
},
"255": {
"file": "C:\\WINDOWS\\System32\\wiaservc.dll",
"spf": 1
},
"256": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\stexstor.sys"
},
"257": {
"file": "C:\\WINDOWS\\system32\\windows.staterepository.dll",
"spf": 1
},
"258": {
"file": "C:\\WINDOWS\\system32\\sstpsvc.dll",
"spf": 1
},
"259": {
"file": "C:\\WINDOWS\\System32\\OpenSSH\\ssh-agent.exe",
"spf": 1
},
"260": {
"file": "C:\\WINDOWS\\System32\\ssdpsrv.dll",
"spf": 1
},
"261": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\srvnet.sys",
"spf": 1
},
"262": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\srv2.sys",
"spf": 1
},
"263": {
"file": "C:\\WINDOWS\\system32\\sppsvc.exe",
"spf": 1
},
"264": {
"file": "C:\\WINDOWS\\System32\\spoolsv.exe",
"spf": 1
},
"265": {
"file": "C:\\WINDOWS\\system32\\spectrum.exe",
"spf": 1
},
"266": {
"file": "C:\\WINDOWS\\system32\\drivers\\SpbCx.sys",
"spf": 1
},
"267": {
"file": "C:\\WINDOWS\\System32\\drivers\\SpatialGraphFilter.sys",
"spf": 1
},
"268": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\spaceport.sys"
},
"269": {
"file": "C:\\WINDOWS\\system32\\drivers\\spaceparser.sys",
"spf": 1
},
"270": {
"file": "C:\\WINDOWS\\System32\\snmptrap.exe",
"spf": 1
},
"271": {
"file": "C:\\WINDOWS\\system32\\SmsRouterSvc.dll",
"spf": 1
},
"272": {
"file": "C:\\WINDOWS\\System32\\smphost.dll",
"spf": 1
},
"273": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\smbdirect.sys",
"spf": 1
},
"274": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\SmartSAMD.sys"
},
"275": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sisraid4.sys"
},
"276": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\SiSRaid2.sys"
},
"277": {
"file": "C:\\WINDOWS\\system32\\Windows.SharedPC.AccountManager.dll",
"spf": 1
},
"278": {
"file": "C:\\WINDOWS\\System32\\shsvcs.dll",
"spf": 1
},
"279": {
"file": "C:\\WINDOWS\\System32\\SharedRealitySvc.dll",
"spf": 1
},
"280": {
"file": "C:\\WINDOWS\\System32\\ipnathlp.dll",
"spf": 1
},
"281": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sfloppy.sys"
},
"282": {
"file": "C:\\WINDOWS\\system32\\sessenv.dll",
"spf": 1
},
"283": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sermouse.sys"
},
"284": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\serial.sys"
},
"285": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\serenum.sys"
},
"286": {
"file": "C:\\WINDOWS\\system32\\drivers\\SerCx2.sys",
"spf": 1
},
"287": {
"file": "C:\\WINDOWS\\system32\\drivers\\SerCx.sys",
"spf": 1
},
"288": {
"file": "C:\\WINDOWS\\system32\\sensrsvc.dll",
"spf": 1
},
"289": {
"file": "C:\\WINDOWS\\system32\\SensorService.dll",
"spf": 1
},
"290": {
"file": "C:\\WINDOWS\\System32\\SensorDataService.exe",
"spf": 1
},
"291": {
"file": "C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe",
"spf": 1
},
"292": {
"file": "C:\\WINDOWS\\System32\\sens.dll",
"spf": 1
},
"293": {
"file": "C:\\WINDOWS\\system32\\SEMgrSvc.dll",
"spf": 1
},
"294": {
"file": "C:\\WINDOWS\\system32\\SecurityHealthService.exe",
"spf": 1
},
"295": {
"file": "C:\\WINDOWS\\system32\\seclogon.dll",
"spf": 1
},
"296": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sdstor.sys"
},
"297": {
"file": "C:\\WINDOWS\\System32\\SDRSVC.dll",
"spf": 1
},
"298": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\SDFRd.sys"
},
"299": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sdbus.sys"
},
"300": {
"file": "C:\\WINDOWS\\System32\\certprop.dll",
"spf": 1
},
"301": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\scmbus.sys"
},
"302": {
"file": "C:\\WINDOWS\\system32\\schedsvc.dll",
"spf": 1
},
"303": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\scfilter.sys",
"spf": 1
},
"304": {
"file": "C:\\WINDOWS\\System32\\ScDeviceEnum.dll",
"spf": 1
},
"305": {
"file": "C:\\WINDOWS\\System32\\SCardSvr.dll",
"spf": 1
},
"306": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\sbp2port.sys"
},
"307": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vms3cap.sys"
},
"308": {
"file": "C:\\WINDOWS\\system32\\rpcss.dll",
"spf": 1
},
"309": {
"file": "C:\\WINDOWS\\system32\\locator.exe",
"spf": 1
},
"310": {
"file": "C:\\WINDOWS\\System32\\RpcEpMap.dll",
"spf": 1
},
"311": {
"file": "C:\\WINDOWS\\System32\\RMapi.dll",
"spf": 1
},
"312": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\rhproxy.sys"
},
"313": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\rfcomm.sys"
},
"314": {
"file": "C:\\WINDOWS\\system32\\RDXService.dll",
"spf": 1
},
"315": {
"file": "C:\\WINDOWS\\system32\\regsvc.dll",
"spf": 1
},
"316": {
"file": "C:\\WINDOWS\\System32\\mprdim.dll",
"spf": 1
},
"317": {
"file": "C:\\WINDOWS\\System32\\drivers\\rdyboost.sys",
"spf": 1
},
"318": {
"file": "C:\\WINDOWS\\System32\\drivers\\rdpvideominiport.sys",
"spf": 1
},
"319": {
"file": "C:\\WINDOWS\\System32\\drivers\\rdpdr.sys",
"spf": 1
},
"320": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\rdpbus.sys"
},
"321": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\rdbss.sys",
"spf": 1
},
"322": {
"file": "C:\\WINDOWS\\System32\\drivers\\rassstp.sys",
"spf": 1
},
"323": {
"file": "C:\\WINDOWS\\System32\\rasmans.dll",
"spf": 1
},
"324": {
"file": "C:\\WINDOWS\\System32\\drivers\\rasl2tp.sys",
"spf": 1
},
"325": {
"file": "C:\\WINDOWS\\System32\\rasauto.dll",
"spf": 1
},
"326": {
"file": "C:\\WINDOWS\\System32\\drivers\\AgileVpn.sys",
"spf": 1
},
"327": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\rasacd.sys",
"spf": 1
},
"328": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\ramdisk.sys",
"spf": 1
},
"329": {
"file": "C:\\WINDOWS\\system32\\drivers\\qwavedrv.sys",
"spf": 1
},
"330": {
"file": "C:\\WINDOWS\\system32\\qwave.dll",
"spf": 1
},
"331": {
"file": "C:\\WINDOWS\\system32\\PushToInstall.dll",
"spf": 1
},
"332": {
"file": "C:\\WINDOWS\\system32\\profsvc.dll",
"spf": 1
},
"333": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\processr.sys"
},
"334": {
"file": "C:\\WINDOWS\\System32\\PrintWorkflowService.dll",
"spf": 1
},
"335": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\system32\\spool\\drivers\\x64\\3\\PrintConfig.dll"
},
"336": {
"file": "C:\\WINDOWS\\System32\\drivers\\raspptp.sys",
"spf": 1
},
"337": {
"file": "C:\\WINDOWS\\system32\\umpo.dll",
"spf": 1
},
"338": {
"file": "C:\\WINDOWS\\System32\\drivers\\portcfg.sys",
"spf": 1
},
"339": {
"file": "C:\\WINDOWS\\System32\\ipsecsvc.dll",
"spf": 1
},
"340": {
"file": "C:\\WINDOWS\\system32\\pnrpsvc.dll",
"spf": 1
},
"341": {
"file": "C:\\WINDOWS\\system32\\pnrpauto.dll",
"spf": 1
},
"342": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\pnpmem.sys"
},
"343": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\pmem.sys"
},
"344": {
"file": "C:\\WINDOWS\\system32\\umpnpmgr.dll",
"spf": 1
},
"345": {
"file": "C:\\WINDOWS\\system32\\pla.dll",
"spf": 1
},
"346": {
"file": "C:\\WINDOWS\\system32\\drivers\\PktMon.sys",
"spf": 1
},
"347": {
"file": "C:\\WINDOWS\\System32\\PimIndexMaintenance.dll",
"spf": 1
},
"348": {
"file": "C:\\WINDOWS\\System32\\PhoneService.dll",
"spf": 1
},
"349": {
"file": "C:\\WINDOWS\\SysWow64\\perfhost.exe",
"spf": 1
},
"350": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\percsas3i.sys"
},
"351": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\percsas2i.sys"
},
"352": {
"file": "C:\\WINDOWS\\system32\\PerceptionSimulation\\PerceptionSimulationService.exe",
"spf": 1
},
"353": {
"file": "C:\\WINDOWS\\system32\\peerdistsvc.dll",
"spf": 1
},
"354": {
"file": "C:\\WINDOWS\\system32\\drivers\\peauth.sys",
"spf": 1
},
"355": {
"file": "C:\\WINDOWS\\system32\\drivers\\pdc.sys",
"spf": 1
},
"356": {
"file": "C:\\WINDOWS\\System32\\drivers\\pcw.sys",
"spf": 1
},
"357": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\pcmcia.sys"
},
"358": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\pciide.sys"
},
"359": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\pci.sys"
},
"360": {
"file": "C:\\WINDOWS\\System32\\pcasvc.dll",
"spf": 1
},
"361": {
"file": "C:\\WINDOWS\\System32\\drivers\\partmgr.sys",
"spf": 1
},
"362": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\parport.sys"
},
"363": {
"file": "C:\\WINDOWS\\system32\\p2psvc.dll",
"spf": 1
},
"364": {
"file": "C:\\WINDOWS\\System32\\APHostService.dll",
"spf": 1
},
"365": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\nvstor.sys"
},
"366": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\nvraid.sys"
},
"367": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\nvdimm.sys"
},
"368": {
"file": "C:\\WINDOWS\\system32\\drivers\\nsiproxy.sys",
"spf": 1
},
"369": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\npsvctrig.sys"
},
"370": {
"file": "C:\\WINDOWS\\system32\\ngcsvc.dll",
"spf": 1
},
"371": {
"file": "C:\\WINDOWS\\System32\\NgcCtnrSvc.dll",
"spf": 1
},
"372": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\netvsc.sys"
},
"373": {
"file": "C:\\WINDOWS\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe",
"spf": 1
},
"374": {
"file": "C:\\WINDOWS\\System32\\NetSetupSvc.dll",
"spf": 1
},
"375": {
"file": "C:\\WINDOWS\\System32\\netprofmsvc.dll",
"spf": 1
},
"376": {
"file": "C:\\WINDOWS\\System32\\netman.dll",
"spf": 1
},
"377": {
"file": "C:\\WINDOWS\\system32\\netlogon.dll",
"spf": 1
},
"378": {
"file": "C:\\WINDOWS\\system32\\drivers\\NetAdapterCx.sys",
"spf": 1
},
"379": {
"file": "C:\\WINDOWS\\system32\\drivers\\Ndu.sys",
"spf": 1
},
"380": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\NDProxy.sys",
"spf": 1
},
"381": {
"file": "C:\\WINDOWS\\system32\\drivers\\NDKPing.sys",
"spf": 1
},
"382": {
"file": "C:\\WINDOWS\\System32\\drivers\\NdisVirtualBus.sys",
"spf": 1
},
"383": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\ndistapi.sys",
"spf": 1
},
"384": {
"file": "C:\\WINDOWS\\system32\\drivers\\ndis.sys",
"spf": 1
},
"385": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ndfltr.sys"
},
"386": {
"file": "C:\\WINDOWS\\System32\\NcdAutoSetup.dll",
"spf": 1
},
"387": {
"file": "C:\\WINDOWS\\System32\\ncbservice.dll",
"spf": 1
},
"388": {
"file": "C:\\WINDOWS\\System32\\ncasvc.dll",
"spf": 1
},
"389": {
"file": "C:\\WINDOWS\\System32\\NaturalAuth.dll",
"spf": 1
},
"390": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mvumis.sys"
},
"391": {
"file": "C:\\WINDOWS\\System32\\Drivers\\mup.sys",
"spf": 1
},
"392": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\MTConfig.sys"
},
"393": {
"file": "C:\\WINDOWS\\System32\\drivers\\MSTEE.sys",
"spf": 1
},
"394": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mssmbios.sys"
},
"395": {
"file": "C:\\WINDOWS\\system32\\drivers\\mssecwfp.sys",
"spf": 1
},
"396": {
"file": "C:\\WINDOWS\\system32\\drivers\\mssecflt.sys",
"spf": 1
},
"397": {
"file": "C:\\WINDOWS\\system32\\drivers\\msseccore.sys",
"spf": 1
},
"398": {
"file": "C:\\WINDOWS\\system32\\drivers\\msquic.sys",
"spf": 1
},
"399": {
"file": "C:\\WINDOWS\\System32\\drivers\\MSPQM.sys",
"spf": 1
},
"400": {
"file": "C:\\WINDOWS\\System32\\drivers\\MSPCLOCK.sys",
"spf": 1
},
"401": {
"file": "C:\\WINDOWS\\System32\\drivers\\MSKSSRV.sys",
"spf": 1
},
"402": {
"file": "C:\\WINDOWS\\System32\\KeyboardFilterSvc.dll",
"spf": 1
},
"403": {
"file": "C:\\WINDOWS\\system32\\msiexec.exe",
"spf": 1
},
"404": {
"file": "C:\\WINDOWS\\system32\\iscsiexe.dll",
"spf": 1
},
"405": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\msisadrv.sys"
},
"406": {
"file": "C:\\WINDOWS\\System32\\drivers\\mshidumdf.sys",
"spf": 1
},
"407": {
"file": "C:\\WINDOWS\\System32\\drivers\\mshidkmdf.sys",
"spf": 1
},
"408": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\msgpiowin32.sys"
},
"409": {
"file": "C:\\WINDOWS\\System32\\msdtc.exe",
"spf": 1
},
"410": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\mrxsmb20.sys",
"spf": 1
},
"411": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\mrxsmb.sys",
"spf": 1
},
"412": {
"file": "C:\\WINDOWS\\system32\\drivers\\mrxdav.sys",
"spf": 1
},
"413": {
"file": "C:\\WINDOWS\\system32\\mpssvc.dll",
"spf": 1
},
"414": {
"file": "C:\\WINDOWS\\System32\\drivers\\mpsdrv.sys",
"spf": 1
},
"415": {
"file": "\\??\\C:\\ProgramData\\Microsoft\\Windows",
"gen_err": 5
},
"416": {
"file": "Defender\\Definition Updates\\{83D7E23D-AFFC-4ED1-A359-4A97CCE2D0B9}\\MpKslDrv.sys",
"gen_err": 3
},
"417": {
"file": "C:\\WINDOWS\\System32\\drivers\\mountmgr.sys",
"spf": 1
},
"418": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mouhid.sys"
},
"419": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mouclass.sys"
},
"420": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\monitor.sys"
},
"421": {
"file": "C:\\WINDOWS\\system32\\drivers\\modem.sys",
"spf": 1
},
"422": {
"file": "C:\\WINDOWS\\system32\\drivers\\mmcss.sys",
"spf": 1
},
"423": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mlx4_bus.sys"
},
"424": {
"file": "C:\\WINDOWS\\System32\\MixedRealityRuntime.dll",
"spf": 1
},
"425": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\Microsoft.Bluetooth.AvrcpTransport.sys"
},
"426": {
"cn": 1,
"file": "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\141.0.3537.57\\elevation_service.exe"
},
"427": {
"file": "C:\\WINDOWS\\System32\\MessagingService.dll",
"spf": 1
},
"428": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\megasr.sys"
},
"429": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\megasas35i.sys"
},
"430": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\MegaSas2i.sys"
},
"431": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\megasas.sys"
},
"432": {
"cn": 4,
"file": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpDefenderCoreService.exe"
},
"433": {
"file": "C:\\WINDOWS\\System32\\McpManagementService.dll",
"spf": 1
},
"434": {
"file": "C:\\WINDOWS\\system32\\drivers\\MbbCx.sys",
"spf": 1
},
"435": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mausbip.sys"
},
"436": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\mausbhost.sys"
},
"437": {
"file": "C:\\WINDOWS\\System32\\moshost.dll",
"spf": 1
},
"438": {
"file": "C:\\WINDOWS\\System32\\LanguageOverlayServer.dll",
"spf": 1
},
"439": {
"file": "C:\\WINDOWS\\system32\\drivers\\luafv.sys",
"spf": 1
},
"440": {
"file": "C:\\WINDOWS\\System32\\lsm.dll",
"spf": 1
},
"441": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\lsi_sss.sys"
},
"442": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\lsi_sas3i.sys"
},
"443": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\lsi_sas2i.sys"
},
"444": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\lsi_sas.sys"
},
"445": {
"file": "C:\\WINDOWS\\System32\\lltdsvc.dll",
"spf": 1
},
"446": {
"file": "C:\\WINDOWS\\system32\\LicenseManagerSvc.dll",
"spf": 1
},
"447": {
"file": "C:\\WINDOWS\\System32\\lfsvc.dll",
"spf": 1
},
"448": {
"file": "C:\\WINDOWS\\System32\\wkssvc.dll",
"spf": 1
},
"449": {
"file": "C:\\WINDOWS\\system32\\srvsvc.dll",
"spf": 1
},
"450": {
"file": "C:\\WINDOWS\\system32\\msdtckrm.dll",
"spf": 1
},
"451": {
"file": "C:\\WINDOWS\\system32\\drivers\\ksthunk.sys",
"spf": 1
},
"452": {
"cn": 3,
"file": "C:\\WINDOWS\\system32\\drivers\\wd\\KslD.sys"
},
"453": {
"file": "C:\\WINDOWS\\System32\\Drivers\\ksecpkg.sys",
"spf": 1
},
"454": {
"file": "C:\\WINDOWS\\System32\\Drivers\\ksecdd.sys",
"spf": 1
},
"455": {
"file": "C:\\WINDOWS\\system32\\keyiso.dll",
"spf": 1
},
"456": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\kdnic.sys"
},
"457": {
"file": "C:\\WINDOWS\\system32\\drivers\\kbldfltr.sys",
"spf": 1
},
"458": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\kbdhid.sys"
},
"459": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\kbdclass.sys"
},
"460": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ItSas35i.sys"
},
"461": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\msiscsi.sys"
},
"462": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\isapnp.sys"
},
"463": {
"file": "C:\\WINDOWS\\System32\\IpxlatCfg.dll",
"spf": 1
},
"464": {
"file": "C:\\WINDOWS\\System32\\drivers\\ipt.sys",
"spf": 1
},
"465": {
"file": "C:\\WINDOWS\\System32\\drivers\\ipnat.sys",
"spf": 1
},
"466": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\IPMIDrv.sys"
},
"467": {
"file": "C:\\WINDOWS\\System32\\iphlpsvc.dll",
"spf": 1
},
"468": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\ipfltdrv.sys",
"spf": 1
},
"469": {
"file": "C:\\WINDOWS\\system32\\drivers\\iorate.sys",
"spf": 1
},
"470": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\intelppm.sys"
},
"471": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\intelpmax.sys"
},
"472": {
"cn": 5,
"file": "C:\\WINDOWS\\System32\\drivers\\intelpep.sys"
},
"473": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\intelide.sys"
},
"474": {
"file": "C:\\WINDOWS\\system32\\InstallService.dll",
"spf": 1
},
"475": {
"file": "C:\\WINDOWS\\System32\\drivers\\IndirectKmd.sys",
"spf": 1
},
"476": {
"file": "C:\\WINDOWS\\System32\\ikeext.dll",
"spf": 1
},
"477": {
"file": "C:\\WINDOWS\\System32\\tetheringservice.dll",
"spf": 1
},
"478": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ibbus.sys"
},
"479": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaStorV.sys"
},
"480": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaStorAVC.sys"
},
"481": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSSi_I2C.sys"
},
"482": {
"cn": 6,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSSi_GPIO.sys",
"sa": 32,
"sha": "F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0",
"sz": 38128,
"wt": 1575709670
},
"483": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_I2C_GLK.sys"
},
"484": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_I2C_CNL.sys"
},
"485": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_I2C_BXT_P.sys"
},
"486": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_I2C.sys"
},
"487": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_GPIO2_GLK.sys"
},
"488": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_GPIO2_CNL.sys"
},
"489": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_GPIO2_BXT_P.sys"
},
"490": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iaLPSS2i_GPIO2.sys"
},
"491": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iai2c.sys"
},
"492": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\iagpio.sys"
},
"493": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\i8042prt.sys"
},
"494": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\HyperVideo.sys"
},
"495": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hyperkbd.sys"
},
"496": {
"file": "C:\\WINDOWS\\System32\\drivers\\hwpolicy.sys",
"spf": 1
},
"497": {
"file": "C:\\WINDOWS\\System32\\Drivers\\mshwnclx.sys",
"spf": 1
},
"498": {
"file": "C:\\WINDOWS\\system32\\drivers\\hvservice.sys",
"spf": 1
},
"499": {
"file": "C:\\WINDOWS\\System32\\hvhostsvc.dll",
"spf": 1
},
"500": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hvcrash.sys"
},
"501": {
"file": "C:\\WINDOWS\\system32\\drivers\\HTTP.sys",
"spf": 1
},
"502": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\HpSAMD.sys"
},
"503": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidusb.sys"
},
"504": {
"file": "C:\\WINDOWS\\system32\\drivers\\HidSpiCx.sys",
"spf": 1
},
"505": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidspi.sys"
},
"506": {
"file": "C:\\WINDOWS\\system32\\hidserv.dll",
"spf": 1
},
"507": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidir.sys"
},
"508": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidinterrupt.sys"
},
"509": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidi2c.sys"
},
"510": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\hidbth.sys"
},
"511": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\HidBatt.sys"
},
"512": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\HDAudBus.sys"
},
"513": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\HdAudio.sys"
},
"514": {
"file": "C:\\WINDOWS\\System32\\GraphicsPerfSvc.dll",
"spf": 1
},
"515": {
"file": "C:\\WINDOWS\\System32\\drivers\\gpuenergydrv.sys",
"spf": 1
},
"516": {
"file": "C:\\WINDOWS\\System32\\gpsvc.dll",
"spf": 1
},
"517": {
"file": "C:\\WINDOWS\\System32\\Drivers\\msgpioclx.sys",
"spf": 1
},
"518": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\genericusbfn.inf_amd64_53931f0ae21d6d2c\\genericusbfn.sys"
},
"519": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\vmgencounter.sys"
},
"520": {
"file": "C:\\WINDOWS\\System32\\GameInputSvc.exe",
"spf": 1
},
"521": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\fvevol.sys",
"spf": 1
},
"522": {
"file": "C:\\WINDOWS\\System32\\drivers\\FsDepends.sys",
"spf": 1
},
"523": {
"file": "C:\\WINDOWS\\system32\\FrameServer.dll",
"spf": 1
},
"524": {
"file": "C:\\WINDOWS\\system32\\FntCache.dll",
"spf": 1
},
"525": {
"file": "C:\\WINDOWS\\system32\\drivers\\fltmgr.sys",
"spf": 1
},
"526": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\flpydisk.sys"
},
"527": {
"file": "C:\\WINDOWS\\system32\\drivers\\filetrace.sys",
"spf": 1
},
"528": {
"file": "C:\\WINDOWS\\System32\\drivers\\fileinfo.sys",
"spf": 1
},
"529": {
"file": "C:\\WINDOWS\\system32\\drivers\\filecrypt.sys",
"spf": 1
},
"530": {
"file": "C:\\WINDOWS\\system32\\fhsvc.dll",
"spf": 1
},
"531": {
"file": "C:\\WINDOWS\\system32\\fdrespub.dll",
"spf": 1
},
"532": {
"file": "C:\\WINDOWS\\system32\\fdPHost.dll",
"spf": 1
},
"533": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\fdc.sys"
},
"534": {
"file": "C:\\WINDOWS\\system32\\fxssvc.exe",
"spf": 1
},
"535": {
"file": "C:\\WINDOWS\\system32\\es.dll",
"spf": 1
},
"536": {
"file": "C:\\WINDOWS\\System32\\wevtsvc.dll",
"spf": 1
},
"537": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\errdev.sys"
},
"538": {
"file": "C:\\WINDOWS\\system32\\EnterpriseAppMgmtSvc.dll",
"spf": 1
},
"539": {
"file": "C:\\WINDOWS\\System32\\embeddedmodesvc.dll",
"spf": 1
},
"540": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\EhStorTcgDrv.sys"
},
"541": {
"file": "C:\\WINDOWS\\System32\\drivers\\EhStorClass.sys",
"spf": 1
},
"542": {
"file": "C:\\WINDOWS\\System32\\lsass.exe",
"spf": 1
},
"543": {
"file": "C:\\WINDOWS\\system32\\efssvc.dll",
"spf": 1
},
"544": {
"cn": 1,
"file": "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate.exe"
},
"545": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\evbda.sys"
},
"546": {
"file": "C:\\WINDOWS\\System32\\eapsvc.dll",
"spf": 1
},
"547": {
"file": "C:\\WINDOWS\\System32\\drivers\\dxgkrnl.sys",
"spf": 1
},
"548": {
"file": "C:\\WINDOWS\\System32\\dusmsvc.dll",
"spf": 1
},
"549": {
"file": "C:\\WINDOWS\\System32\\DsSvc.dll",
"spf": 1
},
"550": {
"file": "C:\\WINDOWS\\System32\\DeviceSetupManager.dll",
"spf": 1
},
"551": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\drmkaud.sys"
},
"552": {
"file": "C:\\WINDOWS\\system32\\dps.dll",
"spf": 1
},
"553": {
"file": "C:\\WINDOWS\\System32\\dot3svc.dll",
"spf": 1
},
"554": {
"file": "C:\\WINDOWS\\System32\\dnsrslvr.dll",
"spf": 1
},
"555": {
"file": "C:\\WINDOWS\\system32\\dmwappushsvc.dll",
"spf": 1
},
"556": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\dmvsc.sys"
},
"557": {
"file": "C:\\WINDOWS\\system32\\Windows.Internal.Management.dll",
"spf": 1
},
"558": {
"file": "C:\\WINDOWS\\system32\\Microsoft.Graphics.Display.DisplayEnhancementService.dll",
"spf": 1
},
"559": {
"file": "C:\\WINDOWS\\System32\\DispBroker.Desktop.dll",
"spf": 1
},
"560": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\disk.sys"
},
"561": {
"file": "C:\\WINDOWS\\System32\\DialogBlockingService.dll",
"spf": 1
},
"562": {
"file": "C:\\WINDOWS\\system32\\diagtrack.dll",
"spf": 1
},
"563": {
"file": "C:\\WINDOWS\\system32\\DiagSvc.dll",
"spf": 1
},
"564": {
"file": "C:\\WINDOWS\\system32\\DiagSvcs\\DiagnosticsHub.StandardCollector.Service.exe",
"spf": 1
},
"565": {
"file": "C:\\WINDOWS\\system32\\dhcpcore.dll",
"spf": 1
},
"566": {
"file": "C:\\WINDOWS\\System32\\Drivers\\dfsc.sys",
"spf": 1
},
"567": {
"file": "C:\\WINDOWS\\system32\\DevQueryBroker.dll",
"spf": 1
},
"568": {
"file": "C:\\WINDOWS\\System32\\DevicesFlowBroker.dll",
"spf": 1
},
"569": {
"file": "C:\\WINDOWS\\System32\\Windows.Devices.Picker.dll",
"spf": 1
},
"570": {
"file": "C:\\WINDOWS\\system32\\das.dll",
"spf": 1
},
"571": {
"file": "C:\\WINDOWS\\System32\\deviceaccess.dll",
"spf": 1
},
"572": {
"file": "C:\\WINDOWS\\System32\\defragsvc.dll",
"spf": 1
},
"573": {
"file": "C:\\WINDOWS\\system32\\dcsvc.dll",
"spf": 1
},
"574": {
"file": "C:\\WINDOWS\\system32\\drivers\\dam.sys",
"spf": 1
},
"575": {
"file": "C:\\WINDOWS\\System32\\cscsvc.dll",
"spf": 1
},
"576": {
"file": "C:\\WINDOWS\\system32\\drivers\\csc.sys",
"spf": 1
},
"577": {
"file": "C:\\WINDOWS\\system32\\cryptsvc.dll",
"spf": 1
},
"578": {
"file": "C:\\WINDOWS\\system32\\CredentialEnrollmentManager.exe",
"spf": 1
},
"579": {
"file": "C:\\WINDOWS\\system32\\coremessaging.dll",
"spf": 1
},
"580": {
"file": "C:\\WINDOWS\\System32\\ConsentUxClient.dll",
"spf": 1
},
"581": {
"file": "C:\\WINDOWS\\System32\\drivers\\condrv.sys",
"spf": 1
},
"582": {
"file": "C:\\WINDOWS\\system32\\dllhost.exe",
"spf": 1
},
"583": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\compositebus.inf_amd64_7500cffa210c6946\\CompositeBus.sys"
},
"584": {
"file": "C:\\WINDOWS\\System32\\DRIVERS\\cnghwassist.sys",
"spf": 1
},
"585": {
"file": "C:\\WINDOWS\\System32\\Drivers\\cng.sys",
"spf": 1
},
"586": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\CmBatt.sys"
},
"587": {
"file": "C:\\WINDOWS\\system32\\cloudidsvc.dll",
"spf": 1
},
"588": {
"file": "C:\\WINDOWS\\System32\\ClipSVC.dll",
"spf": 1
},
"589": {
"file": "C:\\WINDOWS\\System32\\drivers\\CLFS.sys",
"spf": 1
},
"590": {
"file": "C:\\WINDOWS\\system32\\drivers\\cldflt.sys",
"spf": 1
},
"591": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\circlass.sys"
},
"592": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\cht4vx64.sys"
},
"593": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\cht4sx64.sys"
},
"594": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\cdrom.sys"
},
"595": {
"file": "C:\\WINDOWS\\System32\\CDPUserSvc.dll",
"spf": 1
},
"596": {
"file": "C:\\WINDOWS\\System32\\CDPSvc.dll",
"spf": 1
},
"597": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\cdfs.sys",
"spf": 1
},
"598": {
"file": "C:\\WINDOWS\\System32\\cbdhsvc.dll",
"spf": 1
},
"599": {
"file": "C:\\WINDOWS\\System32\\CaptureService.dll",
"spf": 1
},
"600": {
"file": "C:\\WINDOWS\\system32\\CapabilityAccessManager.dll",
"spf": 1
},
"601": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\CAD.sys"
},
"602": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\buttonconverter.sys"
},
"603": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\bttflt.sys"
},
"604": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\BTHUSB.sys"
},
"605": {
"file": "C:\\WINDOWS\\system32\\bthserv.dll",
"spf": 1
},
"606": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\BTHport.sys"
},
"607": {
"file": "C:\\WINDOWS\\System32\\drivers\\bthmodem.sys",
"sa": 128,
"sha": "9412DC92F16C0B8A937D6FB1AD83D7169F4EC0F08FAE0E2B244346428CE99EE1",
"sign_err": 1168,
"sz": 76800,
"wt": 1575709670
},
"608": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\BTHMINI.sys"
},
"609": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\Microsoft.Bluetooth.Legacy.LEEnumerator.sys"
},
"610": {
"file": "C:\\WINDOWS\\System32\\drivers\\bthhfenum.sys",
"sa": 32,
"sha": "91C72C54142A0D4E5A5F33268850CEB8315AA30C2F0B74A9FFA962887ABAC797",
"sign_err": 1168,
"sz": 144896,
"wt": 1575709667
},
"611": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\BthEnum.sys"
},
"612": {
"file": "C:\\WINDOWS\\System32\\BthAvctpSvc.dll",
"spf": 1
},
"613": {
"file": "C:\\WINDOWS\\System32\\drivers\\BthA2dp.sys",
"sa": 32,
"sha": "0442A18BBED4E323265C66561C8F8C171D8E934E9089C12B94D1DFDBB057B737",
"sign_err": 1168,
"sz": 279040,
"wt": 1575709667
},
"614": {
"file": "C:\\WINDOWS\\System32\\BTAGService.dll",
"spf": 1
},
"615": {
"file": "C:\\WINDOWS\\System32\\psmsrv.dll",
"spf": 1
},
"616": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\bowser.sys",
"spf": 1
},
"617": {
"file": "C:\\WINDOWS\\System32\\Microsoft.Bluetooth.UserService.dll",
"spf": 1
},
"618": {
"file": "C:\\WINDOWS\\System32\\qmgr.dll",
"spf": 1
},
"619": {
"file": "C:\\WINDOWS\\system32\\drivers\\bindflt.sys",
"spf": 1
},
"620": {
"file": "C:\\WINDOWS\\System32\\bfe.dll",
"spf": 1
},
"621": {
"file": "C:\\WINDOWS\\System32\\bdesvc.dll",
"spf": 1
},
"622": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\bcmfn2.sys"
},
"623": {
"file": "C:\\WINDOWS\\System32\\BcastDVRUserService.dll",
"spf": 1
},
"624": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\basicrender.inf_amd64_eebb5a8467eb88ec\\BasicRender.sys"
},
"625": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_19e58b6267591a82\\BasicDisplay.sys"
},
"626": {
"file": "C:\\WINDOWS\\system32\\drivers\\bam.sys",
"spf": 1
},
"627": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\bxvbda.sys"
},
"628": {
"file": "C:\\WINDOWS\\System32\\AxInstSV.dll",
"spf": 1
},
"629": {
"file": "C:\\WINDOWS\\System32\\autotimesvc.dll",
"spf": 1
},
"630": {
"file": "C:\\WINDOWS\\System32\\Audiosrv.dll",
"spf": 1
},
"631": {
"file": "C:\\WINDOWS\\System32\\AudioEndpointBuilder.dll",
"spf": 1
},
"632": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\atapi.sys"
},
"633": {
"file": "C:\\WINDOWS\\System32\\drivers\\asyncmac.sys",
"spf": 1
},
"634": {
"file": "C:\\WINDOWS\\System32\\assignedaccessmanagersvc.dll",
"spf": 1
},
"635": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\arcsas.sys"
},
"636": {
"file": "C:\\WINDOWS\\system32\\appxdeploymentserver.dll",
"spf": 1
},
"637": {
"file": "C:\\WINDOWS\\system32\\drivers\\AppvVfs.sys",
"spf": 1
},
"638": {
"file": "C:\\WINDOWS\\system32\\drivers\\AppvVemgr.sys",
"spf": 1
},
"639": {
"file": "C:\\WINDOWS\\system32\\drivers\\AppvStrm.sys",
"spf": 1
},
"640": {
"file": "C:\\WINDOWS\\system32\\AppVClient.exe",
"spf": 1
},
"641": {
"file": "C:\\WINDOWS\\system32\\AppReadiness.dll",
"spf": 1
},
"642": {
"file": "C:\\WINDOWS\\System32\\appmgmts.dll",
"spf": 1
},
"643": {
"file": "C:\\WINDOWS\\system32\\drivers\\applockerfltr.sys",
"spf": 1
},
"644": {
"file": "C:\\WINDOWS\\System32\\appinfo.dll",
"spf": 1
},
"645": {
"file": "C:\\WINDOWS\\System32\\appidsvc.dll",
"spf": 1
},
"646": {
"file": "C:\\WINDOWS\\system32\\drivers\\appid.sys",
"spf": 1
},
"647": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdxata.sys"
},
"648": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdsbs.sys"
},
"649": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdsata.sys"
},
"650": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdppm.sys"
},
"651": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdk8.sys"
},
"652": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdi2c.sys"
},
"653": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\amdgpio2.sys"
},
"654": {
"file": "C:\\WINDOWS\\System32\\alg.exe",
"spf": 1
},
"655": {
"file": "C:\\WINDOWS\\System32\\AJRouter.dll",
"spf": 1
},
"656": {
"file": "C:\\WINDOWS\\system32\\DRIVERS\\ahcache.sys",
"spf": 1
},
"657": {
"file": "C:\\WINDOWS\\system32\\drivers\\afunix.sys",
"spf": 1
},
"658": {
"file": "C:\\WINDOWS\\system32\\drivers\\afd.sys",
"spf": 1
},
"659": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ADP80XX.SYS"
},
"660": {
"file": "C:\\WINDOWS\\system32\\drivers\\Acx01000.sys",
"spf": 1
},
"661": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\acpitime.sys"
},
"662": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\acpipmi.sys"
},
"663": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\acpipagr.sys"
},
"664": {
"file": "C:\\WINDOWS\\System32\\Drivers\\acpiex.sys",
"spf": 1
},
"665": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\AcpiDev.sys"
},
"666": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\ACPI.sys"
},
"667": {
"file": "C:\\WINDOWS\\System32\\AarSvc.dll",
"spf": 1
},
"668": {
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\3ware.sys"
},
"669": {
"cat": 1,
"cn": 3,
"file": "C:\\WINDOWS\\System32\\drivers\\1394ohci.sys"
},
"670": {
"file": "C:\\WINDOWS\\system32\\sihost.exe",
"spf": 1
},
"671": {
"file": "sihost.exe",
"spf": 1
},
"672": {
"file": "C:\\WINDOWS\\system32\\taskhostw.exe",
"spf": 1
},
"673": {
"file": "taskhostw.exe",
"spf": 1
},
"674": {
"file": "C:\\WINDOWS\\Explorer.EXE",
"spf": 1
},
"675": {
"file": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe",
"spf": 1
},
"676": {
"file": "-ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca",
"gen_err": 2
},
"677": {
"file": "C:\\Windows\\System32\\RuntimeBroker.exe",
"spf": 1
},
"678": {
"file": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.Search_cw5n1h2txyewy\\SearchApp.exe",
"spf": 1
},
"679": {
"file": "-ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca",
"gen_err": 2
},
"680": {
"file": "C:\\WINDOWS\\system32\\DllHost.exe",
"spf": 1
},
"681": {
"file": "C:\\WINDOWS\\system32\\ApplicationFrameHost.exe",
"spf": 1
},
"682": {
"file": "C:\\WINDOWS\\System32\\rdpclip.exe",
"spf": 1
},
"683": {
"file": "rdpclip",
"spf": 1
},
"684": {
"file": "C:\\WINDOWS\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe",
"spf": 1
},
"685": {
"file": "-ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca",
"gen_err": 2
},
"686": {
"file": "C:\\WINDOWS\\SystemApps\\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\\TextInputHost.exe",
"spf": 1
},
"687": {
"file": "-ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca",
"gen_err": 2
},
"688": {
"file": "C:\\Windows\\System32\\SecurityHealthSystray.exe",
"spf": 1
},
"689": {
"file": "C:\\Windows\\System32\\rundll32.exe",
"spf": 1
},
"690": {
"file": "C:\\Windows\\System32\\shell32.dll",
"spf": 1
},
"691": {
"file": "C:\\Windows\\System32\\inetcpl.cpl",
"spf": 1
},
"692": {
"file": "C:\\WINDOWS\\System32\\shell32.dll",
"spf": 1
},
"693": {
"file": "C:\\WINDOWS\\System32\\timedate.cpl",
"spf": 1
},
"694": {
"cn": 1,
"file": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\FileCoAuth.exe"
},
"695": {
"file": "C:\\WINDOWS\\system32\\cmd.exe",
"spf": 1
},
"696": {
"file": "C:\\WINDOWS\\system32\\conhost.exe",
"spf": 1
},
"697": {
"file": "\\??\\C:\\WINDOWS\\system32\\conhost.exe",
"spf": 1
},
"698": {
"cn": 1,
"file": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\OneDrive.Sync.Service.exe"
},
"699": {
"file": "C:\\Windows\\System32\\oobe\\UserOOBEBroker.exe",
"spf": 1
},
"700": {
"file": "C:\\WINDOWS\\system32\\MusNotifyIcon.exe",
"spf": 1
},
"701": {
"file": "--type=utility --utility-sub-type=network.mojom.Net",
"gen_err": 2
},
"702": {
"file": "--type=utility --utility-sub-type=storage.mojom.Sto",
"gen_err": 2
},
"703": {
"file": "--type=utility --utility-sub-type=audio.mojom.Aud",
"gen_err": 2
},
"704": {
"file": "--type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yan",
"gen_err": 123
},
"705": {
"cn": 1,
"file": "C:\\Program Files\\WindowsApps\\Microsoft.YourPhone_1.25072.63.0_x64__8wekyb3d8bbwe\\PhoneExperienceHost.exe"
},
"706": {
"file": "--type=utility --utility-sub-type=hips_telemetry.mojom.Hip",
"gen_err": 2
},
"707": {
"cat": 1,
"cn": 3,
"file": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
},
"708": {
"cat": 1,
"cn": 3,
"file": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
}
},
"imports": {},
"limits": {
"neighbors": "100,49"
},
"neighbors": [
{
"path": "--type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https:"
},
{
"files": [
"25.8.4.834.manifest",
"7z.dll",
"abt-bindings.dll",
"brand_config",
"brodef.dll"
],
"path": ".",
"rs": 6
},
{
"dirs": [
"$Recycle.Bin",
"$WinREAgent",
"Documents and Settings"
],
"files": [
"DumpStack.log",
"DumpStack.log.tmp"
],
"path": "/",
"rs": 6
},
{
"dirs": [
"AppV",
"Crypto",
"Device Stage",
"DeviceSync",
"Diagnosis"
],
"path": "\\??\\C:\\ProgramData\\Microsoft",
"rs": 6
},
{
"dirs": [
"0409"
],
"files": [
"69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll",
"6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll",
"@AdvancedKeySettingsNotification.png",
"@AppHelpToast.png"
],
"path": "\\??\\C:\\WINDOWS\\system32",
"rs": 6
},
{
"dirs": [
"AdSelectionAttestationsPreloaded",
"BHO"
],
"files": [
"141.0.3537.57.manifest",
"concrt140.dll",
"cookie_exporter.exe"
],
"path": "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\141.0.3537.57",
"rs": 6
},
{
"dirs": [
"1.3.199.11",
"1.3.201.11",
"Download",
"Install"
],
"files": [
"MicrosoftEdgeUpdate.exe"
],
"path": "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate",
"rs": 6
},
{
"files": [
"service_update.exe"
],
"path": "C:\\Program Files (x86)\\Yandex\\YandexBrowser\\25.8.4.834"
},
{
"dirs": [
"Logs"
],
"files": [
"expediteupdater.exe",
"QualityUpdateAssistant.dll",
"sedplugins.dll",
"uhssvc.exe"
],
"path": "C:\\Program Files\\Microsoft Update Health Tools",
"rs": 6
},
{
"dirs": [
"Classification",
"en-US"
],
"files": [
"aadrt.dll",
"MipDlp.dll",
"MsSense.dll"
],
"path": "C:\\Program Files\\Windows Defender Advanced Threat Protection",
"rs": 6
},
{
"dirs": [
"en-US",
"Icons",
"Media Renderer",
"Network Sharing"
],
"files": [
"mpvis.DLL"
],
"path": "C:\\Program Files\\Windows Media Player",
"rs": 6
},
{
"dirs": [
"AppxMetadata"
],
"files": [
"Accessibility.dll",
"AppxBlockMap.xml",
"AppxManifest.xml",
"AppxSignature.p7x"
],
"path": "C:\\Program Files\\WindowsApps\\Microsoft.YourPhone_1.25072.63.0_x64__8wekyb3d8bbwe",
"rs": 6
},
{
"dirs": [
"25.8.4.834"
],
"files": [
"browser.exe",
"browser.VisualElementsManifest.xml",
"browser_proxy.exe",
"clidmgr.exe"
],
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application",
"rs": 6
},
{
"dirs": [
"af-ZA",
"am-ET",
"ar-SA",
"as-IN",
"az-Latn-AZ"
],
"path": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0",
"rs": 6
},
{
"files": [
"desktop.ini"
],
"path": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup"
},
{
"dirs": [
"25.164.0824.0003",
"ListSync",
"LogoImages",
"logs"
],
"files": [
"OneDrive.App.exe"
],
"path": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive",
"rs": 6
},
{
"dirs": [
"adm",
"af"
],
"files": [
"adal.dll",
"alertIcon.png",
"alertIconWhite.png"
],
"path": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003",
"rs": 6
},
{
"files": [
"desktop.ini"
],
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup"
},
{
"dirs": [
"addins",
"appcompat",
"apppatch",
"AppReadiness",
"assembly"
],
"path": "C:\\WINDOWS",
"rs": 6
},
{
"dirs": [
"1033",
"1049"
],
"files": [
"Accessibility.dll",
"AddInProcess.exe",
"AddInProcess.exe.config"
],
"path": "C:\\WINDOWS\\Microsoft.NET\\Framework64\\v4.0.30319",
"rs": 6
},
{
"dirs": [
"Editions",
"en-US",
"FodMetadata"
],
"files": [
"CbsApi.dll",
"CbsMsg.dll"
],
"path": "C:\\WINDOWS\\servicing",
"rs": 6
},
{
"dirs": [
"0409"
],
"files": [
"69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll",
"6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll",
"@AdvancedKeySettingsNotification.png",
"@AppHelpToast.png"
],
"path": "C:\\WINDOWS\\System32",
"rs": 6
},
{
"files": [
"DiagnosticsHub.Packaging.dll",
"DiagnosticsHub.StandardCollector.Proxy.dll",
"DiagnosticsHub.StandardCollector.Runtime.dll",
"DiagnosticsHub.StandardCollector.Service.exe",
"DiagnosticsHub.StandardCollector.ServiceRes.dll"
],
"path": "C:\\WINDOWS\\system32\\DiagSvcs",
"rs": 6
},
{
"files": [
"1394ohci.sys",
"3ware.sys",
"acpi.sys",
"AcpiDev.sys",
"acpiex.sys"
],
"path": "C:\\WINDOWS\\System32\\DRIVERS",
"rs": 6
},
{
"files": [
"KslD.sys",
"KslD.sys.bak",
"WdBoot.sys",
"WdDevFlt.sys",
"WdFilter.sys"
],
"path": "C:\\WINDOWS\\system32\\drivers\\wd",
"rs": 6
},
{
"files": [
"basicdisplay.inf",
"BasicDisplay.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_19e58b6267591a82"
},
{
"files": [
"basicrender.inf",
"BasicRender.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\basicrender.inf_amd64_eebb5a8467eb88ec"
},
{
"files": [
"compositebus.inf",
"CompositeBus.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\compositebus.inf_amd64_7500cffa210c6946"
},
{
"files": [
"genericusbfn.inf",
"genericusbfn.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\genericusbfn.inf_amd64_53931f0ae21d6d2c"
},
{
"files": [
"swenum.inf",
"swenum.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\swenum.inf_amd64_16a14542b63c02af"
},
{
"files": [
"uefi.inf",
"uefi.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\uefi.inf_amd64_c1628ffa62c8e54c"
},
{
"files": [
"ufxchipidea.inf",
"UfxChipidea.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\ufxchipidea.inf_amd64_1c78775fffab6a0a"
},
{
"files": [
"umbus.inf",
"umbus.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\umbus.inf_amd64_b78a9c5b6fd62c27"
},
{
"files": [
"urschipidea.inf",
"urschipidea.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\urschipidea.inf_amd64_78ad1c14e33df968"
},
{
"files": [
"urssynopsys.inf",
"urssynopsys.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\urssynopsys.inf_amd64_057fa37902020500"
},
{
"files": [
"vrd.inf",
"vrd.sys"
],
"path": "C:\\WINDOWS\\System32\\DriverStore\\FileRepository\\vrd.inf_amd64_81fbd405ff2470fc"
},
{
"files": [
"audit.exe",
"AuditShD.exe",
"BypassNRO.cmd",
"cmisetup.dll",
"diagER.dll"
],
"path": "C:\\Windows\\System32\\oobe",
"rs": 6
},
{
"files": [
"LICENSE.txt",
"NOTICE.txt",
"scp.exe",
"sftp.exe",
"ssh-add.exe"
],
"path": "C:\\WINDOWS\\System32\\OpenSSH",
"rs": 6
},
{
"dirs": [
"Assets",
"en-US"
],
"files": [
"Frame.xbf",
"PerceptionSimulationInput.dll",
"PerceptionSimulationInput.exe"
],
"path": "C:\\WINDOWS\\system32\\PerceptionSimulation",
"rs": 6
},
{
"dirs": [
"de-DE",
"en-AU",
"en-CA",
"en-GB",
"en-US"
],
"path": "C:\\WINDOWS\\system32\\speech_onecore\\common",
"rs": 6
},
{
"dirs": [
"en-US"
],
"files": [
"FXSAPI.DLL",
"FXSDRV.DLL",
"FXSRES.DLL",
"FXSTIFF.DLL"
],
"path": "C:\\WINDOWS\\system32\\spool\\drivers\\x64\\3",
"rs": 6
},
{
"files": [
"UNPUX.dll",
"UNPUXHost.exe",
"UNPUXLauncher.exe",
"UpdateNotificationHelpers.dll",
"UpdateNotificationMgr.exe"
],
"path": "C:\\WINDOWS\\System32\\UNP"
},
{
"files": [
"aeinv.mof",
"AgentWmi.mof",
"AgentWmiUninstall.mof",
"appbackgroundtask.dll",
"appbackgroundtask.mof"
],
"path": "C:\\WINDOWS\\system32\\wbem",
"rs": 6
},
{
"dirs": [
"Assets",
"BingConfiguration"
],
"files": [
"AppxBlockMap.xml",
"AppxManifest.xml",
"AppxSignature.p7x"
],
"path": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.Search_cw5n1h2txyewy",
"rs": 6
},
{
"dirs": [
"Assets",
"microsoft.system.package.metadata"
],
"files": [
"AppxBlockMap.xml",
"AppxManifest.xml",
"AppxSignature.p7x"
],
"path": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy",
"rs": 6
},
{
"files": [
"AccountsService.dll",
"AccountsService.winmd",
"AccountsServiceProduct.exe",
"AppListBackup.dll",
"appxblockmap.xml"
],
"path": "C:\\WINDOWS\\SystemApps\\MicrosoftWindows.Client.CBS_cw5n1h2txyewy",
"rs": 6
},
{
"dirs": [
"Assets"
],
"files": [
"AppxBlockMap.xml",
"AppxManifest.xml",
"AppxSignature.p7x",
"BatteryFlyoutExperience.dll"
],
"path": "C:\\WINDOWS\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy",
"rs": 6
},
{
"dirs": [
"0409"
],
"files": [
"12520437.cpx",
"12520850.cpx",
"@AppHelpToast.png",
"@AudioToastIcon.png"
],
"path": "C:\\WINDOWS\\SysWow64",
"rs": 6
},
{
"path": "Defender\\Definition Updates\\{83D7E23D-AFFC-4ED1-A359-4A97CCE2D0B9}"
}
],
"stat": {
"error_attr": 0,
"error_gen": 15,
"error_pe": 0,
"error_sha": 0,
"error_sign": 3,
"files_attr": 6,
"files_cn": 215,
"files_pe": 0,
"files_sha": 6,
"files_total": 708,
"imports_count": 1,
"imports_time": 0,
"neighbors_count": 1,
"neighbors_time": 6.462,
"provider": {
"cat_count": 85,
"cat_time": 397.793,
"embedded_count": 218,
"embedded_time": 19.365,
"file_features_count": 6,
"file_features_time": 0.149,
"pe_imports_count": 0,
"pe_imports_time": 0,
"pe_total_count": 6,
"pe_total_time": 0.012,
"protected_count": 693,
"protected_time": 65.277
},
"request_cached": 406,
"request_total": 1114,
"vendors_count": 1,
"vendors_time": 0.006,
"yield_count": 1416,
"yield_time": 0.305
},
"vendors": {
"1": "Microsoft Corporation",
"2": "YANDEX LLC",
"3": "Microsoft Windows",
"4": "Microsoft Windows Publisher",
"5": "Microsoft Windows Hardware Abstraction Layer Publisher",
"6": "Intel Corporation - Client Components Group",
"7": "Microsoft Windows Early Launch Anti-malware Publisher"
}
}
},
"Timestamp": 1759759848511.406,
"UserID": "DESKTOP-IDDQD\\Alice"
}
9. Хосты
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 403,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "9b30fa9f-e6d1-498a-bb47-687b110500d6",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"hosts": "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"
},
"Timestamp": 1759759848516.114,
"UserID": "DESKTOP-IDDQD\\Alice"
}
10. Привязанность к домену
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 404,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "4d68b824-4f8e-4cff-b47a-b2c0eea28842",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"enrolled_to_domain": false
},
"Timestamp": 1759759848519.065,
"UserID": "DESKTOP-IDDQD\\Alice"
}
11. Ярлыки на рабочем столе
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 405,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "e3c77243-be15-4dc1-9fe0-8993230c0e35",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"links": [
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbkAwACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO////AQAAAAAAAAAAAAAAAAAAACkAQAAlAFMAeQBzAHQAZQBtAFIAbwBvAHQAJQBcAHMAeQBzAHQAZQBtADMAMgBcAFMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMgAxADcANgAyACMALwBuAGEAbQBlACAATQBpAGMAcgBvAHMAbwBmAHQALgBBAGQAbQBpAG4AaQBzAHQAcgBhAHQAaQB2AGUAVABvAG8AbABzAB4AJQB3AGkAbgBkAGkAcgAlAFwAcwB5AHMAdABlAG0AMwAyAFwAaQBtAGEAZwBlAHIAZQBzAC4AZABsAGwAwwAAAAkAAKAtAAAAMVNQU+KKWEa8TDhDu/wTkyaYbc4RAAAAAAAAAAATAAAAAAAAAAAAAACKAAAAMVNQU1UoTJ95nzlLqNDh1C3h1fNdAAAABQAAAAAfAAAAJgAAAE0AaQBjAHIAbwBzAG8AZgB0AC4AVwBpAG4AZABvAHcAcwAuAEEAZABtAGkAbgBpAHMAdAByAGEAdABpAHYAZQBUAG8AbwBsAHMAAAARAAAAEgAAAAATAAAAAQAAAAAAAAAAAAAAFAMAAAEAAKAld2luZGlyJVxzeXN0ZW0zMlxjb250cm9sLmV4ZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUAdwBpAG4AZABpAHIAJQBcAHMAeQBzAHQAZQBtADMAMgBcAGMAbwBuAHQAcgBvAGwALgBlAHgAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Administrative Tools.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEaFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAABYAFAAfUOBP0CDqOmkQotgIACswMJ0AABsAQAAlAHcAaQBuAGQAaQByACUAXABlAHgAcABsAG8AcgBlAHIALgBlAHgAZQAsAC0AMwAwADQArwAAAAkAAKAtAAAAMVNQU+KKWEa8TDhDu/wTkyaYbc4RAAAAAAAAAAATAAAAAAAAAAAAAAB2AAAAMVNQU1UoTJ95nzlLqNDh1C3h1fNJAAAABQAAAAAfAAAAGwAAAE0AaQBjAHIAbwBzAG8AZgB0AC4AVwBpAG4AZABvAHcAcwAuAEMAbwBtAHAAdQB0AGUAcgAAAAAAEQAAABIAAAAAEwAAAAEAAAAAAAAAAAAAAAAAAAA=",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADl////AQAAAAAAAAAAAAAAAAAAABYAFAAfgJTmmVPlbGxNj84diHD9y6AAABsAQAAlAHcAaQBuAGQAaQByACUAXABlAHgAcABsAG8AcgBlAHIALgBlAHgAZQAsAC0AMwAwADcAHgAlAHcAaQBuAGQAaQByACUAXABzAHkAcwB0AGUAbQAzADIAXABpAG0AYQBnAGUAcgBlAHMALgBkAGwAbAC3AAAACQAAoC0AAAAxU1BT4opYRrxMOEO7/BOTJphtzhEAAAAAAAAAABMAAAAAAAAAAAAAAH4AAAAxU1BTVShMn3mfOUuo0OHULeHV81EAAAAFAAAAAB8AAAAfAAAATQBpAGMAcgBvAHMAbwBmAHQALgBXAGkAbgBkAG8AdwBzAC4AQwBvAG4AdAByAG8AbABQAGEAbgBlAGwAAAAAABEAAAASAAAAABMAAAABAAAAAAAAAAAAAAAAAAAA",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Edge.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACS////AQAAAAAAAAAAAAAAAAAAABYAFAAfgA35gDCt19kRvZgAAJR7AlcAACkAQAAlAFMAeQBzAHQAZQBtAFIAbwBvAHQAJQBcAHMAeQBzAHQAZQBtADMAMgBcAHMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMQAwADEAMQAzAB4AJQB3AGkAbgBkAGkAcgAlAFwAcwB5AHMAdABlAG0AMwAyAFwAaQBtAGEAZwBlAHIAZQBzAC4AZABsAGwAZgAAAAkAAKAtAAAAMVNQU+KKWEa8TDhDu/wTkyaYbc4RAAAAAAAAAAATAAAAAAAAAAAAAAAtAAAAMVNQU1UoTJ95nzlLqNDh1C3h1fMRAAAAEgAAAAATAAAAAQAAAAAAAAAAAAAAAAAAAA==",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/v//AQAAAAAAAAAAAAAAAAAAABYAFAAfgA75gDCt19kRvZgAAJR7AlcAACkAQAAlAFMAeQBzAHQAZQBtAFIAbwBvAHQAJQBcAHMAeQBzAHQAZQBtADMAMgBcAHMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMQAwADEAMQA0ABUAJQB3AGkAbgBkAGkAcgAlAFwAZQB4AHAAbABvAHIAZQByAC4AZQB4AGUAZgAAAAkAAKAtAAAAMVNQU+KKWEa8TDhDu/wTkyaYbc4RAAAAAAAAAAATAAAAAAAAAAAAAAAtAAAAMVNQU1UoTJ95nzlLqNDh1C3h1fMRAAAAEgAAAAATAAAAAQAAAAAAAAAAAAAAAAAAAA==",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbfQAAAIAAAAHQynieXNtwBJN+1dZc23AF44skNlTTcAZDkVgAAAAAAAQAAAAAAAAAAAAAAAAAAADUCFAAfUOBP0CDqOmkQotgIACswMJ0ZAC9DOlwAAAAAAAAAAAAAAAAAAAAAAAAAjAAxAAAAAABGW20/EQBQUk9HUkF+MQAAdAAJAAQA776HT9tJRltyPy4AAAAQFgEAAAACAAAAAAAAAAAASgAAAAAAEeQYAVAAcgBvAGcAcgBhAG0AIABGAGkAbABlAHMAAABAAHMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMgAxADcAOAAxAAAAGABUADEAAAAAAEZbbT8QAFlhbmRleAAAPgAJAAQA775GW20/RlttPy4AAAD8UQAAAAARAAAAAAAAAAAAAAAAAAAAEeQYAVkAYQBuAGQAZQB4AAAAFgBkADEAAAAAAEZbcz8QAFlBTkRFWH4xAABMAAkABADvvkZbbT9GW3M/LgAAAAhSAAAAAAwAAAAAAAAAAAAAAAAAAAB7isAAWQBhAG4AZABlAHgAQgByAG8AdwBzAGUAcgAAABgAYAAxAAAAAABGWxhAEABBUFBMSUN+MQAASAAJAAQA775GW3I/RlsYQC4AAACXGQEAAAAFAAAAAAAAAAAAAAAAAAAAZym+AEEAcABwAGwAaQBjAGEAdABpAG8AbgAAABgAYgAyAJDkVgBDW/CUIABicm93c2VyLmV4ZQBIAAkABADvvkZbcj9GW3I/LgAAAMMZAQAAAAUAAAAAAAAAAAAAAAAAAACIZysBYgByAG8AdwBzAGUAcgAuAGUAeABlAAAAGgAAAGwAAAAcAAAAAQAAABwAAAAtAAAAAAAAAGsAAAARAAAAAwAAABe9eUQQAAAAAEM6XFByb2dyYW0gRmlsZXNcWWFuZGV4XFlhbmRleEJyb3dzZXJcQXBwbGljYXRpb25cYnJvd3Nlci5leGUAABEAFAQ+BEEEQgRDBD8EIAAyBKAAOAQ9BEIENQRABD0ENQRCBE8ALgAuAFwALgAuAFwALgAuAFwALgAuAFwALgAuAFwALgAuAFwALgAuAFwAUAByAG8AZwByAGEAbQAgAEYAaQBsAGUAcwBcAFkAYQBuAGQAZQB4AFwAWQBhAG4AZABlAHgAQgByAG8AdwBzAGUAcgBcAEEAcABwAGwAaQBjAGEAdABpAG8AbgBcAGIAcgBvAHcAcwBlAHIALgBlAHgAZQAxAEMAOgBcAFAAcgBvAGcAcgBhAG0AIABGAGkAbABlAHMAXABZAGEAbgBkAGUAeABcAFkAYQBuAGQAZQB4AEIAcgBvAHcAcwBlAHIAXABBAHAAcABsAGkAYwBhAHQAaQBvAG4APQBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzAFwAWQBhAG4AZABlAHgAXABZAGEAbgBkAGUAeABCAHIAbwB3AHMAZQByAFwAQQBwAHAAbABpAGMAYQB0AGkAbwBuAFwAYgByAG8AdwBzAGUAcgAuAGUAeABlABQDAAAHAACgJVByb2dyYW1GaWxlcyVcWWFuZGV4XFlhbmRleEJyb3dzZXJcQXBwbGljYXRpb25cYnJvd3Nlci5leGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlAFAAcgBvAGcAcgBhAG0ARgBpAGwAZQBzACUAXABZAGEAbgBkAGUAeABcAFkAYQBuAGQAZQB4AEIAcgBvAHcAcwBlAHIAXABBAHAAcABsAGkAYwBhAHQAaQBvAG4AXABiAHIAbwB3AHMAZQByAC4AZQB4AGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAUAAKAmAAAAuQAAABwAAAALAACgtmNekL/BTkmynGW3MtPSGrkAAABgAAAAAwAAoFgAAAAAAAAAZGVza3RvcC1hZzI5ODRxANiXnwow65VCnxRxNV0ngwRrPzdFqZfwEaNZABVdATQD2JefCjDrlUKfFHE1XSeDBGs/N0Wpl/ARo1kAFV0BNAM/AQAACQAAoIkAAAAxU1BT4opYRrxMOEO7/BOTJphtzm0AAAAEAAAAAB8AAAAuAAAAUwAtADEALQA1AC0AMgAxAC0AMQA4ADQAMgA0ADQAMgAwADAAMgAtADMAMgA1ADMAMAA3ADMAMAA0ADAALQA1ADkANgAxADEAMAAyADgANgAtADEAMAAwADEAAAAAAAAAcQAAADFTUFNVKEyfeZ85S6jQ4dQt4dXzVQAAAAUAAAAAHwAAACIAAABZAGEAbgBkAGUAeAAuAFQATQA2AFQANQBTAEoAWABKAFYAVgA2ADUANQBaAEYATwBIAFkARQBHADQATABUAEgAVQAAAAAAAAA5AAAAMVNQU7EWbUStjXBIp0hALqQ9eIwdAAAAaAAAAABIAAAAMh6IpwWq3k6Auny9y2X2FgAAAAAAAAAAAAAAAA==",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Yandex.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Microsoft Edge.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAABYAFAAfgNhfIFL7XX1EgBrQtS8ug+EAACkAQAAlAFMAeQBzAHQAZQBtAFIAbwBvAHQAJQBcAHMAeQBzAHQAZQBtADMAMgBcAFMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMgAyADUANwA5ABUAJQB3AGkAbgBkAGkAcgAlAFwAZQB4AHAAbABvAHIAZQByAC4AZQB4AGUArwAAAAkAAKAtAAAAMVNQU+KKWEa8TDhDu/wTkyaYbc4RAAAAAAAAAAATAAAAAAAAAAAAAAB2AAAAMVNQU1UoTJ95nzlLqNDh1C3h1fNJAAAABQAAAAAfAAAAGwAAAE0AaQBjAHIAbwBzAG8AZgB0AC4AVwBpAG4AZABvAHcAcwAuAEUAeABwAGwAbwByAGUAcgAAAAAAEQAAABIAAAAAEwAAAAEAAAAAAAAAAAAAAAAAAAA=",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Microsoft Edge.lnk"
},
{
"content": "TAAAAAEUAgAAAAAAwAAAAAAAAEbfQAAAIAAAAKy8fBJLitcBZDdVt5c23AF375GdaTPcASgUQQAAAAAAAQAAAAAAAAAAAAAAAAAAADECFAAfUOBP0CDqOmkQotgIACswMJ0ZAC9DOlwAAAAAAAAAAAAAAAAAAAAAAAAAmAAxAAAAAABGW3I/EQBQUk9HUkF+MgAAgAAJAAQA776HT9tJRltyPy4AAABbLwEAAAACAAAAAAAAAAAAVgAAAAAApS5CAFAAcgBvAGcAcgBhAG0AIABGAGkAbABlAHMAIAAoAHgAOAA2ACkAAABAAHMAaABlAGwAbAAzADIALgBkAGwAbAAsAC0AMgAxADgAMQA3AAAAGABcADEAAAAAAPRW5FoQAE1JQ1JPU34xAABEAAkABADvvvRW7FhGWxI/LgAAAEYJAQAAAAcAAAAAAAAAAAAAAAAAAADR7QsBTQBpAGMAcgBvAHMAbwBmAHQAAAAYAE4AMQAAAAAARltoQDAARWRnZQAAOgAJAAQA774FUzi1RltoQC4AAADGcQIAAACdBAAAAAAAAAAAAAAAAAAAav/bAEUAZABnAGUAAAAUAGAAMQAAAAAARltyQDAAQVBQTElDfjEAAEgACQAEAO++BVM4tUZbckAuAAAA0nECAAAAAwAAAAAAAAAAAAAAAAAAAGSJIABBAHAAcABsAGkAYwBhAHQAaQBvAG4AAAAYAGAAMgAoFEEAQlsCNyAAbXNlZGdlLmV4ZQAARgAJAAQA774FUzi1RltyQC4AAAD0MgUAAAANAAAAAACMAAAAAAAAAAAAieoLAW0AcwBlAGQAZwBlAC4AZQB4AGUAAAAaAAAAawAAABwAAAABAAAAHAAAAC0AAAAAAAAAagAAABEAAAADAAAAF715RBAAAAAAQzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxNaWNyb3NvZnRcRWRnZVxBcHBsaWNhdGlvblxtc2VkZ2UuZXhlAAAUAB8EQAQ+BEEEPAQ+BEIEQAQgADIENQQxBC0AQQRCBEAEMAQ9BDgERgRCAC4ALgBcAC4ALgBcAC4ALgBcAFAAcgBvAGcAcgBhAG0AIABGAGkAbABlAHMAIAAoAHgAOAA2ACkAXABNAGkAYwByAG8AcwBvAGYAdABcAEUAZABnAGUAXABBAHAAcABsAGkAYwBhAHQAaQBvAG4AXABtAHMAZQBkAGcAZQAuAGUAeABlADEAQwA6AFwAUAByAG8AZwByAGEAbQAgAEYAaQBsAGUAcwAgACgAeAA4ADYAKQBcAE0AaQBjAHIAbwBzAG8AZgB0AFwARQBkAGcAZQBcAEEAcABwAGwAaQBjAGEAdABpAG8AbgA8AEMAOgBcAFAAcgBvAGcAcgBhAG0AIABGAGkAbABlAHMAIAAoAHgAOAA2ACkAXABNAGkAYwByAG8AcwBvAGYAdABcAEUAZABnAGUAXABBAHAAcABsAGkAYwBhAHQAaQBvAG4AXABtAHMAZQBkAGcAZQAuAGUAeABlABQDAAAHAACgJVByb2dyYW1GaWxlcyh4ODYpJVxNaWNyb3NvZnRcRWRnZVxBcHBsaWNhdGlvblxtc2VkZ2UuZXhlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlAFAAcgBvAGcAcgBhAG0ARgBpAGwAZQBzACgAeAA4ADYAKQAlAFwATQBpAGMAcgBvAHMAbwBmAHQAXABFAGQAZwBlAFwAQQBwAHAAbABpAGMAYQB0AGkAbwBuAFwAbQBzAGUAZABnAGUALgBlAHgAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAUAAKAqAAAAxQAAABwAAAALAACg70BafPug/EuHSsDy4Ln6jsUAAABgAAAAAwAAoFgAAAAAAAAAZGVza3RvcC1hZzI5ODRxANiXnwow65VCnxRxNV0ngwSqQ73j7SbuEaM1ABVdATQD2JefCjDrlUKfFHE1XSeDBKpDvePtJu4RozUAFV0BNAPUAAAACQAAoEEAAAAxU1BT4opYRrxMOEO7/BOTJphtziUAAAAEAAAAAB8AAAAJAAAAUwAtADEALQA1AC0AMQA4AAAAAAAAAAAATgAAADFTUFNVKEyfeZ85S6jQ4dQt4dXzEQAAABIAAAAAEwAAAAEAAAAhAAAABQAAAAAfAAAABwAAAE0AUwBFAGQAZwBlAAAAAAAAAAAAOQAAADFTUFOxFm1ErY1wSKdIQC6kPXiMHQAAAGgAAAAASAAAADIeiKcFqt5OgLp8vctl9hYAAAAAAAAAAAAAAAA=",
"path": "C:\\Users\\Public\\Desktop\\Microsoft Edge.lnk"
},
{
"content": "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",
"path": "C:\\Users\\Public\\Desktop\\Yandex.lnk"
}
]
},
"Timestamp": 1759759848522.502,
"UserID": "DESKTOP-IDDQD\\Alice"
}
12. Фильтры сети
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 406,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "4d764b6a-3e63-4869-bba0-afc073f4ce48",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"network_filters": {
"ndis": {
"services": [
{
"command_line": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"id": "72",
"service_name": "LanmanWorkstation"
},
{
"command_line": "System32\\drivers\\bridge.sys",
"id": "73",
"service_name": "MsBridge"
},
{
"command_line": "system32\\drivers\\mslldp.sys",
"id": "74",
"service_name": "MsLldp"
},
{
"command_line": "system32\\DRIVERS\\nwifi.sys",
"id": "75",
"service_name": "NativeWifiP"
},
{
"command_line": "System32\\drivers\\ndiscap.sys",
"id": "76",
"service_name": "NdisCap"
},
{
"command_line": "System32\\drivers\\NdisImPlatform.sys",
"id": "77",
"service_name": "NdisImPlatform"
},
{
"command_line": "\\SystemRoot\\System32\\drivers\\ndiswan.sys",
"id": "78",
"service_name": "NdisWan"
},
{
"command_line": "system32\\drivers\\ndisuio.sys",
"id": "79",
"service_name": "Ndisuio"
},
{
"command_line": "system32\\drivers\\netbios.sys",
"id": "80",
"service_name": "NetBIOS"
},
{
"command_line": "System32\\DRIVERS\\netbt.sys",
"id": "81",
"service_name": "NetBT"
},
{
"command_line": "System32\\drivers\\pacer.sys",
"id": "82",
"service_name": "Psched"
},
{
"command_line": "System32\\DRIVERS\\raspppoe.sys",
"id": "83",
"service_name": "RasPppoe"
},
{
"command_line": "System32\\drivers\\tcpip.sys",
"id": "84",
"service_name": "Tcpip"
},
{
"command_line": "System32\\drivers\\tcpip.sys",
"id": "84",
"service_name": "Tcpip6"
},
{
"command_line": "System32\\drivers\\wfplwfs.sys",
"id": "85",
"service_name": "WfpLwfs"
},
{
"command_line": "\\SystemRoot\\System32\\drivers\\xboxgip.sys",
"id": "86",
"service_name": "Xboxgip"
},
{
"command_line": "system32\\drivers\\lltdio.sys",
"id": "87",
"service_name": "lltdio"
},
{
"command_line": "System32\\DRIVERS\\ndiswan.sys",
"id": "88",
"service_name": "ndiswanlegacy"
},
{
"command_line": "system32\\drivers\\rspndr.sys",
"id": "89",
"service_name": "rspndr"
},
{
"command_line": "System32\\DRIVERS\\wanarp.sys",
"id": "90",
"service_name": "wanarp"
},
{
"command_line": "System32\\DRIVERS\\wanarp.sys",
"id": "90",
"service_name": "wanarpv6"
}
]
},
"spi_lsp": {
"NameSpace_Catalog5": [
{
"data": "%SystemRoot%\\System32\\winrnr.dll",
"id": "66"
},
{
"data": "%SystemRoot%\\System32\\mswsock.dll",
"id": "67"
},
{
"data": "%SystemRoot%\\system32\\NLAapi.dll",
"id": "68"
},
{
"data": "%SystemRoot%\\system32\\wshbth.dll",
"id": "69"
},
{
"data": "%SystemRoot%\\system32\\pnrpnsp.dll",
"id": "70"
},
{
"data": "%SystemRoot%\\system32\\pnrpnsp.dll",
"id": "70"
},
{
"data": "%SystemRoot%\\system32\\napinsp.dll",
"id": "71"
},
{
"data": "%SystemRoot%\\System32\\winrnr.dll",
"id": "66"
},
{
"data": "%SystemRoot%\\System32\\mswsock.dll",
"id": "67"
},
{
"data": "%SystemRoot%\\system32\\NLAapi.dll",
"id": "68"
},
{
"data": "%SystemRoot%\\system32\\wshbth.dll",
"id": "69"
},
{
"data": "%SystemRoot%\\system32\\pnrpnsp.dll",
"id": "70"
},
{
"data": "%SystemRoot%\\system32\\pnrpnsp.dll",
"id": "70"
},
{
"data": "%SystemRoot%\\system32\\napinsp.dll",
"id": "71"
}
],
"Protocol_Catalog9": [
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAAGSAxJ+YcuRDt70YHyCJeSr2AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIAAAAB4AAAAeAAAAAQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE0AUwBBAEYARAAgAFIAZgBDAG8AbQBtACAAWwBCAGwAdQBlAHQAbwBvAHQAaABdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAIAAAAAAAAAAAAAAAAACAAAAGSAxJ+YcuRDt70YHyCJeSr1AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIAAAAB4AAAAeAAAAAQAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE0AUwBBAEYARAAgAEwAMgBDAEEAUAAgAFsAQgBsAHUAZQB0AG8AbwB0AGgAXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAABsZNBL3S6dMhuDf18MrVEX0AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIgAAACQAAAAkAAAAAQAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAeQBwAGUAcgAtAFYAIABSAEEAVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJJgIAAAAAAAAAAAAAAAAACAAAAOCpYJ16M9ARvYgAAMCC5przAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAgAAABAAAAAQAAAAAgAAABEAAAAAAAAAAAAAAAAAAAD3/wAAAAAAAEAAJQBTAHkAcwB0AGUAbQBSAG8AbwB0ACUAXABTAHkAcwB0AGUAbQAzADIAXAB3AHMAaABxAG8AcwAuAGQAbABsACwALQAxADAAMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmIAIAAAAAAAAAAAAAAAAACAAAAOCpYJ16M9ARvYgAAMCC5prxAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAgAAABAAAAAQAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAJQBTAHkAcwB0AGUAbQBSAG8AbwB0ACUAXABTAHkAcwB0AGUAbQAzADIAXAB3AHMAaABxAG8AcwAuAGQAbABsACwALQAxADAAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAANlDCaAunDNGm1kAV6MWCZTvAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAQAAAG4AAAACAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEARgBfAFUATgBJAFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAAGSAxJ+YcuRDt70YHyCJeSr2AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIAAAAB4AAAAeAAAAAQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE0AUwBBAEYARAAgAFIAZgBDAG8AbQBtACAAWwBCAGwAdQBlAHQAbwBvAHQAaABdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAIAAAAAAAAAAAAAAAAACAAAAGSAxJ+YcuRDt70YHyCJeSr1AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIAAAAB4AAAAeAAAAAQAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE0AUwBBAEYARAAgAEwAMgBDAEEAUAAgAFsAQgBsAHUAZQB0AG8AbwB0AGgAXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAABsZNBL3S6dMhuDf18MrVEX0AwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAIgAAACQAAAAkAAAAAQAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAeQBwAGUAcgAtAFYAIABSAEEAVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJJgIAAAAAAAAAAAAAAAAACAAAAOCpYJ16M9ARvYgAAMCC5pryAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAFwAAABwAAAAcAAAAAgAAABEAAAAAAAAAAAAAAAAAAAD3/wAAAAAAAEAAJQBTAHkAcwB0AGUAbQBSAG8AbwB0ACUAXABTAHkAcwB0AGUAbQAzADIAXAB3AHMAaABxAG8AcwAuAGQAbABsACwALQAxADAAMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAAIAAAAAAAAAAAAAAAAACAAAANlDCaAunDNGm1kAV6MWCZTvAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAQAAAG4AAAACAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEARgBfAFUATgBJAFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBgIAAAAAAAAAAAAAAAAADAAAAKAaD+eLq88RjKMAgF9IoZLrAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAgAAABAAAAAQAAAAAwAAAAAAAAD/AAAAAAAAAAAAAAAAgAAAAAAAAEAAJQBTAHkAcwB0AGUAbQBSAG8AbwB0ACUAXABTAHkAcwB0AGUAbQAzADIAXABtAHMAdwBzAG8AYwBrAC4AZABsAGwALAAtADYAMAAxADAAMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "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",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
},
{
"data": "JVN5c3RlbVJvb3QlXHN5c3RlbTMyXG1zd3NvY2suZGxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmAAIAAAAAAAAAAAAAAAAACAAAAKAaD+eLq88RjKMAgF9IoZLpAwAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAgAAABAAAAAQAAAAAQAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAJQBTAHkAcwB0AGUAbQBSAG8AbwB0ACUAXABTAHkAcwB0AGUAbQAzADIAXABtAHMAdwBzAG8AYwBrAC4AZABsAGwALAAtADYAMAAxADAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"id": "65",
"path": "%SystemRoot%\\system32\\mswsock.dll"
}
]
}
}
,
"Timestamp": 1759759848527.199,
"UserID": "DESKTOP-IDDQD\\Alice"
}
13. Настройки сети
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 407,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "5a6af92c-af50-4fee-bdc0-180e6e0ef751",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"network_settings": {
"HKEY_CURRENT_USER": {
"Default": [],
"WOW64_32": [
{
"path": "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyServer",
"value": "192.168.0.110:8888"
}
],
"WOW64_64": [
{
"path": "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyServer",
"value": "192.168.0.110:8888"
}
]
},
"HKEY_LOCAL_MACHINE": {
"Default": [
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{65079f8a-f2a1-4d58-9f68-2a69d9dcadfd}\\NameServer",
"value": ""
},
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{1be06e9a-e28e-4096-99ed-1d2dace65625}\\NameServer",
"value": ""
},
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{1be06e9a-e28e-4096-99ed-1d2dace65625}\\DhcpNameServer",
"value": "172.29.48.1"
},
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\{1be06e9a-e28e-4096-99ed-1d2dace65625}\\DhcpIPAddress",
"value": "172.29.56.13"
},
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\NameServer",
"value": ""
},
{
"path": "SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DhcpNameServer",
"value": "172.29.48.1"
}
],
"WOW64_32": [],
"WOW64_64": []
}
}
},
"Timestamp": 1759759848530.148,
"UserID": "DESKTOP-IDDQD\\Alice"
}
14. Информация об ОС
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 408,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "08bdc33a-3677-4c8c-919e-e077344e0765",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"os_info": {
"arch": 9,
"ver": "10.0.19041.4842 (WinBuild.160101.0800)"
}
},
"Timestamp": 1759759848533.34,
"UserID": "DESKTOP-IDDQD\\Alice"
}
15. Запущенные процессы
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 409,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "d6bc2f53-d4be-4bbe-8a23-95b86edc947d",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"processes": [
{
"caption": "System Idle Process",
"cmd_line": "",
"create_time": "20250922144252.654768+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 0,
"pid": 0
},
{
"caption": "System",
"cmd_line": "",
"create_time": "20250922144252.654768+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 0,
"pid": 4
},
{
"caption": "Registry",
"cmd_line": "",
"create_time": "20250922144251.536920+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4,
"pid": 100
},
{
"caption": "smss.exe",
"cmd_line": "",
"create_time": "20250922144252.657018+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4,
"pid": 432
},
{
"caption": "csrss.exe",
"cmd_line": "",
"create_time": "20250922144257.223195+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 536,
"pid": 548
},
{
"caption": "wininit.exe",
"cmd_line": "",
"create_time": "20250922144257.267478+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 536,
"pid": 632
},
{
"caption": "services.exe",
"cmd_line": "",
"create_time": "20250922144257.312915+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 632,
"pid": 776
},
{
"caption": "lsass.exe",
"cmd_line": "",
"create_time": "20250922144257.330502+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 632,
"pid": 800
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.452863+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 920
},
{
"caption": "fontdrvhost.exe",
"cmd_line": "",
"create_time": "20250922144257.461657+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 632,
"pid": 948
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.519004+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 492
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.536179+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 536
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.608669+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1028
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.616667+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1056
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.636949+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1112
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.637343+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1120
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.678868+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1236
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.697934+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1276
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.701232+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1284
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.701573+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1292
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.709626+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1336
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.709942+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1344
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.710325+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1352
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.751987+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1512
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.758977+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1532
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.776082+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1640
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.778062+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1680
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.785129+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1704
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.790892+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1736
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.807477+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1796
},
{
"caption": "VSSVC.exe",
"cmd_line": "",
"create_time": "20250922144257.812387+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1840
},
{
"caption": "Memory Compression",
"cmd_line": "",
"create_time": "20250922144257.826345+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4,
"pid": 1956
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.842915+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2036
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.851636+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1560
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.852458+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 1748
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.862978+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2064
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.866105+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2088
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.879282+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2112
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.926438+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2228
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.928616+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2240
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.956789+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2360
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.980253+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2436
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.980855+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2448
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.981239+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2456
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144257.998568+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2512
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.018164+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2580
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.049212+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2700
},
{
"caption": "spoolsv.exe",
"cmd_line": "",
"create_time": "20250922144258.056864+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2736
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.060911+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2752
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.083024+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2856
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.112731+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2924
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.319496+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3108
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.330911+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3148
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.331889+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3156
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.332849+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3164
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.333426+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3176
},
{
"caption": "MpDefenderCoreService.exe",
"cmd_line": "",
"create_time": "20250922144258.343463+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3228
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.362694+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3288
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.362953+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3296
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.369062+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3328
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.375004+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3340
},
{
"caption": "MsMpEng.exe",
"cmd_line": "",
"create_time": "20250922144258.383182+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3356
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.417573+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3440
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.427156+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3504
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.433302+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3520
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.452339+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3600
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144258.458231+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3632
},
{
"caption": "SearchIndexer.exe",
"cmd_line": "",
"create_time": "20250922144259.118463+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 3084
},
{
"caption": "dllhost.exe",
"cmd_line": "",
"create_time": "20250922144259.846027+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 920,
"pid": 4224
},
{
"caption": "AggregatorHost.exe",
"cmd_line": "",
"create_time": "20250922144259.901156+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 3156,
"pid": 4332
},
{
"caption": "csrss.exe",
"cmd_line": "",
"create_time": "20250922144259.965762+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4356,
"pid": 4364
},
{
"caption": "winlogon.exe",
"cmd_line": "",
"create_time": "20250922144259.975797+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4356,
"pid": 4412
},
{
"caption": "fontdrvhost.exe",
"cmd_line": "",
"create_time": "20250922144300.173577+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4412,
"pid": 4532
},
{
"caption": "dwm.exe",
"cmd_line": "",
"create_time": "20250922144300.256987+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 4412,
"pid": 4728
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144303.575492+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2168
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144303.672184+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 4656
},
{
"caption": "sihost.exe",
"cmd_line": "sihost.exe",
"create_time": "20250922144307.692531+180",
"exe": "C:\\WINDOWS\\system32\\sihost.exe",
"exe_id": "670",
"id": "671",
"parent_pid": 2924,
"pid": 5996
},
{
"caption": "svchost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup -s CDPUserSvc",
"create_time": "20250922144307.706110+180",
"exe": "C:\\WINDOWS\\system32\\svchost.exe",
"exe_id": "93",
"id": "93",
"parent_pid": 776,
"pid": 6032
},
{
"caption": "svchost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup -s WpnUserService",
"create_time": "20250922144307.716083+180",
"exe": "C:\\WINDOWS\\system32\\svchost.exe",
"exe_id": "93",
"id": "93",
"parent_pid": 776,
"pid": 6072
},
{
"caption": "taskhostw.exe",
"cmd_line": "taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}",
"create_time": "20250922144307.742907+180",
"exe": "C:\\WINDOWS\\system32\\taskhostw.exe",
"exe_id": "672",
"id": "673",
"parent_pid": 1748,
"pid": 5264
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144307.873537+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 5576
},
{
"caption": "explorer.exe",
"cmd_line": "C:\\WINDOWS\\Explorer.EXE",
"create_time": "20250922144307.904131+180",
"exe": "C:\\WINDOWS\\Explorer.EXE",
"exe_id": "674",
"id": "674",
"parent_pid": 5452,
"pid": 5092
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144308.039161+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2312
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144308.280133+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 5272
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144308.370010+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6224
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144308.398935+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6288
},
{
"caption": "NisSrv.exe",
"cmd_line": "",
"create_time": "20250922144309.342603+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6616
},
{
"caption": "svchost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc",
"create_time": "20250922144311.317112+180",
"exe": "C:\\WINDOWS\\system32\\svchost.exe",
"exe_id": "93",
"id": "93",
"parent_pid": 776,
"pid": 6856
},
{
"caption": "StartMenuExperienceHost.exe",
"cmd_line": "\"C:\\WINDOWS\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe\" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca",
"create_time": "20250922144311.787054+180",
"exe": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe",
"exe_id": "675",
"id": "675,676",
"parent_pid": 920,
"pid": 7092
},
{
"caption": "RuntimeBroker.exe",
"cmd_line": "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding",
"create_time": "20250922144311.905432+180",
"exe": "C:\\Windows\\System32\\RuntimeBroker.exe",
"exe_id": "677",
"id": "677",
"parent_pid": 920,
"pid": 6464
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144311.940857+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6392
},
{
"caption": "SearchApp.exe",
"cmd_line": "\"C:\\WINDOWS\\SystemApps\\Microsoft.Windows.Search_cw5n1h2txyewy\\SearchApp.exe\" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca",
"create_time": "20250922144312.131345+180",
"exe": "C:\\WINDOWS\\SystemApps\\Microsoft.Windows.Search_cw5n1h2txyewy\\SearchApp.exe",
"exe_id": "678",
"id": "678,679",
"parent_pid": 920,
"pid": 7192
},
{
"caption": "RuntimeBroker.exe",
"cmd_line": "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding",
"create_time": "20250922144312.292189+180",
"exe": "C:\\Windows\\System32\\RuntimeBroker.exe",
"exe_id": "677",
"id": "677",
"parent_pid": 920,
"pid": 7372
},
{
"caption": "dllhost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}",
"create_time": "20250922144318.306659+180",
"exe": "C:\\WINDOWS\\system32\\DllHost.exe",
"exe_id": "680",
"id": "680",
"parent_pid": 920,
"pid": 6504
},
{
"caption": "ApplicationFrameHost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\ApplicationFrameHost.exe -Embedding",
"create_time": "20250922144350.591363+180",
"exe": "C:\\WINDOWS\\system32\\ApplicationFrameHost.exe",
"exe_id": "681",
"id": "681",
"parent_pid": 920,
"pid": 4916
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144458.668027+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 8788
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144459.162707+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 7144
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922144459.303436+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 5804
},
{
"caption": "svchost.exe",
"cmd_line": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"create_time": "20250922144459.443875+180",
"exe": "C:\\WINDOWS\\system32\\svchost.exe",
"exe_id": "93",
"id": "93",
"parent_pid": 776,
"pid": 7820
},
{
"caption": "SecurityHealthService.exe",
"cmd_line": "",
"create_time": "20250922145322.830025+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 5672
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922145409.894572+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 5404
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922145425.685459+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 4892
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922145922.162475+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 8092
},
{
"caption": "csrss.exe",
"cmd_line": "",
"create_time": "20250922152740.717238+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 3512,
"pid": 2604
},
{
"caption": "winlogon.exe",
"cmd_line": "",
"create_time": "20250922152740.742198+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 3512,
"pid": 8976
},
{
"caption": "fontdrvhost.exe",
"cmd_line": "",
"create_time": "20250922152740.793087+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 8976,
"pid": 5140
},
{
"caption": "LogonUI.exe",
"cmd_line": "",
"create_time": "20250922152740.795470+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 8976,
"pid": 4116
},
{
"caption": "dwm.exe",
"cmd_line": "",
"create_time": "20250922152740.799298+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 8976,
"pid": 8980
},
{
"caption": "rdpclip.exe",
"cmd_line": "rdpclip",
"create_time": "20250922152741.038341+180",
"exe": "C:\\WINDOWS\\System32\\rdpclip.exe",
"exe_id": "682",
"id": "683",
"parent_pid": 1028,
"pid": 5680
},
{
"caption": "ShellExperienceHost.exe",
"cmd_line": "\"C:\\WINDOWS\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca",
"create_time": "20250922152742.669866+180",
"exe": "C:\\WINDOWS\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe",
"exe_id": "684",
"id": "684,685",
"parent_pid": 920,
"pid": 7460
},
{
"caption": "RuntimeBroker.exe",
"cmd_line": "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding",
"create_time": "20250922152742.746520+180",
"exe": "C:\\Windows\\System32\\RuntimeBroker.exe",
"exe_id": "677",
"id": "677",
"parent_pid": 920,
"pid": 7808
},
{
"caption": "ctfmon.exe",
"cmd_line": "",
"create_time": "20250922152743.692971+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 5576,
"pid": 2380
},
{
"caption": "TextInputHost.exe",
"cmd_line": "\"C:\\WINDOWS\\SystemApps\\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\\TextInputHost.exe\" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca",
"create_time": "20250922152744.730964+180",
"exe": "C:\\WINDOWS\\SystemApps\\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\\TextInputHost.exe",
"exe_id": "686",
"id": "686,687",
"parent_pid": 920,
"pid": 3400
},
{
"caption": "RuntimeBroker.exe",
"cmd_line": "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding",
"create_time": "20250922152745.838772+180",
"exe": "C:\\Windows\\System32\\RuntimeBroker.exe",
"exe_id": "677",
"id": "677",
"parent_pid": 920,
"pid": 2044
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922152746.609384+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6548
},
{
"caption": "SecurityHealthSystray.exe",
"cmd_line": "\"C:\\Windows\\System32\\SecurityHealthSystray.exe\" ",
"create_time": "20250922152753.193507+180",
"exe": "C:\\Windows\\System32\\SecurityHealthSystray.exe",
"exe_id": "688",
"id": "688",
"parent_pid": 5092,
"pid": 4424
},
{
"caption": "explorer.exe",
"cmd_line": "C:\\WINDOWS\\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding",
"create_time": "20250922152753.244977+180",
"exe": "C:\\WINDOWS\\explorer.exe",
"exe_id": "1",
"id": "1",
"parent_pid": 920,
"pid": 8664
},
{
"caption": "OneDrive.exe",
"cmd_line": "\"C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe\" /background",
"create_time": "20250922152753.648997+180",
"exe": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe",
"exe_id": "3",
"id": "3",
"parent_pid": 5092,
"pid": 7008
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20250922152755.341421+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 9568
},
{
"caption": "regedit.exe",
"cmd_line": "",
"create_time": "20250922152757.116475+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 5092,
"pid": 10048
},
{
"caption": "rundll32.exe",
"cmd_line": "\"C:\\Windows\\System32\\rundll32.exe\" C:\\Windows\\System32\\shell32.dll,Control_RunDLL C:\\Windows\\System32\\inetcpl.cpl",
"create_time": "20250922152809.809521+180",
"exe": "C:\\Windows\\System32\\rundll32.exe",
"exe_id": "689",
"id": "689,690,691",
"parent_pid": 8664,
"pid": 9284
},
{
"caption": "rundll32.exe",
"cmd_line": "\"C:\\WINDOWS\\System32\\rundll32.exe\" C:\\WINDOWS\\System32\\shell32.dll,Control_RunDLL C:\\WINDOWS\\System32\\timedate.cpl",
"create_time": "20250922152811.876757+180",
"exe": "C:\\WINDOWS\\System32\\rundll32.exe",
"exe_id": "43",
"id": "43,692,693",
"parent_pid": 8664,
"pid": 9376
},
{
"caption": "FileCoAuth.exe",
"cmd_line": "\"C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\FileCoAuth.exe\" -Embedding",
"create_time": "20250922152829.016355+180",
"exe": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\FileCoAuth.exe",
"exe_id": "694",
"id": "694",
"parent_pid": 920,
"pid": 9468
},
{
"caption": "cmd.exe",
"cmd_line": "\"C:\\WINDOWS\\system32\\cmd.exe\" ",
"create_time": "20250922152837.153431+180",
"exe": "C:\\WINDOWS\\system32\\cmd.exe",
"exe_id": "695",
"id": "695",
"parent_pid": 5092,
"pid": 5548
},
{
"caption": "conhost.exe",
"cmd_line": "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0x4",
"create_time": "20250922152837.186916+180",
"exe": "C:\\WINDOWS\\system32\\conhost.exe",
"exe_id": "696",
"id": "697",
"parent_pid": 5548,
"pid": 3868
},
{
"caption": "OneDrive.Sync.Service.exe",
"cmd_line": "\"C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\OneDrive.Sync.Service.exe\" /silentConfig",
"create_time": "20251006105613.111253+180",
"exe": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\OneDrive.Sync.Service.exe",
"exe_id": "698",
"id": "698",
"parent_pid": 8372,
"pid": 11108
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006105638.765277+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 11964
},
{
"caption": "WUDFHost.exe",
"cmd_line": "",
"create_time": "20251006105854.666604+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 6184
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006105854.944151+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2960
},
{
"caption": "service_update.exe",
"cmd_line": "",
"create_time": "20251006105935.813178+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 724
},
{
"caption": "service_update.exe",
"cmd_line": "",
"create_time": "20251006105935.826124+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 724,
"pid": 9144
},
{
"caption": "UserOOBEBroker.exe",
"cmd_line": "C:\\Windows\\System32\\oobe\\UserOOBEBroker.exe -Embedding",
"create_time": "20251006110504.426580+180",
"exe": "C:\\Windows\\System32\\oobe\\UserOOBEBroker.exe",
"exe_id": "699",
"id": "699",
"parent_pid": 920,
"pid": 1472
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006111028.982222+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 9008
},
{
"caption": "MusNotifyIcon.exe",
"cmd_line": "%systemroot%\\system32\\MusNotifyIcon.exe NotifyTrayIcon 9",
"create_time": "20251006111517.773455+180",
"exe": "C:\\WINDOWS\\system32\\MusNotifyIcon.exe",
"exe_id": "700",
"id": "700",
"parent_pid": 1148,
"pid": 7216
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006115138.748570+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 2060
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" ",
"create_time": "20251006133819.364182+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2",
"parent_pid": 5092,
"pid": 10364
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=crashpad-handler \"--user-data-dir=C:\\Users\\Alice\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\Alice\\Ap",
"cmd_line_rs": 809,
"create_time": "20251006133819.447440+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2",
"parent_pid": 10364,
"pid": 5972
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=gpu-process --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --no-pre-read-main-dll --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAA",
"cmd_line_rs": 703,
"create_time": "20251006133819.596603+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2",
"parent_pid": 10364,
"pid": 6840
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --p",
"cmd_line_rs": 638,
"create_time": "20251006133819.640341+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,701",
"parent_pid": 10364,
"pid": 7924
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate ",
"cmd_line_rs": 641,
"create_time": "20251006133819.662521+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,702",
"parent_pid": 10364,
"pid": 4084
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --proc",
"cmd_line_rs": 633,
"create_time": "20251006133819.708195+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,703",
"parent_pid": 10364,
"pid": 4768
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --enable-oow-v",
"cmd_line_rs": 1063,
"create_time": "20251006133820.919749+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,704",
"parent_pid": 10364,
"pid": 5516
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --enable-oow-v",
"cmd_line_rs": 1063,
"create_time": "20251006133821.125742+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,704",
"parent_pid": 10364,
"pid": 5460
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --enable-oow-v",
"cmd_line_rs": 1044,
"create_time": "20251006133823.104970+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,704",
"parent_pid": 10364,
"pid": 8800
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --enable-oow-v",
"cmd_line_rs": 1044,
"create_time": "20251006134315.837131+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,704",
"parent_pid": 10364,
"pid": 9740
},
{
"caption": "PhoneExperienceHost.exe",
"cmd_line": "\"C:\\Program Files\\WindowsApps\\Microsoft.YourPhone_1.25072.63.0_x64__8wekyb3d8bbwe\\PhoneExperienceHost.exe\" -ComServer:Background -Embedding",
"create_time": "20251006141353.769137+180",
"exe": "C:\\Program Files\\WindowsApps\\Microsoft.YourPhone_1.25072.63.0_x64__8wekyb3d8bbwe\\PhoneExperienceHost.exe",
"exe_id": "705",
"id": "705",
"parent_pid": 920,
"pid": 7612
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=renderer --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-id=corporate --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --enable-oow-v",
"cmd_line_rs": 1044,
"create_time": "20251006141546.074657+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,704",
"parent_pid": 10364,
"pid": 2004
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006170340.963417+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 12108
},
{
"caption": "svchost.exe",
"cmd_line": "",
"create_time": "20251006170341.800972+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 776,
"pid": 716
},
{
"caption": "WmiPrvSE.exe",
"cmd_line": "",
"create_time": "20251006171046.732198+180",
"exe": "",
"exe_id": "",
"id": "",
"parent_pid": 920,
"pid": 932
},
{
"caption": "browser.exe",
"cmd_line": "\"C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe\" --type=utility --utility-sub-type=hips_telemetry.mojom.HipsTelemetryCollector --lang=ru --service-sandbox-type=none --user-id=23632AE3-643D-4A53-A8F6-13C009EE4557 --brand-id=yandex --partner-i",
"cmd_line_rs": 656,
"create_time": "20251006171046.779331+180",
"exe": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe",
"exe_id": "2",
"id": "2,706",
"parent_pid": 10364,
"pid": 9472
}
]
},
"Timestamp": 1759759848535.844,
"UserID": "DESKTOP-IDDQD\\Alice"
}
16. Установленные программы
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 410,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "76694657-0269-43ce-a151-e20424bbc69b",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"fs_programs": {
"Local": {
"Application Data": {},
"Comms": {
"Unistore": null,
"UnistoreDB": null
},
"ConnectedDevicesPlatform": {
"L.Alice": null
},
"D3DSCache": {
"4b32c68852cb4881": null,
"5dc22bc232e57c76": null,
"f4d41c5d09ae781": null
},
"History": {},
"Microsoft": {
"CLR_v4.0": null,
"CLR_v4.0_32": null,
"Credentials": null,
"Edge": null,
"Feeds": null,
"Feeds Cache": null,
"GameDVR": null,
"InputPersonalization": null,
"Internet Explorer": null,
"Media Player": null,
"OneDrive": null,
"PenWorkspace": null,
"PlayReady": null,
"TokenBroker": null,
"Vault": null,
"Windows": null,
"Windows Sidebar": null,
"WindowsApps": null,
"XboxLive": null,
"input": null
},
"MicrosoftEdge": {
"SharedCacheContainers": null
},
"Packages": {
"1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy": null,
"A025C540.Yandex.Music_vfvw9svesycw6": null,
"ActiveSync": null,
"E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy": null,
"F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy": null,
"Microsoft.549981C3F5F10_8wekyb3d8bbwe": null,
"Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy": null,
"Microsoft.AccountsControl_cw5n1h2txyewy": null,
"Microsoft.AsyncTextService_8wekyb3d8bbwe": null,
"Microsoft.BingSearch_8wekyb3d8bbwe": null,
"Microsoft.BingWeather_8wekyb3d8bbwe": null,
"Microsoft.BioEnrollment_cw5n1h2txyewy": null,
"Microsoft.CredDialogHost_cw5n1h2txyewy": null,
"Microsoft.DesktopAppInstaller_8wekyb3d8bbwe": null,
"Microsoft.ECApp_8wekyb3d8bbwe": null,
"Microsoft.GetHelp_8wekyb3d8bbwe": null,
"Microsoft.Getstarted_8wekyb3d8bbwe": null,
"Microsoft.HEIFImageExtension_8wekyb3d8bbwe": null,
"Microsoft.LanguageExperiencePacken-US_8wekyb3d8bbwe": null,
"Microsoft.LanguageExperiencePackru-RU_8wekyb3d8bbwe": null,
"Microsoft.LockApp_cw5n1h2txyewy": null,
"Microsoft.MSPaint_8wekyb3d8bbwe": null,
"Microsoft.Messaging_8wekyb3d8bbwe": null,
"Microsoft.Microsoft3DViewer_8wekyb3d8bbwe": null,
"Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe": null,
"Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe": null,
"Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe": null,
"Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe": null,
"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe": null,
"Microsoft.MixedReality.Portal_8wekyb3d8bbwe": null,
"Microsoft.NET.Native.Framework.1.7_8wekyb3d8bbwe": null,
"Microsoft.NET.Native.Framework.2.2_8wekyb3d8bbwe": null,
"Microsoft.NET.Native.Runtime.1.7_8wekyb3d8bbwe": null,
"Microsoft.NET.Native.Runtime.2.2_8wekyb3d8bbwe": null,
"Microsoft.Office.OneNote_8wekyb3d8bbwe": null,
"Microsoft.OneConnect_8wekyb3d8bbwe": null,
"Microsoft.OutlookForWindows_8wekyb3d8bbwe": null,
"Microsoft.People_8wekyb3d8bbwe": null,
"Microsoft.Print3D_8wekyb3d8bbwe": null,
"Microsoft.ScreenSketch_8wekyb3d8bbwe": null,
"Microsoft.Services.Store.Engagement_8wekyb3d8bbwe": null,
"Microsoft.SkypeApp_kzf8qxf38zg5c": null,
"Microsoft.StorePurchaseApp_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.0_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.1_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.3_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.4_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.5_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.7_8wekyb3d8bbwe": null,
"Microsoft.UI.Xaml.2.8_8wekyb3d8bbwe": null,
"Microsoft.VCLibs.140.00.UWPDesktop_8wekyb3d8bbwe": null,
"Microsoft.VCLibs.140.00_8wekyb3d8bbwe": null,
"Microsoft.VP9VideoExtensions_8wekyb3d8bbwe": null,
"Microsoft.Wallet_8wekyb3d8bbwe": null,
"Microsoft.WebMediaExtensions_8wekyb3d8bbwe": null,
"Microsoft.WebpImageExtension_8wekyb3d8bbwe": null,
"Microsoft.Win32WebViewHost_cw5n1h2txyewy": null,
"Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy": null,
"Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy": null,
"Microsoft.Windows.CallingShellApp_cw5n1h2txyewy": null,
"Microsoft.Windows.CapturePicker_cw5n1h2txyewy": null,
"Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy": null,
"Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy": null,
"Microsoft.Windows.DevHome_8wekyb3d8bbwe": null,
"Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe": null,
"Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy": null,
"Microsoft.Windows.OOBENetworkConnectionFlow_cw5n1h2txyewy": null,
"Microsoft.Windows.ParentalControls_cw5n1h2txyewy": null,
"Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy": null,
"Microsoft.Windows.Photos_8wekyb3d8bbwe": null,
"Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy": null,
"Microsoft.Windows.Search_cw5n1h2txyewy": null,
"Microsoft.Windows.SecHealthUI_cw5n1h2txyewy": null,
"Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy": null,
"Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy": null,
"Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy": null,
"Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy": null,
"Microsoft.WindowsAlarms_8wekyb3d8bbwe": null,
"Microsoft.WindowsAppRuntime.1.3_8wekyb3d8bbwe": null,
"Microsoft.WindowsAppRuntime.1.4_8wekyb3d8bbwe": null,
"Microsoft.WindowsAppRuntime.1.5_8wekyb3d8bbwe": null,
"Microsoft.WindowsAppRuntime.1.6_8wekyb3d8bbwe": null,
"Microsoft.WindowsAppRuntime.1.7_8wekyb3d8bbwe": null,
"Microsoft.WindowsCalculator_8wekyb3d8bbwe": null,
"Microsoft.WindowsCamera_8wekyb3d8bbwe": null,
"Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe": null,
"Microsoft.WindowsMaps_8wekyb3d8bbwe": null,
"Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe": null,
"Microsoft.WindowsStore_8wekyb3d8bbwe": null,
"Microsoft.Winget.Source_8wekyb3d8bbwe": null,
"Microsoft.Xbox.TCUI_8wekyb3d8bbwe": null,
"Microsoft.XboxApp_8wekyb3d8bbwe": null,
"Microsoft.XboxGameCallableUI_cw5n1h2txyewy": null,
"Microsoft.XboxGameOverlay_8wekyb3d8bbwe": null,
"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe": null,
"Microsoft.XboxIdentityProvider_8wekyb3d8bbwe": null,
"Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe": null,
"Microsoft.YourPhone_8wekyb3d8bbwe": null,
"Microsoft.ZuneMusic_8wekyb3d8bbwe": null,
"Microsoft.ZuneVideo_8wekyb3d8bbwe": null,
"MicrosoftWindows.Client.CBS_cw5n1h2txyewy": null,
"MicrosoftWindows.CrossDevice_cw5n1h2txyewy": null,
"MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy": null,
"NcsiUwpApp_8wekyb3d8bbwe": null,
"Windows.CBSPreview_cw5n1h2txyewy": null,
"Windows.PrintDialog_cw5n1h2txyewy": null,
"c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy": null,
"cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe": null,
"microsoft.windowscommunicationsapps_8wekyb3d8bbwe": null,
"windows.immersivecontrolpanel_cw5n1h2txyewy": null,
"windows_ie_ac_001": null
},
"PeerDistRepub": {},
"PlaceholderTileLogoFolder": {
"9NTXGKQ8P7N0": null,
"9PDSCC711RVF": null
},
"Publishers": {
"8wekyb3d8bbwe": null
},
"Temp": {
"1DFD0A8D-9D2D-4F7E-BF6E-462141F89F88": null,
"8173015D-EB33-4379-858E-8F3CAD4217A5": null,
"A9EDB755-CFD4-43D0-A1D4-CDE9ED4CCA97": null,
"D5D8B696-E253-4146-8E50-1432442F9F5F": null,
"ListSync": null,
"Low": null,
"WinGet": null,
"WinSAT": null,
"chrome_BITS_10364_1221427700": null,
"chrome_BITS_11688_102708575": null,
"chrome_BITS_11688_1084135556": null,
"chrome_BITS_11688_1092628489": null,
"chrome_BITS_11688_1483424557": null,
"chrome_BITS_11688_1510563661": null,
"chrome_BITS_11688_1573092805": null,
"chrome_BITS_11688_1634115895": null,
"chrome_BITS_11688_1843738557": null,
"chrome_BITS_11688_187228770": null,
"chrome_BITS_11688_1938243350": null,
"chrome_BITS_11688_1975493331": null,
"chrome_BITS_11688_202905718": null,
"chrome_BITS_11688_220846187": null,
"chrome_BITS_11688_25271690": null,
"chrome_BITS_11688_30961223": null,
"chrome_BITS_11688_38084337": null,
"chrome_BITS_11688_530032882": null,
"chrome_BITS_11688_632714810": null,
"chrome_BITS_11688_760584191": null,
"chrome_BITS_11688_921993839": null,
"chrome_url_fetcher_11688_2046257633": null,
"chrome_url_fetcher_8000_269408575": null,
"chrome_url_fetcher_8000_558860152": null,
"edge_BITS_9272_1168139592": null,
"edge_BITS_9272_1179657851": null,
"edge_BITS_9272_1661297862": null,
"edge_BITS_9272_1915414478": null,
"edge_BITS_9272_1957816256": null,
"edge_BITS_9272_2001664013": null,
"edge_BITS_9272_322995518": null,
"edge_BITS_9272_426405986": null,
"edge_BITS_9272_770449044": null,
"edge_BITS_9272_849925232": null,
"pin": null
},
"Temporary Internet Files": {},
"VirtualStore": {},
"Yandex": {
"YandexBrowser": null
}
},
"Program Files": {
"Common Files": {
"Services": null,
"System": null,
"microsoft shared": null
},
"Internet Explorer": {
"SIGNUP": null,
"en-US": null,
"images": null,
"ru-RU": null
},
"Microsoft Update Health Tools": {
"Logs": null
},
"ModifiableWindowsApps": {},
"Uninstall Information": {},
"Windows Defender": {
"Offline": null,
"Platform": null,
"en-US": null,
"ru-RU": null
},
"Windows Defender Advanced Threat Protection": {
"Classification": null,
"en-US": null,
"ru-RU": null
},
"Windows Mail": {},
"Windows Media Player": {
"Icons": null,
"Media Renderer": null,
"Network Sharing": null,
"Skins": null,
"Visualizations": null,
"en-US": null,
"ru-RU": null
},
"Windows Multimedia Platform": {},
"Windows NT": {
"Accessories": null,
"TableTextService": null,
"Стандартные": null
},
"Windows Photo Viewer": {
"en-US": null,
"ru-RU": null
},
"Windows Portable Devices": {},
"Windows Security": {
"BrowserCore": null
},
"Windows Sidebar": {
"Gadgets": null,
"Shared Gadgets": null
},
"WindowsApps": {},
"WindowsPowerShell": {
"Configuration": null,
"Modules": null
},
"Yandex": {
"YandexBrowser": null
},
"ruxim": {
"Logs": null
}
},
"Program Files (x86)": {
"Common Files": {
"Microsoft Shared": null,
"Services": null,
"System": null
},
"Internet Explorer": {
"SIGNUP": null,
"en-US": null,
"images": null,
"ru-RU": null
},
"Microsoft": {
"Edge": null,
"EdgeCore": null,
"EdgeUpdate": null,
"EdgeWebView": null,
"Temp": null
},
"Microsoft.NET": {
"RedistList": null
},
"Windows Defender": {
"en-US": null,
"ru-RU": null
},
"Windows Mail": {},
"Windows Media Player": {
"Icons": null,
"Media Renderer": null,
"Network Sharing": null,
"Skins": null,
"Visualizations": null,
"en-US": null,
"ru-RU": null
},
"Windows Multimedia Platform": {},
"Windows NT": {
"Accessories": null,
"TableTextService": null
},
"Windows Photo Viewer": {
"en-US": null,
"ru-RU": null
},
"Windows Portable Devices": {},
"Windows Sidebar": {
"Gadgets": null,
"Shared Gadgets": null
},
"WindowsPowerShell": {
"Configuration": null,
"Modules": null
},
"Yandex": {
"YandexBrowser": null
}
}
}
},
"Timestamp": 1759759848538.851,
"UserID": "DESKTOP-IDDQD\\Alice"
}
17. Программы из реестра
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 411,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "93495873-28ea-4b23-a606-756cb500e88a",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"reg_programs": {
"WOW64_32": [
{
"name": "WIC",
"version": ""
},
{
"name": "SchedulingAgent",
"version": ""
},
{
"name": "MPlayer2",
"version": ""
},
{
"name": "MobileOptionPack",
"version": ""
},
{
"name": "Среда выполнения Microsoft Edge WebView2 Runtime",
"version": "140.0.3485.94"
},
{
"name": "Microsoft Edge Update",
"version": "1.3.201.11"
},
{
"name": "Microsoft Edge",
"version": "141.0.3537.57"
},
{
"name": "IEData",
"version": ""
},
{
"name": "IE5BAKEX",
"version": ""
},
{
"name": "IE4Data",
"version": ""
},
{
"name": "IE40",
"version": ""
},
{
"name": "Fontcore",
"version": ""
},
{
"name": "DXM_Runtime",
"version": ""
},
{
"name": "DirectDrawEx",
"version": ""
},
{
"name": "Connection Manager",
"version": ""
},
{
"name": "AddressBook",
"version": ""
}
],
"WOW64_64": [
{
"name": "Update for x64-based Windows Systems (KB5001716)",
"version": "8.94.0.0"
},
{
"name": "Yandex Browser",
"version": "25.8.4.834"
},
{
"name": "Microsoft Update Health Tools",
"version": "3.74.0.0"
},
{
"name": "WIC",
"version": ""
},
{
"name": "SnippingTool-ee6eb196-db28-4d99-816d-fa9a63b4a377",
"version": ""
},
{
"name": "SchedulingAgent",
"version": ""
},
{
"name": "mstsc-4b0a31aa-df6a-4307-9b47-d5cc50009643",
"version": ""
},
{
"name": "mspaint-b330ad9e-f80b-4c96-9949-4b4228be9a6e",
"version": ""
},
{
"name": "MPlayer2",
"version": ""
},
{
"name": "MobileOptionPack",
"version": ""
},
{
"name": "IEData",
"version": ""
},
{
"name": "IE5BAKEX",
"version": ""
},
{
"name": "IE4Data",
"version": ""
},
{
"name": "IE40",
"version": ""
},
{
"name": "Fontcore",
"version": ""
},
{
"name": "DXM_Runtime",
"version": ""
},
{
"name": "DirectDrawEx",
"version": ""
},
{
"name": "Connection Manager",
"version": ""
},
{
"name": "AddressBook",
"version": ""
}
]
}
},
"Timestamp": 1759759848541.759,
"UserID": "DESKTOP-IDDQD\\Alice"
}
18. Рутовые сертификаты
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 412,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "f23c50cb-fe75-4074-8147-91093193e9a8",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"rootcerts": {
"CA": [
"-----BEGIN CERTIFICATE-----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\n5c95ZPsdlHeynrIjVZ76ubrfiuM=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nJWhyg2e9VrCNAb0q98xLvYeluocgTEIRQa0QFzuM\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n6UlIE0uDihtIeyT3ON5vQVS4q1drBt/HotSp9vE2YoCI8ot11oBx\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nuqjXlQXrRlJUcY7ofs2abudK86RJ8MrGlaVRYFW9dB7LLAE=\n-----END CERTIFICATE-----\n"
],
"MY": [],
"ROOT": [
"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nCayJSdM=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nBOSoRQTIWjM4bk0cDWK3CqKM09VUP0bNHFWmcNsSOoeTdZ+n0qA=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\niA==\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nSB/c9O+lxbtVGjhjhE63bK2VVOxlIhBJF7jAHscPrFRH\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nXMUVZjFswWJxkQ9ZW30qghrfsbTYHTfeDQ8=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nZIKRBBLgq28ey1AFYbRA/1mGcdHVM2l8qXOKONdkDPFp\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----\nMIIDFzCCAp6gAwIBAgIQFTh14WR+0bBHtO+vQRKCRTAKBggqhkjOPQQDAzCBjzEL\nMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v\nbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE5MDcGA1UEAxMwTWlj\ncm9zb2Z0IEVDQyBUUyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDE4MB4X\nDTE4MDIyNzIwNTEzNFoXDTQzMDIyNzIxMDAxMlowgY8xCzAJBgNVBAYTAlVTMRMw\nEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN\naWNyb3NvZnQgQ29ycG9yYXRpb24xOTA3BgNVBAMTME1pY3Jvc29mdCBFQ0MgVFMg\nUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxODB2MBAGByqGSM49AgEGBSuB\nBAAiA2IABN7Nu3Ag8SUgtJTo17Q7D26H3ausz01AL4Eza1kJGNaHDSYjnLSNlZ12\nn6W5BkLmrTayxLOuejwI1cudOl5FIWwL4yD1m8LdRDPjQrnq8ihCkqr+DAfKihOZ\nO2IA7drzNaOBvDCBuTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAd\nBgNVHQ4EFgQU6EfIQpqwna5vCyg7mBWP47HogLIwEAYJKwYBBAGCNxUBBAMCAQAw\nZQYDVR0gBF4wXDAGBgRVHSAAMFIGDCsGAQQBgjdMg30BATBCMEAGCCsGAQUFBwIB\nFjRodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y\neS5odG0AMAoGCCqGSM49BAMDA2cAMGQCMBSGUMAmGuvqoRR3OlvfYzmlM8dQQNVr\nNWsPtN99VrnhpZ14GYKhQ24a11ijVQNC2wIwGJS0HjqNZPoMJxuHE0rStzoAlMby\n5WO/r+P63JPV50aaa4FpPgLfUQ2PKHFBiZEv\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\na9xkn0ArH0UkBK5JL/bfDJE=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\n3P+6Z0JIppAQ5L9h+JxT5ZPRcz/4/Z1PhKxV0f0RY2M=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nvKJFf7K2Vy0Iu5usvnFD0dyUhQXgS0j6Vxea86qOwZlePGhGt1Q=\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----\nMIIDIzCCAqigAwIBAgIQFJgmZtx8zY9AU2d7uZnshTAKBggqhkjOPQQDAzCBlDEL\nMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1v\nbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE+MDwGA1UEAxM1TWlj\ncm9zb2Z0IEVDQyBQcm9kdWN0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw\nMTgwHhcNMTgwMjI3MjA0MjA4WhcNNDMwMjI3MjA1MDQ2WjCBlDELMAkGA1UEBhMC\nVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV\nBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjE+MDwGA1UEAxM1TWljcm9zb2Z0IEVD\nQyBQcm9kdWN0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTgwdjAQBgcq\nhkjOPQIBBgUrgQQAIgNiAATHERYqdh1Wjr65YmXUw8608MMw7I9t1245vMhJq6u4\n40N41YEGXe/HfZ/O1rOQdd4MsJDeI7rI0T5n4BmpG4YxHl80Le4X/RX7fieKMqHq\nyY/JfhjLLzssSHp9pvQBB6yjgbwwgbkwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB\n/wQFMAMBAf8wHQYDVR0OBBYEFEPvcIe4nb/siBncxsRrdQ11NDMIMBAGCSsGAQQB\ngjcVAQQDAgEAMGUGA1UdIAReMFwwBgYEVR0gADBSBgwrBgEEAYI3TIN9AQEwQjBA\nBggrBgEFBQcCARY0aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2Nz\nL1JlcG9zaXRvcnkuaHRtADAKBggqhkjOPQQDAwNpADBmAjEAocBJRF0yVSfMPpBu\nJSKdJFubUTXHkUlJKqP5b08czd2c4bVXyZ7CIkWbBhVwHEW/AjEAxdMo63LHPrCs\nJwl/Yj1geeWS8UUquaUC5GC7/nornGCntZkU8rC+8LsFllZWj8Fo\n-----END CERTIFICATE-----\n",
"-----BEGIN CERTIFICATE-----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\nWOUH+pb4jQ==\n-----END CERTIFICATE-----\n"
]
}
},
"Timestamp": 1759759848544.608,
"UserID": "DESKTOP-IDDQD\\Alice"
}
19. Сервисы
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 413,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "c3e90422-dcce-438d-852c-e30a17c5b62b",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"services": {
"1394ohci": {
"id": "669",
"image_path": "\\SystemRoot\\System32\\drivers\\1394ohci.sys",
"start": 3,
"type": 1
},
"3ware": {
"id": "668",
"image_path": "System32\\drivers\\3ware.sys",
"start": 0,
"type": 1
},
"ACPI": {
"id": "666",
"image_path": "System32\\drivers\\ACPI.sys",
"start": 0,
"type": 1
},
"ADP80XX": {
"id": "659",
"image_path": "System32\\drivers\\ADP80XX.SYS",
"start": 0,
"type": 1
},
"AFD": {
"id": "658",
"image_path": "\\SystemRoot\\system32\\drivers\\afd.sys",
"start": 1,
"type": 1
},
"AJRouter": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\AJRouter.dll",
"service_dll_id": "655",
"start": 3,
"type": 32
},
"ALG": {
"id": "654",
"image_path": "C:\\WINDOWS\\System32\\alg.exe",
"start": 3,
"type": 16
},
"AarSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k AarSvcGroup -p",
"service_dll": "C:\\WINDOWS\\System32\\AarSvc.dll",
"service_dll_id": "667",
"start": 3,
"type": 96
},
"AarSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k AarSvcGroup -p",
"start": 3,
"type": 224
},
"AcpiDev": {
"id": "665",
"image_path": "\\SystemRoot\\System32\\drivers\\AcpiDev.sys",
"start": 3,
"type": 1
},
"AcpiPmi": {
"id": "662",
"image_path": "\\SystemRoot\\System32\\drivers\\acpipmi.sys",
"start": 3,
"type": 1
},
"Acx01000": {
"id": "660",
"image_path": "system32\\drivers\\Acx01000.sys",
"start": 3,
"type": 1
},
"AmdK8": {
"id": "651",
"image_path": "\\SystemRoot\\System32\\drivers\\amdk8.sys",
"start": 3,
"type": 1
},
"AmdPPM": {
"id": "650",
"image_path": "\\SystemRoot\\System32\\drivers\\amdppm.sys",
"start": 3,
"type": 1
},
"AppID": {
"id": "646",
"image_path": "system32\\drivers\\appid.sys",
"start": 3,
"type": 1
},
"AppIDSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\appidsvc.dll",
"service_dll_id": "645",
"start": 3,
"type": 32
},
"AppMgmt": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\appmgmts.dll",
"service_dll_id": "642",
"start": 3,
"type": 32
},
"AppReadiness": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k AppReadiness -p",
"service_dll": "C:\\WINDOWS\\system32\\AppReadiness.dll",
"service_dll_id": "641",
"start": 3,
"type": 32
},
"AppVClient": {
"id": "640",
"image_path": "C:\\WINDOWS\\system32\\AppVClient.exe",
"start": 4,
"type": 16
},
"AppXSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k wsappx -p",
"service_dll": "C:\\WINDOWS\\system32\\appxdeploymentserver.dll",
"service_dll_id": "636",
"start": 3,
"type": 32
},
"Appinfo": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\appinfo.dll",
"service_dll_id": "644",
"start": 3,
"type": 32
},
"AppvStrm": {
"id": "639",
"image_path": "\\SystemRoot\\system32\\drivers\\AppvStrm.sys",
"start": 3,
"type": 2
},
"AppvVemgr": {
"id": "638",
"image_path": "\\SystemRoot\\system32\\drivers\\AppvVemgr.sys",
"start": 3,
"type": 2
},
"AppvVfs": {
"id": "637",
"image_path": "\\SystemRoot\\system32\\drivers\\AppvVfs.sys",
"start": 3,
"type": 2
},
"AssignedAccessManagerSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k AssignedAccessManagerSvc",
"service_dll": "C:\\WINDOWS\\System32\\assignedaccessmanagersvc.dll",
"service_dll_id": "634",
"start": 3,
"type": 32
},
"AsyncMac": {
"id": "633",
"image_path": "\\SystemRoot\\System32\\drivers\\asyncmac.sys",
"start": 3,
"type": 1
},
"AudioEndpointBuilder": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\AudioEndpointBuilder.dll",
"service_dll_id": "631",
"start": 2,
"type": 32
},
"Audiosrv": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\Audiosrv.dll",
"service_dll_id": "630",
"start": 2,
"type": 16
},
"AxInstSV": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k AxInstSVGroup",
"service_dll": "C:\\WINDOWS\\System32\\AxInstSV.dll",
"service_dll_id": "628",
"start": 3,
"type": 32
},
"BDESVC": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\bdesvc.dll",
"service_dll_id": "621",
"start": 3,
"type": 32
},
"BFE": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p",
"service_dll": "C:\\WINDOWS\\System32\\bfe.dll",
"service_dll_id": "620",
"start": 2,
"type": 32
},
"BITS": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\qmgr.dll",
"service_dll_id": "618",
"start": 3,
"type": 32
},
"BTAGService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted",
"service_dll": "C:\\WINDOWS\\System32\\BTAGService.dll",
"service_dll_id": "614",
"start": 3,
"type": 32
},
"BTHMODEM": {
"id": "607",
"image_path": "\\SystemRoot\\System32\\drivers\\bthmodem.sys",
"start": 3,
"type": 1
},
"BTHPORT": {
"id": "606",
"image_path": "\\SystemRoot\\System32\\drivers\\BTHport.sys",
"start": 3,
"type": 1
},
"BTHUSB": {
"id": "604",
"image_path": "\\SystemRoot\\System32\\drivers\\BTHUSB.sys",
"start": 3,
"type": 1
},
"BasicDisplay": {
"id": "625",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_19e58b6267591a82\\BasicDisplay.sys",
"start": 1,
"type": 1
},
"BasicRender": {
"id": "624",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicrender.inf_amd64_eebb5a8467eb88ec\\BasicRender.sys",
"start": 1,
"type": 1
},
"BcastDVRUserService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k BcastDVRUserService",
"service_dll": "C:\\WINDOWS\\System32\\BcastDVRUserService.dll",
"service_dll_id": "623",
"start": 3,
"type": 96
},
"BcastDVRUserService_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k BcastDVRUserService",
"start": 3,
"type": 224
},
"BluetoothUserService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k BthAppGroup -p",
"service_dll": "C:\\WINDOWS\\System32\\Microsoft.Bluetooth.UserService.dll",
"service_dll_id": "617",
"start": 3,
"type": 96
},
"BluetoothUserService_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k BthAppGroup -p",
"start": 3,
"type": 224
},
"BrokerInfrastructure": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\System32\\psmsrv.dll",
"service_dll_id": "615",
"start": 2,
"type": 32
},
"BthA2dp": {
"id": "613",
"image_path": "\\SystemRoot\\System32\\drivers\\BthA2dp.sys",
"start": 3,
"type": 1
},
"BthAvctpSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\BthAvctpSvc.dll",
"service_dll_id": "612",
"start": 3,
"type": 32
},
"BthEnum": {
"id": "611",
"image_path": "\\SystemRoot\\System32\\drivers\\BthEnum.sys",
"start": 3,
"type": 1
},
"BthHFEnum": {
"id": "610",
"image_path": "\\SystemRoot\\System32\\drivers\\bthhfenum.sys",
"start": 3,
"type": 1
},
"BthLEEnum": {
"id": "609",
"image_path": "\\SystemRoot\\System32\\drivers\\Microsoft.Bluetooth.Legacy.LEEnumerator.sys",
"start": 3,
"type": 1
},
"BthMini": {
"id": "608",
"image_path": "\\SystemRoot\\System32\\drivers\\BTHMINI.sys",
"start": 3,
"type": 1
},
"CAD": {
"id": "601",
"image_path": "\\SystemRoot\\System32\\drivers\\CAD.sys",
"start": 3,
"type": 1
},
"CDPSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\CDPSvc.dll",
"service_dll_id": "596",
"start": 2,
"type": 32
},
"CDPUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\CDPUserSvc.dll",
"service_dll_id": "595",
"start": 2,
"type": 96
},
"CDPUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 2,
"type": 224
},
"CLFS": {
"id": "589",
"image_path": "System32\\drivers\\CLFS.sys",
"start": 0,
"type": 1
},
"CNG": {
"id": "585",
"image_path": "System32\\Drivers\\cng.sys",
"start": 0,
"type": 1
},
"COMSysApp": {
"id": "582",
"image_path": "C:\\WINDOWS\\system32\\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}",
"start": 3,
"type": 16
},
"CSC": {
"id": "576",
"image_path": "system32\\drivers\\csc.sys",
"start": 1,
"type": 1
},
"CaptureService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\CaptureService.dll",
"service_dll_id": "599",
"start": 3,
"type": 96
},
"CaptureService_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"start": 3,
"type": 224
},
"CertPropSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs",
"service_dll": "C:\\WINDOWS\\System32\\certprop.dll",
"service_dll_id": "300",
"start": 3,
"type": 32
},
"CldFlt": {
"id": "590",
"image_path": "system32\\drivers\\cldflt.sys",
"start": 2,
"type": 2
},
"ClipSVC": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k wsappx -p",
"service_dll": "C:\\WINDOWS\\System32\\ClipSVC.dll",
"service_dll_id": "588",
"start": 3,
"type": 32
},
"CmBatt": {
"id": "586",
"image_path": "\\SystemRoot\\System32\\drivers\\CmBatt.sys",
"start": 3,
"type": 1
},
"CompositeBus": {
"id": "583",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\compositebus.inf_amd64_7500cffa210c6946\\CompositeBus.sys",
"start": 3,
"type": 1
},
"ConsentUxUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"service_dll": "C:\\WINDOWS\\System32\\ConsentUxClient.dll",
"service_dll_id": "580",
"start": 3,
"type": 96
},
"ConsentUxUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"start": 3,
"type": 224
},
"CoreMessagingRegistrar": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetwork -p",
"service_dll": "C:\\WINDOWS\\system32\\coremessaging.dll",
"service_dll_id": "579",
"start": 2,
"type": 32
},
"CredentialEnrollmentManagerUserSvc": {
"id": "578",
"image_path": "C:\\WINDOWS\\system32\\CredentialEnrollmentManager.exe",
"start": 3,
"type": 80
},
"CredentialEnrollmentManagerUserSvc_70af6": {
"id": "578",
"image_path": "C:\\WINDOWS\\system32\\CredentialEnrollmentManager.exe",
"start": 3,
"type": 208
},
"CryptSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\system32\\cryptsvc.dll",
"service_dll_id": "577",
"start": 2,
"type": 32
},
"CscService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\cscsvc.dll",
"service_dll_id": "575",
"start": 3,
"type": 32
},
"DPS": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNoNetwork -p",
"service_dll": "C:\\WINDOWS\\system32\\dps.dll",
"service_dll_id": "552",
"start": 2,
"type": 32
},
"DXGKrnl": {
"id": "547",
"image_path": "\\SystemRoot\\System32\\drivers\\dxgkrnl.sys",
"start": 1,
"type": 1
},
"DcomLaunch": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\system32\\rpcss.dll",
"service_dll_id": "308",
"start": 2,
"type": 32
},
"DevQueryBroker": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\DevQueryBroker.dll",
"service_dll_id": "567",
"start": 3,
"type": 32
},
"DeviceAssociationBrokerSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow -p",
"service_dll": "C:\\WINDOWS\\System32\\deviceaccess.dll",
"service_dll_id": "571",
"start": 3,
"type": 96
},
"DeviceAssociationBrokerSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow -p",
"start": 3,
"type": 224
},
"DeviceAssociationService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\das.dll",
"service_dll_id": "570",
"start": 3,
"type": 32
},
"DeviceInstall": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\system32\\umpnpmgr.dll",
"service_dll_id": "344",
"start": 3,
"type": 32
},
"DevicePickerUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"service_dll": "C:\\WINDOWS\\System32\\Windows.Devices.Picker.dll",
"service_dll_id": "569",
"start": 3,
"type": 96
},
"DevicePickerUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"start": 3,
"type": 224
},
"DevicesFlowUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"service_dll": "C:\\WINDOWS\\System32\\DevicesFlowBroker.dll",
"service_dll_id": "568",
"start": 3,
"type": 96
},
"DevicesFlowUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DevicesFlow",
"start": 3,
"type": 224
},
"Dfsc": {
"id": "566",
"image_path": "System32\\Drivers\\dfsc.sys",
"start": 1,
"type": 2
},
"Dhcp": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\dhcpcore.dll",
"service_dll_id": "565",
"start": 2,
"type": 32
},
"DiagTrack": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k utcsvc -p",
"service_dll": "C:\\WINDOWS\\system32\\diagtrack.dll",
"service_dll_id": "562",
"start": 2,
"type": 16
},
"DialogBlockingService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DialogBlockingService",
"service_dll": "C:\\WINDOWS\\System32\\DialogBlockingService.dll",
"service_dll_id": "561",
"start": 4,
"type": 32
},
"DispBrokerDesktopSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\DispBroker.Desktop.dll",
"service_dll_id": "559",
"start": 2,
"type": 32
},
"DisplayEnhancementService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\Microsoft.Graphics.Display.DisplayEnhancementService.dll",
"service_dll_id": "558",
"start": 3,
"type": 32
},
"DmEnrollmentSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\Windows.Internal.Management.dll",
"service_dll_id": "557",
"start": 3,
"type": 16
},
"Dnscache": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\System32\\dnsrslvr.dll",
"service_dll_id": "554",
"start": 2,
"type": 32
},
"DoSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"start": 2,
"type": 32
},
"DsSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\DsSvc.dll",
"service_dll_id": "549",
"start": 3,
"type": 32
},
"DsmSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\DeviceSetupManager.dll",
"service_dll_id": "550",
"start": 3,
"type": 32
},
"DusmSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\dusmsvc.dll",
"service_dll_id": "548",
"start": 2,
"type": 16
},
"EFS": {
"id": "542",
"image_path": "C:\\WINDOWS\\System32\\lsass.exe",
"service_dll": "C:\\WINDOWS\\system32\\efssvc.dll",
"service_dll_id": "543",
"start": 3,
"type": 32
},
"Eaphost": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\eapsvc.dll",
"service_dll_id": "546",
"start": 3,
"type": 32
},
"EhStorClass": {
"id": "541",
"image_path": "System32\\drivers\\EhStorClass.sys",
"start": 0,
"type": 1
},
"EhStorTcgDrv": {
"id": "540",
"image_path": "System32\\drivers\\EhStorTcgDrv.sys",
"start": 0,
"type": 1
},
"EntAppSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k appmodel -p",
"service_dll": "C:\\WINDOWS\\system32\\EnterpriseAppMgmtSvc.dll",
"service_dll_id": "538",
"start": 3,
"type": 32
},
"ErrDev": {
"id": "537",
"image_path": "\\SystemRoot\\System32\\drivers\\errdev.sys",
"start": 3,
"type": 1
},
"EventLog": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wevtsvc.dll",
"service_dll_id": "536",
"start": 2,
"type": 32
},
"EventSystem": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\es.dll",
"service_dll_id": "535",
"start": 2,
"type": 32
},
"FDResPub": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\system32\\fdrespub.dll",
"service_dll_id": "531",
"start": 3,
"type": 32
},
"Fax": {
"id": "534",
"image_path": "C:\\WINDOWS\\system32\\fxssvc.exe",
"start": 3,
"type": 16
},
"FileCrypt": {
"id": "529",
"image_path": "system32\\drivers\\filecrypt.sys",
"start": 1,
"type": 2
},
"FileInfo": {
"id": "528",
"image_path": "System32\\drivers\\fileinfo.sys",
"start": 0,
"type": 2
},
"Filetrace": {
"id": "527",
"image_path": "system32\\drivers\\filetrace.sys",
"start": 3,
"type": 2
},
"FltMgr": {
"id": "525",
"image_path": "system32\\drivers\\fltmgr.sys",
"start": 0,
"type": 2
},
"FontCache": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\FntCache.dll",
"service_dll_id": "524",
"start": 2,
"type": 32
},
"FrameServer": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k Camera",
"service_dll": "C:\\WINDOWS\\system32\\FrameServer.dll",
"service_dll_id": "523",
"start": 3,
"type": 32
},
"FsDepends": {
"id": "522",
"image_path": "System32\\drivers\\FsDepends.sys",
"start": 3,
"type": 2
},
"GPIOClx0101": {
"id": "517",
"image_path": "System32\\Drivers\\msgpioclx.sys",
"start": 3,
"type": 1
},
"GameInputSvc": {
"id": "520",
"image_path": "C:\\WINDOWS\\System32\\GameInputSvc.exe",
"start": 3,
"type": 16
},
"GpuEnergyDrv": {
"id": "515",
"image_path": "System32\\drivers\\gpuenergydrv.sys",
"start": 1,
"type": 1
},
"GraphicsPerfSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k GraphicsPerfSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\GraphicsPerfSvc.dll",
"service_dll_id": "514",
"start": 3,
"type": 32
},
"HDAudBus": {
"id": "512",
"image_path": "\\SystemRoot\\System32\\drivers\\HDAudBus.sys",
"start": 3,
"type": 1
},
"HTTP": {
"id": "501",
"image_path": "system32\\drivers\\HTTP.sys",
"start": 3,
"type": 1
},
"HdAudAddService": {
"id": "513",
"image_path": "\\SystemRoot\\System32\\drivers\\HdAudio.sys",
"start": 3,
"type": 1
},
"HidBatt": {
"id": "511",
"image_path": "\\SystemRoot\\System32\\drivers\\HidBatt.sys",
"start": 3,
"type": 1
},
"HidBth": {
"id": "510",
"image_path": "\\SystemRoot\\System32\\drivers\\hidbth.sys",
"start": 3,
"type": 1
},
"HidIr": {
"id": "507",
"image_path": "\\SystemRoot\\System32\\drivers\\hidir.sys",
"start": 3,
"type": 1
},
"HidSpiCx": {
"id": "504",
"image_path": "system32\\drivers\\HidSpiCx.sys",
"start": 3,
"type": 1
},
"HidUsb": {
"id": "503",
"image_path": "\\SystemRoot\\System32\\drivers\\hidusb.sys",
"start": 3,
"type": 1
},
"HpSAMD": {
"id": "502",
"image_path": "System32\\drivers\\HpSAMD.sys",
"start": 0,
"type": 1
},
"HvHost": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\hvhostsvc.dll",
"service_dll_id": "499",
"start": 3,
"type": 32
},
"HwNClx0101": {
"id": "497",
"image_path": "System32\\Drivers\\mshwnclx.sys",
"start": 3,
"type": 1
},
"HyperVideo": {
"id": "494",
"image_path": "\\SystemRoot\\System32\\drivers\\HyperVideo.sys",
"start": 3,
"type": 1
},
"IKEEXT": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\ikeext.dll",
"service_dll_id": "476",
"start": 3,
"type": 32
},
"IPMIDRV": {
"id": "466",
"image_path": "\\SystemRoot\\System32\\drivers\\IPMIDrv.sys",
"start": 3,
"type": 1
},
"IPNAT": {
"id": "465",
"image_path": "System32\\drivers\\ipnat.sys",
"start": 3,
"type": 1
},
"IPT": {
"id": "464",
"image_path": "\\SystemRoot\\System32\\drivers\\ipt.sys",
"start": 3,
"type": 1
},
"IndirectKmd": {
"id": "475",
"image_path": "\\SystemRoot\\System32\\drivers\\IndirectKmd.sys",
"start": 3,
"type": 1
},
"InstallService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\InstallService.dll",
"service_dll_id": "474",
"start": 3,
"type": 16
},
"IpFilterDriver": {
"id": "468",
"image_path": "system32\\DRIVERS\\ipfltdrv.sys",
"start": 3,
"type": 1
},
"IpxlatCfgSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\IpxlatCfg.dll",
"service_dll_id": "463",
"start": 3,
"type": 32
},
"ItSas35i": {
"id": "460",
"image_path": "System32\\drivers\\ItSas35i.sys",
"start": 0,
"type": 1
},
"KSecDD": {
"id": "454",
"image_path": "System32\\Drivers\\ksecdd.sys",
"start": 0,
"type": 1
},
"KSecPkg": {
"id": "453",
"image_path": "System32\\Drivers\\ksecpkg.sys",
"start": 0,
"type": 1
},
"KeyIso": {
"id": "178",
"image_path": "C:\\WINDOWS\\system32\\lsass.exe",
"service_dll": "C:\\WINDOWS\\system32\\keyiso.dll",
"service_dll_id": "455",
"start": 3,
"type": 32
},
"KslD": {
"id": "452",
"image_path": "system32\\drivers\\wd\\KslD.sys",
"start": 3,
"type": 1
},
"KtmRm": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\system32\\msdtckrm.dll",
"service_dll_id": "450",
"start": 3,
"type": 32
},
"LSI_SAS": {
"id": "444",
"image_path": "System32\\drivers\\lsi_sas.sys",
"start": 0,
"type": 1
},
"LSI_SAS2i": {
"id": "443",
"image_path": "System32\\drivers\\lsi_sas2i.sys",
"start": 0,
"type": 1
},
"LSI_SAS3i": {
"id": "442",
"image_path": "System32\\drivers\\lsi_sas3i.sys",
"start": 0,
"type": 1
},
"LSI_SSS": {
"id": "441",
"image_path": "System32\\drivers\\lsi_sss.sys",
"start": 0,
"type": 1
},
"LSM": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\System32\\lsm.dll",
"service_dll_id": "440",
"start": 2,
"type": 32
},
"LanmanServer": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\srvsvc.dll",
"service_dll_id": "449",
"start": 2,
"type": 32
},
"LanmanWorkstation": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\System32\\wkssvc.dll",
"service_dll_id": "448",
"start": 2,
"type": 32
},
"LicenseManager": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\LicenseManagerSvc.dll",
"service_dll_id": "446",
"start": 3,
"type": 32
},
"LxpSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs",
"service_dll": "C:\\WINDOWS\\System32\\LanguageOverlayServer.dll",
"service_dll_id": "438",
"start": 3,
"type": 32
},
"MDCoreSvc": {
"id": "432",
"image_path": "\"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpDefenderCoreService.exe\"",
"start": 2,
"type": 16
},
"MMCSS": {
"id": "422",
"image_path": "\\SystemRoot\\system32\\drivers\\mmcss.sys",
"start": 2,
"type": 1
},
"MRxDAV": {
"id": "412",
"image_path": "\\SystemRoot\\system32\\drivers\\mrxdav.sys",
"start": 3,
"type": 2
},
"MSDTC": {
"id": "409",
"image_path": "C:\\WINDOWS\\System32\\msdtc.exe",
"start": 3,
"type": 16
},
"MSKSSRV": {
"id": "401",
"image_path": "\\SystemRoot\\System32\\drivers\\MSKSSRV.sys",
"start": 3,
"type": 1
},
"MSPCLOCK": {
"id": "400",
"image_path": "\\SystemRoot\\System32\\drivers\\MSPCLOCK.sys",
"start": 3,
"type": 1
},
"MSPQM": {
"id": "399",
"image_path": "\\SystemRoot\\System32\\drivers\\MSPQM.sys",
"start": 3,
"type": 1
},
"MSTEE": {
"id": "393",
"image_path": "\\SystemRoot\\System32\\drivers\\MSTEE.sys",
"start": 3,
"type": 1
},
"MSiSCSI": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\iscsiexe.dll",
"service_dll_id": "404",
"start": 3,
"type": 32
},
"MTConfig": {
"id": "392",
"image_path": "\\SystemRoot\\System32\\drivers\\MTConfig.sys",
"start": 3,
"type": 1
},
"MapsBroker": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\System32\\moshost.dll",
"service_dll_id": "437",
"start": 2,
"type": 16
},
"MbbCx": {
"id": "434",
"image_path": "system32\\drivers\\MbbCx.sys",
"start": 3,
"type": 1
},
"McpManagementService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k McpManagementServiceGroup",
"service_dll": "C:\\WINDOWS\\System32\\McpManagementService.dll",
"service_dll_id": "433",
"start": 3,
"type": 16
},
"MessagingService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\MessagingService.dll",
"service_dll_id": "427",
"start": 3,
"type": 96
},
"MessagingService_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 3,
"type": 224
},
"MicrosoftEdgeElevationService": {
"id": "426",
"image_path": "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\141.0.3537.57\\elevation_service.exe\"",
"start": 3,
"type": 16
},
"Microsoft_Bluetooth_AvrcpTransport": {
"id": "425",
"image_path": "\\SystemRoot\\System32\\drivers\\Microsoft.Bluetooth.AvrcpTransport.sys",
"start": 3,
"type": 1
},
"MixedRealityOpenXRSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\MixedRealityRuntime.dll",
"service_dll_id": "424",
"start": 3,
"type": 32
},
"Modem": {
"id": "421",
"image_path": "system32\\drivers\\modem.sys",
"start": 3,
"type": 1
},
"MpKsl58f8bfc3": {
"id": "415,416",
"image_path": "\\??\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{83D7E23D-AFFC-4ED1-A359-4A97CCE2D0B9}\\MpKslDrv.sys",
"start": 3,
"type": 1
},
"MsBridge": {
"id": "73",
"image_path": "System32\\drivers\\bridge.sys",
"start": 3,
"type": 1
},
"MsKeyboardFilter": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\KeyboardFilterSvc.dll",
"service_dll_id": "402",
"start": 4,
"type": 32
},
"MsLldp": {
"id": "74",
"image_path": "system32\\drivers\\mslldp.sys",
"start": 2,
"type": 1
},
"MsQuic": {
"id": "398",
"image_path": "system32\\drivers\\msquic.sys",
"start": 3,
"type": 1
},
"MsSecCore": {
"id": "397",
"image_path": "system32\\drivers\\msseccore.sys",
"start": 0,
"type": 1
},
"MsSecFlt": {
"id": "396",
"image_path": "system32\\drivers\\mssecflt.sys",
"start": 3,
"type": 1
},
"MsSecWfp": {
"id": "395",
"image_path": "system32\\drivers\\mssecwfp.sys",
"start": 3,
"type": 1
},
"Mup": {
"id": "391",
"image_path": "System32\\Drivers\\mup.sys",
"start": 0,
"type": 2
},
"NDIS": {
"id": "384",
"image_path": "system32\\drivers\\ndis.sys",
"start": 0,
"type": 1
},
"NDKPing": {
"id": "381",
"image_path": "system32\\drivers\\NDKPing.sys",
"start": 3,
"type": 1
},
"NativeWifiP": {
"id": "75",
"image_path": "system32\\DRIVERS\\nwifi.sys",
"start": 3,
"type": 1
},
"NaturalAuthentication": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\NaturalAuth.dll",
"service_dll_id": "389",
"start": 3,
"type": 32
},
"NcaSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetSvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\ncasvc.dll",
"service_dll_id": "388",
"start": 3,
"type": 32
},
"NcbService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\ncbservice.dll",
"service_dll_id": "387",
"start": 3,
"type": 32
},
"NcdAutoSetup": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNoNetwork -p",
"service_dll": "C:\\WINDOWS\\System32\\NcdAutoSetup.dll",
"service_dll_id": "386",
"start": 3,
"type": 32
},
"NdisCap": {
"id": "76",
"image_path": "System32\\drivers\\ndiscap.sys",
"start": 1,
"type": 1
},
"NdisImPlatform": {
"id": "77",
"image_path": "System32\\drivers\\NdisImPlatform.sys",
"start": 3,
"type": 1
},
"NdisTapi": {
"id": "383",
"image_path": "System32\\DRIVERS\\ndistapi.sys",
"start": 3,
"type": 1
},
"NdisVirtualBus": {
"id": "382",
"image_path": "\\SystemRoot\\System32\\drivers\\NdisVirtualBus.sys",
"start": 3,
"type": 1
},
"NdisWan": {
"id": "78",
"image_path": "\\SystemRoot\\System32\\drivers\\ndiswan.sys",
"start": 3,
"type": 1
},
"Ndisuio": {
"id": "79",
"image_path": "system32\\drivers\\ndisuio.sys",
"start": 3,
"type": 1
},
"Ndu": {
"id": "379",
"image_path": "system32\\drivers\\Ndu.sys",
"start": 2,
"type": 1
},
"NetAdapterCx": {
"id": "378",
"image_path": "system32\\drivers\\NetAdapterCx.sys",
"start": 3,
"type": 1
},
"NetBIOS": {
"id": "80",
"image_path": "system32\\drivers\\netbios.sys",
"start": 1,
"type": 2
},
"NetBT": {
"id": "81",
"image_path": "System32\\DRIVERS\\netbt.sys",
"start": 1,
"type": 1
},
"NetSetupSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\NetSetupSvc.dll",
"service_dll_id": "374",
"start": 3,
"type": 32
},
"NetTcpPortSharing": {
"id": "373",
"image_path": "C:\\WINDOWS\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe",
"start": 4,
"type": 32
},
"Netlogon": {
"id": "178",
"image_path": "C:\\WINDOWS\\system32\\lsass.exe",
"service_dll": "C:\\WINDOWS\\system32\\netlogon.dll",
"service_dll_id": "377",
"start": 3,
"type": 32
},
"Netman": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\netman.dll",
"service_dll_id": "376",
"start": 3,
"type": 32
},
"NgcCtnrSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\NgcCtnrSvc.dll",
"service_dll_id": "371",
"start": 3,
"type": 32
},
"NgcSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\ngcsvc.dll",
"service_dll_id": "370",
"start": 3,
"type": 32
},
"NlaSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"start": 2,
"type": 32
},
"OneSyncSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\APHostService.dll",
"service_dll_id": "364",
"start": 2,
"type": 96
},
"OneSyncSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 2,
"type": 224
},
"PEAUTH": {
"id": "354",
"image_path": "system32\\drivers\\peauth.sys",
"start": 2,
"type": 1
},
"PNPMEM": {
"id": "342",
"image_path": "\\SystemRoot\\System32\\drivers\\pnpmem.sys",
"start": 3,
"type": 1
},
"PNRPAutoReg": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServicePeerNet",
"service_dll": "C:\\WINDOWS\\system32\\pnrpauto.dll",
"service_dll_id": "341",
"start": 3,
"type": 32
},
"PNRPsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServicePeerNet",
"service_dll": "C:\\WINDOWS\\system32\\pnrpsvc.dll",
"service_dll_id": "340",
"start": 3,
"type": 32
},
"Parport": {
"id": "362",
"image_path": "\\SystemRoot\\System32\\drivers\\parport.sys",
"start": 3,
"type": 1
},
"PcaSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\pcasvc.dll",
"service_dll_id": "360",
"start": 3,
"type": 32
},
"PeerDistSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k PeerDist",
"service_dll": "C:\\WINDOWS\\system32\\peerdistsvc.dll",
"service_dll_id": "353",
"start": 3,
"type": 32
},
"PerfHost": {
"id": "349",
"image_path": "C:\\WINDOWS\\SysWow64\\perfhost.exe",
"start": 3,
"type": 16
},
"PhoneSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\PhoneService.dll",
"service_dll_id": "348",
"start": 3,
"type": 32
},
"PimIndexMaintenanceSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\PimIndexMaintenance.dll",
"service_dll_id": "347",
"start": 3,
"type": 96
},
"PimIndexMaintenanceSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 3,
"type": 224
},
"PktMon": {
"id": "346",
"image_path": "system32\\drivers\\PktMon.sys",
"start": 3,
"type": 1
},
"PlugPlay": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\system32\\umpnpmgr.dll",
"service_dll_id": "344",
"start": 3,
"type": 32
},
"PolicyAgent": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\ipsecsvc.dll",
"service_dll_id": "339",
"start": 3,
"type": 32
},
"Power": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\system32\\umpo.dll",
"service_dll_id": "337",
"start": 2,
"type": 32
},
"PptpMiniport": {
"id": "336",
"image_path": "\\SystemRoot\\System32\\drivers\\raspptp.sys",
"start": 3,
"type": 1
},
"PrintNotify": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k print",
"service_dll": "C:\\WINDOWS\\system32\\spool\\drivers\\x64\\3\\PrintConfig.dll",
"service_dll_id": "335",
"start": 3,
"type": 288
},
"PrintWorkflowUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k PrintWorkflow",
"service_dll": "C:\\WINDOWS\\System32\\PrintWorkflowService.dll",
"service_dll_id": "334",
"start": 3,
"type": 96
},
"PrintWorkflowUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k PrintWorkflow",
"start": 3,
"type": 224
},
"Processor": {
"id": "333",
"image_path": "\\SystemRoot\\System32\\drivers\\processr.sys",
"start": 3,
"type": 1
},
"ProfSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\profsvc.dll",
"service_dll_id": "332",
"start": 2,
"type": 32
},
"Psched": {
"id": "82",
"image_path": "System32\\drivers\\pacer.sys",
"start": 1,
"type": 1
},
"PushToInstall": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\PushToInstall.dll",
"service_dll_id": "331",
"start": 3,
"type": 32
},
"QWAVE": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\system32\\qwave.dll",
"service_dll_id": "330",
"start": 3,
"type": 32
},
"QWAVEdrv": {
"id": "329",
"image_path": "\\SystemRoot\\system32\\drivers\\qwavedrv.sys",
"start": 3,
"type": 1
},
"RDPDR": {
"id": "319",
"image_path": "System32\\drivers\\rdpdr.sys",
"start": 3,
"type": 1
},
"RFCOMM": {
"id": "313",
"image_path": "\\SystemRoot\\System32\\drivers\\rfcomm.sys",
"start": 3,
"type": 1
},
"Ramdisk": {
"id": "328",
"image_path": "system32\\DRIVERS\\ramdisk.sys",
"start": 0,
"type": 1
},
"RasAcd": {
"id": "327",
"image_path": "System32\\DRIVERS\\rasacd.sys",
"start": 3,
"type": 1
},
"RasAgileVpn": {
"id": "326",
"image_path": "\\SystemRoot\\System32\\drivers\\AgileVpn.sys",
"start": 3,
"type": 1
},
"RasAuto": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\rasauto.dll",
"service_dll_id": "325",
"start": 3,
"type": 32
},
"RasMan": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs",
"service_dll": "C:\\WINDOWS\\System32\\rasmans.dll",
"service_dll_id": "323",
"start": 2,
"type": 32
},
"RasPppoe": {
"id": "83",
"image_path": "System32\\DRIVERS\\raspppoe.sys",
"start": 3,
"type": 1
},
"RasSstp": {
"id": "322",
"image_path": "\\SystemRoot\\System32\\drivers\\rassstp.sys",
"start": 3,
"type": 1
},
"Rasl2tp": {
"id": "324",
"image_path": "\\SystemRoot\\System32\\drivers\\rasl2tp.sys",
"start": 3,
"type": 1
},
"RdpVideoMiniport": {
"id": "318",
"image_path": "System32\\drivers\\rdpvideominiport.sys",
"start": 3,
"type": 1
},
"RemoteAccess": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs",
"service_dll": "C:\\WINDOWS\\System32\\mprdim.dll",
"service_dll_id": "316",
"start": 4,
"type": 32
},
"RemoteRegistry": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k localService -p",
"service_dll": "C:\\WINDOWS\\system32\\regsvc.dll",
"service_dll_id": "315",
"start": 4,
"type": 32
},
"RetailDemo": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k rdxgroup",
"service_dll": "C:\\WINDOWS\\system32\\RDXService.dll",
"service_dll_id": "314",
"start": 3,
"type": 32
},
"RmSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted",
"service_dll": "C:\\WINDOWS\\System32\\RMapi.dll",
"service_dll_id": "311",
"start": 3,
"type": 32
},
"RpcEptMapper": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k RPCSS -p",
"service_dll": "C:\\WINDOWS\\System32\\RpcEpMap.dll",
"service_dll_id": "310",
"start": 2,
"type": 32
},
"RpcLocator": {
"id": "309",
"image_path": "C:\\WINDOWS\\system32\\locator.exe",
"start": 3,
"type": 16
},
"RpcSs": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k rpcss -p",
"service_dll": "C:\\WINDOWS\\system32\\rpcss.dll",
"service_dll_id": "308",
"start": 2,
"type": 32
},
"SCPolicySvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs",
"service_dll": "C:\\WINDOWS\\System32\\certprop.dll",
"service_dll_id": "300",
"start": 3,
"type": 32
},
"SCardSvr": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation",
"service_dll": "C:\\WINDOWS\\System32\\SCardSvr.dll",
"service_dll_id": "305",
"start": 3,
"type": 32
},
"SDFRd": {
"id": "298",
"image_path": "\\SystemRoot\\System32\\drivers\\SDFRd.sys",
"start": 3,
"type": 1
},
"SDRSVC": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k SDRSVC",
"service_dll": "C:\\WINDOWS\\System32\\SDRSVC.dll",
"service_dll_id": "297",
"start": 3,
"type": 16
},
"SEMgrSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\SEMgrSvc.dll",
"service_dll_id": "293",
"start": 3,
"type": 16
},
"SENS": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\sens.dll",
"service_dll_id": "292",
"start": 2,
"type": 32
},
"SNMPTRAP": {
"id": "270",
"image_path": "C:\\WINDOWS\\System32\\snmptrap.exe",
"start": 3,
"type": 16
},
"SSDPSRV": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\System32\\ssdpsrv.dll",
"service_dll_id": "260",
"start": 3,
"type": 32
},
"SamSs": {
"id": "178",
"image_path": "C:\\WINDOWS\\system32\\lsass.exe",
"start": 2,
"type": 32
},
"ScDeviceEnum": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted",
"service_dll": "C:\\WINDOWS\\System32\\ScDeviceEnum.dll",
"service_dll_id": "304",
"start": 3,
"type": 32
},
"Schedule": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\schedsvc.dll",
"service_dll_id": "302",
"start": 2,
"type": 32
},
"SecurityHealthService": {
"id": "294",
"image_path": "C:\\WINDOWS\\system32\\SecurityHealthService.exe",
"start": 3,
"type": 16
},
"Sense": {
"id": "291",
"image_path": "\"C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe\"",
"start": 3,
"type": 16
},
"SensorDataService": {
"id": "290",
"image_path": "C:\\WINDOWS\\System32\\SensorDataService.exe",
"start": 3,
"type": 16
},
"SensorService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\SensorService.dll",
"service_dll_id": "289",
"start": 3,
"type": 32
},
"SensrSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\system32\\sensrsvc.dll",
"service_dll_id": "288",
"start": 3,
"type": 32
},
"SerCx": {
"id": "287",
"image_path": "system32\\drivers\\SerCx.sys",
"start": 3,
"type": 1
},
"SerCx2": {
"id": "286",
"image_path": "system32\\drivers\\SerCx2.sys",
"start": 3,
"type": 1
},
"Serenum": {
"id": "285",
"image_path": "\\SystemRoot\\System32\\drivers\\serenum.sys",
"start": 3,
"type": 1
},
"Serial": {
"id": "284",
"image_path": "\\SystemRoot\\System32\\drivers\\serial.sys",
"start": 3,
"type": 1
},
"SessionEnv": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\sessenv.dll",
"service_dll_id": "282",
"start": 3,
"type": 32
},
"SharedAccess": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\ipnathlp.dll",
"service_dll_id": "280",
"start": 3,
"type": 32
},
"SharedRealitySvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\SharedRealitySvc.dll",
"service_dll_id": "279",
"start": 3,
"type": 32
},
"ShellHWDetection": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\shsvcs.dll",
"service_dll_id": "278",
"start": 2,
"type": 32
},
"SiSRaid2": {
"id": "276",
"image_path": "System32\\drivers\\SiSRaid2.sys",
"start": 0,
"type": 1
},
"SiSRaid4": {
"id": "275",
"image_path": "System32\\drivers\\sisraid4.sys",
"start": 0,
"type": 1
},
"SmartSAMD": {
"id": "274",
"image_path": "System32\\drivers\\SmartSAMD.sys",
"start": 0,
"type": 1
},
"SmsRouter": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\SmsRouterSvc.dll",
"service_dll_id": "271",
"start": 3,
"type": 32
},
"SpatialGraphFilter": {
"id": "267",
"image_path": "System32\\drivers\\SpatialGraphFilter.sys",
"start": 3,
"type": 1
},
"SpbCx": {
"id": "266",
"image_path": "system32\\drivers\\SpbCx.sys",
"start": 3,
"type": 1
},
"Spooler": {
"id": "264",
"image_path": "C:\\WINDOWS\\System32\\spoolsv.exe",
"start": 2,
"type": 272
},
"SstpSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\sstpsvc.dll",
"service_dll_id": "258",
"start": 3,
"type": 32
},
"StateRepository": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k appmodel -p",
"service_dll": "C:\\WINDOWS\\system32\\windows.staterepository.dll",
"service_dll_id": "257",
"start": 3,
"type": 32
},
"StorSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\storsvc.dll",
"service_dll_id": "250",
"start": 2,
"type": 16
},
"Synth3dVsc": {
"id": "244",
"image_path": "\\SystemRoot\\System32\\drivers\\Synth3dVsc.sys",
"start": 3,
"type": 1
},
"SysMain": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\sysmain.dll",
"service_dll_id": "243",
"start": 2,
"type": 32
},
"SystemEventsBroker": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch -p",
"service_dll": "C:\\WINDOWS\\System32\\SystemEventsBrokerServer.dll",
"service_dll_id": "242",
"start": 2,
"type": 32
},
"TPM": {
"id": "230",
"image_path": "\\SystemRoot\\System32\\drivers\\tpm.sys",
"start": 3,
"type": 1
},
"TabletInputService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\TabSvc.dll",
"service_dll_id": "241",
"start": 3,
"type": 32
},
"TapiSrv": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\System32\\tapisrv.dll",
"service_dll_id": "240",
"start": 3,
"type": 32
},
"Tcpip": {
"id": "84",
"image_path": "System32\\drivers\\tcpip.sys",
"start": 0,
"type": 1
},
"Tcpip6": {
"id": "84",
"image_path": "System32\\drivers\\tcpip.sys",
"start": 3,
"type": 1
},
"Telemetry": {
"id": "237",
"image_path": "System32\\drivers\\IntelTA.sys",
"start": 0,
"type": 1
},
"TermService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService",
"service_dll": "C:\\WINDOWS\\System32\\termsrv.dll",
"service_dll_id": "235",
"start": 3,
"type": 32
},
"Themes": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\themeservice.dll",
"service_dll_id": "234",
"start": 2,
"type": 32
},
"TieringEngineService": {
"id": "233",
"image_path": "C:\\WINDOWS\\system32\\TieringEngineService.exe",
"start": 3,
"type": 16
},
"TimeBrokerSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\TimeBrokerServer.dll",
"service_dll_id": "232",
"start": 3,
"type": 32
},
"TokenBroker": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\TokenBroker.dll",
"service_dll_id": "231",
"start": 3,
"type": 32
},
"TrkWks": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\trkwks.dll",
"service_dll_id": "229",
"start": 2,
"type": 32
},
"TroubleshootingSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\MitigationClient.dll",
"service_dll_id": "228",
"start": 3,
"type": 32
},
"TrustedInstaller": {
"id": "227",
"image_path": "C:\\WINDOWS\\servicing\\TrustedInstaller.exe",
"start": 2,
"type": 16
},
"TsUsbFlt": {
"id": "226",
"image_path": "system32\\drivers\\tsusbflt.sys",
"start": 3,
"type": 1
},
"TsUsbGD": {
"id": "225",
"image_path": "\\SystemRoot\\System32\\drivers\\TsUsbGD.sys",
"start": 3,
"type": 1
},
"UASPStor": {
"id": "221",
"image_path": "\\SystemRoot\\System32\\drivers\\uaspstor.sys",
"start": 3,
"type": 1
},
"UCPD": {
"id": "216",
"image_path": "system32\\drivers\\UCPD.sys",
"start": 1,
"type": 2
},
"UEFI": {
"id": "211",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\uefi.inf_amd64_c1628ffa62c8e54c\\UEFI.sys",
"start": 3,
"type": 1
},
"USBHUB3": {
"id": "190",
"image_path": "\\SystemRoot\\System32\\drivers\\UsbHub3.sys",
"start": 3,
"type": 1
},
"USBSTOR": {
"id": "186",
"image_path": "\\SystemRoot\\System32\\drivers\\USBSTOR.SYS",
"start": 3,
"type": 1
},
"USBXHCI": {
"id": "184",
"image_path": "\\SystemRoot\\System32\\drivers\\USBXHCI.SYS",
"start": 3,
"type": 1
},
"UcmCx0101": {
"id": "220",
"image_path": "System32\\Drivers\\UcmCx.sys",
"start": 3,
"type": 1
},
"UcmTcpciCx0101": {
"id": "219",
"image_path": "System32\\Drivers\\UcmTcpciCx.sys",
"start": 3,
"type": 1
},
"UcmUcsiAcpiClient": {
"id": "218",
"image_path": "\\SystemRoot\\System32\\drivers\\UcmUcsiAcpiClient.sys",
"start": 3,
"type": 1
},
"UcmUcsiCx0101": {
"id": "217",
"image_path": "System32\\Drivers\\UcmUcsiCx.sys",
"start": 3,
"type": 1
},
"Ucx01000": {
"id": "215",
"image_path": "system32\\drivers\\ucx01000.sys",
"start": 3,
"type": 1
},
"UdeCx": {
"id": "214",
"image_path": "system32\\drivers\\udecx.sys",
"start": 3,
"type": 1
},
"UdkUserSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UdkSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\windowsudk.shellcommon.dll",
"service_dll_id": "212",
"start": 3,
"type": 96
},
"UdkUserSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UdkSvcGroup",
"start": 3,
"type": 224
},
"UevAgentDriver": {
"id": "210",
"image_path": "\\SystemRoot\\system32\\drivers\\UevAgentDriver.sys",
"start": 4,
"type": 2
},
"UevAgentService": {
"id": "209",
"image_path": "C:\\WINDOWS\\system32\\AgentService.exe",
"start": 4,
"type": 16
},
"Ufx01000": {
"id": "208",
"image_path": "system32\\drivers\\ufx01000.sys",
"start": 3,
"type": 1
},
"UfxChipidea": {
"id": "207",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\ufxchipidea.inf_amd64_1c78775fffab6a0a\\UfxChipidea.sys",
"start": 3,
"type": 1
},
"UmPass": {
"id": "203",
"image_path": "\\SystemRoot\\System32\\drivers\\umpass.sys",
"start": 3,
"type": 1
},
"UmRdpService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\umrdp.dll",
"service_dll_id": "202",
"start": 3,
"type": 32
},
"UnistoreSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\unistore.dll",
"service_dll_id": "201",
"start": 3,
"type": 96
},
"UnistoreSvc_70af6": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k UnistackSvcGroup",
"start": 3,
"type": 224
},
"UrsChipidea": {
"id": "199",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\urschipidea.inf_amd64_78ad1c14e33df968\\urschipidea.sys",
"start": 3,
"type": 1
},
"UrsCx01000": {
"id": "198",
"image_path": "system32\\drivers\\urscx01000.sys",
"start": 3,
"type": 1
},
"UrsSynopsys": {
"id": "197",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\urssynopsys.inf_amd64_057fa37902020500\\urssynopsys.sys",
"start": 3,
"type": 1
},
"UserDataSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\userdataservice.dll",
"service_dll_id": "183",
"start": 3,
"type": 96
},
"UserDataSvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 3,
"type": 224
},
"UserManager": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\usermgr.dll",
"service_dll_id": "182",
"start": 2,
"type": 32
},
"UsoSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\usosvc.dll",
"service_dll_id": "181",
"start": 2,
"type": 32
},
"VMBusHID": {
"id": "169",
"image_path": "\\SystemRoot\\System32\\drivers\\VMBusHID.sys",
"start": 3,
"type": 1
},
"VSS": {
"id": "159",
"image_path": "C:\\WINDOWS\\system32\\vssvc.exe",
"start": 3,
"type": 16
},
"VSTXRAID": {
"id": "158",
"image_path": "System32\\drivers\\vstxraid.sys",
"start": 0,
"type": 1
},
"VacSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\vac.dll",
"service_dll_id": "180",
"start": 3,
"type": 16
},
"VaultSvc": {
"id": "178",
"image_path": "C:\\WINDOWS\\system32\\lsass.exe",
"service_dll": "C:\\Windows\\System32\\vaultsvc.dll",
"service_dll_id": "179",
"start": 3,
"type": 32
},
"VerifierExt": {
"id": "175",
"image_path": "System32\\drivers\\VerifierExt.sys",
"start": 4,
"type": 1
},
"Vid": {
"id": "172",
"image_path": "\\SystemRoot\\System32\\drivers\\Vid.sys",
"start": 1,
"type": 1
},
"VirtualRender": {
"id": "171",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\vrd.inf_amd64_81fbd405ff2470fc\\vrd.sys",
"start": 3,
"type": 1
},
"W32Time": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService",
"service_dll": "C:\\WINDOWS\\system32\\w32time.dll",
"service_dll_id": "155",
"start": 2,
"type": 32
},
"WEPHOSTSVC": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k WepHostSvcGroup",
"service_dll": "C:\\WINDOWS\\system32\\wephostsvc.dll",
"service_dll_id": "134",
"start": 3,
"type": 32
},
"WFDSConMgrSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wfdsconmgrsvc.dll",
"service_dll_id": "131",
"start": 3,
"type": 32
},
"WFPLWFS": {
"id": "85",
"image_path": "System32\\drivers\\wfplwfs.sys",
"start": 0,
"type": 1
},
"WIMMount": {
"id": "129",
"image_path": "system32\\drivers\\wimmount.sys",
"start": 3,
"type": 2
},
"WINUSB": {
"id": "120",
"image_path": "\\SystemRoot\\System32\\drivers\\WinUSB.SYS",
"start": 3,
"type": 1
},
"WMPNetworkSvc": {
"id": "111",
"image_path": "\"C:\\Program Files\\Windows Media Player\\wmpnetwk.exe\"",
"start": 3,
"type": 16
},
"WManSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\Windows.Management.Service.dll",
"service_dll_id": "114",
"start": 3,
"type": 32
},
"WPDBusEnum": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted",
"service_dll": "C:\\WINDOWS\\system32\\wpdbusenum.dll",
"service_dll_id": "108",
"start": 3,
"type": 32
},
"WSearch": {
"id": "102",
"image_path": "C:\\WINDOWS\\system32\\SearchIndexer.exe /Embedding",
"start": 2,
"type": 16
},
"WUDFRd": {
"id": "99",
"image_path": "\\SystemRoot\\System32\\drivers\\WUDFRd.sys",
"start": 3,
"type": 1
},
"WaaSMedicSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k wusvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\WaaSMedicSvc.dll",
"service_dll_id": "154",
"start": 3,
"type": 32
},
"WacomPen": {
"id": "153",
"image_path": "\\SystemRoot\\System32\\drivers\\wacompen.sys",
"start": 3,
"type": 1
},
"WalletService": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k appmodel -p",
"service_dll": "C:\\WINDOWS\\system32\\WalletService.dll",
"service_dll_id": "152",
"start": 3,
"type": 32
},
"WarpJITSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted",
"service_dll": "C:\\WINDOWS\\System32\\Windows.WARP.JITService.dll",
"service_dll_id": "151",
"start": 3,
"type": 16
},
"WbioSrvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k WbioSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\wbiosrvc.dll",
"service_dll_id": "149",
"start": 3,
"type": 32
},
"Wcmsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wcmsvc.dll",
"service_dll_id": "147",
"start": 2,
"type": 16
},
"WdBoot": {
"id": "144",
"image_path": "system32\\drivers\\wd\\WdBoot.sys",
"start": 0,
"type": 1
},
"WdFilter": {
"id": "142",
"image_path": "system32\\drivers\\wd\\WdFilter.sys",
"start": 0,
"type": 2
},
"WdNisDrv": {
"id": "138",
"image_path": "system32\\drivers\\wd\\WdNisDrv.sys",
"start": 3,
"type": 1
},
"WdNisSvc": {
"id": "137",
"image_path": "\"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\NisSrv.exe\"",
"start": 3,
"type": 16
},
"Wdf01000": {
"id": "143",
"image_path": "system32\\drivers\\Wdf01000.sys",
"start": 0,
"type": 1
},
"WdiServiceHost": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\wdi.dll",
"service_dll_id": "141",
"start": 3,
"type": 32
},
"WdiSystemHost": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\wdi.dll",
"service_dll_id": "141",
"start": 3,
"type": 32
},
"WdmCompanionFilter": {
"id": "139",
"image_path": "system32\\drivers\\WdmCompanionFilter.sys",
"start": 3,
"type": 1
},
"WebClient": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\webclnt.dll",
"service_dll_id": "136",
"start": 3,
"type": 32
},
"Wecsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\system32\\wecsvc.dll",
"service_dll_id": "135",
"start": 3,
"type": 32
},
"WerSvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k WerSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\WerSvc.dll",
"service_dll_id": "132",
"start": 3,
"type": 16
},
"WiaRpc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wiarpc.dll",
"service_dll_id": "130",
"start": 3,
"type": 32
},
"WinDefend": {
"id": "128",
"image_path": "\"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MsMpEng.exe\"",
"start": 2,
"type": 16
},
"WinHttpAutoProxySvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\winhttp.dll",
"service_dll_id": "125",
"start": 3,
"type": 32
},
"WinMad": {
"id": "124",
"image_path": "\\SystemRoot\\System32\\drivers\\winmad.sys",
"start": 3,
"type": 1
},
"WinNat": {
"id": "122",
"image_path": "system32\\drivers\\winnat.sys",
"start": 3,
"type": 1
},
"WinRM": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService -p",
"service_dll": "C:\\WINDOWS\\system32\\WsmSvc.dll",
"service_dll_id": "121",
"start": 3,
"type": 32
},
"WinVerbs": {
"id": "119",
"image_path": "\\SystemRoot\\System32\\drivers\\winverbs.sys",
"start": 3,
"type": 1
},
"WindowsTrustedRT": {
"id": "127",
"image_path": "system32\\drivers\\WindowsTrustedRT.sys",
"start": 0,
"type": 1
},
"WindowsTrustedRTProxy": {
"id": "126",
"image_path": "System32\\drivers\\WindowsTrustedRTProxy.sys",
"start": 0,
"type": 1
},
"Winmgmt": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\wbem\\WMIsvc.dll",
"service_dll_id": "123",
"start": 2,
"type": 32
},
"WlanSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wlansvc.dll",
"service_dll_id": "117",
"start": 3,
"type": 16
},
"WmiAcpi": {
"id": "113",
"image_path": "\\SystemRoot\\System32\\drivers\\wmiacpi.sys",
"start": 3,
"type": 1
},
"WpcMonSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService",
"service_dll": "C:\\WINDOWS\\System32\\WpcDesktopMonSvc.dll",
"service_dll_id": "109",
"start": 3,
"type": 16
},
"WpdUpFltr": {
"id": "107",
"image_path": "System32\\drivers\\WpdUpFltr.sys",
"start": 3,
"type": 1
},
"WpnService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\WpnService.dll",
"service_dll_id": "106",
"start": 2,
"type": 32
},
"WpnUserService": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"service_dll": "C:\\WINDOWS\\System32\\WpnUserService.dll",
"service_dll_id": "105",
"start": 2,
"type": 96
},
"WpnUserService_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
"start": 2,
"type": 224
},
"WudfPf": {
"id": "100",
"image_path": "system32\\drivers\\WudfPf.sys",
"start": 3,
"type": 1
},
"WwanSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wwansvc.dll",
"service_dll_id": "98",
"start": 3,
"type": 32
},
"XblAuthManager": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\XblAuthManager.dll",
"service_dll_id": "97",
"start": 3,
"type": 32
},
"XblGameSave": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\XblGameSave.dll",
"service_dll_id": "96",
"start": 3,
"type": 32
},
"XboxGipSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\XboxGipSvc.dll",
"service_dll_id": "95",
"start": 3,
"type": 32
},
"XboxNetApiSvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\XboxNetApiSvc.dll",
"service_dll_id": "94",
"start": 3,
"type": 32
},
"YandexBrowserService": {
"id": "91",
"image_path": "\"C:\\Program Files (x86)\\Yandex\\YandexBrowser\\25.8.4.834\\service_update.exe\" --run-as-service",
"start": 2,
"type": 16
},
"acpiex": {
"id": "664",
"image_path": "System32\\Drivers\\acpiex.sys",
"start": 0,
"type": 1
},
"acpipagr": {
"id": "663",
"image_path": "\\SystemRoot\\System32\\drivers\\acpipagr.sys",
"start": 3,
"type": 1
},
"acpitime": {
"id": "661",
"image_path": "\\SystemRoot\\System32\\drivers\\acpitime.sys",
"start": 3,
"type": 1
},
"afunix": {
"id": "657",
"image_path": "\\SystemRoot\\system32\\drivers\\afunix.sys",
"start": 1,
"type": 1
},
"ahcache": {
"id": "656",
"image_path": "system32\\DRIVERS\\ahcache.sys",
"start": 1,
"type": 1
},
"amdgpio2": {
"id": "653",
"image_path": "\\SystemRoot\\System32\\drivers\\amdgpio2.sys",
"start": 3,
"type": 1
},
"amdi2c": {
"id": "652",
"image_path": "\\SystemRoot\\System32\\drivers\\amdi2c.sys",
"start": 3,
"type": 1
},
"amdsata": {
"id": "649",
"image_path": "System32\\drivers\\amdsata.sys",
"start": 0,
"type": 1
},
"amdsbs": {
"id": "648",
"image_path": "System32\\drivers\\amdsbs.sys",
"start": 0,
"type": 1
},
"amdxata": {
"id": "647",
"image_path": "System32\\drivers\\amdxata.sys",
"start": 0,
"type": 1
},
"applockerfltr": {
"id": "643",
"image_path": "system32\\drivers\\applockerfltr.sys",
"start": 3,
"type": 1
},
"arcsas": {
"id": "635",
"image_path": "System32\\drivers\\arcsas.sys",
"start": 0,
"type": 1
},
"atapi": {
"id": "632",
"image_path": "System32\\drivers\\atapi.sys",
"start": 0,
"type": 1
},
"autotimesvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k autoTimeSvc",
"service_dll": "C:\\WINDOWS\\System32\\autotimesvc.dll",
"service_dll_id": "629",
"start": 3,
"type": 16
},
"b06bdrv": {
"id": "627",
"image_path": "System32\\drivers\\bxvbda.sys",
"start": 0,
"type": 1
},
"bam": {
"id": "626",
"image_path": "system32\\drivers\\bam.sys",
"start": 1,
"type": 1
},
"bcmfn2": {
"id": "622",
"image_path": "\\SystemRoot\\System32\\drivers\\bcmfn2.sys",
"start": 3,
"type": 1
},
"bindflt": {
"id": "619",
"image_path": "\\SystemRoot\\system32\\drivers\\bindflt.sys",
"start": 2,
"type": 2
},
"bowser": {
"id": "616",
"image_path": "system32\\DRIVERS\\bowser.sys",
"start": 3,
"type": 2
},
"bthserv": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\bthserv.dll",
"service_dll_id": "605",
"start": 3,
"type": 32
},
"bttflt": {
"id": "603",
"image_path": "System32\\drivers\\bttflt.sys",
"start": 0,
"type": 1
},
"buttonconverter": {
"id": "602",
"image_path": "\\SystemRoot\\System32\\drivers\\buttonconverter.sys",
"start": 3,
"type": 1
},
"camsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k appmodel -p",
"service_dll": "C:\\WINDOWS\\system32\\CapabilityAccessManager.dll",
"service_dll_id": "600",
"start": 3,
"type": 32
},
"cbdhsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k ClipboardSvcGroup -p",
"service_dll": "C:\\WINDOWS\\System32\\cbdhsvc.dll",
"service_dll_id": "598",
"start": 3,
"type": 96
},
"cbdhsvc_70af6": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k ClipboardSvcGroup -p",
"start": 3,
"type": 224
},
"cdfs": {
"id": "597",
"image_path": "system32\\DRIVERS\\cdfs.sys",
"start": 4,
"type": 2
},
"cdrom": {
"id": "594",
"image_path": "\\SystemRoot\\System32\\drivers\\cdrom.sys",
"start": 1,
"type": 1
},
"cht4iscsi": {
"id": "593",
"image_path": "System32\\drivers\\cht4sx64.sys",
"start": 0,
"type": 1
},
"cht4vbd": {
"id": "592",
"image_path": "\\SystemRoot\\System32\\drivers\\cht4vx64.sys",
"start": 3,
"type": 1
},
"circlass": {
"id": "591",
"image_path": "\\SystemRoot\\System32\\drivers\\circlass.sys",
"start": 3,
"type": 1
},
"cloudidsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k CloudIdServiceGroup -p",
"service_dll": "C:\\WINDOWS\\system32\\cloudidsvc.dll",
"service_dll_id": "587",
"start": 3,
"type": 16
},
"cnghwassist": {
"id": "584",
"image_path": "System32\\DRIVERS\\cnghwassist.sys",
"start": 4,
"type": 1
},
"condrv": {
"id": "581",
"image_path": "System32\\drivers\\condrv.sys",
"start": 3,
"type": 1
},
"dam": {
"id": "574",
"image_path": "system32\\drivers\\dam.sys",
"start": 1,
"type": 1
},
"dcsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\dcsvc.dll",
"service_dll_id": "573",
"start": 3,
"type": 16
},
"defragsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k defragsvc",
"service_dll": "C:\\WINDOWS\\System32\\defragsvc.dll",
"service_dll_id": "572",
"start": 3,
"type": 16
},
"diagnosticshub.standardcollector.service": {
"id": "564",
"image_path": "C:\\WINDOWS\\system32\\DiagSvcs\\DiagnosticsHub.StandardCollector.Service.exe",
"start": 3,
"type": 16
},
"diagsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k diagnostics",
"service_dll": "C:\\WINDOWS\\system32\\DiagSvc.dll",
"service_dll_id": "563",
"start": 3,
"type": 32
},
"disk": {
"id": "560",
"image_path": "System32\\drivers\\disk.sys",
"start": 0,
"type": 1
},
"dmvsc": {
"id": "556",
"image_path": "\\SystemRoot\\System32\\drivers\\dmvsc.sys",
"start": 3,
"type": 1
},
"dmwappushservice": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\dmwappushsvc.dll",
"service_dll_id": "555",
"start": 3,
"type": 32
},
"dot3svc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\dot3svc.dll",
"service_dll_id": "553",
"start": 3,
"type": 32
},
"drmkaud": {
"id": "551",
"image_path": "\\SystemRoot\\System32\\drivers\\drmkaud.sys",
"start": 3,
"type": 1
},
"ebdrv": {
"id": "545",
"image_path": "System32\\drivers\\evbda.sys",
"start": 0,
"type": 1
},
"edgeupdate": {
"id": "544",
"image_path": "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate.exe\" /svc",
"start": 2,
"type": 16
},
"edgeupdatem": {
"id": "544",
"image_path": "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate.exe\" /medsvc",
"start": 3,
"type": 16
},
"embeddedmode": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\embeddedmodesvc.dll",
"service_dll_id": "539",
"start": 3,
"type": 32
},
"fdPHost": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\fdPHost.dll",
"service_dll_id": "532",
"start": 3,
"type": 32
},
"fdc": {
"id": "533",
"image_path": "\\SystemRoot\\System32\\drivers\\fdc.sys",
"start": 3,
"type": 1
},
"fhsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\fhsvc.dll",
"service_dll_id": "530",
"start": 3,
"type": 32
},
"flpydisk": {
"id": "526",
"image_path": "\\SystemRoot\\System32\\drivers\\flpydisk.sys",
"start": 3,
"type": 1
},
"fvevol": {
"id": "521",
"image_path": "System32\\DRIVERS\\fvevol.sys",
"start": 0,
"type": 1
},
"gencounter": {
"id": "519",
"image_path": "\\SystemRoot\\System32\\drivers\\vmgencounter.sys",
"start": 3,
"type": 1
},
"genericusbfn": {
"id": "518",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\genericusbfn.inf_amd64_53931f0ae21d6d2c\\genericusbfn.sys",
"start": 3,
"type": 1
},
"gpsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\gpsvc.dll",
"service_dll_id": "516",
"start": 2,
"type": 32
},
"hidi2c": {
"id": "509",
"image_path": "\\SystemRoot\\System32\\drivers\\hidi2c.sys",
"start": 3,
"type": 1
},
"hidinterrupt": {
"id": "508",
"image_path": "\\SystemRoot\\System32\\drivers\\hidinterrupt.sys",
"start": 3,
"type": 1
},
"hidserv": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\hidserv.dll",
"service_dll_id": "506",
"start": 3,
"type": 32
},
"hidspi": {
"id": "505",
"image_path": "\\SystemRoot\\System32\\drivers\\hidspi.sys",
"start": 3,
"type": 1
},
"hvcrash": {
"id": "500",
"image_path": "\\SystemRoot\\System32\\drivers\\hvcrash.sys",
"start": 4,
"type": 1
},
"hvservice": {
"id": "498",
"image_path": "system32\\drivers\\hvservice.sys",
"start": 3,
"type": 1
},
"hwpolicy": {
"id": "496",
"image_path": "System32\\drivers\\hwpolicy.sys",
"start": 0,
"type": 1
},
"hyperkbd": {
"id": "495",
"image_path": "\\SystemRoot\\System32\\drivers\\hyperkbd.sys",
"start": 3,
"type": 1
},
"i8042prt": {
"id": "493",
"image_path": "\\SystemRoot\\System32\\drivers\\i8042prt.sys",
"start": 3,
"type": 1
},
"iScsiPrt": {
"id": "461",
"image_path": "\\SystemRoot\\System32\\drivers\\msiscsi.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_GPIO2": {
"id": "490",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_GPIO2.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_GPIO2_BXT_P": {
"id": "489",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_GPIO2_BXT_P.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_GPIO2_CNL": {
"id": "488",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_GPIO2_CNL.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_GPIO2_GLK": {
"id": "487",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_GPIO2_GLK.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_I2C": {
"id": "486",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_I2C.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_I2C_BXT_P": {
"id": "485",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_I2C_BXT_P.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_I2C_CNL": {
"id": "484",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_I2C_CNL.sys",
"start": 3,
"type": 1
},
"iaLPSS2i_I2C_GLK": {
"id": "483",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSS2i_I2C_GLK.sys",
"start": 3,
"type": 1
},
"iaLPSSi_GPIO": {
"id": "482",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSSi_GPIO.sys",
"start": 3,
"type": 1
},
"iaLPSSi_I2C": {
"id": "481",
"image_path": "\\SystemRoot\\System32\\drivers\\iaLPSSi_I2C.sys",
"start": 3,
"type": 1
},
"iaStorAVC": {
"id": "480",
"image_path": "System32\\drivers\\iaStorAVC.sys",
"start": 0,
"type": 1
},
"iaStorV": {
"id": "479",
"image_path": "System32\\drivers\\iaStorV.sys",
"start": 0,
"type": 1
},
"iagpio": {
"id": "492",
"image_path": "\\SystemRoot\\System32\\drivers\\iagpio.sys",
"start": 3,
"type": 1
},
"iai2c": {
"id": "491",
"image_path": "\\SystemRoot\\System32\\drivers\\iai2c.sys",
"start": 3,
"type": 1
},
"ibbus": {
"id": "478",
"image_path": "\\SystemRoot\\System32\\drivers\\ibbus.sys",
"start": 3,
"type": 1
},
"icssvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\tetheringservice.dll",
"service_dll_id": "477",
"start": 3,
"type": 32
},
"intelide": {
"id": "473",
"image_path": "System32\\drivers\\intelide.sys",
"start": 0,
"type": 1
},
"intelpep": {
"id": "472",
"image_path": "System32\\drivers\\intelpep.sys",
"start": 0,
"type": 1
},
"intelpmax": {
"id": "471",
"image_path": "\\SystemRoot\\System32\\drivers\\intelpmax.sys",
"start": 3,
"type": 1
},
"intelppm": {
"id": "470",
"image_path": "\\SystemRoot\\System32\\drivers\\intelppm.sys",
"start": 3,
"type": 1
},
"iorate": {
"id": "469",
"image_path": "system32\\drivers\\iorate.sys",
"start": 0,
"type": 1
},
"iphlpsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k NetSvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\iphlpsvc.dll",
"service_dll_id": "467",
"start": 2,
"type": 32
},
"isapnp": {
"id": "462",
"image_path": "System32\\drivers\\isapnp.sys",
"start": 0,
"type": 1
},
"kbdclass": {
"id": "459",
"image_path": "\\SystemRoot\\System32\\drivers\\kbdclass.sys",
"start": 3,
"type": 1
},
"kbdhid": {
"id": "458",
"image_path": "\\SystemRoot\\System32\\drivers\\kbdhid.sys",
"start": 3,
"type": 1
},
"kbldfltr": {
"id": "457",
"image_path": "system32\\drivers\\kbldfltr.sys",
"start": 3,
"type": 1
},
"kdnic": {
"id": "456",
"image_path": "\\SystemRoot\\System32\\drivers\\kdnic.sys",
"start": 3,
"type": 1
},
"ksthunk": {
"id": "451",
"image_path": "\\SystemRoot\\system32\\drivers\\ksthunk.sys",
"start": 3,
"type": 1
},
"lfsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\lfsvc.dll",
"service_dll_id": "447",
"start": 3,
"type": 32
},
"lltdio": {
"id": "87",
"image_path": "system32\\drivers\\lltdio.sys",
"start": 2,
"type": 1
},
"lltdsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\lltdsvc.dll",
"service_dll_id": "445",
"start": 3,
"type": 32
},
"lmhosts": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"start": 3,
"type": 32
},
"luafv": {
"id": "439",
"image_path": "\\SystemRoot\\system32\\drivers\\luafv.sys",
"start": 2,
"type": 2
},
"mausbhost": {
"id": "436",
"image_path": "\\SystemRoot\\System32\\drivers\\mausbhost.sys",
"start": 3,
"type": 1
},
"mausbip": {
"id": "435",
"image_path": "\\SystemRoot\\System32\\drivers\\mausbip.sys",
"start": 3,
"type": 1
},
"megasas": {
"id": "431",
"image_path": "System32\\drivers\\megasas.sys",
"start": 0,
"type": 1
},
"megasas2i": {
"id": "430",
"image_path": "System32\\drivers\\MegaSas2i.sys",
"start": 0,
"type": 1
},
"megasas35i": {
"id": "429",
"image_path": "System32\\drivers\\megasas35i.sys",
"start": 0,
"type": 1
},
"megasr": {
"id": "428",
"image_path": "System32\\drivers\\megasr.sys",
"start": 0,
"type": 1
},
"mlx4_bus": {
"id": "423",
"image_path": "\\SystemRoot\\System32\\drivers\\mlx4_bus.sys",
"start": 3,
"type": 1
},
"monitor": {
"id": "420",
"image_path": "\\SystemRoot\\System32\\drivers\\monitor.sys",
"start": 3,
"type": 1
},
"mouclass": {
"id": "419",
"image_path": "\\SystemRoot\\System32\\drivers\\mouclass.sys",
"start": 3,
"type": 1
},
"mouhid": {
"id": "418",
"image_path": "\\SystemRoot\\System32\\drivers\\mouhid.sys",
"start": 3,
"type": 1
},
"mountmgr": {
"id": "417",
"image_path": "System32\\drivers\\mountmgr.sys",
"start": 0,
"type": 1
},
"mpsdrv": {
"id": "414",
"image_path": "System32\\drivers\\mpsdrv.sys",
"start": 3,
"type": 1
},
"mpssvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p",
"service_dll": "C:\\WINDOWS\\system32\\mpssvc.dll",
"service_dll_id": "413",
"start": 2,
"type": 32
},
"mrxsmb": {
"id": "411",
"image_path": "system32\\DRIVERS\\mrxsmb.sys",
"start": 3,
"type": 2
},
"mrxsmb20": {
"id": "410",
"image_path": "system32\\DRIVERS\\mrxsmb20.sys",
"start": 3,
"type": 2
},
"msgpiowin32": {
"id": "408",
"image_path": "\\SystemRoot\\System32\\drivers\\msgpiowin32.sys",
"start": 3,
"type": 1
},
"mshidkmdf": {
"id": "407",
"image_path": "\\SystemRoot\\System32\\drivers\\mshidkmdf.sys",
"start": 3,
"type": 1
},
"mshidumdf": {
"id": "406",
"image_path": "\\SystemRoot\\System32\\drivers\\mshidumdf.sys",
"start": 3,
"type": 1
},
"msisadrv": {
"id": "405",
"image_path": "System32\\drivers\\msisadrv.sys",
"start": 0,
"type": 1
},
"msiserver": {
"id": "403",
"image_path": "C:\\WINDOWS\\system32\\msiexec.exe /V",
"start": 3,
"type": 16
},
"mssmbios": {
"id": "394",
"image_path": "\\SystemRoot\\System32\\drivers\\mssmbios.sys",
"start": 1,
"type": 1
},
"mvumis": {
"id": "390",
"image_path": "System32\\drivers\\mvumis.sys",
"start": 0,
"type": 1
},
"ndfltr": {
"id": "385",
"image_path": "\\SystemRoot\\System32\\drivers\\ndfltr.sys",
"start": 3,
"type": 1
},
"ndiswanlegacy": {
"id": "88",
"image_path": "System32\\DRIVERS\\ndiswan.sys",
"start": 3,
"type": 1
},
"ndproxy": {
"id": "380",
"image_path": "System32\\DRIVERS\\NDProxy.sys",
"start": 3,
"type": 1
},
"netprofm": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\System32\\netprofmsvc.dll",
"service_dll_id": "375",
"start": 3,
"type": 32
},
"netvsc": {
"id": "372",
"image_path": "\\SystemRoot\\System32\\drivers\\netvsc.sys",
"start": 3,
"type": 1
},
"npsvctrig": {
"id": "369",
"image_path": "\\SystemRoot\\System32\\drivers\\npsvctrig.sys",
"start": 1,
"type": 1
},
"nsi": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"start": 2,
"type": 32
},
"nsiproxy": {
"id": "368",
"image_path": "system32\\drivers\\nsiproxy.sys",
"start": 1,
"type": 1
},
"nvdimm": {
"id": "367",
"image_path": "System32\\drivers\\nvdimm.sys",
"start": 0,
"type": 1
},
"nvraid": {
"id": "366",
"image_path": "System32\\drivers\\nvraid.sys",
"start": 0,
"type": 1
},
"nvstor": {
"id": "365",
"image_path": "System32\\drivers\\nvstor.sys",
"start": 0,
"type": 1
},
"p2pimsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServicePeerNet",
"service_dll": "C:\\WINDOWS\\system32\\pnrpsvc.dll",
"service_dll_id": "340",
"start": 3,
"type": 32
},
"p2psvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServicePeerNet",
"service_dll": "C:\\WINDOWS\\system32\\p2psvc.dll",
"service_dll_id": "363",
"start": 3,
"type": 32
},
"partmgr": {
"id": "361",
"image_path": "System32\\drivers\\partmgr.sys",
"start": 0,
"type": 1
},
"pci": {
"id": "359",
"image_path": "System32\\drivers\\pci.sys",
"start": 0,
"type": 1
},
"pciide": {
"id": "358",
"image_path": "System32\\drivers\\pciide.sys",
"start": 0,
"type": 1
},
"pcmcia": {
"id": "357",
"image_path": "System32\\drivers\\pcmcia.sys",
"start": 0,
"type": 1
},
"pcw": {
"id": "356",
"image_path": "System32\\drivers\\pcw.sys",
"start": 0,
"type": 1
},
"pdc": {
"id": "355",
"image_path": "system32\\drivers\\pdc.sys",
"start": 0,
"type": 1
},
"perceptionsimulation": {
"id": "352",
"image_path": "C:\\WINDOWS\\system32\\PerceptionSimulation\\PerceptionSimulationService.exe",
"start": 3,
"type": 16
},
"percsas2i": {
"id": "351",
"image_path": "System32\\drivers\\percsas2i.sys",
"start": 0,
"type": 1
},
"percsas3i": {
"id": "350",
"image_path": "System32\\drivers\\percsas3i.sys",
"start": 0,
"type": 1
},
"pla": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNoNetwork -p",
"service_dll": "C:\\WINDOWS\\system32\\pla.dll",
"service_dll_id": "345",
"start": 3,
"type": 32
},
"pmem": {
"id": "343",
"image_path": "System32\\drivers\\pmem.sys",
"start": 0,
"type": 1
},
"portcfg": {
"id": "338",
"image_path": "\\SystemRoot\\System32\\drivers\\portcfg.sys",
"start": 3,
"type": 1
},
"rdbss": {
"id": "321",
"image_path": "system32\\DRIVERS\\rdbss.sys",
"start": 1,
"type": 2
},
"rdpbus": {
"id": "320",
"image_path": "\\SystemRoot\\System32\\drivers\\rdpbus.sys",
"start": 3,
"type": 1
},
"rdyboost": {
"id": "317",
"image_path": "System32\\drivers\\rdyboost.sys",
"start": 0,
"type": 1
},
"rhproxy": {
"id": "312",
"image_path": "\\SystemRoot\\System32\\drivers\\rhproxy.sys",
"start": 3,
"type": 1
},
"rspndr": {
"id": "89",
"image_path": "system32\\drivers\\rspndr.sys",
"start": 2,
"type": 1
},
"s3cap": {
"id": "307",
"image_path": "\\SystemRoot\\System32\\drivers\\vms3cap.sys",
"start": 3,
"type": 1
},
"sbp2port": {
"id": "306",
"image_path": "System32\\drivers\\sbp2port.sys",
"start": 0,
"type": 1
},
"scfilter": {
"id": "303",
"image_path": "System32\\DRIVERS\\scfilter.sys",
"start": 3,
"type": 1
},
"scmbus": {
"id": "301",
"image_path": "System32\\drivers\\scmbus.sys",
"start": 0,
"type": 1
},
"sdbus": {
"id": "299",
"image_path": "\\SystemRoot\\System32\\drivers\\sdbus.sys",
"start": 3,
"type": 1
},
"sdstor": {
"id": "296",
"image_path": "\\SystemRoot\\System32\\drivers\\sdstor.sys",
"start": 3,
"type": 1
},
"seclogon": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\seclogon.dll",
"service_dll_id": "295",
"start": 3,
"type": 32
},
"sermouse": {
"id": "283",
"image_path": "\\SystemRoot\\System32\\drivers\\sermouse.sys",
"start": 3,
"type": 1
},
"sfloppy": {
"id": "281",
"image_path": "\\SystemRoot\\System32\\drivers\\sfloppy.sys",
"start": 3,
"type": 1
},
"shpamsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\Windows.SharedPC.AccountManager.dll",
"service_dll_id": "277",
"start": 4,
"type": 32
},
"smbdirect": {
"id": "273",
"image_path": "System32\\DRIVERS\\smbdirect.sys",
"start": 3,
"type": 2
},
"smphost": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k smphost",
"service_dll": "C:\\WINDOWS\\System32\\smphost.dll",
"service_dll_id": "272",
"start": 3,
"type": 16
},
"spaceparser": {
"id": "269",
"image_path": "system32\\drivers\\spaceparser.sys",
"start": 3,
"type": 1
},
"spaceport": {
"id": "268",
"image_path": "System32\\drivers\\spaceport.sys",
"start": 0,
"type": 1
},
"spectrum": {
"id": "265",
"image_path": "C:\\WINDOWS\\system32\\spectrum.exe",
"start": 3,
"type": 16
},
"sppsvc": {
"id": "263",
"image_path": "C:\\WINDOWS\\system32\\sppsvc.exe",
"start": 2,
"type": 16
},
"srv2": {
"id": "262",
"image_path": "System32\\DRIVERS\\srv2.sys",
"start": 3,
"type": 2
},
"srvnet": {
"id": "261",
"image_path": "System32\\DRIVERS\\srvnet.sys",
"start": 3,
"type": 2
},
"ssh-agent": {
"id": "259",
"image_path": "C:\\WINDOWS\\System32\\OpenSSH\\ssh-agent.exe",
"start": 4,
"type": 16
},
"stexstor": {
"id": "256",
"image_path": "System32\\drivers\\stexstor.sys",
"start": 0,
"type": 1
},
"stisvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k imgsvc",
"service_dll": "C:\\WINDOWS\\System32\\wiaservc.dll",
"service_dll_id": "255",
"start": 3,
"type": 16
},
"storahci": {
"id": "254",
"image_path": "System32\\drivers\\storahci.sys",
"start": 0,
"type": 1
},
"storflt": {
"id": "253",
"image_path": "System32\\drivers\\vmstorfl.sys",
"start": 0,
"type": 1
},
"stornvme": {
"id": "252",
"image_path": "System32\\drivers\\stornvme.sys",
"start": 0,
"type": 1
},
"storqosflt": {
"id": "251",
"image_path": "system32\\drivers\\storqosflt.sys",
"start": 2,
"type": 2
},
"storufs": {
"id": "249",
"image_path": "System32\\drivers\\storufs.sys",
"start": 0,
"type": 1
},
"storvsc": {
"id": "248",
"image_path": "System32\\drivers\\storvsc.sys",
"start": 0,
"type": 1
},
"svsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\system32\\svsvc.dll",
"service_dll_id": "247",
"start": 3,
"type": 32
},
"swenum": {
"id": "246",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\swenum.inf_amd64_16a14542b63c02af\\swenum.sys",
"start": 3,
"type": 1
},
"swprv": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k swprv",
"service_dll": "C:\\WINDOWS\\System32\\swprv.dll",
"service_dll_id": "245",
"start": 3,
"type": 16
},
"tcpipreg": {
"id": "239",
"image_path": "System32\\drivers\\tcpipreg.sys",
"start": 2,
"type": 1
},
"tdx": {
"id": "238",
"image_path": "\\SystemRoot\\system32\\DRIVERS\\tdx.sys",
"start": 1,
"type": 1
},
"terminpt": {
"id": "236",
"image_path": "\\SystemRoot\\System32\\drivers\\terminpt.sys",
"start": 3,
"type": 1
},
"tsusbhub": {
"id": "224",
"image_path": "\\SystemRoot\\System32\\drivers\\tsusbhub.sys",
"start": 3,
"type": 1
},
"tunnel": {
"id": "223",
"image_path": "System32\\drivers\\tunnel.sys",
"start": 3,
"type": 1
},
"tzautoupdate": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\tzautoupdate.dll",
"service_dll_id": "222",
"start": 4,
"type": 32
},
"udfs": {
"id": "213",
"image_path": "system32\\DRIVERS\\udfs.sys",
"start": 4,
"type": 2
},
"ufxsynopsys": {
"id": "206",
"image_path": "\\SystemRoot\\System32\\drivers\\ufxsynopsys.sys",
"start": 3,
"type": 1
},
"uhssvc": {
"id": "205",
"image_path": "\"C:\\Program Files\\Microsoft Update Health Tools\\uhssvc.exe\"",
"start": 4,
"type": 16
},
"umbus": {
"id": "204",
"image_path": "\\SystemRoot\\System32\\DriverStore\\FileRepository\\umbus.inf_amd64_b78a9c5b6fd62c27\\umbus.sys",
"start": 3,
"type": 1
},
"upnphost": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\System32\\upnphost.dll",
"service_dll_id": "200",
"start": 3,
"type": 32
},
"usbaudio": {
"id": "196",
"image_path": "\\SystemRoot\\system32\\drivers\\usbaudio.sys",
"start": 3,
"type": 1
},
"usbaudio2": {
"id": "195",
"image_path": "\\SystemRoot\\System32\\drivers\\usbaudio2.sys",
"start": 3,
"type": 1
},
"usbccgp": {
"id": "194",
"image_path": "\\SystemRoot\\System32\\drivers\\usbccgp.sys",
"start": 3,
"type": 1
},
"usbcir": {
"id": "193",
"image_path": "\\SystemRoot\\System32\\drivers\\usbcir.sys",
"start": 3,
"type": 1
},
"usbehci": {
"id": "192",
"image_path": "\\SystemRoot\\System32\\drivers\\usbehci.sys",
"start": 3,
"type": 1
},
"usbhub": {
"id": "191",
"image_path": "\\SystemRoot\\System32\\drivers\\usbhub.sys",
"start": 3,
"type": 1
},
"usbohci": {
"id": "189",
"image_path": "\\SystemRoot\\System32\\drivers\\usbohci.sys",
"start": 3,
"type": 1
},
"usbprint": {
"id": "188",
"image_path": "\\SystemRoot\\System32\\drivers\\usbprint.sys",
"start": 3,
"type": 1
},
"usbser": {
"id": "187",
"image_path": "\\SystemRoot\\System32\\drivers\\usbser.sys",
"start": 3,
"type": 1
},
"usbuhci": {
"id": "185",
"image_path": "\\SystemRoot\\System32\\drivers\\usbuhci.sys",
"start": 3,
"type": 1
},
"vdrvroot": {
"id": "177",
"image_path": "System32\\drivers\\vdrvroot.sys",
"start": 0,
"type": 1
},
"vds": {
"id": "176",
"image_path": "C:\\WINDOWS\\System32\\vds.exe",
"start": 3,
"type": 16
},
"vhdmp": {
"id": "174",
"image_path": "\\SystemRoot\\System32\\drivers\\vhdmp.sys",
"start": 3,
"type": 1
},
"vhf": {
"id": "173",
"image_path": "\\SystemRoot\\System32\\drivers\\vhf.sys",
"start": 3,
"type": 1
},
"vmbus": {
"id": "170",
"image_path": "System32\\drivers\\vmbus.sys",
"start": 0,
"type": 1
},
"vmgid": {
"id": "168",
"image_path": "\\SystemRoot\\System32\\drivers\\vmgid.sys",
"start": 3,
"type": 1
},
"vmicguestinterface": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmicheartbeat": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k ICService -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmickvpexchange": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmicrdv": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k ICService -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvcext.dll",
"service_dll_id": "166",
"start": 3,
"type": 32
},
"vmicshutdown": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmictimesync": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmicvmsession": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvc.dll",
"service_dll_id": "167",
"start": 3,
"type": 32
},
"vmicvss": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\icsvcext.dll",
"service_dll_id": "166",
"start": 3,
"type": 32
},
"volmgr": {
"id": "165",
"image_path": "System32\\drivers\\volmgr.sys",
"start": 0,
"type": 1
},
"volmgrx": {
"id": "164",
"image_path": "System32\\drivers\\volmgrx.sys",
"start": 0,
"type": 1
},
"volsnap": {
"id": "163",
"image_path": "System32\\drivers\\volsnap.sys",
"start": 0,
"type": 1
},
"volume": {
"id": "162",
"image_path": "System32\\drivers\\volume.sys",
"start": 0,
"type": 1
},
"vpci": {
"id": "161",
"image_path": "System32\\drivers\\vpci.sys",
"start": 0,
"type": 1
},
"vsmraid": {
"id": "160",
"image_path": "System32\\drivers\\vsmraid.sys",
"start": 0,
"type": 1
},
"vwifibus": {
"id": "157",
"image_path": "\\SystemRoot\\System32\\drivers\\vwifibus.sys",
"start": 3,
"type": 1
},
"vwififlt": {
"id": "156",
"image_path": "System32\\drivers\\vwififlt.sys",
"start": 1,
"type": 1
},
"wanarp": {
"id": "90",
"image_path": "System32\\DRIVERS\\wanarp.sys",
"start": 2,
"type": 1
},
"wanarpv6": {
"id": "90",
"image_path": "System32\\DRIVERS\\wanarp.sys",
"start": 3,
"type": 1
},
"wbengine": {
"id": "150",
"image_path": "\"C:\\WINDOWS\\system32\\wbengine.exe\"",
"start": 3,
"type": 16
},
"wcifs": {
"id": "148",
"image_path": "\\SystemRoot\\system32\\drivers\\wcifs.sys",
"start": 2,
"type": 2
},
"wcncsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceAndNoImpersonation -p",
"service_dll": "C:\\WINDOWS\\System32\\wcncsvc.dll",
"service_dll_id": "146",
"start": 3,
"type": 32
},
"wcnfs": {
"id": "145",
"image_path": "\\SystemRoot\\system32\\drivers\\wcnfs.sys",
"start": 3,
"type": 2
},
"wdiwifi": {
"id": "140",
"image_path": "system32\\DRIVERS\\wdiwifi.sys",
"start": 3,
"type": 1
},
"wercplsupport": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\System32\\wercplsupport.dll",
"service_dll_id": "133",
"start": 3,
"type": 32
},
"wisvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\flightsettings.dll",
"service_dll_id": "118",
"start": 3,
"type": 32
},
"wlidsvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\wlidsvc.dll",
"service_dll_id": "116",
"start": 3,
"type": 32
},
"wlpasvc": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\lpasvc.dll",
"service_dll_id": "115",
"start": 3,
"type": 32
},
"wmiApSrv": {
"id": "112",
"image_path": "C:\\WINDOWS\\system32\\wbem\\WmiApSrv.exe",
"start": 3,
"type": 16
},
"workfolderssvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalService -p",
"service_dll": "C:\\WINDOWS\\system32\\workfolderssvc.dll",
"service_dll_id": "110",
"start": 3,
"type": 32
},
"ws2ifsl": {
"id": "104",
"image_path": "\\SystemRoot\\system32\\drivers\\ws2ifsl.sys",
"start": 4,
"type": 1
},
"wscsvc": {
"id": "72",
"image_path": "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p",
"service_dll": "C:\\WINDOWS\\System32\\wscsvc.dll",
"service_dll_id": "103",
"start": 2,
"type": 32
},
"wuauserv": {
"id": "93",
"image_path": "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs -p",
"service_dll": "C:\\WINDOWS\\system32\\wuaueng.dll",
"service_dll_id": "101",
"start": 3,
"type": 32
},
"xboxgip": {
"id": "86",
"image_path": "\\SystemRoot\\System32\\drivers\\xboxgip.sys",
"start": 3,
"type": 1
},
"xinputhid": {
"id": "92",
"image_path": "\\SystemRoot\\System32\\drivers\\xinputhid.sys",
"start": 3,
"type": 1
}
}
},
"Timestamp": 1759759848547.475,
"UserID": "DESKTOP-IDDQD\\Alice"
}
20. Таски
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 414,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "42c2c2d5-0eac-4509-9fd7-9f69d33e8e45",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"tasks": {
"name": "\\",
"subfolders": [
{
"name": "Microsoft",
"subfolders": [
{
"name": "OneCore",
"subfolders": [
{
"name": "DirectX"
}
]
},
{
"name": "Windows",
"subfolders": [
{
"name": ".NET Framework",
"tasks": [
{
"actions": [],
"name": ".NET Framework NGEN v4.0.30319"
},
{
"actions": [],
"name": ".NET Framework NGEN v4.0.30319 64"
},
{
"actions": [],
"name": ".NET Framework NGEN v4.0.30319 64 Critical"
},
{
"actions": [],
"name": ".NET Framework NGEN v4.0.30319 Critical"
}
]
},
{
"name": "Active Directory Rights Management Services Client",
"tasks": [
{
"actions": [],
"name": "AD RMS Rights Policy Template Management (Automated)"
},
{
"actions": [],
"name": "AD RMS Rights Policy Template Management (Manual)"
}
]
},
{
"name": "AppID",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "6",
"path": "%windir%\\system32\\appidpolicyconverter.exe"
}
],
"name": "PolicyConverter"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "7",
"path": "%windir%\\system32\\appidcertstorecheck.exe"
}
],
"name": "VerifiedPublisherCertStoreCheck"
}
]
},
{
"name": "Application Experience",
"tasks": [
{
"actions": [
{
"args": "-m:aeinv.dll -f:UpdateSoftwareInventoryW invsvc",
"args_id": "9",
"id": "8",
"path": "%windir%\\system32\\compattelrunner.exe"
},
{
"args": "-m:appraiser.dll -f:DoScheduledTelemetryRun",
"args_id": "10",
"id": "8",
"path": "%windir%\\system32\\compattelrunner.exe"
},
{
"args": "-m:aemarebackup.dll -f:BackupMareData",
"args_id": "11",
"id": "8",
"path": "%windir%\\system32\\compattelrunner.exe"
}
],
"name": "MareBackup"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "8",
"path": "%windir%\\system32\\compattelrunner.exe"
}
],
"name": "Microsoft Compatibility Appraiser"
},
{
"actions": [
{
"args": "%windir%\\system32\\PcaSvc.dll,PcaPatchSdbTask",
"args_id": "13",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "PcaPatchDbTask"
},
{
"actions": [
{
"args": "%windir%\\system32\\PcaSvc.dll,PcaWallpaperAppDetect",
"args_id": "13",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "PcaWallpaperAppDetect"
},
{
"actions": [
{
"args": "-maintenance",
"args_id": "",
"id": "8",
"path": "%windir%\\system32\\compattelrunner.exe"
}
],
"name": "ProgramDataUpdater"
},
{
"actions": [
{
"args": "Startupscan.dll,SusRunTask",
"args_id": "14",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "StartupAppTask"
}
]
},
{
"name": "ApplicationData",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "15",
"path": "%windir%\\system32\\AppHostRegistrationVerifier.exe"
}
],
"name": "appuriverifierdaily"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "15",
"path": "%windir%\\system32\\AppHostRegistrationVerifier.exe"
}
],
"name": "appuriverifierinstall"
},
{
"actions": [
{
"args": "Windows.Storage.ApplicationData.dll,CleanupTemporaryState",
"args_id": "16",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "CleanupTemporaryState"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "17",
"path": "%windir%\\system32\\dstokenclean.exe"
}
],
"name": "DsSvcCleanup"
}
]
},
{
"name": "AppListBackup",
"tasks": [
{
"actions": [],
"name": "Backup"
},
{
"actions": [],
"name": "BackupNonMaintenance"
}
]
},
{
"name": "AppxDeploymentClient",
"tasks": [
{
"actions": [
{
"args": "%windir%\\system32\\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask",
"args_id": "18",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "Pre-staged app cleanup"
}
]
},
{
"name": "Autochk",
"tasks": [
{
"actions": [
{
"args": "/d acproxy.dll,PerformAutochkOperations",
"args_id": "19",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "Proxy"
}
]
},
{
"name": "BitLocker",
"tasks": [
{
"actions": [],
"name": "BitLocker Encrypt All Drives"
},
{
"actions": [],
"name": "BitLocker MDM policy Refresh"
}
]
},
{
"name": "Bluetooth",
"tasks": [
{
"actions": [
{
"args": "$(Arg0)",
"args_id": "",
"id": "20",
"path": "BthUdTask.exe"
}
],
"name": "UninstallDeviceTask"
}
]
},
{
"name": "BrokerInfrastructure",
"tasks": [
{
"actions": [],
"name": "BgTaskRegistrationMaintenanceTask"
}
]
},
{
"name": "CertificateServicesClient",
"tasks": [
{
"actions": [],
"name": "UserTask"
},
{
"actions": [],
"name": "UserTask-Roam"
}
]
},
{
"name": "Chkdsk",
"tasks": [
{
"actions": [],
"name": "ProactiveScan"
},
{
"actions": [
{
"args": "%windir% /sysrepair",
"args_id": "",
"id": "21",
"path": "%windir%\\system32\\bcdboot.exe"
}
],
"name": "SyspartRepair"
}
]
},
{
"name": "Clip",
"tasks": [
{
"actions": [
{
"args": "-evaluateEligibility",
"args_id": "",
"id": "22",
"path": "%SystemRoot%\\system32\\ClipESUConsumer.exe"
}
],
"name": "ClipESUConsumer"
}
]
},
{
"name": "CloudExperienceHost",
"tasks": [
{
"actions": [],
"name": "CreateObjectTask"
}
]
},
{
"name": "CloudRestore",
"tasks": [
{
"actions": [],
"name": "Backup"
}
]
},
{
"name": "ConsentUX",
"subfolders": [
{
"name": "UnifiedConsent",
"tasks": [
{
"actions": [],
"name": "UnifiedConsentSyncTask"
}
]
}
]
},
{
"name": "Customer Experience Improvement Program",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "23",
"path": "%SystemRoot%\\System32\\wsqmcons.exe"
}
],
"name": "Consolidator"
},
{
"actions": [],
"name": "UsbCeip"
}
]
},
{
"name": "Data Integrity Scan",
"tasks": [
{
"actions": [],
"name": "Data Integrity Check And Scan"
},
{
"actions": [],
"name": "Data Integrity Scan"
},
{
"actions": [],
"name": "Data Integrity Scan for Crash Recovery"
}
]
},
{
"name": "Defrag",
"tasks": [
{
"actions": [
{
"args": "-c -h -o -$",
"args_id": "",
"id": "24",
"path": "%windir%\\system32\\defrag.exe"
}
],
"name": "ScheduledDefrag"
}
]
},
{
"name": "Device Information",
"tasks": [
{
"actions": [
{
"args": "SystemCxt",
"args_id": "",
"id": "25",
"path": "%windir%\\system32\\devicecensus.exe"
}
],
"name": "Device"
},
{
"actions": [
{
"args": "UserCxt",
"args_id": "",
"id": "25",
"path": "%windir%\\system32\\devicecensus.exe"
}
],
"name": "Device User"
}
]
},
{
"name": "Device Setup"
},
{
"name": "DeviceDirectoryClient"
},
{
"name": "Diagnosis",
"tasks": [
{
"actions": [],
"name": "RecommendedTroubleshootingScanner"
},
{
"actions": [],
"name": "Scheduled"
}
]
},
{
"name": "DirectX",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "26",
"path": "%windir%\\system32\\directxdatabaseupdater.exe"
}
],
"name": "DirectXDatabaseUpdater"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "27",
"path": "%windir%\\system32\\dxgiadaptercache.exe"
}
],
"name": "DXGIAdapterCache"
}
]
},
{
"name": "DiskCleanup",
"tasks": [
{
"actions": [
{
"args": "/autoclean /d %systemdrive%",
"args_id": "",
"id": "28",
"path": "%windir%\\system32\\cleanmgr.exe"
}
],
"name": "SilentCleanup"
}
]
},
{
"name": "DiskDiagnostic",
"tasks": [
{
"actions": [
{
"args": "dfdts.dll,DfdGetDefaultPolicyAndSMART",
"args_id": "29",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "Microsoft-Windows-DiskDiagnosticDataCollector"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "30",
"path": "%windir%\\system32\\DFDWiz.exe"
}
],
"name": "Microsoft-Windows-DiskDiagnosticResolver"
}
]
},
{
"name": "DiskFootprint",
"tasks": [
{
"actions": [
{
"args": "-z",
"args_id": "",
"id": "31",
"path": "%windir%\\system32\\disksnapshot.exe"
}
],
"name": "Diagnostics"
},
{
"actions": [],
"name": "StorageSense"
}
]
},
{
"name": "DUSM",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "32",
"path": "%SystemRoot%\\System32\\dusmtask.exe"
}
],
"name": "dusmtask"
}
]
},
{
"name": "EDP",
"tasks": [
{
"actions": [],
"name": "EDP App Launch Task"
},
{
"actions": [],
"name": "EDP Auth Task"
},
{
"actions": [],
"name": "EDP Inaccessible Credentials Task"
},
{
"actions": [],
"name": "StorageCardEncryption Task"
}
]
},
{
"name": "EnterpriseMgmt"
},
{
"name": "ExploitGuard",
"tasks": [
{
"actions": [],
"name": "ExploitGuard MDM policy Refresh"
}
]
},
{
"name": "Feedback",
"subfolders": [
{
"name": "Siuf",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "33",
"path": "%windir%\\system32\\dmclient.exe"
}
],
"name": "DmClient"
},
{
"actions": [
{
"args": "utcwnf",
"args_id": "",
"id": "33",
"path": "%windir%\\system32\\dmclient.exe"
}
],
"name": "DmClientOnScenarioDownload"
}
]
}
]
},
{
"name": "File Classification Infrastructure",
"tasks": [
{
"actions": [],
"name": "Property Definition Sync"
}
]
},
{
"name": "FileHistory",
"tasks": [
{
"actions": [],
"name": "File History (maintenance mode)"
}
]
},
{
"name": "Flighting",
"subfolders": [
{
"name": "FeatureConfig",
"tasks": [
{
"actions": [],
"name": "ReconcileFeatures"
},
{
"actions": [],
"name": "UsageDataFlushing"
},
{
"actions": [],
"name": "UsageDataReporting"
}
]
},
{
"name": "OneSettings",
"tasks": [
{
"actions": [],
"name": "RefreshCache"
}
]
}
]
},
{
"name": "HelloFace"
},
{
"name": "Input",
"tasks": [
{
"actions": [],
"name": "LocalUserSyncDataAvailable"
},
{
"actions": [],
"name": "MouseSyncDataAvailable"
},
{
"actions": [],
"name": "PenSyncDataAvailable"
},
{
"actions": [],
"name": "TouchpadSyncDataAvailable"
}
]
},
{
"name": "InstallService",
"tasks": [
{
"actions": [],
"name": "ScanForUpdates"
},
{
"actions": [],
"name": "ScanForUpdatesAsUser"
},
{
"actions": [],
"name": "WakeUpAndContinueUpdates"
},
{
"actions": [],
"name": "WakeUpAndScanForUpdates"
}
]
},
{
"name": "International",
"tasks": [
{
"actions": [],
"name": "Synchronize Language Settings"
}
]
},
{
"name": "LanguageComponentsInstaller",
"tasks": [
{
"actions": [],
"name": "Installation"
},
{
"actions": [],
"name": "ReconcileLanguageResources"
}
]
},
{
"name": "License Manager"
},
{
"name": "Live",
"subfolders": [
{
"name": "Roaming"
}
]
},
{
"name": "Location",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "34",
"path": "%windir%\\System32\\LocationNotificationWindows.exe"
}
],
"name": "Notifications"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "35",
"path": "%windir%\\System32\\WindowsActionDialog.exe"
}
],
"name": "WindowsActionDialog"
}
]
},
{
"name": "Maintenance",
"tasks": [
{
"actions": [],
"name": "WinSAT"
}
]
},
{
"name": "Management",
"subfolders": [
{
"name": "Autopilot",
"tasks": [
{
"actions": [],
"name": "DetectHardwareChange"
},
{
"actions": [],
"name": "RemediateHardwareChange"
}
]
},
{
"name": "Provisioning",
"tasks": [
{
"actions": [
{
"args": "/turn 7 /source CellStateChangeTask",
"args_id": "",
"id": "36",
"path": "%windir%\\system32\\ProvTool.exe"
}
],
"name": "Cellular"
},
{
"actions": [
{
"args": "/turn 5 /source LogonIdleTask",
"args_id": "",
"id": "36",
"path": "%windir%\\system32\\ProvTool.exe"
}
],
"name": "Logon"
},
{
"actions": [
{
"args": "/turn 5 /source ProvRetryTask",
"args_id": "",
"id": "36",
"path": "%windir%\\system32\\ProvTool.exe"
}
],
"name": "Retry"
},
{
"actions": [
{
"args": "/turn 5 /source ContinueSessionTask",
"args_id": "",
"id": "36",
"path": "%windir%\\system32\\ProvTool.exe"
}
],
"name": "RunOnReboot"
}
]
}
]
},
{
"name": "Maps",
"tasks": [
{
"actions": [],
"name": "MapsToastTask"
},
{
"actions": [],
"name": "MapsUpdateTask"
}
]
},
{
"name": "MemoryDiagnostic",
"tasks": [
{
"actions": [],
"name": "ProcessMemoryDiagnosticEvents"
},
{
"actions": [],
"name": "RunFullMemoryDiagnostic"
}
]
},
{
"name": "Mobile Broadband Accounts",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "37",
"path": "%SystemRoot%\\System32\\MbaeParserTask.exe"
}
],
"name": "MNO Metadata Parser"
}
]
},
{
"name": "MUI",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "38",
"path": "%windir%\\system32\\lpremove.exe"
}
],
"name": "LPRemove"
}
]
},
{
"name": "Multimedia",
"tasks": [
{
"actions": [],
"name": "SystemSoundsService"
}
]
},
{
"name": "NetTrace",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "39",
"path": "%windir%\\system32\\gatherNetworkInfo.vbs"
}
],
"name": "GatherNetworkInfo"
}
]
},
{
"name": "NlaSvc",
"tasks": [
{
"actions": [
{
"args": "nla",
"args_id": "",
"id": "40",
"path": "%SystemRoot%\\System32\\WiFiTask.exe"
}
],
"name": "WiFiTask"
}
]
},
{
"name": "Offline Files",
"tasks": [
{
"actions": [],
"name": "Background Synchronization"
},
{
"actions": [],
"name": "Logon Synchronization"
}
]
},
{
"name": "PI"
},
{
"name": "PLA",
"subfolders": [
{
"name": "System"
}
]
},
{
"name": "Plug and Play",
"tasks": [
{
"actions": [],
"name": "Device Install Group Policy"
},
{
"actions": [],
"name": "Device Install Reboot Required"
},
{
"actions": [
{
"args": "6",
"args_id": "",
"id": "41",
"path": "%SystemRoot%\\System32\\drvinst.exe"
}
],
"name": "Sysprep Generalize Drivers"
}
]
},
{
"name": "Power Efficiency Diagnostics",
"tasks": [
{
"actions": [],
"name": "AnalyzeSystem"
}
]
},
{
"name": "Printing",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "42",
"path": "%windir%\\system32\\eduprintprov.exe"
}
],
"name": "EduPrintProv"
},
{
"actions": [],
"name": "PrinterCleanupTask"
}
]
},
{
"name": "PushToInstall"
},
{
"name": "Ras"
},
{
"name": "RecoveryEnvironment",
"tasks": [
{
"actions": [],
"name": "VerifyWinRE"
}
]
},
{
"name": "Registry",
"tasks": [
{
"actions": [],
"name": "RegIdleBackup"
}
]
},
{
"name": "RemoteApp and Desktop Connections Update"
},
{
"name": "RemoteAssistance"
},
{
"name": "RetailDemo"
},
{
"name": "Servicing",
"tasks": [
{
"actions": [],
"name": "StartComponentCleanup"
}
]
},
{
"name": "SettingSync",
"tasks": [
{
"actions": [],
"name": "BackgroundUploadTask"
},
{
"actions": [],
"name": "NetworkStateChangeTask"
}
]
},
{
"name": "SharedPC",
"tasks": [
{
"actions": [
{
"args": "%windir%\\System32\\Windows.SharedPC.AccountManager.dll,StartMaintenance",
"args_id": "44",
"id": "43",
"path": "%windir%\\System32\\rundll32.exe"
}
],
"name": "Account Cleanup"
}
]
},
{
"name": "Shell",
"tasks": [
{
"actions": [],
"name": "CreateObjectTask"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "45",
"path": "%windir%\\System32\\wpcmon.exe"
}
],
"name": "FamilySafetyMonitor"
},
{
"actions": [],
"name": "FamilySafetyRefreshTask"
},
{
"actions": [],
"name": "IndexerAutomaticMaintenance"
},
{
"actions": [],
"name": "ThemesSyncedImageDownload"
}
]
},
{
"name": "SoftwareProtectionPlatform",
"tasks": [
{
"actions": [],
"name": "SvcRestartTaskLogon"
}
]
},
{
"name": "SpacePort",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "46",
"path": "%windir%\\system32\\SpaceAgent.exe"
}
],
"name": "SpaceAgentTask"
},
{
"actions": [
{
"args": "/Work",
"args_id": "",
"id": "47",
"path": "%windir%\\system32\\spaceman.exe"
}
],
"name": "SpaceManagerTask"
}
]
},
{
"name": "Speech",
"tasks": [
{
"actions": [
{
"args": "StartedFromTask",
"args_id": "",
"id": "48",
"path": "%windir%\\system32\\speech_onecore\\common\\SpeechRuntime.exe"
}
],
"name": "HeadsetButtonPress"
}
]
},
{
"name": "StateRepository",
"tasks": [
{
"actions": [
{
"args": "%windir%\\system32\\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks",
"args_id": "49",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "MaintenanceTasks"
}
]
},
{
"name": "Storage Tiers Management",
"tasks": [
{
"actions": [],
"name": "Storage Tiers Management Initialization"
},
{
"actions": [
{
"args": "-c -h -g -# -m 8 -i 13500",
"args_id": "",
"id": "24",
"path": "%windir%\\system32\\defrag.exe"
}
],
"name": "Storage Tiers Optimization"
}
]
},
{
"name": "Subscription",
"tasks": [
{
"actions": [
{
"args": "-e",
"args_id": "",
"id": "50",
"path": "%SystemRoot%\\system32\\ClipRenew.exe"
}
],
"name": "EnableLicenseAcquisition"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "50",
"path": "%SystemRoot%\\system32\\ClipRenew.exe"
}
],
"name": "LicenseAcquisition"
}
]
},
{
"name": "SyncCenter"
},
{
"name": "Sysmain",
"tasks": [
{
"actions": [],
"name": "HybridDriveCachePrepopulate"
},
{
"actions": [],
"name": "HybridDriveCacheRebalance"
},
{
"actions": [],
"name": "ResPriStaticDbSync"
},
{
"actions": [
{
"args": "sysmain.dll,PfSvWsSwapAssessmentTask",
"args_id": "51",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "WsSwapAssessmentTask"
}
]
},
{
"name": "SystemRestore",
"tasks": [
{
"actions": [
{
"args": "ExecuteScheduledSPPCreation",
"args_id": "",
"id": "52",
"path": "%windir%\\system32\\srtasks.exe"
}
],
"name": "SR"
}
]
},
{
"name": "Task Manager",
"tasks": [
{
"actions": [],
"name": "Interactive"
}
]
},
{
"name": "TaskScheduler"
},
{
"name": "TextServicesFramework",
"tasks": [
{
"actions": [],
"name": "MsCtfMonitor"
}
]
},
{
"name": "Time Synchronization",
"tasks": [
{
"actions": [],
"name": "ForceSynchronizeTime"
},
{
"actions": [
{
"args": "start w32time task_started",
"args_id": "",
"id": "53",
"path": "%windir%\\system32\\sc.exe"
}
],
"name": "SynchronizeTime"
}
]
},
{
"name": "Time Zone",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "54",
"path": "%windir%\\system32\\tzsync.exe"
}
],
"name": "SynchronizeTimeZone"
}
]
},
{
"name": "TPM"
},
{
"name": "UNP",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "55",
"path": "%windir%\\System32\\UNP\\UpdateNotificationMgr.exe"
}
],
"name": "RunUpdateNotificationMgr"
}
]
},
{
"name": "UPnP",
"tasks": [
{
"actions": [
{
"args": "config upnphost start= auto",
"args_id": "",
"id": "56",
"path": "sc.exe"
}
],
"name": "UPnPHostConfig"
}
]
},
{
"name": "USB",
"tasks": [
{
"actions": [],
"name": "Usb-Notifications"
}
]
},
{
"name": "User Profile Service"
},
{
"name": "WCM",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "40",
"path": "%SystemRoot%\\System32\\WiFiTask.exe"
}
],
"name": "WiFiTask"
}
]
},
{
"name": "WDI",
"tasks": [
{
"actions": [],
"name": "ResolutionHost"
}
]
},
{
"name": "Windows Activation Technologies"
},
{
"name": "Windows Defender",
"tasks": [
{
"actions": [
{
"args": "-IdleTask -TaskName WdCacheMaintenance",
"args_id": "",
"id": "57",
"path": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpCmdRun.exe"
}
],
"name": "Windows Defender Cache Maintenance"
},
{
"actions": [
{
"args": "-IdleTask -TaskName WdCleanup",
"args_id": "",
"id": "57",
"path": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpCmdRun.exe"
}
],
"name": "Windows Defender Cleanup"
},
{
"actions": [
{
"args": "Scan -ScheduleJob -ScanTrigger 55 -IdleScheduledJob",
"args_id": "",
"id": "57",
"path": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpCmdRun.exe"
}
],
"name": "Windows Defender Scheduled Scan"
},
{
"actions": [
{
"args": "-IdleTask -TaskName WdVerification",
"args_id": "",
"id": "57",
"path": "C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.25080.5-0\\MpCmdRun.exe"
}
],
"name": "Windows Defender Verification"
}
]
},
{
"name": "Windows Error Reporting",
"tasks": [
{
"actions": [
{
"args": "-upload",
"args_id": "",
"id": "58",
"path": "%windir%\\system32\\wermgr.exe"
}
],
"name": "QueueReporting"
}
]
},
{
"name": "Windows Filtering Platform",
"tasks": [
{
"actions": [
{
"args": "bfe.dll,BfeOnServiceStartTypeChange",
"args_id": "59",
"id": "12",
"path": "%windir%\\system32\\rundll32.exe"
}
],
"name": "BfeOnServiceStartTypeChange"
}
]
},
{
"name": "Windows Media Sharing",
"tasks": [
{
"actions": [
{
"args": "",
"args_id": "",
"id": "60",
"path": "\"%ProgramFiles%\\Windows Media Player\\wmpnscfg.exe\""
}
],
"name": "UpdateLibrary"
}
]
},
{
"name": "Windows Subsystem For Linux"
},
{
"name": "WindowsBackup"
},
{
"name": "WindowsColorSystem",
"tasks": [
{
"actions": [],
"name": "Calibration Loader"
}
]
},
{
"name": "WindowsUpdate",
"tasks": [
{
"actions": [
{
"args": "start wuauserv",
"args_id": "",
"id": "53",
"path": "C:\\WINDOWS\\system32\\sc.exe"
}
],
"name": "Scheduled Start"
}
]
},
{
"name": "Wininet",
"tasks": [
{
"actions": [],
"name": "CacheTask"
}
]
},
{
"name": "WlanSvc",
"tasks": [
{
"actions": [],
"name": "CDSSync"
}
]
},
{
"name": "WOF"
},
{
"name": "Work Folders",
"tasks": [
{
"actions": [],
"name": "Work Folders Logon Synchronization"
},
{
"actions": [],
"name": "Work Folders Maintenance Work"
}
]
},
{
"name": "Workplace Join",
"tasks": [
{
"actions": [
{
"args": "$(Arg0) $(Arg1) $(Arg2)",
"args_id": "",
"id": "61",
"path": "%SystemRoot%\\System32\\dsregcmd.exe"
}
],
"name": "Automatic-Device-Join"
},
{
"actions": [],
"name": "Device-Sync"
},
{
"actions": [
{
"args": "/checkrecovery",
"args_id": "",
"id": "61",
"path": "%SystemRoot%\\System32\\dsregcmd.exe"
}
],
"name": "Recovery-Check"
}
]
},
{
"name": "WS"
},
{
"name": "WwanSvc",
"tasks": [
{
"actions": [
{
"args": "wwan",
"args_id": "",
"id": "40",
"path": "%SystemRoot%\\System32\\WiFiTask.exe"
}
],
"name": "NotificationTask"
},
{
"actions": [],
"name": "OobeDiscovery"
}
]
}
]
},
{
"name": "XblGameSave",
"tasks": [
{
"actions": [
{
"args": "standby",
"args_id": "",
"id": "62",
"path": "%windir%\\System32\\XblGameSaveTask.exe"
}
],
"name": "XblGameSaveTask"
}
]
}
]
}
],
"tasks": [
{
"actions": [
{
"args": "/reporting",
"args_id": "",
"id": "63",
"path": "%localappdata%\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe"
}
],
"name": "OneDrive Reporting Task-S-1-5-21-1842442002-3253073040-596110286-1001"
},
{
"actions": [
{
"args": "",
"args_id": "",
"id": "63",
"path": "%localappdata%\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe"
}
],
"name": "OneDrive Standalone Update Task-S-1-5-21-1842442002-3253073040-596110286-1001"
},
{
"actions": [
{
"args": "/startInstances",
"args_id": "",
"id": "64",
"path": "C:\\Users\\Alice\\AppData\\Local\\Microsoft\\OneDrive\\25.164.0824.0003\\OneDriveLauncher.exe"
}
],
"name": "OneDrive Startup Task-S-1-5-21-1842442002-3253073040-596110286-1001"
},
{
"actions": [],
"name": "PostponeDeviceSetupToast_S-1-5-21-1842442002-3253073040-596110286-1001_7"
},
{
"actions": [
{
"args": "--background-update --noerrdialogs",
"args_id": "",
"id": "2",
"path": "C:\\Program Files\\Yandex\\YandexBrowser\\Application\\browser.exe"
}
],
"name": "Обновление Браузера Яндекс"
}
]
}
},
"Timestamp": 1759759848552.522,
"UserID": "DESKTOP-IDDQD\\Alice"
}
21. Тема ОС
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 415,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "20870808-bda0-4678-ab75-46d98266baaf",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"theme": {
"AppsUseLightTheme": 1,
"CurrentTheme": "C:\\WINDOWS\\Resources\\Themes\\Aero.theme"
}
},
"Timestamp": 1759759848555.905,
"UserID": "DESKTOP-IDDQD\\Alice"
}
22. "Пуск" common
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 416,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "bf9d2887-164b-4a22-91c6-07030973329c",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"user_common_startup": {
"WOW64_32": [
{
"id": "707",
"path": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
}
],
"WOW64_64": [
{
"id": "707",
"path": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
}
]
}
},
"Timestamp": 1759759848558.528,
"UserID": "DESKTOP-IDDQD\\Alice"
}
23. "Пуск" user
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 417,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "4ab15940-c377-40ad-9f60-2afb2971666f",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"user_startup": {
"WOW64_32": [
{
"id": "708",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
}
],
"WOW64_64": [
{
"id": "708",
"path": "C:\\Users\\Alice\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini"
}
]
}
},
"Timestamp": 1759759848561.347,
"UserID": "DESKTOP-IDDQD\\Alice"
}
24. Количество пользователей ОС
{
"BrowserSessionID": "32dca2e7-8e5f-4a8e-c25f-45cefd345062",
"ClientID": "e2e4a36d-8dd7-ff00-9adb-2dc6db917faa",
"DeviceHostName": "DESKTOP-IDDQD",
"DeviceTimeZone": "+03:00",
"DeviceType": "Desktop",
"EventNumber": 418,
"EventType": "Telemetry",
"EventTypeID": "39",
"ID": "9f934671-4669-46cc-b961-5f69464aa02d",
"LocalIPs": [
"172.29.56.13",
"fe80::1dcc:e29a:fe83:1b4f"
],
"OSName": "Windows NT",
"OSVersion": "10.0.19045",
"ProductName": "CorporateYandexBrowser",
"ProtocolVersion": 1,
"Telemetry": {
"winusers_count": 5
},
"Timestamp": 1759759848564.081,
"UserID": "DESKTOP-IDDQD\\Alice"
}
Также вы можете перейти на сервис
Полезные ссылки
Была ли статья полезна?
Предыдущая
Следующая