Display Name Name State Start Mode Service Type Path Error Control Start Name Tag ID AllJoyn Router Service AJRouter Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Application Layer Gateway Service ALG Stopped Disabled Own Process c:\windows\system32\alg.exe Normal NT AUTHORITY\LocalService 0 Application Identity AppIDSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Application Information Appinfo Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 App Readiness AppReadiness Stopped Manual Share Process c:\windows\system32\svchost.exe -k appreadiness -p Normal LocalSystem 0 AppX Deployment Service (AppXSVC) AppXSvc Running Manual Share Process c:\windows\system32\svchost.exe -k wsappx -p Normal LocalSystem 0 Windows Audio Endpoint Builder AudioEndpointBuilder Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Windows Audio Audiosrv Running Auto Own Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Cellular Time autotimesvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k autotimesvc Normal NT AUTHORITY\LocalService 0 ActiveX Installer (AxInstSV) AxInstSV Stopped Disabled Share Process c:\windows\system32\svchost.exe -k axinstsvgroup Normal LocalSystem 0 BitLocker Drive Encryption Service BDESVC Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal localSystem 0 Base Filtering Engine BFE Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetworkfirewall -p Normal NT AUTHORITY\LocalService 0 Background Intelligent Transfer Service BITS Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Background Tasks Infrastructure Service BrokerInfrastructure Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 Bluetooth Audio Gateway Service BTAGService Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 AVCTP service BthAvctpSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Bluetooth Support Service bthserv Running Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Capability Access Manager Service camsvc Running Manual Share Process c:\windows\system32\svchost.exe -k osprivacy -p Normal LocalSystem 0 Connected Devices Platform Service CDPSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Certificate Propagation CertPropSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Client License Service (ClipSVC) ClipSVC Running Manual Share Process c:\windows\system32\svchost.exe -k wsappx -p Normal LocalSystem 0 COM+ System Application COMSysApp Stopped Manual Own Process c:\windows\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0 CoreMessaging CoreMessagingRegistrar Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetwork -p Normal NT AUTHORITY\LocalService 0 Intel(R) Content Protection HDCP Service cplspcon Stopped Disabled Own Process c:\windows\system32\driverstore\filerepository\iigd_dch.inf_amd64_0cc2be7db3729c41\intelcphdcpsvc.exe Normal LocalSystem 0 Cryptographic Services CryptSvc Running Auto Own Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT Authority\NetworkService 0 DCOM Server Process Launcher DcomLaunch Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 dcsvc dcsvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Optimize drives defragsvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k defragsvc Normal localSystem 0 Device Association Service DeviceAssociationService Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Device Install Service DeviceInstall Stopped Manual Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 DevQuery Background Discovery Broker DevQueryBroker Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 DHCP Client Dhcp Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Microsoft (R) Diagnostics Hub Standard Collector Service diagnosticshub.standardcollector.service Stopped Disabled Own Process c:\windows\system32\diagsvcs\diagnosticshub.standardcollector.service.exe Normal LocalSystem 0 Diagnostic Execution Service diagsvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k diagnostics Normal LocalSystem 0 Connected User Experiences and Telemetry DiagTrack Stopped Disabled Own Process c:\windows\system32\svchost.exe -k utcsvc -p Normal LocalSystem 0 Display Policy Service DispBrokerDesktopSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Display Enhancement Service DisplayEnhancementService Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Device Management Enrollment Service DmEnrollmentSvc Stopped Disabled Own Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Device Management Wireless Application Protocol (WAP) Push message Routing Service dmwappushservice Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 DNS Client Dnscache Running Auto Own Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 Dolby DAX API Service DolbyDAXAPI Stopped Disabled Own Process c:\windows\system32\dolbyaposvc\dax3api.exe Normal LocalSystem 0 Delivery Optimization DoSvc Running Auto Own Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT Authority\NetworkService 0 Wired AutoConfig dot3svc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal localSystem 0 Diagnostic Policy Service DPS Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetwork -p Normal NT AUTHORITY\LocalService 0 Device Setup Manager DsmSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Data Sharing Service DsSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Ignore LocalSystem 0 Data Usage DusmSvc Running Auto Own Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Extensible Authentication Protocol EapHost Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal localSystem 0 Microsoft Edge Update Service (edgeupdate) edgeupdate Stopped Disabled Own Process "c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe" /svc Normal LocalSystem 0 Microsoft Edge Update Service (edgeupdatem) edgeupdatem Stopped Disabled Own Process "c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe" /medsvc Normal LocalSystem 0 Encrypting File System (EFS) EFS Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Embedded Mode embeddedmode Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Enterprise App Management Service EntAppSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k appmodel -p Normal LocalSystem 0 Intel(R) Dynamic Tuning service esifsvc Stopped Disabled Own Process "c:\windows\system32\driverstore\filerepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\esif_uf.exe" Normal LocalSystem 0 Windows Event Log EventLog Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 COM+ Event System EventSystem Running Auto Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Fax Fax Stopped Disabled Own Process c:\windows\system32\fxssvc.exe Normal NT AUTHORITY\NetworkService 0 Function Discovery Provider Host fdPHost Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Function Discovery Resource Publication FDResPub Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 File History Service fhsvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Windows Font Cache Service FontCache Running Auto Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Windows Camera Frame Server FrameServer Stopped Manual Share Process c:\windows\system32\svchost.exe -k camera Normal NT AUTHORITY\LocalService 0 Windows Camera Frame Server Monitor FrameServerMonitor Stopped Manual Own Process c:\windows\system32\svchost.exe -k cameramonitor Normal LocalSystem 0 Google Chrome Elevation Service (GoogleChromeElevationService) GoogleChromeElevationService Stopped Disabled Own Process "c:\program files\google\chrome\application\106.0.5249.119\elevation_service.exe" Normal LocalSystem 0 Group Policy Client gpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 GraphicsPerfSvc GraphicsPerfSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k graphicsperfsvcgroup Ignore LocalSystem 0 Layanan Google Update (gupdate) gupdate Stopped Disabled Own Process "c:\program files (x86)\google\update\googleupdate.exe" /svc Normal LocalSystem 0 Layanan Google Update (gupdatem) gupdatem Stopped Disabled Own Process "c:\program files (x86)\google\update\googleupdate.exe" /medsvc Normal LocalSystem 0 Human Interface Device Service hidserv Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 HV Host Service HvHost Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Windows Mobile Hotspot Service icssvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Intel(R) HD Graphics Control Panel Service igfxCUIService2.0.0.0 Stopped Disabled Own Process c:\windows\system32\driverstore\filerepository\cui_dch.inf_amd64_f51939e52b944f4b\igfxcuiservicen.exe Normal LocalSystem 0 IKE and AuthIP IPsec Keying Modules IKEEXT Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Microsoft Store Install Service InstallService Stopped Manual Own Process c:\windows\system32\svchost.exe -k netsvcs -p Ignore LocalSystem 0 Intel(R) Audio Service IntelAudioService Stopped Disabled Own Process c:\windows\system32\cavs\ias\intelaudioservice.exe Normal LocalSystem 0 Inventory and Compatibility Appraisal service InventorySvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k invsvcgroup -p Normal LocalSystem 0 IP Helper iphlpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 IP Translation Configuration Service IpxlatCfgSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 CNG Key Isolation KeyIso Running Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 KtmRm for Distributed Transaction Coordinator KtmRm Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkserviceandnoimpersonation -p Normal NT AUTHORITY\NetworkService 0 Server LanmanServer Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Workstation LanmanWorkstation Stopped Disabled Share Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 Geolocation Service lfsvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Windows License Manager Service LicenseManager Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Ignore NT Authority\LocalService 0 Link-Layer Topology Discovery Mapper lltdsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 TCP/IP NetBIOS Helper lmhosts Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 LSM LSM Running Unknown Unknown Not Available Unknown Not Available Not Available Language Experience Service LxpSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0 Downloaded Maps Manager MapsBroker Stopped Auto Own Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 McpManagementService McpManagementService Stopped Manual Own Process c:\windows\system32\svchost.exe -k mcpmanagementservicegroup Normal LocalSystem 0 Microsoft Edge Elevation Service (MicrosoftEdgeElevationService) MicrosoftEdgeElevationService Stopped Disabled Own Process "c:\program files (x86)\microsoft\edge\application\106.0.1370.47\elevation_service.exe" Normal LocalSystem 0 Windows Mixed Reality OpenXR Service MixedRealityOpenXRSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Windows Defender Firewall mpssvc Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetworkfirewall -p Normal NT Authority\LocalService 0 Distributed Transaction Coordinator MSDTC Stopped Manual Own Process c:\windows\system32\msdtc.exe Normal NT AUTHORITY\NetworkService 0 Microsoft iSCSI Initiator Service MSiSCSI Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Windows Installer msiserver Stopped Manual Own Process c:\windows\system32\msiexec.exe /v Normal LocalSystem 0 Natural Authentication NaturalAuthentication Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Network Connectivity Assistant NcaSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Network Connection Broker NcbService Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Network Connected Devices Auto-Setup NcdAutoSetup Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenonetwork -p Normal NT AUTHORITY\LocalService 0 Netlogon Netlogon Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Network Connections Netman Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Network List Service netprofm Running Manual Share Process c:\windows\system32\svchost.exe -k netprofm -p Normal NT AUTHORITY\NetworkService 0 NetSetupSvc NetSetupSvc Stopped Unknown Unknown Not Available Unknown Not Available Not Available Net.Tcp Port Sharing Service NetTcpPortSharing Stopped Disabled Share Process c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe Normal NT AUTHORITY\LocalService 0 Microsoft Passport Container NgcCtnrSvc Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Microsoft Passport NgcSvc Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Network Location Awareness NlaSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netprofm -p Normal NT AUTHORITY\NetworkService 0 Network Store Interface Service nsi Running Auto Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT Authority\LocalService 0 NVIDIA Display Container LS NVDisplay.ContainerLocalSystem Stopped Disabled Own Process c:\windows\system32\driverstore\filerepository\nvrzui.inf_amd64_cd98b4681934c279\display.nvcontainer\nvdisplay.container.exe -s nvdisplay.containerlocalsystem -f c:\programdata\nvidia\nvdisplay.containerlocalsystem.log -l 3 -d c:\windows\system32\driverstore\filerepository\nvrzui.inf_amd64_cd98b4681934c279\display.nvcontainer\plugins\localsystem -r -p 30000 -cfg nvdisplay.containerlocalsystem\localsystem Ignore LocalSystem 0 Peer Networking Identity Manager p2pimsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Peer Networking Grouping p2psvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Program Compatibility Assistant Service PcaSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Windows Perception Simulation Service perceptionsimulation Stopped Disabled Own Process c:\windows\system32\perceptionsimulation\perceptionsimulationservice.exe Normal LocalSystem 0 Performance Counter DLL Host PerfHost Stopped Manual Own Process c:\windows\syswow64\perfhost.exe Normal NT AUTHORITY\LocalService 0 Phone Service PhoneSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT Authority\LocalService 0 Performance Logs & Alerts pla Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenonetwork -p Normal NT AUTHORITY\LocalService 0 Plug and Play PlugPlay Running Manual Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 PNRP Machine Name Publication Service PNRPAutoReg Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Peer Name Resolution Protocol PNRPsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 IPsec Policy Agent PolicyAgent Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p Normal NT Authority\NetworkService 0 Power Power Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 Printer Extensions and Notifications PrintNotify Stopped Manual Share Process c:\windows\system32\svchost.exe -k print Normal LocalSystem 0 User Profile Service ProfSvc Running Auto Share Process c:\windows\system32\svchost.exe -k userprofileservice -p Normal LocalSystem 0 Windows PushToInstall Service PushToInstall Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Ignore LocalSystem 0 Quality Windows Audio Video Experience QWAVE Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 Remote Access Auto Connection Manager RasAuto Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal localSystem 0 Remote Access Connection Manager RasMan Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Routing and Remote Access RemoteAccess Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Remote Registry RemoteRegistry Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Retail Demo Service RetailDemo Stopped Manual Share Process c:\windows\system32\svchost.exe -k rdxgroup Normal LocalSystem 0 Radio Management Service RmSvc Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 RPC Endpoint Mapper RpcEptMapper Running Auto Share Process c:\windows\system32\svchost.exe -k rpcss -p Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) Locator RpcLocator Stopped Manual Own Process c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) RpcSs Running Auto Share Process c:\windows\system32\svchost.exe -k rpcss -p Normal NT AUTHORITY\NetworkService 0 Realtek Audio Universal Service RtkAudioUniversalService Stopped Disabled Own Process "c:\windows\system32\rtkauduservice64.exe" Normal LocalSystem 0 Security Accounts Manager SamSs Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Smart Card SCardSvr Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Smart Card Device Enumeration Service ScDeviceEnum Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Task Scheduler Schedule Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Smart Card Removal Policy SCPolicySvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Backup SDRSVC Stopped Manual Own Process c:\windows\system32\svchost.exe -k sdrsvc Normal localSystem 0 Secondary Logon seclogon Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Windows Security Service SecurityHealthService Stopped Manual Own Process c:\windows\system32\securityhealthservice.exe Normal LocalSystem 0 Payments and NFC/SE Manager SEMgrSvc Stopped Disabled Own Process c:\windows\system32\svchost.exe -k localservice -p Ignore NT AUTHORITY\LocalService 0 System Event Notification Service SENS Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Sensor Data Service SensorDataService Stopped Disabled Own Process c:\windows\system32\sensordataservice.exe Normal LocalSystem 0 Sensor Service SensorService Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Sensor Monitoring Service SensrSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 Remote Desktop Configuration SessionEnv Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal localSystem 0 System Guard Runtime Monitor Broker SgrmBroker Running Auto Own Process c:\windows\system32\sgrm\sgrmbroker.exe Normal LocalSystem 0 Internet Connection Sharing (ICS) SharedAccess Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Spatial Data Service SharedRealitySvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Shell Hardware Detection ShellHWDetection Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Ignore LocalSystem 0 Shared PC Account Manager shpamsvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Microsoft Storage Spaces SMP smphost Stopped Disabled Own Process c:\windows\system32\svchost.exe -k smphost Normal NT AUTHORITY\NetworkService 0 Microsoft Windows SMS Router Service. SmsRouter Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 SNMP Trap SNMPTrap Stopped Disabled Own Process c:\windows\system32\snmptrap.exe Normal NT AUTHORITY\LocalService 0 Windows Perception Service spectrum Stopped Disabled Own Process c:\windows\system32\spectrum.exe Normal NT AUTHORITY\LocalService 0 Print Spooler Spooler Running Auto Own Process c:\windows\system32\spoolsv.exe Normal LocalSystem 0 Software Protection sppsvc Stopped Auto Own Process c:\windows\system32\sppsvc.exe Normal NT AUTHORITY\NetworkService 0 SSDP Discovery SSDPSRV Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 OpenSSH Authentication Agent ssh-agent Stopped Disabled Own Process c:\windows\system32\openssh\ssh-agent.exe Normal LocalSystem 0 Secure Socket Tunneling Protocol Service SstpSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT Authority\LocalService 0 State Repository Service StateRepository Running Auto Share Process c:\windows\system32\svchost.exe -k appmodel -p Normal LocalSystem 0 Windows Image Acquisition (WIA) StiSvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k imgsvc Normal NT Authority\LocalService 0 Storage Service StorSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Spot Verifier svsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Microsoft Software Shadow Copy Provider swprv Stopped Manual Own Process c:\windows\system32\svchost.exe -k swprv Normal LocalSystem 0 SysMain SysMain Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Ignore LocalSystem 0 System Events Broker SystemEventsBroker Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch -p Normal LocalSystem 0 Telephony TapiSrv Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 Thunderbolt(TM) Application Launcher TbtHostControllerService Stopped Disabled Own Process c:\windows\thunderboltservice.exe Normal LocalSystem 0 Remote Desktop Services TermService Stopped Disabled Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT Authority\NetworkService 0 Text Input Management Service TextInputManagementService Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Themes Themes Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Storage Tiers Management TieringEngineService Stopped Manual Own Process c:\windows\system32\tieringengineservice.exe Normal localSystem 0 Time Broker TimeBrokerSvc Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Web Account Manager TokenBroker Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Distributed Link Tracking Client TrkWks Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Recommended Troubleshooting Service TroubleshootingSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Windows Modules Installer TrustedInstaller Stopped Disabled Own Process c:\windows\servicing\trustedinstaller.exe Normal localSystem 0 Auto Time Zone Updater tzautoupdate Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Remote Desktop Services UserMode Port Redirector UmRdpService Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal localSystem 0 UPnP Device Host upnphost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 User Manager UserManager Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Update Orchestrator Service UsoSvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Volumetric Audio Compositor Service VacSvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Credential Manager VaultSvc Stopped Disabled Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Virtual Disk vds Stopped Manual Own Process c:\windows\system32\vds.exe Normal LocalSystem 0 Hyper-V Guest Service Interface vmicguestinterface Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Hyper-V Heartbeat Service vmicheartbeat Stopped Disabled Share Process c:\windows\system32\svchost.exe -k icservice -p Normal LocalSystem 0 Hyper-V Data Exchange Service vmickvpexchange Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Hyper-V Remote Desktop Virtualization Service vmicrdv Stopped Disabled Share Process c:\windows\system32\svchost.exe -k icservice -p Normal LocalSystem 0 Hyper-V Guest Shutdown Service vmicshutdown Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Hyper-V Time Synchronization Service vmictimesync Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Hyper-V PowerShell Direct Service vmicvmsession Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Hyper-V Volume Shadow Copy Requestor vmicvss Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Volume Shadow Copy VSS Stopped Manual Own Process c:\windows\system32\vssvc.exe Normal LocalSystem 0 Windows Time W32Time Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 WaaSMedicSvc WaaSMedicSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k wusvcs -p Normal LocalSystem 0 WalletService WalletService Stopped Manual Share Process c:\windows\system32\svchost.exe -k appmodel -p Ignore LocalSystem 0 Warp JIT Service WarpJITSvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Ignore NT Authority\LocalService 0 Block Level Backup Engine Service wbengine Stopped Manual Own Process "c:\windows\system32\wbengine.exe" Normal localSystem 0 Windows Biometric Service WbioSrvc Running Auto Share Process c:\windows\system32\svchost.exe -k wbiosvcgroup Normal LocalSystem 0 Windows Connection Manager Wcmsvc Running Auto Own Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Windows Connect Now - Config Registrar wcncsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p Normal NT AUTHORITY\LocalService 0 Diagnostic Service Host WdiServiceHost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Diagnostic System Host WdiSystemHost Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Microsoft Defender Antivirus Network Inspection Service WdNisSvc Running Manual Own Process "c:\programdata\microsoft\windows defender\platform\4.18.2209.7-0\nissrv.exe" Normal NT AUTHORITY\LocalService 0 WebClient WebClient Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Web Threat Defense Service webthreatdefsvc Running Manual Share Process c:\windows\system32\svchost.exe -k webthreatdefense -p Normal NT AUTHORITY\LocalService 0 Windows Event Collector Wecsvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 Windows Encryption Provider Host Service WEPHOSTSVC Stopped Manual Share Process c:\windows\system32\svchost.exe -k wephostsvcgroup Normal NT AUTHORITY\LocalService 0 Problem Reports Control Panel Support wercplsupport Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal localSystem 0 Windows Error Reporting Service WerSvc Stopped Disabled Own Process c:\windows\system32\svchost.exe -k wersvcgroup Ignore localSystem 0 Wi-Fi Direct Services Connection Manager Service WFDSConMgrSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Still Image Acquisition Events WiaRpc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Microsoft Defender Antivirus Service WinDefend Running Auto Own Process "c:\programdata\microsoft\windows defender\platform\4.18.2209.7-0\msmpeng.exe" Normal LocalSystem 0 WinHTTP Web Proxy Auto-Discovery Service WinHttpAutoProxySvc Running Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Windows Management Instrumentation Winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs -p Ignore localSystem 0 Windows Remote Management (WS-Management) WinRM Stopped Disabled Share Process c:\windows\system32\svchost.exe -k networkservice -p Normal NT AUTHORITY\NetworkService 0 Windows Insider Service wisvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 WLAN AutoConfig WlanSvc Running Auto Own Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal LocalSystem 0 Microsoft Account Sign-in Assistant wlidsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Local Profile Assistant Service wlpasvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT Authority\LocalService 0 Windows Management Service WManSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 WMI Performance Adapter wmiApSrv Stopped Disabled Own Process c:\windows\system32\wbem\wmiapsrv.exe Normal localSystem 0 Windows Media Player Network Sharing Service WMPNetworkSvc Stopped Disabled Own Process "c:\program files\windows media player\wmpnetwk.exe" Normal NT AUTHORITY\NetworkService 0 Work Folders workfolderssvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice -p Normal NT AUTHORITY\LocalService 0 Parental Controls WpcMonSvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k localservice Normal LocalSystem 0 Portable Device Enumerator Service WPDBusEnum Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Push Notifications System Service WpnService Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Security Center wscsvc Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p Normal NT AUTHORITY\LocalService 0 Windows Search WSearch Stopped Disabled Own Process c:\windows\system32\searchindexer.exe /embedding Normal LocalSystem 0 Windows Update wuauserv Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 WWAN AutoConfig WwanSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal localSystem 0 Xbox Live Auth Manager XblAuthManager Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Xbox Live Game Save XblGameSave Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Xbox Accessory Management Service XboxGipSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Xbox Live Networking Service XboxNetApiSvc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs -p Normal LocalSystem 0 Agent Activation Runtime_534ec AarSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k aarsvcgroup -p Normal Not Available 0 GameDVR and Broadcast User Service_534ec BcastDVRUserService_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k bcastdvruserservice Normal Not Available 0 Bluetooth User Support Service_534ec BluetoothUserService_534ec Running Manual Unknown c:\windows\system32\svchost.exe -k bthappgroup -p Normal Not Available 0 CaptureService_534ec CaptureService_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k localservice -p Normal Not Available 0 Clipboard User Service_534ec cbdhsvc_534ec Running Auto Unknown c:\windows\system32\svchost.exe -k clipboardsvcgroup -p Normal Not Available 0 Connected Devices Platform User Service_534ec CDPUserSvc_534ec Running Auto Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Normal Not Available 0 ConsentUX User Service_534ec ConsentUxUserSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k devicesflow Normal Not Available 0 CredentialEnrollmentManagerUserSvc_534ec CredentialEnrollmentManagerUserSvc_534ec Stopped Manual Unknown c:\windows\system32\credentialenrollmentmanager.exe Normal Not Available 0 DeviceAssociationBroker_534ec DeviceAssociationBrokerSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k devicesflow -p Normal Not Available 0 DevicePicker_534ec DevicePickerUserSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k devicesflow Normal Not Available 0 DevicesFlow_534ec DevicesFlowUserSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k devicesflow Normal Not Available 0 MessagingService_534ec MessagingService_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0 NPSMSvc_534ec NPSMSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k localservice -p Normal Not Available 0 Sync Host_534ec OneSyncSvc_534ec Running Auto Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0 P9RdrService_534ec P9RdrService_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k p9rdrservice -p Normal Not Available 0 PenService_534ec PenService_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k penservice Normal Not Available 0 Contact Data_534ec PimIndexMaintenanceSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0 PrintWorkflow_534ec PrintWorkflowUserSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k printworkflow Normal Not Available 0 Udk User Service_534ec UdkUserSvc_534ec Running Manual Unknown c:\windows\system32\svchost.exe -k udksvcgroup Normal Not Available 0 User Data Storage_534ec UnistoreSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0 User Data Access_534ec UserDataSvc_534ec Stopped Manual Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0 Web Threat Defense User Service_534ec webthreatdefusersvc_534ec Running Auto Unknown c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p Normal Not Available 0 Windows Push Notifications User Service_534ec WpnUserService_534ec Running Auto Unknown c:\windows\system32\svchost.exe -k unistacksvcgroup Ignore Not Available 0