Skip to content

Instantly share code, notes, and snippets.

@noraj
Last active April 25, 2020 19:48
Show Gist options
  • Save noraj/10e5d0a8c298c21cce04016f62bea2fc to your computer and use it in GitHub Desktop.
Save noraj/10e5d0a8c298c21cce04016f62bea2fc to your computer and use it in GitHub Desktop.
Side files for HackTheBox Control Writeup https://rawsec.ml/en/hackthebox-control-write-up/
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\1394ohci
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\1394ohci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\3ware
ImagePath REG_EXPAND_SZ System32\drivers\3ware.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPI
ImagePath REG_EXPAND_SZ System32\drivers\ACPI.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcpiDev
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\AcpiDev.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpiex
ImagePath REG_EXPAND_SZ System32\Drivers\acpiex.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpipagr
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpipagr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcpiPmi
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpipmi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpitime
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpitime.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ADP80XX
ImagePath REG_EXPAND_SZ System32\drivers\ADP80XX.SYS
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AFD
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\afd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\afunix
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\afunix.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ahcache
ImagePath REG_EXPAND_SZ system32\DRIVERS\ahcache.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AJRouter
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ALG
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\alg.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AmdK8
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\amdk8.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AmdPPM
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\amdppm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdsata
ImagePath REG_EXPAND_SZ System32\drivers\amdsata.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdsbs
ImagePath REG_EXPAND_SZ System32\drivers\amdsbs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdxata
ImagePath REG_EXPAND_SZ System32\drivers\amdxata.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppHostSvc
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k apphost
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppID
ImagePath REG_EXPAND_SZ system32\drivers\appid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppIDSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Appinfo
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\applockerfltr
ImagePath REG_EXPAND_SZ system32\drivers\applockerfltr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppMgmt
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppReadiness
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k AppReadiness -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppVClient
ImagePath REG_EXPAND_SZ %systemroot%\system32\AppVClient.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvStrm
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvStrm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvVemgr
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvVemgr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvVfs
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvVfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppXSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k wsappx -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\arcsas
ImagePath REG_EXPAND_SZ System32\drivers\arcsas.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AsyncMac
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\asyncmac.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\atapi
ImagePath REG_EXPAND_SZ System32\drivers\atapi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AudioEndpointBuilder
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Audiosrv
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AxInstSV
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k AxInstSVGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\b06bdrv
ImagePath REG_EXPAND_SZ System32\drivers\bxvbda.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam
ImagePath REG_EXPAND_SZ system32\drivers\bam.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicDisplay
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_5103ac179273be89\BasicDisplay.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_0b8d03c3bc0e7fd9\BasicRender.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bcmfn2
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\bcmfn2.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bfadfcoei
ImagePath REG_EXPAND_SZ System32\drivers\bfadfcoei.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bfadi
ImagePath REG_EXPAND_SZ System32\drivers\bfadi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BFE
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bindflt
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\bindflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bowser
ImagePath REG_EXPAND_SZ system32\DRIVERS\bowser.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BrokerInfrastructure
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTAGService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthAvctpSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthEnum
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BthEnum.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthLEEnum
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthMini
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHMINI.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTHPORT
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHport.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bthserv
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTHUSB
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHUSB.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bttflt
ImagePath REG_EXPAND_SZ System32\drivers\bttflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\buttonconverter
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\buttonconverter.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bxfcoe
ImagePath REG_EXPAND_SZ System32\drivers\bxfcoe.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bxois
ImagePath REG_EXPAND_SZ System32\drivers\bxois.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\camsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k appmodel -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CapImg
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\capimg.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k ClipboardSvcGroup -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cdfs
ImagePath REG_EXPAND_SZ system32\DRIVERS\cdfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cdrom
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\cdrom.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertPropSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cht4iscsi
ImagePath REG_EXPAND_SZ System32\drivers\cht4sx64.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cht4vbd
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\cht4vx64.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CldFlt
ImagePath REG_EXPAND_SZ system32\drivers\cldflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CLFS
ImagePath REG_EXPAND_SZ System32\drivers\CLFS.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ClipSVC
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k wsappx -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CmBatt
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\CmBatt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CNG
ImagePath REG_EXPAND_SZ System32\Drivers\cng.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cnghwassist
ImagePath REG_EXPAND_SZ System32\DRIVERS\cnghwassist.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CompositeBus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_e4d35af746093dc3\CompositeBus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\COMSysApp
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\condrv
ImagePath REG_EXPAND_SZ System32\drivers\condrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CoreMessagingRegistrar
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CryptSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CSC
ImagePath REG_EXPAND_SZ system32\drivers\csc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CscService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dam
ImagePath REG_EXPAND_SZ system32\drivers\dam.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DcomLaunch
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\defragsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k defragsvc
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DeviceAssociationService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DeviceInstall
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevQueryBroker
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dfsc
ImagePath REG_EXPAND_SZ System32\Drivers\dfsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\diagnosticshub.standardcollector.service
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DiagTrack
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k utcsvc -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Disk
ImagePath REG_EXPAND_SZ System32\drivers\disk.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DmEnrollmentSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmvsc
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\dmvsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmwappushservice
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dnscache
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DoSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dot3svc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DPS
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\drmkaud
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\drmkaud.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DsmSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DsSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DXGKrnl
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\dxgkrnl.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\e1iexpress
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\e1i63x64.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eaphost
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ebdrv
ImagePath REG_EXPAND_SZ System32\drivers\evbda.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EFS
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\lsass.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EhStorClass
ImagePath REG_EXPAND_SZ System32\drivers\EhStorClass.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EhStorTcgDrv
ImagePath REG_EXPAND_SZ System32\drivers\EhStorTcgDrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\elxfcoe
ImagePath REG_EXPAND_SZ System32\drivers\elxfcoe.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\elxstor
ImagePath REG_EXPAND_SZ System32\drivers\elxstor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\embeddedmode
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EntAppSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k appmodel -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ErrDev
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\errdev.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventSystem
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fcvsc
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fcvsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fdc
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fdc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fdPHost
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FDResPub
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FileCrypt
ImagePath REG_EXPAND_SZ system32\drivers\filecrypt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FileInfo
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fileinfo.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Filetrace
ImagePath REG_EXPAND_SZ system32\drivers\filetrace.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\flpydisk
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\flpydisk.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FltMgr
ImagePath REG_EXPAND_SZ system32\drivers\fltmgr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FontCache
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FrameServer
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k Camera
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FsDepends
ImagePath REG_EXPAND_SZ System32\drivers\FsDepends.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gencounter
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmgencounter.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\genericusbfn
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\genericusbfn.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GPIOClx0101
ImagePath REG_EXPAND_SZ System32\Drivers\msgpioclx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gpsvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GraphicsPerfSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HdAudAddService
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\HdAudio.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HDAudBus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HDAudBus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidBatt
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HidBatt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hidinterrupt
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hidinterrupt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hidserv
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidUsb
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hidusb.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HpSAMD
ImagePath REG_EXPAND_SZ System32\drivers\HpSAMD.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP
ImagePath REG_EXPAND_SZ system32\drivers\HTTP.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hvcrash
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hvcrash.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HvHost
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hvservice
ImagePath REG_EXPAND_SZ system32\drivers\hvservice.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HwNClx0101
ImagePath REG_EXPAND_SZ System32\Drivers\mshwnclx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hwpolicy
ImagePath REG_EXPAND_SZ System32\drivers\hwpolicy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hyperkbd
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hyperkbd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HyperVideo
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HyperVideo.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt
ImagePath REG_EXPAND_SZ System32\DRIVERS\i8042prt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaLPSSi_GPIO
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\iaLPSSi_GPIO.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaLPSSi_I2C
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\iaLPSSi_I2C.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaStorAVC
ImagePath REG_EXPAND_SZ System32\drivers\iaStorAVC.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaStorV
ImagePath REG_EXPAND_SZ System32\drivers\iaStorV.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ibbus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ibbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\icssvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IKEEXT
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IndirectKmd
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\IndirectKmd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\InstallService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelide
ImagePath REG_EXPAND_SZ system32\drivers\intelide.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelpep
ImagePath REG_EXPAND_SZ System32\drivers\intelpep.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelppm
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\intelppm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IpFilterDriver
ImagePath REG_EXPAND_SZ system32\DRIVERS\ipfltdrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iphlpsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetSvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPMIDRV
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\IPMIDrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPNAT
ImagePath REG_EXPAND_SZ System32\drivers\ipnat.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPsecGW
ImagePath REG_EXPAND_SZ system32\drivers\ipsecgw.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPT
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ipt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\isapnp
ImagePath REG_EXPAND_SZ System32\drivers\isapnp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iScsiPrt
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\msiscsi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ItSas35i
ImagePath REG_EXPAND_SZ System32\drivers\ItSas35i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdclass
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kbdclass.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdhid
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kbdhid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kdnic
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kdnic.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KeyIso
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KPSSVC
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k KpsSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KSecDD
ImagePath REG_EXPAND_SZ System32\Drivers\ksecdd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KSecPkg
ImagePath REG_EXPAND_SZ System32\Drivers\ksecpkg.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ksthunk
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\ksthunk.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KtmRm
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k smbsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lfsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LicenseManager
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lltdio
ImagePath REG_EXPAND_SZ system32\drivers\lltdio.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lltdsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lmhosts
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS2i
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas2i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS3i
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas3i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SSS
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sss.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSM
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\luafv
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\luafv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MapsBroker
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MariaDB
ImagePath REG_EXPAND_SZ "C:\Program Files\MariaDB 10.4\bin\mysqld.exe" "--defaults-file=C:\MariaDB\my.ini" "MariaDB"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mausbhost
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mausbhost.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mausbip
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mausbip.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas
ImagePath REG_EXPAND_SZ System32\drivers\megasas.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas2i
ImagePath REG_EXPAND_SZ System32\drivers\MegaSas2i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas35i
ImagePath REG_EXPAND_SZ System32\drivers\megasas35i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasr
ImagePath REG_EXPAND_SZ System32\drivers\megasr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Microsoft_Bluetooth_AvrcpTransport
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mlx4_bus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mlx4_bus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MMCSS
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\mmcss.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Modem
ImagePath REG_EXPAND_SZ system32\drivers\modem.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\monitor
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\monitor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mouclass
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mouclass.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mouhid
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mouhid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mountmgr
ImagePath REG_EXPAND_SZ System32\drivers\mountmgr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mpsdrv
ImagePath REG_EXPAND_SZ System32\drivers\mpsdrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mpssvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mrxsmb
ImagePath REG_EXPAND_SZ system32\DRIVERS\mrxsmb.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mrxsmb20
ImagePath REG_EXPAND_SZ system32\DRIVERS\mrxsmb20.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsBridge
ImagePath REG_EXPAND_SZ System32\drivers\bridge.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSDTC
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\msdtc.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msgpiowin32
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\msgpiowin32.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mshidkmdf
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mshidkmdf.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mshidumdf
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mshidumdf.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msisadrv
ImagePath REG_EXPAND_SZ System32\drivers\msisadrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSiSCSI
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msiserver
ImagePath REG_EXPAND_SZ %systemroot%\system32\msiexec.exe /V
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSKSSRV
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSKSSRV.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsLbfoProvider
ImagePath REG_EXPAND_SZ System32\drivers\MsLbfoProvider.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsLldp
ImagePath REG_EXPAND_SZ system32\drivers\mslldp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPCLOCK
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSPCLOCK.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPQM
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSPQM.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsSecFlt
ImagePath REG_EXPAND_SZ system32\drivers\mssecflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mssmbios
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mssmbios.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSTEE
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSTEE.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MTConfig
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MTConfig.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Mup
ImagePath REG_EXPAND_SZ System32\Drivers\mup.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mvumis
ImagePath REG_EXPAND_SZ System32\drivers\mvumis.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcaSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetSvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcbService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndfltr
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ndfltr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NDIS
ImagePath REG_EXPAND_SZ system32\drivers\ndis.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisCap
ImagePath REG_EXPAND_SZ System32\drivers\ndiscap.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisImPlatform
ImagePath REG_EXPAND_SZ System32\drivers\NdisImPlatform.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisTapi
ImagePath REG_EXPAND_SZ System32\DRIVERS\ndistapi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ndisuio
ImagePath REG_EXPAND_SZ system32\drivers\ndisuio.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisVirtualBus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\NdisVirtualBus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisWan
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ndiswan.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndiswanlegacy
ImagePath REG_EXPAND_SZ System32\DRIVERS\ndiswan.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndproxy
ImagePath REG_EXPAND_SZ System32\DRIVERS\NDProxy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetAdapterCx
ImagePath REG_EXPAND_SZ system32\drivers\NetAdapterCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBIOS
ImagePath REG_EXPAND_SZ system32\drivers\netbios.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT
ImagePath REG_EXPAND_SZ System32\DRIVERS\netbt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon
ImagePath REG_EXPAND_SZ %systemroot%\system32\lsass.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netman
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\netprofm
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetSetupSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetTcpPortSharing
ImagePath REG_EXPAND_SZ %systemroot%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\netvsc
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\netvsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcCtnrSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NlaSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\npsvctrig
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\npsvctrig.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nsi
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nsiproxy
ImagePath REG_EXPAND_SZ system32\drivers\nsiproxy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvdimm
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\nvdimm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvraid
ImagePath REG_EXPAND_SZ System32\drivers\nvraid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvstor
ImagePath REG_EXPAND_SZ System32\drivers\nvstor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Parport
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\parport.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\partmgr
ImagePath REG_EXPAND_SZ System32\drivers\partmgr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PcaSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pci
ImagePath REG_EXPAND_SZ System32\drivers\pci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pciide
ImagePath REG_EXPAND_SZ System32\drivers\pciide.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pcmcia
ImagePath REG_EXPAND_SZ System32\drivers\pcmcia.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pcw
ImagePath REG_EXPAND_SZ System32\drivers\pcw.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdc
ImagePath REG_EXPAND_SZ system32\drivers\pdc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PEAUTH
ImagePath REG_EXPAND_SZ system32\drivers\peauth.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\percsas2i
ImagePath REG_EXPAND_SZ System32\drivers\percsas2i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\percsas3i
ImagePath REG_EXPAND_SZ System32\drivers\percsas3i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PerfHost
ImagePath REG_EXPAND_SZ %SystemRoot%\SysWow64\perfhost.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PhoneSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PktMon
ImagePath REG_EXPAND_SZ system32\drivers\PktMon.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pla
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PlugPlay
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pmem
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\pmem.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PNPMEM
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\pnpmem.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PolicyAgent
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Power
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PptpMiniport
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\raspptp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintNotify
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k print
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k PrintWorkflow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Processor
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\processr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ProfSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Psched
ImagePath REG_EXPAND_SZ System32\drivers\pacer.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PushToInstall
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qebdrv
ImagePath REG_EXPAND_SZ System32\drivers\qevbda.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qefcoe
ImagePath REG_EXPAND_SZ System32\drivers\qefcoe.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qeois
ImagePath REG_EXPAND_SZ System32\drivers\qeois.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql2300i
ImagePath REG_EXPAND_SZ System32\drivers\ql2300i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql40xx2i
ImagePath REG_EXPAND_SZ System32\drivers\ql40xx2i.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qlfcoei
ImagePath REG_EXPAND_SZ System32\drivers\qlfcoei.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QWAVE
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QWAVEdrv
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\qwavedrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ramdisk
ImagePath REG_EXPAND_SZ system32\DRIVERS\ramdisk.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAcd
ImagePath REG_EXPAND_SZ System32\DRIVERS\rasacd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAgileVpn
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\AgileVpn.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAuto
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasGre
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rasgre.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasl2tp
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rasl2tp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasPppoe
ImagePath REG_EXPAND_SZ System32\DRIVERS\raspppoe.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasSstp
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rassstp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rdbss
ImagePath REG_EXPAND_SZ system32\DRIVERS\rdbss.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rdpbus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rdpbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RDPDR
ImagePath REG_EXPAND_SZ System32\drivers\rdpdr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RdpVideoMiniport
ImagePath REG_EXPAND_SZ System32\drivers\rdpvideominiport.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteRegistry
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k localService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RFCOMM
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rfcomm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rhproxy
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rhproxy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RmSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcEptMapper
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k RPCSS -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcLocator
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\locator.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcSs
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k rpcss -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RSoPProv
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\RSoPProv.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rspndr
ImagePath REG_EXPAND_SZ system32\drivers\rspndr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\s3cap
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vms3cap.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sacdrv
ImagePath REG_EXPAND_SZ system32\DRIVERS\sacdrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sacsvr
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SamSs
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sbp2port
ImagePath REG_EXPAND_SZ System32\drivers\sbp2port.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SCardSvr
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ScDeviceEnum
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\scfilter
ImagePath REG_EXPAND_SZ System32\DRIVERS\scfilter.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Schedule
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\scmbus
ImagePath REG_EXPAND_SZ System32\drivers\scmbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SCPolicySvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sdbus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sdbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SDFRd
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\SDFRd.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sdstor
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sdstor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\seclogon
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SecurityHealthService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\SecurityHealthService.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SEMgrSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SENS
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sense
ImagePath REG_EXPAND_SZ "%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensorDataService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\SensorDataService.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensorService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensrSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SerCx
ImagePath REG_EXPAND_SZ system32\drivers\SerCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SerCx2
ImagePath REG_EXPAND_SZ system32\drivers\SerCx2.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Serenum
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\serenum.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Serial
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\serial.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sermouse
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sermouse.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SessionEnv
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sfloppy
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sfloppy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SgrmAgent
ImagePath REG_EXPAND_SZ system32\drivers\SgrmAgent.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SgrmBroker
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\SgrmBroker.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ShellHWDetection
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\shpamsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SiSRaid2
ImagePath REG_EXPAND_SZ System32\drivers\SiSRaid2.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SiSRaid4
ImagePath REG_EXPAND_SZ System32\drivers\sisraid4.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SmartSAMD
ImagePath REG_EXPAND_SZ System32\drivers\SmartSAMD.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\smbdirect
ImagePath REG_EXPAND_SZ System32\DRIVERS\smbdirect.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\smphost
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k smphost
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SNMPTRAP
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\snmptrap.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\spaceport
ImagePath REG_EXPAND_SZ System32\drivers\spaceport.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SpbCx
ImagePath REG_EXPAND_SZ system32\drivers\SpbCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Spooler
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\spoolsv.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sppsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\sppsvc.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srv2
ImagePath REG_EXPAND_SZ System32\DRIVERS\srv2.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srvnet
ImagePath REG_EXPAND_SZ System32\DRIVERS\srvnet.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSDPSRV
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ssh-agent
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\OpenSSH\ssh-agent.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SstpSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\StateRepository
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k appmodel -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stexstor
ImagePath REG_EXPAND_SZ System32\drivers\stexstor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stisvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k imgsvc
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storahci
ImagePath REG_EXPAND_SZ System32\drivers\storahci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storflt
ImagePath REG_EXPAND_SZ System32\drivers\vmstorfl.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stornvme
ImagePath REG_EXPAND_SZ System32\drivers\stornvme.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storqosflt
ImagePath REG_EXPAND_SZ system32\drivers\storqosflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\StorSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storufs
ImagePath REG_EXPAND_SZ System32\drivers\storufs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storvsc
ImagePath REG_EXPAND_SZ System32\drivers\storvsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\svsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swenum
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_31f554b660026323\swenum.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swprv
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k swprv
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Synth3dVsc
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Synth3dVsc.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SysMain
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SystemEventsBroker
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TabletInputService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tapisrv
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip
ImagePath REG_EXPAND_SZ System32\drivers\tcpip.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6
ImagePath REG_EXPAND_SZ System32\drivers\tcpip.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tcpipreg
ImagePath REG_EXPAND_SZ System32\drivers\tcpipreg.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tdx
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\tdx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\terminpt
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\terminpt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k termsvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Themes
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TieringEngineService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\TieringEngineService.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TimeBrokerSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TokenBroker
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\tpm.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrkWks
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrustedInstaller
ImagePath REG_EXPAND_SZ %SystemRoot%\servicing\TrustedInstaller.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TsUsbFlt
ImagePath REG_EXPAND_SZ system32\drivers\tsusbflt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TsUsbGD
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\TsUsbGD.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tsusbhub
ImagePath REG_EXPAND_SZ system32\drivers\tsusbhub.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tunnel
ImagePath REG_EXPAND_SZ System32\drivers\tunnel.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tzautoupdate
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UALSVC
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UASPStor
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\uaspstor.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmCx0101
ImagePath REG_EXPAND_SZ System32\Drivers\UcmCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmTcpciCx0101
ImagePath REG_EXPAND_SZ System32\Drivers\UcmTcpciCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsi
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UcmUcsi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsiAcpiClient
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UcmUcsiAcpiClient.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsiCx0101
ImagePath REG_EXPAND_SZ System32\Drivers\UcmUcsiCx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ucx01000
ImagePath REG_EXPAND_SZ system32\drivers\ucx01000.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UdeCx
ImagePath REG_EXPAND_SZ system32\drivers\udecx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\udfs
ImagePath REG_EXPAND_SZ system32\DRIVERS\udfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UEFI
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UEFI.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UevAgentDriver
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\UevAgentDriver.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UevAgentService
ImagePath REG_EXPAND_SZ %systemroot%\system32\AgentService.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ufx01000
ImagePath REG_EXPAND_SZ system32\drivers\ufx01000.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UfxChipidea
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UfxChipidea.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ufxsynopsys
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ufxsynopsys.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\umbus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\umbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UmPass
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\umpass.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UmRdpService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\upnphost
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsChipidea
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\urschipidea.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsCx01000
ImagePath REG_EXPAND_SZ system32\drivers\urscx01000.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsSynopsys
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\urssynopsys.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbccgp
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbccgp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbehci
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbehci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbhub
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbhub.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBHUB3
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UsbHub3.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbohci
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbohci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbprint
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbprint.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbser
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbser.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBSTOR
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\USBSTOR.SYS
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbuhci
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbuhci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbvideo
ImagePath REG_EXPAND_SZ \SystemRoot\System32\Drivers\usbvideo.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBXHCI
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\USBXHCI.SYS
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserManager
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UsoSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VaultSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vdrvroot
ImagePath REG_EXPAND_SZ System32\drivers\vdrvroot.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vds
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\vds.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VerifierExt
ImagePath REG_EXPAND_SZ System32\drivers\VerifierExt.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VGAuthService
ImagePath REG_EXPAND_SZ "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vhdmp
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vhdmp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vhf
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vhf.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp-debug
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp-debug.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp-stats
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp-stats.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp_loader
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp_loader.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmbus
ImagePath REG_EXPAND_SZ System32\drivers\vmbus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMBusHID
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\VMBusHID.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmci
ImagePath REG_EXPAND_SZ System32\drivers\vmci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmgid
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmgid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmhgfs
ImagePath REG_EXPAND_SZ system32\DRIVERS\vmhgfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicguestinterface
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicheartbeat
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k ICService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmickvpexchange
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicrdv
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k ICService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicshutdown
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmictimesync
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicvmsession
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicvss
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMMemCtl
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vmmemctl.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmmouse
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmmouse.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmrawdsk
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vmrawdsk.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMTools
ImagePath REG_EXPAND_SZ "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmusbmouse
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmusbmouse.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmvss
ImagePath REG_EXPAND_SZ C:\Windows\system32\dllhost.exe /Processid:{31E13218-C792-4EAE-BD63-885ACCBE7FE8}
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmxnet3ndis6
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmxnet3.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volmgr
ImagePath REG_EXPAND_SZ System32\drivers\volmgr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volmgrx
ImagePath REG_EXPAND_SZ System32\drivers\volmgrx.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volsnap
ImagePath REG_EXPAND_SZ System32\drivers\volsnap.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volume
ImagePath REG_EXPAND_SZ System32\drivers\volume.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vpci
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vpci.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsmraid
ImagePath REG_EXPAND_SZ System32\drivers\vsmraid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsock
ImagePath REG_EXPAND_SZ system32\DRIVERS\vsock.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSS
ImagePath REG_EXPAND_SZ %systemroot%\system32\vssvc.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSTXRAID
ImagePath REG_EXPAND_SZ System32\drivers\vstxraid.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vwifibus
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vwifibus.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\w3logsvc
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k apphost
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W3SVC
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k iissvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WaaSMedicSvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k wusvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WacomPen
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\wacompen.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WalletService
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k appmodel -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wanarp
ImagePath REG_EXPAND_SZ System32\DRIVERS\wanarp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wanarpv6
ImagePath REG_EXPAND_SZ System32\DRIVERS\wanarp.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WarpJITSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WAS
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k iissvcs
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WbioSrvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k WbioSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wcifs
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\wcifs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wcmsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wcnfs
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\wcnfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdBoot
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdBoot.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wdf01000
ImagePath REG_EXPAND_SZ system32\drivers\Wdf01000.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdFilter
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdFilter.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdiServiceHost
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdiSystemHost
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdmCompanionFilter
ImagePath REG_EXPAND_SZ system32\drivers\WdmCompanionFilter.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisDrv
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdNisDrv.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisSvc
ImagePath REG_EXPAND_SZ "%ProgramData%\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wecsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WEPHOSTSVC
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k WepHostSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wercplsupport
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WerSvc
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k WerSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WFPLWFS
ImagePath REG_EXPAND_SZ System32\drivers\wfplwfs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WiaRpc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WIMMount
ImagePath REG_EXPAND_SZ system32\drivers\wimmount.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinDefend
ImagePath REG_EXPAND_SZ "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsTrustedRT
ImagePath REG_EXPAND_SZ system32\drivers\WindowsTrustedRT.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsTrustedRTProxy
ImagePath REG_EXPAND_SZ System32\drivers\WindowsTrustedRTProxy.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinHttpAutoProxySvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinMad
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\winmad.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winmgmt
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinNat
ImagePath REG_EXPAND_SZ system32\drivers\winnat.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinQuic
ImagePath REG_EXPAND_SZ system32\drivers\winquic.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinRM
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WINUSB
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\WinUSB.SYS
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinVerbs
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\winverbs.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wisvc
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wlidsvc
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WmiAcpi
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\wmiacpi.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wmiApSrv
ImagePath REG_EXPAND_SZ %systemroot%\system32\wbem\WmiApSrv.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WMPNetworkSvc
ImagePath REG_EXPAND_SZ "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe"
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WPDBusEnum
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpdUpFltr
ImagePath REG_EXPAND_SZ System32\drivers\WpdUpFltr.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnService
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_4248c
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_4b162
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_80d08
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_ee306
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ws2ifsl
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\ws2ifsl.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WSearch
ImagePath REG_EXPAND_SZ %systemroot%\system32\SearchIndexer.exe /Embedding
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfPf
ImagePath REG_EXPAND_SZ system32\drivers\WudfPf.sys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WUDFRd
ImagePath REG_EXPAND_SZ system32\drivers\WudfRd.sys
End of search: 589 match(es) found.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Data
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Networking
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Networking 4.0.0.0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Data Provider for Oracle
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Data Provider for SqlServer
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Memory Cache 4.0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NETFramework
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\1394ohci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\3ware
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ACPI
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AcpiDev
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpiex
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpipagr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AcpiPmi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpitime
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADOVMPPackage
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADP80XX
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\adsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADWS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AFD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\afunix
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ahcache
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AJRouter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ALG
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AmdK8
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AmdPPM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdsata
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdsbs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdxata
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppHostSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppID
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppIDSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Appinfo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\applockerfltr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppMgmt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppReadiness
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppVClient
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvStrm
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvVemgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvVfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppXSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\arcsas
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AsyncMac
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\atapi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AudioEndpointBuilder
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Audiosrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AxInstSV
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\b06bdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bam
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BasicDisplay
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BasicRender
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BattC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bcmfn2
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Beep
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bfadfcoei
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bfadi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BFE
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bindflt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BITS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bowser
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BrokerInfrastructure
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTAGService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthAvctpSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthEnum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthLEEnum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthMini
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTHPORT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bthserv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTHUSB
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bttflt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\buttonconverter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bxfcoe
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bxois
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\camsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CapImg
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cdfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cdrom
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CertPropSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cht4iscsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cht4vbd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CldFlt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CLFS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ClipSVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\clr_optimization_v4.0.30319_32
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\clr_optimization_v4.0.30319_64
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CmBatt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CNG
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cnghwassist
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\coherence
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CompositeBus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\COMSysApp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\condrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CoreMessagingRegistrar
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CoreUI
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\crypt32
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CryptSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CSC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CscService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dam
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DCLocator
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DcomLaunch
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\defragsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DeviceAssociationService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DeviceInstall
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevQueryBroker
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dfsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DFSR
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dhcp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\diagnosticshub.standardcollector.service
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DiagTrack
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Disk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DmEnrollmentSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dmvsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dmwappushservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DNS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dnscache
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DoSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dot3svc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DPS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\drmkaud
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DsmSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DsSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DXGKrnl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\e1iexpress
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Eaphost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ebdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EFS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EhStorClass
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EhStorTcgDrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\elxfcoe
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\elxstor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\embeddedmode
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EntAppSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ErrDev
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ESENT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EventLog
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EventSystem
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\exfat
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fastfat
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fcvsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fdc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fdPHost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FDResPub
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FileCrypt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FileInfo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Filetrace
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\flpydisk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FltMgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FontCache
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FrameServer
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FsDepends
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Fs_Rec
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gencounter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\genericusbfn
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\GPIOClx0101
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gpsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\GraphicsPerfSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HdAudAddService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HDAudBus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HidBatt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hidinterrupt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hidserv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HidUsb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HomeGroupListener
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HpSAMD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HTTP
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hvcrash
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HvHost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hvservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HwNClx0101
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hwpolicy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hyperkbd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HyperVideo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\i8042prt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaLPSSi_GPIO
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaLPSSi_I2C
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaStorAVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaStorV
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ibbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\icssvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IKEEXT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IndirectKmd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\inetaccs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\InetInfo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\InstallService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelide
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelpep
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelppm
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iorate
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IpFilterDriver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iphlpsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPMIDRV
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPNAT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPsecGW
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\isapnp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iScsiPrt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ItSas35i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kbdclass
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kbdhid
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kdnic
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KeyIso
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KPSSVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KSecDD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KSecPkg
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ksthunk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KtmRm
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LanmanServer
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LanmanWorkstation
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ldap
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lfsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LicenseManager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lltdio
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lltdsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lmhosts
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Lsa
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS2i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS3i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SSS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\luafv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MapsBroker
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MariaDB
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mausbhost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mausbip
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas2i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas35i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Microsoft_Bluetooth_AvrcpTransport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mlx4_bus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MMCSS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Modem
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\monitor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mouclass
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mouhid
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mountmgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mpsdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mpssvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mrxsmb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mrxsmb20
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsBridge
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSDTC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSDTC Bridge 4.0.0.0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Msfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msgpiowin32
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mshidkmdf
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mshidumdf
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msisadrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSiSCSI
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msiserver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSKSSRV
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsLbfoProvider
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsLldp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSPCLOCK
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSPQM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsRPC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSSCNTRS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsSecFlt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mssmbios
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSTEE
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MTConfig
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Mup
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mvumis
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\napagent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NcaSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NcbService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndfltr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NDIS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisCap
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisImPlatform
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisTapi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ndisuio
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisVirtualBus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisWan
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndiswanlegacy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndproxy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetAdapterCx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetBIOS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetbiosSmb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetBT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Netlogon
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Netman
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netprofm
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetSetupSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetTcpPortSharing
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netvsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netvscvfpp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NgcCtnrSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NgcSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NlaSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Npfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\npsvctrig
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nsiproxy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ntfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Null
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvdimm
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvraid
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvstor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Parport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\partmgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PcaSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pciide
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pcmcia
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pcw
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pdc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PEAUTH
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\percsas2i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\percsas3i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfDisk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfHost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfNet
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfOS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfProc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PhoneSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PktMon
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pla
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PlugPlay
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pmem
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PNPMEM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PolicyAgent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PortProxy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Power
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PptpMiniport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintNotify
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Processor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ProfSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Psched
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PushToInstall
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pvscsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qebdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qefcoe
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qeois
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ql2300i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ql40xx2i
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qlfcoei
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\QWAVE
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\QWAVEdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ramdisk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAcd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAgileVpn
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAuto
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasGre
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Rasl2tp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasMan
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasPppoe
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasSstp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rdbss
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDMANDK
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rdpbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPDR
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPNP
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPUDD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RdpVideoMiniport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ReFS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ReFSv1
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RemoteAccess
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RemoteRegistry
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RFCOMM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelfltr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelnet
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelscsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhproxy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RmSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcEptMapper
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcLocator
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcSs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RSoPProv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rspndr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\s3cap
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sacdrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sacsvr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SamSs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sbp2port
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SCardSvr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ScDeviceEnum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\scfilter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Schedule
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\scmbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SCPolicySvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sdbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SDFRd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sdstor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\seclogon
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SecurityHealthService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SEMgrSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SENS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Sense
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensorDataService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensorService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensrSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SerCx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SerCx2
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Serenum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Serial
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sermouse
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SessionEnv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sfloppy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SgrmAgent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SgrmBroker
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SharedAccess
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ShellHWDetection
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\shpamsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SiSRaid2
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SiSRaid4
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SmartPqi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SmartSAMD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\smbdirect
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\smphost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SMSvcHost 4.0.0.0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SNMP
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SNMPTRAP
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\spaceport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SpbCx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Spooler
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sppsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\srv2
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\srvnet
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SSDPSRV
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssh-agent
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SstpSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\StateRepository
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stexstor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stisvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storahci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storflt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stornvme
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storqosflt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\StorSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storufs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storvsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\svsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\swenum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\swprv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Synth3dVsc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SysMain
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SystemEventsBroker
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TabletInputService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tapisrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Tcpip
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Tcpip6
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TCPIP6TUNNEL
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpipreg
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TCPIPTUNNEL
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tdx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\terminpt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TermService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Themes
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TieringEngineService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TimeBrokerSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TokenBroker
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\toolsrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TPM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TrkWks
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TrustedInstaller
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TSDDD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TsUsbFlt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TsUsbGD
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tsusbhub
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tunnel
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tzautoupdate
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UALSVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UASPStor
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmCx0101
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmTcpciCx0101
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsiAcpiClient
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsiCx0101
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ucx01000
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UdeCx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\udfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UEFI
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UevAgentDriver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UevAgentService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ufx01000
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UfxChipidea
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ufxsynopsys
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UGatherer
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UGTHRSVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\umbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UmPass
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UmRdpService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\upnphost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsChipidea
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsCx01000
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsSynopsys
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbccgp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbehci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbhub
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBHUB3
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbohci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbprint
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbser
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBSTOR
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbuhci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbvideo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBXHCI
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserManager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UsoSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VaultSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vdrvroot
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vds
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VerifierExt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VGAuthService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vhdmp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vhf
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp-debug
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp-stats
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp_loader
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmbus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMBusHID
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmgid
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmhgfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicguestinterface
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicheartbeat
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmickvpexchange
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicrdv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicshutdown
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmictimesync
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicvmsession
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicvss
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMMemCtl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmmouse
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmrawdsk
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMTools
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmusbmouse
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmvss
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmwefifw
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmxnet3ndis6
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volmgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volmgrx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volsnap
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volume
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vpci
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VPCMap
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vsmraid
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vsock
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VSS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VSTXRAID
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vwifibus
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\W32Time
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\w3logsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\W3SVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WaaSMedicSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WacomPen
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WalletService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wanarp
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wanarpv6
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WarpJITSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WAS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WbioSrvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wcifs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wcmsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wcnfs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdBoot
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wdf01000
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdFilter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdiServiceHost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdiSystemHost
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdmCompanionFilter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdNisDrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdNisSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wecsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WEPHOSTSVC
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wercplsupport
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WerSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WFPLWFS
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WiaRpc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WIMMount
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinDefend
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Windows Workflow Foundation 4.0.0.0
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WindowsTrustedRT
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WindowsTrustedRTProxy
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinHttpAutoProxySvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinMad
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Winmgmt
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinNat
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinQuic
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinRM
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Winsock
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinSock2
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WINUSB
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinVerbs
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wisvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WlanSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wlidsvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WmiAcpi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WmiApRpl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wmiApSrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WMPNetworkSvc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wof
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\workerdd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WPDBusEnum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpdUpFltr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_4248c
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_4b162
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_80d08
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_ee306
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ws2ifsl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WSearch
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WSearchIdxPi
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wuauserv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WudfPf
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WUDFRd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xmlprov
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{60E8E863-2974-47D1-89E0-E507677AA14F}
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{6D197A8D-04EB-44C6-B602-FF2798EB7BB3}
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{CB20B026-8E3E-4F7D-88FD-E7FB0E93CF39}
1394ohci
3ware
ACPI
AcpiDev
acpiex
acpipagr
AcpiPmi
acpitime
ADOVMPPackage
ADP80XX
adsi
ADWS
AFD
afunix
ahcache
AJRouter
ALG
AmdK8
AmdPPM
amdsata
amdsbs
amdxata
AppHostSvc
AppID
AppIDSvc
Appinfo
applockerfltr
AppMgmt
AppReadiness
AppVClient
AppvStrm
AppvVemgr
AppvVfs
AppXSvc
arcsas
AsyncMac
atapi
AudioEndpointBuilder
Audiosrv
AxInstSV
b06bdrv
bam
BasicDisplay
BasicRender
BattC
bcmfn2
Beep
bfadfcoei
bfadi
BFE
bindflt
BITS
bowser
BrokerInfrastructure
BTAGService
BthAvctpSvc
BthEnum
BthLEEnum
BthMini
BTHPORT
bthserv
BTHUSB
bttflt
buttonconverter
bxfcoe
bxois
camsvc
CapImg
CaptureService
CaptureService_4248c
CaptureService_4b162
CaptureService_80d08
CaptureService_ee306
cbdhsvc
cbdhsvc_4248c
cbdhsvc_4b162
cbdhsvc_80d08
cbdhsvc_ee306
cdfs
CDPSvc
CDPUserSvc
CDPUserSvc_4248c
CDPUserSvc_4b162
CDPUserSvc_80d08
CDPUserSvc_ee306
cdrom
CertPropSvc
cht4iscsi
cht4vbd
CldFlt
CLFS
ClipSVC
clr_optimization_v4.0.30319_32
clr_optimization_v4.0.30319_64
CmBatt
CNG
cnghwassist
coherence
CompositeBus
COMSysApp
condrv
ConsentUxUserSvc
ConsentUxUserSvc_4248c
ConsentUxUserSvc_4b162
ConsentUxUserSvc_80d08
ConsentUxUserSvc_ee306
CoreMessagingRegistrar
CoreUI
crypt32
CryptSvc
CSC
CscService
dam
DCLocator
DcomLaunch
defragsvc
DeviceAssociationService
DeviceInstall
DevicePickerUserSvc
DevicePickerUserSvc_4248c
DevicePickerUserSvc_4b162
DevicePickerUserSvc_80d08
DevicePickerUserSvc_ee306
DevicesFlowUserSvc
DevicesFlowUserSvc_4248c
DevicesFlowUserSvc_4b162
DevicesFlowUserSvc_80d08
DevicesFlowUserSvc_ee306
DevQueryBroker
Dfs
Dfsc
DFSR
Dhcp
diagnosticshub.standardcollector.service
DiagTrack
Disk
DmEnrollmentSvc
dmvsc
dmwappushservice
DNS
Dnscache
DoSvc
dot3svc
DPS
drmkaud
DsmSvc
DsSvc
DXGKrnl
e1iexpress
Eaphost
ebdrv
EFS
EhStorClass
EhStorTcgDrv
elxfcoe
elxstor
embeddedmode
EntAppSvc
ErrDev
ESENT
EventLog
EventSystem
exfat
fastfat
fcvsc
fdc
fdPHost
FDResPub
FileCrypt
FileInfo
Filetrace
flpydisk
FltMgr
FontCache
FrameServer
FsDepends
Fs_Rec
gencounter
genericusbfn
GPIOClx0101
gpsvc
GraphicsPerfSvc
HdAudAddService
HDAudBus
HidBatt
hidinterrupt
hidserv
HidUsb
HomeGroupListener
HpSAMD
HTTP
hvcrash
HvHost
hvservice
HwNClx0101
hwpolicy
hyperkbd
HyperVideo
i8042prt
iaLPSSi_GPIO
iaLPSSi_I2C
iaStorAVC
iaStorV
ibbus
icssvc
IKEEXT
IndirectKmd
inetaccs
InetInfo
InstallService
intelide
intelpep
intelppm
iorate
IpFilterDriver
iphlpsvc
IPMIDRV
IPNAT
IPsecGW
IPT
isapnp
iScsiPrt
ItSas35i
kbdclass
kbdhid
kdnic
KeyIso
KPSSVC
KSecDD
KSecPkg
ksthunk
KtmRm
LanmanServer
LanmanWorkstation
ldap
lfsvc
LicenseManager
lltdio
lltdsvc
lmhosts
Lsa
LSI_SAS
LSI_SAS2i
LSI_SAS3i
LSI_SSS
LSM
luafv
MapsBroker
MariaDB
mausbhost
mausbip
megasas
megasas2i
megasas35i
megasr
Microsoft_Bluetooth_AvrcpTransport
mlx4_bus
MMCSS
Modem
monitor
mouclass
mouhid
mountmgr
mpsdrv
mpssvc
mrxsmb
mrxsmb20
MsBridge
MSDTC
MSDTC Bridge 4.0.0.0
Msfs
msgpiowin32
mshidkmdf
mshidumdf
msisadrv
MSiSCSI
msiserver
MSKSSRV
MsLbfoProvider
MsLldp
MSPCLOCK
MSPQM
MsRPC
MSSCNTRS
MsSecFlt
mssmbios
MSTEE
MTConfig
Mup
mvumis
napagent
NcaSvc
NcbService
ndfltr
NDIS
NdisCap
NdisImPlatform
NdisTapi
Ndisuio
NdisVirtualBus
NdisWan
ndiswanlegacy
ndproxy
NetAdapterCx
NetBIOS
NetbiosSmb
NetBT
Netlogon
Netman
netprofm
NetSetupSvc
NetTcpPortSharing
netvsc
netvscvfpp
NgcCtnrSvc
NgcSvc
NlaSvc
Npfs
npsvctrig
nsi
nsiproxy
Ntfs
Null
nvdimm
nvraid
nvstor
Parport
partmgr
PcaSvc
pci
pciide
pcmcia
pcw
pdc
PEAUTH
percsas2i
percsas3i
PerfDisk
PerfHost
PerfNet
PerfOS
PerfProc
PhoneSvc
PimIndexMaintenanceSvc
PimIndexMaintenanceSvc_4248c
PimIndexMaintenanceSvc_4b162
PimIndexMaintenanceSvc_80d08
PimIndexMaintenanceSvc_ee306
PktMon
pla
PlugPlay
pmem
PNPMEM
PolicyAgent
PortProxy
Power
PptpMiniport
PrintNotify
PrintWorkflowUserSvc
PrintWorkflowUserSvc_4248c
PrintWorkflowUserSvc_4b162
PrintWorkflowUserSvc_80d08
PrintWorkflowUserSvc_ee306
Processor
ProfSvc
Psched
PushToInstall
pvscsi
qebdrv
qefcoe
qeois
ql2300i
ql40xx2i
qlfcoei
QWAVE
QWAVEdrv
Ramdisk
RasAcd
RasAgileVpn
RasAuto
RasGre
Rasl2tp
RasMan
RasPppoe
RasSstp
rdbss
RDMANDK
rdpbus
RDPDR
RDPNP
RDPUDD
RdpVideoMiniport
ReFS
ReFSv1
RemoteAccess
RemoteRegistry
RFCOMM
rhelfltr
rhelnet
rhelscsi
rhproxy
RmSvc
RpcEptMapper
RpcLocator
RpcSs
RSoPProv
rspndr
s3cap
sacdrv
sacsvr
SamSs
sbp2port
SCardSvr
ScDeviceEnum
scfilter
Schedule
scmbus
SCPolicySvc
sdbus
SDFRd
sdstor
seclogon
SecurityHealthService
SEMgrSvc
SENS
Sense
SensorDataService
SensorService
SensrSvc
SerCx
SerCx2
Serenum
Serial
sermouse
SessionEnv
sfloppy
SgrmAgent
SgrmBroker
SharedAccess
ShellHWDetection
shpamsvc
SiSRaid2
SiSRaid4
SmartPqi
SmartSAMD
smbdirect
smphost
SMSvcHost 4.0.0.0
SNMP
SNMPTRAP
spaceport
SpbCx
Spooler
sppsvc
srv2
srvnet
SSDPSRV
ssh-agent
SstpSvc
StateRepository
stexstor
stisvc
storahci
storflt
stornvme
storqosflt
StorSvc
storufs
storvsc
svsvc
swenum
swprv
Synth3dVsc
SysMain
SystemEventsBroker
TabletInputService
tapisrv
Tcpip
Tcpip6
TCPIP6TUNNEL
tcpipreg
TCPIPTUNNEL
tdx
terminpt
TermService
Themes
TieringEngineService
TimeBrokerSvc
TokenBroker
toolsrv
TPM
TrkWks
TrustedInstaller
TSDDD
TsUsbFlt
TsUsbGD
tsusbhub
tunnel
tzautoupdate
UALSVC
UASPStor
UcmCx0101
UcmTcpciCx0101
UcmUcsi
UcmUcsiAcpiClient
UcmUcsiCx0101
Ucx01000
UdeCx
udfs
UEFI
UevAgentDriver
UevAgentService
Ufx01000
UfxChipidea
ufxsynopsys
UGatherer
UGTHRSVC
umbus
UmPass
UmRdpService
UnistoreSvc
UnistoreSvc_4248c
UnistoreSvc_4b162
UnistoreSvc_80d08
UnistoreSvc_ee306
upnphost
UrsChipidea
UrsCx01000
UrsSynopsys
usbccgp
usbehci
usbhub
USBHUB3
usbohci
usbprint
usbser
USBSTOR
usbuhci
usbvideo
USBXHCI
UserDataSvc
UserDataSvc_4248c
UserDataSvc_4b162
UserDataSvc_80d08
UserDataSvc_ee306
UserManager
UsoSvc
VaultSvc
vdrvroot
vds
VerifierExt
VGAuthService
vhdmp
vhf
vm3dmp
vm3dmp-debug
vm3dmp-stats
vm3dmp_loader
vmbus
VMBusHID
vmci
vmgid
vmhgfs
vmicguestinterface
vmicheartbeat
vmickvpexchange
vmicrdv
vmicshutdown
vmictimesync
vmicvmsession
vmicvss
VMMemCtl
vmmouse
vmrawdsk
VMTools
vmusbmouse
vmvss
vmwefifw
vmxnet3ndis6
volmgr
volmgrx
volsnap
volume
vpci
VPCMap
vsmraid
vsock
VSS
VSTXRAID
vwifibus
W32Time
w3logsvc
W3SVC
WaaSMedicSvc
WacomPen
WalletService
wanarp
wanarpv6
WarpJITSvc
WAS
WbioSrvc
wcifs
Wcmsvc
wcnfs
WdBoot
Wdf01000
WdFilter
WdiServiceHost
WdiSystemHost
WdmCompanionFilter
WdNisDrv
WdNisSvc
Wecsvc
WEPHOSTSVC
wercplsupport
WerSvc
WFPLWFS
WiaRpc
WIMMount
WinDefend
Windows Workflow Foundation 4.0.0.0
WindowsTrustedRT
WindowsTrustedRTProxy
WinHttpAutoProxySvc
WinMad
Winmgmt
WinNat
WinQuic
WinRM
Winsock
WinSock2
WINUSB
WinVerbs
wisvc
WlanSvc
wlidsvc
WmiAcpi
WmiApRpl
wmiApSrv
WMPNetworkSvc
Wof
workerdd
WPDBusEnum
WpdUpFltr
WpnService
WpnUserService
WpnUserService_4248c
WpnUserService_4b162
WpnUserService_80d08
WpnUserService_ee306
ws2ifsl
WSearch
WSearchIdxPi
wuauserv
WudfPf
WUDFRd
xmlprov
SERVICE_NAME: applockerfltr
SERVICE_NAME: AppMgmt
SERVICE_NAME: AppVClient
SERVICE_NAME: BFE
SERVICE_NAME: BrokerInfrastructure
SERVICE_NAME: CLFS
SERVICE_NAME: ConsentUxUserSvc
SERVICE_NAME: ConsentUxUserSvc_484da
SERVICE_NAME: DcomLaunch
SERVICE_NAME: DevicePickerUserSvc
SERVICE_NAME: DevicePickerUserSvc_484da
SERVICE_NAME: DevicesFlowUserSvc
SERVICE_NAME: DevicesFlowUserSvc_484da
SERVICE_NAME: Dhcp
SERVICE_NAME: Dnscache
SERVICE_NAME: DoSvc
SERVICE_NAME: EventLog
SERVICE_NAME: KtmRm
SERVICE_NAME: LSM
SERVICE_NAME: mpsdrv
SERVICE_NAME: mpssvc
SERVICE_NAME: MSDTC
SERVICE_NAME: MSDTC
SERVICE_NAME: NetBT
SERVICE_NAME: NetSetupSvc
SERVICE_NAME: NetTcpPortSharing
SERVICE_NAME: NgcCtnrSvc
SERVICE_NAME: NgcSvc
SERVICE_NAME: PimIndexMaintenanceSvc
SERVICE_NAME: PimIndexMaintenanceSvc_484da
SERVICE_NAME: pla
SERVICE_NAME: PrintWorkflowUserSvc
SERVICE_NAME: PrintWorkflowUserSvc_484da
SERVICE_NAME: RasAcd
SERVICE_NAME: RasAuto
SERVICE_NAME: RasMan
SERVICE_NAME: RemoteAccess
SERVICE_NAME: RmSvc
SERVICE_NAME: RpcEptMapper
SERVICE_NAME: RpcSs
SERVICE_NAME: RSoPProv
SERVICE_NAME: SamSs
SERVICE_NAME: Schedule
SERVICE_NAME: seclogon
SERVICE_NAME: SecurityHealthService
SERVICE_NAME: SENS
SERVICE_NAME: smphost
SERVICE_NAME: Spooler
SERVICE_NAME: SstpSvc
SERVICE_NAME: SystemEventsBroker
SERVICE_NAME: TimeBrokerSvc
SERVICE_NAME: UevAgentService
SERVICE_NAME: UnistoreSvc
SERVICE_NAME: UnistoreSvc_484da
SERVICE_NAME: UserDataSvc
SERVICE_NAME: UserDataSvc_484da
SERVICE_NAME: UsoSvc
SERVICE_NAME: vds
SERVICE_NAME: WaaSMedicSvc
SERVICE_NAME: WdBoot
SERVICE_NAME: WdFilter
SERVICE_NAME: WdNisDrv
SERVICE_NAME: WdNisSvc
SERVICE_NAME: WinDefend
SERVICE_NAME: WinHttpAutoProxySvc
SERVICE_NAME: WpnUserService
SERVICE_NAME: WpnUserService_484da
SERVICE_NAME: wuauserv
PSChildName : .NET CLR Data
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NET CLR Networking
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NET CLR Networking 4.0.0.0
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NET Data Provider for Oracle
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NET Data Provider for SqlServer
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NET Memory Cache 4.0
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : .NETFramework
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : 1394ohci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : 3ware
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ACPI
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AcpiDev
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : acpiex
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : acpipagr
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AcpiPmi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : acpitime
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ADOVMPPackage
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ADP80XX
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : adsi
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ADWS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AFD
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : afunix
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ahcache
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AJRouter
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ALG
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AmdK8
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AmdPPM
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : amdsata
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : amdsbs
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : amdxata
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppHostSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppID
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppIDSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Appinfo
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : applockerfltr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppMgmt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppReadiness
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppVClient
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppvStrm
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppvVemgr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppvVfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AppXSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : arcsas
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AsyncMac
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : atapi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AudioEndpointBuilder
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Audiosrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : AxInstSV
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : b06bdrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bam
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BasicDisplay
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BasicRender
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BattC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bcmfn2
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Beep
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bfadfcoei
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bfadi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BFE
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bindflt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BITS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bowser
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BrokerInfrastructure
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BTAGService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BthAvctpSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BthEnum
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BthLEEnum
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BthMini
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BTHPORT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bthserv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : BTHUSB
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bttflt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : buttonconverter
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bxfcoe
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : bxois
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : camsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CapImg
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CaptureService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CaptureService_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CaptureService_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CaptureService_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CaptureService_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cbdhsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cbdhsvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cbdhsvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cbdhsvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cbdhsvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cdfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPUserSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPUserSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPUserSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPUserSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CDPUserSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cdrom
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CertPropSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cht4iscsi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cht4vbd
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CldFlt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CLFS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ClipSVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : clr_optimization_v4.0.30319_32
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : clr_optimization_v4.0.30319_64
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CmBatt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CNG
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : cnghwassist
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : coherence
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : CompositeBus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : COMSysApp
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : condrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ConsentUxUserSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ConsentUxUserSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ConsentUxUserSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ConsentUxUserSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ConsentUxUserSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CoreMessagingRegistrar
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CoreUI
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : crypt32
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CryptSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CSC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : CscService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : dam
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DCLocator
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DcomLaunch
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\INTERACTIVE Allow -2147483648
NT AUTHORITY\INTERACTIVE Allow ReadKey
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Users Allow -2147483648
BUILTIN\Users Allow ReadKey
PSChildName : defragsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DeviceAssociationService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DeviceInstall
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicePickerUserSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicePickerUserSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicePickerUserSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicePickerUserSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicePickerUserSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicesFlowUserSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicesFlowUserSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicesFlowUserSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicesFlowUserSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevicesFlowUserSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DevQueryBroker
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Dfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Dfsc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DFSR
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Dhcp
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Users Allow -2147483648
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow -2147483648
BUILTIN\Network Configuration Operators Allow ReadKey
NT SERVICE\Dhcp Allow CreateSubKey, ReadKey
NT SERVICE\Dhcp Allow -2147352547
PSChildName : diagnosticshub.standardcollector.service
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DiagTrack
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Disk
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DmEnrollmentSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : dmvsc
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : dmwappushservice
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DNS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Dnscache
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\INTERACTIVE Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow CreateSubKey, ReadKey
NT SERVICE\mpssvc Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DoSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : dot3svc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DPS
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : drmkaud
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DsmSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DsSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : DXGKrnl
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : e1iexpress
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Eaphost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\INTERACTIVE Allow ReadKey
BUILTIN\Administrators Allow SetValue, CreateSubKey, ReadKey
S-1-5-21-3799463084-4290437372-2261193466-500 Allow SetValue, CreateSubKey, ReadKey
NT SERVICE\Eaphost Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ebdrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : EFS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : EhStorClass
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : EhStorTcgDrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : elxfcoe
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : elxstor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : embeddedmode
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : EntAppSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ErrDev
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ESENT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : EventLog
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\Authenticated Users Allow -2147483648
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
S-1-5-32-549 Allow -2147483648
S-1-5-32-549 Allow ReadKey
PSChildName : EventSystem
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : exfat
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : fastfat
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : fcvsc
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : fdc
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : fdPHost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FDResPub
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FileCrypt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FileInfo
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Filetrace
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : flpydisk
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FltMgr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FontCache
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FrameServer
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : FsDepends
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Fs_Rec
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : gencounter
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : genericusbfn
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : GPIOClx0101
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : gpsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : GraphicsPerfSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HdAudAddService
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HDAudBus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HidBatt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hidinterrupt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hidserv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HidUsb
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HomeGroupListener
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HpSAMD
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HTTP
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hvcrash
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HvHost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hvservice
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HwNClx0101
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hwpolicy
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : hyperkbd
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : HyperVideo
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : i8042prt
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow ReadKey
BUILTIN\Power Users Allow -2147483648
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : iaLPSSi_GPIO
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iaLPSSi_I2C
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iaStorAVC
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iaStorV
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ibbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : icssvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IKEEXT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IndirectKmd
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : inetaccs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : InetInfo
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : InstallService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : intelide
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow ReadKey
BUILTIN\Power Users Allow -2147483648
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : intelpep
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : intelppm
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iorate
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IpFilterDriver
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iphlpsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IPMIDRV
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IPNAT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IPsecGW
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : IPT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : isapnp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : iScsiPrt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ItSas35i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : kbdclass
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : kbdhid
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : kdnic
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : KeyIso
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : KPSSVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : KSecDD
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : KSecPkg
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ksthunk
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : KtmRm
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LanmanServer
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LanmanWorkstation
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ldap
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : lfsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LicenseManager
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : lltdio
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : lltdsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : lmhosts
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Lsa
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LSI_SAS
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LSI_SAS2i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LSI_SAS3i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LSI_SSS
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : LSM
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : luafv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MapsBroker
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MariaDB
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mausbhost
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mausbip
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : megasas
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : megasas2i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : megasas35i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : megasr
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Microsoft_Bluetooth_AvrcpTransport
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mlx4_bus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MMCSS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Modem
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : monitor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mouclass
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mouhid
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mountmgr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mpsdrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mpssvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mrxsmb
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mrxsmb20
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MsBridge
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSDTC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSDTC Bridge 4.0.0.0
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Msfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : msgpiowin32
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mshidkmdf
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mshidumdf
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : msisadrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSiSCSI
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : msiserver
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSKSSRV
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MsLbfoProvider
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MsLldp
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSPCLOCK
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSPQM
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MsRPC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSSCNTRS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MsSecFlt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mssmbios
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MSTEE
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : MTConfig
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Mup
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : mvumis
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : napagent
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NcaSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NcbService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ndfltr
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NDIS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NdisCap
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NdisImPlatform
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NdisTapi
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Ndisuio
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NdisVirtualBus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NdisWan
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ndiswanlegacy
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ndproxy
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetAdapterCx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetBIOS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetbiosSmb
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetBT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : OWNER RIGHTS Allow ReadPermissions
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Users Allow -2147483648
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow CreateSubKey, ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow -2147483648
PSChildName : Netlogon
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Netman
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : netprofm
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetSetupSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NetTcpPortSharing
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : netvsc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : netvscvfpp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-1494273756-1255569779-44860840-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NgcCtnrSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NgcSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\Authenticated Users Allow QueryValues, ReadPermissions
NT AUTHORITY\SYSTEM Allow SetValue, CreateSubKey, CreateLink, ReadKey, ChangePermissions, TakeOwnership
BUILTIN\Administrators Allow CreateSubKey, CreateLink, ReadKey, ChangePermissions, TakeOwnership
BUILTIN\Users Allow QueryValues, Notify
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : NlaSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Npfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : npsvctrig
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : nsi
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : nsiproxy
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Ntfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Null
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : nvdimm
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : nvraid
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : nvstor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Parport
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : partmgr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PcaSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pciide
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pcmcia
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pcw
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pdc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PEAUTH
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : percsas2i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : percsas3i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PerfDisk
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PerfHost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PerfNet
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PerfOS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PerfProc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PhoneSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PimIndexMaintenanceSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PimIndexMaintenanceSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PimIndexMaintenanceSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PimIndexMaintenanceSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PimIndexMaintenanceSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PktMon
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pla
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PlugPlay
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pmem
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PNPMEM
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PolicyAgent
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PortProxy
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Power
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PptpMiniport
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintNotify
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintWorkflowUserSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintWorkflowUserSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintWorkflowUserSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintWorkflowUserSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PrintWorkflowUserSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Processor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ProfSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Psched
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : PushToInstall
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : pvscsi
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : qebdrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : qefcoe
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : qeois
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ql2300i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ql40xx2i
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : qlfcoei
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : QWAVE
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : QWAVEdrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Ramdisk
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RasAcd
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RasAgileVpn
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RasAuto
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Network Configuration Operators Allow ReadKey
BUILTIN\Network Configuration Operators Allow -2147483648
PSChildName : RasGre
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Rasl2tp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RasMan
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Network Configuration Operators Allow ReadKey
BUILTIN\Network Configuration Operators Allow -2147483648
PSChildName : RasPppoe
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RasSstp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : rdbss
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RDMANDK
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : rdpbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RDPDR
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RDPNP
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RDPUDD
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RdpVideoMiniport
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ReFS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ReFSv1
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RemoteAccess
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Network Configuration Operators Allow ReadKey
BUILTIN\Network Configuration Operators Allow -2147483648
PSChildName : RemoteRegistry
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RFCOMM
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : rhelfltr
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : rhelnet
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : rhelscsi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : rhproxy
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RmSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RpcEptMapper
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\Authenticated Users Allow QueryValues, ReadPermissions
NT AUTHORITY\SYSTEM Allow SetValue, CreateSubKey, CreateLink, ReadKey, ChangePermissions, TakeOwnership
BUILTIN\Administrators Allow CreateSubKey, CreateLink, ReadKey, ChangePermissions, TakeOwnership
BUILTIN\Users Allow QueryValues, Notify
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RpcLocator
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : RpcSs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\INTERACTIVE Allow -2147483648
NT AUTHORITY\INTERACTIVE Allow ReadKey
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Users Allow -2147483648
BUILTIN\Users Allow ReadKey
PSChildName : RSoPProv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : rspndr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : s3cap
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sacdrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sacsvr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SamSs
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : sbp2port
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SCardSvr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ScDeviceEnum
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : scfilter
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Schedule
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : scmbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SCPolicySvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sdbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SDFRd
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sdstor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : seclogon
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SecurityHealthService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SEMgrSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SENS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Sense
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SensorDataService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SensorService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SensrSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SerCx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SerCx2
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Serenum
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Serial
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sermouse
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SessionEnv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sfloppy
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SgrmAgent
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SgrmBroker
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SharedAccess
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ShellHWDetection
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : shpamsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SiSRaid2
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SiSRaid4
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SmartPqi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SmartSAMD
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : smbdirect
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : smphost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SMSvcHost 4.0.0.0
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SNMP
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SNMPTRAP
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : spaceport
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SpbCx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Spooler
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : sppsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : srv2
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : srvnet
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SSDPSRV
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ssh-agent
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SstpSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : StateRepository
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : stexstor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : stisvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : storahci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : storflt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : stornvme
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : storqosflt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : StorSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : storufs
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : storvsc
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : svsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : swenum
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : swprv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Synth3dVsc
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SysMain
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : SystemEventsBroker
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TabletInputService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tapisrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Tcpip
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : OWNER RIGHTS Allow ReadPermissions
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow EnumerateSubKeys, Notify, ReadPermissions
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow EnumerateSubKeys, Notify, ReadPermissions
NT SERVICE\Dhcp Allow EnumerateSubKeys, Notify, ReadPermissions
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your Internet connection Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your Internet connection, including incoming connections from the Internet Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your home or work networks Allow ReadKey
S-1-15-3-4214768333-1334025770-122408079-3919188833 Allow ReadKey
PSChildName : Tcpip6
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : OWNER RIGHTS Allow ReadPermissions
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow EnumerateSubKeys, Notify, ReadPermissions
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow EnumerateSubKeys, Notify, ReadPermissions
NT SERVICE\Dhcp Allow EnumerateSubKeys, Notify, ReadPermissions
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your Internet connection Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your Internet connection, including incoming connections from the Internet Allow ReadKey
APPLICATION PACKAGE AUTHORITY\Your home or work networks Allow ReadKey
S-1-15-3-4214768333-1334025770-122408079-3919188833 Allow ReadKey
PSChildName : TCPIP6TUNNEL
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tcpipreg
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TCPIPTUNNEL
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tdx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : terminpt
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TermService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Themes
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TieringEngineService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TimeBrokerSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow ReadKey
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TokenBroker
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : toolsrv
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : TPM
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TrkWks
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : TrustedInstaller
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : TSDDD
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TsUsbFlt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : TsUsbGD
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tsusbhub
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tunnel
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : tzautoupdate
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UALSVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UASPStor
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UcmCx0101
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UcmTcpciCx0101
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UcmUcsi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UcmUcsiAcpiClient
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UcmUcsiCx0101
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Ucx01000
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UdeCx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : udfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UEFI
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UevAgentDriver
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UevAgentService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Ufx01000
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UfxChipidea
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ufxsynopsys
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UGatherer
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UGTHRSVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : umbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UmPass
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UmRdpService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UnistoreSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UnistoreSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UnistoreSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UnistoreSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UnistoreSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : upnphost
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UrsChipidea
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UrsCx01000
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UrsSynopsys
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbccgp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbehci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbhub
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : USBHUB3
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbohci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbprint
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbser
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : USBSTOR
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbuhci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : usbvideo
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : USBXHCI
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserDataSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserDataSvc_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserDataSvc_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserDataSvc_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserDataSvc_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UserManager
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : UsoSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VaultSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vdrvroot
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vds
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VerifierExt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VGAuthService
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vhdmp
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vhf
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vm3dmp
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vm3dmp-debug
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vm3dmp-stats
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vm3dmp_loader
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmbus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VMBusHID
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmci
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmgid
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmhgfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicguestinterface
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicheartbeat
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmickvpexchange
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicrdv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicshutdown
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmictimesync
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicvmsession
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmicvss
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VMMemCtl
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmmouse
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmrawdsk
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VMTools
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmusbmouse
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmvss
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmwefifw
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vmxnet3ndis6
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : volmgr
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : volmgrx
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : volsnap
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : volume
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vpci
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VPCMap
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-311646005-56051706-1538882281-513
AccessToString : BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -2147483648
BUILTIN\Power Users Allow SetValue, CreateSubKey, Delete, ReadKey
BUILTIN\Power Users Allow -1073676288
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
CREATOR OWNER Allow 268435456
PSChildName : vsmraid
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vsock
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VSS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : VSTXRAID
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : vwifibus
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : W32Time
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\LOCAL SERVICE Allow -2147483648
NT AUTHORITY\LOCAL SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow ReadKey
NT AUTHORITY\NETWORK SERVICE Allow -2147483648
BUILTIN\Administrators Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Users Allow -2147483648
BUILTIN\Users Allow ReadKey
BUILTIN\Network Configuration Operators Allow ReadKey
BUILTIN\Network Configuration Operators Allow -2147483648
S-1-5-80-3169285310-278349998-1452333686-3865143136-4212226833 Allow SetValue, CreateSubKey, Delete, ReadKey
S-1-5-80-3169285310-278349998-1452333686-3865143136-4212226833 Allow -1073676288
PSChildName : w3logsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : W3SVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WaaSMedicSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WacomPen
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WalletService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wanarp
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wanarpv6
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WarpJITSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WAS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WbioSrvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wcifs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Wcmsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wcnfs
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WdBoot
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Wdf01000
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WdFilter
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WdiServiceHost
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : WdiSystemHost
Owner : BUILTIN\Administrators
Group : BUILTIN\Administrators
AccessToString : NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
BUILTIN\Administrators Allow ReadKey
BUILTIN\Administrators Allow -1610612736
BUILTIN\Users Allow ReadKey
BUILTIN\Users Allow -1610612736
PSChildName : WdmCompanionFilter
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WdNisDrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WdNisSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Wecsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WEPHOSTSVC
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wercplsupport
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WerSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WFPLWFS
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WiaRpc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WIMMount
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinDefend
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Windows Workflow Foundation 4.0.0.0
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WindowsTrustedRT
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WindowsTrustedRTProxy
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinHttpAutoProxySvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinMad
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Winmgmt
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : CREATOR OWNER Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow -1610612736
BUILTIN\Users Allow ReadKey
PSChildName : WinNat
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinQuic
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinRM
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Winsock
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinSock2
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WINUSB
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WinVerbs
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wisvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WlanSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wlidsvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WmiAcpi
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-397955417-626881126-188441444-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WmiApRpl
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : CREATOR OWNER Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow -1610612736
BUILTIN\Users Allow ReadKey
PSChildName : wmiApSrv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : CREATOR OWNER Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
NT AUTHORITY\SYSTEM Allow 268435456
NT AUTHORITY\SYSTEM Allow FullControl
BUILTIN\Administrators Allow 268435456
BUILTIN\Administrators Allow FullControl
BUILTIN\Users Allow -1610612736
BUILTIN\Users Allow ReadKey
PSChildName : WMPNetworkSvc
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : Wof
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : workerdd
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WPDBusEnum
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpdUpFltr
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnUserService
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnUserService_4248c
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnUserService_4b162
Owner : BUILTIN\Administrators
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnUserService_80d08
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WpnUserService_ee306
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : ws2ifsl
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WSearch
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WSearchIdxPi
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : wuauserv
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WudfPf
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : WUDFRd
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : xmlprov
Owner : NT AUTHORITY\SYSTEM
Group : NT AUTHORITY\SYSTEM
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : {60E8E863-2974-47D1-89E0-E507677AA14F}
Owner : BUILTIN\Administrators
Group : CONTROL\None
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : {6D197A8D-04EB-44C6-B602-FF2798EB7BB3}
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-1494273756-1255569779-44860840-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
PSChildName : {CB20B026-8E3E-4F7D-88FD-E7FB0E93CF39}
Owner : BUILTIN\Administrators
Group : G:S-1-5-21-1494273756-1255569779-44860840-513
AccessToString : APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow ReadKey
BUILTIN\Administrators Allow FullControl
CREATOR OWNER Allow FullControl
NT AUTHORITY\Authenticated Users Allow ReadKey
NT AUTHORITY\SYSTEM Allow FullControl
CONTROL\Hector Allow FullControl
BUILTIN\Administrators Allow FullControl
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: applockerfltr
TYPE : 1 KERNEL_DRIVER
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : system32\drivers\applockerfltr.sys
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Smartlocker Filter Driver
DEPENDENCIES : FltMgr
: AppID
: AppIDSvc
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: AppMgmt
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Application Management
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: AppVClient
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\AppVClient.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Microsoft App-V Client
DEPENDENCIES : RpcSS
: netprofm
: AppvVfs
: AppVStrm
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: BFE
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Base Filtering Engine
DEPENDENCIES : RpcSs
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: BrokerInfrastructure
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DcomLaunch -p
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : Background Tasks Infrastructure Service
DEPENDENCIES : RpcEptMapper
: DcomLaunch
: RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: CLFS
TYPE : 1 KERNEL_DRIVER
START_TYPE : 0 BOOT_START
ERROR_CONTROL : 3 CRITICAL
BINARY_PATH_NAME : \SystemRoot\System32\drivers\CLFS.sys
LOAD_ORDER_GROUP : Filter
TAG : 1
DISPLAY_NAME : Common Log (CLFS)
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: ConsentUxUserSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : ConsentUX
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: ConsentUxUserSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : ConsentUX_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DcomLaunch
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DcomLaunch -p
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : DCOM Server Process Launcher
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DevicePickerUserSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : DevicePicker
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DevicePickerUserSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : DevicePicker_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DevicesFlowUserSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : DevicesFlow
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DevicesFlowUserSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DevicesFlow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : DevicesFlow_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: Dhcp
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
LOAD_ORDER_GROUP : TDI
TAG : 0
DISPLAY_NAME : DHCP Client
DEPENDENCIES : NSI
: Afd
SERVICE_START_NAME : NT Authority\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: Dnscache
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k NetworkService -p
LOAD_ORDER_GROUP : TDI
TAG : 0
DISPLAY_NAME : DNS Client
DEPENDENCIES : nsi
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: DoSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k NetworkService -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Delivery Optimization
DEPENDENCIES : rpcss
SERVICE_START_NAME : NT Authority\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: EventLog
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
LOAD_ORDER_GROUP : Event Log
TAG : 0
DISPLAY_NAME : Windows Event Log
DEPENDENCIES :
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: KtmRm
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : KtmRm for Distributed Transaction Coordinator
DEPENDENCIES : RPCSS
: SamSS
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: LSM
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DcomLaunch -p
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : Local Session Manager
DEPENDENCIES : RpcEptMapper
: DcomLaunch
: RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : System32\drivers\mpsdrv.sys
LOAD_ORDER_GROUP : network
TAG : 0
DISPLAY_NAME : Windows Defender Firewall Authorization Driver
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Defender Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: MSDTC
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START (DELAYED)
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\msdtc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Distributed Transaction Coordinator
DEPENDENCIES : RPCSS
: SamSS
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: MSDTC
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START (DELAYED)
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\msdtc.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Distributed Transaction Coordinator
DEPENDENCIES : RPCSS
: SamSS
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: NetBT
TYPE : 1 KERNEL_DRIVER
START_TYPE : 1 SYSTEM_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : System32\DRIVERS\netbt.sys
LOAD_ORDER_GROUP : PNP_TDI
TAG : 0
DISPLAY_NAME : NetBT
DEPENDENCIES : Tdx
: tcpip
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: NetSetupSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Network Setup Service
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: NetTcpPortSharing
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Net.Tcp Port Sharing Service
DEPENDENCIES :
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: NgcCtnrSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
LOAD_ORDER_GROUP : Cryptography
TAG : 0
DISPLAY_NAME : Microsoft Passport Container
DEPENDENCIES : RpcSs
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: NgcSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p
LOAD_ORDER_GROUP : Cryptography
TAG : 0
DISPLAY_NAME : Microsoft Passport
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: PimIndexMaintenanceSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Contact Data
DEPENDENCIES : UnistoreSvc
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: PimIndexMaintenanceSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Contact Data_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: pla
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Performance Logs & Alerts
DEPENDENCIES : RPCSS
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: PrintWorkflowUserSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k PrintWorkflow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : PrintWorkflow
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: PrintWorkflowUserSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k PrintWorkflow
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : PrintWorkflow_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RasAcd
TYPE : 1 KERNEL_DRIVER
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : System32\DRIVERS\rasacd.sys
LOAD_ORDER_GROUP : Streams Drivers
TAG : 1
DISPLAY_NAME : Remote Access Auto Connection Driver
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RasAuto
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Remote Access Auto Connection Manager
DEPENDENCIES : RasAcd
SERVICE_START_NAME : localSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RasMan
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Remote Access Connection Manager
DEPENDENCIES : SstpSvc
: DnsCache
SERVICE_START_NAME : localSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RemoteAccess
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Routing and Remote Access
DEPENDENCIES : RpcSS
: Bfe
: RasMan
: Http
: +NetBIOSGroup
SERVICE_START_NAME : localSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RmSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Radio Management Service
DEPENDENCIES : RpcSs
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RpcEptMapper
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k RPCSS -p
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : RPC Endpoint Mapper
DEPENDENCIES :
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RpcSs
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k rpcss -p
LOAD_ORDER_GROUP : COM Infrastructure
TAG : 0
DISPLAY_NAME : Remote Procedure Call (RPC)
DEPENDENCIES : RpcEptMapper
: DcomLaunch
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: RSoPProv
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\RSoPProv.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Resultant Set of Policy Provider
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SamSs
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\lsass.exe
LOAD_ORDER_GROUP : MS_WindowsLocalValidation
TAG : 0
DISPLAY_NAME : Security Accounts Manager
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: Schedule
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP : SchedulerGroup
TAG : 0
DISPLAY_NAME : Task Scheduler
DEPENDENCIES : RPCSS
: SystemEventsBroker
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: seclogon
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Secondary Logon
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SecurityHealthService
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\SecurityHealthService.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Security Service
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SENS
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : System Event Notification Service
DEPENDENCIES : EventSystem
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: smphost
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k smphost
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Microsoft Storage Spaces SMP
DEPENDENCIES : RPCSS
SERVICE_START_NAME : NT AUTHORITY\NetworkService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: Spooler
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\spoolsv.exe
LOAD_ORDER_GROUP : SpoolerGroup
TAG : 0
DISPLAY_NAME : Print Spooler
DEPENDENCIES : RPCSS
: http
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SstpSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalService -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Secure Socket Tunneling Protocol Service
DEPENDENCIES :
SERVICE_START_NAME : NT Authority\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SystemEventsBroker
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k DcomLaunch -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : System Events Broker
DEPENDENCIES : RpcEptMapper
: RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: TimeBrokerSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Time Broker
DEPENDENCIES :
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UevAgentService
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\AgentService.exe
LOAD_ORDER_GROUP : ProfSvc_Group
TAG : 0
DISPLAY_NAME : User Experience Virtualization Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UnistoreSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : User Data Storage
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UnistoreSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : User Data Storage_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UserDataSvc
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : User Data Access
DEPENDENCIES : UnistoreSvc
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UserDataSvc_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : User Data Access_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: UsoSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 4 DISABLED
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Update Orchestrator Service
DEPENDENCIES : rpcss
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: vds
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\vds.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Virtual Disk
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WaaSMedicSvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k wusvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Update Medic Service
DEPENDENCIES : rpcss
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WdBoot
TYPE : 1 KERNEL_DRIVER
START_TYPE : 0 BOOT_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : \SystemRoot\system32\drivers\wd\WdBoot.sys
LOAD_ORDER_GROUP : Early-Launch
TAG : 0
DISPLAY_NAME : Windows Defender Antivirus Boot Driver
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WdFilter
TYPE : 2 FILE_SYSTEM_DRIVER
START_TYPE : 0 BOOT_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : \SystemRoot\system32\drivers\wd\WdFilter.sys
LOAD_ORDER_GROUP : FSFilter Anti-Virus
TAG : 0
DISPLAY_NAME : Windows Defender Antivirus Mini-Filter Driver
DEPENDENCIES : FltMgr
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WdNisDrv
TYPE : 1 KERNEL_DRIVER
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : system32\drivers\wd\WdNisDrv.sys
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Defender Antivirus Network Inspection System Driver
DEPENDENCIES : BFE
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WdNisSvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe"
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Defender Antivirus Network Inspection Service
DEPENDENCIES : WdNisDrv
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WinDefend
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe"
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Defender Antivirus Service
DEPENDENCIES : RpcSs
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WinHttpAutoProxySvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : WinHTTP Web Proxy Auto-Discovery Service
DEPENDENCIES : Dhcp
SERVICE_START_NAME : NT AUTHORITY\LocalService
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WpnUserService
TYPE : 60 USER_SHARE_PROCESS TEMPLATE
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Push Notifications User Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: WpnUserService_4b162
TYPE : e0 USER_SHARE_PROCESS INSTANCE
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k UnistackSvcGroup
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Push Notifications User Service_4b162
DEPENDENCIES :
SERVICE_START_NAME :
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: wuauserv
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k netsvcs -p
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Update
DEPENDENCIES : rpcss
SERVICE_START_NAME : LocalSystem
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment