Quarantine Agent Service Run-Time

Service Host Group Name NetworkService
Service Short Description Quarantine Agent Service Run-Time
Service Full Description The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.
Service Executable File Path c:\windows\system32\qagentrt.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent
Depends on Ole resource dll

Learn how to open SWF file and how to open XML file.

Network Location Awareness 2

Service Host Group Name NetworkService
Service Short Description Network Location Awareness 2
Service Full Description Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\nlasvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeAuditPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc
Depends on Network Store Interface RPC server
Ole resource dll
TcpIp

Learn how to open NUMBERS file.

Microsoft® Windows(TM) Telephony Server

Service Host Group Name NetworkService
Service Short Description Microsoft® Windows(TM) Telephony Server
Service Full Description Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.
Service Executable File Path c:\windows\system32\tapisrv.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeAssignPrimaryTokenPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv
Depends on User-mode Plug-and-Play Service
Ole resource dll

Learn how to open PAGES file and how to open EML file.

Remote Desktop Session Host Server Remote Connections Manager

Service Host Group Name NetworkService
Service Short Description Remote Desktop Session Host Server Remote Connections Manager
Service Full Description Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.
Service Executable File Path c:\windows\system32\termsrv.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService
Depends on Ole resource dll
TermDD

Learn how to open PAGES file.

Event Collector Service

Service Host Group Name NetworkService
Service Short Description Event Collector Service
Service Full Description This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
Service Executable File Path c:\windows\system32\wecsvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k NetworkService 192.168.1.254
Service Privileges SeAuditPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc
Depends on HTTP
Event Logging Service

Learn how to Open JSON File and how to open PST file.

WSMan Service

Service Host Group Name NetworkService
Service Short Description WSMan Service
Service Full Description Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them: 192.168.1.1. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.
Service Executable File Path c:\windows\system32\wsmsvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeAssignPrimaryTokenPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM
Depends on Ole resource dll
HTTP

Learn how to open ICS file.

Policy Storage dll

Service Host Group Name NetworkServiceNetworkRestricted
Service Short Description Policy Storage dll
Service Full Description Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool “netsh ipsec”. If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.
Service Executable File Path c:\windows\system32\polstore.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Privileges SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
Depends on Tcpip
Base Filtering Engine

Read how to open SWF file and how to open CTG file.

Cryptographic Services

Service Host Group Name NetworkService
Service Short Description Cryptographic Services
Service Full Description Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\cryptsvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k NetworkService
Service Privileges SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc
Depends on Ole resource dll

Read how to open BUP file or open EPUB file.

DNS Client API DLL

Service Host Group Name NetworkService
Service Short Description DNS Client API DLL
Service Full Description The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computers name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\dnsapi.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k NetworkService
Service Privileges SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache
Depends on Tdx
Network Store Interface RPC server

Learn how to open MKV file.

Workstation Service DLL

Service Host Group Name NetworkService
Service Short Description Workstation Service DLL
Service Full Description Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\wkssvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeAuditPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
Depends on Bowser
MRxSmb10
MRxSmb20
Network Store Interface RPC server

Learn how to open MP4 file and how to open PKPASS file.