| ▧AccCheckConsole.exeVerifies UI accessibility requirements | | Other Microsoft Binaries | | 2 | ↗ |
| ▧AddinUtil.exe.NET Tool used for updating cache files for Microsoft Office Add-Ins. | | OS Binaries | | 4 | ↗ |
| ▧adplus.exeDebugging tool included with Windows Debugging Tools | | Other Microsoft Binaries | | 1 | ↗ |
| ◇Advpack.dllUtility for installing software and drivers with rundll32.exe | | OS Libraries | | 2 | ↗ |
| ▧AgentExecutor.exeIntune Management Extension included on Intune Managed Devices | | Other Microsoft Binaries | | 2 | ↗ |
| ▧AppCert.exeWindows App Certification Kit command-line tool. | | Other Microsoft Binaries | | — | ↗ |
| ▧AppInstaller.exeTool used for installation of AppX/MSIX applications on Windows 10 | | OS Binaries | | 1 | ↗ |
| ▧Applaunch.exeMicrosoft .NET ClickOnce Launch Utility. | | OS Binaries | | — | ↗ |
| ▧AppLauncher.exeUser Experience Virtualization tool that launches applications under monitoring to capture and synchronize user settings. | | Other Microsoft Binaries | | — | ↗ |
| ▧Appvlp.exeApplication Virtualization Utility Included with Microsoft Office 2016 | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Aspnet_Compiler.exeASP.NET Compilation Tool | | OS Binaries | | 2 | ↗ |
| ▧At.exeSchedule periodic tasks | | OS Binaries | | 3 | ↗ |
| ▧Atbroker.exeHelper binary for Assistive Technology (AT) | | OS Binaries | | 2 | ↗ |
| ▧Bash.exeFile used by Windows subsystem for Linux | | OS Binaries | | 2 | ↗ |
| ▧Bcp.exeMicrosoft SQL Server Bulk Copy Program utility for importing and exporting data between SQL Server instances and data files. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Bginfo.exeBackground Information Utility included with SysInternals Suite | | Other Microsoft Binaries | | 4 | ↗ |
| ▧Bitsadmin.exeUsed for managing background intelligent transfer | | OS Binaries | | 4 | ↗ |
| ▧Cdb.exeDebugging tool included with Windows Debugging Tools. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧CertOC.exeUsed for installing certificates | | OS Binaries | | 1 | ↗ |
| ▧CertReq.exeUsed for requesting and managing certificates | | OS Binaries | | 1 | ↗ |
| ▧Certutil.exeWindows binary used for handling certificates | | OS Binaries | | 8 | ↗ |
| ▧Change.exeRemote Desktop Services MultiUser Change Utility | | OS Binaries | | — | ↗ |
| ▧Cipher.exeFile Encryption Utility | | OS Binaries | | 1 | ↗ |
| ›_CL_Invocation.ps1Aero diagnostics script | | OS Scripts | | 2 | ↗ |
| ›_CL_LoadAssembly.ps1PowerShell Diagnostic Script | | OS Scripts | | 1 | ↗ |
| ›_CL_Mutexverifiers.ps1Proxy execution with CL_Mutexverifiers.ps1 | | OS Scripts | | 1 | ↗ |
| ▧Cmd.exeThe command-line interpreter in Windows | | OS Binaries | | 3 | ↗ |
| ▧Cmdkey.execreates, lists, and deletes stored user names and passwords or credentials. | | OS Binaries | | 1 | ↗ |
| ▧cmdl32.exeMicrosoft Connection Manager Auto-Download | | OS Binaries | | 1 | ↗ |
| ▧Cmstp.exeInstalls or removes a Connection Manager service profile. | | OS Binaries | | 5 | ↗ |
| ▧Colorcpl.exeBinary that handles color management | | OS Binaries | | 1 | ↗ |
| ▧ComputerDefaults.exeComputerDefaults.exe is a Windows system utility for managing default applications for tasks like web browsing, emailing, and media playback. | | OS Binaries | | 1 | ↗ |
| ◇Comsvcs.dllCOM+ Services | | OS Libraries | | 4 | ↗ |
| ▧ConfigSecurityPolicy.exeBinary part of Windows Defender. Used to manage settings in Windows Defender. You can configure different pilot collections for each of the co-management workloads. Being able to use different pilot collections allows you to take a more granular approach when shifting workloads. | | OS Binaries | | 1 | ↗ |
| ▧Conhost.exeConsole Window host | | OS Binaries | | 1 | ↗ |
| ▧Control.exeBinary used to launch controlpanel items in Windows | | OS Binaries | | 5 | ↗ |
| ▧coregen.exeBinary coregen.exe (Microsoft CoreCLR Native Image Generator) loads exported function GetCLRRuntimeHost from coreclr.dll or from .DLL in arbitrary path. Coregen is located within "C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\" or another version of Silverlight. Coregen is signed by Microsoft and bundled with Microsoft Silverlight. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Createdump.exeMicrosoft .NET Runtime Crash Dump Generator (included in .NET Core) | | Other Microsoft Binaries | | 2 | ↗ |
| ▧Csc.exeBinary file used by .NET Framework to compile C# code | | OS Binaries | | 4 | ↗ |
| ▧Cscript.exeBinary used to execute scripts in Windows | | OS Binaries | | 7 | ↗ |
| ▧csi.exeCommand line interface included with Visual Studio. | | Other Microsoft Binaries | | 5 | ↗ |
| ▧CustomShellHost.exeA host process that is used by custom shells when using Windows in Kiosk mode. | | OS Binaries | | 1 | ↗ |
| ▧DataSvcUtil.exeDataSvcUtil.exe is a command-line tool provided by WCF Data Services that consumes an Open Data Protocol (OData) feed and generates the client data service classes that are needed to access a data service from a .NET Framework client application. | | OS Binaries | | 1 | ↗ |
| ▧DbgSrv.exeA process server included with Debugging Tools for Windows for remote user-mode debugging. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧DefaultPack.EXEThis binary can be downloaded along side multiple software downloads on the Microsoft website. It gets downloaded when the user forgets to uncheck the option to set Bing as the default search provider. | | Other Microsoft Binaries | | 1 | ↗ |
| ◇Desk.cplDesktop Settings Control Panel | | OS Libraries | | 3 | ↗ |
| ▧Desktopimgdownldr.exeWindows binary used to configure lockscreen/desktop image | | OS Binaries | | 3 | ↗ |
| ▧DeviceCredentialDeployment.exeDevice Credential Deployment | | OS Binaries | | 1 | ↗ |
| ▧Devinit.exeVisual Studio 2019 tool | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Devtoolslauncher.exeBinary will execute specified binary. Part of VS/VScode installation. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧devtunnel.exeBinary to enable forwarded ports on windows operating systems. | | Other Microsoft Binaries | | 3 | ↗ |
| ◇Dfshim.dllClickOnce engine in Windows used by .NET | | OS Libraries | | 1 | ↗ |
| ▧Dfsvc.exeClickOnce engine in Windows used by .NET | | OS Binaries | | 1 | ↗ |
| ▧Diantz.exeBinary that package existing files into a cabinet (.cab) file | | OS Binaries | | 2 | ↗ |
| ▧Diskshadow.exeDiskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS). | | OS Binaries | | 3 | ↗ |
| ▧Dnscmd.exeA command-line interface for managing DNS servers | | OS Binaries | | 1 | ↗ |
| ▧dnx.exe.NET Execution environment file included with .NET. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧dotnet-counters.exe.NET diagnostic tool for monitoring performance counters of .NET applications in real-time. Installed via 'dotnet tool install --global dotnet-counters' (.NET SDK required). | | Other Microsoft Binaries | | — | ↗ |
| ▧dotnet-trace.exe.NET diagnostic tool for collecting runtime traces from .NET applications. Installed via 'dotnet tool install --global dotnet-trace' (.NET SDK required). | | Other Microsoft Binaries | | — | ↗ |
| ▧Dotnet.exedotnet.exe comes with .NET Framework | | Other Microsoft Binaries | | 2 | ↗ |
| ▧dsdbutil.exeDsdbutil is a command-line tool that is built into Windows Server. It is available if you have the AD LDS server role installed. Can be used as a command line utility to export Active Directory. | | Other Microsoft Binaries | | — | ↗ |
| ▧dtutil.exeMicrosoft command line utility used to manage SQL Server Integration Services packages. | | Other Microsoft Binaries | | — | ↗ |
| ▧Dump64.exeMemory dump tool that comes with Microsoft Visual Studio | | Other Microsoft Binaries | | 1 | ↗ |
| ▧DumpMinitool.exeDump tool part Visual Studio 2022 | | Other Microsoft Binaries | | 3 | ↗ |
| ▧Dxcap.exeDirectX diagnostics/debugger included with Visual Studio. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧ECMangen.exeCommand-line tool for managing certificates in Microsoft Exchange Server. | | Other Microsoft Binaries | | — | ↗ |
| ▧Esentutl.exeBinary for working with Microsoft Joint Engine Technology (JET) database | | OS Binaries | | 6 | ↗ |
| ▧Eudcedit.exePrivate Character Editor Windows Utility | | OS Binaries | | — | ↗ |
| ▧Eventvwr.exeDisplays Windows Event Logs in a GUI window. | | OS Binaries | | 5 | ↗ |
| ▧Excel.exeMicrosoft Office binary | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Expand.exeBinary that expands one or more compressed files | | OS Binaries | | 2 | ↗ |
| ▧Explorer.exeBinary used for managing files and system components within Windows | | OS Binaries | | 3 | ↗ |
| ▧Extexport.exeLoad a DLL located in the c:\test folder with a specific name. | | OS Binaries | | 1 | ↗ |
| ▧Extrac32.exeExtract to ADS, copy or overwrite a file with Extrac32.exe | | OS Binaries | | 3 | ↗ |
| ▧Findstr.exeWrite to ADS, discover, or download files with Findstr.exe | | OS Binaries | | 1 | ↗ |
| ▧Finger.exeDisplays information about a user or users on a specified remote computer that is running the Finger service or daemon | | OS Binaries | | 1 | ↗ |
| ▧fltMC.exeFilter Manager Control Program used by Windows | | OS Binaries | | 3 | ↗ |
| ▧Forfiles.exeSelects and executes a command on a file or set of files. This command is useful for batch processing. | | OS Binaries | | 1 | ↗ |
| ▧Fsi.exe64-bit FSharp (F#) Interpreter included with Visual Studio and DotNet Core SDK. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧FsiAnyCpu.exe32/64-bit FSharp (F#) Interpreter included with Visual Studio. | | Other Microsoft Binaries | | 2 | ↗ |
| ▧Fsutil.exeFile System Utility | | OS Binaries | | 1 | ↗ |
| ▧Ftp.exeA binary designed for connecting to FTP servers | | OS Binaries | | 1 | ↗ |
| ▧Gpscript.exeUsed by group policy to process scripts | | OS Binaries | | 1 | ↗ |
| ▧Hh.exeBinary used for processing chm files in Windows | | OS Binaries | | 6 | ↗ |
| ▧Ie4uinit.exeExecutes commands from a specially prepared ie4uinit.inf file. | | OS Binaries | | 1 | ↗ |
| ◇Ieadvpack.dllINF installer for Internet Explorer. Has much of the same functionality as advpack.dll. | | OS Libraries | | 2 | ↗ |
| ▧iediagcmd.exeDiagnostics Utility for Internet Explorer | | OS Binaries | | 1 | ↗ |
| ▧Ieexec.exeThe IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL. | | OS Binaries | | 4 | ↗ |
| ◇Ieframe.dllInternet Browser DLL for translating HTML code. | | OS Libraries | | 1 | ↗ |
| ▧Ilasm.exeused for compile c# code into dll or exe. | | OS Binaries | | 1 | ↗ |
| ▧IMEWDBLD.exeMicrosoft IME Open Extended Dictionary Module | | OS Binaries | | 1 | ↗ |
| ▧Infdefaultinstall.exeBinary used to perform installation based on content inside inf files | | OS Binaries | | 2 | ↗ |
| ▧Installutil.exeThe Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies | | OS Binaries | | 4 | ↗ |
| ▧IntelliTrace.exeVisual Studio command-line tool for collecting and managing diagnostic trace files. | | Other Microsoft Binaries | | — | ↗ |
| ▧iscsicpl.exeMicrosoft iSCSI Initiator Control Panel tool | | OS Binaries | | 1 | ↗ |
| ▧Jsc.exeBinary file used by .NET to compile JavaScript code to .exe or .dll format | | OS Binaries | | 1 | ↗ |
| ›_Launch-VsDevShell.ps1Locates and imports a Developer PowerShell module and calls the Enter-VsDevShell cmdlet | | OS Scripts | | 1 | ↗ |
| ▧Ldifde.exeCreates, modifies, and deletes LDAP directory objects. | | OS Binaries | | 3 | ↗ |
| ▧Logger.exeA logging configuration tool from the Windows Kits used to start and manage process logging. | | Other Microsoft Binaries | | — | ↗ |
| ▧Makecab.exeBinary to package existing files into a cabinet (.cab) file | | OS Binaries | | 2 | ↗ |
| ›_Manage-bde.wsfScript for managing BitLocker | | OS Scripts | | 1 | ↗ |
| ▧Mavinject.exeUsed by App-v in Windows | | OS Binaries | | 1 | ↗ |
| ▧Mftrace.exeTrace log generation tool for Media Foundation Tools. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Microsoft.NodejsTools.PressAnyKey.exePart of the NodeJS Visual Studio tools. | | Other Microsoft Binaries | | 2 | ↗ |
| ▧Microsoft.Workflow.Compiler.exeA utility included with .NET that is capable of compiling and executing C# or VB.net code. | | OS Binaries | | 6 | ↗ |
| ▧Mmc.exeLoad snap-ins to locally and remotely manage Windows systems | | OS Binaries | | 2 | ↗ |
| ▧Mofcomp.exeCompiler that parses a file containing MOF statements and adds the classes and class instances defined in the file to the WMI repository. Threat actors can leverage this binary to install malicious MOF scripts | | OS Binaries | | 1 | ↗ |
| ▧MpCmdRun.exeBinary part of Windows Defender. Used to manage settings in Windows Defender | | OS Binaries | | 2 | ↗ |
| ▧Mpiexec.exeCommand-line tool for running Message Passing Interface (MPI) applications. | | Other Microsoft Binaries | | — | ↗ |
| ▧MSAccess.exeMicrosoft Office component | | Other Microsoft Binaries | | — | ↗ |
| ▧Msbuild.exeUsed to compile and execute code | | OS Binaries | | 12 | ↗ |
| ▧Msconfig.exeMSConfig is a troubleshooting tool which is used to temporarily disable or re-enable software, device drivers or Windows services that run during startup process to help the user determine the cause of a problem with Windows | | OS Binaries | | 2 | ↗ |
| ▧Mscopilot_proxy.exeMicrosoft Copilot proxy launcher | | Other Microsoft Binaries | | — | ↗ |
| ▧Mscopilot.exeMicrosoft Copilot app | | Other Microsoft Binaries | | — | ↗ |
| ▧Msdeploy.exeMicrosoft tool used to deploy Web Applications. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Msdt.exeMicrosoft diagnostics tool | | OS Binaries | | 3 | ↗ |
| ▧msedge_proxy.exeMicrosoft Edge Browser | | OS Binaries | | 1 | ↗ |
| ▧Msedge.exeMicrosoft Edge browser | | OS Binaries | | 2 | ↗ |
| ▧msedgewebview2.exemsedgewebview2.exe is the executable file for Microsoft Edge WebView2, which is a web browser control used by applications to display web content. | | OS Binaries | | 1 | ↗ |
| ▧Mshta.exeUsed by Windows to execute html applications. (.hta) | | OS Binaries | | 15 | ↗ |
| ◇Mshtml.dllMicrosoft HTML Viewer | | OS Libraries | | 1 | ↗ |
| ▧Msiexec.exeUsed by Windows to execute msi files | | OS Binaries | | 4 | ↗ |
| ▧MsoHtmEd.exeMicrosoft Office component | | Other Microsoft Binaries | | 1 | ↗ |
| ▧msoxmled.exeMicrosoft Office XML Editor, used to handle XML documents in Microsoft Office. | | OS Binaries | | — | ↗ |
| ▧Mspub.exeMicrosoft Publisher | | Other Microsoft Binaries | | 1 | ↗ |
| ▧msxsl.exeCommand line utility used to perform XSL transformations. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧Netsh.exeNetsh is a Windows tool used to manipulate network interface settings. | | OS Binaries | | 3 | ↗ |
| ▧Ngen.exeMicrosoft Native Image Generator. | | OS Binaries | | — | ↗ |
| ▧Nmcap.exeCommand-line packet capture utility from Microsoft Network Monitor 3.x. | | Other Microsoft Binaries | | — | ↗ |
| ▧ntdsutil.exeCommand line utility used to export Active Directory. | | Other Microsoft Binaries | | 3 | ↗ |
| ▧Ntsd.exeSymbolic Debugger for Windows. | | Other Microsoft Binaries | | — | ↗ |
| ▧odbcad32.exeODBC Data Source Administrator to manage User/System DSNs and ODBC drivers. | | OS Binaries | | — | ↗ |
| ▧Odbcconf.exeUsed in Windows for managing ODBC connections | | OS Binaries | | 4 | ↗ |
| ▧OfflineScannerShell.exeWindows Defender Offline Shell | | OS Binaries | | 1 | ↗ |
| ▧OneDriveStandaloneUpdater.exeOneDrive Standalone Updater | | OS Binaries | | 1 | ↗ |
| ▧OpenConsole.exeConsole Window host for Windows Terminal | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Outlook.exeMicrosoft Office component | | Other Microsoft Binaries | | — | ↗ |
| ▧Pcalua.exeProgram Compatibility Assistant | | OS Binaries | | 1 | ↗ |
| ▧Pcwrun.exeProgram Compatibility Wizard | | OS Binaries | | 1 | ↗ |
| ◇Pcwutl.dllMicrosoft HTML Viewer | | OS Libraries | | 2 | ↗ |
| ›_Pester.batUsed as part of the Powershell pester | | OS Scripts | | 1 | ↗ |
| ◇PhotoViewer.dllWindows Photo Viewer | | OS Libraries | | — | ↗ |
| ▧Pixtool.exeCommand line utility for taking and analyzing PIX GPU captures. | | Other Microsoft Binaries | | — | ↗ |
| ▧Pktmon.exeCapture Network Packets on the windows 10 with October 2018 Update or later. | | OS Binaries | | 1 | ↗ |
| ▧Pnputil.exeUsed for installing drivers | | OS Binaries | | 1 | ↗ |
| ▧Powerpnt.exeMicrosoft Office binary. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Presentationhost.exeFile is used for executing Browser applications | | OS Binaries | | 2 | ↗ |
| ▧Print.exeUsed by Windows to send files to the printer | | OS Binaries | | 1 | ↗ |
| ▧PrintBrm.exePrinter Migration Command-Line Tool | | OS Binaries | | 1 | ↗ |
| ▧Procdump.exeSysInternals Memory Dump Tool | | Other Microsoft Binaries | | 4 | ↗ |
| ▧ProtocolHandler.exeMicrosoft Office binary | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Provlaunch.exeLauncher process | | OS Binaries | | 4 | ↗ |
| ▧Psr.exeWindows Problem Steps Recorder, used to record screen and clicks. | | OS Binaries | | 1 | ↗ |
| ›_Pubprn.vbsProxy execution with Pubprn.vbs | | OS Scripts | | 2 | ↗ |
| ▧Query.exeRemote Desktop Services MultiUser Query Utility | | OS Binaries | | — | ↗ |
| ▧Rasautou.exeWindows Remote Access Dialer | | OS Binaries | | 1 | ↗ |
| ▧rcsi.exeNon-Interactive command line inerface included with Visual Studio. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧rdrleakdiag.exeMicrosoft Windows resource leak diagnostic tool | | OS Binaries | | 3 | ↗ |
| ▧Reg.exeUsed to manipulate the registry | | OS Binaries | | 5 | ↗ |
| ▧Regasm.exePart of .NET | | OS Binaries | | 4 | ↗ |
| ▧Regedit.exeUsed by Windows to manipulate registry | | OS Binaries | | 1 | ↗ |
| ▧Regini.exeUsed to manipulate the registry | | OS Binaries | | 2 | ↗ |
| ▧Register-cimprovider.exeUsed to register new wmi providers | | OS Binaries | | 1 | ↗ |
| ▧Regsvcs.exeRegsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies | | OS Binaries | | 3 | ↗ |
| ▧Regsvr32.exeUsed by Windows to register dlls | | OS Binaries | | 11 | ↗ |
| ▧Remote.exeDebugging tool included with Windows Debugging Tools | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Replace.exeUsed to replace file with another file | | OS Binaries | | 1 | ↗ |
| ▧Reset.exeRemote Desktop Services Reset Utility | | OS Binaries | | — | ↗ |
| ▧Rpcping.exeUsed to verify rpc connection | | OS Binaries | | 1 | ↗ |
| ▧Rundll32.exeUsed by Windows to execute dll files | | OS Binaries | | 3 | ↗ |
| ▧Runexehelper.exeLauncher process | | OS Binaries | | 1 | ↗ |
| ▧Runonce.exeExecutes a Run Once Task that has been configured in the registry | | OS Binaries | | 3 | ↗ |
| ▧Runscripthelper.exeExecute target PowerShell script | | OS Binaries | | 2 | ↗ |
| ▧Sc.exeUsed by Windows to manage services | | OS Binaries | | 5 | ↗ |
| ▧Schtasks.exeSchedule periodic tasks | | OS Binaries | | 3 | ↗ |
| ▧scp.exeUsed for uploading or downloading files over SSH. | | OS Binaries | | — | ↗ |
| ▧Scriptrunner.exeExecute binary through proxy binary to evade defensive counter measures | | OS Binaries | | 1 | ↗ |
| ◇Scrobj.dllWindows Script Component Runtime | | OS Libraries | | 1 | ↗ |
| ▧Setres.exeConfigures display settings | | OS Binaries | | 1 | ↗ |
| ▧SettingSyncHost.exeHost Process for Setting Synchronization | | OS Binaries | | 1 | ↗ |
| ◇Setupapi.dllWindows Setup Application Programming Interface | | OS Libraries | | 3 | ↗ |
| ▧setupugc.exeSetup Unattend Generic Command Processor used during Windows deployment. | | OS Binaries | | — | ↗ |
| ▧Sftp.exesftp.exe is a Windows command-line utility that uses the Secure File Transfer Protocol (SFTP) to securely transfer files between a local machine and a remote server. | | OS Binaries | | 1 | ↗ |
| ◇Shdocvw.dllShell Doc Object and Control Library. | | OS Libraries | | 1 | ↗ |
| ◇Shell32.dllWindows Shell Common Dll | | OS Libraries | | 2 | ↗ |
| ◇Shimgvw.dllPhoto Gallery Viewer | | OS Libraries | | 1 | ↗ |
| ▧Sigverif.exeFile Signature Verification utility to verify digital signatures of files | | OS Binaries | | — | ↗ |
| ▧Sqldumper.exeDebugging utility included with Microsoft SQL. | | Other Microsoft Binaries | | 3 | ↗ |
| ▧Sqlps.exeTool included with Microsoft SQL Server that loads SQL Server cmdlets. Microsoft SQL Server\100 and 110 are Powershell v2. Microsoft SQL Server\120 and 130 are Powershell version 4. Replaced by SQLToolsPS.exe in SQL Server 2016, but will be included with installation for compatability reasons. | | Other Microsoft Binaries | | 4 | ↗ |
| ▧SQLToolsPS.exeTool included with Microsoft SQL that loads SQL Server cmdlts. A replacement for sqlps.exe. Successor to sqlps.exe in SQL Server 2016+. | | Other Microsoft Binaries | | 2 | ↗ |
| ▧Squirrel.exeBinary to update the existing installed Nuget/squirrel package. Part of Microsoft Teams installation. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧ssh.exeSsh.exe is the OpenSSH compatible client can be used to connect to Windows 10 (build 1809 and later) and Windows Server 2019 devices. | | OS Binaries | | 1 | ↗ |
| ▧Stordiag.exeStorage diagnostic tool | | OS Binaries | | 1 | ↗ |
| ▧SyncAppvPublishingServer.exeUsed by App-v to get App-v server lists | | OS Binaries | | 3 | ↗ |
| ›_Syncappvpublishingserver.vbsScript used related to app-v and publishing server | | OS Scripts | | 1 | ↗ |
| ◇Syssetup.dllWindows NT System Setup | | OS Libraries | | 2 | ↗ |
| ▧Tar.exeUsed by Windows to extract and create archives. | | OS Binaries | | 2 | ↗ |
| ▧te.exeTesting tool included with Microsoft Test Authoring and Execution Framework (TAEF). | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Teams.exeElectron runtime binary which runs the Teams application | | Other Microsoft Binaries | | 1 | ↗ |
| ▧TestWindowRemoteAgent.exeTestWindowRemoteAgent.exe is the command-line tool to establish RPC | | Other Microsoft Binaries | | — | ↗ |
| ▧Tracker.exeTool included with Microsoft .Net Framework. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Ttdinject.exeUsed by Windows 1809 and newer to Debug Time Travel (Underlying call of tttracer.exe) | | OS Binaries | | 2 | ↗ |
| ▧Tttracer.exeUsed by Windows 1809 and newer to Debug Time Travel | | OS Binaries | | 3 | ↗ |
| ▧Unregmp2.exeMicrosoft Windows Media Player Setup Utility | | OS Binaries | | 1 | ↗ |
| ▧Update.exeBinary to update the existing installed Nuget/squirrel package. Part of Microsoft Teams installation. | | Other Microsoft Binaries | | 1 | ↗ |
| ◇Url.dllInternet Shortcut Shell Extension DLL. | | OS Libraries | | 1 | ↗ |
| ›_UtilityFunctions.ps1PowerShell Diagnostic Script | | OS Scripts | | 1 | ↗ |
| ▧vbc.exeBinary file used for compile vbs code | | OS Binaries | | 2 | ↗ |
| ▧Verclsid.exeUsed to verify a COM object before it is instantiated by Windows Explorer | | OS Binaries | | 2 | ↗ |
| ▧Visio.exeMicrosoft Visio Executable | | Other Microsoft Binaries | | — | ↗ |
| ▧VisualUiaVerifyNative.exeA Windows SDK binary for manual and automated testing of Microsoft UI Automation implementation and controls. | | Other Microsoft Binaries | | 2 | ↗ |
| ▧VSDiagnostics.exeCommand-line tool used for performing diagnostics. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Vshadow.exeVShadow is a command-line tool that can be used to create and manage volume shadow copies. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧VSIISExeLauncher.exeBinary will execute specified binary. Part of VS/VScode installation. | | Other Microsoft Binaries | | 1 | ↗ |
| ▧vsjitdebugger.exeJust-In-Time (JIT) debugger included with Visual Studio | | Other Microsoft Binaries | | 1 | ↗ |
| ▧VSLaunchBrowser.exeMicrosoft Visual Studio browser launcher tool for web applications debugging | | Other Microsoft Binaries | | — | ↗ |
| ▧vsls-agent.exeAgent for Visual Studio Live Share (Code Collaboration) | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Vssadmin.exeVolume Shadow Copy Service administrative command-line tool | | OS Binaries | | 1 | ↗ |
| ▧vstest.console.exeVSTest.Console.exe is the command-line tool to run tests | | Other Microsoft Binaries | | — | ↗ |
| ▧Wab.exeWindows address book manager | | OS Binaries | | 1 | ↗ |
| ▧wbadmin.exeWindows Backup Administration utility | | OS Binaries | | 3 | ↗ |
| ▧wbemtest.exeWMI/WBEM Test Binary | | OS Binaries | | — | ↗ |
| ▧Wfc.exeThe Workflow Command-line Compiler tool is included with the Windows Software Development Kit (SDK). | | Other Microsoft Binaries | | 2 | ↗ |
| ▧WFMFormat.exeCommand-line tool used for pretty-print a dump file generated by Message Farm Analyzer tool. | | Other Microsoft Binaries | | — | ↗ |
| ▧WinDbg.exeWindows Debugger for advanced user-mode and kernel-mode debugging. | | Other Microsoft Binaries | | — | ↗ |
| ▧winfile.exeWindows File Manager executable | | Other Microsoft Binaries | | — | ↗ |
| ▧winget.exeWindows Package Manager tool | | OS Binaries | | 2 | ↗ |
| ▧WinProj.exeMicrosoft Project Executable | | Other Microsoft Binaries | | — | ↗ |
| ›_winrm.vbsScript used for manage Windows RM settings | | OS Scripts | | 4 | ↗ |
| ▧Winword.exeMicrosoft Office binary | | Other Microsoft Binaries | | 1 | ↗ |
| ▧Wlrmdr.exeWindows Logon Reminder executable | | OS Binaries | | 1 | ↗ |
| ▧Wmic.exeThe WMI command-line (WMIC) utility provides a command-line interface for WMI | | OS Binaries | | 12 | ↗ |
| ▧WorkFolders.exeWork Folders | | OS Binaries | | 1 | ↗ |
| ▧write.exeWindows Write | | OS Binaries | | 1 | ↗ |
| ▧wsb.exeWindows Sandbox command-line interface. Creates, lists, controls, and executes commands inside Windows Sandbox sessions from the host CLI. | | Other Microsoft Binaries | | — | ↗ |
| ▧Wscript.exeUsed by Windows to execute scripts | | OS Binaries | | 8 | ↗ |
| ▧Wsl.exeWindows subsystem for Linux executable | | Other Microsoft Binaries | | 2 | ↗ |
| ▧Wsreset.exeUsed to reset Windows Store settings according to its manifest file | | OS Binaries | | 4 | ↗ |
| ▧wt.exeWindows Terminal | | OS Binaries | | 1 | ↗ |
| ▧wuauclt.exeWindows Update Client | | OS Binaries | | 3 | ↗ |
| ▧XBootMgr.exeWindows Performance Toolkit binary used to start performance traces. | | Other Microsoft Binaries | | — | ↗ |
| ▧XBootMgrSleep.exeWindows Performance Toolkit binary used for tracing and analyzing system performance during sleep and resume transitions. | | Other Microsoft Binaries | | — | ↗ |
| ▧xsd.exeXML Schema Definition Tool included with the Windows Software Development Kit (SDK). | | Other Microsoft Binaries | | — | ↗ |
| ▧Xwizard.exeExecute custom class that has been added to the registry or download a file with Xwizard.exe | | OS Binaries | | 4 | ↗ |
| ◇Zipfldr.dllCompressed Folder library | | OS Libraries | | 1 | ↗ |
LOLBAS