# 💻 Windows Executables Reference Guide 📂
#CS #Win #edr 

## 📝 Overview

This document serves as a reference guide for various essential Windows executables. Each entry includes the filename, its default file location, and a brief description of its functionality. This can help with system administration, troubleshooting, and security monitoring. 🚀

---

|🖥️ Executable/Application|📌 Filepath |ℹ️ Description|
|---|---|---|
|**svchost.exe**|`C:\Windows\System32\svchost.exe`|Hosts services that run from DLLs.|
|**wininit.exe**|`C:\Windows\System32\wininit.exe`|Initializes parts of the operating system.|
|**explorer.exe**|`C:\Windows\explorer.exe`|Graphical interface, including taskbar and desktop.|
|**services.exe**|`C:\Windows\System32\services.exe`|Manages starting and stopping of system services.|
|**lsass.exe**|`C:\Windows\System32\lsass.exe`|Manages security policies, audits, and logins.|
|**winlogon.exe**|`C:\Windows\System32\winlogon.exe`|Manages user logins and logouts.|
|**taskmgr.exe**|`C:\Windows\System32\taskmgr.exe`|Task Manager, monitors applications and performance.|
|**smss.exe**|`C:\Windows\System32\smss.exe`|Session Manager Subsystem, handles user sessions.|
|**csrss.exe**|`C:\Windows\System32\csrss.exe`|Handles user interface and console operations.|
|**spoolsv.exe**|`C:\Windows\System32\spoolsv.exe`|Manages print and fax jobs.|
|**calc.exe**|`C:\Windows\System32\calc.exe`|Calculator app.|
|**cmd.exe**|`C:\Windows\System32\cmd.exe`|Command Prompt.|
|**notepad.exe**|`C:\Windows\System32\notepad.exe`|Text editor.|
|**mspaint.exe**|`C:\Windows\System32\mspaint.exe`|Microsoft Paint application.|
|**wmiprvse.exe**|`C:\Windows\System32\wmiprvse.exe`|WMI Provider Host, manages Windows Management Instrumentation.|
|**conhost.exe**|`C:\Windows\System32\conhost.exe`|Console Window Host, helps display UI elements in CLI apps.|
|**ctfmon.exe**|`C:\Windows\System32\ctfmon.exe`|Controls Text Framework Monitor, manages text input.|
|**dllhost.exe**|`C:\Windows\System32\dllhost.exe`|COM Surrogate, runs background COM objects separately.|
|**userinit.exe**|`C:\Windows\System32\userinit.exe`|Initializes user settings upon login.|
|**rundll32.exe**|`C:\Windows\System32\rundll32.exe`|Runs functions stored in DLL files.|
|**msconfig.exe**|`C:\Windows\System32\msconfig.exe`|System Configuration tool, adjusts boot options and services.|
|**regedit.exe**|`C:\Windows\regedit.exe`|Registry Editor, for accessing and configuring the Windows registry.|
|**eventvwr.exe**|`C:\Windows\System32\eventvwr.exe`|Event Viewer, for viewing system logs.|
|**msdt.exe**|`C:\Windows\System32\msdt.exe`|Microsoft Support Diagnostic Tool.|
|**perfmon.exe**|`C:\Windows\System32\perfmon.exe`|Performance Monitor, tracks system performance metrics.|
|**powershell.exe**|`C:\Windows\System32\WindowsPowerShell\v1.0\`|PowerShell, a command-line shell and scripting language.|
|**mmc.exe**|`C:\Windows\System32\mmc.exe`|Microsoft Management Console, hosts administrative tools.|
|**slui.exe**|`C:\Windows\System32\slui.exe`|Windows Activation Client.|
|**sfc.exe**|`C:\Windows\System32\sfc.exe`|System File Checker, repairs system files.|
|**diskmgmt.msc**|`C:\Windows\System32\diskmgmt.msc`|Disk Management snap-in.|
|**secpol.msc**|`C:\Windows\System32\secpol.msc`|Local Security Policy Editor.|
|**mstsc.exe**|`C:\Windows\System32\mstsc.exe`|Remote Desktop Connection.|
|**sndvol.exe**|`C:\Windows\System32\sndvol.exe`|Volume Mixer, to manage audio devices and sounds.|
|**fsquirt.exe**|`C:\Windows\System32\fsquirt.exe`|Bluetooth file transfer wizard.|
|**magnify.exe**|`C:\Windows\System32\magnify.exe`|Magnifier tool to enlarge parts of the screen.|
|**osk.exe**|`C:\Windows\System32\osk.exe`|On-Screen Keyboard.|
|**narrator.exe**|`C:\Windows\System32\narrator.exe`|Screen reader for the visually impaired.|
|**snippingtool.exe**|`C:\Windows\System32\snippingtool.exe`|Tool for capturing screen shots.|
|**sndrec32.exe**|`C:\Windows\System32\sndrec32.exe`|Sound Recorder, records audio played on the computer.|
|**write.exe**|`C:\Windows\System32\write.exe`|WordPad, a basic text-editing program.|
|**charmap.exe**|`C:\Windows\System32\charmap.exe`|Character Map, for viewing characters in fonts.|

---

🎯 **Use this guide to navigate essential Windows executables efficiently!** 🚀