Supported interpreters and processes

Kaspersky Endpoint Agent program monitors the execution of scripts by the following interpreters:

• cmd.exe;
• reg.exe;
• regedit.exe;
• regedt32.exe;
• cscript.exe;
• wscript.exe;
• mmc.exe;
• msiexec.exe;
• mshta.exe;
• rundll32.exe;
• runlegacycplelevated.exe;
• control.exe;
• explorer.exe;
• regsvr32.exe;
• wwahost.exe;
• powershell.exe;
• java.exe and javaw.exe (only if started with the –jar option);
• InstallUtil.exe;
• msdt.exe;
• python.exe;
• ruby.exe;
• rubyw.exe.

Information about the processes monitored by Kaspersky Endpoint Agent program is presented in the table below.

Processes and the file extensions that they open

Process	File extensions
winword.exe	rtf doc dot docm docx dotx dotm docb
excel.exe	xls xlt xlm xlsx xlsm xltx xltm xlsb xla xlam xll xlw
powerpnt.exe	ppt pot pps pptx pptm potx potm ppam ppsx ppsm sldx sldm
acrord32.exe	pdf
wordpad.exe	docx pdf
chrome.exe	pdf
MicrosoftEdge.exe	pdf

See also Viewing the Kaspersky Endpoint Agent host table on a standalone Central Node server Viewing the Kaspersky Endpoint Agent host table in distributed solution and multitenancy mode Viewing information about a host Filtering and searching hosts with Kaspersky Endpoint Agent by host name Filtering and searching hosts with Kaspersky Endpoint Agent that have been isolated from the network Filtering and searching hosts with Kaspersky Endpoint Agent by PCN and SCN server names Filtering and searching hosts with Kaspersky Endpoint Agent by computer IP address Filtering and searching hosts with Kaspersky Endpoint Agent by operating system version on the computer Filtering and searching hosts with Kaspersky Endpoint Agent by Kaspersky Endpoint Agent version Filtering and searching hosts with Kaspersky Endpoint Agent based on their activity Quickly creating a filter for hosts with Kaspersky Endpoint Agent Resetting the hosts with Kaspersky Endpoint Agent filter Configuring activity indicators of Kaspersky Endpoint Agent

Page top