Universal forwarder executes regmon, powershells and others with out them beeing explicitly configured

Hi, why is my UF on Windows executing various splunk-* tools without them beeing configured in any input? Every few minutes I see them in sysmon: splunk-powershell.exe splunk-regmon.exe splunk-powershell.exe splunk-netmon.exe splunk-admon.exe splunk-MonitorNoHandle.exe splunk-winprintmon.exe I do not see them in any inputs.conf. thx afx