VMware at the edge, licensed unfortunately. Balloon driver installed, good call, forgot to mention. It helps but the floor is still 780MB after my hardening.
Industrial HMI. Vendor certifies 2022 Standard only, no IoT, no Pro. They check OS version at launch. I asked.
The 23 processes: figured out 6 are VMware tools, 4 are .NET optimization background noise. Rest still unclear. Sysinternals Autoruns shows nothing I didn't already disable.