fonts is a good guess, they are indeed parsed in kernel space by windows, dont ask me why
I agree that it could potentially be any driver (see the edit to my post), but trying to pin that down is well nigh impossible.
Line 325 of devices/scanner.py will do the trick.