Viewing file:  ServerEnterprise.xml (71.7 KB) -rw-rw-rw-
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
1
2
1
2
1
2
2
2
2
1
1
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
2
2
2
1
1
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
2
2
2
1
1
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
2
2
2
0723000000000000000000000000000000000000000000000000000000000000
0
0723000000000000000000000000000000000000000000000000000000000000
0
0723000000000000000000000000000000000000000000000000000000000000
0
1
1
1
true
true
true
true
%SystemRoot%\System32\svchost.exe -k termsvcs
true
%SystemRoot%\System32\svchost.exe -k termsvcs
true
%SystemRoot%\System32\svchost.exe -k termsvcs
3
3
3
2
2
2
102 111 116
29 95 122
102 111 116
29 95 122
102 111 116
29 95 122
100
3
100
3
100
3
4
4
4
4
4
4
4
4
4
1
1
1
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
true
3
true
1
3
true
1
3
true
1
System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions
System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions
System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions
010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000
010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000
010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000
0
0
0
4
4
4
4
4
4
4
4
4
3
3
3
3
3
3
3
3
3
2
2
2
2
2
2
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
1
3
0
3
3
3
1
3
3
1
3
3
1
1
0
0
3
3
1
65536
3
3
3
3
3
3
0
3
3
3
3
3
3
3
3
3
3
0
3
3
3
0
3
73728
73728
73728
67
67
66816
0
0
0
0
1
1
no
no
no
1
1
0
1
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
1
3
0
3
3
3
1
3
3
1
3
3
1
1
0
0
3
3
1
65536
3
3
3
3
3
3
0
3
3
3
3
3
3
3
3
3
3
0
3
3
3
0
3
73728
73728
73728
67
67
66816
0
0
0
0
1
1
no
no
no
1
1
0
1
3
3
3
3
3
3
3
3
3
3
3
3
3
3
3
1
3
0
3
3
3
1
3
3
1
3
3
1
1
0
0
3
3
1
65536
3
3
3
3
3
3
0
3
3
3
3
3
3
3
3
3
3
0
3
3
3
0
3
73728
73728
73728
67
67
66816
0
0
0
0
1
1
no
no
no
1
1
0
1
%SystemRoot%\system32\wbadmin.msc
%SystemRoot%\system32\wbadmin.msc
%SystemRoot%\system32\wbadmin.msc
-1,2
-1,2
-1,2
bool(false)
|