Windows NT KAMIDAKI 10.0 build 19045 (Windows 10) AMD64
Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.3.9
Server IP : 192.168.3.16 & Your IP : 216.73.216.52
Domains :
Cant Read [ /etc/named.conf ]
User : SISTEMA
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
C: /
Windows /
System32 /
wbem /
Delete
Unzip
Name
Size
Permission
Date
Action
AutoRecover
[ DIR ]
drwxrwxrwx
2025-07-24 00:32
Logs
[ DIR ]
drwxrwxrwx
2024-02-15 05:13
MOF
[ DIR ]
drwxrwxrwx
2022-09-17 00:07
Performance
[ DIR ]
drwxrwxrwx
2025-07-09 08:26
Repository
[ DIR ]
drwxrwxrwx
2025-07-09 08:22
en
[ DIR ]
drwxrwxrwx
2023-03-23 12:54
en-US
[ DIR ]
drwxrwxrwx
2023-12-13 09:12
pt-BR
[ DIR ]
drwxrwxrwx
2023-12-13 09:12
tmf
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
xml
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
AgentWmi.mof
17.1
KB
-rw-rw-rw-
2019-12-07 15:56
AgentWmiUninstall.mof
693
B
-rw-rw-rw-
2019-12-07 10:10
AuditRsop.mof
1.68
KB
-rw-rw-rw-
2019-12-07 10:09
BthMtpEnum.mof
2.56
KB
-rw-rw-rw-
2019-12-07 10:10
CIWmi.mof
2.04
KB
-rw-rw-rw-
2019-12-07 10:10
DMWmiBridgeProv.dll
4.26
MB
-rw-rw-rw-
2025-05-14 02:03
DMWmiBridgeProv.mof
316.47
KB
-rw-rw-rw-
2024-08-14 15:28
DMWmiBridgeProv1.dll
1015.5
KB
-rw-rw-rw-
2025-05-14 02:03
DMWmiBridgeProv1.mof
36.87
KB
-rw-rw-rw-
2023-12-13 08:39
DMWmiBridgeProv1_Uninstall.mof
5.53
KB
-rw-rw-rw-
2022-09-18 10:13
DMWmiBridgeProv_Uninstall.mof
18.57
KB
-rw-rw-rw-
2021-10-06 15:33
DscCore.mof
34.23
KB
-rw-rw-rw-
2019-12-07 10:09
DscCoreConfProv.mof
6.52
KB
-rw-rw-rw-
2019-12-07 10:09
DscTimer.mof
1.63
KB
-rw-rw-rw-
2019-12-07 10:09
Dscpspluginwkr.dll
19
KB
-rw-rw-rw-
2019-12-07 10:09
EmbeddedLockdownWmi.dll
114.88
KB
-rw-rw-rw-
2024-05-16 16:43
EventTracingManagement.dll
108
KB
-rw-rw-rw-
2023-11-16 03:01
EventTracingManagement.mof
8.65
KB
-rw-rw-rw-
2019-12-07 10:09
FolderRedirectionWMIProvider.mof
8.79
KB
-rw-rw-rw-
2019-12-07 10:08
FunDisc.mof
702
B
-rw-rw-rw-
2019-12-07 10:08
IMAPIv2-Base.mof
31.36
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-FileSystemSupport.mof
2.03
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-LegacyShim.mof
759
B
-rw-rw-rw-
2019-12-07 10:09
IpmiDTrc.mof
638
B
-rw-rw-rw-
2019-12-07 10:08
IpmiPTrc.mof
763
B
-rw-rw-rw-
2019-12-07 10:08
KrnlProv.dll
73
KB
-rw-rw-rw-
2023-11-16 02:58
L2SecHC.mof
2.28
KB
-rw-rw-rw-
2019-12-07 10:08
MDMAppProv.dll
198.5
KB
-rw-rw-rw-
2025-05-14 02:03
MDMAppProv.mof
6.36
KB
-rw-rw-rw-
2019-12-07 10:08
MDMAppProv_Uninstall.mof
1.84
KB
-rw-rw-rw-
2019-12-07 10:08
MDMSettingsProv.dll
680
KB
-rw-rw-rw-
2025-06-10 19:43
MDMSettingsProv.mof
17.97
KB
-rw-rw-rw-
2019-12-07 10:08
MDMSettingsProv_Uninstall.mof
3.23
KB
-rw-rw-rw-
2019-12-07 10:08
MMFUtil.dll
22
KB
-rw-rw-rw-
2019-12-07 10:08
Microsoft-Windows-OfflineFiles.mof
1.73
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft-Windows-Remote-FileSystem.mof
776
B
-rw-rw-rw-
2019-12-07 10:09
Microsoft.AppV.AppVClientWmi.dll
31.98
KB
-rw-rw-rw-
2023-11-16 03:01
Microsoft.AppV.AppVClientWmi.mof
11.42
KB
-rw-rw-rw-
2019-12-07 15:56
Microsoft.Uev.AgentWmi.dll
1.49
MB
-rw-rw-rw-
2025-06-10 19:46
Microsoft.Uev.ManagedAgentWmi.mof
3.06
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft.Uev.ManagedAgentWmiUninstall.mof
514
B
-rw-rw-rw-
2019-12-07 10:10
MsDtcWmi.mof
21.02
KB
-rw-rw-rw-
2019-12-07 10:09
MsNetImPlatform.mof
42.72
KB
-rw-rw-rw-
2019-12-07 10:09
NCProv.dll
111.5
KB
-rw-rw-rw-
2024-06-13 15:19
NetAdapterCim.dll
668
KB
-rw-rw-rw-
2024-05-16 16:41
NetAdapterCim.mof
145.14
KB
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCimTrace.mof
3.92
KB
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCimTraceUninstall.mof
188
B
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCim_uninstall.mof
10.6
KB
-rw-rw-rw-
2019-12-07 10:08
NetEventPacketCapture.dll
296
KB
-rw-rw-rw-
2025-05-14 02:05
NetEventPacketCapture.mof
15.45
KB
-rw-rw-rw-
2019-12-07 10:09
NetEventPacketCapture_uninstall.mof
2.19
KB
-rw-rw-rw-
2019-12-07 10:09
NetPeerDistCim.dll
1.46
MB
-rw-rw-rw-
2023-11-16 03:01
NetPeerDistCim.mof
27.92
KB
-rw-rw-rw-
2019-12-07 15:56
NetPeerDistCim_uninstall.mof
2.09
KB
-rw-rw-rw-
2019-12-07 10:10
NetSwitchTeam.mof
27.67
KB
-rw-rw-rw-
2019-12-07 10:09
NetTCPIP.dll
515
KB
-rw-rw-rw-
2024-12-11 09:43
NetTCPIP.mof
86.17
KB
-rw-rw-rw-
2019-12-07 10:08
NetTCPIP_Uninstall.mof
3.1
KB
-rw-rw-rw-
2019-12-07 10:08
OfflineFilesConfigurationWmiProvider.mof
5.43
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesConfigurationWmiProvider_Uninstall.mof
800
B
-rw-rw-rw-
2019-12-07 10:10
OfflineFilesWmiProvider.mof
14.25
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesWmiProvider_Uninstall.mof
2.11
KB
-rw-rw-rw-
2019-12-07 10:10
PNPXAssoc.mof
665
B
-rw-rw-rw-
2019-12-07 10:09
PS_MMAgent.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:09
PolicMan.dll
111
KB
-rw-rw-rw-
2019-12-07 15:56
PolicMan.mof
11.87
KB
-rw-rw-rw-
2019-12-07 15:56
PowerPolicyProvider.mof
26.68
KB
-rw-rw-rw-
2019-12-07 10:09
PrintFilterPipelineSvc.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:08
PrintManagementProvider.dll
257.5
KB
-rw-rw-rw-
2025-05-14 02:05
PrintManagementProvider.mof
16.43
KB
-rw-rw-rw-
2022-09-18 10:15
PrintManagementProvider_Uninstall.mof
2.42
KB
-rw-rw-rw-
2022-09-18 10:15
RacWmiProv.dll
74
KB
-rw-rw-rw-
2019-12-07 10:09
RacWmiProv.mof
2.96
KB
-rw-rw-rw-
2019-12-07 10:09
Remove.Microsoft.AppV.AppvClientWmi.mof
830
B
-rw-rw-rw-
2019-12-07 10:10
SMTPCons.dll
49
KB
-rw-rw-rw-
2019-12-07 10:08
SchedProv.mof
49.88
KB
-rw-rw-rw-
2019-12-07 10:09
SensorsClassExtension.mof
2.42
KB
-rw-rw-rw-
2019-12-07 10:08
ServDeps.dll
136
KB
-rw-rw-rw-
2023-11-16 02:58
ServiceModel.mof
86.31
KB
-rw-rw-rw-
2019-12-07 10:12
ServiceModel.mof.uninstall
896
B
-rw-rw-rw-
2019-12-07 10:12
ServiceModel35.mof
12.63
KB
-rw-rw-rw-
2019-12-07 10:10
ServiceModel35.mof.uninstall
684
B
-rw-rw-rw-
2019-12-07 10:10
SmbWitnessWmiv2Provider.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:08
UserProfileConfigurationWmiProvider.mof
18.34
KB
-rw-rw-rw-
2019-12-07 10:08
UserProfileWmiProvider.mof
19.39
KB
-rw-rw-rw-
2019-12-07 10:08
UserStateWMIProvider.mof
3.18
KB
-rw-rw-rw-
2019-12-07 10:08
WBEMCons.mof
18.14
KB
-rw-rw-rw-
2019-12-07 10:08
WFAPIGP.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:08
WFP.MOF
822
B
-rw-rw-rw-
2019-12-07 10:08
WLanHC.mof
1.28
KB
-rw-rw-rw-
2019-12-07 10:08
WMIADAP.exe
178
KB
-rwxrwxrwx
2024-06-13 15:19
WMIC.exe
563
KB
-rwxrwxrwx
2025-05-14 02:03
WMICOOKR.dll
92.5
KB
-rw-rw-rw-
2024-06-13 15:19
WMIPICMP.dll
145
KB
-rw-rw-rw-
2025-05-14 02:03
WMIPIPRT.dll
83.5
KB
-rw-rw-rw-
2019-12-07 10:08
WMIPJOBJ.dll
98.5
KB
-rw-rw-rw-
2019-12-07 10:08
WMIPSESS.dll
60
KB
-rw-rw-rw-
2019-12-07 10:08
WMI_Tracing.mof
1.64
KB
-rw-rw-rw-
2019-12-07 10:08
WMIsvc.dll
238
KB
-rw-rw-rw-
2024-06-13 15:19
WPDShServiceObj.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:10
WUDFx.mof
35.86
KB
-rw-rw-rw-
2019-12-07 10:08
WUDFxUninstall.mof
524
B
-rw-rw-rw-
2019-12-07 10:08
WdacEtwProv.mof
64.78
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv.dll
143
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv.mof
16.95
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv_Uninstall.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:09
Wdf01000.mof
4.39
KB
-rw-rw-rw-
2019-12-07 10:08
Wdf01000Uninstall.mof
112
B
-rw-rw-rw-
2019-12-07 10:08
Win32_DeviceGuard.mof
3.3
KB
-rw-rw-rw-
2023-09-13 16:13
Win32_EncryptableVolume.dll
245
KB
-rw-rw-rw-
2025-07-09 07:55
Win32_EncryptableVolumeUninstall.mof
363
B
-rw-rw-rw-
2019-12-07 10:10
Win32_Tpm.dll
81
KB
-rw-rw-rw-
2025-07-09 07:54
Win32_Tpm.mof
24.04
KB
-rw-rw-rw-
2019-12-07 10:08
WinMgmt.exe
81
KB
-rwxrwxrwx
2024-06-13 15:19
WinMgmtR.dll
33
KB
-rw-rw-rw-
2024-06-13 15:19
Winsat.mof
1.51
KB
-rw-rw-rw-
2019-12-07 10:09
WinsatUninstall.mof
487
B
-rw-rw-rw-
2019-12-07 10:09
WmiApRes.dll
2.5
KB
-rw-rw-rw-
2024-06-13 15:19
WmiApRpl.dll
137.5
KB
-rw-rw-rw-
2024-06-13 15:19
WmiApSrv.exe
205
KB
-rwxrwxrwx
2024-06-13 15:19
WmiDcPrv.dll
189.5
KB
-rw-rw-rw-
2023-11-16 02:59
WmiPerfClass.dll
137.5
KB
-rw-rw-rw-
2019-12-07 10:09
WmiPerfClass.mof
980
B
-rw-rw-rw-
2019-12-07 10:09
WmiPerfInst.dll
65
KB
-rw-rw-rw-
2019-12-07 10:09
WmiPerfInst.mof
804
B
-rw-rw-rw-
2019-12-07 10:09
WmiPrvSD.dll
838
KB
-rw-rw-rw-
2023-11-16 02:59
WmiPrvSE.exe
485
KB
-rwxrwxrwx
2023-11-16 02:59
WsmAgent.mof
822
B
-rw-rw-rw-
2019-12-07 10:08
WsmAgentUninstall.mof
754
B
-rw-rw-rw-
2019-12-07 10:08
WsmAuto.mof
4.42
KB
-rw-rw-rw-
2019-12-07 10:08
Wudfx02000.mof
3.49
KB
-rw-rw-rw-
2019-12-07 10:08
Wudfx02000Uninstall.mof
122
B
-rw-rw-rw-
2019-12-07 10:08
aeinv.mof
2.79
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask.dll
39.5
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask.mof
2.83
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask_uninstall.mof
852
B
-rw-rw-rw-
2019-12-07 10:08
authfwcfg.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:09
bcd.mof
11.84
KB
-rw-rw-rw-
2019-12-07 10:08
cimdmtf.mof
157.39
KB
-rw-rw-rw-
2019-12-07 10:09
cimwin32.dll
2.01
MB
-rw-rw-rw-
2025-05-14 02:04
cimwin32.mof
2.59
MB
-rw-rw-rw-
2019-12-07 10:08
classlog.mof
4.85
KB
-rw-rw-rw-
2019-12-07 10:08
cli.mof
31.86
KB
-rw-rw-rw-
2019-12-07 10:08
cliegaliases.mof
2.68
MB
-rw-rw-rw-
2019-12-07 10:08
ddp.mof
2.64
KB
-rw-rw-rw-
2019-12-07 10:10
dimsjob.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
dimsroam.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientcim.dll
123.5
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientcim.mof
61.98
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider.dll
187.5
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider.mof
14.3
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider_Uninstall.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
drvinst.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
dscproxy.mof
1.12
KB
-rw-rw-rw-
2019-12-07 10:09
dsprov.dll
195.5
KB
-rw-rw-rw-
2025-05-14 02:03
dsprov.mof
18.02
KB
-rw-rw-rw-
2019-12-07 10:08
eaimeapi.mof
1.27
KB
-rw-rw-rw-
2019-12-07 10:09
embeddedlockdownwmi.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:10
embeddedlockdownwmi_Uninstall.mof
720
B
-rw-rw-rw-
2019-12-07 10:10
esscli.dll
480
KB
-rw-rw-rw-
2024-06-13 15:19
fastprox.dll
1.03
MB
-rw-rw-rw-
2025-05-14 02:03
fdPHost.mof
719
B
-rw-rw-rw-
2019-12-07 10:08
fdSSDP.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdWNet.mof
716
B
-rw-rw-rw-
2019-12-07 10:08
fdWSD.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdrespub.mof
736
B
-rw-rw-rw-
2019-12-07 10:08
filetrace.mof
16.64
KB
-rw-rw-rw-
2019-12-07 10:08
firewallapi.mof
1.88
KB
-rw-rw-rw-
2019-12-07 10:08
fwcfg.mof
1.06
KB
-rw-rw-rw-
2019-12-07 10:09
hbaapi.mof
471.2
KB
-rw-rw-rw-
2019-12-07 10:09
hnetcfg.mof
8.41
KB
-rw-rw-rw-
2019-12-07 10:09
interop.mof
37.14
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprr.dll
3.5
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprv.dll
204.5
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprv.mof
207.81
KB
-rw-rw-rw-
2019-12-07 10:08
ipsecsvc.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:08
iscsidsc.mof
19.41
KB
-rw-rw-rw-
2019-12-07 10:09
iscsihba.mof
111.33
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiprf.mof
44.96
KB
-rw-rw-rw-
2019-12-07 10:09
iscsirem.mof
4.4
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2.mof
36.29
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
kerberos.mof
8.55
KB
-rw-rw-rw-
2019-12-07 10:09
krnlprov.mof
14.49
KB
-rw-rw-rw-
2019-12-07 10:08
lltdio.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:08
lltdsvc.mof
1.65
KB
-rw-rw-rw-
2019-12-07 10:08
lsasrv.mof
13.46
KB
-rw-rw-rw-
2019-12-07 10:09
mblctr.mof
2.95
KB
-rw-rw-rw-
2019-12-07 10:09
mispace.mof
1.04
MB
-rw-rw-rw-
2019-12-07 10:09
mispace_uninstall.mof
9.12
KB
-rw-rw-rw-
2019-12-07 10:09
mmc.mof
698
B
-rw-rw-rw-
2019-12-07 10:09
mofcomp.exe
32
KB
-rwxrwxrwx
2024-06-13 15:19
mofd.dll
259.5
KB
-rw-rw-rw-
2024-06-13 15:19
mofinstall.dll
88.5
KB
-rw-rw-rw-
2023-11-16 02:58
mountmgr.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:08
mpeval.mof
14.08
KB
-rw-rw-rw-
2019-12-07 10:09
mpsdrv.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:08
mpssvc.mof
1.87
KB
-rw-rw-rw-
2019-12-07 10:08
msdtcwmi.dll
209
KB
-rw-rw-rw-
2025-05-14 02:05
msfeeds.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:09
msfeedsbs.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:09
msi.mof
168.56
KB
-rw-rw-rw-
2019-12-07 10:08
msiprov.dll
424
KB
-rw-rw-rw-
2025-05-14 02:03
msiscsi.mof
4.69
KB
-rw-rw-rw-
2019-12-07 10:09
mstsc.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:09
mstscax.mof
2.01
KB
-rw-rw-rw-
2019-12-07 10:09
msv1_0.mof
7.54
KB
-rw-rw-rw-
2019-12-07 10:09
mswmdm.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:10
ncprov.mof
2.89
KB
-rw-rw-rw-
2019-12-07 10:08
ncsi.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
ndisimplatcim.dll
258
KB
-rw-rw-rw-
2024-05-16 16:41
ndistrace.mof
3.82
KB
-rw-rw-rw-
2019-12-07 10:08
netdacim.dll
83
KB
-rw-rw-rw-
2019-12-07 10:09
netdacim.mof
7.2
KB
-rw-rw-rw-
2019-12-07 10:09
netdacim_uninstall.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim.dll
43.5
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim.mof
4.51
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim_uninstall.mof
1.12
KB
-rw-rw-rw-
2019-12-07 10:09
netprofm.mof
1.09
KB
-rw-rw-rw-
2019-12-07 10:09
netswitchteamcim.dll
175
KB
-rw-rw-rw-
2024-05-16 16:41
netttcim.dll
262
KB
-rw-rw-rw-
2019-12-07 10:09
netttcim.mof
58.83
KB
-rw-rw-rw-
2019-12-07 10:09
netttcim_uninstall.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:09
networkitemfactory.mof
683
B
-rw-rw-rw-
2019-12-07 10:08
newdev.mof
3.59
KB
-rw-rw-rw-
2019-12-07 10:09
nlasvc.mof
3.74
KB
-rw-rw-rw-
2019-12-07 10:09
nlmcim.dll
69
KB
-rw-rw-rw-
2025-05-14 02:04
nlmcim.mof
1.73
KB
-rw-rw-rw-
2022-12-14 11:23
nlmcim_uninstall.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
nlsvc.mof
2.81
KB
-rw-rw-rw-
2019-12-07 10:09
npivwmi.mof
31.5
KB
-rw-rw-rw-
2019-12-07 10:09
nshipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:08
ntevt.dll
280.5
KB
-rw-rw-rw-
2025-05-14 02:03
ntevt.mof
43.24
KB
-rw-rw-rw-
2019-12-07 10:08
ntfs.mof
308
B
-rw-rw-rw-
2019-12-07 10:08
p2p-mesh.mof
2.32
KB
-rw-rw-rw-
2019-12-07 10:09
p2p-pnrp.mof
2.24
KB
-rw-rw-rw-
2019-12-07 10:09
pcsvDevice.mof
72.75
KB
-rw-rw-rw-
2019-12-07 10:08
pcsvDevice_Uninstall.mof
1.2
KB
-rw-rw-rw-
2019-12-07 10:08
polproc.mof
9.23
KB
-rw-rw-rw-
2019-12-07 15:56
polprocl.mof
29.08
KB
-rw-rw-rw-
2019-12-07 15:56
polprou.mof
10.69
KB
-rw-rw-rw-
2019-12-07 15:56
polstore.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:08
portabledeviceapi.mof
4.2
KB
-rw-rw-rw-
2019-12-07 15:56
portabledeviceclassextension.mof
3.13
KB
-rw-rw-rw-
2019-12-07 10:10
portabledeviceconnectapi.mof
1.74
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicetypes.mof
3.41
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicewiacompat.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:10
powermeterprovider.mof
12.51
KB
-rw-rw-rw-
2019-12-07 10:09
ppcRsopCompSchema.mof
1.95
KB
-rw-rw-rw-
2019-12-07 10:08
ppcRsopUserSchema.mof
1.94
KB
-rw-rw-rw-
2019-12-07 10:08
profileassociationprovider.mof
12.72
KB
-rw-rw-rw-
2019-12-07 10:09
qmgr.mof
2.25
KB
-rw-rw-rw-
2019-12-07 10:08
qoswmi.dll
131
KB
-rw-rw-rw-
2025-05-14 02:04
qoswmi.mof
6.42
KB
-rw-rw-rw-
2019-12-07 10:09
qoswmi_uninstall.mof
746
B
-rw-rw-rw-
2019-12-07 10:09
qoswmitrc.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:09
qoswmitrc_uninstall.mof
172
B
-rw-rw-rw-
2019-12-07 10:09
rawxml.xsl
623
B
-rw-rw-rw-
2019-12-07 10:08
rdpendp.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
rdpinit.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
rdpshell.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
refs.mof
2.12
KB
-rw-rw-rw-
2019-12-07 10:08
refsv1.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:08
regevent.mof
109.08
KB
-rw-rw-rw-
2019-12-07 10:08
repdrvfs.dll
427.5
KB
-rw-rw-rw-
2025-05-14 02:03
rsop.mof
102.95
KB
-rw-rw-rw-
2019-12-07 10:08
rspndr.mof
2.17
KB
-rw-rw-rw-
2019-12-07 10:08
samsrv.mof
61.08
KB
-rw-rw-rw-
2019-12-07 10:09
scersop.mof
8.12
KB
-rw-rw-rw-
2019-12-07 10:09
schannel.mof
1.05
KB
-rw-rw-rw-
2019-12-07 10:09
schedprov.dll
337
KB
-rw-rw-rw-
2023-11-16 02:59
scm.mof
19.31
KB
-rw-rw-rw-
2019-12-07 10:09
scrcons.exe
51.5
KB
-rwxrwxrwx
2019-12-07 10:08
scrcons.mof
5.61
KB
-rw-rw-rw-
2019-12-07 10:08
sdbus.mof
3.68
KB
-rw-rw-rw-
2019-12-07 10:08
secrcw32.mof
62.78
KB
-rw-rw-rw-
2019-12-07 10:08
services.mof
2.8
KB
-rw-rw-rw-
2019-12-07 10:09
setupapi.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
smbwmiv2.mof
21.67
KB
-rw-rw-rw-
2021-10-06 15:33
smtpcons.mof
4.18
KB
-rw-rw-rw-
2019-12-07 10:08
sppwmi.mof
65.11
KB
-rw-rw-rw-
2019-12-07 10:08
sr.mof
3.79
KB
-rw-rw-rw-
2019-12-07 10:09
sstpsvc.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:09
stdprov.dll
141.5
KB
-rw-rw-rw-
2019-12-07 10:08
storagewmi.mof
329.9
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru.mof
1.85
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru_uninstall.mof
1.61
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_uninstall.mof
13.16
KB
-rw-rw-rw-
2019-12-07 10:09
stortrace.mof
17.52
KB
-rw-rw-rw-
2019-12-07 10:08
subscrpt.mof
668
B
-rw-rw-rw-
2019-12-07 10:08
system.mof
123.95
KB
-rw-rw-rw-
2019-12-07 10:08
tcpip.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:09
texttable.xsl
6.13
KB
-rw-rw-rw-
2019-12-07 10:08
textvaluelist.xsl
2.7
KB
-rw-rw-rw-
2019-12-07 10:08
tsallow.mof
16.67
KB
-rw-rw-rw-
2019-12-07 15:56
tscfgwmi.mof
65.83
KB
-rw-rw-rw-
2019-12-07 15:56
tsmf.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
tspkg.mof
1.04
KB
-rw-rw-rw-
2019-12-07 10:09
umb.mof
646
B
-rw-rw-rw-
2019-12-07 10:09
umbus.mof
2.4
KB
-rw-rw-rw-
2019-12-07 10:09
umpass.mof
2.4
KB
-rw-rw-rw-
2019-12-07 10:09
umpnpmgr.mof
3.61
KB
-rw-rw-rw-
2019-12-07 10:09
unsecapp.exe
53
KB
-rwxrwxrwx
2024-06-13 15:19
vds.mof
59.63
KB
-rw-rw-rw-
2019-12-07 10:08
vdswmi.dll
233
KB
-rw-rw-rw-
2019-12-07 10:08
viewprov.dll
210
KB
-rw-rw-rw-
2025-05-14 02:03
vpnclientpsprovider.dll
624
KB
-rw-rw-rw-
2024-03-13 07:54
vpnclientpsprovider.mof
45.96
KB
-rw-rw-rw-
2019-12-07 10:09
vpnclientpsprovider_Uninstall.mof
3.58
KB
-rw-rw-rw-
2019-12-07 10:09
vss.mof
59.05
KB
-rw-rw-rw-
2019-12-07 10:09
vsswmi.dll
150
KB
-rw-rw-rw-
2019-12-07 10:09
wbemcntl.dll
350
KB
-rw-rw-rw-
2023-11-16 02:58
wbemcons.dll
75
KB
-rw-rw-rw-
2019-12-07 10:08
wbemcore.dll
1.86
MB
-rw-rw-rw-
2025-05-14 02:03
wbemdisp.dll
291.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemdisp.tlb
58.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemess.dll
502.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemprox.dll
45
KB
-rw-rw-rw-
2024-06-13 15:19
wbemsvc.dll
62
KB
-rw-rw-rw-
2024-06-13 15:19
wbemtest.exe
214.5
KB
-rwxrwxrwx
2019-12-07 10:08
wcncsvc.mof
3.71
KB
-rw-rw-rw-
2019-12-07 10:08
wdigest.mof
1.08
KB
-rw-rw-rw-
2019-12-07 10:09
wfascim.dll
892.5
KB
-rw-rw-rw-
2023-11-16 02:59
wfascim.mof
263.86
KB
-rw-rw-rw-
2023-05-10 07:48
wfascim_uninstall.mof
6.71
KB
-rw-rw-rw-
2022-09-18 10:14
wfs.mof
2.09
KB
-rw-rw-rw-
2019-12-06 20:55
whqlprov.mof
3.88
KB
-rw-rw-rw-
2019-12-07 10:09
win32_encryptablevolume.mof
19.63
KB
-rw-rw-rw-
2019-12-07 15:56
win32_printer.mof
95
KB
-rw-rw-rw-
2019-12-07 10:08
wininit.mof
1.71
KB
-rw-rw-rw-
2019-12-07 10:08
winipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:08
winlogon.mof
3.12
KB
-rw-rw-rw-
2019-12-07 10:08
wlan.mof
12.58
KB
-rw-rw-rw-
2019-12-07 10:08
wmi.mof
11.8
KB
-rw-rw-rw-
2019-12-07 10:08
wmipcima.dll
172
KB
-rw-rw-rw-
2023-11-16 02:58
wmipcima.mof
41.01
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdfs.dll
63.5
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdfs.mof
14.45
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdskq.dll
124
KB
-rw-rw-rw-
2023-11-16 02:58
wmipdskq.mof
13.2
KB
-rw-rw-rw-
2019-12-07 10:08
wmipicmp.mof
19.87
KB
-rw-rw-rw-
2019-12-07 10:08
wmipiprt.mof
23.61
KB
-rw-rw-rw-
2019-12-07 10:08
wmipjobj.mof
60.01
KB
-rw-rw-rw-
2019-12-07 10:08
wmiprov.dll
221
KB
-rw-rw-rw-
2024-06-13 15:19
wmipsess.mof
13.72
KB
-rw-rw-rw-
2019-12-07 10:08
wmitimep.dll
59.5
KB
-rw-rw-rw-
2019-12-07 10:08
wmitimep.mof
6.44
KB
-rw-rw-rw-
2019-12-07 10:08
wmiutils.dll
135.5
KB
-rw-rw-rw-
2024-06-13 15:19
wmp.mof
4.77
KB
-rw-rw-rw-
2019-10-15 15:46
wmpnetwk.mof
4.68
KB
-rw-rw-rw-
2019-10-15 15:49
wpd_ci.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:10
wpdbusenum.mof
2.74
KB
-rw-rw-rw-
2019-12-07 10:10
wpdcomp.mof
2.75
KB
-rw-rw-rw-
2019-12-07 10:10
wpdfs.mof
2.68
KB
-rw-rw-rw-
2019-12-07 10:10
wpdmtp.mof
3.27
KB
-rw-rw-rw-
2019-12-07 10:10
wpdshext.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:10
wpdsp.mof
2.92
KB
-rw-rw-rw-
2019-12-07 10:10
wscenter.mof
5.81
KB
-rw-rw-rw-
2023-03-15 03:02
wsp_fs.mof
548.78
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_fs_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health.mof
554.91
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health_uninstall.mof
2.31
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr.mof
592.55
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr_uninstall.mof
3.38
KB
-rw-rw-rw-
2019-12-07 10:09
xsl-mappings.xml
2.8
KB
-rw-rw-rw-
2019-12-07 10:08
xwizards.mof
2.15
KB
-rw-rw-rw-
2019-12-07 10:09
Save
Rename
//********************************************* // *** Active Directory Service Provider: SAM //********************************************* #pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") [Dynamic, Description("Active Directory Domain Services: SAM") : amended, Guid("{8e598056-8993-11d2-819e-0000f875a064}"), locale("MS\\0x409")] class MSSAMTrace:EventTrace { }; [Dynamic, Description("SAM User Create") : amended, Guid("{39511dbe-899b-11d2-819e-0000f875a064}"), DisplayName("SamUserCreate"), locale("MS\\0x409") ] class SamUserCreate:MSSAMTrace { }; [Dynamic, Description("SAM User Create") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamUserCreate_Start:SamUserCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM User Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamUserCreate_End:SamUserCreate { }; [Dynamic, Description("SAM Computer Create") : amended, Guid("{abb14b68-899b-11d2-819e-0000f875a064}"), DisplayName("SamCompCreate"), locale("MS\\0x409") ] class SamCompCreate:MSSAMTrace { }; [Dynamic, Description("SAM Computer Create"), EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCompCreate_Start:SamCompCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Computer Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCompCreate_End:SamCompCreate { }; [Dynamic, Description("SAM Group Create") : amended, Guid("{c8eb5e5c-899c-11d2-819e-0000f875a064}"), DisplayName("SamGrpCreate"), locale("MS\\0x409") ] class SamGrpCreate:MSSAMTrace { }; [Dynamic, Description("SAM Group Create") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGrpCreate_Start:SamGrpCreate { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Group Create") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGrpCreate_End:SamGrpCreate { }; [Dynamic, Description("SAM Add Member to Group") : amended, Guid("{f9d2ba6a-899c-11d2-819e-0000f875a064}"), DisplayName("SamAddMemGrp"), locale("MS\\0x409") ] class SamAddMemGrp:MSSAMTrace { }; [Dynamic, Description("SAM Add Member to Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamAddMemGrp_Start:SamAddMemGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Add Member to Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamAddMemGrp_End:SamAddMemGrp { }; [Dynamic, Description("SAM Delete Member From Group") : amended, Guid("{250959aa-899d-11d2-819e-0000f875a064}"), DisplayName("SamDelMemGrp"), locale("MS\\0x409") ] class SamDelMemGrp:MSSAMTrace { }; [Dynamic, Description("SAM Delete Member From Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDelMemGrp_Start:SamDelMemGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Member From Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDelMemGrp_End:SamDelMemGrp { }; [Dynamic, Description("SAM Password Change") : amended, Guid("{45fc997e-899d-11d2-819e-0000f875a064}"), DisplayName("SamPwdChng"), locale("MS\\0x409") ] class SamPwdChng:MSSAMTrace { }; [Dynamic, Description("SAM Password Change") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamPwdChng_Start:SamPwdChng { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Password Change") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamPwdChng_End:SamPwdChng { }; [Dynamic, Description("SAM User Password Set") : amended, Guid("{62bef71e-899d-11d2-819e-0000f875a064}"), DisplayName("SamUserPwdSet"), locale("MS\\0x409") ] class SamUserPwdSet:MSSAMTrace { }; [Dynamic, Description("SAM User Password Set") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamUserPwdSet_Start:SamUserPwdSet { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM User Password Set") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamUserPwdSet_End:SamUserPwdSet { }; [Dynamic, Description("SAM Computer Password Set") : amended, Guid("{880217b8-899d-11d2-819e-0000f875a064}"), DisplayName("SamCompPwdSet"), locale("MS\\0x409") ] class SamCompPwdSet:MSSAMTrace { }; [Dynamic, Description("SAM Computer Password Set") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCompPwdSet_Start:SamCompPwdSet { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Computer Password Set") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCompPwdSet_End:SamCompPwdSet { }; [Dynamic, Description("SAM Password Push PDC") : amended, Guid("{1f228de8-8a6c-11d2-819e-0000f875a064}"), DisplayName("SamPwdPushPdc"), locale("MS\\0x409") ] class SamPwdPushPdc:MSSAMTrace { }; [Dynamic, Description("SAM Password Push PDC") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamPwdPushPdc_Start:SamPwdPushPdc { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Password Push PDC") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamPwdPushPdc_End:SamPwdPushPdc { }; [Dynamic, Description("SAM Id By Name") : amended, Guid("{a41d90bc-899d-11d2-819e-0000f875a064}"), DisplayName("SamIdByName"), locale("MS\\0x409") ] class SamIdByName:MSSAMTrace { }; [Dynamic, Description("SAM Id By Name") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamIdByName_Start:SamIdByName { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Id By Name") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamIdByName_End:SamIdByName { }; [Dynamic, Description("SAM Name By Id") : amended, Guid("{25059476-899f-11d2-819e-0000f875a064}"), DisplayName("SamNameById"), locale("MS\\0x409") ] class SamNameById:MSSAMTrace { }; [Dynamic, Description("SAM Name By Id") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamNameById_Start:SamNameById { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Name By Id") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamNameById_End:SamNameById { }; [Dynamic, Description("SAM Connect") : amended, Guid("{8c89045c-3f5d-4289-939a-fb854000cb6b}"), DisplayName("SamConnect"), locale("MS\\0x409") ] class SamConnect:MSSAMTrace { }; [Dynamic, Description("SAM Connect") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamConnect_Start:SamConnect { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Connect") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamConnect_End:SamConnect { }; [Dynamic, Description("SAM Close Handle") : amended, Guid("{dbc0ceab-cff3-4c0f-85f2-0c2107142f36}"), DisplayName("SamCloseHandle"), locale("MS\\0x409") ] class SamCloseHandle:MSSAMTrace { }; [Dynamic, Description("SAM Close Handle") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCloseHandle_Start:SamCloseHandle { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Close Handle") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCloseHandle_End:SamCloseHandle { }; [Dynamic, Description("SAM Set Security Object") : amended, Guid("{74e10cbb-202e-4a97-871d-8547972b5141}"), DisplayName("SamSetSecurityObj"), locale("MS\\0x409") ] class SamSetSecurityObj:MSSAMTrace { }; [Dynamic, Description("SAM Set Security Object") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetSecurityObj_Start:SamSetSecurityObj { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Security Object") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetSecurityObj_End:SamSetSecurityObj { }; [Dynamic, Description("SAM Query Security Object") : amended, Guid("{676347f3-fd20-4e7d-90b1-77e35f84af9a}"), DisplayName("SamQuerySecurityObj"), locale("MS\\0x409") ] class SamQuerySecurityObj:MSSAMTrace { }; [Dynamic, Description("SAM Query Security Object") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQuerySecurityObj_Start:SamQuerySecurityObj { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Security Object") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQuerySecurityObj_End:SamQuerySecurityObj { }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, Guid("{f8012701-7e99-49c5-b832-1db8bc4a610d}"), DisplayName("SamShutdownSamSrv"), locale("MS\\0x409") ] class SamShutdownSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamShutdownSamSrv_Start:SamShutdownSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Shutdown SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamShutdownSamSrv_End:SamShutdownSamSrv { }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, Guid("{a11e5d6b-353d-4bf6-97a8-ede4cba45524}"), DisplayName("SamLookupDomInSamSrv"), locale("MS\\0x409") ] class SamLookupDomInSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamLookupDomInSamSrv_Start:SamLookupDomInSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Lookup Domain In SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamLookupDomInSamSrv_End:SamLookupDomInSamSrv { }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, Guid("{7c65ceb0-75ba-46b9-884e-67e038c5b003}"), DisplayName("SamEnumDomInSamSrv"), locale("MS\\0x409") ] class SamEnumDomInSamSrv:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumDomInSamSrv_Start:SamEnumDomInSamSrv { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Domains In SAM Server") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumDomInSamSrv_End:SamEnumDomInSamSrv { }; [Dynamic, Description("SAM Open Domain") : amended, Guid("{6e1f2449-f1f3-4634-b51f-46e2c6625892}"), DisplayName("SamOpenDomain"), locale("MS\\0x409") ] class SamOpenDomain:MSSAMTrace { }; [Dynamic, Description("SAM Open Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenDomain_Start:SamOpenDomain { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenDomain_End:SamOpenDomain { }; [Dynamic, Description("SAM Query Information Domain") : amended, Guid("{89399c21-4aaf-408e-ba39-ab831a1298d5}"), DisplayName("SamQueryInfoDom"), locale("MS\\0x409") ] class SamQueryInfoDom:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoDom_Start:SamQueryInfoDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoDom_End:SamQueryInfoDom { }; [Dynamic, Description("SAM Set Information Domain") : amended, Guid("{45309ef4-c59e-425e-b95b-19f1c5a3c55a}"), DisplayName("SamSetInfoDom"), locale("MS\\0x409") ] class SamSetInfoDom:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoDom_Start:SamSetInfoDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoDom_End:SamSetInfoDom { }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, Guid("{5d11e02f-0c36-4180-ad07-89062c9df9ec}"), DisplayName("SamEnumGrpsInDom"), locale("MS\\0x409") ] class SamEnumGrpsInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumGrpsInDom_Start:SamEnumGrpsInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Groups In Domain ") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumGrpsInDom_End:SamEnumGrpsInDom { }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, Guid("{07ffaa1d-34f6-49cd-b541-2f0d7dff15c4}"), DisplayName("SamEnumUsersInDom"), locale("MS\\0x409") ] class SamEnumUsersInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumUsersInDom_Start:SamEnumUsersInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Users In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumUsersInDom_End:SamEnumUsersInDom { }; [Dynamic, Description("SAM Create Alias In Domain") : amended, Guid("{5e612efd-c05e-4f76-bced-f5607aa3d46e}"), DisplayName("SamCreateAliasInDom"), locale("MS\\0x409") ] class SamCreateAliasInDom:MSSAMTrace { }; [Dynamic, Description("SAM Create Alias In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamCreateAliasInDom_Start:SamCreateAliasInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Create Alias In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamCreateAliasInDom_End:SamCreateAliasInDom { }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, Guid("{f1fea491-bfa6-436c-a178-a70d03b4fb1a}"), DisplayName("SamEnumAliasesInDom"), locale("MS\\0x409") ] class SamEnumAliasesInDom:MSSAMTrace { }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamEnumAliasesInDom_Start:SamEnumAliasesInDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Enumerate Aliases In Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamEnumAliasesInDom_End:SamEnumAliasesInDom { }; [Dynamic, Description("SAM Get Alias Membership") : amended, Guid("{1cf5fd19-1ac1-4324-84f7-970a634a91ee}"), DisplayName("SamGetAliasMem"), locale("MS\\0x409") ] class SamGetAliasMem:MSSAMTrace { }; [Dynamic, Description("SAM Get Alias Membership") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetAliasMem_Start:SamGetAliasMem { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Alias Membership") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetAliasMem_End:SamGetAliasMem { }; [Dynamic, Description("SAM Open Group") : amended, Guid("{b41d7bdf-4249-4651-ac0f-1879be0d5c0c}"), DisplayName("SamOpenGrp"), locale("MS\\0x409") ] class SamOpenGrp:MSSAMTrace { }; [Dynamic, Description("SAM Open Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenGrp_Start:SamOpenGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenGrp_End:SamOpenGrp { }; [Dynamic, Description("SAM Query Information Group") : amended, Guid("{632fcc78-6057-48f9-8d5f-4bb0f73d3cd1}"), DisplayName("SamQueryInfoGrp"), locale("MS\\0x409") ] class SamQueryInfoGrp:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoGrp_Start:SamQueryInfoGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoGrp_End:SamQueryInfoGrp { }; [Dynamic, Description("SAM Set Information Group") : amended, Guid("{26106246-4473-4295-841b-4a51c6afc3db}"), DisplayName("SamSetInfoGrp"), locale("MS\\0x409") ] class SamSetInfoGrp:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoGrp_Start:SamSetInfoGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoGrp_End:SamSetInfoGrp { }; [Dynamic, Description("SAM Delete Group") : amended, Guid("{5f7c4ba5-d6a4-4625-900e-48fa7811e06a}"), DisplayName("SamDeleteGrp"), locale("MS\\0x409") ] class SamDeleteGrp:MSSAMTrace { }; [Dynamic, Description("SAM Delete Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteGrp_Start:SamDeleteGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteGrp_End:SamDeleteGrp { }; [Dynamic, Description("SAM Get Members In Group") : amended, Guid("{5954bc51-c5ec-4aaa-831c-6f2c1b2515b6}"), DisplayName("SamGetMemInGrp"), locale("MS\\0x409") ] class SamGetMemInGrp:MSSAMTrace { }; [Dynamic, Description("SAM Get Members In Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetMemInGrp_Start:SamGetMemInGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Members In Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetMemInGrp_End:SamGetMemInGrp { }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, Guid("{0254ba6d-7ff0-4bfe-a3f9-8fd8da667641}"), DisplayName("SamSetMemAttrsOfGrp"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp:MSSAMTrace { }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp_Start:SamSetMemAttrsOfGrp { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Member Attributes Of Group") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetMemAttrsOfGrp_End:SamSetMemAttrsOfGrp { }; [Dynamic, Description("SAM Open Alias") : amended, Guid("{ba41c883-592f-4ab9-b2a9-c6263b011fe7}"), DisplayName("SamOpenAlias"), locale("MS\\0x409") ] class SamOpenAlias:MSSAMTrace { }; [Dynamic, Description("SAM Open Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenAlias_Start:SamOpenAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenAlias_End:SamOpenAlias { }; [Dynamic, Description("SAM Query Information Alias") : amended, Guid("{419f025a-bf06-4673-af66-d230bec2af02}"), DisplayName("SamQueryInfoAlias"), locale("MS\\0x409") ] class SamQueryInfoAlias:MSSAMTrace { }; [Dynamic, Description("SAM Query Information Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoAlias_Start:SamQueryInfoAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoAlias_End:SamQueryInfoAlias { }; [Dynamic, Description("SAM Set Information Alias") : amended, Guid("{e712d39d-a3a6-4224-a1bd-4717b24e4e8c}"), DisplayName("SamSetInfoAlias"), locale("MS\\0x409") ] class SamSetInfoAlias:MSSAMTrace { }; [Dynamic, Description("SAM Set Information Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoAlias_Start:SamSetInfoAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoAlias_End:SamSetInfoAlias { }; [Dynamic, Description("SAM Delete Alias") : amended, Guid("{fbfe2540-452b-41bb-9219-dfb6fd1a129b}"), DisplayName("SamDeleteAlias"), locale("MS\\0x409") ] class SamDeleteAlias:MSSAMTrace { }; [Dynamic, Description("SAM Delete Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteAlias_Start:SamDeleteAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteAlias_End:SamDeleteAlias { }; [Dynamic, Description("SAM Add Member To Alias") : amended, Guid("{3a2e63d1-5dc4-4168-85ea-3e331f88ce83}"), DisplayName("SamAddMemToAlias"), locale("MS\\0x409") ] class SamAddMemToAlias:MSSAMTrace { }; [Dynamic, Description("SAM Add Member To Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamAddMemToAlias_Start:SamAddMemToAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Add Member To Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamAddMemToAlias_End:SamAddMemToAlias { }; [Dynamic, Description("SAM Remove Member From Alias") : amended, Guid("{6ba1639c-afc4-454e-b3e0-5e8f7fc39af9}"), DisplayName("SamRemoveMemFromAlias"), locale("MS\\0x409") ] class SamRemoveMemFromAlias:MSSAMTrace { }; [Dynamic, Description("SAM Remove Member From Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamRemoveMemFromAlias_Start:SamRemoveMemFromAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Remove Member From Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamRemoveMemFromAlias_End:SamRemoveMemFromAlias { }; [Dynamic, Description("SAM Get Members In Alias") : amended, Guid("{5cec3d52-6eeb-474d-b468-58362888f1b0}"), DisplayName("SamGetMemInAlias"), locale("MS\\0x409") ] class SamGetMemInAlias:MSSAMTrace { }; [Dynamic, Description("SAM Get Members In Alias") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetMemInAlias_Start:SamGetMemInAlias { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Members In Alias") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetMemInAlias_End:SamGetMemInAlias { }; [Dynamic, Description("SAM Open User") : amended, Guid("{b8d2bc4a-1525-4386-bb1c-6bb2e24eb001}"), DisplayName("SamOpenUser"), locale("MS\\0x409") ] class SamOpenUser:MSSAMTrace { }; [Dynamic, Description("SAM Open User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamOpenUser_Start:SamOpenUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Open User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamOpenUser_End:SamOpenUser { }; [Dynamic, Description("SAM Delete User") : amended, Guid("{c2a0e094-a178-4372-b4fe-a33e48c3585c}"), DisplayName("SamDeleteUser"), locale("MS\\0x409") ] class SamDeleteUser:MSSAMTrace { }; [Dynamic, Description("SAM Delete User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamDeleteUser_Start:SamDeleteUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Delete User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamDeleteUser_End:SamDeleteUser { }; [Dynamic, Description("SAM Query Information User") : amended, Guid("{e1cb227a-6d55-4282-a5f7-6fa4a5922c0b}"), DisplayName("SamQueryInfoUser"), locale("MS\\0x409") ] class SamQueryInfoUser:MSSAMTrace { }; [Dynamic, Description("SAM Query Information User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryInfoUser_Start:SamQueryInfoUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Information User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryInfoUser_End:SamQueryInfoUser { }; [Dynamic, Description("SAM Set Information User") : amended, Guid("{bc80e27f-6b74-4da9-abfc-2e4e82b81000}"), DisplayName("SamSetInfoUser"), locale("MS\\0x409") ] class SamSetInfoUser:MSSAMTrace { }; [Dynamic, Description("SAM Set Information User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetInfoUser_Start:SamSetInfoUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Information User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetInfoUser_End:SamSetInfoUser { }; [Dynamic, Description("SAM Change Password Computer") : amended, Guid("{19b30cde-3e41-4cff-83c8-3df2779f840c}"), DisplayName("SamChangePwdComputer"), locale("MS\\0x409") ] class SamChangePwdComputer:MSSAMTrace { }; [Dynamic, Description("SAM Change Password Computer") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamChangePwdComputer_Start:SamChangePwdComputer { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Change Password Computer") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamChangePwdComputer_End:SamChangePwdComputer { }; [Dynamic, Description("SAM Get Groups For User") : amended, Guid("{0e3913c5-9760-4ced-b133-004a64e8d53c}"), DisplayName("SamGetGrpsForUser"), locale("MS\\0x409") ] class SamGetGrpsForUser:MSSAMTrace { }; [Dynamic, Description("SAM Get Groups For User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetGrpsForUser_Start:SamGetGrpsForUser { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Groups For User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetGrpsForUser_End:SamGetGrpsForUser { }; [Dynamic, Description("SAM Query Display Information") : amended, Guid("{eb225178-f5f0-42b7-895b-db89276f647a}"), DisplayName("SamQueryDisplayInfo"), locale("MS\\0x409") ] class SamQueryDisplayInfo:MSSAMTrace { }; [Dynamic, Description("SAM Query Display Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamQueryDisplayInfo_Start:SamQueryDisplayInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Query Display Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamQueryDisplayInfo_End:SamQueryDisplayInfo { }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, Guid("{aceb7864-9a14-4c73-8ed0-94ec53f6651c}"), DisplayName("SamGetDisplayEnumIdx"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx:MSSAMTrace { }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx_Start:SamGetDisplayEnumIdx { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Display Enumeration Index") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetDisplayEnumIdx_End:SamGetDisplayEnumIdx { }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, Guid("{4ff7a7db-43ca-470a-8b64-3003e2d22042}"), DisplayName("SamGetUserDomPwdInfo"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo_Start:SamGetUserDomPwdInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get User Domain Password Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetUserDomPwdInfo_End:SamGetUserDomPwdInfo { }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, Guid("{8919f267-a053-4669-aa69-2da0d4a20d92}"), DisplayName("SamRemoveMemFromForeignDom"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom:MSSAMTrace { }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom_Start:SamRemoveMemFromForeignDom { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Remove Member From Foreign Domain") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamRemoveMemFromForeignDom_End:SamRemoveMemFromForeignDom { }; [Dynamic, Description("SAM Get Domain Password Information") : amended, Guid("{ff0c6ce2-9528-4a91-b9c7-bcf834b6f79a}"), DisplayName("SamGetDomPwdInfo"), locale("MS\\0x409") ] class SamGetDomPwdInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get Domain Password Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetDomPwdInfo_Start:SamGetDomPwdInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Domain Password Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetDomPwdInfo_End:SamGetDomPwdInfo { }; [Dynamic, Description("SAM Set Boot Key Information") : amended, Guid("{2e991575-c2ed-42a7-97ff-a0d6571f1862}"), DisplayName("SamSetBootKeyInfo"), locale("MS\\0x409") ] class SamSetBootKeyInfo:MSSAMTrace { }; [Dynamic, Description("SAM Set Boot Key Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamSetBootKeyInfo_Start:SamSetBootKeyInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Set Boot Key Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamSetBootKeyInfo_End:SamSetBootKeyInfo { }; [Dynamic, Description("SAM Get Boot Key Information") : amended, Guid("{33be4128-d02e-4b6f-949e-ab77cc8164b1}"), DisplayName("SamGetBootKeyInfo"), locale("MS\\0x409") ] class SamGetBootKeyInfo:MSSAMTrace { }; [Dynamic, Description("SAM Get Boot Key Information") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamGetBootKeyInfo_Start:SamGetBootKeyInfo { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Get Boot Key Information") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamGetBootKeyInfo_End:SamGetBootKeyInfo { }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, Guid("{96bd320f-1e51-4c06-86f3-ee64f0a2f0cf}"), DisplayName("SampProcessMappedAttributes"), locale("MS\\0x409") ] class SamProcessMappedAttributes:MSSAMTrace { }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class SamProcessMappedAttributes_Start:SamProcessMappedAttributes { [WmiDataId(1), Description("Signature") : amended, StringTermination("NullTerminated"), format("w"), read] string Sam; [WmiDataId(2), Description("SamTraceVersion") : amended, read] uint32 Version; [WmiDataId(3), Description("Client SID") : amended, StringTermination("NullTerminated"), format("w"), read] string Sid; [WmiDataId(4), Description("Client Network Address") : amended, StringTermination("NullTerminated"), format("w"), read] string Client; }; [Dynamic, Description("SAM Process Mapped Attributes") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class SamProcessMappedAttributes_End:SamProcessMappedAttributes { };