Automated Definitions Thread

[Ken Lassesen-3]

Bring this over here from [OVAL-DISCUSSION-LIST] for guidance / comments

-----Original Message-----
From: Ken Lassesen
Sent: Wednesday, July 09, 2008 3:30 PM
To: OVAL Discussion List (Closed Public Discussion)
Subject: RE: [OVAL-DISCUSSION-LIST] Automated Definitions Thread

Thank for the info and guidance.

I attached the Service Mapping to CPE file, for review (before
resubmitting the OVAL definitions).  Directly email me if you have a
better mapping for any item. (just cut and paste the revised node to
make my life easier!) -- everyone is welcome to join in!

Ken

-----Original Message-----
Comments

Many were auto-generated from the available data. This creates a
dilemma...

* In theory, CPE is a naming pattern that could be used to
auto-generated (with review for rationality) the ids.... that is the
track that I took.  Windows Services are likely below the radar for CPE,
because they may be part of an application BUT are distinct and
separate. For example SQLServer is an application, SQLAgent is part of
this application as is SQLBrowser.

* MITRE, prefers the use of CPE wherever possible.

Guidance Needed: at least 3 solutions, run with these CPE, only use
these if there is an exact match in the official one (the sin of
omission is then on other's head!) or omit them entirely.

-----Original Message-----
From: SSA Team. [mailto:[hidden email]]
Sent: Thursday, July 10, 2008 1:36 AM
To: [hidden email]
Subject: Re: [OVAL-DISCUSSION-LIST] Automated Definitions Thread

Hi,

I've reviewed the file that maps services to their appropriate CPE's. I
checked the official CPE dictonary but many entries are not available.

Ken, have you generate them by yourself ?
Should the CPE Board validate (via CPE submission them before being a
part of the official CPE dictionary repository at NVD
(http://nvd.nist.gov/cpe.cfm)?


As we started a similar project (DPE - Default Password Enumeration), we
did not allowed the integration of "unofficial" CPE's entries.
Here is the link of DPE along with the XSD CPE validation
[http://www.security-database.com/dpe/DPE_schema_v0.3.zip]

Or maybe i just missed something !!

Regards
Nabil
security-database.com







After a quick look, it seems like many of the CPE names are better.
However, I think the cpe-discussion-list would be the right place to
work on vetting these names. I also think that the cpe community might
be the correct place to work to agree on what cpe name is tied to a
given binary on a system.

Can you move this discussion over to the cpe list? I realize there is a
bit of a confusing overlap here, but the issue is that the CPE
Dictionary maintainer should probably see these names and they won't if
the names are posted on this list. I am pretty sure that the NIST CPE
Team does not monitor this list closely.

I am happy to comment as you work on this, but I think it is important
to involve the CPE community.

Thanks,

Jon

============================================
Jonathan O. Baker
The MITRE Corporation
Email: [hidden email]

<?xml version="1.0" encoding="UTF-8"?>
<inventorytracker identity="1330">  
  <item cpeid="cpe:/a:adobe:adobe_version_cue_cs3" path=""C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe" -win32service" name="Adobe Version Cue CS3" refid="1120" filename="VersionCueCS3.exe" />
  <item cpeid="cpe:/a:agere:agere_modem_call_progress_audio" path="C:\WINXP\system32\agrsmsvc.exe" name="AgereModemAudio" refid="1078" filename="agrsmsvc.exe" />
  <item cpeid="cpe:/a:ahead:incd_helper" path="C:\Program Files\Ahead\InCD\InCDsrv.exe" name="InCDsrv" refid="850" filename="InCDsrv.exe" />
  <item cpeid="cpe:/a:aisystems:my_first_service" path=""C:\AISystems\Excalibur\Utility\AMMQRelay\AMMQRelay\bin\Debug\AMMQRELAY.exe"" name="AMMQRelayService" refid="835" filename="AMMQRELAY.exe" />
  <item cpeid="cpe:/a:allume:stuffit_task_manager" path="C:\PROGRA~1\Allume\StuffIt\MXTask.exe -Service" name="StuffIt Task Manager" refid="904" filename="MXTask.ex" />
  <item cpeid="cpe:/a:analog_devices:spkrmon" path="C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe" name="spkrmon" refid="217" filename="spkrmon.exe" />
  <item cpeid="cpe:/a:apc:apc_pbe_agent" path="C:\PROGRA~1\APC\POWERC~1\agent\pbeagent.exe" name="APCPBEAgent" refid="1216" filename="pbeagent.exe" />
  <item cpeid="cpe:/a:apc:apc_pbe_server" path="C:\PROGRA~1\APC\POWERC~1\server\PBESER~1.EXE" name="APCPBEServer" refid="1219" filename="PBESER~1.EXE" />
  <item cpeid="cpe:/a:apc:apc_ups_service" path="C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe" name="APC UPS Service" refid="1264" filename="mainserv.exe" />
  <item cpeid="cpe:/a:app:oraclemtsrecoveryservice" path="F:\app\Ken.Lassesen\product\11.1.0\client_2\bin\omtsreco.exe "OracleMTSRecoveryService"" name="OracleMTSRecoveryService" refid="877" filename="omtsreco.exe OracleMTSRecoveryService" />
  <item cpeid="cpe:/a:apple:apple_mobile_device" path=""C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"" name="Apple Mobile Device" refid="313" filename="AppleMobileDeviceService.exe" />
  <item cpeid="cpe:/a:apple:apple_os_switch_manager" path="C:\WINDOWS\system32\AppleOSSMgr.exe" name="AppleOSSMgr" refid="1192" filename="AppleOSSMgr.exe" />
  <item cpeid="cpe:/a:apple:apple_time_service" path="C:\WINDOWS\system32\AppleTimeSrv.exe" name="AppleTimeSrv" refid="1195" filename="AppleTimeSrv.exe" />
  <item cpeid="cpe:/a:apple:ipod_service" path=""C:\Program Files\iPod\bin\iPodService.exe"" name="iPod Service" refid="340" filename="iPodService.exe" />
  <item cpeid="cpe:/a:apple:ipodservice" path="C:\Program Files\iPod\bin\iPodService.exe" name="iPodService" refid="1081" filename="iPodService.exe" />
  <item cpeid="cpe:/a:arservice.exe:arsvc" path="C:\WINDOWS\arservice.exe" name="ARSVC" refid="838" filename="arservice.exe" />
  <item cpeid="cpe:/a:artisoft:televantage_workstation_service" path=""C:\Program Files\Common Files\Artisoft\TeleVantage\TvWksSvc.exe"" name="TvWksSvc" refid="256" filename="TvWksSvc.exe" />
  <item cpeid="cpe:/a:ati:ati_external_event_utility" path="C:\Windows\system32\Ati2evxx.exe" name="Ati External Event Utility" refid="1168" filename="Ati2evxx.exe" />
  <item cpeid="cpe:/a:ati:ati_hotkey_poller" path="C:\WINDOWS\system32\Ati2evxx.exe" name="Ati HotKey Poller" refid="316" filename="Ati2evxx.exe" />
  <item cpeid="cpe:/a:ati:ati_smart" path="C:\WINDOWS\system32\ati2sgag.exe" name="ATI Smart" refid="319" filename="ati2sgag.exe" />
  <item cpeid="cpe:/a:automated_qa:aqtime_5_service" path="C:\Program Files\Automated QA\AQtime 5\Bin\DebuggerService5x86.exe" name="AQtime 5 Service" refid="1297" filename="DebuggerService5x86.exe" />
  <item cpeid="cpe:/a:automated_qa:testcomplete_6_service" path=""C:\Program Files\Automated QA\TestComplete 6\Bin\TestCompleteService6.exe"" name="TestComplete 6 Service" refid="1228" filename="TestCompleteService6.exe" />
  <item cpeid="cpe:/a:bha:bs_recorder_gold_library_general_service" path=""C:\WINDOWS\system32\bgsvcgen.exe"" name="bgsvcgen" refid="1267" filename="bgsvcgen.exe" />
  <item cpeid="cpe:/a:bonjour:mdnsresponder" path=""C:\Program Files\Bonjour\mDNSResponder.exe"" name="Bonjour Service" refid="322" filename="mDNSResponder.exe" />
  <item cpeid="cpe:/a:ca:ca_license_client" path=""C:\Program Files\CA\SharedComponents\CA_LIC\\lic98rmt.exe"" name="CA_LIC_CLNT" refid="844" filename="lic98rmt.exe" />
  <item cpeid="cpe:/a:ca:etrust_antivirus_job_server" path=""H:\Program Files\CA\eTrust Antivirus\InoTask.exe"" name="InoTask" refid="943" filename="InoTask.exe" />
  <item cpeid="cpe:/a:ca:etrust_antivirus_realtime_server" path=""H:\Program Files\CA\eTrust Antivirus\InoRT.exe"" name="InoRT" refid="940" filename="InoRT.exe" />
  <item cpeid="cpe:/a:ca:etrust_antivirus_rpc_server" path=""H:\Program Files\CA\eTrust Antivirus\InoRpc.exe"" name="InoRPC" refid="937" filename="InoRpc.exe" />
  <item cpeid="cpe:/a:ca:event_log_watch" path=""C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe"" name="LogWatch" refid="853" filename="LogWatNT.exe" />
  <item cpeid="cpe:/a:carbonite:carboniteservice" path=""C:\Program Files (x86)\Carbonite\Carbonite Backup\carboniteservice.exe"" name="CarboniteService" refid="1093" filename="carboniteservice.exe" />
  <item cpeid="cpe:/a:castlecop:plsremote_service" path="C:\WINDOWS\SYSTEM32\PLSRemote.exe" name="PLSRemoteSvc" refid="1132" filename="PLSRemote.exe" />
  <item cpeid="cpe:/a:castlecops:tuneup_drive_defrag_service" path="C:\WINDOWS\System32\TuneUpDefragService.exe" name="TuneUp.Defrag" refid="1318" filename="TuneUpDefragService.exe" />
  <item cpeid="cpe:/a:citrix:citrix_diagnostic_facility_com_server" path="C:\Program Files\Common Files\Citrix\System32\CdfSvc.exe" name="CdfSvc" refid="1300" filename="CdfSvc.exe" />
  <item cpeid="cpe:/a:compuware:trsdkservice11" path="c:\program files\common files\compuware\trsdkservicestub11.exe" name="TRSDKService11" refid="1315" filename="trsdkservicestub11.exe" />
  <item cpeid="cpe:/a:creative:creative_service_for_cdrom_access" path="C:\WINDOWS\system32\CTsvcCDA.exe" name="Creative Service for CDROM Access" refid="1270" filename="CTsvcCDA.exe" />
  <item cpeid="cpe:/a:digitalpersona:biometric_authentication_service" path="C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe" name="DpHost" refid="1096" filename="DpHostW.exe" />
  <item cpeid="cpe:/a:d-link:vservice" path="C:\Program Files\D-Link\D-Link USB VoIP Adapter\VServ.exe" name="VService" refid="913" filename="VServ.exe" />
  <item cpeid="cpe:/a:ehome:media_center_extender_service" path="C:\WINDOWS\ehome\mcrdsvc.exe" name="McrdSvc" refid="862" filename="mcrdsvc.exe" />
  <item cpeid="cpe:/a:ehome:windows_media_center_receiver_service" path="C:\Windows\ehome\ehRecvr.exe" name="ehRecvr" refid="751" filename="ehRecvr.exe" />
  <item cpeid="cpe:/a:ehome:windows_media_center_scheduler_service" path="C:\Windows\ehome\ehsched.exe" name="ehSched" refid="754" filename="ehsched.exe" />
  <item cpeid="cpe:/a:filefront:oo_defrag" path="C:\WINDOWS\system32\oodag.exe" name="O&O Defrag" refid="1309" filename="oodag.exe" />
  <item cpeid="cpe:/a:firebird:firebird_guardian__defaultinstance" path="C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe -s" name="FirebirdGuardianDefaultInstance" refid="1183" filename="fbguard.ex" />
  <item cpeid="cpe:/a:firebird:firebird_server__defaultinstance" path="C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe -s" name="FirebirdServerDefaultInstance" refid="1186" filename="fbserver.ex" />
  <item cpeid="cpe:/a:foldersize:folder_size" path=""C:\Program Files\FolderSize\FolderSizeSvc.exe"" name="FolderSize" refid="469" filename="FolderSizeSvc.exe" />
  <item cpeid="cpe:/a:google:google_desktop_manager_5170919590" path=""C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe"" name="GoogleDesktopManager-091907-194040" refid="73" filename="GoogleDesktop.exe" />
  <item cpeid="cpe:/a:google:google_updater_service" path=""C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"" name="gusvc" refid="331" filename="GoogleUpdaterService.exe" />
  <item cpeid="cpe:/a:google:googledesktopmanager" path=""C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe"" name="GoogleDesktopManager" refid="1123" filename="GoogleDesktopManager.exe" />
  <item cpeid="cpe:/a:hp:cyberlink_background_capture_service_cbcs" path=""C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe"" name="CLCapSvc" refid="736" filename="CLCapSvc.exe" />
  <item cpeid="cpe:/a:hp:cyberlink_task_scheduler_cts" path=""C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe"" name="CLSched" refid="739" filename="CLSched.exe" />
  <item cpeid="cpe:/a:hp:hp_health_check_service" path=""c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe"" name="HP Health Check Service" refid="763" filename="hphc_service.exe" />
  <item cpeid="cpe:/a:hp:hpqwmiex" path="C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe" name="hpqwmiex" refid="766" filename="hpqwmiex.exe" />
  <item cpeid="cpe:/a:hp:pml_driver_hph11" path="C:\WINDOWS\system32\HPHipm11.exe" name="Pml Driver HPH11" refid="1282" filename="HPHipm11.exe" />
  <item cpeid="cpe:/a:ibm:ibm_kcu_service" path="C:\WINDOWS\system32\TpKmpSVC.exe" name="TpKmpSVC" refid="1141" filename="TpKmpSVC.exe" />
  <item cpeid="cpe:/a:ibm:ibm_mqseries" path=""C:\Program Files\IBM\WebSphere MQ\bin\amqsvc.exe"" name="MQSeriesServices" refid="1024" filename="amqsvc.exe" />
  <item cpeid="cpe:/a:ibm:ibm_pm_service" path="C:\WINDOWS\System32\ibmpmsvc.exe" name="IBMPMSVC" refid="1126" filename="ibmpmsvc.exe" />
  <item cpeid="cpe:/a:ibm:spectrum24_event_monitor" path="C:\WINDOWS\System32\S24EvMon.exe" name="S24EventMonitor" refid="1138" filename="S24EvMon.exe" />
  <item cpeid="cpe:/a:installshield:installdriver_table_manager" path=""C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"" name="IDriverT" refid="334" filename="IDriverT.exe" />
  <item cpeid="cpe:/a:installshield_shared:installshield_licensing_service" path=""C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe"" name="InstallShield Licensing Service" refid="496" filename="InstallShield Licensing Service.exe" />
  <item cpeid="cpe:/a:intel:asf_agent" path="C:\Program Files\Intel\ASF Agent\ASFAgent.exe" name="ASFAgent" refid="1153" filename="ASFAgent.exe" />
  <item cpeid="cpe:/a:intel:intelr_active_management_technology_local_management_service" path="C:\Program Files\Intel\AMT\LMS.exe" name="LMS" refid="1162" filename="LMS.exe" />
  <item cpeid="cpe:/a:intel:intelr_active_management_technology_system_status_service" path="C:\Program Files\Intel\AMT\atchksrv.exe" name="atchksrv" refid="1156" filename="atchksrv.exe" />
  <item cpeid="cpe:/a:intel:intelr_active_management_technology_user_notification_service" path="C:\Program Files\Intel\AMT\UNS.exe" name="UNS" refid="1165" filename="UNS.exe" />
  <item cpeid="cpe:/a:intel:intelr_matrix_storage_event_monitor" path="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe" name="IAANTMON" refid="1159" filename="Iaantmon.exe" />
  <item cpeid="cpe:/a:konica_minolta:konica_minolta_pagescope_net_care" path="C:\Program Files\KONICA MINOLTA\PageScope Net Care\JavaService.exe -ms4m -mx32m" name="PageScope Net Care Service" refid="880" filename="JavaService.ex" />
  <item cpeid="cpe:/a:lavasoft:adaware_2007_service" path=""C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe"" name="aawservice" refid="1150" filename="aawservice.exe" />
  <item cpeid="cpe:/a:lightscribe:lightscribeservice_direct_disc_labeling_service" path=""C:\Program Files\Common Files\LightScribe\LSSrvc.exe"" name="LightScribeService" refid="772" filename="LSSrvc.exe" />
  <item cpeid="cpe:/a:logishrd:lvcomser" path=""C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe"" name="LVCOMSer" refid="1273" filename="LVComSer.exe" />
  <item cpeid="cpe:/a:logishrd:lvsrvlauncher" path="C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe" name="LVSrvLauncher" refid="1087" filename="SrvLnch.exe" />
  <item cpeid="cpe:/a:logishrd:process_monitor" path=""C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe"" name="LVPrcSrv" refid="1084" filename="LVPrcSrv.exe" />
  <item cpeid="cpe:/a:lumension:patchlink_replication_service" path=""C:\Program Files\PatchLink\Replication Services\Distribution.Replication.Client.Service.exe"" name="Replication Service" refid="1204" filename="Distribution.Replication.Client.Service.exe" />
  <item cpeid="cpe:/a:lumension:patchlink_update" path=""C:\Program Files\PatchLink\Update Agent\GravitixService.exe"" name="PatchLink Update" refid="157" filename="GravitixService.exe" />
  <item cpeid="cpe:/a:lumension:sanctuary_application_server" path=""c:\WINDOWS\system32\sxs.exe"" name="sxs" refid="1210" filename="sxs.exe" />
  <item cpeid="cpe:/a:lumension:sanctuaryservice_dev" path=""c:\tfs\Sanctuary\Team\Hermes\Development\source\WCF\WCF.Sanctuary.WindowsService\bin\Debug\WCF.Sanctuary.WindowsServiceHost.exe"" name="SanctuaryService_Dev" refid="1207" filename="WCF.Sanctuary.WindowsServiceHost.exe" />
  <item cpeid="cpe:/a:lumension:statengine" path="C:\Program Files\PatchLink\Security Management Console\Engine\engine.exe -service" name="STATEngine" refid="1222" filename="engine.ex" />
  <item cpeid="cpe:/a:lumension:statreportcenter" path="C:\Program Files\PatchLink\Security Management Console\Engine\ReportCenter.exe -service" name="STATReportCenter" refid="1225" filename="ReportCenter.ex" />
  <item cpeid="cpe:/a:lumension_security:sanctuary_command_and_control" path=""C:\Program Files\Lumension Security\Sanctuary\Client\scomc.exe"" name="scomc" refid="202" filename="scomc.exe" />
  <item cpeid="cpe:/a:macromedia:flash_media_administration_server" path=""C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe"" name="FMSAdmin" refid="1246" filename="FMSAdmin.exe" />
  <item cpeid="cpe:/a:macromedia:flash_media_server_fms" path=""C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe"" name="FMS" refid="1243" filename="FMSMaster.exe" />
  <item cpeid="cpe:/a:macrovision_shared:flexnet_licensing_service" path=""C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"" name="FLEXnet Licensing Service" refid="328" filename="FNPLicensingService.exe" />
  <item cpeid="cpe:/a:matrox_graphics_inc:matrox_centering_service" path=""c:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk.Services.exe"" name="Matrox Centering Service" refid="859" filename="Matrox.PowerDesk.Services.exe" />
  <item cpeid="cpe:/a:microsoft:ai_systems_active_directory_monitor" path=""C:\Program Files\AISystems\Active Directory Monitor for AI Systems\AISystems.ActiveDirectory.Monitor.exe"" name="AISystemsADMonitor" refid="832" filename="AISystems.ActiveDirectory.Monitor.exe" />
  <item cpeid="cpe:/a:microsoft:ai_systems_jetenginetm_service" path=""C:\Program Files\AISystems\jetEngine\JetEngineService.exe"" name="jetEngine" refid="1021" filename="JetEngineService.exe" />
  <item cpeid="cpe:/a:microsoft:alerter" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="Alerter" refid="1" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:application_experience_lookup_service" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="AeLookupSvc" refid="310" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:application_host_helper_service" path="C:\Windows\system32\svchost.exe -k apphost" name="AppHostSvc" refid="502" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:application_information" path="C:\Windows\system32\svchost.exe -k netsvcs" name="Appinfo" refid="505" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:application_layer_gateway_service" path="C:\WINDOWS\System32\alg.exe" name="ALG" refid="4" filename="alg.exe" />
  <item cpeid="cpe:/a:microsoft:application_management" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="AppMgmt" refid="7" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:aspnet_state_service" path="C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe" name="aspnet_state" refid="10" filename="aspnet_state.exe" />
  <item cpeid="cpe:/a:microsoft:automatic_updates" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="wuauserv" refid="295" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:background_intelligent_transfer_service" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="BITS" refid="16" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:base_filtering_engine" path="C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork" name="BFE" refid="511" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:block_level_backup_engine_service" path=""C:\Windows\system32\wbengine.exe"" name="wbengine" refid="670" filename="wbengine.exe" />
  <item cpeid="cpe:/a:microsoft:bluetooth_support_service" path="C:\Windows\system32\svchost.exe -k bthsvcs" name="BthServ" refid="727" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:business_contact_manager_sql_server_startup_service" path=""C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe"" name="BcmSqlStartupSvc" refid="1090" filename="BcmSqlStartupSvc.exe" />
  <item cpeid="cpe:/a:microsoft:certificate_propagation" path="C:\Windows\system32\svchost.exe -k netsvcs" name="CertPropSvc" refid="514" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:cisco_systems_inc_vpn_service" path=""C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"" name="CVPND" refid="523" filename="cvpnd.exe" />
  <item cpeid="cpe:/a:microsoft:client_for_nfs" path="C:\WINDOWS\system32\nfsclnt.exe" name="Client for NFS" refid="982" filename="nfsclnt.exe" />
  <item cpeid="cpe:/a:microsoft:clipbook" path="C:\WINDOWS\system32\clipsrv.exe" name="ClipSrv" refid="25" filename="clipsrv.exe" />
  <item cpeid="cpe:/a:microsoft:cng_key_isolation" path="C:\Windows\system32\lsass.exe" name="KeyIso" refid="562" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:com_event_system" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="EventSystem" refid="64" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:com_system_application" path="C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}" name="COMSysApp" refid="31" filename="dllhost.exe" />
  <item cpeid="cpe:/a:microsoft:computer_browser" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="Browser" refid="19" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:cryptographic_services" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="CryptSvc" refid="34" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:dcom_server_process_launcher" path="C:\WINDOWS\system32\svchost -k DcomLaunch" name="DcomLaunch" refid="37" filename="svchos" />
  <item cpeid="cpe:/a:microsoft:dell_wireless_wlan_tray_service" path="C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe" name="wltrysvc" refid="1003" filename="WLTRYSVC.EXE" />
  <item cpeid="cpe:/a:microsoft:desktop_window_manager_session_manager" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="UxSms" refid="664" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:dfs_replication" path="C:\Windows\system32\DFSR.exe" name="DFSR" refid="748" filename="DFSR.exe" />
  <item cpeid="cpe:/a:microsoft:dhcp_client" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="Dhcp" refid="40" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:dhcp_server" path="C:\WINDOWS\system32\tcpsvcs.exe" name="DHCPServer" refid="1240" filename="tcpsvcs.exe" />
  <item cpeid="cpe:/a:microsoft:diagnostic_policy_service" path="C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork" name="DPS" refid="529" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:diagnostic_service_host" path="C:\Windows\System32\svchost.exe -k wdisvc" name="WdiServiceHost" refid="676" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:diagnostic_system_host" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="WdiSystemHost" refid="679" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:distributed_file_system" path="C:\WINDOWS\system32\Dfssvc.exe" name="Dfs" refid="325" filename="Dfssvc.exe" />
  <item cpeid="cpe:/a:microsoft:distributed_link_tracking_client" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="TrkWks" refid="253" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:distributed_link_tracking_server" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="TrkSvr" refid="421" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:distributed_transaction_coordinator" path="C:\WINDOWS\system32\msdtc.exe" name="MSDTC" refid="112" filename="msdtc.exe" />
  <item cpeid="cpe:/a:microsoft:dns_client" path="C:\WINDOWS\system32\svchost.exe -k NetworkService" name="Dnscache" refid="49" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:dns_server" path="C:\WINDOWS\System32\dns.exe" name="DNS" refid="1030" filename="dns.exe" />
  <item cpeid="cpe:/a:microsoft:error_reporting_service" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="ERSvc" refid="58" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:event_log" path="C:\WINDOWS\system32\services.exe" name="Eventlog" refid="61" filename="services.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_event" path=""C:\Program Files\Exchsrvr\bin\events.exe"" name="MSExchangeES" refid="1036" filename="events.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_information_store" path=""C:\Program Files\Exchsrvr\bin\store.exe"" name="MSExchangeIS" refid="1039" filename="store.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_management" path=""C:\Program Files\Exchsrvr\bin\exmgmt.exe"" name="MSExchangeMGMT" refid="1042" filename="exmgmt.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_mta_stacks" path=""C:\Program Files\Exchsrvr\bin\emsmta.exe"" name="MSExchangeMTA" refid="1045" filename="emsmta.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_site_replication_service" path=""C:\Program Files\Exchsrvr\bin\srsmain.exe"" name="MSExchangeSRS" refid="1051" filename="srsmain.exe" />
  <item cpeid="cpe:/a:microsoft:exchange:microsoft_exchange_system_attendant" path=""C:\Program Files\Exchsrvr\bin\mad.exe"" name="MSExchangeSA" refid="1048" filename="mad.exe" />
  <item cpeid="cpe:/a:microsoft:extensible_authentication_protocol_service" path="C:\WINDOWS\System32\svchost.exe -k eapsvcs" name="EapHost" refid="55" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:fast_user_switching_compatibility" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="FastUserSwitchingCompatibility" refid="67" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:fax" path="C:\WINDOWS\system32\fxssvc.exe" name="Fax" refid="847" filename="fxssvc.exe" />
  <item cpeid="cpe:/a:microsoft:file_replication" path="C:\WINDOWS\system32\ntfrs.exe" name="NtFrs" refid="370" filename="ntfrs.exe" />
  <item cpeid="cpe:/a:microsoft:file_server_for_macintosh" path="C:\WINDOWS\system32\sfmsvc.exe" name="MacFile" refid="1249" filename="sfmsvc.exe" />
  <item cpeid="cpe:/a:microsoft:firewall_client_agent" path=""C:\Program Files\Microsoft Firewall Client 2004\FwcAgent.exe"" name="FwcAgent" refid="1306" filename="FwcAgent.exe" />
  <item cpeid="cpe:/a:microsoft:ftp_publishing_service" path="C:\Windows\system32\inetsrv\inetinfo.exe" name="MSFTPSVC" refid="586" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:ftp_publishing_service" path="H:\WINDOWS\system32\inetsrv\inetinfo.exe" name="MSFtpsvc" refid="952" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:function_discovery_provider_host" path="C:\Windows\system32\svchost.exe -k LocalService" name="fdPHost" refid="538" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:function_discovery_resource_publication" path="C:\Windows\system32\svchost.exe -k LocalService" name="FDResPub" refid="541" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:group_policy_client" path="C:\Windows\system32\svchost.exe -k GPSvcGroup" name="gpsvc" refid="547" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:health_key_and_certificate_management_service" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="hkmsvc" refid="82" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:help_and_support" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="helpsvc" refid="76" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:hid_input_service" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="HidServ" refid="79" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:http_ssl" path="C:\WINDOWS\System32\svchost.exe -k HTTPFilter" name="HTTPFilter" refid="85" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:human_interface_device_access" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="hidserv" refid="550" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:ias_jet_database_access" path="C:\WINDOWS\SysWOW64\svchost.exe -k iasjet" name="IASJet" refid="1144" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:iis_admin_service" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="IISADMIN" refid="337" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:ike_and_authip_ipsec_keying_modules" path="C:\Windows\system32\svchost.exe -k netsvcs" name="IKEEXT" refid="553" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:imapi_cdburning_com_service" path="C:\WINDOWS\system32\imapi.exe" name="ImapiService" refid="91" filename="imapi.exe" />
  <item cpeid="cpe:/a:microsoft:indexing_service" path="C:\WINDOWS\System32\cisvc.exe" name="cisvc" refid="1198" filename="cisvc.exe" />
  <item cpeid="cpe:/a:microsoft:indexing_service" path="C:\WINDOWS\system32\cisvc.exe" name="CiSvc" refid="22" filename="cisvc.exe" />
  <item cpeid="cpe:/a:microsoft:infrared_monitor" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="Irmon" refid="1129" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:interactive_services_detection" path="C:\Windows\system32\UI0Detect.exe" name="UI0Detect" refid="658" filename="UI0Detect.exe" />
  <item cpeid="cpe:/a:microsoft:interix_subsystem_startup" path="C:\WINDOWS\system32\PSXRUN.EXE" name="zzInterix" refid="1009" filename="PSXRUN.EXE" />
  <item cpeid="cpe:/a:microsoft:internet_authentication_service" path="H:\WINDOWS\System32\svchost.exe -k netsvcs" name="IAS" refid="934" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:intersite_messaging" path="C:\WINDOWS\System32\ismserv.exe" name="IsmServ" refid="343" filename="ismserv.exe" />
  <item cpeid="cpe:/a:microsoft:ip_helper" path="C:\Windows\System32\svchost.exe -k NetSvcs" name="iphlpsvc" refid="559" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:ipsec_services" path="C:\WINDOWS\system32\lsass.exe" name="PolicyAgent" refid="163" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:ipv6_helper_service" path="C:\WINDOWS\system32\svchost.exe -k NetworkService" name="6to4" refid="307" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:kerberos_key_distribution_center" path="C:\WINDOWS\System32\lsass.exe" name="kdc" refid="346" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:ktmrm_for_distributed_transaction_coordinator" path="C:\Windows\System32\svchost.exe -k NetworkService" name="KtmRm" refid="565" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:lanmanserver" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="lanmanserver" refid="94" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:license_logging" path="C:\WINDOWS\System32\llssrv.exe" name="LicenseService" refid="349" filename="llssrv.exe" />
  <item cpeid="cpe:/a:microsoft:linklayer_topology_discovery_mapper" path="C:\Windows\System32\svchost.exe -k LocalService" name="lltdsvc" refid="574" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:logical_disk_manager" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="dmserver" refid="46" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:logical_disk_manager_administrative_service" path="C:\WINDOWS\System32\dmadmin.exe /com" name="dmadmin" refid="43" filename="dmadmin.exe" />
  <item cpeid="cpe:/a:microsoft:machine_debug_manager" path=""C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"" name="MDM" refid="103" filename="mdm.exe" />
  <item cpeid="cpe:/a:microsoft:message_queuing" path="C:\Windows\system32\mqsvc.exe" name="MSMQ" refid="595" filename="mqsvc.exe" />
  <item cpeid="cpe:/a:microsoft:message_queuing_triggers" path="C:\WINDOWS\system32\mqtgsvc.exe" name="MSMQTriggers" refid="868" filename="mqtgsvc.exe" />
  <item cpeid="cpe:/a:microsoft:messenger" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="Messenger" refid="106" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:mhn" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="MHN" refid="865" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:microsoft_connector_for_pop3_mailboxes" path="C:\Program Files\Microsoft Windows Small Business Server\Networking\POP3\imbservice.exe" name="MSPOP3Connector" refid="1054" filename="imbservice.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_exchange_imap4" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="IMAP4Svc" refid="1033" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_exchange_pop3" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="POP3Svc" refid="1060" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_exchange_routing_engine" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="RESvc" refid="1063" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_fibre_channel_platform_registration_service" path="C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted" name="FCRegSvc" refid="535" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:microsoft_iscsi_initiator_service" path="C:\Windows\system32\svchost.exe -k netsvcs" name="MSiSCSI" refid="589" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:microsoft_net_framework_ngen_v2050727_x64" path="C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe" name="clr_optimization_v2.0.50727_64" refid="517" filename="mscorsvw.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_office_diagnostics_service" path=""C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"" name="odserv" refid="478" filename="ODSERV.EXE" />
  <item cpeid="cpe:/a:microsoft:microsoft_office_groove_audit_service" path=""C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe"" name="Microsoft Office Groove Audit Service" refid="472" filename="GrooveAuditService.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_pop3_service" path="C:\WINDOWS\system32\POP3Server\pop3svc.exe" name="Pop3Svc" refid="1147" filename="pop3svc.exe" />
  <item cpeid="cpe:/a:microsoft:microsoft_software_shadow_copy_provider" path="C:\WINDOWS\System32\svchost.exe -k swprv" name="swprv" refid="418" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:ms_software_shadow_copy_provider" path="C:\WINDOWS\system32\dllhost.exe /Processid:{8725DD63-7EFB-43D4-8F39-3A743DA890C8}" name="SwPrv" refid="232" filename="dllhost.exe" />
  <item cpeid="cpe:/a:microsoft:multimedia_class_scheduler" path="C:\Windows\system32\svchost.exe -k netsvcs" name="MMCSS" refid="580" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:net_logon" path="C:\WINDOWS\system32\lsass.exe" name="Netlogon" refid="130" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:net_runtime_optimization_service_v2050727_x86" path="C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe" name="clr_optimization_v2.0.50727_32" refid="28" filename="mscorsvw.exe" />
  <item cpeid="cpe:/a:microsoft:netmeeting_remote_desktop_sharing" path="C:\WINDOWS\system32\mnmsrvc.exe" name="mnmsrvc" refid="109" filename="mnmsrvc.exe" />
  <item cpeid="cpe:/a:microsoft:netmsmq_listener_adapter" path=""C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe" -NetMsmqActivator" name="NetMsmqActivator" refid="598" filename="SMSvcHost.exe" />
  <item cpeid="cpe:/a:microsoft:netpipe_listener_adapter" path=""C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe"" name="NetPipeActivator" refid="601" filename="SMSvcHost.exe" />
  <item cpeid="cpe:/a:microsoft:nettcp_listener_adapter" path=""C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe"" name="NetTcpActivator" refid="607" filename="SMSvcHost.exe" />
  <item cpeid="cpe:/a:microsoft:nettcp_port_sharing_service" path=""C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"" name="NetTcpPortSharing" refid="136" filename="SMSvcHost.exe" />
  <item cpeid="cpe:/a:microsoft:network_access_protection_agent" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="napagent" refid="121" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_connections" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="Netman" refid="133" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_dde" path="C:\WINDOWS\system32\netdde.exe" name="NetDDE" refid="124" filename="netdde.exe" />
  <item cpeid="cpe:/a:microsoft:network_dde_dsdm" path="C:\WINDOWS\system32\netdde.exe" name="NetDDEdsdm" refid="127" filename="netdde.exe" />
  <item cpeid="cpe:/a:microsoft:network_list_service" path="C:\Windows\System32\svchost.exe -k LocalService" name="netprofm" refid="604" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_location_awareness" path="C:\Windows\System32\svchost.exe -k NetworkService" name="NlaSvc" refid="610" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_location_awareness_nla" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="Nla" refid="139" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_news_transfer_protocol_nntp" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="NntpSvc" refid="1057" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:network_provisioning_service" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="xmlprov" refid="304" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:network_store_interface_service" path="C:\Windows\system32\svchost.exe -k LocalService" name="nsi" refid="613" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:nt_lm_security_support_provider" path="C:\WINDOWS\system32\lsass.exe" name="NtLmSsp" refid="142" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:nvidia_display_driver_service" path="C:\WINDOWS\system32\nvsvc32.exe" name="NVSvc" refid="373" filename="nvsvc32.exe" />
  <item cpeid="cpe:/a:microsoft:office_document_conversions_launcher_service" path=""C:\Program Files\Microsoft Office Servers\12.0\Bin\Microsoft.Office.Server.Conversions.Launcher.exe"" name="DCLauncher" refid="1234" filename="Microsoft.Office.Server.Conversions.Launcher.exe" />
  <item cpeid="cpe:/a:microsoft:office_document_conversions_load_balancer_service" path=""C:\Program Files\Microsoft Office Servers\12.0\Bin\Microsoft.Office.Server.Conversions.LoadBalancer.exe"" name="DCLoadBalancer" refid="1237" filename="Microsoft.Office.Server.Conversions.LoadBalancer.exe" />
  <item cpeid="cpe:/a:microsoft:office_source_engine" path=""C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"" name="ose" refid="154" filename="OSE.EXE" />
  <item cpeid="cpe:/a:microsoft:offline_files" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="CscService" refid="520" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:onecare_antispyware_and_antivirus" path=""C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe"" name="OneCareMP" refid="1111" filename="MsMpEng.exe" />
  <item cpeid="cpe:/a:microsoft:onecare_firewall" path=""C:\Program Files (x86)\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe"" name="msfwsvc" refid="1099" filename="msfwsvc.exe" />
  <item cpeid="cpe:/a:microsoft:parental_controls" path="C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted" name="WPCSvc" refid="823" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:peer_name_resolution_protocol" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="PNRPsvc" refid="799" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:peer_networking_grouping" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="p2psvc" refid="790" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:peer_networking_identity_manager" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="p2pimsvc" refid="787" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:performance_counter_dll_host" path="C:\Windows\SysWow64\perfhost.exe" name="PerfHost" refid="616" filename="perfhost.exe" />
  <item cpeid="cpe:/a:microsoft:performance_logs__alerts" path="C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork" name="pla" refid="619" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:performance_logs_and_alerts" path="C:\WINDOWS\system32\smlogsvc.exe" name="SysmonLog" refid="235" filename="smlogsvc.exe" />
  <item cpeid="cpe:/a:microsoft:plug_and_play" path="C:\WINDOWS\system32\services.exe" name="PlugPlay" refid="160" filename="services.exe" />
  <item cpeid="cpe:/a:microsoft:pml_driver_hpz12" path="H:\WINDOWS\system32\HPZipm12.exe" name="Pml Driver HPZ12" refid="961" filename="HPZipm12.exe" />
  <item cpeid="cpe:/a:microsoft:pnpx_ip_bus_enumerator" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="IPBusEnum" refid="556" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:pnrp_machine_name_publication_service" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="PNRPAutoReg" refid="796" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:portable_device_enumerator_service" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="WPDBusEnum" refid="706" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:portable_media_serial_number_service" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="WmdmPmSN" refid="280" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:print_server_for_macintosh" path="C:\WINDOWS\system32\sfmprint.exe" name="MacPrint" refid="1252" filename="sfmprint.exe" />
  <item cpeid="cpe:/a:microsoft:print_spooler" path="C:\WINDOWS\system32\spoolsv.exe" name="Spooler" refid="220" filename="spoolsv.exe" />
  <item cpeid="cpe:/a:microsoft:problem_reports_and_solutions_control_panel_support" path="C:\Windows\System32\svchost.exe -k netsvcs" name="wercplsupport" refid="685" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:program_compatibility_assistant_service" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="PcaSvc" refid="793" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:protected_storage" path="C:\WINDOWS\system32\lsass.exe" name="ProtectedStorage" refid="166" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:protexislicensing" path="C:\WINDOWS\system32\PSIService.exe" name="ProtexisLicensing" refid="883" filename="PSIService.exe" />
  <item cpeid="cpe:/a:microsoft:qos_rsvp" path="C:\WINDOWS\system32\rsvp.exe" name="RSVP" refid="190" filename="rsvp.exe" />
  <item cpeid="cpe:/a:microsoft:quality_windows_audio_video_experience" path="C:\Windows\system32\svchost.exe -k LocalService" name="QWAVE" refid="802" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:readyboost" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="EMDMgmt" refid="760" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:regsrvc" path="C:\WINDOWS\System32\RegSrvc.exe" name="RegSrvc" refid="1135" filename="RegSrvc.exe" />
  <item cpeid="cpe:/a:microsoft:remote_access_auto_connection_manager" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="RasAuto" refid="169" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:remote_access_connection_manager" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="RasMan" refid="172" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:remote_access_quarantine_agent" path="C:\WINDOWS\system32\rqs.exe" name="rqs" refid="1258" filename="rqs.exe" />
  <item cpeid="cpe:/a:microsoft:remote_administration_service" path="H:\WINDOWS\system32\ServerAppliance\srvcsurg.exe" name="srvcsurg" refid="967" filename="srvcsurg.exe" />
  <item cpeid="cpe:/a:microsoft:remote_desktop_help_session_manager" path="C:\WINDOWS\system32\sessmgr.exe" name="RDSessMgr" refid="175" filename="sessmgr.exe" />
  <item cpeid="cpe:/a:microsoft:remote_installation" path="H:\WINDOWS\system32\tcpsvcs.exe" name="BINLSVC" refid="925" filename="tcpsvcs.exe" />
  <item cpeid="cpe:/a:microsoft:remote_procedure_call_rpc" path="C:\WINDOWS\system32\svchost -k rpcss" name="RpcSs" refid="187" filename="svchos" />
  <item cpeid="cpe:/a:microsoft:remote_procedure_call_rpc_locator" path="C:\WINDOWS\system32\locator.exe" name="RpcLocator" refid="184" filename="locator.exe" />
  <item cpeid="cpe:/a:microsoft:remote_registry" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="RemoteRegistry" refid="181" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:remote_server_manager" path="H:\WINDOWS\system32\ServerAppliance\appmgr.exe" name="appmgr" refid="922" filename="appmgr.exe" />
  <item cpeid="cpe:/a:microsoft:removable_storage" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="NtmsSvc" refid="145" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:resultant_set_of_policy_provider" path="C:\WINDOWS\system32\RSoPProv.exe" name="RSoPProv" refid="397" filename="RSoPProv.exe" />
  <item cpeid="cpe:/a:microsoft:routing_and_remote_access" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="RemoteAccess" refid="178" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:sbcore_service" path="C:\WINDOWS\System32\sbscrexe.exe" name="SBCore" refid="1066" filename="sbscrexe.exe" />
  <item cpeid="cpe:/a:microsoft:secondary_logon" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="seclogon" refid="205" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:secure_socket_tunneling_protocol_service" path="C:\Windows\system32\svchost.exe -k LocalService" name="SstpSvc" refid="643" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:security_accounts_manager" path="C:\WINDOWS\system32\lsass.exe" name="SamSs" refid="193" filename="lsass.exe" />
  <item cpeid="cpe:/a:microsoft:security_center" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="wscsvc" refid="292" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:server_for_nfs" path="C:\WINDOWS\system32\nfssvc.exe" name="NfsSvc" refid="991" filename="nfssvc.exe" />
  <item cpeid="cpe:/a:microsoft:server_for_pcnfs" path="C:\WINDOWS\system32\pcnfsd.exe" name="Pcnfsd" refid="994" filename="pcnfsd.exe" />
  <item cpeid="cpe:/a:microsoft:sharepoint_timer_service" path="C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\BIN\OWSTIMER.EXE" name="SPTimer" refid="1072" filename="OWSTIMER.EXE" />
  <item cpeid="cpe:/a:microsoft:shell_hardware_detection" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="ShellHWDetection" refid="214" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:simple_mail_transfer_protocol_smtp" path="C:\WINDOWS\system32\inetsrv\inetinfo.exe" name="SMTPSVC" refid="1069" filename="inetinfo.exe" />
  <item cpeid="cpe:/a:microsoft:simple_tcpip_services" path="C:\Windows\System32\tcpsvcs.exe" name="simptcp" refid="631" filename="tcpsvcs.exe" />
  <item cpeid="cpe:/a:microsoft:single_instance_storage_groveler" path="H:\WINDOWS\system32\grovel.exe" name="Groveler" refid="931" filename="grovel.exe" />
  <item cpeid="cpe:/a:microsoft:sl_ui_notification_service" path="C:\Windows\system32\svchost.exe -k LocalService" name="SLUINotify" refid="637" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:smart_card" path="C:\WINDOWS\System32\SCardSvr.exe" name="SCardSvr" refid="196" filename="SCardSvr.exe" />
  <item cpeid="cpe:/a:microsoft:smart_card_removal_policy" path="C:\Windows\system32\svchost.exe -k netsvcs" name="SCPolicySvc" refid="625" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:snmp_service" path="C:\WINDOWS\System32\snmp.exe" name="SNMP" refid="901" filename="snmp.exe" />
  <item cpeid="cpe:/a:microsoft:snmp_trap" path="C:\Windows\System32\snmptrap.exe" name="SNMPTRAP" refid="640" filename="snmptrap.exe" />
  <item cpeid="cpe:/a:microsoft:software_licensing" path="C:\Windows\system32\SLsvc.exe" name="slsvc" refid="634" filename="SLsvc.exe" />
  <item cpeid="cpe:/a:microsoft:special_administration_console_helper" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="sacsvr" refid="403" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:sql_active_directory_helper_service" path="H:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE" name="MSSQLServerADHelper100" refid="955" filename="SQLADHLP.EXE" />
  <item cpeid="cpe:/a:microsoft:sql_server_active_directory_helper" path=""C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe"" name="MSSQLServerADHelper" refid="361" filename="sqladhlp90.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_agent_mssqlserver" path=""C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE" -i MSSQLSERVER" name="SQLSERVERAGENT" refid="409" filename="SQLAGENT90.EXE" />
  <item cpeid="cpe:/a:microsoft:sql_server_analysis_services_mssqlserver" path=""C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe" -s "C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\Config"" name="MSSQLServerOLAPService" refid="364" filename="msmdsrv.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_analysis_services_sqlexpress" path=""C:\Program Files\Microsoft SQL Server\MSSQL.3\OLAP\bin\msmdsrv.exe" -s "C:\Program Files\Microsoft SQL Server\MSSQL.3\OLAP\Config"" name="MSOLAP" refid="1189" filename="msmdsrv.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_browser" path=""C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe"" name="SQLBrowser" refid="406" filename="sqlbrowser.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_fulltext_search_mssqlserver" path=""C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe" -s:MSSQL.1 -f:MSSQLSERVER" name="msftesql" refid="355" filename="msftesql.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_integration_services" path=""C:\Program Files\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe"" name="MsDtsServer" refid="352" filename="MsDtsSrvr.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_integration_services_100" path="H:\Program Files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe" name="MsDtsServer100" refid="949" filename="MsDtsSrvr.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_mssqlserver" path=""C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER" name="MSSQLSERVER" refid="358" filename="sqlservr.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_reporting_services_mssqlserver" path=""C:\Program Files\Microsoft SQL Server\MSSQL.3\Reporting Services\ReportServer\bin\ReportingServicesService.exe"" name="ReportServer" refid="376" filename="ReportingServicesService.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_sqlexpress" path=""c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS" name="MSSQL" refid="475" filename="sqlservr.exe" />
  <item cpeid="cpe:/a:microsoft:sql_server_vss_writer" path=""C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"" name="SQLWriter" refid="412" filename="sqlwriter.exe" />
  <item cpeid="cpe:/a:microsoft:sqlagent" path="C:\Program Files\Microsoft SQL Server\MSSQL$SBSMONITORING\Binn\sqlagent.EXE -i SBSMONITORING" name="SQLAgent" refid="1075" filename="sqlagent.EX" />
  <item cpeid="cpe:/a:microsoft:ssdp_discovery_service" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="SSDPSRV" refid="226" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:superfetch" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="SysMain" refid="646" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:system_event_notification" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="SENS" refid="208" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:system_restore_service" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="srservice" refid="223" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:tablet_pc_input_service" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="TabletInputService" refid="814" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:task_scheduler" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="Schedule" refid="199" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:tcpip_netbios_helper" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="LmHosts" refid="100" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:tcpip_netbios_helper" path="C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted" name="lmhosts" refid="577" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:tcpip_print_server" path="C:\WINDOWS\system32\tcpsvcs.exe" name="LPDSVC" refid="856" filename="tcpsvcs.exe" />
  <item cpeid="cpe:/a:microsoft:telephony" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="TapiSrv" refid="238" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:telnet" path="C:\WINDOWS\system32\tlntsvr.exe" name="TlntSvr" refid="247" filename="tlntsvr.exe" />
  <item cpeid="cpe:/a:microsoft:terminal_services" path="C:\WINDOWS\System32\svchost -k DComLaunch" name="TermService" refid="241" filename="svchos" />
  <item cpeid="cpe:/a:microsoft:terminal_services_configuration" path="C:\Windows\System32\svchost.exe -k netsvcs" name="SessionEnv" refid="628" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:terminal_services_session_directory" path="C:\WINDOWS\System32\tssdis.exe" name="Tssdis" refid="424" filename="tssdis.exe" />
  <item cpeid="cpe:/a:microsoft:terminal_services_usermode_port_redirector" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="UmRdpService" refid="661" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:themes" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="Themes" refid="244" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:thread_ordering_server" path="C:\Windows\system32\svchost.exe -k LocalService" name="THREADORDER" refid="652" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:tpm_base_services" path="C:\Windows\System32\svchost.exe -k LocalService" name="TBS" refid="649" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:trivial_ftp_daemon" path="H:\WINDOWS\system32\tftpd.exe" name="TFTPD" refid="970" filename="tftpd.exe" />
  <item cpeid="cpe:/a:microsoft:truevector_internet_monitor" path="C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" name="vsmon" refid="916" filename="vsmon.ex" />
  <item cpeid="cpe:/a:microsoft:tuneup_theme_extension" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="UxTuneUp" refid="1324" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:uninterruptible_power_supply" path="C:\WINDOWS\System32\ups.exe" name="UPS" refid="265" filename="ups.exe" />
  <item cpeid="cpe:/a:microsoft:universal_plug_and_play_device_host" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="upnphost" refid="262" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:upload_manager" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="uploadmgr" refid="430" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:user_profile_service" path="C:\Windows\system32\svchost.exe -k netsvcs" name="ProfSvc" refid="622" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:virtual_disk_service" path="C:\WINDOWS\System32\vds.exe" name="vds" refid="433" filename="vds.exe" />
  <item cpeid="cpe:/a:microsoft:virtual_machine_helper" path=""C:\Program Files\Microsoft Virtual Server\vmh.exe" -service" name="vmh" refid="910" filename="vmh.exe" />
  <item cpeid="cpe:/a:microsoft:virtual_server" path=""C:\Program Files\Microsoft Virtual Server\vssrvc.exe"" name="Virtual Server" refid="907" filename="vssrvc.exe" />
  <item cpeid="cpe:/a:microsoft:visual_studio_2005_remote_debugger" path=""C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80" name="msvsmon80" refid="118" filename="msvsmon.exe" />
  <item cpeid="cpe:/a:microsoft:visual_studio_2008_remote_debugger" path=""C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon90" name="msvsmon90" refid="367" filename="msvsmon.exe" />
  <item cpeid="cpe:/a:microsoft:visual_studio_analyzer_rpc_bridge" path="C:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe" name="Visual Studio Analyzer RPC bridge" refid="484" filename="varpc.exe" />
  <item cpeid="cpe:/a:microsoft:visual_studio_team_foundation_build" path=""c:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\TFSBuildService.exe"" name="VSTFBUILD" refid="1231" filename="TFSBuildService.exe" />
  <item cpeid="cpe:/a:microsoft:vmware_dhcp_service" path="C:\WINDOWS\system32\vmnetdhcp.exe" name="VMnetDHCP" refid="439" filename="vmnetdhcp.exe" />
  <item cpeid="cpe:/a:microsoft:vmware_nat_service" path="C:\WINDOWS\system32\vmnat.exe" name="VMware NAT Service" refid="448" filename="vmnat.exe" />
  <item cpeid="cpe:/a:microsoft:volume_shadow_copy" path="C:\WINDOWS\System32\vssvc.exe" name="VSS" refid="268" filename="vssvc.exe" />
  <item cpeid="cpe:/a:microsoft:web_element_manager" path="H:\WINDOWS\system32\ServerAppliance\elementmgr.exe" name="elementmgr" refid="928" filename="elementmgr.exe" />
  <item cpeid="cpe:/a:microsoft:web_management_service" path="C:\Windows\system32\inetsrv\wmsvc.exe" name="WMSvc" refid="703" filename="wmsvc.exe" />
  <item cpeid="cpe:/a:microsoft:webclient" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="WebClient" refid="274" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_audio" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="audiosrv" refid="721" filename="svchost.ex" />  
  <item cpeid="cpe:/a:microsoft:windows_audio_endpoint_builder" path="C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted" name="AudioEndpointBuilder" refid="508" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_backup" path="C:\Windows\system32\svchost.exe -k SDRSVC" name="SDRSVC" refid="805" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_cardspace" path=""C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"" name="idsvc" refid="88" filename="infocard.exe" />
  <item cpeid="cpe:/a:microsoft:windows_color_system" path="C:\Windows\system32\svchost.exe -k wcssvc" name="WcsPlugInService" refid="673" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_connect_now__config_registrar" path="C:\Windows\System32\svchost.exe -k LocalService" name="wcncsvc" refid="820" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_defender" path=""C:\Program Files\Windows Defender\MsMpEng.exe"" name="WinDefend" refid="487" filename="MsMpEng.exe" />
  <item cpeid="cpe:/a:microsoft:windows_deployment_services_server" path="H:\WINDOWS\system32\svchost.exe -k WDSServer" name="WDSServer" refid="973" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_driver_foundation__usermode_driver_framework" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="wudfsvc" refid="718" filename="svchost.ex" />  
  <item cpeid="cpe:/a:microsoft:windows_error_reporting_service" path="C:\Windows\System32\svchost.exe -k WerSvcGroup" name="WerSvc" refid="688" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_event_collector" path="C:\Windows\system32\svchost.exe -k NetworkService" name="Wecsvc" refid="682" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_event_log" path="C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" name="EventLog" refid="532" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_firewall" path="C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork" name="MpsSvc" refid="583" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_firewallinternet_connection_sharing_ics" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="SharedAccess" refid="211" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_image_acquisition_wia" path="C:\WINDOWS\system32\svchost.exe -k imgsvc" name="stisvc" refid="229" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_installer" path="C:\Windows\system32\msiexec /V" name="msiserver" refid="592" filename="msiexec" />
  <item cpeid="cpe:/a:microsoft:windows_internet_name_service_wins" path="H:\WINDOWS\System32\wins.exe" name="WINS" refid="976" filename="wins.exe" />
  <item cpeid="cpe:/a:microsoft:windows_live_onecare" path="C:\Program Files (x86)\Microsoft Windows OneCare Live\winss.exe" name="winss" refid="1117" filename="winss.exe" />
  <item cpeid="cpe:/a:microsoft:windows_live_setup_service" path=""C:\Program Files\Windows Live\installer\WLSetupSvc.exe"" name="WLSetupSvc" refid="466" filename="WLSetupSvc.exe" />
  <item cpeid="cpe:/a:microsoft:windows_management_instrumentation" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="winmgmt" refid="277" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_management_instrumentation_driver_extensions" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="Wmi" refid="283" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_media_center_extender_service" path="C:\Windows\system32\svchost.exe -k LocalService" name="Mcx2Svc" refid="784" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_media_center_service_launcher" path="C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork" name="ehstart" refid="757" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_media_player_network_sharing_service" path=""C:\Program Files\Windows Media Player\WMPNetwk.exe"" name="WMPNetworkSvc" refid="289" filename="WMPNetwk.exe" />
  <item cpeid="cpe:/a:microsoft:windows_media_services" path="H:\WINDOWS\system32\Windows Media\Server\WMServer.exe" name="WMServer" refid="979" filename="WMServer.exe" />
  <item cpeid="cpe:/a:microsoft:windows_mobile_2003based_device_connectivity" path="C:\Windows\system32\svchost.exe -k WindowsMobile" name="WcesComm" refid="1174" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_mobilebased_device_connectivity" path="C:\Windows\system32\svchost.exe -k WindowsMobile" name="RapiMgr" refid="1171" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_presentation_foundation_font_cache_3000" path="c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe" name="FontCache3.0.0.0" refid="70" filename="PresentationFontCache.exe" />
  <item cpeid="cpe:/a:microsoft:windows_process_activation_service" path="C:\Windows\system32\svchost.exe -k iissvcs" name="WAS" refid="667" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_remote_management_wsmanagement" path="C:\Windows\System32\svchost.exe -k NetworkService" name="WinRM" refid="694" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_search" path="C:\WINDOWS\system32\SearchIndexer.exe /Embedding" name="WSearch" refid="490" filename="SearchIndexer.exe" />
  <item cpeid="cpe:/a:microsoft:windows_system_resource_manager" path="C:\Windows\system32\wsrm.exe" name="WSRM" refid="709" filename="wsrm.exe" />
  <item cpeid="cpe:/a:microsoft:windows_time" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="w32time" refid="1000" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:windows_user_mode_driver_framework" path="C:\WINDOWS\system32\wdfmgr.exe" name="UMWdf" refid="427" filename="wdfmgr.exe" />
  <item cpeid="cpe:/a:microsoft:winhttp_web_proxy_autodiscovery_service" path="C:\WINDOWS\system32\svchost.exe -k LocalService" name="WinHttpAutoProxySvc" refid="454" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:wired_autoconfig" path="C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" name="dot3svc" refid="526" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:wireless_zero_configuration" path="C:\WINDOWS\System32\svchost.exe -k netsvcs" name="WZCSVC" refid="301" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:wlan_autoconfig" path="C:\Windows\system32\svchost.exe -k WlansvcGroup" name="Wlansvc" refid="697" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:wmdm_pmsp_service" path="C:\WINDOWS\system32\MsPMSPSv.exe" name="WMDM PMSP Service" refid="919" filename="MsPMSPSv.exe" />
  <item cpeid="cpe:/a:microsoft:wmi_performance_adapter" path="C:\Windows\system32\wbem\WmiApSrv.exe" name="wmiApSrv" refid="700" filename="WmiApSrv.exe" />
  <item cpeid="cpe:/a:microsoft:workstation" path="C:\WINDOWS\system32\svchost.exe -k netsvcs" name="lanmanworkstation" refid="97" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:world_wide_web_publishing_service" path="C:\WINDOWS\System32\svchost.exe -k iissvcs" name="W3SVC" refid="451" filename="svchost.ex" />
  <item cpeid="cpe:/a:microsoft:xaudioservice" path="C:\Windows\system32\DRIVERS\xaudio.exe" name="XAudioService" refid="826" filename="xaudio.exe" />
  <item cpeid="cpe:/a:mionet:mionet" path=""H:\Program Files\MioNet\MioNetManager.exe" -s "H:\Program Files\MioNet\wrapper.conf"" name="MioNet" refid="946" filename="MioNetManager.exe" />
  <item cpeid="cpe:/a:msn_messenger:messenger_sharing_folders_usn_journal_reader_service" path=""C:\Program Files\MSN Messenger\usnsvc.exe"" name="usnjsvc" refid="463" filename="usnsvc.exe" />
  <item cpeid="cpe:/a:nero:nbservice" path="C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe" name="NBService" refid="1102" filename="NBService.exe" />
  <item cpeid="cpe:/a:nero:nmindexingservice" path=""C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe"" name="NMIndexingService" refid="1105" filename="NMIndexingService.exe" />
  <item cpeid="cpe:/a:norton_internet_security:symantec_is_password_validation" path=""c:\Program Files\Norton Internet Security\isPwdSvc.exe"" name="ISPwdSvc" refid="769" filename="isPwdSvc.exe" />
  <item cpeid="cpe:/a:novadigm:radia_management_agent" path="C:/Novadigm/ManagementAgent/nvdkit.exe" name="rma" refid="1213" />
  <item cpeid="cpe:/a:novell:novell_zenworks_pre_agent" path="C:\WINDOWS\novell\zenworks\bin\ZENPreAgent.exe" name="ZENPreAgent" refid="1006" filename="ZENPreAgent.exe" />
  <item cpeid="cpe:/a:ntru cryptosystems:ntru_hybrid_tss_v2025_tcs" path=""C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe"" name="tcsd_win32.exe" refid="1312" filename="tcsd_win32.exe" />
  <item cpeid="cpe:/a:nvidia:nvidia_display_driver_service" path="C:\Windows\system32\nvvsvc.exe" name="nvsvc" refid="1108" filename="nvvsvc.exe" />
  <item cpeid="cpe:/a:p4_10.20.15.1871667_dog:blackboard_application_folder_monitor" path=""C:\p4_10.20.15.1871667_dog\COMMERCE\CommerceDev\eCommerce\Mainline\Source\WindowsServices\BlackBoard.FileMonitor\BlackBoard.FileMonitor\bin\Debug\BlackBoard.ECommerce.FileMonitor.exe"" name="BlackBoard Application Folder Monitor" refid="841" filename="BlackBoard.ECommerce.FileMonitor.exe" />
  <item cpeid="cpe:/a:parallels:parallels_coherence_service" path=""C:\Program Files\Parallels\Parallels Tools\cohrence.exe"" name="cohrence" refid="1177" filename="cohrence.exe" />
  <item cpeid="cpe:/a:parallels:parallels_tools_utility_service" path="C:\Program Files\Parallels\Parallels Tools\toolsrv.exe" name="toolsrv" refid="1180" filename="toolsrv.exe" />
  <item cpeid="cpe:/a:plusservice:plusservice_dev" path=""c:\plusService\service\WCFServicedHost.exe"" name="PlusService_Dev" refid="1201" filename="WCFServicedHost.exe" />
  <item cpeid="cpe:/a:program_files_(x86):google_desktop_manager_5780222438" path=""C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe"" name="GoogleDesktopManager-022208-143751" refid="544" filename="GoogleDesktop.exe" />
  <item cpeid="cpe:/a:promise:utmsgagt" path=""C:\Program Files\Promise\Promise Disk Controller Manager\UtMsgAgt.exe"" name="UtMsgSvc" refid="1321" filename="UtMsgAgt.exe" />
  <item cpeid="cpe:/a:proxyplus:fortech_proxy" path="C:\Program Files\ProxyPlus\ProxyPlus.exe" name="ProxyPlus" refid="1327" filename="ProxyPlus.exe" />
  <item cpeid="cpe:/a:pure_networks:pure_networks_net2go_service" path=""C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe" -k runservice" name="nmraapache" refid="871" filename="nmraapache.exe" />
  <item cpeid="cpe:/a:pure_networks_shared:pure_networks_platform_service" path=""C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe"" name="nmservice" refid="874" filename="nmsrvc.exe" />
  <item cpeid="cpe:/a:relayservice:am_mq_relay_service" path=""E:\RelayService\AMMQService.exe"" name="AMMQ Service" refid="1012" filename="AMMQService.exe" />
  <item cpeid="cpe:/a:remote_task_manager:remote_task_manager_service" path="C:\Program Files\Remote Task Manager\RTMService.exe" name="RTM" refid="400" filename="RTMService.exe" />
  <item cpeid="cpe:/a:roxio:liveshare_p2p_server" path=""C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe"" name="RoxLiveShare" refid="886" filename="RoxLiveShare.exe" />
  <item cpeid="cpe:/a:roxio:liveshare_p2p_server_9" path=""C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe"" name="RoxLiveShare9" refid="385" filename="RoxLiveShare9.exe" />
  <item cpeid="cpe:/a:roxio:roxio_hard_drive_watcher" path=""C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe"" name="RoxWatch" refid="898" filename="RoxWatch.exe" />
  <item cpeid="cpe:/a:roxio:roxio_hard_drive_watcher_9" path=""C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe"" name="RoxWatch9" refid="391" filename="RoxWatch9.exe" />
  <item cpeid="cpe:/a:roxio:roxio_upnp_renderer_9" path=""C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe"" name="Roxio UPnP Renderer 9" refid="379" filename="RoxioUPnPRenderer9.exe" />
  <item cpeid="cpe:/a:roxio:roxio_upnp_server_9" path=""C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe"" name="Roxio Upnp Server 9" refid="382" filename="RoxioUpnpService9.exe" />
  <item cpeid="cpe:/a:roxio:roxmediadb" path=""C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe"" name="RoxMediaDB" refid="889" filename="RoxMediaDB.exe" />
  <item cpeid="cpe:/a:roxio:roxmediadb9" path=""C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe"" name="RoxMediaDB9" refid="388" filename="RoxMediaDB9.exe" />
  <item cpeid="cpe:/a:roxio:roxupnprenderer" path=""C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe"" name="RoxUPnPRenderer" refid="892" filename="RoxUpnpRenderer.exe" />
  <item cpeid="cpe:/a:roxio:roxupnpserver" path=""C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe"" name="RoxUpnpServer" refid="895" filename="RoxUpnpServer.exe" />
  <item cpeid="cpe:/a:seagate:acronis_scheduler2_service" path=""C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe"" name="AcrSch2Svc" refid="829" filename="schedul2.exe" />
  <item cpeid="cpe:/a:servicing:windows_modules_installer" path="C:\Windows\servicing\TrustedInstaller.exe" name="TrustedInstaller" refid="655" filename="TrustedInstaller.exe" />
  <item cpeid="cpe:/a:sfu:perl_socket_service" path="C:\SFU\Perl\bin\PerlSock.exe" name="PerlSock" refid="1255" filename="PerlSock.exe" />
  <item cpeid="cpe:/a:sfu:remote_shell_service" path="C:\SFU\common\rshsvc.exe" name="RshSvc" refid="1261" filename="rshsvc.exe" />
  <item cpeid="cpe:/a:sfu:user_name_mapping" path="C:\SFU\Mapper\mapsvc.exe" name="Mapsvc" refid="988" filename="mapsvc.exe" />
  <item cpeid="cpe:/a:sfu:windows_cron_service" path="C:\SFU\common\cron.exe" name="CronService" refid="985" filename="cron.exe" />
  <item cpeid="cpe:/a:silicon_image:sataraid5_configuration_service" path=""C:\Program Files\Silicon Image\3114-W-A64-R SATARAID5\SATARaid5ConfigService.exe"" name="SATARaid5 Config Service" refid="1114" filename="SATARaid5ConfigService.exe" />
  <item cpeid="cpe:/a:surething_shared:stllssvr" path=""C:\Program Files\Common Files\SureThing Shared\stllssvr.exe"" name="stllssvr" refid="415" filename="stllssvr.exe" />
  <item cpeid="cpe:/a:symantec:automatic_liveupdate_scheduler" path=""C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"" name="Automatic LiveUpdate Scheduler" refid="724" filename="ALUSchedulerSvc.exe" />
  <item cpeid="cpe:/a:symantec:backup_exec_dlo_maintenance_service" path=""C:\Program Files\Symantec\Backup Exec\NT\dlomaintsvcu.exe"" name="DLOMaintenanceSvc" refid="1018" filename="dlomaintsvcu.exe" />
  <item cpeid="cpe:/a:symantec:backup_exec_remote_agent_for_windows_systems" path=""C:\Program Files\Symantec\Backup Exec\RAWS\beremote.exe"" name="BackupExecAgentAccelerator" refid="1015" filename="beremote.exe" />
  <item cpeid="cpe:/a:symantec:com_host" path=""c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe"" name="comHost" refid="745" filename="comHost.exe" />
  <item cpeid="cpe:/a:symantec:defwatch" path=""C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe"" name="DefWatch" refid="457" filename="DefWatch.exe" />
  <item cpeid="cpe:/a:symantec:liveupdate" path=""C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"" name="LiveUpdate" refid="775" filename="LUCOMS~1.EXE" />
  <item cpeid="cpe:/a:symantec:liveupdate_notice_service" path=""C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll"" name="LiveUpdate Notice Service" refid="781" filename="PIFSvc.exe" />
  <item cpeid="cpe:/a:symantec:liveupdate_notice_service_ex" path=""c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon" name="LiveUpdate Notice Ex" refid="778" filename="ccSvcHst.exe" />
  <item cpeid="cpe:/a:symantec:symantec_antivirus_client" path=""C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe"" name="Norton AntiVirus Server" refid="460" filename="Rtvscan.exe" />
  <item cpeid="cpe:/a:symantec:symantec_appcore_service" path=""c:\Program Files\Common Files\Symantec SpCred\AppCore\AppSvc32.exe"" name="SymAppCore" refid="811" filename="AppSvc32.exe" />
  <item cpeid="cpe:/a:symantec:symantec_core_lc" path=""C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"" name="Symantec Core LC" refid="808" filename="symlcsvc.exe" />
  <item cpeid="cpe:/a:symantec:symantec_event_manager" path=""c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon" name="ccEvtMgr" refid="730" filename="ccSvcHst.exe" />
  <item cpeid="cpe:/a:symantec:symantec_lic_netconnect_service" path=""c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon" name="CLTNetCnService" refid="742" filename="ccSvcHst.exe" />
  <item cpeid="cpe:/a:symantec:symantec_settings_manager" path=""c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon" name="ccSetMgr" refid="733" filename="ccSvcHst.exe" />
  <item cpeid="cpe:/a:system:microsoft_search" path=""C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe"" name="MSSEARCH" refid="499" filename="mssearch.exe" />
  <item cpeid="cpe:/a:tfs:plerts" path="C:\tfs\Enterprise Reporting\Team\Sp-1\source\PatchLink.EnterpriseReporting.Services.PLERTS\bin\Debug\PLERTS.exe" name="PLERTS" refid="481" filename="PLERTS.exe" />
  <item cpeid="cpe:/a:tmntsrv.exe:trend_micro_realtime_service" path="C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe" name="Tmntsrv" refid="1285" filename="Tmntsrv.exe" />
  <item cpeid="cpe:/a:tmpfw.exe:trend_micro_personal_firewall" path="C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe" name="TmPfw" refid="1288" filename="TmPfw.exe" />
  <item cpeid="cpe:/a:tmproxy.exe:trend_micro_proxy_service" path="C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe" name="tmproxy" refid="1291" filename="tmproxy.exe" />
  <item cpeid="cpe:/a:trend_micro:pcctlcom.exe:trend_micro_central_control_component" path="C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe" name="PcCtlCom" refid="1276" filename="PcCtlCom.exe" />
  <item cpeid="cpe:/a:trend_micro:pcscnsrv.exe":trend_micro_protection_against_spyware" path=""C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe"" name="PcScnSrv" refid="1279" filename="PcScnSrv.exe" />
  <item cpeid="cpe:/a:trend_micro:trend_micro_clientserver_security_agent_listener" path="C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe" name="tmlisten" refid="250" filename="tmlisten.exe" />
  <item cpeid="cpe:/a:trend_micro:trend_micro_clientserver_security_agent_personal_firewall" path="C:\Program Files\Trend Micro\Client Server Security Agent\OfcPfwSvc.exe" name="OfcPfwSvc" refid="151" filename="OfcPfwSvc.exe" />
  <item cpeid="cpe:/a:trend_micro:trend_micro_clientserver_security_agent_realtime_scan" path="C:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe" name="ntrtscan" refid="148" filename="ntrtscan.exe" />
  <item cpeid="cpe:/a:update_services:update_services" path=""c:\Program Files\Update Services\Service\bin\WsusService.exe"" name="WsusService" refid="715" filename="WsusService.exe" />
  <item cpeid="cpe:/a:update_services:wsuscertserver" path=""C:\Program Files\Update Services\Service\bin\WsusCertServer.exe"" name="WSusCertServer" refid="712" filename="WsusCertServer.exe" />
  <item cpeid="cpe:/a:vmware:vmware_agent_service" path=""C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe" -d "C:\Program Files\VMware\VMware Workstation\\" -s ufad-p2v.xml" name="ufad-ws60" refid="997" filename="vmware-ufad.exe" />
  <item cpeid="cpe:/a:vmware:vmware_authorization_service" path=""C:\Program Files\VMware\VMware Server\vmware-authd.exe"" name="VMAuthdService" refid="436" filename="vmware-authd.exe" />
  <item cpeid="cpe:/a:vmware:vmware_converter_service" path=""C:\Program Files\VMware\VMware Converter\vmware-ufad.exe" -d "C:\Program Files\VMware\VMware Converter\\" -s ufad-p2v.xml" name="ufad-p2v" refid="259" filename="vmware-ufad.exe" />
  <item cpeid="cpe:/a:vmware:vmware_registration_service" path=""C:\Program Files\VMware\VMware Server\vmserverdWin32.exe"" name="vmserverdWin32" refid="445" filename="vmserverdWin32.exe" />
  <item cpeid="cpe:/a:vmware:vmware_virtual_mount_manager_extended" path=""C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe"" name="vmount2" refid="442" filename="vmount2.exe" />
  <item cpeid="cpe:/a:vongo:vongo_service" path="C:\Program Files\Vongo\VongoService.exe" name="Vongo Service" refid="817" filename="VongoService.exe" />
  <item cpeid="cpe:/a:wavesystems:datasvr2" path=""C:\Program Files\Wave Systems Corp\Common\DataServer.exe"" name="DataSvr2" refid="1303" filename="DataServer.exe" />
  <item cpeid="cpe:/a:wavexpress:tvtonic_rss" path=""C:\Program Files\Wavexpress\TVTonic\WXRSS.exe"" name="WXRSS" refid="1294" filename="WXRSS.exe" />
  <item cpeid="cpe:/a:winpcap:remote_packet_capture_protocol_v0_experimental" path=""C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"" name="rpcapd" refid="394" filename="rpcapd.exe" />
  <item cpeid="cpe:/a:xceed_components:xceed_chart_for_aspnet_renderer_service" path=""C:\Program Files\Xceed Components\Bin\.NET\Xceed.Chart.Renderer.Service.exe"" name="Xceed.Chart.Renderer.Service" refid="1027" filename="Xceed.Chart.Renderer.Service.exe" />
  <item cpeid="cpe:/a:xoreax:incredibuild_agent" path="C:\Program Files\Xoreax\IncrediBuild\BuildService.exe" name="IncrediBuild_Agent" refid="493" filename="BuildService.exe" />
</inventorytracker>

[Andrew Buttner]

Ken,

Are you looking to get those names in 'servicetracker.xml' added to the
Official CPE Dictionary?  If so, would you be able to send those names
over in valid CPE Dictionary format?  This would enable NIST to upload
them into the data.

Also, it seems like there needs to be some amount of normalization with
these names.  Were they auto produced from something?  For example I
see a lot of the follow:

cpe:/a:adobe:adobe_version_cue_cs3

This has the vendor name repeated in the product component.

I also see names like the following:

cpe:/a:apple:ipod_service
cpe:/a:apple:ipodservice

These look like they should be combined into a single name.


On a different note, I noticed a few Lumension names.  Would it be
possible to give us a separate CPE Dictionary file with all the known
Lumension names since you are the primary source vendor here and we
would be able to just import them without all the research and
normalization.

Thanks
Drew



>-----Original Message-----
>From: Ken Lassesen [mailto:[hidden email]]
>Sent: Thursday, July 10, 2008 12:06 PM
>To: cpe-discussion-list CPE Community Forum
>Subject: [CPE-DISCUSSION-LIST] Automated Definitions Thread
>
>Bring this over here from [OVAL-DISCUSSION-LIST] for guidance /
comments

>
>-----Original Message-----
>From: Ken Lassesen
>Sent: Wednesday, July 09, 2008 3:30 PM
>To: OVAL Discussion List (Closed Public Discussion)
>Subject: RE: [OVAL-DISCUSSION-LIST] Automated Definitions Thread
>
>Thank for the info and guidance.
>
>I attached the Service Mapping to CPE file, for review (before
>resubmitting the OVAL definitions).  Directly email me if you have a
>better mapping for any item. (just cut and paste the revised node to
>make my life easier!) -- everyone is welcome to join in!
>
>Ken
>
>-----Original Message-----
>Comments
>
>Many were auto-generated from the available data. This creates a
>dilemma...
>
>* In theory, CPE is a naming pattern that could be used to
>auto-generated (with review for rationality) the ids.... that is the
>track that I took.  Windows Services are likely below the radar for

CPE,

>because they may be part of an application BUT are distinct and
>separate. For example SQLServer is an application, SQLAgent is part of
>this application as is SQLBrowser.
>
>* MITRE, prefers the use of CPE wherever possible.
>
>Guidance Needed: at least 3 solutions, run with these CPE, only use
>these if there is an exact match in the official one (the sin of
>omission is then on other's head!) or omit them entirely.
>
>-----Original Message-----
>From: SSA Team. [mailto:[hidden email]]
>Sent: Thursday, July 10, 2008 1:36 AM
>To: [hidden email]
>Subject: Re: [OVAL-DISCUSSION-LIST] Automated Definitions Thread
>
>Hi,
>
>I've reviewed the file that maps services to their appropriate CPE's.

I
>checked the official CPE dictonary but many entries are not available.
>
>Ken, have you generate them by yourself ?
>Should the CPE Board validate (via CPE submission them before being a
>part of the official CPE dictionary repository at NVD
>(http://nvd.nist.gov/cpe.cfm)?
>
>
>As we started a similar project (DPE - Default Password Enumeration),
we

>did not allowed the integration of "unofficial" CPE's entries.
>Here is the link of DPE along with the XSD CPE validation
>[http://www.security-database.com/dpe/DPE_schema_v0.3.zip]
>
>Or maybe i just missed something !!
>
>Regards
>Nabil
>security-database.com
>
>
>
>
>
>
>
>After a quick look, it seems like many of the CPE names are better.
>However, I think the cpe-discussion-list would be the right place to
>work on vetting these names. I also think that the cpe community might
>be the correct place to work to agree on what cpe name is tied to a
>given binary on a system.
>
>Can you move this discussion over to the cpe list? I realize there is

a
>bit of a confusing overlap here, but the issue is that the CPE
>Dictionary maintainer should probably see these names and they won't
if

>the names are posted on this list. I am pretty sure that the NIST CPE
>Team does not monitor this list closely.
>
>I am happy to comment as you work on this, but I think it is important
>to involve the CPE community.
>
>Thanks,
>
>Jon
>
>============================================
>Jonathan O. Baker
>The MITRE Corporation
>Email: [hidden email]