570 lines
66 KiB
Text
570 lines
66 KiB
Text
|
|
{'='*60}
|
|
1. OPERATING SYSTEM & HARDWARE
|
|
{'='*60}
|
|
Hostname: WI-WEB
|
|
Domain: wismarqcorp.local
|
|
OS: Microsoft Windows Server 2012 R2 Standard 6.3.9600
|
|
Architecture: 64-bit
|
|
Install Date: 03/02/2017 14:19:43
|
|
Last Boot: 12/30/2025 13:25:25
|
|
Total RAM: 8 GB
|
|
Processors: 2 socket(s), 2 logical
|
|
Manufacturer: VMware, Inc. VMware Virtual Platform
|
|
|
|
{'='*60}
|
|
2. DISK USAGE
|
|
{'='*60}
|
|
|
|
DeviceID Size(GB) Free(GB) Used%
|
|
-------- -------- -------- -----
|
|
C: 150 74.01 50.7
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
3. INSTALLED SOFTWARE (filtered for relevant items)
|
|
{'='*60}
|
|
|
|
DisplayName DisplayVersion Publisher Inst
|
|
allD
|
|
ate
|
|
----------- -------------- --------- ----
|
|
Tools for .Net 3.5 3.11.50727 Microsoft Corporation 2...
|
|
Composer - PHP Dependency Manager getcomposer.org 2...
|
|
Git version 2.26.2 2.26.2 The Git Development Community 2...
|
|
IIS URL Rewrite Module 2 7.2.1952 Microsoft Corporation 2...
|
|
Microsoft .NET Core Host - 3.1.5 (x64) 24.84.28920 Microsoft Corporation 2...
|
|
Microsoft .NET Core Host FX Resolver - 3.1.5 (x64) 24.84.28920 Microsoft Corporation 2...
|
|
Microsoft .NET Core Runtime - 3.1.5 (x64) 24.84.28920 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4 Multi-Targeting Pack 4.0.30319 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5 Multi-Targeting Pack 4.5.50710 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack 4.5.50932 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) 4.5.50932 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5.1 SDK 4.5.51641 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack 4.5.51209 Microsoft Corporation 2...
|
|
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) 4.5.51209 Microsoft Corporation 2...
|
|
Microsoft .NET Host - 8.0.21 (x64) 64.84.40925 Microsoft Corporation 2...
|
|
Microsoft .NET Host FX Resolver - 8.0.21 (x64) 64.84.40925 Microsoft Corporation 2...
|
|
Microsoft .NET Runtime - 8.0.21 (x64) 64.84.40925 Microsoft Corporation 2...
|
|
Microsoft .NET Runtime - 8.0.21 (x64) 8.0.21.35325 Microsoft Corporation
|
|
Microsoft ASP.NET Core 8.0.21 - Shared Framework (x64) 8.0.21.25475 Microsoft Corporation
|
|
Microsoft ASP.NET Core 8.0.21 Shared Framework (x64) 8.0.21.25475 Microsoft Corporation 2...
|
|
Microsoft OData Source for SQL Server 2016 13.1.4413.3 Microsoft Corporation 2...
|
|
Microsoft OData Source for SQL Server 2016 (x64) 13.1.4413.3 Microsoft Corporation 2...
|
|
Microsoft ODBC Driver 17 for SQL Server 17.10.6.1 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2012 Native Client 11.3.6518.0 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2014 Management Objects 12.0.2000.8 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2016
|
|
Microsoft SQL Server 2016 Microsoft Corporation
|
|
Microsoft SQL Server 2016 Policies 13.0.1601.5 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2016 Setup (English) 13.0.1601.5 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2016 T-SQL Language Service 13.0.14500.10 Microsoft Corporation 2...
|
|
Microsoft SQL Server 2016 T-SQL ScriptDom 13.0.1601.5 Microsoft Corporation 2...
|
|
Microsoft SQL Server Data-Tier Application Framework (x86) 13.0.3560.4 Microsoft Corporation 2...
|
|
Microsoft SQL Server Management Studio - 16.5.3 13.0.16106.4 Microsoft Corporation
|
|
Microsoft System CLR Types for SQL Server 2014 12.0.2402.11 Microsoft Corporation 2...
|
|
Microsoft System CLR Types for SQL Server 2016 13.0.1601.5 Microsoft Corporation 2...
|
|
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 9.0.30729.6161 Microsoft Corporation 2...
|
|
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 9.0.30729.6161 Microsoft Corporation 2...
|
|
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 12.0.21005.1 Microsoft Corporation
|
|
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 12.0.40660.0 Microsoft Corporation
|
|
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 12.0.21005.1 Microsoft Corporation
|
|
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 12.0.40660.0 Microsoft Corporation
|
|
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29914 14.28.29914.0 Microsoft Corporation
|
|
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35208 14.44.35208.0 Microsoft Corporation
|
|
Node.js 10.14.1 Node.js Foundation 2...
|
|
PHP Manager 1.2 for IIS 7 1.2.0 2...
|
|
SQL Server 2016 Batch Parser 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Client Tools Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Common Files 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Common Files 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Connection Info 13.0.14500.10 Microsoft Corporation 2...
|
|
SQL Server 2016 Connection Info 13.0.14500.10 Microsoft Corporation 2...
|
|
SQL Server 2016 DMF 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 DMF 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio for Analysis Services 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio for Analysis Services 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio for Analysis Services Localization 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio for Reporting Services 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Management Studio for Reporting Services Localization 13.0.16106.4 Microsoft Corporation 2...
|
|
SQL Server 2016 Shared Management Objects 13.0.14500.10 Microsoft Corporation 2...
|
|
SQL Server 2016 Shared Management Objects 13.0.14500.10 Microsoft Corporation 2...
|
|
SQL Server 2016 Shared Management Objects Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 Shared Management Objects Extensions 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 SQL Diagnostics 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 XEvent 13.0.1601.5 Microsoft Corporation 2...
|
|
SQL Server 2016 XEvent 13.0.1601.5 Microsoft Corporation 2...
|
|
Windows Cache Extension 2.0 for PHP 7.1 (x64) 2.0.8 Microsoft Corporation 2...
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
4. JAVA / JVM
|
|
{'='*60}
|
|
JAVA_HOME:
|
|
ERROR: The term 'java' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
|
|
|
|
{'='*60}
|
|
5. RELEVANT ENVIRONMENT VARIABLES
|
|
{'='*60}
|
|
PATH: C:\Program Files\PHP\v8.1.10;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\130\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\ManagementStudio\;C:\Program Files (x86)\PDFtk\bin\;C:\Program Files\wkhtmltopdf\bin;C:\Users\savvior\AppData\Roaming\nvm;C:\Program Files\nodejs;C:\ProgramData\ComposerSetup\bin;C:\Program Files\dotnet\;C:\Program Files\PuTTY\
|
|
|
|
{'='*60}
|
|
6. RUNNING SERVICES
|
|
{'='*60}
|
|
|
|
Name DisplayName StartType
|
|
---- ----------- ---------
|
|
AppHostSvc Application Host Helper Service Automatic
|
|
BITS Background Intelligent Transfer Service Manual
|
|
BrokerInfrastructure Background Tasks Infrastructure Service Automatic
|
|
BFE Base Filtering Engine Automatic
|
|
CertPropSvc Certificate Propagation Manual
|
|
KeyIso CNG Key Isolation Manual
|
|
EventSystem COM+ Event System Automatic
|
|
ControlNow Agent ControlNow Agent Automatic
|
|
CryptSvc Cryptographic Services Automatic
|
|
CagService Datto RMM Automatic
|
|
DcomLaunch DCOM Server Process Launcher Automatic
|
|
Dhcp DHCP Client Automatic
|
|
DPS Diagnostic Policy Service Automatic
|
|
DiagTrack Diagnostics Tracking Service Automatic
|
|
TrkWks Distributed Link Tracking Client Automatic
|
|
MSDTC Distributed Transaction Coordinator Automatic
|
|
Dnscache DNS Client Automatic
|
|
gpsvc Group Policy Client Automatic
|
|
HuntressAgent Huntress Agent Service Automatic
|
|
HuntressRio Huntress Rio Service Automatic
|
|
HuntressUpdater Huntress Updater Service Automatic
|
|
IISADMIN IIS Admin Service Automatic
|
|
IKEEXT IKE and AuthIP IPsec Keying Modules Automatic
|
|
iphlpsvc IP Helper Automatic
|
|
PolicyAgent IPsec Policy Agent Manual
|
|
LSM Local Session Manager Automatic
|
|
HealthService Microsoft Monitoring Agent Automatic
|
|
Netlogon Netlogon Automatic
|
|
NcbService Network Connection Broker Manual
|
|
Netman Network Connections Manual
|
|
netprofm Network List Service Manual
|
|
NlaSvc Network Location Awareness Automatic
|
|
nsi Network Store Interface Service Automatic
|
|
PlugPlay Plug and Play Manual
|
|
Power Power Automatic
|
|
Spooler Print Spooler Automatic
|
|
SessionEnv Remote Desktop Configuration Manual
|
|
TermService Remote Desktop Services Manual
|
|
UmRdpService Remote Desktop Services UserMode Port Redirector Manual
|
|
RpcSs Remote Procedure Call (RPC) Automatic
|
|
RpcEptMapper RPC Endpoint Mapper Automatic
|
|
ScreenConnect Client (5e25e1f1946d2dff) ScreenConnect Client (5e25e1f1946d2dff) Automatic
|
|
SamSs Security Accounts Manager Automatic
|
|
SentinelAgent Sentinel Agent Automatic
|
|
LogProcessorService SentinelOne Agent Log Processing Service Automatic
|
|
SentinelStaticEngine SentinelOne Static Service Automatic
|
|
LanmanServer Server Automatic
|
|
ShellHWDetection Shell Hardware Detection Automatic
|
|
SNMP SNMP Service Automatic
|
|
Sysmon Sysmon Automatic
|
|
SENS System Event Notification Service Automatic
|
|
SystemEventsBroker System Events Broker Automatic
|
|
Schedule Task Scheduler Automatic
|
|
lmhosts TCP/IP NetBIOS Helper Automatic
|
|
Themes Themes Automatic
|
|
TimeBroker Time Broker Manual
|
|
ProfSvc User Profile Service Automatic
|
|
VeeamEndpointBackupSvc Veeam Agent for Microsoft Windows Automatic
|
|
VeeamManagementAgentSvc Veeam Management Agent Service Automatic
|
|
VGAuthService VMware Alias Manager and Ticket Service Automatic
|
|
vm3dservice VMware SVGA Helper Service Automatic
|
|
VMTools VMware Tools Automatic
|
|
Wcmsvc Windows Connection Manager Automatic
|
|
EventLog Windows Event Log Automatic
|
|
MpsSvc Windows Firewall Automatic
|
|
FontCache Windows Font Cache Service Automatic
|
|
Winmgmt Windows Management Instrumentation Automatic
|
|
WAS Windows Process Activation Service Manual
|
|
WinRM Windows Remote Management (WS-Management) Automatic
|
|
W32Time Windows Time Manual
|
|
WinHttpAutoProxySvc WinHTTP Web Proxy Auto-Discovery Service Manual
|
|
LanmanWorkstation Workstation Automatic
|
|
W3SVC World Wide Web Publishing Service Automatic
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
7. LISTENING PORTS & ASSOCIATED PROCESSES
|
|
{'='*60}
|
|
|
|
LocalAddress LocalPort OwningProcess ProcessName
|
|
------------ --------- ------------- -----------
|
|
:: 80 4 System
|
|
0.0.0.0 135 632 svchost
|
|
:: 135 632 svchost
|
|
10.77.0.220 139 4 System
|
|
:: 443 4 System
|
|
:: 445 4 System
|
|
:: 3389 3716 svchost
|
|
0.0.0.0 3389 3716 svchost
|
|
:: 5985 4 System
|
|
:: 6183 3644 Veeam.EndPoint.Service
|
|
0.0.0.0 6183 3644 Veeam.EndPoint.Service
|
|
0.0.0.0 6184 3644 Veeam.EndPoint.Service
|
|
:: 6184 3644 Veeam.EndPoint.Service
|
|
127.0.0.1 24799 5348 HuntressUpdater
|
|
:: 47001 4 System
|
|
:: 49152 440 wininit
|
|
0.0.0.0 49152 440 wininit
|
|
:: 49153 800 svchost
|
|
0.0.0.0 49153 800 svchost
|
|
0.0.0.0 49154 860 svchost
|
|
:: 49154 860 svchost
|
|
0.0.0.0 49155 540 lsass
|
|
:: 49155 540 lsass
|
|
0.0.0.0 49160 1104 spoolsv
|
|
:: 49160 1104 spoolsv
|
|
:: 49182 540 lsass
|
|
0.0.0.0 49182 540 lsass
|
|
:: 49216 532 services
|
|
0.0.0.0 49216 532 services
|
|
0.0.0.0 49219 3796 svchost
|
|
:: 49219 3796 svchost
|
|
::1 49291 4900 Veeam.AC.Agent
|
|
0.0.0.0 49297 4900 Veeam.AC.Agent
|
|
0.0.0.0 49298 4900 Veeam.AC.Agent
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
8. IIS CONFIGURATION
|
|
{'='*60}
|
|
IIS Sites:
|
|
|
|
|
|
name : Default Web Site
|
|
id : 1
|
|
state : Started
|
|
physicalPath : %SystemDrive%\inetpub\wwwroot
|
|
Bindings : *:80:
|
|
|
|
name : portal-uat.vorteqcoil.com
|
|
id : 3
|
|
state : Started
|
|
physicalPath : C:\inetpub\portal-uat\public
|
|
Bindings : *:80:portal-uat.vorteqcoil.com; *:443:portal-uat.vorteqcoil.com;
|
|
10.77.0.220:443:portal-uat.vorteqcoil.com
|
|
|
|
name : portal-mirror.vorteqcoil.com
|
|
id : 4
|
|
state : Started
|
|
physicalPath : C:\inetpub\portal-mirror\public
|
|
Bindings : *:80:portal-mirror.vorteqcoil.com; 10.77.0.220:443:portal-mirror.vorteqcoil.com
|
|
|
|
name : vorteqmobile.savvior.net
|
|
id : 5
|
|
state : Started
|
|
physicalPath : C:\inetpub\mobile-uat\www
|
|
Bindings : *:80:vorteqmobile.savvior.net; 10.77.0.220:443:vorteqmobile.savvior.net
|
|
|
|
name : portal.vorteqcoil.com
|
|
id : 6
|
|
state : Started
|
|
physicalPath : C:\inetpub\portal-live\public
|
|
Bindings : *:80:portal.vorteqcoil.com; 10.77.0.220:443:portal.vorteqcoil.com
|
|
|
|
name : mobile.vorteqcoil.com
|
|
id : 7
|
|
state : Started
|
|
physicalPath : C:\inetpub\mobile-live\www
|
|
Bindings : *:80:mobile.vorteqcoil.com; 10.77.0.220:443:mobile.vorteqcoil.com
|
|
|
|
|
|
|
|
|
|
IIS Application Pools:
|
|
|
|
name state managedRuntimeVersion managedPipelineMode
|
|
---- ----- --------------------- -------------------
|
|
DefaultAppPool Started v4.0 Integrated
|
|
mobile.vorteqcoil.com Started v4.0 Integrated
|
|
portal.vorteqcoil.com Started v4.0 Integrated
|
|
portal-mirror.vorteqcoil.com Started v4.0 Integrated
|
|
portal-uat.vorteqcoil.com Started v4.0 Integrated
|
|
vorteqmobile.savvior.net Started v4.0 Integrated
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
9. APPLICATION SERVER DISCOVERY
|
|
{'='*60}
|
|
Searching for Tomcat/App Server directories...
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
WAR/JAR files found:
|
|
ERROR: A parameter cannot be found that matches parameter name 'Depth'.
|
|
|
|
{'='*60}
|
|
10. WEB APPLICATION DIRECTORY STRUCTURE
|
|
{'='*60}
|
|
|
|
Directory: C:\inetpub\wwwroot
|
|
ERROR: A parameter cannot be found that matches parameter name 'Depth'.
|
|
|
|
{'='*60}
|
|
11. APPLICATION CONFIG FILES (content preview)
|
|
{'='*60}
|
|
Searching for config files...
|
|
ERROR: A parameter cannot be found that matches parameter name 'Depth'.
|
|
|
|
{'='*60}
|
|
12. DATABASE DISCOVERY
|
|
{'='*60}
|
|
No local database services found - DB may be on a separate server.
|
|
|
|
{'='*60}
|
|
13. SCHEDULED TASKS (non-Microsoft)
|
|
{'='*60}
|
|
|
|
|
|
TaskName : CCleaner Update
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\Program Files\CCleaner\CCUpdate.exe
|
|
|
|
TaskName : CCleanerCrashReporting
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\Program Files\CCleaner\CCleanerBugReport.exe --product 90 --send dumps|report --path "C:\Program
|
|
Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "4b6734b4-05c3-4265-9bea-8b7490cd9315"
|
|
--version "6.38.0.11537" --silent
|
|
|
|
TaskName : CCleanerSkipUAC - dkennedy
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
|
|
|
|
TaskName : CCleanerSkipUAC - savvior
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
|
|
|
|
TaskName : CCleanerSkipUAC - sewart
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
|
|
|
|
TaskName : GoogleUpdateTaskMachineCore
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
|
|
|
|
TaskName : GoogleUpdateTaskMachineUA
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler
|
|
|
|
TaskName : PORTAL LIVE SCHEDULER
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\inetpub\artisan-production.bat
|
|
|
|
TaskName : Upload WAVE End of Month
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\WaveScripts\FTPUploadprieop.cmd ; C:\WaveScripts\vp\FTPUploadprieop.cmd ;
|
|
C:\WaveScripts\emailmonthly.bat
|
|
|
|
TaskName : Upload WAVE Files Daily
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\WaveScripts\edirun.bat ; C:\WaveScripts\FTPUploadpriprd1.cmd ; C:\WaveScripts\vp\FTPUploadpriprd1.cmd ;
|
|
C:\WaveScripts\FTPUploadpriprd2.cmd ; C:\WaveScripts\vp\FTPUploadpriprd2.cmd ;
|
|
C:\WaveScripts\FTPUploadprirc.cmd ; C:\WaveScripts\vp\FTPUploadprirc.cmd ;
|
|
C:\WaveScripts\FTPUploadpriship.cmd ; C:\WaveScripts\vp\FTPUploadpriship.cmd ; C:\WaveScripts\email.bat
|
|
|
|
TaskName : win-acme renew (acme-v02.api.letsencrypt.org)
|
|
TaskPath : \
|
|
State : Ready
|
|
Actions : C:\Users\savvior\Downloads\win-acme.v2.1.5.742.x64.pluggable\wacs.exe --renew --baseuri
|
|
"https://acme-v02.api.letsencrypt.org/"
|
|
|
|
TaskName : delete old files in temp directory
|
|
TaskPath : \Delete old files\
|
|
State : Ready
|
|
Actions : C:\Users\savvior\Desktop\removetempfiles.bat
|
|
|
|
TaskName : Firefox Background Update E7CF176E110C211B
|
|
TaskPath : \Mozilla\
|
|
State : Ready
|
|
Actions : C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG
|
|
sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-417
|
|
7-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
|
|
|
|
TaskName : AutoRepair_22.2.5.806
|
|
TaskPath : \Sentinel\
|
|
State : Ready
|
|
Actions : "c:\Program Files\SentinelOne\Sentinel Agent 22.2.5.806\uninstall.exe" /os_upgrade /q /p
|
|
{950D7697-EE20-4E40-88C2-41FEA8D7D1EB}
|
|
|
|
TaskName : Symantec Endpoint Protection Error Analyzer
|
|
TaskPath : \Symantec Endpoint Protection\
|
|
State : Ready
|
|
Actions : "C:\Program Files\Symantec\Symantec Endpoint Protection\14.3.12154.10000.105\Bin64\SymErr.exe" /analyze
|
|
|
|
TaskName : Symantec Endpoint Protection Error Processor
|
|
TaskPath : \Symantec Endpoint Protection\
|
|
State : Ready
|
|
Actions : "C:\Program Files\Symantec\Symantec Endpoint Protection\14.3.12154.10000.105\Bin64\SymErr.exe" /submit
|
|
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
14. SSL CERTIFICATES
|
|
{'='*60}
|
|
|
|
|
|
Subject : CN=WI-WEB.wismarqcorp.local
|
|
Issuer : CN=MonitorExpedient-CA, DC=MonitorExp, DC=cloud
|
|
NotBefore : 9/15/2023 10:11:20 AM
|
|
NotAfter : 6/22/2032 2:21:00 PM
|
|
Thumbprint : D20629CE6CC443F86A83619CDDAA5C3EDBE7BDA9
|
|
SANs :
|
|
|
|
Subject : CN=WI-WEB.wismarqcorp.local
|
|
Issuer : CN=CUSTCBB-PIT810-CSA01VW-CA, DC=CUSTCBB, DC=local
|
|
NotBefore : 2/23/2021 9:42:52 PM
|
|
NotAfter : 2/28/2027 8:48:09 AM
|
|
Thumbprint : A5750CF110D13C4DD886F51DFE702AF8F24A0C50
|
|
SANs :
|
|
|
|
Subject : CN=*.vorteqcoil.com
|
|
Issuer : CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com,
|
|
Inc.", L=Scottsdale, S=Arizona, C=US
|
|
NotBefore : 6/29/2025 12:12:42 PM
|
|
NotAfter : 7/31/2026 12:12:42 PM
|
|
Thumbprint : 3D20F96516BBF76AA9E653BC437E8209053572CF
|
|
SANs : DNS Name=*.vorteqcoil.com
|
|
DNS Name=vorteqcoil.com
|
|
|
|
|
|
Subject : CN=WI-WEB.wismarqcorp.local
|
|
Issuer : CN=CUSTCBB-PIT810-CSA01VW-CA, DC=CUSTCBB, DC=local
|
|
NotBefore : 2/12/2021 9:12:58 AM
|
|
NotAfter : 2/28/2027 8:48:09 AM
|
|
Thumbprint : 206FB7CAE8E9AEF1907E4C54708D3A146B6B8B07
|
|
SANs :
|
|
|
|
Subject : CN=d55d0330-1ca4-4682-af43-4d7a691326b7,
|
|
O="9059d20a-7478-4e28-be7e-afa0669dcac6;d55d0330-1ca4-4682-af43-4d7a691326b7",
|
|
OU=2b397271-54b4-4f0c-bfbe-633f144875da, L=2.53a0d79e-64c4-4f0b-a3f7-5a14660dfcc3
|
|
Issuer : CN=Veeam Software, O=Veeam Software, OU=Veeam Software
|
|
NotBefore : 2/8/2022 4:33:52 PM
|
|
NotAfter : 2/9/2032 4:33:52 PM
|
|
Thumbprint : 127A48FF899D6A5DC9547930DCCD1C9612C97C5B
|
|
SANs :
|
|
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
15. FIREWALL RULES (Inbound Allow)
|
|
{'='*60}
|
|
|
|
DisplayName Profile LocalPorts
|
|
----------- ------- ----------
|
|
AEMAgent Any Any
|
|
CentraStage_monitor Domain Any
|
|
CentraStage_monitor Domain Any
|
|
CentraStage_service Domain Any
|
|
CentraStage_service Domain Any
|
|
Firefox (C:\Program Files (x86)\Mozilla Firefox) Private Any
|
|
Firefox (C:\Program Files (x86)\Mozilla Firefox) Private Any
|
|
Iperius Backup Private, Public Any
|
|
Iperius Backup Service Private, Public Any
|
|
Network Discovery (LLMNR-UDP-In) Private 5355
|
|
Network Discovery (NB-Datagram-In) Private 138
|
|
Network Discovery (NB-Name-In) Private 137
|
|
Network Discovery (Pub-WSD-In) Private 3702
|
|
Network Discovery (SSDP-In) Private 1900
|
|
Network Discovery (UPnP-In) Private 2869
|
|
Network Discovery (WSD Events-In) Private 5357
|
|
Network Discovery (WSD EventsSecure-In) Private 5358
|
|
Network Discovery (WSD-In) Private 3702
|
|
RMM RTC Proxy Any Any
|
|
RMM.WebRemote 14.7.0.3791 Any Any
|
|
Sentinel Agent Any Any
|
|
Sentinel Agent (SentinelCtl) Any Any
|
|
Sentinel Agent (SentinelRanger) Any Any
|
|
Simple Mail Transfer Protocol (SMTP-In) Any 25
|
|
SNMP Service (UDP In) Domain 161
|
|
SNMP Service (UDP In) Private, Public 161
|
|
Store Domain, Private Any
|
|
Veeam Agent for Microsoft Windows Service (In) Any Any
|
|
Veeam Data Mover x64 (Veeam Agent for Microsoft Windows) (In) Any Any
|
|
VIPRE Business Agent Private Any
|
|
VIPRE Business Agent Domain Any
|
|
VIPRE Business Agent Domain Any
|
|
VIPRE Business Agent Public Any
|
|
VIPRE Business Agent Public Any
|
|
VIPRE Business Agent Private Any
|
|
Windows Remote Management (HTTP-In) Public 5985
|
|
Windows Remote Management (HTTP-In) Domain, Private 5985
|
|
World Wide Web Services (HTTP Traffic-In) Any 80
|
|
World Wide Web Services (HTTPS Traffic-In) Any 443
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
16. NETWORK & DNS
|
|
{'='*60}
|
|
|
|
InterfaceAlias ServerAddresses
|
|
-------------- ---------------
|
|
Ethernet {10.77.0.10, 10.77.0.11}
|
|
|
|
|
|
|
|
IP Configuration:
|
|
|
|
InterfaceAlias IPAddress PrefixLength
|
|
-------------- --------- ------------
|
|
Ethernet 10.77.0.220 24
|
|
|
|
|
|
|
|
|
|
{'='*60}
|
|
17. LOCAL USERS
|
|
{'='*60}
|
|
ERROR: The term 'Get-LocalUser' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
|
|
|
|
{'='*60}
|
|
DISCOVERY COMPLETE
|
|
{'='*60}
|
|
Generated: 02/06/2026 20:55:00
|
|
Output file: C:\Temp\VorteqDiscovery_20260206_205453.txt
|