YOU’RE NOT VIEWING PANDA SECURITY USA. CLICK TO IMPROVE YOUR EXPERIENCE
VISIT PANDA SECURITY USA
x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with 50% off
RENEW NOW
x
48-HOUR OFFER
50%
RENEWALS
Home users only
RENEW AT A DISCOUNT
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET 50% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET 50% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET 50% OFF
x
UP TO
-60%
BUY NOW
x
UP TO
-60%
BUY NOW

Technical Support

Need help?

 

Special applications and tools tables in Advanced Reporting Tool

Information applies to:

Products
Panda Data Control

Advanced Reporting Tool contains a series of new widgets, which classify the applications executed in the machines.
The classifications are the tables that are seen in the screenshot:



  • Scripting Applications
  • Remote Access Applications
  • Admin Tools Executed
  • System Tools Executed
  • System Internal Tools Executed
  • Unwanted Freeware Applications Executed.

The classification is done through what is called Devo Lookup Tables which consists of a table with two key-value columns that we cross in this case, with the application that appears in the table table oem.panda.paps.ops. You can query the list of applications and tools that the look-ups will display in this Special Applications & Tools chart. There is a lookup for each type of classification.

Special Applications & Tools chart

Scripting applications
NameExecutable file
Autoitautoit.exe
Powershellpowershell.exe
PSexecpsexec.exe
psecesvc.exe
Windows Shellcmd.exe
Wscriptwscript.exe
Cscriptcscript.exe
Pythonpython.exe
pythonw.exe
Perlperl.exe
Linux Shellsh.exe
bash.exe
zsh.exe



Remote tools applications
NameExecutable file
ammyy adminaa_v3.exe
GotomyPCg2comm.exe
g2fileh.exe
g2host.exe
g2mainh.exe
g2printh.exe
g2svc.exe
g2tray.exe
Logmeinlmiignition.exe
Logmeinlmiguardiansvc.exe
Logmeinlogmein.exe
Microsoft RDPtermsrv.exe
Microsoft Remote Desktopmstsc.exe
Radminradmin3.exe
Radminfamitrfc.exe
PCAnywhere clientawrem32.exe
PCAnywhere serverawhost32.exe
ShowmyPCsmpcsetup.exe
ShowmyPCshowmypc.exe
TeamViewer desktopteamviewer_desktop.exe
TeamViewer serviceteamviewer.exe, teamviewer_service.exe, teamviewerhost.exe
Damewaredwrcs.exe
VNCwinvnc.exe, vncviewer.exe, winvncsc.exe
Splashtopstrwinchat.exe, clientoobe.exe, clientoobe.exe



Admin Tools
NameExecutable file
atat.exe
Task Schedulerschtasks.exe
Netnet.exe
mshtamshta.exe
vssadminvssadmin.exe
wmicwmic.exe
netnet2.exe
routeroute.exe
ftpftp.exe



Unwanted freeware
NameExecutable file
Tortor.exe
Emuleemule.exe
emule.dll
Frostwirefrostwire.exe
Portabletorportabletor.exe
Lphanlphan.exe
DreaMuleDreaMule.exe
DreaMule_3.2.exe
eDonkeyedonkey.exe
eDonkey2000eDonkey2000.exe
Aresares.exe
Torrenttorrent.exe
uTorrentuTorrent.exe
BitTorrentBitTorrent.exe
DreaMuleDreaMule.exe
DreaMuleDreaMule.exe

System Tools
NameDescription
appendOperate with programs and directories (append)
arpAddress Resolution Protocol (arp)
assocFile name extension associations (assoc)
atSchedule commands and programs (at)
atmadmMonitor atM call Manager (atmadm)
attribFiles, directories attributes (attrib)
auditpolManipulate audit policies (auditpol)
autochkCheck NTFS dicks (autochk)
autoconvConvert FAT, FAT32 to NTFS (autoconv)
autofmtFormat drive (autofmt)
bcdbootWork with system partitions (bcdboot)
bcdeditBoot Configuration Data (bcdedit)
bdehdcfgBitLocker Drive Encryption (bdehdcfg)
bitsadminCreate jobs in Windows (bitsadmin)
bootcfgBoot.ini file settings (bootcfg)
breakbreak
caclsAccess control lists of files (cacls)
callCall batch program (vall)
cdCurrent directory in command line (cd)
certreqWork with certificates (certreq)
certutilWork with certificates (certutil)
changeChange Remote Desktop Session Host server settings (change)
chcpChange code page (chcp)
chdirCurrent directory in command line (cd)
chglogonLogons on an rd session host server (chglogon)
chgportList or change COM port mappings (chgport)
chgusrInstall mode for Remote Desktop Session Host server (chgusr)
chkdskCheck file system (chkdsk)
chkntfsDisk checking on start (chkntfs)
choiceWork with batch programs (choice)
cipherCommand line permanent deletion (cipher)
clipWork with command output (clip)
clsClear command prompt window (cls)
cmdCommand line (cmd)
cmdkeyManage user names and passwords (cmdkey)
cmstpDelete connection manager service profile (cmstp)
colorCustomize command prompt window (color)
compFiles content comparison (comp)
compactFile compress utility (compact)
convertConvert FAT, FAT32 to NTFS (convert)
copyCopy files (copy)
cprofileClean profile (cprofile)
cscriptRun script in a command-line (cscript)
dateManage system date (date)
dcgpofixOperate with Group Policy Objects (dcgpofix)
defragOperate with files (defrag)
delDelete files (del)
dfsrmigOperate with SYSvol (dfsrmig)
diantzPackage files into a cabinet file (diantz)
dirList content of path (dir)
diskcompCompare disks content (diskcomp)
diskcopyCopy files in disk (diskcopy)
diskperfManage performance counters (diskperf)
diskraidRAID disks management
diskshadowExpose shadow copy service (diskshadow)
dispdiagOperate with logs (dispdiag)
dnscmdOperate DNS servers (dnscmd)
doskeyOperate with command line (doskey)
driverqueryDisplay drivers installed (driverquery)
echoOperate with messages (echo)
editEdit files (edit)
endlocalRestore environment variables (endlocal)
eraseDelete files (erase)
eventcreateCustom event creation (eventcreate)
eventqueryOperate with logs (eventquery)
eventtriggersOperate with events (eventtriggers)
evntcmdOperate with events (evntcmd)
exitExit command line program (exit)
expandExpand compressed files (expand)
extractOperate with cabinet files, extract file (extract)
fcOperate with files, compare files (fc)
findOperate with files, search for string (find)
findstrOperate with files, search for patterns (findstr)
fingerOperate with users, get user information (finger)
flattempOperate with folders (flattemp)
fondueEnable Windows optional features (fondue)
forRun command in file (for
forfilesOperate with files, run command in file (forfiles)
formatOperate with disks, format disk (format)
freediskOperate with disks, check free space (freedisk)
fsutilFile allocation tasks (fsutil)
ftypeOperate with files, file types (ftype)
fveupdateUpgrade Windows, metadata (fveupdate)
getmacGet MAC address (getmac)
gettypeOperate with system environment variables (gettype)
gotoOperate with command line (goto)
gpfixupFix domain name (gpfixup)
gpresultOperate with remote user-computer (gpresult)
gpupdateUpdate Group Policy settings (gpupdate)
graftablDisplay extended character set (graftabl)
helpHelp for system commands (help)
helpctrHelp and support center home page (helpctr)
hostnameDisplay hostname of computer (hostname)
icaclsManage access control lists-DACLs (icacls)
ifConditional in batch programs (if)
inuseReplace files locked (inuse)
ipconfigDisplay network configuration (ipconfig)
ipxrouteDisplay information of routing tables (ipxroute)
irftpSend files over infrared (irftp)
jetpackCompact WINS DHCP database (jetpack)
klistWork with Kerberos tickets (klist)
ksetupWork with Kerberos tickets (ksetup)
ktmutilKernel Transaction Manager utility (ktmutil)
ktpassConfigure server principal name (ktpass)
labelManage name of disk (label)
lodctrManage counters and registry (lodctr)
logmanMabage event session and logs (logman)
logoffLog off user (logoff)
lplp
lpqDisplay print queue (lpq)
macfileManage fils and directories in Mac (macfile)
makecabPackage files into a cabinet file (makecab)
manage-bdeWork with BitLocker (manage-bde)
mapadminManage User Name Mapping (mapadmin)
mdCreate directory (md)
mkdirCreate directory (mkdir)
mklinkCreate link (mklink)
mmcStart Microsoft Management Console (mmc)
modeDisplay controllable attributes of console (mode)
moreDisplay screen output (more)
mountMount Network File System (NFS) (mount)
mountvolManage volume (mountvol)
moveMove files between directories (move)
mqbkupBacks up MSMQ message files and registry settings (mqbkup)
mqsvcManage applications and queues (mqsvc)
mqtgsvcMonitor queue of messages (mqtgsvc)
msdtWork with command line and troubleshooting (msdt)
msgSend message to user (msg)
msiexecInstall file (msiexec)
msinfo32Open the System Information tool (msinfo32)
mstscConnect to Remote Desktop (mstsc)
nbtstatDisplay NETBIOS statistics (nbtstat)
netnet
netcfgInstall WinPE (netcfg)
netshManage network configuration (netsh)
netstatDisplay active TCP connections and details (netstat)
nfsadminManage Server for NFS (nfsadmin)
nfsshareControl NFS shares (nfsshare)
nfsstatDisplay NFS statistics (nfsstat)
nlbmgrConfigure Network Load Balancing (nlbmgr)
nslookupDiagnose DNS (nslookup)
ntbackupBackup, restore computer (ntbackup)
ntcmdpromptRun cmd.exe (ntcmdprompt)
ntfrsutlWork with NT File Replication Service (ntfrsutl)
openfilesWork with opened files (openfiles)
pagefileconfigWork with Virtual Memory settings (pagefileconfig)
pathDisplay current command path (path)
pathpingNetwork latency test (pathping)
pauseSuspend batch execution (pause)
pbadminAdminister phone books (pbadmin)
pentntManage floating point in Pentium chip (pentnt)
perfmonStart Windows Reliability and Performance Monitor (perfmon)
pingVerify IP connectivity (ping)
pnpunattendAudir computer (pnpunattend)
pnputilManage the driver store (pnputil)
popdWork with directories (popd)
powershellWindows PowerShell (powershell)
powershell_iseWindows PowerShell Integrated Scripting Environment (powershell_ise)
printSend file to print (print)
prncnfgConfigure printer (prncnfg)
prndrvrManage printer drivers (prndrvr)
prnjobsManage print jobs (prnjobs)
prnmngrManage printers (prnmngr
prnportManage printer ports (prnport)
prnqctlWork with printer (prnqctl)
promptChange Cmd.exe command prompt (prompt)
pubprnPublich printer (pubprn)
pushdOperations with dierctories (pushd)
pushprinterconnectionsRead Deployed Printer Connection settings (pushprinterconnections)
qappsrvList remote destop session host servers (qappsvr)
qprocessInformation of processes RDS (qprocess)
queryInformation of processes RDS (query)
quserInformation of user sessions RDS (quser)
qwinstaRemote desktop information (qwinsta)
rcpCopy files between computers (rcp)
rdDelete directoy (rd)
rdpsignSgn a Remote Desktop Protocol (rdpsign)
recoverRecover information in disk (recover)
regOperate with registry (reg)
reginiModify registry (regini)
regini.exeModify registry (regini)
regsvr32Register .dll files (regsvr32)
regsvr32.exeRegister .dll files (regsvr32)
relogExtract logs (relog)
relog.exeExtract logs (relog)
remComment batch files (rem)
rem.exeComment batch files (rem)
renRename file, directory (rename)
ren.exeRename file, directory (rename)
renameRename file, directory (rename)
rename.exeRename file, directory (rename)
repair-bdeExtract encryted data (repair-bde)
repair-bde.exeExtract encryted data (repair-bde)
replaceReplace file (replace)
replace.exeReplace file (replace)
resetReset Remote desktop session (reset)
reset.exeReset Remote desktop session (reset)
rexecRun command on remote computer (rexec)
rexec.exeRun command on remote computer (rexec)
risetuprisetup
risetup.exerisetup
rmdirDelete directoy (rmdir)
rmdir.exeDelete directoy (rmdir)
robocopyCopy file data (robocopy)
robocopy.exeCopy file data (robocopy)
route_ws2008Manage local IP routing table (route_ws2008)
route_ws2008.exeManage local IP routing table (route_ws2008)
rpcinfoList programs in remote computer (rpcinfo)
rpcinfo.exeList programs in remote computer (rpcinfo)
rpcpingRPC connectivity (rpcping)
rpcping.exeRPC connectivity (rpcping)
rshRun command on remote computer (rsh)
rsh.exeRun command on remote computer (rsh)
rundll32Load DLLs (rundll32)
rundll32.exeLoad DLLs (rundll32)
rwinstaDelete remote desktop session (rwinsta)
rwinsta.exeDelete remote desktop session (rwinsta)
schtasksSchedule commands, programs (schtasks)
schtasks.exeSchedule commands, programs (schtasks)
scwcmdSecurity Configuration Wizard tool (scwcmd)
scwcmd.exeSecurity Configuration Wizard tool (scwcmd)
seceditWork with system security (secedit)
secedit.exeWork with system security (secedit)
serverceipoptinParticipate in CEIP (serverceipoptin)
serverceipoptin.exeParticipate in CEIP (serverceipoptin)
servermanagercmdManage roles and features (servermanagercmd)
servermanagercmd.exeManage roles and features (servermanagercmd)
setlocalSe local variables (setlocal)
setlocal.exeSe local variables (setlocal)
setxManage environment variables (setx)
setx.exeManage environment variables (setx)
sfcWork with protected system files (sfc)
sfc.exeWork with protected system files (sfc)
shadowControl remote session (shadow)
shadow.exeControl remote session (shadow)
shiftOperate with batch files (shift)
shift.exeOperate with batch files (shift)
showmountDisplay mounted directories (showmount)
showmount.exeDisplay mounted directories (showmount)
shutdownShutdown computer (shutdown)
shutdown.exeShutdown computer (shutdown)
sortWork with data (sort)
sort.exeWork with data (sort)
startStart command prompt window (start)
start.exeStart command prompt window (start)
substAssociate path with drive letter (subst)
subst.exeAssociate path with drive letter (subst)
sxstraceDiagnose side-by-side problems (sxstrace)
sxstrace.exeDiagnose side-by-side problems (sxstrace)
sysocmgrInstall optional components (sysocmgr)
sysocmgr.exeInstall optional components (sysocmgr)
systeminfoDisplay system information (systeminfo)
systeminfo.exeDisplay system information (systeminfo)
takeownTake ownership of file (takeown)
takeown.exeTake ownership of file (takeown)
tapicfgConfigure TAPI (tapicfg)
tapicfg.exeConfigure TAPI (tapicfg)
taskkillEnd task (taskkill)
taskkill.exeEnd task (taskkill)
tasklistDisplay running processes (tasklist)
tasklist.exeDisplay running processes (tasklist)
tcmsetupSets up, disable TAPI client (tcmsetup)
tcmsetup.exeSets up, disable TAPI client (tcmsetup)
telnetTelnet service (telnet)
telnet.exeTelnet service (telnet)
tftpTansfer files (tftp)
tftp.exeTansfer files (tftp)
timeDisplay, set system time (time)
time.exeDisplay, set system time (time)
timeoutPause command processor (timeout)
timeout.exePause command processor (timeout)
titleSet title for command window (title)
title.exeSet title for command window (title)
tlntadmnAdminister computer (tlntadmn)
tlntadmn.exeAdminister computer (tlntadmn)
tpmvscmgrCreate, delete TPM virtual smart cards (tpmvscmgr)
tpmvscmgr.exeCreate, delete TPM virtual smart cards (tpmvscmgr)
tracerptParse Event Trace Logs (tracerpt)
tracerpt.exeParse Event Trace Logs (tracerpt)
tracertPath to destination (ICMP) (tracert)
tracert.exePath to destination (ICMP) (tracert)
treeDisplay directoy structure (tree)
tree.exeDisplay directoy structure (tree)
tsconRemote desktop connection (tscon)
tscon.exeRemote desktop connection (tscon)
tsdisconDisconnect remote desktop session (tsdiscon)
tsdiscon.exeDisconnect remote desktop session (tsdiscon)
tsecimpImport assignment information (tsecimp)
tsecimp.exeImport assignment information (tsecimp)
tskillEnd a process in remote desktop session (tskill)
tskill.exeEnd a process in remote desktop session (tskill)
tsprofCopy remote desktop configuration (tsprof)
tsprof.exeCopy remote desktop configuration (tsprof)
typeDisplay content of file (type)
type.exeDisplay content of file (type)
typeperfWrite performance data (typeperf)
typeperf.exeWrite performance data (typeperf)
tzutilWindows time Zone Utility (tzutil)
tzutil.exeWindows time Zone Utility (tzutil)
unlodctrRemove information in registry (unlodctr)
unlodctr.exeRemove information in registry (unlodctr)
verOperating system version number (ver)
ver.exeOperating system version number (ver)
verifierDriver verifier manager (verifier)
verifier.exeDriver verifier manager (verifier)
verifyVerify files written in disk (verify)
verify.exeVerify files written in disk (verify)
volDisplay disk information (vol)
vol.exeDisplay disk information (vol)
waitforWait for signal on system (waitfor)
waitfor.exeWait for signal on system (waitfor)
wbadminBackup and restore utility (wbadmin)
wbadmin.exeBackup and restore utility (wbadmin)
wdsutilManage Windows Deployment Services server (wdsutil)
wdsutil.exeManage Windows Deployment Services server (wdsutil)
wecutilManage suscriptions to events (wecutil)
wecutil.exeManage suscriptions to events (wecutil)
wevtutilInformation of logs (wevutil)
wevtutil.exeInformation of logs (wevutil)
whereLocate files (where)
where.exeLocate files (where)
whoamiUser information (whoami)
whoami.exeUser information (whoami)
winntInstallation or upgrade in Windows (winnt)
winnt.exeInstallation or upgrade in Windows (winnt)
winnt32Installation or upgrade in Windows (winnt32)
winnt32.exeInstallation or upgrade in Windows (winnt32)
winpopPOP3 service administration tool (winpop)
winpop.exePOP3 service administration tool (winpop)
winrsWindows remote Management (wlbs)
winrs.exeWindows remote Management (wlbs)
wlbsWindows NT Load Balancing Service (wlbs)
wlbs.exeWindows NT Load Balancing Service (wlbs)
wmicWMI information (wmic)
wmic.exeWMI information (wmic)
wscriptWindows Script Host (wscript)
wscript.exeWindows Script Host (wscript)
xcopyCopy files and directories (xcopy)
xcopy.exeCopy files and directories (xcopy)


Sysinternal Tools
Name Executable file
psexecpsexec.exe
accessenumaccessenum.exe
adexploreradexplorer.exe
adinsightadinsight.exe
adrestoreadrestore.exe
autologonautologon.exe
autorunsautoruns.exe
bginfobginfo.exe
cachesetcacheset.exe
clockresclockres.exe
clockrescontig.exe
coreinfocoreinfo.exe
ctrl2capctrl2cap.exe
debugviewdebugview.exe
disk2vhddisk2vhd.exe
diskextdiskext.exe
diskmondiskmon.exe
diskviewdiskview.exe
efsdumpefsdump.exe
findlinksfindlinks.exe
handlehandle.exe
hex2dechex2dec.exe
junctionjunction.exe
ldmdumpldmdump.exe
listdllslistdlls.exe
livekdlivekd.exe
loadorderloadorder.exe
logonsessionslogonsessions.exe
portmonportmon.exe
procdumpprocdump.exe
process explorerprocexp.exe
pipelistpipelist.exe
process monitorprocmon.exe
psfilepsfile.exe
psgetsidpsgetsid.exe
psinfopsinfo.exe
pspingpsping.exe
pskillpskill.exe
psloggedonpsloggedon.exe
psloglistpsloglist.exe
pspasswdpspasswd.exe
psservicepsservice.exe
psshutdownpsshutdown.exe
rammaprammap.exe
pssuspendpssuspend.exe
regdelnullregdelnull.exe
regjumpregjump.exe
sdeletesdelete.exe
shareenumshareenum.exe
pslistpslist.exe,pslist
shellrunasshellrunas.exe
sigchecksigcheck.exe
streamsstreams.exe
stringsstrings.exe
sysmonsysmon.exe
tcpviewtcpview.exe
whoiswhois.exe
winobjwinobj.exe
zoomitzoomit.exe
registry usageru.exe
desktopsdesktops.exe



Help nº- 20190514 700065 EN

Have you resolved your query with this article?

yes no

Thanks for your answer


Why didn't you find it helpful?


The instructions are too complex.
The instructions are too long.
The instructions don't work.
I'd rather have a video.
Other reasons.




Talk to a technician!

 

Business hours: Mondays-Fridays 9:00 to 18:00 CET

Outside business hours, please use the online form.





ALWAYS ONLINE TO HELP YOU TWITTER FORUM RATE US CHAT
ALWAYS ONLINE TO HELP YOU TWITTER FORUM RATE US CHAT