Services
  • 10 Dec 2023
  • 1 Minute to read
  • Contributors
  • Dark
    Light

Services

  • Dark
    Light

Article summary

AUTORUN_CHANGE

Generated when an Autorun is changed.

Platforms:

SERVICE_CHANGE

Generated when a Service is changed.

Platforms:

{
  "PROCESS_ID": 0,
  "SVC_TYPE": 32,
  "DLL": "%SystemRoot%\\system32\\wlidsvc.dll",
  "SVC_NAME": "wlidsvc",
  "SVC_STATE": 1,
  "HASH": "b37199495115ed423ba99b7317377ce865bb482d4e847861e871480ac49d4a84",
  "SVC_DISPLAY_NAME": "Microsoft Account Sign-in Assistant",
  "TIMESTAMP": 1467942600540,
  "EXECUTABLE": "%SystemRoot%\\system32\\svchost.exe -k netsvcs"
}

Was this article helpful?

What's Next