home *** CD-ROM | disk | FTP | other *** search
/ Internet Magazine 2003 September / INTERNET107.ISO / pc / software / windows / utils / tiny_firewall / tpf45.exe / Data1.cab / db_rul_ids.xml2 < prev    next >
Encoding:
Extensible Markup Language  |  2002-11-26  |  2.9 MB  |  34,287 lines
Text Truncated. Only the first 1MB is shown below. Download the file for the complete contents.
  1.  ■<?xml version="1.0" encoding="UTF-16" standalone="no"?>
  2. <IFSecDbRul>
  3.     <DocVersion>
  4.         <DocInfo>
  5.             <LocName lang="en">default</LocName>
  6.             <Date>2002-11-26</Date>
  7.             <Time>10:17:02</Time>
  8.         </DocInfo>
  9.         <DbFormat>
  10.             <VersionInfo>
  11.                 <MajorNum>1</MajorNum>
  12.                 <MinorNum>0</MinorNum>
  13.             </VersionInfo>
  14.         </DbFormat>
  15.         <SecurityInfo/>
  16.     </DocVersion>
  17.     <ProfileList typeRef="0">
  18.         <Profile guid="{2F3EA560-D022-4B3A-8AFA-ADD0D924AAF1}">
  19.             <ExecSetDescList/>
  20.             <RuleByObjTypeList typeRef="262">
  21.                 <Rule guid="{B91A87A8-EAF4-4E76-9480-AB30F0EA3E6F}">
  22.                     <ObjDescRef guidRef="{6358159C-B914-4CC5-986E-4BF2BD58653A}"/>
  23.                     <AccessDescList>
  24.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  25.                     </AccessDescList>
  26.                     <PropertyDescList>
  27.                         <PropertyDesc idRef="20" propType="simple">
  28.                             <SimpleValue valType="int">412</SimpleValue>
  29.                         </PropertyDesc>
  30.                         <PropertyDesc idRef="5" propType="objRef">
  31.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  32.                         </PropertyDesc>
  33.                         <PropertyDesc idRef="21" propType="simple">
  34.                             <SimpleValue valType="str">BACKDOOR subseven 22</SimpleValue>
  35.                         </PropertyDesc>
  36.                         <PropertyDesc idRef="31" propType="simple">
  37.                             <SimpleValue valType="int">135168</SimpleValue>
  38.                         </PropertyDesc>
  39.                         <PropertyDesc idRef="30" propType="simple">
  40.                             <SimpleValue valType="binary">0C0000000000000000000000000000000D0A5B52504C5D3030320D0A</SimpleValue>
  41.                         </PropertyDesc>
  42.                     </PropertyDescList>
  43.                 </Rule>
  44.                 <Rule guid="{55896610-A578-4F32-BB34-C008E5D82D80}">
  45.                     <ObjDescRef guidRef="{DB7A4BC2-80AA-4AAC-8C28-4FBEB1A50167}"/>
  46.                     <AccessDescList>
  47.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  48.                     </AccessDescList>
  49.                     <PropertyDescList>
  50.                         <PropertyDesc idRef="20" propType="simple">
  51.                             <SimpleValue valType="int">416</SimpleValue>
  52.                         </PropertyDesc>
  53.                         <PropertyDesc idRef="5" propType="objRef">
  54.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  55.                         </PropertyDesc>
  56.                         <PropertyDesc idRef="21" propType="simple">
  57.                             <SimpleValue valType="str">BACKDOOR - Dagger_1.4.0_client_connect</SimpleValue>
  58.                         </PropertyDesc>
  59.                         <PropertyDesc idRef="31" propType="simple">
  60.                             <SimpleValue valType="int">135168</SimpleValue>
  61.                         </PropertyDesc>
  62.                         <PropertyDesc idRef="30" propType="simple">
  63.                             <SimpleValue valType="binary">0F0000000000000010000000000000000B00000007000000436F6E6E656374</SimpleValue>
  64.                         </PropertyDesc>
  65.                     </PropertyDescList>
  66.                 </Rule>
  67.                 <Rule guid="{4E66B4FB-1ED1-420C-8476-3880AA2664E6}">
  68.                     <ObjDescRef guidRef="{4BBB4EE1-DE9B-4C36-818D-3D8376B4F351}"/>
  69.                     <AccessDescList>
  70.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  71.                     </AccessDescList>
  72.                     <PropertyDescList>
  73.                         <PropertyDesc idRef="20" propType="simple">
  74.                             <SimpleValue valType="int">420</SimpleValue>
  75.                         </PropertyDesc>
  76.                         <PropertyDesc idRef="5" propType="objRef">
  77.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  78.                         </PropertyDesc>
  79.                         <PropertyDesc idRef="21" propType="simple">
  80.                             <SimpleValue valType="str">BACKDOOR - Dagger_1.4.0</SimpleValue>
  81.                         </PropertyDesc>
  82.                         <PropertyDesc idRef="31" propType="simple">
  83.                             <SimpleValue valType="int">135168</SimpleValue>
  84.                         </PropertyDesc>
  85.                         <PropertyDesc idRef="30" propType="simple">
  86.                             <SimpleValue valType="binary">1000000000000000100000000000000032000000060000004472697665732400</SimpleValue>
  87.                         </PropertyDesc>
  88.                     </PropertyDescList>
  89.                 </Rule>
  90.                 <Rule guid="{7443E658-5FA1-40C6-ACDB-265C9A13841A}">
  91.                     <ObjDescRef guidRef="{73CA54FF-8A90-422F-973B-2A9380AC6AAB}"/>
  92.                     <AccessDescList>
  93.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  94.                     </AccessDescList>
  95.                     <PropertyDescList>
  96.                         <PropertyDesc idRef="20" propType="simple">
  97.                             <SimpleValue valType="int">424</SimpleValue>
  98.                         </PropertyDesc>
  99.                         <PropertyDesc idRef="5" propType="objRef">
  100.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  101.                         </PropertyDesc>
  102.                         <PropertyDesc idRef="21" propType="simple">
  103.                             <SimpleValue valType="str">BACKDOOR ACKcmdC trojan scan</SimpleValue>
  104.                         </PropertyDesc>
  105.                         <PropertyDesc idRef="32" propType="simple">
  106.                             <SimpleValue valType="int" valRelation="==">101058054</SimpleValue>
  107.                         </PropertyDesc>
  108.                         <PropertyDesc idRef="33" propType="simple">
  109.                             <SimpleValue valType="int" valRelation="==">101058054</SimpleValue>
  110.                         </PropertyDesc>
  111.                         <PropertyDesc idRef="31" propType="simple">
  112.                             <SimpleValue valType="int">4096</SimpleValue>
  113.                         </PropertyDesc>
  114.                     </PropertyDescList>
  115.                 </Rule>
  116.                 <Rule guid="{165429AB-683E-4F3C-B9D1-ECE081CD292B}">
  117.                     <ObjDescRef guidRef="{37EE4553-FC61-4A37-AAEA-2A4445C0B9C1}"/>
  118.                     <AccessDescList>
  119.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  120.                     </AccessDescList>
  121.                     <PropertyDescList>
  122.                         <PropertyDesc idRef="20" propType="simple">
  123.                             <SimpleValue valType="int">428</SimpleValue>
  124.                         </PropertyDesc>
  125.                         <PropertyDesc idRef="5" propType="objRef">
  126.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  127.                         </PropertyDesc>
  128.                         <PropertyDesc idRef="21" propType="simple">
  129.                             <SimpleValue valType="str">BACKDOOR subseven DEFCON8 2.1 access</SimpleValue>
  130.                         </PropertyDesc>
  131.                         <PropertyDesc idRef="30" propType="simple">
  132.                             <SimpleValue valType="binary">03000000000000000000000000000000505744</SimpleValue>
  133.                         </PropertyDesc>
  134.                         <PropertyDesc idRef="30" propType="simple">
  135.                             <SimpleValue valType="binary">0A0000000000000000000000000001006163696470687265616B</SimpleValue>
  136.                         </PropertyDesc>
  137.                         <PropertyDesc idRef="31" propType="simple">
  138.                             <SimpleValue valType="int">135168</SimpleValue>
  139.                         </PropertyDesc>
  140.                     </PropertyDescList>
  141.                 </Rule>
  142.                 <Rule guid="{7800D2D9-B2FE-41BF-9A58-6CA6F39F635D}">
  143.                     <ObjDescRef guidRef="{0A056CD5-01B7-4AEE-986D-1AA743D1A90D}"/>
  144.                     <AccessDescList>
  145.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  146.                     </AccessDescList>
  147.                     <PropertyDescList>
  148.                         <PropertyDesc idRef="20" propType="simple">
  149.                             <SimpleValue valType="int">432</SimpleValue>
  150.                         </PropertyDesc>
  151.                         <PropertyDesc idRef="5" propType="objRef">
  152.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  153.                         </PropertyDesc>
  154.                         <PropertyDesc idRef="21" propType="simple">
  155.                             <SimpleValue valType="str">BACKDOOR QAZ Worm Client Login access</SimpleValue>
  156.                         </PropertyDesc>
  157.                         <PropertyDesc idRef="31" propType="simple">
  158.                             <SimpleValue valType="int">135168</SimpleValue>
  159.                         </PropertyDesc>
  160.                         <PropertyDesc idRef="30" propType="simple">
  161.                             <SimpleValue valType="binary">0A00000000000000000000000000000071617A7773782E687371</SimpleValue>
  162.                         </PropertyDesc>
  163.                     </PropertyDescList>
  164.                 </Rule>
  165.                 <Rule guid="{D94536A1-B70B-41A3-871D-8BE19251222B}">
  166.                     <ObjDescRef guidRef="{D3CF37CD-6E8F-43D6-920C-D8245AFC340F}"/>
  167.                     <AccessDescList>
  168.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  169.                     </AccessDescList>
  170.                     <PropertyDescList>
  171.                         <PropertyDesc idRef="20" propType="simple">
  172.                             <SimpleValue valType="int">436</SimpleValue>
  173.                         </PropertyDesc>
  174.                         <PropertyDesc idRef="5" propType="objRef">
  175.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  176.                         </PropertyDesc>
  177.                         <PropertyDesc idRef="21" propType="simple">
  178.                             <SimpleValue valType="str">BACKDOOR netbus active</SimpleValue>
  179.                         </PropertyDesc>
  180.                         <PropertyDesc idRef="30" propType="simple">
  181.                             <SimpleValue valType="binary">060000000000000000000000000000004E6574427573</SimpleValue>
  182.                         </PropertyDesc>
  183.                     </PropertyDescList>
  184.                 </Rule>
  185.                 <Rule guid="{2247E434-59C0-40BC-A9FA-D9F74BE50F0C}">
  186.                     <ObjDescRef guidRef="{FF10408A-9CC6-4648-B435-883540498B55}"/>
  187.                     <AccessDescList>
  188.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  189.                     </AccessDescList>
  190.                     <PropertyDescList>
  191.                         <PropertyDesc idRef="20" propType="simple">
  192.                             <SimpleValue valType="int">440</SimpleValue>
  193.                         </PropertyDesc>
  194.                         <PropertyDesc idRef="5" propType="objRef">
  195.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  196.                         </PropertyDesc>
  197.                         <PropertyDesc idRef="21" propType="simple">
  198.                             <SimpleValue valType="str">BACKDOOR netbus getinfo</SimpleValue>
  199.                         </PropertyDesc>
  200.                         <PropertyDesc idRef="31" propType="simple">
  201.                             <SimpleValue valType="int">135168</SimpleValue>
  202.                         </PropertyDesc>
  203.                         <PropertyDesc idRef="30" propType="simple">
  204.                             <SimpleValue valType="binary">08000000000000000000000000000000476574496E666F0D</SimpleValue>
  205.                         </PropertyDesc>
  206.                     </PropertyDescList>
  207.                 </Rule>
  208.                 <Rule guid="{8E88B736-EE9F-4A1C-B664-95B1577AD9CA}">
  209.                     <ObjDescRef guidRef="{EC485691-E62E-4BB8-9B52-0D1040E6F627}"/>
  210.                     <AccessDescList>
  211.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  212.                     </AccessDescList>
  213.                     <PropertyDescList>
  214.                         <PropertyDesc idRef="20" propType="simple">
  215.                             <SimpleValue valType="int">444</SimpleValue>
  216.                         </PropertyDesc>
  217.                         <PropertyDesc idRef="5" propType="objRef">
  218.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  219.                         </PropertyDesc>
  220.                         <PropertyDesc idRef="21" propType="simple">
  221.                             <SimpleValue valType="str">BACKDOOR netbus getinfo</SimpleValue>
  222.                         </PropertyDesc>
  223.                         <PropertyDesc idRef="31" propType="simple">
  224.                             <SimpleValue valType="int">135168</SimpleValue>
  225.                         </PropertyDesc>
  226.                         <PropertyDesc idRef="30" propType="simple">
  227.                             <SimpleValue valType="binary">08000000000000000000000000000000476574496E666F0D</SimpleValue>
  228.                         </PropertyDesc>
  229.                     </PropertyDescList>
  230.                 </Rule>
  231.                 <Rule guid="{3A09A7A7-92BE-4AA1-A31D-6B3C1843580A}">
  232.                     <ObjDescRef guidRef="{8294E27F-D82C-412A-AF7E-200DF10C1F13}"/>
  233.                     <AccessDescList>
  234.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  235.                     </AccessDescList>
  236.                     <PropertyDescList>
  237.                         <PropertyDesc idRef="20" propType="simple">
  238.                             <SimpleValue valType="int">448</SimpleValue>
  239.                         </PropertyDesc>
  240.                         <PropertyDesc idRef="5" propType="objRef">
  241.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  242.                         </PropertyDesc>
  243.                         <PropertyDesc idRef="21" propType="simple">
  244.                             <SimpleValue valType="str">BACKDOOR BackOrifice access</SimpleValue>
  245.                         </PropertyDesc>
  246.                         <PropertyDesc idRef="31" propType="simple">
  247.                             <SimpleValue valType="int">135168</SimpleValue>
  248.                         </PropertyDesc>
  249.                         <PropertyDesc idRef="30" propType="simple">
  250.                             <SimpleValue valType="binary">0B0000000000000000000000000000007365727665723A20424F2F</SimpleValue>
  251.                         </PropertyDesc>
  252.                     </PropertyDescList>
  253.                 </Rule>
  254.                 <Rule guid="{758F138A-D1B2-43CE-8D0C-AD805EB49A1C}">
  255.                     <ObjDescRef guidRef="{86171736-3C01-4346-A376-D3BD7911677B}"/>
  256.                     <AccessDescList>
  257.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  258.                     </AccessDescList>
  259.                     <PropertyDescList>
  260.                         <PropertyDesc idRef="20" propType="simple">
  261.                             <SimpleValue valType="int">452</SimpleValue>
  262.                         </PropertyDesc>
  263.                         <PropertyDesc idRef="5" propType="objRef">
  264.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  265.                         </PropertyDesc>
  266.                         <PropertyDesc idRef="21" propType="simple">
  267.                             <SimpleValue valType="str">BACKDOOR DeepThroat access</SimpleValue>
  268.                         </PropertyDesc>
  269.                         <PropertyDesc idRef="30" propType="simple">
  270.                             <SimpleValue valType="binary">0D0000000000000000000000000000002D2D4168686868686868686868</SimpleValue>
  271.                         </PropertyDesc>
  272.                     </PropertyDescList>
  273.                 </Rule>
  274.                 <Rule guid="{EE000301-16C6-4104-8E38-0586984363EB}">
  275.                     <ObjDescRef guidRef="{FA6380F7-9F23-4525-8EBB-DF8B7201F0EE}"/>
  276.                     <AccessDescList>
  277.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  278.                     </AccessDescList>
  279.                     <PropertyDescList>
  280.                         <PropertyDesc idRef="20" propType="simple">
  281.                             <SimpleValue valType="int">456</SimpleValue>
  282.                         </PropertyDesc>
  283.                         <PropertyDesc idRef="5" propType="objRef">
  284.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  285.                         </PropertyDesc>
  286.                         <PropertyDesc idRef="21" propType="simple">
  287.                             <SimpleValue valType="str">BACKDOOR netbus active</SimpleValue>
  288.                         </PropertyDesc>
  289.                         <PropertyDesc idRef="31" propType="simple">
  290.                             <SimpleValue valType="int">135168</SimpleValue>
  291.                         </PropertyDesc>
  292.                         <PropertyDesc idRef="30" propType="simple">
  293.                             <SimpleValue valType="binary">060000000000000000000000000000004E6574427573</SimpleValue>
  294.                         </PropertyDesc>
  295.                     </PropertyDescList>
  296.                 </Rule>
  297.                 <Rule guid="{2960F76A-9BD5-4421-BF85-756CD0AC00C7}">
  298.                     <ObjDescRef guidRef="{61189813-F5E3-4CAD-AB83-F78933E7DD05}"/>
  299.                     <AccessDescList>
  300.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  301.                     </AccessDescList>
  302.                     <PropertyDescList>
  303.                         <PropertyDesc idRef="20" propType="simple">
  304.                             <SimpleValue valType="int">460</SimpleValue>
  305.                         </PropertyDesc>
  306.                         <PropertyDesc idRef="5" propType="objRef">
  307.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  308.                         </PropertyDesc>
  309.                         <PropertyDesc idRef="21" propType="simple">
  310.                             <SimpleValue valType="str">BACKDOOR netbus active</SimpleValue>
  311.                         </PropertyDesc>
  312.                         <PropertyDesc idRef="31" propType="simple">
  313.                             <SimpleValue valType="int">135168</SimpleValue>
  314.                         </PropertyDesc>
  315.                         <PropertyDesc idRef="30" propType="simple">
  316.                             <SimpleValue valType="binary">060000000000000000000000000000004E6574427573</SimpleValue>
  317.                         </PropertyDesc>
  318.                     </PropertyDescList>
  319.                 </Rule>
  320.                 <Rule guid="{F2245A2A-5C06-45A4-95B8-6BCE762329A1}">
  321.                     <ObjDescRef guidRef="{0C4EBED7-E6FD-4FDB-964D-8728EC3971EC}"/>
  322.                     <AccessDescList>
  323.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  324.                     </AccessDescList>
  325.                     <PropertyDescList>
  326.                         <PropertyDesc idRef="20" propType="simple">
  327.                             <SimpleValue valType="int">464</SimpleValue>
  328.                         </PropertyDesc>
  329.                         <PropertyDesc idRef="5" propType="objRef">
  330.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  331.                         </PropertyDesc>
  332.                         <PropertyDesc idRef="21" propType="simple">
  333.                             <SimpleValue valType="str">BACKDOOR BackOrifice access</SimpleValue>
  334.                         </PropertyDesc>
  335.                         <PropertyDesc idRef="30" propType="simple">
  336.                             <SimpleValue valType="binary">0C000000000000000000000000000000CE63D1D216E713CF39A5A586</SimpleValue>
  337.                         </PropertyDesc>
  338.                     </PropertyDescList>
  339.                 </Rule>
  340.                 <Rule guid="{2C03CE86-05D1-4977-A14E-D70B7A1F6214}">
  341.                     <ObjDescRef guidRef="{3A8B8512-6F57-4F5F-A049-9E6D1372C9AD}"/>
  342.                     <AccessDescList>
  343.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  344.                     </AccessDescList>
  345.                     <PropertyDescList>
  346.                         <PropertyDesc idRef="20" propType="simple">
  347.                             <SimpleValue valType="int">468</SimpleValue>
  348.                         </PropertyDesc>
  349.                         <PropertyDesc idRef="5" propType="objRef">
  350.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  351.                         </PropertyDesc>
  352.                         <PropertyDesc idRef="21" propType="simple">
  353.                             <SimpleValue valType="str">BACKDOOR Infector.1.x</SimpleValue>
  354.                         </PropertyDesc>
  355.                         <PropertyDesc idRef="30" propType="simple">
  356.                             <SimpleValue valType="binary">080000000000000000000000000000005748415449534954</SimpleValue>
  357.                         </PropertyDesc>
  358.                         <PropertyDesc idRef="31" propType="simple">
  359.                             <SimpleValue valType="int">135168</SimpleValue>
  360.                         </PropertyDesc>
  361.                     </PropertyDescList>
  362.                 </Rule>
  363.                 <Rule guid="{E560C0A3-52B6-4396-80B2-50EF39DEBA33}">
  364.                     <ObjDescRef guidRef="{F779DE92-C375-4E57-98A9-80227D2236C5}"/>
  365.                     <AccessDescList>
  366.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  367.                     </AccessDescList>
  368.                     <PropertyDescList>
  369.                         <PropertyDesc idRef="20" propType="simple">
  370.                             <SimpleValue valType="int">472</SimpleValue>
  371.                         </PropertyDesc>
  372.                         <PropertyDesc idRef="5" propType="objRef">
  373.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  374.                         </PropertyDesc>
  375.                         <PropertyDesc idRef="21" propType="simple">
  376.                             <SimpleValue valType="str">BACKDOOR SatansBackdoor.2.0.Beta</SimpleValue>
  377.                         </PropertyDesc>
  378.                         <PropertyDesc idRef="30" propType="simple">
  379.                             <SimpleValue valType="binary">2000000000000000000000000000000052656D6F74653A20596F752061726520636F6E6E656374656420746F206D652E</SimpleValue>
  380.                         </PropertyDesc>
  381.                         <PropertyDesc idRef="31" propType="simple">
  382.                             <SimpleValue valType="int">135168</SimpleValue>
  383.                         </PropertyDesc>
  384.                     </PropertyDescList>
  385.                 </Rule>
  386.                 <Rule guid="{01C94824-C15F-47C9-9805-CD29F0AA60C8}">
  387.                     <ObjDescRef guidRef="{F6E62580-BFA3-42FF-854B-3E375AE38FE8}"/>
  388.                     <AccessDescList>
  389.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  390.                     </AccessDescList>
  391.                     <PropertyDescList>
  392.                         <PropertyDesc idRef="20" propType="simple">
  393.                             <SimpleValue valType="int">476</SimpleValue>
  394.                         </PropertyDesc>
  395.                         <PropertyDesc idRef="5" propType="objRef">
  396.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  397.                         </PropertyDesc>
  398.                         <PropertyDesc idRef="21" propType="simple">
  399.                             <SimpleValue valType="str">BACKDOOR Doly 2.0 access</SimpleValue>
  400.                         </PropertyDesc>
  401.                         <PropertyDesc idRef="30" propType="simple">
  402.                             <SimpleValue valType="binary">0900000000000000200000000000000057747A757020557365</SimpleValue>
  403.                         </PropertyDesc>
  404.                         <PropertyDesc idRef="31" propType="simple">
  405.                             <SimpleValue valType="int">135168</SimpleValue>
  406.                         </PropertyDesc>
  407.                     </PropertyDescList>
  408.                 </Rule>
  409.                 <Rule guid="{810D2920-B36C-43A9-9E5A-0C42C92423FE}">
  410.                     <ObjDescRef guidRef="{61CCEDD3-2BEA-4940-868F-FFBDF4861434}"/>
  411.                     <AccessDescList>
  412.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  413.                     </AccessDescList>
  414.                     <PropertyDescList>
  415.                         <PropertyDesc idRef="20" propType="simple">
  416.                             <SimpleValue valType="int">480</SimpleValue>
  417.                         </PropertyDesc>
  418.                         <PropertyDesc idRef="5" propType="objRef">
  419.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  420.                         </PropertyDesc>
  421.                         <PropertyDesc idRef="21" propType="simple">
  422.                             <SimpleValue valType="str">BACKDOOR Infector 1.6 Server to Client</SimpleValue>
  423.                         </PropertyDesc>
  424.                         <PropertyDesc idRef="30" propType="simple">
  425.                             <SimpleValue valType="binary">080000000000000000000000000000005748415449534954</SimpleValue>
  426.                         </PropertyDesc>
  427.                         <PropertyDesc idRef="31" propType="simple">
  428.                             <SimpleValue valType="int">135168</SimpleValue>
  429.                         </PropertyDesc>
  430.                     </PropertyDescList>
  431.                 </Rule>
  432.                 <Rule guid="{BBE2FD21-50DB-437F-93A7-7DF3F1FFF392}">
  433.                     <ObjDescRef guidRef="{22C170E0-6386-4CDE-AFB2-F4054F14CF8E}"/>
  434.                     <AccessDescList>
  435.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  436.                     </AccessDescList>
  437.                     <PropertyDescList>
  438.                         <PropertyDesc idRef="20" propType="simple">
  439.                             <SimpleValue valType="int">484</SimpleValue>
  440.                         </PropertyDesc>
  441.                         <PropertyDesc idRef="5" propType="objRef">
  442.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  443.                         </PropertyDesc>
  444.                         <PropertyDesc idRef="21" propType="simple">
  445.                             <SimpleValue valType="str">BACKDOOR Infector 1.6 Client to Server Connection Request</SimpleValue>
  446.                         </PropertyDesc>
  447.                         <PropertyDesc idRef="30" propType="simple">
  448.                             <SimpleValue valType="binary">03000000000000000000000000000000464320</SimpleValue>
  449.                         </PropertyDesc>
  450.                         <PropertyDesc idRef="31" propType="simple">
  451.                             <SimpleValue valType="int">135168</SimpleValue>
  452.                         </PropertyDesc>
  453.                     </PropertyDescList>
  454.                 </Rule>
  455.                 <Rule guid="{FC90E7D0-132D-459F-86BC-AC5483B6F8DC}">
  456.                     <ObjDescRef guidRef="{7ACA3629-CDA3-43B9-9F26-1B4DB17C6027}"/>
  457.                     <AccessDescList>
  458.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  459.                     </AccessDescList>
  460.                     <PropertyDescList>
  461.                         <PropertyDesc idRef="20" propType="simple">
  462.                             <SimpleValue valType="int">488</SimpleValue>
  463.                         </PropertyDesc>
  464.                         <PropertyDesc idRef="5" propType="objRef">
  465.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  466.                         </PropertyDesc>
  467.                         <PropertyDesc idRef="21" propType="simple">
  468.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 System Info Client Request</SimpleValue>
  469.                         </PropertyDesc>
  470.                         <PropertyDesc idRef="30" propType="simple">
  471.                             <SimpleValue valType="binary">020000000000000000000000000000003133</SimpleValue>
  472.                         </PropertyDesc>
  473.                     </PropertyDescList>
  474.                 </Rule>
  475.                 <Rule guid="{0F8D2AEC-3950-41E3-9594-7FC0C7496471}">
  476.                     <ObjDescRef guidRef="{3937A292-A65B-4301-AEE3-EBEE40636295}"/>
  477.                     <AccessDescList>
  478.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  479.                     </AccessDescList>
  480.                     <PropertyDescList>
  481.                         <PropertyDesc idRef="20" propType="simple">
  482.                             <SimpleValue valType="int">496</SimpleValue>
  483.                         </PropertyDesc>
  484.                         <PropertyDesc idRef="5" propType="objRef">
  485.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  486.                         </PropertyDesc>
  487.                         <PropertyDesc idRef="21" propType="simple">
  488.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 FTP Status Client Request</SimpleValue>
  489.                         </PropertyDesc>
  490.                         <PropertyDesc idRef="30" propType="simple">
  491.                             <SimpleValue valType="binary">020000000000000000000000000000003039</SimpleValue>
  492.                         </PropertyDesc>
  493.                     </PropertyDescList>
  494.                 </Rule>
  495.                 <Rule guid="{7FD5BBF4-1576-434D-AA23-A1E443DC30AE}">
  496.                     <ObjDescRef guidRef="{8256018D-C407-4A2E-9234-F7153435F93B}"/>
  497.                     <AccessDescList>
  498.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  499.                     </AccessDescList>
  500.                     <PropertyDescList>
  501.                         <PropertyDesc idRef="20" propType="simple">
  502.                             <SimpleValue valType="int">500</SimpleValue>
  503.                         </PropertyDesc>
  504.                         <PropertyDesc idRef="5" propType="objRef">
  505.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  506.                         </PropertyDesc>
  507.                         <PropertyDesc idRef="21" propType="simple">
  508.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 E-Mail Info From Server</SimpleValue>
  509.                         </PropertyDesc>
  510.                         <PropertyDesc idRef="30" propType="simple">
  511.                             <SimpleValue valType="binary">0A00000000000000000000000000000052657472656176696E67</SimpleValue>
  512.                         </PropertyDesc>
  513.                     </PropertyDescList>
  514.                 </Rule>
  515.                 <Rule guid="{01CADA43-F56B-4EC8-AF88-9FD7E1435D25}">
  516.                     <ObjDescRef guidRef="{4EE3C877-C01D-4E7C-A107-944347DF4B9A}"/>
  517.                     <AccessDescList>
  518.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  519.                     </AccessDescList>
  520.                     <PropertyDescList>
  521.                         <PropertyDesc idRef="20" propType="simple">
  522.                             <SimpleValue valType="int">504</SimpleValue>
  523.                         </PropertyDesc>
  524.                         <PropertyDesc idRef="5" propType="objRef">
  525.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  526.                         </PropertyDesc>
  527.                         <PropertyDesc idRef="21" propType="simple">
  528.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 E-Mail Info Client Request</SimpleValue>
  529.                         </PropertyDesc>
  530.                         <PropertyDesc idRef="30" propType="simple">
  531.                             <SimpleValue valType="binary">020000000000000000000000000000003132</SimpleValue>
  532.                         </PropertyDesc>
  533.                     </PropertyDescList>
  534.                 </Rule>
  535.                 <Rule guid="{AA912312-A533-4117-9B32-08DBAAE385E4}">
  536.                     <ObjDescRef guidRef="{C5208174-68DF-4CAB-828D-406054DA8977}"/>
  537.                     <AccessDescList>
  538.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  539.                     </AccessDescList>
  540.                     <PropertyDescList>
  541.                         <PropertyDesc idRef="20" propType="simple">
  542.                             <SimpleValue valType="int">508</SimpleValue>
  543.                         </PropertyDesc>
  544.                         <PropertyDesc idRef="5" propType="objRef">
  545.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  546.                         </PropertyDesc>
  547.                         <PropertyDesc idRef="21" propType="simple">
  548.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Status From Server</SimpleValue>
  549.                         </PropertyDesc>
  550.                         <PropertyDesc idRef="30" propType="simple">
  551.                             <SimpleValue valType="binary">04000000000000000000000000000000486F7374</SimpleValue>
  552.                         </PropertyDesc>
  553.                     </PropertyDescList>
  554.                 </Rule>
  555.                 <Rule guid="{E5A9AD08-A862-4EDC-B5B6-DBD0DD1C2000}">
  556.                     <ObjDescRef guidRef="{76D09616-9855-4DAD-9C8C-6208C81197CB}"/>
  557.                     <AccessDescList>
  558.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  559.                     </AccessDescList>
  560.                     <PropertyDescList>
  561.                         <PropertyDesc idRef="20" propType="simple">
  562.                             <SimpleValue valType="int">512</SimpleValue>
  563.                         </PropertyDesc>
  564.                         <PropertyDesc idRef="5" propType="objRef">
  565.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  566.                         </PropertyDesc>
  567.                         <PropertyDesc idRef="21" propType="simple">
  568.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Status Client Request</SimpleValue>
  569.                         </PropertyDesc>
  570.                         <PropertyDesc idRef="30" propType="simple">
  571.                             <SimpleValue valType="binary">020000000000000000000000000000003130</SimpleValue>
  572.                         </PropertyDesc>
  573.                     </PropertyDescList>
  574.                 </Rule>
  575.                 <Rule guid="{F3564DE9-A180-436C-8C66-C699004A2C19}">
  576.                     <ObjDescRef guidRef="{1092B8F9-41B5-4763-9DFA-AA7B1F62F0F6}"/>
  577.                     <AccessDescList>
  578.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  579.                     </AccessDescList>
  580.                     <PropertyDescList>
  581.                         <PropertyDesc idRef="20" propType="simple">
  582.                             <SimpleValue valType="int">516</SimpleValue>
  583.                         </PropertyDesc>
  584.                         <PropertyDesc idRef="5" propType="objRef">
  585.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  586.                         </PropertyDesc>
  587.                         <PropertyDesc idRef="21" propType="simple">
  588.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Drive Info From Server</SimpleValue>
  589.                         </PropertyDesc>
  590.                         <PropertyDesc idRef="30" propType="simple">
  591.                             <SimpleValue valType="binary">0400000000000000000000000000000043202D20</SimpleValue>
  592.                         </PropertyDesc>
  593.                     </PropertyDescList>
  594.                 </Rule>
  595.                 <Rule guid="{217C477E-57D7-4BA4-9C6A-B36263BCCAD1}">
  596.                     <ObjDescRef guidRef="{90C0AF33-7F03-403C-873B-E8B6C41A135A}"/>
  597.                     <AccessDescList>
  598.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  599.                     </AccessDescList>
  600.                     <PropertyDescList>
  601.                         <PropertyDesc idRef="20" propType="simple">
  602.                             <SimpleValue valType="int">520</SimpleValue>
  603.                         </PropertyDesc>
  604.                         <PropertyDesc idRef="5" propType="objRef">
  605.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  606.                         </PropertyDesc>
  607.                         <PropertyDesc idRef="21" propType="simple">
  608.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 System Info From Server</SimpleValue>
  609.                         </PropertyDesc>
  610.                         <PropertyDesc idRef="30" propType="simple">
  611.                             <SimpleValue valType="binary">09000000000000000000000000000000436F6D70204E616D65</SimpleValue>
  612.                         </PropertyDesc>
  613.                     </PropertyDescList>
  614.                 </Rule>
  615.                 <Rule guid="{698D693C-6CA1-4D62-9BBB-BD8AB9B94DF8}">
  616.                     <ObjDescRef guidRef="{99782BA2-3466-4966-8479-B4159E6D1E02}"/>
  617.                     <AccessDescList>
  618.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  619.                     </AccessDescList>
  620.                     <PropertyDescList>
  621.                         <PropertyDesc idRef="20" propType="simple">
  622.                             <SimpleValue valType="int">524</SimpleValue>
  623.                         </PropertyDesc>
  624.                         <PropertyDesc idRef="5" propType="objRef">
  625.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  626.                         </PropertyDesc>
  627.                         <PropertyDesc idRef="21" propType="simple">
  628.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Drive Info Client Request</SimpleValue>
  629.                         </PropertyDesc>
  630.                         <PropertyDesc idRef="30" propType="simple">
  631.                             <SimpleValue valType="binary">03000000000000000000000000000000313330</SimpleValue>
  632.                         </PropertyDesc>
  633.                     </PropertyDescList>
  634.                 </Rule>
  635.                 <Rule guid="{68CF5A21-CE04-4A99-8109-D03700DFEF19}">
  636.                     <ObjDescRef guidRef="{E1F79C7E-E070-49DE-B805-A4330C558B6B}"/>
  637.                     <AccessDescList>
  638.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  639.                     </AccessDescList>
  640.                     <PropertyDescList>
  641.                         <PropertyDesc idRef="20" propType="simple">
  642.                             <SimpleValue valType="int">528</SimpleValue>
  643.                         </PropertyDesc>
  644.                         <PropertyDesc idRef="5" propType="objRef">
  645.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  646.                         </PropertyDesc>
  647.                         <PropertyDesc idRef="21" propType="simple">
  648.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server FTP Port Change From Server</SimpleValue>
  649.                         </PropertyDesc>
  650.                         <PropertyDesc idRef="30" propType="simple">
  651.                             <SimpleValue valType="binary">1500000000000000000000000000000046545020536572766572206368616E67656420746F</SimpleValue>
  652.                         </PropertyDesc>
  653.                     </PropertyDescList>
  654.                 </Rule>
  655.                 <Rule guid="{EFA90D7B-94E4-4D75-AE0E-110C21C50E76}">
  656.                     <ObjDescRef guidRef="{6370C67B-0B08-4844-A905-A80229D4B0E0}"/>
  657.                     <AccessDescList>
  658.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  659.                     </AccessDescList>
  660.                     <PropertyDescList>
  661.                         <PropertyDesc idRef="20" propType="simple">
  662.                             <SimpleValue valType="int">532</SimpleValue>
  663.                         </PropertyDesc>
  664.                         <PropertyDesc idRef="5" propType="objRef">
  665.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  666.                         </PropertyDesc>
  667.                         <PropertyDesc idRef="21" propType="simple">
  668.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Cached Passwords Client Request</SimpleValue>
  669.                         </PropertyDesc>
  670.                         <PropertyDesc idRef="30" propType="simple">
  671.                             <SimpleValue valType="binary">020000000000000000000000000000003136</SimpleValue>
  672.                         </PropertyDesc>
  673.                     </PropertyDescList>
  674.                 </Rule>
  675.                 <Rule guid="{CBD130BF-9D85-403B-B090-9DDD81D9989A}">
  676.                     <ObjDescRef guidRef="{F2136FCC-83D3-48F9-AA2C-E14F0590DC80}"/>
  677.                     <AccessDescList>
  678.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  679.                     </AccessDescList>
  680.                     <PropertyDescList>
  681.                         <PropertyDesc idRef="20" propType="simple">
  682.                             <SimpleValue valType="int">536</SimpleValue>
  683.                         </PropertyDesc>
  684.                         <PropertyDesc idRef="5" propType="objRef">
  685.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  686.                         </PropertyDesc>
  687.                         <PropertyDesc idRef="21" propType="simple">
  688.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 RAS Passwords Client Request</SimpleValue>
  689.                         </PropertyDesc>
  690.                         <PropertyDesc idRef="30" propType="simple">
  691.                             <SimpleValue valType="binary">020000000000000000000000000000003137</SimpleValue>
  692.                         </PropertyDesc>
  693.                     </PropertyDescList>
  694.                 </Rule>
  695.                 <Rule guid="{3D5C8FDC-E670-43B1-AB6F-D0E74BD0CE3F}">
  696.                     <ObjDescRef guidRef="{1AC71705-C41A-470E-9BC3-82B5A2A810F2}"/>
  697.                     <AccessDescList>
  698.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  699.                     </AccessDescList>
  700.                     <PropertyDescList>
  701.                         <PropertyDesc idRef="20" propType="simple">
  702.                             <SimpleValue valType="int">540</SimpleValue>
  703.                         </PropertyDesc>
  704.                         <PropertyDesc idRef="5" propType="objRef">
  705.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  706.                         </PropertyDesc>
  707.                         <PropertyDesc idRef="21" propType="simple">
  708.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Password Change Client Request</SimpleValue>
  709.                         </PropertyDesc>
  710.                         <PropertyDesc idRef="30" propType="simple">
  711.                             <SimpleValue valType="binary">020000000000000000000000000000003931</SimpleValue>
  712.                         </PropertyDesc>
  713.                     </PropertyDescList>
  714.                 </Rule>
  715.                 <Rule guid="{306A6C84-9087-47DA-BA5B-BA390E375760}">
  716.                     <ObjDescRef guidRef="{BFA2E518-C4CC-4736-A109-92B3A06C046F}"/>
  717.                     <AccessDescList>
  718.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  719.                     </AccessDescList>
  720.                     <PropertyDescList>
  721.                         <PropertyDesc idRef="20" propType="simple">
  722.                             <SimpleValue valType="int">544</SimpleValue>
  723.                         </PropertyDesc>
  724.                         <PropertyDesc idRef="5" propType="objRef">
  725.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  726.                         </PropertyDesc>
  727.                         <PropertyDesc idRef="21" propType="simple">
  728.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Password Remove Client Request</SimpleValue>
  729.                         </PropertyDesc>
  730.                         <PropertyDesc idRef="30" propType="simple">
  731.                             <SimpleValue valType="binary">020000000000000000000000000000003932</SimpleValue>
  732.                         </PropertyDesc>
  733.                     </PropertyDescList>
  734.                 </Rule>
  735.                 <Rule guid="{F78C9BB6-A160-4469-AFBD-9DE6202F747F}">
  736.                     <ObjDescRef guidRef="{35D57632-1B59-4569-837A-293A9CE5CF4D}"/>
  737.                     <AccessDescList>
  738.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  739.                     </AccessDescList>
  740.                     <PropertyDescList>
  741.                         <PropertyDesc idRef="20" propType="simple">
  742.                             <SimpleValue valType="int">548</SimpleValue>
  743.                         </PropertyDesc>
  744.                         <PropertyDesc idRef="5" propType="objRef">
  745.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  746.                         </PropertyDesc>
  747.                         <PropertyDesc idRef="21" propType="simple">
  748.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Rehash Client Request</SimpleValue>
  749.                         </PropertyDesc>
  750.                         <PropertyDesc idRef="30" propType="simple">
  751.                             <SimpleValue valType="binary">03000000000000000000000000000000393131</SimpleValue>
  752.                         </PropertyDesc>
  753.                     </PropertyDescList>
  754.                 </Rule>
  755.                 <Rule guid="{9A821692-9401-4EAC-A83B-9F2B477DD688}">
  756.                     <ObjDescRef guidRef="{E027ABC7-85B5-4C03-9737-44761EB70518}"/>
  757.                     <AccessDescList>
  758.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  759.                     </AccessDescList>
  760.                     <PropertyDescList>
  761.                         <PropertyDesc idRef="20" propType="simple">
  762.                             <SimpleValue valType="int">552</SimpleValue>
  763.                         </PropertyDesc>
  764.                         <PropertyDesc idRef="5" propType="objRef">
  765.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  766.                         </PropertyDesc>
  767.                         <PropertyDesc idRef="21" propType="simple">
  768.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Rehash Client Request</SimpleValue>
  769.                         </PropertyDesc>
  770.                         <PropertyDesc idRef="30" propType="simple">
  771.                             <SimpleValue valType="binary">14000000000000000000000000000000736875746430776E4D3074686572462A2A2A6552</SimpleValue>
  772.                         </PropertyDesc>
  773.                     </PropertyDescList>
  774.                 </Rule>
  775.                 <Rule guid="{E5AFA69E-62AC-4BE1-8946-288AFB8BA144}">
  776.                     <ObjDescRef guidRef="{CEC3E76D-A693-49BD-9428-A65B8167FD3C}"/>
  777.                     <AccessDescList>
  778.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  779.                     </AccessDescList>
  780.                     <PropertyDescList>
  781.                         <PropertyDesc idRef="20" propType="simple">
  782.                             <SimpleValue valType="int">560</SimpleValue>
  783.                         </PropertyDesc>
  784.                         <PropertyDesc idRef="5" propType="objRef">
  785.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  786.                         </PropertyDesc>
  787.                         <PropertyDesc idRef="21" propType="simple">
  788.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 ICQ Alert OFF Client Request</SimpleValue>
  789.                         </PropertyDesc>
  790.                         <PropertyDesc idRef="30" propType="simple">
  791.                             <SimpleValue valType="binary">020000000000000000000000000000003838</SimpleValue>
  792.                         </PropertyDesc>
  793.                     </PropertyDescList>
  794.                 </Rule>
  795.                 <Rule guid="{61C4B72D-D505-4C08-91E5-7134C041366E}">
  796.                     <ObjDescRef guidRef="{6C4F0D04-7E35-448C-AD67-C17380B50F1D}"/>
  797.                     <AccessDescList>
  798.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  799.                     </AccessDescList>
  800.                     <PropertyDescList>
  801.                         <PropertyDesc idRef="20" propType="simple">
  802.                             <SimpleValue valType="int">564</SimpleValue>
  803.                         </PropertyDesc>
  804.                         <PropertyDesc idRef="5" propType="objRef">
  805.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  806.                         </PropertyDesc>
  807.                         <PropertyDesc idRef="21" propType="simple">
  808.                             <SimpleValue valType="str">BACKDOOR HackAttack 1.20 Connect</SimpleValue>
  809.                         </PropertyDesc>
  810.                         <PropertyDesc idRef="31" propType="simple">
  811.                             <SimpleValue valType="int">135168</SimpleValue>
  812.                         </PropertyDesc>
  813.                         <PropertyDesc idRef="30" propType="simple">
  814.                             <SimpleValue valType="binary">04000000000000000000000000000000686F7374</SimpleValue>
  815.                         </PropertyDesc>
  816.                     </PropertyDescList>
  817.                 </Rule>
  818.                 <Rule guid="{C802B1A3-348B-4443-B422-6907475A2547}">
  819.                     <ObjDescRef guidRef="{FD70D750-AC8B-47BF-AC8C-8CCC2AF4F586}"/>
  820.                     <AccessDescList>
  821.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  822.                     </AccessDescList>
  823.                     <PropertyDescList>
  824.                         <PropertyDesc idRef="20" propType="simple">
  825.                             <SimpleValue valType="int">568</SimpleValue>
  826.                         </PropertyDesc>
  827.                         <PropertyDesc idRef="5" propType="objRef">
  828.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  829.                         </PropertyDesc>
  830.                         <PropertyDesc idRef="21" propType="simple">
  831.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 ICQ Alert ON Client Request</SimpleValue>
  832.                         </PropertyDesc>
  833.                         <PropertyDesc idRef="30" propType="simple">
  834.                             <SimpleValue valType="binary">020000000000000000000000000000003430</SimpleValue>
  835.                         </PropertyDesc>
  836.                     </PropertyDescList>
  837.                 </Rule>
  838.                 <Rule guid="{1C06A7D3-9233-4244-A897-CE7F138713A2}">
  839.                     <ObjDescRef guidRef="{BB57B4B5-8BB6-4140-A6CA-B206C432FE8F}"/>
  840.                     <AccessDescList>
  841.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  842.                     </AccessDescList>
  843.                     <PropertyDescList>
  844.                         <PropertyDesc idRef="20" propType="simple">
  845.                             <SimpleValue valType="int">572</SimpleValue>
  846.                         </PropertyDesc>
  847.                         <PropertyDesc idRef="5" propType="objRef">
  848.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  849.                         </PropertyDesc>
  850.                         <PropertyDesc idRef="21" propType="simple">
  851.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Change Wallpaper Client Request</SimpleValue>
  852.                         </PropertyDesc>
  853.                         <PropertyDesc idRef="30" propType="simple">
  854.                             <SimpleValue valType="binary">020000000000000000000000000000003230</SimpleValue>
  855.                         </PropertyDesc>
  856.                     </PropertyDescList>
  857.                 </Rule>
  858.                 <Rule guid="{0A46784C-174A-497B-8F09-2103D05F4C57}">
  859.                     <ObjDescRef guidRef="{728D5EC9-6B87-4E48-907F-0B526B161BC1}"/>
  860.                     <AccessDescList>
  861.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  862.                     </AccessDescList>
  863.                     <PropertyDescList>
  864.                         <PropertyDesc idRef="20" propType="simple">
  865.                             <SimpleValue valType="int">580</SimpleValue>
  866.                         </PropertyDesc>
  867.                         <PropertyDesc idRef="5" propType="objRef">
  868.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  869.                         </PropertyDesc>
  870.                         <PropertyDesc idRef="21" propType="simple">
  871.                             <SimpleValue valType="str">BACKDOOR GirlFriendaccess</SimpleValue>
  872.                         </PropertyDesc>
  873.                         <PropertyDesc idRef="31" propType="simple">
  874.                             <SimpleValue valType="int">135168</SimpleValue>
  875.                         </PropertyDesc>
  876.                         <PropertyDesc idRef="30" propType="simple">
  877.                             <SimpleValue valType="binary">040000000000000000000000000000004769726C</SimpleValue>
  878.                         </PropertyDesc>
  879.                     </PropertyDescList>
  880.                 </Rule>
  881.                 <Rule guid="{2864B1AF-DD7F-4118-88F2-8FFC029547C6}">
  882.                     <ObjDescRef guidRef="{7E9D0D3E-F5A8-4048-8789-018476D7AC4E}"/>
  883.                     <AccessDescList>
  884.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  885.                     </AccessDescList>
  886.                     <PropertyDescList>
  887.                         <PropertyDesc idRef="20" propType="simple">
  888.                             <SimpleValue valType="int">584</SimpleValue>
  889.                         </PropertyDesc>
  890.                         <PropertyDesc idRef="5" propType="objRef">
  891.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  892.                         </PropertyDesc>
  893.                         <PropertyDesc idRef="21" propType="simple">
  894.                             <SimpleValue valType="str">BACKDOOR NetSphere access</SimpleValue>
  895.                         </PropertyDesc>
  896.                         <PropertyDesc idRef="31" propType="simple">
  897.                             <SimpleValue valType="int">135168</SimpleValue>
  898.                         </PropertyDesc>
  899.                         <PropertyDesc idRef="30" propType="simple">
  900.                             <SimpleValue valType="binary">090000000000000000000000000000004E6574537068657265</SimpleValue>
  901.                         </PropertyDesc>
  902.                     </PropertyDescList>
  903.                 </Rule>
  904.                 <Rule guid="{0DC65D8A-6536-4C34-BCE7-07308E17B5F5}">
  905.                     <ObjDescRef guidRef="{45D3C93A-EE40-4F71-9068-676D4E45C29A}"/>
  906.                     <AccessDescList>
  907.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  908.                     </AccessDescList>
  909.                     <PropertyDescList>
  910.                         <PropertyDesc idRef="20" propType="simple">
  911.                             <SimpleValue valType="int">588</SimpleValue>
  912.                         </PropertyDesc>
  913.                         <PropertyDesc idRef="5" propType="objRef">
  914.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  915.                         </PropertyDesc>
  916.                         <PropertyDesc idRef="21" propType="simple">
  917.                             <SimpleValue valType="str">BACKDOOR GateCrasher</SimpleValue>
  918.                         </PropertyDesc>
  919.                         <PropertyDesc idRef="31" propType="simple">
  920.                             <SimpleValue valType="int">135168</SimpleValue>
  921.                         </PropertyDesc>
  922.                         <PropertyDesc idRef="30" propType="simple">
  923.                             <SimpleValue valType="binary">0B0000000000000000000000000000004761746543726173686572</SimpleValue>
  924.                         </PropertyDesc>
  925.                     </PropertyDescList>
  926.                 </Rule>
  927.                 <Rule guid="{B945FD32-6FF1-4D11-AF2B-258EF1D448CC}">
  928.                     <ObjDescRef guidRef="{5EC0D4B1-4EC0-4F30-B417-BED0382038F0}"/>
  929.                     <AccessDescList>
  930.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  931.                     </AccessDescList>
  932.                     <PropertyDescList>
  933.                         <PropertyDesc idRef="20" propType="simple">
  934.                             <SimpleValue valType="int">592</SimpleValue>
  935.                         </PropertyDesc>
  936.                         <PropertyDesc idRef="5" propType="objRef">
  937.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  938.                         </PropertyDesc>
  939.                         <PropertyDesc idRef="21" propType="simple">
  940.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Keylogger Active on Network</SimpleValue>
  941.                         </PropertyDesc>
  942.                         <PropertyDesc idRef="30" propType="simple">
  943.                             <SimpleValue valType="binary">1C0000000000000000000000000000004B65794C6F6767657220497320456E61626C6564204F6E20706F7274</SimpleValue>
  944.                         </PropertyDesc>
  945.                     </PropertyDescList>
  946.                 </Rule>
  947.                 <Rule guid="{EC3FBB49-F9ED-48C9-BEED-FBDD2DA3AA0A}">
  948.                     <ObjDescRef guidRef="{476EE1DD-135F-449D-9C4C-1AC77A98267A}"/>
  949.                     <AccessDescList>
  950.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  951.                     </AccessDescList>
  952.                     <PropertyDescList>
  953.                         <PropertyDesc idRef="20" propType="simple">
  954.                             <SimpleValue valType="int">596</SimpleValue>
  955.                         </PropertyDesc>
  956.                         <PropertyDesc idRef="5" propType="objRef">
  957.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  958.                         </PropertyDesc>
  959.                         <PropertyDesc idRef="21" propType="simple">
  960.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network</SimpleValue>
  961.                         </PropertyDesc>
  962.                         <PropertyDesc idRef="30" propType="simple">
  963.                             <SimpleValue valType="binary">020000000000000000000000000000000023</SimpleValue>
  964.                         </PropertyDesc>
  965.                     </PropertyDescList>
  966.                 </Rule>
  967.                 <Rule guid="{29D2D75D-83D5-4512-8067-0ABBB42A6A7A}">
  968.                     <ObjDescRef guidRef="{E3A45C98-C15A-45E2-B250-95247F32904F}"/>
  969.                     <AccessDescList>
  970.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  971.                     </AccessDescList>
  972.                     <PropertyDescList>
  973.                         <PropertyDesc idRef="20" propType="simple">
  974.                             <SimpleValue valType="int">600</SimpleValue>
  975.                         </PropertyDesc>
  976.                         <PropertyDesc idRef="5" propType="objRef">
  977.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  978.                         </PropertyDesc>
  979.                         <PropertyDesc idRef="21" propType="simple">
  980.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Active on Network</SimpleValue>
  981.                         </PropertyDesc>
  982.                         <PropertyDesc idRef="30" propType="simple">
  983.                             <SimpleValue valType="binary">020000000000000000000000000000000023</SimpleValue>
  984.                         </PropertyDesc>
  985.                     </PropertyDescList>
  986.                 </Rule>
  987.                 <Rule guid="{101E0585-4084-411D-A778-699B5773A75D}">
  988.                     <ObjDescRef guidRef="{8EAF9B03-1F81-4184-9FA7-A862ECD8E166}"/>
  989.                     <AccessDescList>
  990.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  991.                     </AccessDescList>
  992.                     <PropertyDescList>
  993.                         <PropertyDesc idRef="20" propType="simple">
  994.                             <SimpleValue valType="int">604</SimpleValue>
  995.                         </PropertyDesc>
  996.                         <PropertyDesc idRef="5" propType="objRef">
  997.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  998.                         </PropertyDesc>
  999.                         <PropertyDesc idRef="21" propType="simple">
  1000.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network</SimpleValue>
  1001.                         </PropertyDesc>
  1002.                     </PropertyDescList>
  1003.                 </Rule>
  1004.                 <Rule guid="{64788CF8-F0F0-49F7-A43E-27D4B24D9CFF}">
  1005.                     <ObjDescRef guidRef="{FB51ACE5-09F6-41FC-8D1D-3BC52F250AB3}"/>
  1006.                     <AccessDescList>
  1007.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1008.                     </AccessDescList>
  1009.                     <PropertyDescList>
  1010.                         <PropertyDesc idRef="20" propType="simple">
  1011.                             <SimpleValue valType="int">608</SimpleValue>
  1012.                         </PropertyDesc>
  1013.                         <PropertyDesc idRef="5" propType="objRef">
  1014.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1015.                         </PropertyDesc>
  1016.                         <PropertyDesc idRef="21" propType="simple">
  1017.                             <SimpleValue valType="str">BACKDOOR BackConstruction 2.1 Connection</SimpleValue>
  1018.                         </PropertyDesc>
  1019.                         <PropertyDesc idRef="31" propType="simple">
  1020.                             <SimpleValue valType="int">135168</SimpleValue>
  1021.                         </PropertyDesc>
  1022.                         <PropertyDesc idRef="30" propType="simple">
  1023.                             <SimpleValue valType="binary">04000000000000000000000000000000633A5C5C</SimpleValue>
  1024.                         </PropertyDesc>
  1025.                     </PropertyDescList>
  1026.                 </Rule>
  1027.                 <Rule guid="{51EA1F3E-62AC-4FE3-8F15-B6876995864E}">
  1028.                     <ObjDescRef guidRef="{6CDC0F12-1EFF-44D1-88F8-76E7CB85C936}"/>
  1029.                     <AccessDescList>
  1030.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1031.                     </AccessDescList>
  1032.                     <PropertyDescList>
  1033.                         <PropertyDesc idRef="20" propType="simple">
  1034.                             <SimpleValue valType="int">612</SimpleValue>
  1035.                         </PropertyDesc>
  1036.                         <PropertyDesc idRef="5" propType="objRef">
  1037.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1038.                         </PropertyDesc>
  1039.                         <PropertyDesc idRef="21" propType="simple">
  1040.                             <SimpleValue valType="str">BACKDOOR DonaldDick 1.53 Traffic</SimpleValue>
  1041.                         </PropertyDesc>
  1042.                         <PropertyDesc idRef="31" propType="simple">
  1043.                             <SimpleValue valType="int">135168</SimpleValue>
  1044.                         </PropertyDesc>
  1045.                         <PropertyDesc idRef="30" propType="simple">
  1046.                             <SimpleValue valType="binary">0400000000000000000000000000000070494E67</SimpleValue>
  1047.                         </PropertyDesc>
  1048.                     </PropertyDescList>
  1049.                 </Rule>
  1050.                 <Rule guid="{5633FE2B-7713-4492-A453-60FA391C46A8}">
  1051.                     <ObjDescRef guidRef="{95A4DF2A-CA1F-4A3F-A6F2-2F679113BAFE}"/>
  1052.                     <AccessDescList>
  1053.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1054.                     </AccessDescList>
  1055.                     <PropertyDescList>
  1056.                         <PropertyDesc idRef="20" propType="simple">
  1057.                             <SimpleValue valType="int">616</SimpleValue>
  1058.                         </PropertyDesc>
  1059.                         <PropertyDesc idRef="5" propType="objRef">
  1060.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1061.                         </PropertyDesc>
  1062.                         <PropertyDesc idRef="21" propType="simple">
  1063.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Wrong Password</SimpleValue>
  1064.                         </PropertyDesc>
  1065.                         <PropertyDesc idRef="30" propType="simple">
  1066.                             <SimpleValue valType="binary">0E00000000000000000000000000000057726F6E672050617373776F7264</SimpleValue>
  1067.                         </PropertyDesc>
  1068.                     </PropertyDescList>
  1069.                 </Rule>
  1070.                 <Rule guid="{65652224-3763-4A45-AD16-4CA3E803E931}">
  1071.                     <ObjDescRef guidRef="{5151FE9A-B68F-48DB-9167-6ABA60EDE618}"/>
  1072.                     <AccessDescList>
  1073.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1074.                     </AccessDescList>
  1075.                     <PropertyDescList>
  1076.                         <PropertyDesc idRef="20" propType="simple">
  1077.                             <SimpleValue valType="int">620</SimpleValue>
  1078.                         </PropertyDesc>
  1079.                         <PropertyDesc idRef="5" propType="objRef">
  1080.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1081.                         </PropertyDesc>
  1082.                         <PropertyDesc idRef="21" propType="simple">
  1083.                             <SimpleValue valType="str">BACKDOOR NetSphere 1.31.337 access</SimpleValue>
  1084.                         </PropertyDesc>
  1085.                         <PropertyDesc idRef="31" propType="simple">
  1086.                             <SimpleValue valType="int">135168</SimpleValue>
  1087.                         </PropertyDesc>
  1088.                         <PropertyDesc idRef="30" propType="simple">
  1089.                             <SimpleValue valType="binary">090000000000000000000000000000004E6574537068657265</SimpleValue>
  1090.                         </PropertyDesc>
  1091.                     </PropertyDescList>
  1092.                 </Rule>
  1093.                 <Rule guid="{FE9514D2-800B-461B-B960-E364F51940E6}">
  1094.                     <ObjDescRef guidRef="{CCFDCFAF-7B8F-4173-A6DB-CC30B877F790}"/>
  1095.                     <AccessDescList>
  1096.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1097.                     </AccessDescList>
  1098.                     <PropertyDescList>
  1099.                         <PropertyDesc idRef="20" propType="simple">
  1100.                             <SimpleValue valType="int">624</SimpleValue>
  1101.                         </PropertyDesc>
  1102.                         <PropertyDesc idRef="5" propType="objRef">
  1103.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1104.                         </PropertyDesc>
  1105.                         <PropertyDesc idRef="21" propType="simple">
  1106.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Visible Window List Client Request</SimpleValue>
  1107.                         </PropertyDesc>
  1108.                         <PropertyDesc idRef="30" propType="simple">
  1109.                             <SimpleValue valType="binary">020000000000000000000000000000003337</SimpleValue>
  1110.                         </PropertyDesc>
  1111.                     </PropertyDescList>
  1112.                 </Rule>
  1113.                 <Rule guid="{B0BA2734-0B95-42AB-B95C-524E19AF27F6}">
  1114.                     <ObjDescRef guidRef="{DD5432C2-D98A-43D2-9A97-7437AF33FAF5}"/>
  1115.                     <AccessDescList>
  1116.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1117.                     </AccessDescList>
  1118.                     <PropertyDescList>
  1119.                         <PropertyDesc idRef="20" propType="simple">
  1120.                             <SimpleValue valType="int">628</SimpleValue>
  1121.                         </PropertyDesc>
  1122.                         <PropertyDesc idRef="5" propType="objRef">
  1123.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1124.                         </PropertyDesc>
  1125.                         <PropertyDesc idRef="21" propType="simple">
  1126.                             <SimpleValue valType="str">BACKDOOR BackConstruction 2.1 Client FTP Open Request</SimpleValue>
  1127.                         </PropertyDesc>
  1128.                         <PropertyDesc idRef="31" propType="simple">
  1129.                             <SimpleValue valType="int">135168</SimpleValue>
  1130.                         </PropertyDesc>
  1131.                         <PropertyDesc idRef="30" propType="simple">
  1132.                             <SimpleValue valType="binary">050000000000000000000000000000004654504F4E</SimpleValue>
  1133.                         </PropertyDesc>
  1134.                     </PropertyDescList>
  1135.                 </Rule>
  1136.                 <Rule guid="{5EDD25B6-5B39-4BD8-81BE-8DA85DE18BD1}">
  1137.                     <ObjDescRef guidRef="{7296225A-28EE-40B8-895C-B164EA8EA39D}"/>
  1138.                     <AccessDescList>
  1139.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1140.                     </AccessDescList>
  1141.                     <PropertyDescList>
  1142.                         <PropertyDesc idRef="20" propType="simple">
  1143.                             <SimpleValue valType="int">632</SimpleValue>
  1144.                         </PropertyDesc>
  1145.                         <PropertyDesc idRef="5" propType="objRef">
  1146.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1147.                         </PropertyDesc>
  1148.                         <PropertyDesc idRef="21" propType="simple">
  1149.                             <SimpleValue valType="str">BACKDOOR BackConstruction 2.1 Server FTP Open Reply</SimpleValue>
  1150.                         </PropertyDesc>
  1151.                         <PropertyDesc idRef="31" propType="simple">
  1152.                             <SimpleValue valType="int">135168</SimpleValue>
  1153.                         </PropertyDesc>
  1154.                         <PropertyDesc idRef="30" propType="simple">
  1155.                             <SimpleValue valType="binary">0D00000000000000000000000000000046545020506F7274206F70656E</SimpleValue>
  1156.                         </PropertyDesc>
  1157.                     </PropertyDescList>
  1158.                 </Rule>
  1159.                 <Rule guid="{9B54BDA0-7E98-4AA1-8818-F2F607752BDD}">
  1160.                     <ObjDescRef guidRef="{EB0B722F-DFDB-42F7-A26E-597F5A9E136E}"/>
  1161.                     <AccessDescList>
  1162.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1163.                     </AccessDescList>
  1164.                     <PropertyDescList>
  1165.                         <PropertyDesc idRef="20" propType="simple">
  1166.                             <SimpleValue valType="int">636</SimpleValue>
  1167.                         </PropertyDesc>
  1168.                         <PropertyDesc idRef="5" propType="objRef">
  1169.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1170.                         </PropertyDesc>
  1171.                         <PropertyDesc idRef="21" propType="simple">
  1172.                             <SimpleValue valType="str">BACKDOOR NetMetro File List</SimpleValue>
  1173.                         </PropertyDesc>
  1174.                         <PropertyDesc idRef="31" propType="simple">
  1175.                             <SimpleValue valType="int">135168</SimpleValue>
  1176.                         </PropertyDesc>
  1177.                         <PropertyDesc idRef="30" propType="simple">
  1178.                             <SimpleValue valType="binary">020000000000000000000000000000002D2D</SimpleValue>
  1179.                         </PropertyDesc>
  1180.                     </PropertyDescList>
  1181.                 </Rule>
  1182.                 <Rule guid="{F87BEC54-46C1-4D8C-82A8-4E08AF02728F}">
  1183.                     <ObjDescRef guidRef="{CC05929D-EA41-46DB-803F-0F2B6C9C4835}"/>
  1184.                     <AccessDescList>
  1185.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1186.                     </AccessDescList>
  1187.                     <PropertyDescList>
  1188.                         <PropertyDesc idRef="20" propType="simple">
  1189.                             <SimpleValue valType="int">644</SimpleValue>
  1190.                         </PropertyDesc>
  1191.                         <PropertyDesc idRef="5" propType="objRef">
  1192.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1193.                         </PropertyDesc>
  1194.                         <PropertyDesc idRef="21" propType="simple">
  1195.                             <SimpleValue valType="str">BACKDOOR Matrix 2.0 Client connect</SimpleValue>
  1196.                         </PropertyDesc>
  1197.                         <PropertyDesc idRef="30" propType="simple">
  1198.                             <SimpleValue valType="binary">080000000000000000000000000000006163746976617465</SimpleValue>
  1199.                         </PropertyDesc>
  1200.                     </PropertyDescList>
  1201.                 </Rule>
  1202.                 <Rule guid="{34F4907A-8A3F-4DA4-844B-427CF72D5AEE}">
  1203.                     <ObjDescRef guidRef="{1A303644-0F26-4FC4-A7EF-8B8274BF5410}"/>
  1204.                     <AccessDescList>
  1205.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1206.                     </AccessDescList>
  1207.                     <PropertyDescList>
  1208.                         <PropertyDesc idRef="20" propType="simple">
  1209.                             <SimpleValue valType="int">648</SimpleValue>
  1210.                         </PropertyDesc>
  1211.                         <PropertyDesc idRef="5" propType="objRef">
  1212.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1213.                         </PropertyDesc>
  1214.                         <PropertyDesc idRef="21" propType="simple">
  1215.                             <SimpleValue valType="str">BACKDOOR Matrix 2.0 Server access</SimpleValue>
  1216.                         </PropertyDesc>
  1217.                         <PropertyDesc idRef="30" propType="simple">
  1218.                             <SimpleValue valType="binary">090000000000000000000000000000006C6F6767656420696E</SimpleValue>
  1219.                         </PropertyDesc>
  1220.                     </PropertyDescList>
  1221.                 </Rule>
  1222.                 <Rule guid="{AE940825-09D1-41A7-B69E-88A97D0AFA34}">
  1223.                     <ObjDescRef guidRef="{759A543D-3D4B-4538-991F-D7C3EC8D5F01}"/>
  1224.                     <AccessDescList>
  1225.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1226.                     </AccessDescList>
  1227.                     <PropertyDescList>
  1228.                         <PropertyDesc idRef="20" propType="simple">
  1229.                             <SimpleValue valType="int">652</SimpleValue>
  1230.                         </PropertyDesc>
  1231.                         <PropertyDesc idRef="5" propType="objRef">
  1232.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1233.                         </PropertyDesc>
  1234.                         <PropertyDesc idRef="21" propType="simple">
  1235.                             <SimpleValue valType="str">BACKDOOR WinCrash 1.0 Server Active</SimpleValue>
  1236.                         </PropertyDesc>
  1237.                         <PropertyDesc idRef="31" propType="simple">
  1238.                             <SimpleValue valType="int">4608</SimpleValue>
  1239.                         </PropertyDesc>
  1240.                         <PropertyDesc idRef="30" propType="simple">
  1241.                             <SimpleValue valType="binary">02000000000000000000000000000000B4B4</SimpleValue>
  1242.                         </PropertyDesc>
  1243.                     </PropertyDescList>
  1244.                 </Rule>
  1245.                 <Rule guid="{9560ED4E-2CA9-4C76-A748-9F16630FA075}">
  1246.                     <ObjDescRef guidRef="{734C6B61-5737-4FA7-8E0E-E276C9430836}"/>
  1247.                     <AccessDescList>
  1248.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1249.                     </AccessDescList>
  1250.                     <PropertyDescList>
  1251.                         <PropertyDesc idRef="20" propType="simple">
  1252.                             <SimpleValue valType="int">656</SimpleValue>
  1253.                         </PropertyDesc>
  1254.                         <PropertyDesc idRef="5" propType="objRef">
  1255.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1256.                         </PropertyDesc>
  1257.                         <PropertyDesc idRef="21" propType="simple">
  1258.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Active on Network</SimpleValue>
  1259.                         </PropertyDesc>
  1260.                     </PropertyDescList>
  1261.                 </Rule>
  1262.                 <Rule guid="{2590A5EC-7F73-43F0-BA2C-07B0B277F45B}">
  1263.                     <ObjDescRef guidRef="{33569E41-3741-40D9-BB8E-54FCE7B2E37D}"/>
  1264.                     <AccessDescList>
  1265.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1266.                     </AccessDescList>
  1267.                     <PropertyDescList>
  1268.                         <PropertyDesc idRef="20" propType="simple">
  1269.                             <SimpleValue valType="int">660</SimpleValue>
  1270.                         </PropertyDesc>
  1271.                         <PropertyDesc idRef="5" propType="objRef">
  1272.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1273.                         </PropertyDesc>
  1274.                         <PropertyDesc idRef="21" propType="simple">
  1275.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Keylogger on Server ON</SimpleValue>
  1276.                         </PropertyDesc>
  1277.                         <PropertyDesc idRef="30" propType="simple">
  1278.                             <SimpleValue valType="binary">1C0000000000000000000000000000004B65794C6F6767657220497320456E61626C6564204F6E20706F7274</SimpleValue>
  1279.                         </PropertyDesc>
  1280.                     </PropertyDescList>
  1281.                 </Rule>
  1282.                 <Rule guid="{BF30852D-4424-4846-8DD5-0CA422F6D44F}">
  1283.                     <ObjDescRef guidRef="{13C50ACA-F2BA-43D4-BCD3-D963C71C4603}"/>
  1284.                     <AccessDescList>
  1285.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1286.                     </AccessDescList>
  1287.                     <PropertyDescList>
  1288.                         <PropertyDesc idRef="20" propType="simple">
  1289.                             <SimpleValue valType="int">664</SimpleValue>
  1290.                         </PropertyDesc>
  1291.                         <PropertyDesc idRef="5" propType="objRef">
  1292.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1293.                         </PropertyDesc>
  1294.                         <PropertyDesc idRef="21" propType="simple">
  1295.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Show Picture Client Request</SimpleValue>
  1296.                         </PropertyDesc>
  1297.                         <PropertyDesc idRef="30" propType="simple">
  1298.                             <SimpleValue valType="binary">020000000000000000000000000000003232</SimpleValue>
  1299.                         </PropertyDesc>
  1300.                     </PropertyDescList>
  1301.                 </Rule>
  1302.                 <Rule guid="{C382C15B-91BF-4706-8098-7FC655ECC423}">
  1303.                     <ObjDescRef guidRef="{4BF19385-E366-48D8-826A-3B02F938C9C8}"/>
  1304.                     <AccessDescList>
  1305.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1306.                     </AccessDescList>
  1307.                     <PropertyDescList>
  1308.                         <PropertyDesc idRef="20" propType="simple">
  1309.                             <SimpleValue valType="int">668</SimpleValue>
  1310.                         </PropertyDesc>
  1311.                         <PropertyDesc idRef="5" propType="objRef">
  1312.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1313.                         </PropertyDesc>
  1314.                         <PropertyDesc idRef="21" propType="simple">
  1315.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide/Show Clock Client Request</SimpleValue>
  1316.                         </PropertyDesc>
  1317.                         <PropertyDesc idRef="30" propType="simple">
  1318.                             <SimpleValue valType="binary">020000000000000000000000000000003332</SimpleValue>
  1319.                         </PropertyDesc>
  1320.                     </PropertyDescList>
  1321.                 </Rule>
  1322.                 <Rule guid="{0D4D52A5-A66A-49EC-91FC-6FF47AEFA6AF}">
  1323.                     <ObjDescRef guidRef="{90AD0B2E-E54B-403D-AD54-4214D65850F1}"/>
  1324.                     <AccessDescList>
  1325.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1326.                     </AccessDescList>
  1327.                     <PropertyDescList>
  1328.                         <PropertyDesc idRef="20" propType="simple">
  1329.                             <SimpleValue valType="int">672</SimpleValue>
  1330.                         </PropertyDesc>
  1331.                         <PropertyDesc idRef="5" propType="objRef">
  1332.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1333.                         </PropertyDesc>
  1334.                         <PropertyDesc idRef="21" propType="simple">
  1335.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide/Show Desktop Client Request</SimpleValue>
  1336.                         </PropertyDesc>
  1337.                         <PropertyDesc idRef="30" propType="simple">
  1338.                             <SimpleValue valType="binary">020000000000000000000000000000003333</SimpleValue>
  1339.                         </PropertyDesc>
  1340.                     </PropertyDescList>
  1341.                 </Rule>
  1342.                 <Rule guid="{B5CD43AC-B1CE-4C31-B09D-FDC22461836B}">
  1343.                     <ObjDescRef guidRef="{8A808BB0-DAD6-4D24-AFC6-AB6FF65EC054}"/>
  1344.                     <AccessDescList>
  1345.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1346.                     </AccessDescList>
  1347.                     <PropertyDescList>
  1348.                         <PropertyDesc idRef="20" propType="simple">
  1349.                             <SimpleValue valType="int">676</SimpleValue>
  1350.                         </PropertyDesc>
  1351.                         <PropertyDesc idRef="5" propType="objRef">
  1352.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1353.                         </PropertyDesc>
  1354.                         <PropertyDesc idRef="21" propType="simple">
  1355.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Swap Mouse Buttons Client Request</SimpleValue>
  1356.                         </PropertyDesc>
  1357.                         <PropertyDesc idRef="30" propType="simple">
  1358.                             <SimpleValue valType="binary">020000000000000000000000000000003334</SimpleValue>
  1359.                         </PropertyDesc>
  1360.                     </PropertyDescList>
  1361.                 </Rule>
  1362.                 <Rule guid="{14CBA141-DD7C-4A4C-B64B-AACD2EC4B0B5}">
  1363.                     <ObjDescRef guidRef="{6BD6A8D0-19BE-4CF1-BDB7-3ACAC15701EC}"/>
  1364.                     <AccessDescList>
  1365.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1366.                     </AccessDescList>
  1367.                     <PropertyDescList>
  1368.                         <PropertyDesc idRef="20" propType="simple">
  1369.                             <SimpleValue valType="int">680</SimpleValue>
  1370.                         </PropertyDesc>
  1371.                         <PropertyDesc idRef="5" propType="objRef">
  1372.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1373.                         </PropertyDesc>
  1374.                         <PropertyDesc idRef="21" propType="simple">
  1375.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Enable/Disable CTRL-ALT-DEL Client Request</SimpleValue>
  1376.                         </PropertyDesc>
  1377.                         <PropertyDesc idRef="30" propType="simple">
  1378.                             <SimpleValue valType="binary">03000000000000000000000000000000313130</SimpleValue>
  1379.                         </PropertyDesc>
  1380.                     </PropertyDescList>
  1381.                 </Rule>
  1382.                 <Rule guid="{8066D392-F86C-4B0B-8EC8-7DE2AED680D4}">
  1383.                     <ObjDescRef guidRef="{B81C2B7D-E7B9-4089-AD10-72F604A2B64F}"/>
  1384.                     <AccessDescList>
  1385.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1386.                     </AccessDescList>
  1387.                     <PropertyDescList>
  1388.                         <PropertyDesc idRef="20" propType="simple">
  1389.                             <SimpleValue valType="int">684</SimpleValue>
  1390.                         </PropertyDesc>
  1391.                         <PropertyDesc idRef="5" propType="objRef">
  1392.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1393.                         </PropertyDesc>
  1394.                         <PropertyDesc idRef="21" propType="simple">
  1395.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Freeze Mouse Client Request</SimpleValue>
  1396.                         </PropertyDesc>
  1397.                         <PropertyDesc idRef="30" propType="simple">
  1398.                             <SimpleValue valType="binary">020000000000000000000000000000003335</SimpleValue>
  1399.                         </PropertyDesc>
  1400.                     </PropertyDescList>
  1401.                 </Rule>
  1402.                 <Rule guid="{39E83D97-A925-48EA-825E-C1DD0BFF4285}">
  1403.                     <ObjDescRef guidRef="{DE8159FE-997E-4090-A2C5-D26275BB02C7}"/>
  1404.                     <AccessDescList>
  1405.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1406.                     </AccessDescList>
  1407.                     <PropertyDescList>
  1408.                         <PropertyDesc idRef="20" propType="simple">
  1409.                             <SimpleValue valType="int">688</SimpleValue>
  1410.                         </PropertyDesc>
  1411.                         <PropertyDesc idRef="5" propType="objRef">
  1412.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1413.                         </PropertyDesc>
  1414.                         <PropertyDesc idRef="21" propType="simple">
  1415.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Show Dialog Box Client Request</SimpleValue>
  1416.                         </PropertyDesc>
  1417.                         <PropertyDesc idRef="30" propType="simple">
  1418.                             <SimpleValue valType="binary">020000000000000000000000000000003730</SimpleValue>
  1419.                         </PropertyDesc>
  1420.                     </PropertyDescList>
  1421.                 </Rule>
  1422.                 <Rule guid="{251E5E75-F2E1-49D8-967B-96522680D9C7}">
  1423.                     <ObjDescRef guidRef="{2BAE1F6B-A326-4FDF-8B2F-B2A5A45FC917}"/>
  1424.                     <AccessDescList>
  1425.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1426.                     </AccessDescList>
  1427.                     <PropertyDescList>
  1428.                         <PropertyDesc idRef="20" propType="simple">
  1429.                             <SimpleValue valType="int">692</SimpleValue>
  1430.                         </PropertyDesc>
  1431.                         <PropertyDesc idRef="5" propType="objRef">
  1432.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1433.                         </PropertyDesc>
  1434.                         <PropertyDesc idRef="21" propType="simple">
  1435.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Show Replyable Dialog Box Client Request</SimpleValue>
  1436.                         </PropertyDesc>
  1437.                         <PropertyDesc idRef="30" propType="simple">
  1438.                             <SimpleValue valType="binary">020000000000000000000000000000003731</SimpleValue>
  1439.                         </PropertyDesc>
  1440.                     </PropertyDescList>
  1441.                 </Rule>
  1442.                 <Rule guid="{7CC6EDDA-B26A-44C5-AB2A-9DC6D73ECDB1}">
  1443.                     <ObjDescRef guidRef="{B64403F4-6FFF-4511-92B5-1D613E8E5CB3}"/>
  1444.                     <AccessDescList>
  1445.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1446.                     </AccessDescList>
  1447.                     <PropertyDescList>
  1448.                         <PropertyDesc idRef="20" propType="simple">
  1449.                             <SimpleValue valType="int">696</SimpleValue>
  1450.                         </PropertyDesc>
  1451.                         <PropertyDesc idRef="5" propType="objRef">
  1452.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1453.                         </PropertyDesc>
  1454.                         <PropertyDesc idRef="21" propType="simple">
  1455.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request</SimpleValue>
  1456.                         </PropertyDesc>
  1457.                         <PropertyDesc idRef="30" propType="simple">
  1458.                             <SimpleValue valType="binary">020000000000000000000000000000003331</SimpleValue>
  1459.                         </PropertyDesc>
  1460.                     </PropertyDescList>
  1461.                 </Rule>
  1462.                 <Rule guid="{9C456A8E-7331-4AF2-94FE-820F09C7FAD1}">
  1463.                     <ObjDescRef guidRef="{005B3FFF-6823-42CB-B288-3E8D72E73E1B}"/>
  1464.                     <AccessDescList>
  1465.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1466.                     </AccessDescList>
  1467.                     <PropertyDescList>
  1468.                         <PropertyDesc idRef="20" propType="simple">
  1469.                             <SimpleValue valType="int">700</SimpleValue>
  1470.                         </PropertyDesc>
  1471.                         <PropertyDesc idRef="5" propType="objRef">
  1472.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1473.                         </PropertyDesc>
  1474.                         <PropertyDesc idRef="21" propType="simple">
  1475.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Resolution Change Client Request</SimpleValue>
  1476.                         </PropertyDesc>
  1477.                         <PropertyDesc idRef="30" propType="simple">
  1478.                             <SimpleValue valType="binary">03000000000000000000000000000000313235</SimpleValue>
  1479.                         </PropertyDesc>
  1480.                     </PropertyDescList>
  1481.                 </Rule>
  1482.                 <Rule guid="{DCDE90A5-C89C-4EB5-A17A-59FFB6DF57B2}">
  1483.                     <ObjDescRef guidRef="{3DBF5DBA-7DB7-4791-ABA8-53C7A5C2E4F3}"/>
  1484.                     <AccessDescList>
  1485.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1486.                     </AccessDescList>
  1487.                     <PropertyDescList>
  1488.                         <PropertyDesc idRef="20" propType="simple">
  1489.                             <SimpleValue valType="int">704</SimpleValue>
  1490.                         </PropertyDesc>
  1491.                         <PropertyDesc idRef="5" propType="objRef">
  1492.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1493.                         </PropertyDesc>
  1494.                         <PropertyDesc idRef="21" propType="simple">
  1495.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request</SimpleValue>
  1496.                         </PropertyDesc>
  1497.                         <PropertyDesc idRef="30" propType="simple">
  1498.                             <SimpleValue valType="binary">020000000000000000000000000000003034</SimpleValue>
  1499.                         </PropertyDesc>
  1500.                     </PropertyDescList>
  1501.                 </Rule>
  1502.                 <Rule guid="{0BF946D0-D5C3-4F4C-89D6-4AD0A7065FAA}">
  1503.                     <ObjDescRef guidRef="{6866C6F3-2DA9-4664-B1AB-36A60400A582}"/>
  1504.                     <AccessDescList>
  1505.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1506.                     </AccessDescList>
  1507.                     <PropertyDescList>
  1508.                         <PropertyDesc idRef="20" propType="simple">
  1509.                             <SimpleValue valType="int">708</SimpleValue>
  1510.                         </PropertyDesc>
  1511.                         <PropertyDesc idRef="5" propType="objRef">
  1512.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1513.                         </PropertyDesc>
  1514.                         <PropertyDesc idRef="21" propType="simple">
  1515.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Keylogger on Server OFF</SimpleValue>
  1516.                         </PropertyDesc>
  1517.                         <PropertyDesc idRef="30" propType="simple">
  1518.                             <SimpleValue valType="binary">130000000000000000000000000000004B65794C6F67676572205368757420446F776E</SimpleValue>
  1519.                         </PropertyDesc>
  1520.                     </PropertyDescList>
  1521.                 </Rule>
  1522.                 <Rule guid="{A602713E-92EF-4B41-B973-430259A0871F}">
  1523.                     <ObjDescRef guidRef="{C5478AB3-74ED-4CFA-A541-6783706A12AD}"/>
  1524.                     <AccessDescList>
  1525.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1526.                     </AccessDescList>
  1527.                     <PropertyDescList>
  1528.                         <PropertyDesc idRef="20" propType="simple">
  1529.                             <SimpleValue valType="int">716</SimpleValue>
  1530.                         </PropertyDesc>
  1531.                         <PropertyDesc idRef="5" propType="objRef">
  1532.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1533.                         </PropertyDesc>
  1534.                         <PropertyDesc idRef="21" propType="simple">
  1535.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 FTP Server Port Client Request</SimpleValue>
  1536.                         </PropertyDesc>
  1537.                         <PropertyDesc idRef="30" propType="simple">
  1538.                             <SimpleValue valType="binary">020000000000000000000000000000003231</SimpleValue>
  1539.                         </PropertyDesc>
  1540.                     </PropertyDescList>
  1541.                 </Rule>
  1542.                 <Rule guid="{A23B4C54-38DD-4C74-88C3-2AC1702C46EE}">
  1543.                     <ObjDescRef guidRef="{309BD4BD-3B96-48BA-8928-C2B6C6A556E7}"/>
  1544.                     <AccessDescList>
  1545.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1546.                     </AccessDescList>
  1547.                     <PropertyDescList>
  1548.                         <PropertyDesc idRef="20" propType="simple">
  1549.                             <SimpleValue valType="int">720</SimpleValue>
  1550.                         </PropertyDesc>
  1551.                         <PropertyDesc idRef="5" propType="objRef">
  1552.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1553.                         </PropertyDesc>
  1554.                         <PropertyDesc idRef="21" propType="simple">
  1555.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Process List Client request</SimpleValue>
  1556.                         </PropertyDesc>
  1557.                         <PropertyDesc idRef="30" propType="simple">
  1558.                             <SimpleValue valType="binary">020000000000000000000000000000003634</SimpleValue>
  1559.                         </PropertyDesc>
  1560.                     </PropertyDescList>
  1561.                 </Rule>
  1562.                 <Rule guid="{03D6847C-380E-44CC-865B-001710710828}">
  1563.                     <ObjDescRef guidRef="{1A4DC551-2763-4A93-A497-F48018B48884}"/>
  1564.                     <AccessDescList>
  1565.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1566.                     </AccessDescList>
  1567.                     <PropertyDescList>
  1568.                         <PropertyDesc idRef="20" propType="simple">
  1569.                             <SimpleValue valType="int">724</SimpleValue>
  1570.                         </PropertyDesc>
  1571.                         <PropertyDesc idRef="5" propType="objRef">
  1572.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1573.                         </PropertyDesc>
  1574.                         <PropertyDesc idRef="21" propType="simple">
  1575.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Close Port Scan Client Request</SimpleValue>
  1576.                         </PropertyDesc>
  1577.                         <PropertyDesc idRef="30" propType="simple">
  1578.                             <SimpleValue valType="binary">03000000000000000000000000000000313231</SimpleValue>
  1579.                         </PropertyDesc>
  1580.                     </PropertyDescList>
  1581.                 </Rule>
  1582.                 <Rule guid="{E810AD4F-4DD7-4755-B2A1-998F63A703BD}">
  1583.                     <ObjDescRef guidRef="{42403BC4-AF88-4202-A900-DF1D43E30E1E}"/>
  1584.                     <AccessDescList>
  1585.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1586.                     </AccessDescList>
  1587.                     <PropertyDescList>
  1588.                         <PropertyDesc idRef="20" propType="simple">
  1589.                             <SimpleValue valType="int">728</SimpleValue>
  1590.                         </PropertyDesc>
  1591.                         <PropertyDesc idRef="5" propType="objRef">
  1592.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1593.                         </PropertyDesc>
  1594.                         <PropertyDesc idRef="21" propType="simple">
  1595.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Registry Add Client Request</SimpleValue>
  1596.                         </PropertyDesc>
  1597.                         <PropertyDesc idRef="30" propType="simple">
  1598.                             <SimpleValue valType="binary">020000000000000000000000000000003839</SimpleValue>
  1599.                         </PropertyDesc>
  1600.                     </PropertyDescList>
  1601.                 </Rule>
  1602.                 <Rule guid="{BB3E6B98-4842-43B5-88D3-F675BED95C2C}">
  1603.                     <ObjDescRef guidRef="{D12DB65B-62F0-4208-A9D5-84AE89EA34D1}"/>
  1604.                     <AccessDescList>
  1605.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1606.                     </AccessDescList>
  1607.                     <PropertyDescList>
  1608.                         <PropertyDesc idRef="20" propType="simple">
  1609.                             <SimpleValue valType="int">732</SimpleValue>
  1610.                         </PropertyDesc>
  1611.                         <PropertyDesc idRef="5" propType="objRef">
  1612.                             <ObjDescRef guidRef="{D3735705-E615-462F-835C-99B5183D179E}"/>
  1613.                         </PropertyDesc>
  1614.                         <PropertyDesc idRef="21" propType="simple">
  1615.                             <SimpleValue valType="str">BACKDOOR SIGNATURE - Q ICMP</SimpleValue>
  1616.                         </PropertyDesc>
  1617.                         <PropertyDesc idRef="29" propType="simple">
  1618.                             <SimpleValue valType="int" valRelation="&gt;">1</SimpleValue>
  1619.                         </PropertyDesc>
  1620.                     </PropertyDescList>
  1621.                 </Rule>
  1622.                 <Rule guid="{FE8BFB20-69F5-41DF-A6EF-F95F0E280A77}">
  1623.                     <ObjDescRef guidRef="{D74E8A8F-D74E-4CA9-ADAA-B2497DEBC70C}"/>
  1624.                     <AccessDescList>
  1625.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1626.                     </AccessDescList>
  1627.                     <PropertyDescList>
  1628.                         <PropertyDesc idRef="20" propType="simple">
  1629.                             <SimpleValue valType="int">736</SimpleValue>
  1630.                         </PropertyDesc>
  1631.                         <PropertyDesc idRef="5" propType="objRef">
  1632.                             <ObjDescRef guidRef="{D3735705-E615-462F-835C-99B5183D179E}"/>
  1633.                         </PropertyDesc>
  1634.                         <PropertyDesc idRef="21" propType="simple">
  1635.                             <SimpleValue valType="str">BACKDOOR Q access</SimpleValue>
  1636.                         </PropertyDesc>
  1637.                         <PropertyDesc idRef="31" propType="simple">
  1638.                             <SimpleValue valType="int">135168</SimpleValue>
  1639.                         </PropertyDesc>
  1640.                         <PropertyDesc idRef="29" propType="simple">
  1641.                             <SimpleValue valType="int" valRelation="&gt;">1</SimpleValue>
  1642.                         </PropertyDesc>
  1643.                     </PropertyDescList>
  1644.                 </Rule>
  1645.                 <Rule guid="{7B9498A8-E234-4954-9800-48DBD4ED6967}">
  1646.                     <ObjDescRef guidRef="{1963BF60-A26F-494B-8ECF-ED6025FBD37D}"/>
  1647.                     <AccessDescList>
  1648.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1649.                     </AccessDescList>
  1650.                     <PropertyDescList>
  1651.                         <PropertyDesc idRef="20" propType="simple">
  1652.                             <SimpleValue valType="int">740</SimpleValue>
  1653.                         </PropertyDesc>
  1654.                         <PropertyDesc idRef="5" propType="objRef">
  1655.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1656.                         </PropertyDesc>
  1657.                         <PropertyDesc idRef="21" propType="simple">
  1658.                             <SimpleValue valType="str">BACKDOOR CDK</SimpleValue>
  1659.                         </PropertyDesc>
  1660.                         <PropertyDesc idRef="30" propType="simple">
  1661.                             <SimpleValue valType="binary">06000000000000000F00000000000100797069306361</SimpleValue>
  1662.                         </PropertyDesc>
  1663.                         <PropertyDesc idRef="31" propType="simple">
  1664.                             <SimpleValue valType="int">135168</SimpleValue>
  1665.                         </PropertyDesc>
  1666.                     </PropertyDescList>
  1667.                 </Rule>
  1668.                 <Rule guid="{641AFE84-49B0-4051-9DF1-04C3037F3210}">
  1669.                     <ObjDescRef guidRef="{C559F99C-737B-4E86-B3F2-337CF8D5ECC8}"/>
  1670.                     <AccessDescList>
  1671.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1672.                     </AccessDescList>
  1673.                     <PropertyDescList>
  1674.                         <PropertyDesc idRef="20" propType="simple">
  1675.                             <SimpleValue valType="int">744</SimpleValue>
  1676.                         </PropertyDesc>
  1677.                         <PropertyDesc idRef="5" propType="objRef">
  1678.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1679.                         </PropertyDesc>
  1680.                         <PropertyDesc idRef="21" propType="simple">
  1681.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Monitor on/off Client Request</SimpleValue>
  1682.                         </PropertyDesc>
  1683.                         <PropertyDesc idRef="30" propType="simple">
  1684.                             <SimpleValue valType="binary">020000000000000000000000000000003037</SimpleValue>
  1685.                         </PropertyDesc>
  1686.                     </PropertyDescList>
  1687.                 </Rule>
  1688.                 <Rule guid="{A0D09561-AE6F-4C78-9C1B-55A5322A295A}">
  1689.                     <ObjDescRef guidRef="{A64D4464-44DC-47B7-BC74-B14F6C0CBF8E}"/>
  1690.                     <AccessDescList>
  1691.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1692.                     </AccessDescList>
  1693.                     <PropertyDescList>
  1694.                         <PropertyDesc idRef="20" propType="simple">
  1695.                             <SimpleValue valType="int">748</SimpleValue>
  1696.                         </PropertyDesc>
  1697.                         <PropertyDesc idRef="5" propType="objRef">
  1698.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1699.                         </PropertyDesc>
  1700.                         <PropertyDesc idRef="21" propType="simple">
  1701.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Delete File Client Request</SimpleValue>
  1702.                         </PropertyDesc>
  1703.                         <PropertyDesc idRef="30" propType="simple">
  1704.                             <SimpleValue valType="binary">020000000000000000000000000000003431</SimpleValue>
  1705.                         </PropertyDesc>
  1706.                     </PropertyDescList>
  1707.                 </Rule>
  1708.                 <Rule guid="{69857DC2-045F-4F5D-8151-711E4C039770}">
  1709.                     <ObjDescRef guidRef="{FC6E37D7-73C1-426A-98E2-70FA2FF8113A}"/>
  1710.                     <AccessDescList>
  1711.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1712.                     </AccessDescList>
  1713.                     <PropertyDescList>
  1714.                         <PropertyDesc idRef="20" propType="simple">
  1715.                             <SimpleValue valType="int">752</SimpleValue>
  1716.                         </PropertyDesc>
  1717.                         <PropertyDesc idRef="5" propType="objRef">
  1718.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1719.                         </PropertyDesc>
  1720.                         <PropertyDesc idRef="21" propType="simple">
  1721.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Kill Window Client Request</SimpleValue>
  1722.                         </PropertyDesc>
  1723.                         <PropertyDesc idRef="30" propType="simple">
  1724.                             <SimpleValue valType="binary">020000000000000000000000000000003338</SimpleValue>
  1725.                         </PropertyDesc>
  1726.                     </PropertyDescList>
  1727.                 </Rule>
  1728.                 <Rule guid="{A8F76BA3-28BD-4DD7-92AC-7C8BC8981606}">
  1729.                     <ObjDescRef guidRef="{5C7DCCE7-621C-402B-8CE5-513E7799B7A3}"/>
  1730.                     <AccessDescList>
  1731.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1732.                     </AccessDescList>
  1733.                     <PropertyDescList>
  1734.                         <PropertyDesc idRef="20" propType="simple">
  1735.                             <SimpleValue valType="int">756</SimpleValue>
  1736.                         </PropertyDesc>
  1737.                         <PropertyDesc idRef="5" propType="objRef">
  1738.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1739.                         </PropertyDesc>
  1740.                         <PropertyDesc idRef="21" propType="simple">
  1741.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Disable Window Client Request</SimpleValue>
  1742.                         </PropertyDesc>
  1743.                         <PropertyDesc idRef="30" propType="simple">
  1744.                             <SimpleValue valType="binary">020000000000000000000000000000003233</SimpleValue>
  1745.                         </PropertyDesc>
  1746.                     </PropertyDescList>
  1747.                 </Rule>
  1748.                 <Rule guid="{C9C63E89-4366-497B-B0AF-7F38D2163036}">
  1749.                     <ObjDescRef guidRef="{D3F074AE-3E05-40D9-99B2-5D6B82C62732}"/>
  1750.                     <AccessDescList>
  1751.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1752.                     </AccessDescList>
  1753.                     <PropertyDescList>
  1754.                         <PropertyDesc idRef="20" propType="simple">
  1755.                             <SimpleValue valType="int">760</SimpleValue>
  1756.                         </PropertyDesc>
  1757.                         <PropertyDesc idRef="5" propType="objRef">
  1758.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1759.                         </PropertyDesc>
  1760.                         <PropertyDesc idRef="21" propType="simple">
  1761.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Enable Window Client Request</SimpleValue>
  1762.                         </PropertyDesc>
  1763.                         <PropertyDesc idRef="30" propType="simple">
  1764.                             <SimpleValue valType="binary">020000000000000000000000000000003234</SimpleValue>
  1765.                         </PropertyDesc>
  1766.                     </PropertyDescList>
  1767.                 </Rule>
  1768.                 <Rule guid="{37E04A64-C827-45B5-B45F-C814EB3D5C93}">
  1769.                     <ObjDescRef guidRef="{BDDFC4C6-7101-472D-B125-208C40C21895}"/>
  1770.                     <AccessDescList>
  1771.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1772.                     </AccessDescList>
  1773.                     <PropertyDescList>
  1774.                         <PropertyDesc idRef="20" propType="simple">
  1775.                             <SimpleValue valType="int">764</SimpleValue>
  1776.                         </PropertyDesc>
  1777.                         <PropertyDesc idRef="5" propType="objRef">
  1778.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1779.                         </PropertyDesc>
  1780.                         <PropertyDesc idRef="21" propType="simple">
  1781.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Change Window Title Client Request</SimpleValue>
  1782.                         </PropertyDesc>
  1783.                         <PropertyDesc idRef="30" propType="simple">
  1784.                             <SimpleValue valType="binary">020000000000000000000000000000003630</SimpleValue>
  1785.                         </PropertyDesc>
  1786.                     </PropertyDescList>
  1787.                 </Rule>
  1788.                 <Rule guid="{FACE6810-9E2D-4CB6-8380-9EAA57836148}">
  1789.                     <ObjDescRef guidRef="{AC82B024-355A-40A7-BFC9-EEFB463E59AC}"/>
  1790.                     <AccessDescList>
  1791.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1792.                     </AccessDescList>
  1793.                     <PropertyDescList>
  1794.                         <PropertyDesc idRef="20" propType="simple">
  1795.                             <SimpleValue valType="int">768</SimpleValue>
  1796.                         </PropertyDesc>
  1797.                         <PropertyDesc idRef="5" propType="objRef">
  1798.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1799.                         </PropertyDesc>
  1800.                         <PropertyDesc idRef="21" propType="simple">
  1801.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide Window Client Request</SimpleValue>
  1802.                         </PropertyDesc>
  1803.                         <PropertyDesc idRef="30" propType="simple">
  1804.                             <SimpleValue valType="binary">020000000000000000000000000000003236</SimpleValue>
  1805.                         </PropertyDesc>
  1806.                     </PropertyDescList>
  1807.                 </Rule>
  1808.                 <Rule guid="{C7C5929F-74D6-4B19-84A1-D88BDEA1B640}">
  1809.                     <ObjDescRef guidRef="{14B1CC4D-3D85-496B-AC5A-CBBCE698C035}"/>
  1810.                     <AccessDescList>
  1811.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1812.                     </AccessDescList>
  1813.                     <PropertyDescList>
  1814.                         <PropertyDesc idRef="20" propType="simple">
  1815.                             <SimpleValue valType="int">772</SimpleValue>
  1816.                         </PropertyDesc>
  1817.                         <PropertyDesc idRef="5" propType="objRef">
  1818.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1819.                         </PropertyDesc>
  1820.                         <PropertyDesc idRef="21" propType="simple">
  1821.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Show Window Client Request</SimpleValue>
  1822.                         </PropertyDesc>
  1823.                         <PropertyDesc idRef="30" propType="simple">
  1824.                             <SimpleValue valType="binary">020000000000000000000000000000003235</SimpleValue>
  1825.                         </PropertyDesc>
  1826.                     </PropertyDescList>
  1827.                 </Rule>
  1828.                 <Rule guid="{B37E9B8B-CA99-4D67-BBC3-12DFFB468D31}">
  1829.                     <ObjDescRef guidRef="{9D90E011-68F0-48BF-99F2-90FFBF6E912A}"/>
  1830.                     <AccessDescList>
  1831.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1832.                     </AccessDescList>
  1833.                     <PropertyDescList>
  1834.                         <PropertyDesc idRef="20" propType="simple">
  1835.                             <SimpleValue valType="int">776</SimpleValue>
  1836.                         </PropertyDesc>
  1837.                         <PropertyDesc idRef="5" propType="objRef">
  1838.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1839.                         </PropertyDesc>
  1840.                         <PropertyDesc idRef="21" propType="simple">
  1841.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Send Text to Window Client Request</SimpleValue>
  1842.                         </PropertyDesc>
  1843.                         <PropertyDesc idRef="30" propType="simple">
  1844.                             <SimpleValue valType="binary">020000000000000000000000000000003633</SimpleValue>
  1845.                         </PropertyDesc>
  1846.                     </PropertyDescList>
  1847.                 </Rule>
  1848.                 <Rule guid="{B45C0BCC-6E9D-4E2F-9EE9-E13448D7D6FB}">
  1849.                     <ObjDescRef guidRef="{7ABADE76-35F1-433F-8B5C-7474805033A1}"/>
  1850.                     <AccessDescList>
  1851.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1852.                     </AccessDescList>
  1853.                     <PropertyDescList>
  1854.                         <PropertyDesc idRef="20" propType="simple">
  1855.                             <SimpleValue valType="int">780</SimpleValue>
  1856.                         </PropertyDesc>
  1857.                         <PropertyDesc idRef="5" propType="objRef">
  1858.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1859.                         </PropertyDesc>
  1860.                         <PropertyDesc idRef="21" propType="simple">
  1861.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Server Response</SimpleValue>
  1862.                         </PropertyDesc>
  1863.                         <PropertyDesc idRef="30" propType="simple">
  1864.                             <SimpleValue valType="binary">160000000000000000000000000000004168686868204D79204D6F757468204973204F70656E</SimpleValue>
  1865.                         </PropertyDesc>
  1866.                     </PropertyDescList>
  1867.                 </Rule>
  1868.                 <Rule guid="{A28B309E-7A63-4186-A626-80B0665139AB}">
  1869.                     <ObjDescRef guidRef="{D0B1E1C9-C8A5-4EEF-9B44-FCEB780BD1DF}"/>
  1870.                     <AccessDescList>
  1871.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1872.                     </AccessDescList>
  1873.                     <PropertyDescList>
  1874.                         <PropertyDesc idRef="20" propType="simple">
  1875.                             <SimpleValue valType="int">784</SimpleValue>
  1876.                         </PropertyDesc>
  1877.                         <PropertyDesc idRef="5" propType="objRef">
  1878.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1879.                         </PropertyDesc>
  1880.                         <PropertyDesc idRef="21" propType="simple">
  1881.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Hide/Show Systray Client Request</SimpleValue>
  1882.                         </PropertyDesc>
  1883.                         <PropertyDesc idRef="30" propType="simple">
  1884.                             <SimpleValue valType="binary">020000000000000000000000000000003330</SimpleValue>
  1885.                         </PropertyDesc>
  1886.                     </PropertyDescList>
  1887.                 </Rule>
  1888.                 <Rule guid="{D72A64E7-9EF9-4E31-AB3B-737DBBE7A9AC}">
  1889.                     <ObjDescRef guidRef="{9E250E48-8A84-4218-8D56-D8F514CCCD1D}"/>
  1890.                     <AccessDescList>
  1891.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1892.                     </AccessDescList>
  1893.                     <PropertyDescList>
  1894.                         <PropertyDesc idRef="20" propType="simple">
  1895.                             <SimpleValue valType="int">788</SimpleValue>
  1896.                         </PropertyDesc>
  1897.                         <PropertyDesc idRef="5" propType="objRef">
  1898.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1899.                         </PropertyDesc>
  1900.                         <PropertyDesc idRef="21" propType="simple">
  1901.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Create Directory Client Request</SimpleValue>
  1902.                         </PropertyDesc>
  1903.                         <PropertyDesc idRef="30" propType="simple">
  1904.                             <SimpleValue valType="binary">020000000000000000000000000000003339</SimpleValue>
  1905.                         </PropertyDesc>
  1906.                     </PropertyDescList>
  1907.                 </Rule>
  1908.                 <Rule guid="{12AEF703-13E0-4CDC-AD86-3B9D5C4000AF}">
  1909.                     <ObjDescRef guidRef="{A7F64028-9AB2-4D6E-96CB-41D76625503E}"/>
  1910.                     <AccessDescList>
  1911.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1912.                     </AccessDescList>
  1913.                     <PropertyDescList>
  1914.                         <PropertyDesc idRef="20" propType="simple">
  1915.                             <SimpleValue valType="int">792</SimpleValue>
  1916.                         </PropertyDesc>
  1917.                         <PropertyDesc idRef="5" propType="objRef">
  1918.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1919.                         </PropertyDesc>
  1920.                         <PropertyDesc idRef="21" propType="simple">
  1921.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 All Window List Client Request</SimpleValue>
  1922.                         </PropertyDesc>
  1923.                         <PropertyDesc idRef="30" propType="simple">
  1924.                             <SimpleValue valType="binary">03000000000000000000000000000000333730</SimpleValue>
  1925.                         </PropertyDesc>
  1926.                     </PropertyDescList>
  1927.                 </Rule>
  1928.                 <Rule guid="{1B44DA78-24C7-4A48-95F8-F925AEDD9C76}">
  1929.                     <ObjDescRef guidRef="{FB273358-9D25-4EFE-93B1-5757C8DC2801}"/>
  1930.                     <AccessDescList>
  1931.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1932.                     </AccessDescList>
  1933.                     <PropertyDescList>
  1934.                         <PropertyDesc idRef="20" propType="simple">
  1935.                             <SimpleValue valType="int">796</SimpleValue>
  1936.                         </PropertyDesc>
  1937.                         <PropertyDesc idRef="5" propType="objRef">
  1938.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1939.                         </PropertyDesc>
  1940.                         <PropertyDesc idRef="21" propType="simple">
  1941.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Play Sound Client Request</SimpleValue>
  1942.                         </PropertyDesc>
  1943.                         <PropertyDesc idRef="30" propType="simple">
  1944.                             <SimpleValue valType="binary">020000000000000000000000000000003336</SimpleValue>
  1945.                         </PropertyDesc>
  1946.                     </PropertyDescList>
  1947.                 </Rule>
  1948.                 <Rule guid="{DF78E509-FAA2-4E17-B21E-EAD60A91237C}">
  1949.                     <ObjDescRef guidRef="{E9AC93CA-9365-4B69-8772-0511F7E82356}"/>
  1950.                     <AccessDescList>
  1951.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1952.                     </AccessDescList>
  1953.                     <PropertyDescList>
  1954.                         <PropertyDesc idRef="20" propType="simple">
  1955.                             <SimpleValue valType="int">800</SimpleValue>
  1956.                         </PropertyDesc>
  1957.                         <PropertyDesc idRef="5" propType="objRef">
  1958.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1959.                         </PropertyDesc>
  1960.                         <PropertyDesc idRef="21" propType="simple">
  1961.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Run Program Normal Client Request</SimpleValue>
  1962.                         </PropertyDesc>
  1963.                         <PropertyDesc idRef="30" propType="simple">
  1964.                             <SimpleValue valType="binary">020000000000000000000000000000003134</SimpleValue>
  1965.                         </PropertyDesc>
  1966.                     </PropertyDescList>
  1967.                 </Rule>
  1968.                 <Rule guid="{67E3A468-FBD2-4DDC-A956-B85896DF0769}">
  1969.                     <ObjDescRef guidRef="{2151F833-39CE-4F88-BDCB-7374CCF2472E}"/>
  1970.                     <AccessDescList>
  1971.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1972.                     </AccessDescList>
  1973.                     <PropertyDescList>
  1974.                         <PropertyDesc idRef="20" propType="simple">
  1975.                             <SimpleValue valType="int">804</SimpleValue>
  1976.                         </PropertyDesc>
  1977.                         <PropertyDesc idRef="5" propType="objRef">
  1978.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1979.                         </PropertyDesc>
  1980.                         <PropertyDesc idRef="21" propType="simple">
  1981.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Run Program Hidden Client Request</SimpleValue>
  1982.                         </PropertyDesc>
  1983.                         <PropertyDesc idRef="30" propType="simple">
  1984.                             <SimpleValue valType="binary">020000000000000000000000000000003135</SimpleValue>
  1985.                         </PropertyDesc>
  1986.                     </PropertyDescList>
  1987.                 </Rule>
  1988.                 <Rule guid="{C530EAFA-1D01-4067-A439-F16B52E9E19C}">
  1989.                     <ObjDescRef guidRef="{A71DBCA8-04C2-493E-98AD-CD6497DA1091}"/>
  1990.                     <AccessDescList>
  1991.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  1992.                     </AccessDescList>
  1993.                     <PropertyDescList>
  1994.                         <PropertyDesc idRef="20" propType="simple">
  1995.                             <SimpleValue valType="int">808</SimpleValue>
  1996.                         </PropertyDesc>
  1997.                         <PropertyDesc idRef="5" propType="objRef">
  1998.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  1999.                         </PropertyDesc>
  2000.                         <PropertyDesc idRef="21" propType="simple">
  2001.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Get NET File Client Request</SimpleValue>
  2002.                         </PropertyDesc>
  2003.                         <PropertyDesc idRef="30" propType="simple">
  2004.                             <SimpleValue valType="binary">03000000000000000000000000000000313030</SimpleValue>
  2005.                         </PropertyDesc>
  2006.                     </PropertyDescList>
  2007.                 </Rule>
  2008.                 <Rule guid="{22ACE30B-F0E6-43A2-9B3B-171CCE4EE217}">
  2009.                     <ObjDescRef guidRef="{C6A24EBF-3744-40BD-B388-7620C10F10BE}"/>
  2010.                     <AccessDescList>
  2011.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2012.                     </AccessDescList>
  2013.                     <PropertyDescList>
  2014.                         <PropertyDesc idRef="20" propType="simple">
  2015.                             <SimpleValue valType="int">812</SimpleValue>
  2016.                         </PropertyDesc>
  2017.                         <PropertyDesc idRef="5" propType="objRef">
  2018.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2019.                         </PropertyDesc>
  2020.                         <PropertyDesc idRef="21" propType="simple">
  2021.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Find File Client Request</SimpleValue>
  2022.                         </PropertyDesc>
  2023.                         <PropertyDesc idRef="30" propType="simple">
  2024.                             <SimpleValue valType="binary">03000000000000000000000000000000313137</SimpleValue>
  2025.                         </PropertyDesc>
  2026.                     </PropertyDescList>
  2027.                 </Rule>
  2028.                 <Rule guid="{592B8390-3AB8-4BBD-88F5-789D2566D4CC}">
  2029.                     <ObjDescRef guidRef="{892C14EC-03BD-4764-983E-E8B9894197A9}"/>
  2030.                     <AccessDescList>
  2031.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2032.                     </AccessDescList>
  2033.                     <PropertyDescList>
  2034.                         <PropertyDesc idRef="20" propType="simple">
  2035.                             <SimpleValue valType="int">816</SimpleValue>
  2036.                         </PropertyDesc>
  2037.                         <PropertyDesc idRef="5" propType="objRef">
  2038.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2039.                         </PropertyDesc>
  2040.                         <PropertyDesc idRef="21" propType="simple">
  2041.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 Find File Client Request</SimpleValue>
  2042.                         </PropertyDesc>
  2043.                         <PropertyDesc idRef="30" propType="simple">
  2044.                             <SimpleValue valType="binary">03000000000000000000000000000000313138</SimpleValue>
  2045.                         </PropertyDesc>
  2046.                     </PropertyDescList>
  2047.                 </Rule>
  2048.                 <Rule guid="{5604DE66-D33B-4F1E-A8CC-80287C47FACB}">
  2049.                     <ObjDescRef guidRef="{42EE0EA0-78A5-4F29-9880-19899BCF1F06}"/>
  2050.                     <AccessDescList>
  2051.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2052.                     </AccessDescList>
  2053.                     <PropertyDescList>
  2054.                         <PropertyDesc idRef="20" propType="simple">
  2055.                             <SimpleValue valType="int">820</SimpleValue>
  2056.                         </PropertyDesc>
  2057.                         <PropertyDesc idRef="5" propType="objRef">
  2058.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2059.                         </PropertyDesc>
  2060.                         <PropertyDesc idRef="21" propType="simple">
  2061.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 HUP Modem Client Request</SimpleValue>
  2062.                         </PropertyDesc>
  2063.                         <PropertyDesc idRef="30" propType="simple">
  2064.                             <SimpleValue valType="binary">03000000000000000000000000000000313939</SimpleValue>
  2065.                         </PropertyDesc>
  2066.                     </PropertyDescList>
  2067.                 </Rule>
  2068.                 <Rule guid="{B69AD427-F19B-450F-B2AF-CC9B22B756C1}">
  2069.                     <ObjDescRef guidRef="{82EA2825-234A-4A42-99DB-52E0FA74A5D2}"/>
  2070.                     <AccessDescList>
  2071.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2072.                     </AccessDescList>
  2073.                     <PropertyDescList>
  2074.                         <PropertyDesc idRef="20" propType="simple">
  2075.                             <SimpleValue valType="int">824</SimpleValue>
  2076.                         </PropertyDesc>
  2077.                         <PropertyDesc idRef="5" propType="objRef">
  2078.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2079.                         </PropertyDesc>
  2080.                         <PropertyDesc idRef="21" propType="simple">
  2081.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 CD ROM Open Client Request</SimpleValue>
  2082.                         </PropertyDesc>
  2083.                         <PropertyDesc idRef="30" propType="simple">
  2084.                             <SimpleValue valType="binary">020000000000000000000000000000003032</SimpleValue>
  2085.                         </PropertyDesc>
  2086.                     </PropertyDescList>
  2087.                 </Rule>
  2088.                 <Rule guid="{6E0D85C5-4D4D-456D-8C6A-FB5AC0FD6C07}">
  2089.                     <ObjDescRef guidRef="{6F9040FD-4996-46D5-86B2-9FC4A9659415}"/>
  2090.                     <AccessDescList>
  2091.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2092.                     </AccessDescList>
  2093.                     <PropertyDescList>
  2094.                         <PropertyDesc idRef="20" propType="simple">
  2095.                             <SimpleValue valType="int">828</SimpleValue>
  2096.                         </PropertyDesc>
  2097.                         <PropertyDesc idRef="5" propType="objRef">
  2098.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2099.                         </PropertyDesc>
  2100.                         <PropertyDesc idRef="21" propType="simple">
  2101.                             <SimpleValue valType="str">BACKDOOR DeepThroat 3.1 CD ROM Close Client Request</SimpleValue>
  2102.                         </PropertyDesc>
  2103.                         <PropertyDesc idRef="30" propType="simple">
  2104.                             <SimpleValue valType="binary">020000000000000000000000000000003033</SimpleValue>
  2105.                         </PropertyDesc>
  2106.                     </PropertyDescList>
  2107.                 </Rule>
  2108.                 <Rule guid="{11D27390-E327-48C6-AC7B-83E442DA5B91}">
  2109.                     <ObjDescRef guidRef="{42C9956C-B35E-447C-874E-7D9CE25E3352}"/>
  2110.                     <AccessDescList>
  2111.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2112.                     </AccessDescList>
  2113.                     <PropertyDescList>
  2114.                         <PropertyDesc idRef="20" propType="simple">
  2115.                             <SimpleValue valType="int">832</SimpleValue>
  2116.                         </PropertyDesc>
  2117.                         <PropertyDesc idRef="5" propType="objRef">
  2118.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2119.                         </PropertyDesc>
  2120.                         <PropertyDesc idRef="21" propType="simple">
  2121.                             <SimpleValue valType="str">BACKDOOR PhaseZero Server Active on Network</SimpleValue>
  2122.                         </PropertyDesc>
  2123.                         <PropertyDesc idRef="31" propType="simple">
  2124.                             <SimpleValue valType="int">135168</SimpleValue>
  2125.                         </PropertyDesc>
  2126.                         <PropertyDesc idRef="30" propType="simple">
  2127.                             <SimpleValue valType="binary">050000000000000000000000000000007068417365</SimpleValue>
  2128.                         </PropertyDesc>
  2129.                     </PropertyDescList>
  2130.                 </Rule>
  2131.                 <Rule guid="{218D86DD-73E1-48FC-81A7-374560D05D3D}">
  2132.                     <ObjDescRef guidRef="{77D5F40F-69AB-46A6-A8AA-10AB7BA7CDB2}"/>
  2133.                     <AccessDescList>
  2134.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2135.                     </AccessDescList>
  2136.                     <PropertyDescList>
  2137.                         <PropertyDesc idRef="20" propType="simple">
  2138.                             <SimpleValue valType="int">836</SimpleValue>
  2139.                         </PropertyDesc>
  2140.                         <PropertyDesc idRef="5" propType="objRef">
  2141.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2142.                         </PropertyDesc>
  2143.                         <PropertyDesc idRef="21" propType="simple">
  2144.                             <SimpleValue valType="str">BACKDOOR w00w00 attempt</SimpleValue>
  2145.                         </PropertyDesc>
  2146.                         <PropertyDesc idRef="31" propType="simple">
  2147.                             <SimpleValue valType="int">135168</SimpleValue>
  2148.                         </PropertyDesc>
  2149.                         <PropertyDesc idRef="30" propType="simple">
  2150.                             <SimpleValue valType="binary">06000000000000000000000000000000773030773030</SimpleValue>
  2151.                         </PropertyDesc>
  2152.                     </PropertyDescList>
  2153.                 </Rule>
  2154.                 <Rule guid="{8806A52D-3567-4E8F-928C-FE648A4C962B}">
  2155.                     <ObjDescRef guidRef="{F7E079DA-9091-49DE-870C-AC12F7CCCA5B}"/>
  2156.                     <AccessDescList>
  2157.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2158.                     </AccessDescList>
  2159.                     <PropertyDescList>
  2160.                         <PropertyDesc idRef="20" propType="simple">
  2161.                             <SimpleValue valType="int">840</SimpleValue>
  2162.                         </PropertyDesc>
  2163.                         <PropertyDesc idRef="5" propType="objRef">
  2164.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2165.                         </PropertyDesc>
  2166.                         <PropertyDesc idRef="21" propType="simple">
  2167.                             <SimpleValue valType="str">BACKDOOR attempt</SimpleValue>
  2168.                         </PropertyDesc>
  2169.                         <PropertyDesc idRef="31" propType="simple">
  2170.                             <SimpleValue valType="int">135168</SimpleValue>
  2171.                         </PropertyDesc>
  2172.                         <PropertyDesc idRef="30" propType="simple">
  2173.                             <SimpleValue valType="binary">080000000000000000000000000001006261636B646F6F72</SimpleValue>
  2174.                         </PropertyDesc>
  2175.                     </PropertyDescList>
  2176.                 </Rule>
  2177.                 <Rule guid="{D1289E87-93BA-43A6-8695-D86EE15DB620}">
  2178.                     <ObjDescRef guidRef="{CA6D446C-922C-4641-8D9F-8C3457DA749B}"/>
  2179.                     <AccessDescList>
  2180.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2181.                     </AccessDescList>
  2182.                     <PropertyDescList>
  2183.                         <PropertyDesc idRef="20" propType="simple">
  2184.                             <SimpleValue valType="int">844</SimpleValue>
  2185.                         </PropertyDesc>
  2186.                         <PropertyDesc idRef="5" propType="objRef">
  2187.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2188.                         </PropertyDesc>
  2189.                         <PropertyDesc idRef="21" propType="simple">
  2190.                             <SimpleValue valType="str">BACKDOOR MISC r00t attempt</SimpleValue>
  2191.                         </PropertyDesc>
  2192.                         <PropertyDesc idRef="31" propType="simple">
  2193.                             <SimpleValue valType="int">135168</SimpleValue>
  2194.                         </PropertyDesc>
  2195.                         <PropertyDesc idRef="30" propType="simple">
  2196.                             <SimpleValue valType="binary">0400000000000000000000000000000072303074</SimpleValue>
  2197.                         </PropertyDesc>
  2198.                     </PropertyDescList>
  2199.                 </Rule>
  2200.                 <Rule guid="{6B431CFA-CAB5-46F3-9146-9C649E193137}">
  2201.                     <ObjDescRef guidRef="{71A89664-EAAD-4FD6-8C45-81FF8370D4D5}"/>
  2202.                     <AccessDescList>
  2203.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2204.                     </AccessDescList>
  2205.                     <PropertyDescList>
  2206.                         <PropertyDesc idRef="20" propType="simple">
  2207.                             <SimpleValue valType="int">848</SimpleValue>
  2208.                         </PropertyDesc>
  2209.                         <PropertyDesc idRef="5" propType="objRef">
  2210.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2211.                         </PropertyDesc>
  2212.                         <PropertyDesc idRef="21" propType="simple">
  2213.                             <SimpleValue valType="str">BACKDOOR MISC rewt attempt</SimpleValue>
  2214.                         </PropertyDesc>
  2215.                         <PropertyDesc idRef="31" propType="simple">
  2216.                             <SimpleValue valType="int">135168</SimpleValue>
  2217.                         </PropertyDesc>
  2218.                         <PropertyDesc idRef="30" propType="simple">
  2219.                             <SimpleValue valType="binary">0400000000000000000000000000000072657774</SimpleValue>
  2220.                         </PropertyDesc>
  2221.                     </PropertyDescList>
  2222.                 </Rule>
  2223.                 <Rule guid="{7F0DB9AA-C279-4234-9DAA-8D646F687A38}">
  2224.                     <ObjDescRef guidRef="{68C93719-754E-4223-BEA0-BBE9C3CC5688}"/>
  2225.                     <AccessDescList>
  2226.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2227.                     </AccessDescList>
  2228.                     <PropertyDescList>
  2229.                         <PropertyDesc idRef="20" propType="simple">
  2230.                             <SimpleValue valType="int">852</SimpleValue>
  2231.                         </PropertyDesc>
  2232.                         <PropertyDesc idRef="5" propType="objRef">
  2233.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2234.                         </PropertyDesc>
  2235.                         <PropertyDesc idRef="21" propType="simple">
  2236.                             <SimpleValue valType="str">BACKDOOR MISC linux rootkit attempt</SimpleValue>
  2237.                         </PropertyDesc>
  2238.                         <PropertyDesc idRef="31" propType="simple">
  2239.                             <SimpleValue valType="int">135168</SimpleValue>
  2240.                         </PropertyDesc>
  2241.                         <PropertyDesc idRef="30" propType="simple">
  2242.                             <SimpleValue valType="binary">06000000000000000000000000000000776830307421</SimpleValue>
  2243.                         </PropertyDesc>
  2244.                     </PropertyDescList>
  2245.                 </Rule>
  2246.                 <Rule guid="{4CFB8260-63C6-43E5-A4D9-0B74D65436C2}">
  2247.                     <ObjDescRef guidRef="{5CA9F21D-B7F0-440C-A410-F2F38DDB79AB}"/>
  2248.                     <AccessDescList>
  2249.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2250.                     </AccessDescList>
  2251.                     <PropertyDescList>
  2252.                         <PropertyDesc idRef="20" propType="simple">
  2253.                             <SimpleValue valType="int">856</SimpleValue>
  2254.                         </PropertyDesc>
  2255.                         <PropertyDesc idRef="5" propType="objRef">
  2256.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2257.                         </PropertyDesc>
  2258.                         <PropertyDesc idRef="21" propType="simple">
  2259.                             <SimpleValue valType="str">BACKDOOR MISC linux rootkit attempt lrkr0x</SimpleValue>
  2260.                         </PropertyDesc>
  2261.                         <PropertyDesc idRef="31" propType="simple">
  2262.                             <SimpleValue valType="int">135168</SimpleValue>
  2263.                         </PropertyDesc>
  2264.                         <PropertyDesc idRef="30" propType="simple">
  2265.                             <SimpleValue valType="binary">060000000000000000000000000000006C726B723078</SimpleValue>
  2266.                         </PropertyDesc>
  2267.                     </PropertyDescList>
  2268.                 </Rule>
  2269.                 <Rule guid="{E43FF4A9-AAEC-4548-8E19-1A8B2E29B9C0}">
  2270.                     <ObjDescRef guidRef="{F7B18A32-7200-43A8-BA87-34CC05D16262}"/>
  2271.                     <AccessDescList>
  2272.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2273.                     </AccessDescList>
  2274.                     <PropertyDescList>
  2275.                         <PropertyDesc idRef="20" propType="simple">
  2276.                             <SimpleValue valType="int">860</SimpleValue>
  2277.                         </PropertyDesc>
  2278.                         <PropertyDesc idRef="5" propType="objRef">
  2279.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2280.                         </PropertyDesc>
  2281.                         <PropertyDesc idRef="21" propType="simple">
  2282.                             <SimpleValue valType="str">BACKDOOR MISC linux rootkit attempt</SimpleValue>
  2283.                         </PropertyDesc>
  2284.                         <PropertyDesc idRef="31" propType="simple">
  2285.                             <SimpleValue valType="int">135168</SimpleValue>
  2286.                         </PropertyDesc>
  2287.                         <PropertyDesc idRef="30" propType="simple">
  2288.                             <SimpleValue valType="binary">0600000000000000000000000000010064313368685B</SimpleValue>
  2289.                         </PropertyDesc>
  2290.                     </PropertyDescList>
  2291.                 </Rule>
  2292.                 <Rule guid="{4DBCCD0F-87FE-4FFC-9D60-BB3A1E9EBB70}">
  2293.                     <ObjDescRef guidRef="{E0FC6227-EB16-4A56-8041-3B75262B2C01}"/>
  2294.                     <AccessDescList>
  2295.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2296.                     </AccessDescList>
  2297.                     <PropertyDescList>
  2298.                         <PropertyDesc idRef="20" propType="simple">
  2299.                             <SimpleValue valType="int">864</SimpleValue>
  2300.                         </PropertyDesc>
  2301.                         <PropertyDesc idRef="5" propType="objRef">
  2302.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2303.                         </PropertyDesc>
  2304.                         <PropertyDesc idRef="21" propType="simple">
  2305.                             <SimpleValue valType="str">BACKDOOR MISC linux rootkit satori attempt</SimpleValue>
  2306.                         </PropertyDesc>
  2307.                         <PropertyDesc idRef="31" propType="simple">
  2308.                             <SimpleValue valType="int">135168</SimpleValue>
  2309.                         </PropertyDesc>
  2310.                         <PropertyDesc idRef="30" propType="simple">
  2311.                             <SimpleValue valType="binary">060000000000000000000000000000007361746F7269</SimpleValue>
  2312.                         </PropertyDesc>
  2313.                     </PropertyDescList>
  2314.                 </Rule>
  2315.                 <Rule guid="{70D58323-B439-48D3-AA72-BF8077F082F8}">
  2316.                     <ObjDescRef guidRef="{F76BC8AB-8D98-42C4-B675-D8DE6E0A471A}"/>
  2317.                     <AccessDescList>
  2318.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2319.                     </AccessDescList>
  2320.                     <PropertyDescList>
  2321.                         <PropertyDesc idRef="20" propType="simple">
  2322.                             <SimpleValue valType="int">868</SimpleValue>
  2323.                         </PropertyDesc>
  2324.                         <PropertyDesc idRef="5" propType="objRef">
  2325.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2326.                         </PropertyDesc>
  2327.                         <PropertyDesc idRef="21" propType="simple">
  2328.                             <SimpleValue valType="str">BACKDOOR MISC sm4ck attempt</SimpleValue>
  2329.                         </PropertyDesc>
  2330.                         <PropertyDesc idRef="31" propType="simple">
  2331.                             <SimpleValue valType="int">135168</SimpleValue>
  2332.                         </PropertyDesc>
  2333.                         <PropertyDesc idRef="30" propType="simple">
  2334.                             <SimpleValue valType="binary">050000000000000000000000000000006861783072</SimpleValue>
  2335.                         </PropertyDesc>
  2336.                     </PropertyDescList>
  2337.                 </Rule>
  2338.                 <Rule guid="{F0D71CB4-374A-4013-BD67-E9E42FD2BD3F}">
  2339.                     <ObjDescRef guidRef="{9A5B6D53-39EA-4677-9C3C-6DFF5E03DE69}"/>
  2340.                     <AccessDescList>
  2341.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2342.                     </AccessDescList>
  2343.                     <PropertyDescList>
  2344.                         <PropertyDesc idRef="20" propType="simple">
  2345.                             <SimpleValue valType="int">872</SimpleValue>
  2346.                         </PropertyDesc>
  2347.                         <PropertyDesc idRef="5" propType="objRef">
  2348.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2349.                         </PropertyDesc>
  2350.                         <PropertyDesc idRef="21" propType="simple">
  2351.                             <SimpleValue valType="str">BACKDOOR MISC solaris 2.5 attempt</SimpleValue>
  2352.                         </PropertyDesc>
  2353.                         <PropertyDesc idRef="31" propType="simple">
  2354.                             <SimpleValue valType="int">135168</SimpleValue>
  2355.                         </PropertyDesc>
  2356.                         <PropertyDesc idRef="30" propType="simple">
  2357.                             <SimpleValue valType="binary">06000000000000000000000000000000667269646179</SimpleValue>
  2358.                         </PropertyDesc>
  2359.                     </PropertyDescList>
  2360.                 </Rule>
  2361.                 <Rule guid="{B1E6EB18-8EB9-4F13-913A-14C7017C5C14}">
  2362.                     <ObjDescRef guidRef="{389D17CE-3947-4D6C-B9D5-6F4EE3B877A0}"/>
  2363.                     <AccessDescList>
  2364.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2365.                     </AccessDescList>
  2366.                     <PropertyDescList>
  2367.                         <PropertyDesc idRef="20" propType="simple">
  2368.                             <SimpleValue valType="int">876</SimpleValue>
  2369.                         </PropertyDesc>
  2370.                         <PropertyDesc idRef="5" propType="objRef">
  2371.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2372.                         </PropertyDesc>
  2373.                         <PropertyDesc idRef="21" propType="simple">
  2374.                             <SimpleValue valType="str">BACKDOOR HidePak backdoor attempt</SimpleValue>
  2375.                         </PropertyDesc>
  2376.                         <PropertyDesc idRef="31" propType="simple">
  2377.                             <SimpleValue valType="int">135168</SimpleValue>
  2378.                         </PropertyDesc>
  2379.                         <PropertyDesc idRef="30" propType="simple">
  2380.                             <SimpleValue valType="binary">0600000000000000000000000000000053746F6F6752</SimpleValue>
  2381.                         </PropertyDesc>
  2382.                     </PropertyDescList>
  2383.                 </Rule>
  2384.                 <Rule guid="{9CDE83EE-F90F-415D-987D-39B915468430}">
  2385.                     <ObjDescRef guidRef="{010D9FA2-F7A6-4AB0-97E0-D9294017A3B5}"/>
  2386.                     <AccessDescList>
  2387.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2388.                     </AccessDescList>
  2389.                     <PropertyDescList>
  2390.                         <PropertyDesc idRef="20" propType="simple">
  2391.                             <SimpleValue valType="int">880</SimpleValue>
  2392.                         </PropertyDesc>
  2393.                         <PropertyDesc idRef="5" propType="objRef">
  2394.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2395.                         </PropertyDesc>
  2396.                         <PropertyDesc idRef="21" propType="simple">
  2397.                             <SimpleValue valType="str">BACKDOOR HideSource backdoor attempt</SimpleValue>
  2398.                         </PropertyDesc>
  2399.                         <PropertyDesc idRef="31" propType="simple">
  2400.                             <SimpleValue valType="int">135168</SimpleValue>
  2401.                         </PropertyDesc>
  2402.                         <PropertyDesc idRef="30" propType="simple">
  2403.                             <SimpleValue valType="binary">0400000000000000000000000000000077616E6B</SimpleValue>
  2404.                         </PropertyDesc>
  2405.                     </PropertyDescList>
  2406.                 </Rule>
  2407.                 <Rule guid="{1ECD75E0-3C64-4682-8AF3-7EEDE0E88226}">
  2408.                     <ObjDescRef guidRef="{85778945-F9DA-41EF-9DE8-EEE1CCB66B36}"/>
  2409.                     <AccessDescList>
  2410.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2411.                     </AccessDescList>
  2412.                     <PropertyDescList>
  2413.                         <PropertyDesc idRef="20" propType="simple">
  2414.                             <SimpleValue valType="int">2456</SimpleValue>
  2415.                         </PropertyDesc>
  2416.                         <PropertyDesc idRef="5" propType="objRef">
  2417.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2418.                         </PropertyDesc>
  2419.                         <PropertyDesc idRef="21" propType="simple">
  2420.                             <SimpleValue valType="str">BACKDOOR hack-a-tack attempt</SimpleValue>
  2421.                         </PropertyDesc>
  2422.                         <PropertyDesc idRef="30" propType="simple">
  2423.                             <SimpleValue valType="binary">0100000000000000010000000000000041</SimpleValue>
  2424.                         </PropertyDesc>
  2425.                         <PropertyDesc idRef="31" propType="simple">
  2426.                             <SimpleValue valType="int">135168</SimpleValue>
  2427.                         </PropertyDesc>
  2428.                     </PropertyDescList>
  2429.                 </Rule>
  2430.             </RuleByObjTypeList>
  2431.         </Profile>
  2432.         <Profile guid="{A3502CA2-BA78-4DA1-ADF3-76941D8423C1}">
  2433.             <ExecSetDescList/>
  2434.             <RuleByObjTypeList typeRef="262">
  2435.                 <Rule guid="{4957B07B-4DEE-45A7-8EA8-CD2DE6A85A07}">
  2436.                     <ObjDescRef guidRef="{035196CC-F3A9-49E0-B932-DE82C3B27647}"/>
  2437.                     <AccessDescList>
  2438.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2439.                     </AccessDescList>
  2440.                     <PropertyDescList>
  2441.                         <PropertyDesc idRef="20" propType="simple">
  2442.                             <SimpleValue valType="int">576</SimpleValue>
  2443.                         </PropertyDesc>
  2444.                         <PropertyDesc idRef="5" propType="objRef">
  2445.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2446.                         </PropertyDesc>
  2447.                         <PropertyDesc idRef="21" propType="simple">
  2448.                             <SimpleValue valType="str">FTP ADMw0rm ftp login attempt</SimpleValue>
  2449.                         </PropertyDesc>
  2450.                         <PropertyDesc idRef="30" propType="simple">
  2451.                             <SimpleValue valType="binary">0B00000000000000000000000000000055534552207730726D0D0A</SimpleValue>
  2452.                         </PropertyDesc>
  2453.                     </PropertyDescList>
  2454.                 </Rule>
  2455.                 <Rule guid="{64512C38-6FC4-4DEC-9B62-A88DBD40E279}">
  2456.                     <ObjDescRef guidRef="{B9BD0F7C-4EDD-4A7A-B44E-8026973653A4}"/>
  2457.                     <AccessDescList>
  2458.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2459.                     </AccessDescList>
  2460.                     <PropertyDescList>
  2461.                         <PropertyDesc idRef="20" propType="simple">
  2462.                             <SimpleValue valType="int">1336</SimpleValue>
  2463.                         </PropertyDesc>
  2464.                         <PropertyDesc idRef="5" propType="objRef">
  2465.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2466.                         </PropertyDesc>
  2467.                         <PropertyDesc idRef="21" propType="simple">
  2468.                             <SimpleValue valType="str">FTP .forward</SimpleValue>
  2469.                         </PropertyDesc>
  2470.                         <PropertyDesc idRef="30" propType="simple">
  2471.                             <SimpleValue valType="binary">080000000000000000000000000000002E666F7277617264</SimpleValue>
  2472.                         </PropertyDesc>
  2473.                     </PropertyDescList>
  2474.                 </Rule>
  2475.                 <Rule guid="{7186B7C8-7A8A-43DC-9BC3-82B6590176A2}">
  2476.                     <ObjDescRef guidRef="{031A111D-5C10-4C1D-A109-1E1FA017E51D}"/>
  2477.                     <AccessDescList>
  2478.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2479.                     </AccessDescList>
  2480.                     <PropertyDescList>
  2481.                         <PropertyDesc idRef="20" propType="simple">
  2482.                             <SimpleValue valType="int">1340</SimpleValue>
  2483.                         </PropertyDesc>
  2484.                         <PropertyDesc idRef="5" propType="objRef">
  2485.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2486.                         </PropertyDesc>
  2487.                         <PropertyDesc idRef="21" propType="simple">
  2488.                             <SimpleValue valType="str">FTP .rhosts</SimpleValue>
  2489.                         </PropertyDesc>
  2490.                         <PropertyDesc idRef="30" propType="simple">
  2491.                             <SimpleValue valType="binary">070000000000000000000000000000002E72686F737473</SimpleValue>
  2492.                         </PropertyDesc>
  2493.                     </PropertyDescList>
  2494.                 </Rule>
  2495.                 <Rule guid="{F982B710-B9AC-4F2E-A01D-C8580B6C8016}">
  2496.                     <ObjDescRef guidRef="{D47AD629-B5C0-49B6-A49E-D61F41DA325E}"/>
  2497.                     <AccessDescList>
  2498.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2499.                     </AccessDescList>
  2500.                     <PropertyDescList>
  2501.                         <PropertyDesc idRef="20" propType="simple">
  2502.                             <SimpleValue valType="int">1344</SimpleValue>
  2503.                         </PropertyDesc>
  2504.                         <PropertyDesc idRef="5" propType="objRef">
  2505.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2506.                         </PropertyDesc>
  2507.                         <PropertyDesc idRef="21" propType="simple">
  2508.                             <SimpleValue valType="str">FTP CWD ~root attempt</SimpleValue>
  2509.                         </PropertyDesc>
  2510.                         <PropertyDesc idRef="30" propType="simple">
  2511.                             <SimpleValue valType="binary">0400000000000000000000000000000043574420</SimpleValue>
  2512.                         </PropertyDesc>
  2513.                         <PropertyDesc idRef="30" propType="simple">
  2514.                             <SimpleValue valType="binary">06000000000000000000000000000100207E726F6F74</SimpleValue>
  2515.                         </PropertyDesc>
  2516.                     </PropertyDescList>
  2517.                 </Rule>
  2518.                 <Rule guid="{8CA555A6-B868-4B38-8297-9DA9CF6B6936}">
  2519.                     <ObjDescRef guidRef="{4593954F-ED8D-45D7-8FF4-E5F482C16EC3}"/>
  2520.                     <AccessDescList>
  2521.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2522.                     </AccessDescList>
  2523.                     <PropertyDescList>
  2524.                         <PropertyDesc idRef="20" propType="simple">
  2525.                             <SimpleValue valType="int">1348</SimpleValue>
  2526.                         </PropertyDesc>
  2527.                         <PropertyDesc idRef="5" propType="objRef">
  2528.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2529.                         </PropertyDesc>
  2530.                         <PropertyDesc idRef="21" propType="simple">
  2531.                             <SimpleValue valType="str">FTP EXPLOIT aix overflow</SimpleValue>
  2532.                         </PropertyDesc>
  2533.                         <PropertyDesc idRef="29" propType="simple">
  2534.                             <SimpleValue valType="int" valRelation="&gt;">1300</SimpleValue>
  2535.                         </PropertyDesc>
  2536.                         <PropertyDesc idRef="30" propType="simple">
  2537.                             <SimpleValue valType="binary">0400000000000000000000000000000043454C20</SimpleValue>
  2538.                         </PropertyDesc>
  2539.                     </PropertyDescList>
  2540.                 </Rule>
  2541.                 <Rule guid="{EC3EDA8E-BCEB-4FCC-A5D4-12026933B43D}">
  2542.                     <ObjDescRef guidRef="{A7C273F9-9ED9-4EEF-9D1F-03B4BD50644B}"/>
  2543.                     <AccessDescList>
  2544.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2545.                     </AccessDescList>
  2546.                     <PropertyDescList>
  2547.                         <PropertyDesc idRef="20" propType="simple">
  2548.                             <SimpleValue valType="int">1352</SimpleValue>
  2549.                         </PropertyDesc>
  2550.                         <PropertyDesc idRef="5" propType="objRef">
  2551.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2552.                         </PropertyDesc>
  2553.                         <PropertyDesc idRef="21" propType="simple">
  2554.                             <SimpleValue valType="str">FTP EXPLOIT format string</SimpleValue>
  2555.                         </PropertyDesc>
  2556.                         <PropertyDesc idRef="30" propType="simple">
  2557.                             <SimpleValue valType="binary">180000000000000020000000000001005349544520455845432025303230647C252E66252E667C0A</SimpleValue>
  2558.                         </PropertyDesc>
  2559.                     </PropertyDescList>
  2560.                 </Rule>
  2561.                 <Rule guid="{23453AF4-5B70-4B95-ABDD-3A99CD265A20}">
  2562.                     <ObjDescRef guidRef="{748F39F7-9AB1-45C4-9468-191B06FBDF36}"/>
  2563.                     <AccessDescList>
  2564.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2565.                     </AccessDescList>
  2566.                     <PropertyDescList>
  2567.                         <PropertyDesc idRef="20" propType="simple">
  2568.                             <SimpleValue valType="int">1356</SimpleValue>
  2569.                         </PropertyDesc>
  2570.                         <PropertyDesc idRef="5" propType="objRef">
  2571.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2572.                         </PropertyDesc>
  2573.                         <PropertyDesc idRef="21" propType="simple">
  2574.                             <SimpleValue valType="str">FTP EXPLOIT OpenBSD x86 ftpd</SimpleValue>
  2575.                         </PropertyDesc>
  2576.                         <PropertyDesc idRef="30" propType="simple">
  2577.                             <SimpleValue valType="binary">0F000000000000000000000000000000209031C0995252B017CD8068CC7368</SimpleValue>
  2578.                         </PropertyDesc>
  2579.                     </PropertyDescList>
  2580.                 </Rule>
  2581.                 <Rule guid="{D7E2AE92-46CB-47AE-827F-09CD5A6F19BA}">
  2582.                     <ObjDescRef guidRef="{B53DA596-1F9F-4689-BC2C-6A813EEB6187}"/>
  2583.                     <AccessDescList>
  2584.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2585.                     </AccessDescList>
  2586.                     <PropertyDescList>
  2587.                         <PropertyDesc idRef="20" propType="simple">
  2588.                             <SimpleValue valType="int">1360</SimpleValue>
  2589.                         </PropertyDesc>
  2590.                         <PropertyDesc idRef="5" propType="objRef">
  2591.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2592.                         </PropertyDesc>
  2593.                         <PropertyDesc idRef="21" propType="simple">
  2594.                             <SimpleValue valType="str">FTP EXPLOIT overflow</SimpleValue>
  2595.                         </PropertyDesc>
  2596.                         <PropertyDesc idRef="30" propType="simple">
  2597.                             <SimpleValue valType="binary">060000000000000000000000000000005057440A2F69</SimpleValue>
  2598.                         </PropertyDesc>
  2599.                     </PropertyDescList>
  2600.                 </Rule>
  2601.                 <Rule guid="{5B892598-D71B-4552-A3A7-FAE95DA31ACC}">
  2602.                     <ObjDescRef guidRef="{982DDD48-8ABB-4CA7-A353-501A3EDFDC65}"/>
  2603.                     <AccessDescList>
  2604.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2605.                     </AccessDescList>
  2606.                     <PropertyDescList>
  2607.                         <PropertyDesc idRef="20" propType="simple">
  2608.                             <SimpleValue valType="int">1364</SimpleValue>
  2609.                         </PropertyDesc>
  2610.                         <PropertyDesc idRef="5" propType="objRef">
  2611.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2612.                         </PropertyDesc>
  2613.                         <PropertyDesc idRef="21" propType="simple">
  2614.                             <SimpleValue valType="str">FTP EXPLOIT overflow</SimpleValue>
  2615.                         </PropertyDesc>
  2616.                         <PropertyDesc idRef="30" propType="simple">
  2617.                             <SimpleValue valType="binary">0600000000000000000000000000000058585858582F</SimpleValue>
  2618.                         </PropertyDesc>
  2619.                     </PropertyDescList>
  2620.                 </Rule>
  2621.                 <Rule guid="{DAEDCF51-22E0-4456-B907-1BEEA13CEDEC}">
  2622.                     <ObjDescRef guidRef="{9A082AF6-1F81-4DEE-AE32-C24816F5AD70}"/>
  2623.                     <AccessDescList>
  2624.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2625.                     </AccessDescList>
  2626.                     <PropertyDescList>
  2627.                         <PropertyDesc idRef="20" propType="simple">
  2628.                             <SimpleValue valType="int">1368</SimpleValue>
  2629.                         </PropertyDesc>
  2630.                         <PropertyDesc idRef="5" propType="objRef">
  2631.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2632.                         </PropertyDesc>
  2633.                         <PropertyDesc idRef="21" propType="simple">
  2634.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Solaris 2.8</SimpleValue>
  2635.                         </PropertyDesc>
  2636.                         <PropertyDesc idRef="30" propType="simple">
  2637.                             <SimpleValue valType="binary">0C000000000000000000000000000000901BC00F8210201791D02008</SimpleValue>
  2638.                         </PropertyDesc>
  2639.                     </PropertyDescList>
  2640.                 </Rule>
  2641.                 <Rule guid="{760FA0C2-2668-440E-AFD0-DF464C6C7DF6}">
  2642.                     <ObjDescRef guidRef="{766FE618-6456-4F98-A204-6E912DCBABD5}"/>
  2643.                     <AccessDescList>
  2644.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2645.                     </AccessDescList>
  2646.                     <PropertyDescList>
  2647.                         <PropertyDesc idRef="20" propType="simple">
  2648.                             <SimpleValue valType="int">1372</SimpleValue>
  2649.                         </PropertyDesc>
  2650.                         <PropertyDesc idRef="5" propType="objRef">
  2651.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2652.                         </PropertyDesc>
  2653.                         <PropertyDesc idRef="21" propType="simple">
  2654.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow FreeBSD</SimpleValue>
  2655.                         </PropertyDesc>
  2656.                         <PropertyDesc idRef="30" propType="simple">
  2657.                             <SimpleValue valType="binary">0D00000000000000200000000000000031C0505050B07ECD8031DB31C0</SimpleValue>
  2658.                         </PropertyDesc>
  2659.                     </PropertyDescList>
  2660.                 </Rule>
  2661.                 <Rule guid="{6F02568A-2DA0-40E9-8623-CE9A3E28EB7E}">
  2662.                     <ObjDescRef guidRef="{617B378B-B032-43E6-B67C-83EB22F79350}"/>
  2663.                     <AccessDescList>
  2664.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2665.                     </AccessDescList>
  2666.                     <PropertyDescList>
  2667.                         <PropertyDesc idRef="20" propType="simple">
  2668.                             <SimpleValue valType="int">1376</SimpleValue>
  2669.                         </PropertyDesc>
  2670.                         <PropertyDesc idRef="5" propType="objRef">
  2671.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2672.                         </PropertyDesc>
  2673.                         <PropertyDesc idRef="21" propType="simple">
  2674.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Linux</SimpleValue>
  2675.                         </PropertyDesc>
  2676.                         <PropertyDesc idRef="30" propType="simple">
  2677.                             <SimpleValue valType="binary">0E00000000000000000000000000000031C031DB31C9B046CD8031C031DB</SimpleValue>
  2678.                         </PropertyDesc>
  2679.                     </PropertyDescList>
  2680.                 </Rule>
  2681.                 <Rule guid="{EBCE394A-17D2-4DAC-B522-6C62E907712B}">
  2682.                     <ObjDescRef guidRef="{6F9860B2-0D3D-493F-9F77-68502F033D50}"/>
  2683.                     <AccessDescList>
  2684.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2685.                     </AccessDescList>
  2686.                     <PropertyDescList>
  2687.                         <PropertyDesc idRef="20" propType="simple">
  2688.                             <SimpleValue valType="int">1380</SimpleValue>
  2689.                         </PropertyDesc>
  2690.                         <PropertyDesc idRef="5" propType="objRef">
  2691.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2692.                         </PropertyDesc>
  2693.                         <PropertyDesc idRef="21" propType="simple">
  2694.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow generic</SimpleValue>
  2695.                         </PropertyDesc>
  2696.                         <PropertyDesc idRef="30" propType="simple">
  2697.                             <SimpleValue valType="binary">050000000000000000000000000001005349544520</SimpleValue>
  2698.                         </PropertyDesc>
  2699.                         <PropertyDesc idRef="30" propType="simple">
  2700.                             <SimpleValue valType="binary">06000000000000000000000000000100204558454320</SimpleValue>
  2701.                         </PropertyDesc>
  2702.                         <PropertyDesc idRef="30" propType="simple">
  2703.                             <SimpleValue valType="binary">03000000000000000000000000000100202570</SimpleValue>
  2704.                         </PropertyDesc>
  2705.                     </PropertyDescList>
  2706.                 </Rule>
  2707.                 <Rule guid="{CC692102-3CC6-46A2-98F2-DC62AE8629FA}">
  2708.                     <ObjDescRef guidRef="{F7E237ED-D71A-4EE7-A2FB-5ACE9B2F5AB4}"/>
  2709.                     <AccessDescList>
  2710.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2711.                     </AccessDescList>
  2712.                     <PropertyDescList>
  2713.                         <PropertyDesc idRef="20" propType="simple">
  2714.                             <SimpleValue valType="int">1384</SimpleValue>
  2715.                         </PropertyDesc>
  2716.                         <PropertyDesc idRef="5" propType="objRef">
  2717.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2718.                         </PropertyDesc>
  2719.                         <PropertyDesc idRef="21" propType="simple">
  2720.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0 site exec format string check</SimpleValue>
  2721.                         </PropertyDesc>
  2722.                         <PropertyDesc idRef="30" propType="simple">
  2723.                             <SimpleValue valType="binary">0F00000000000000200000000000000066252E66252E66252E66252E66252E</SimpleValue>
  2724.                         </PropertyDesc>
  2725.                     </PropertyDescList>
  2726.                 </Rule>
  2727.                 <Rule guid="{6C3B815B-C966-427D-8C8F-BD653083D539}">
  2728.                     <ObjDescRef guidRef="{03FA318C-CB64-49FD-BD3F-BA99342F9765}"/>
  2729.                     <AccessDescList>
  2730.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2731.                     </AccessDescList>
  2732.                     <PropertyDescList>
  2733.                         <PropertyDesc idRef="20" propType="simple">
  2734.                             <SimpleValue valType="int">1392</SimpleValue>
  2735.                         </PropertyDesc>
  2736.                         <PropertyDesc idRef="5" propType="objRef">
  2737.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2738.                         </PropertyDesc>
  2739.                         <PropertyDesc idRef="21" propType="simple">
  2740.                             <SimpleValue valType="str">FTP EXPLOIT wu-ftpd 2.6.0</SimpleValue>
  2741.                         </PropertyDesc>
  2742.                         <PropertyDesc idRef="30" propType="simple">
  2743.                             <SimpleValue valType="binary">0C0000000000000000000000000000002E2E313176656E676C696E40</SimpleValue>
  2744.                         </PropertyDesc>
  2745.                     </PropertyDescList>
  2746.                 </Rule>
  2747.                 <Rule guid="{6503A79A-CEF2-4782-8E34-C3EF664CAD39}">
  2748.                     <ObjDescRef guidRef="{FE1E0C45-34D2-465D-9E27-A82DEED8E348}"/>
  2749.                     <AccessDescList>
  2750.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2751.                     </AccessDescList>
  2752.                     <PropertyDescList>
  2753.                         <PropertyDesc idRef="20" propType="simple">
  2754.                             <SimpleValue valType="int">1396</SimpleValue>
  2755.                         </PropertyDesc>
  2756.                         <PropertyDesc idRef="5" propType="objRef">
  2757.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2758.                         </PropertyDesc>
  2759.                         <PropertyDesc idRef="21" propType="simple">
  2760.                             <SimpleValue valType="str">FTP EXPLOIT MKD overflow</SimpleValue>
  2761.                         </PropertyDesc>
  2762.                         <PropertyDesc idRef="30" propType="simple">
  2763.                             <SimpleValue valType="binary">0A0000000000000000000000000000004D4B4420414141414141</SimpleValue>
  2764.                         </PropertyDesc>
  2765.                     </PropertyDescList>
  2766.                 </Rule>
  2767.                 <Rule guid="{5BBABD10-CAFC-4375-B726-E08CF3E69E6F}">
  2768.                     <ObjDescRef guidRef="{0A0D1785-EB94-45A0-A0B1-20C0B2A9F920}"/>
  2769.                     <AccessDescList>
  2770.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2771.                     </AccessDescList>
  2772.                     <PropertyDescList>
  2773.                         <PropertyDesc idRef="20" propType="simple">
  2774.                             <SimpleValue valType="int">1400</SimpleValue>
  2775.                         </PropertyDesc>
  2776.                         <PropertyDesc idRef="5" propType="objRef">
  2777.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2778.                         </PropertyDesc>
  2779.                         <PropertyDesc idRef="21" propType="simple">
  2780.                             <SimpleValue valType="str">FTP EXPLOIT x86 linux overflow</SimpleValue>
  2781.                         </PropertyDesc>
  2782.                         <PropertyDesc idRef="30" propType="simple">
  2783.                             <SimpleValue valType="binary">0E00000000000000000000000000000031C031DBB017CD8031C0B017CD80</SimpleValue>
  2784.                         </PropertyDesc>
  2785.                     </PropertyDescList>
  2786.                 </Rule>
  2787.                 <Rule guid="{0FFDDF03-35D9-4F75-9099-4CF1934BDD00}">
  2788.                     <ObjDescRef guidRef="{BE3BA585-C8C9-485A-9E55-B634B6101B96}"/>
  2789.                     <AccessDescList>
  2790.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2791.                     </AccessDescList>
  2792.                     <PropertyDescList>
  2793.                         <PropertyDesc idRef="20" propType="simple">
  2794.                             <SimpleValue valType="int">1404</SimpleValue>
  2795.                         </PropertyDesc>
  2796.                         <PropertyDesc idRef="5" propType="objRef">
  2797.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2798.                         </PropertyDesc>
  2799.                         <PropertyDesc idRef="21" propType="simple">
  2800.                             <SimpleValue valType="str">FTP EXPLOIT x86 linux overflow</SimpleValue>
  2801.                         </PropertyDesc>
  2802.                         <PropertyDesc idRef="30" propType="simple">
  2803.                             <SimpleValue valType="binary">0A00000000000000000000000000000031DB89D8B017CD80EB2C</SimpleValue>
  2804.                         </PropertyDesc>
  2805.                     </PropertyDescList>
  2806.                 </Rule>
  2807.                 <Rule guid="{66CB0100-5C32-4F6A-956D-C61D789CA265}">
  2808.                     <ObjDescRef guidRef="{808ED8A5-D091-4954-B547-BE64E12D9645}"/>
  2809.                     <AccessDescList>
  2810.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2811.                     </AccessDescList>
  2812.                     <PropertyDescList>
  2813.                         <PropertyDesc idRef="20" propType="simple">
  2814.                             <SimpleValue valType="int">1408</SimpleValue>
  2815.                         </PropertyDesc>
  2816.                         <PropertyDesc idRef="5" propType="objRef">
  2817.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2818.                         </PropertyDesc>
  2819.                         <PropertyDesc idRef="21" propType="simple">
  2820.                             <SimpleValue valType="str">FTP EXPLOIT x86 linux overflow</SimpleValue>
  2821.                         </PropertyDesc>
  2822.                         <PropertyDesc idRef="30" propType="simple">
  2823.                             <SimpleValue valType="binary">0D00000000000000000000000000000083EC045E83C67083C628D5E0C0</SimpleValue>
  2824.                         </PropertyDesc>
  2825.                     </PropertyDescList>
  2826.                 </Rule>
  2827.                 <Rule guid="{927A2433-AA56-4237-AF88-8ACC5D5F2142}">
  2828.                     <ObjDescRef guidRef="{366D1624-88F4-4650-AFB5-FB0EF79CE41A}"/>
  2829.                     <AccessDescList>
  2830.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2831.                     </AccessDescList>
  2832.                     <PropertyDescList>
  2833.                         <PropertyDesc idRef="20" propType="simple">
  2834.                             <SimpleValue valType="int">1412</SimpleValue>
  2835.                         </PropertyDesc>
  2836.                         <PropertyDesc idRef="5" propType="objRef">
  2837.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2838.                         </PropertyDesc>
  2839.                         <PropertyDesc idRef="21" propType="simple">
  2840.                             <SimpleValue valType="str">FTP adm scan</SimpleValue>
  2841.                         </PropertyDesc>
  2842.                         <PropertyDesc idRef="30" propType="simple">
  2843.                             <SimpleValue valType="binary">0A0000000000000000000000000000005041535320646464400A</SimpleValue>
  2844.                         </PropertyDesc>
  2845.                     </PropertyDescList>
  2846.                 </Rule>
  2847.                 <Rule guid="{88F57D5C-53E8-4E6F-BB0F-9306145A6067}">
  2848.                     <ObjDescRef guidRef="{5010D77F-A3B1-401D-8805-9D86AA6D4A18}"/>
  2849.                     <AccessDescList>
  2850.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2851.                     </AccessDescList>
  2852.                     <PropertyDescList>
  2853.                         <PropertyDesc idRef="20" propType="simple">
  2854.                             <SimpleValue valType="int">1416</SimpleValue>
  2855.                         </PropertyDesc>
  2856.                         <PropertyDesc idRef="5" propType="objRef">
  2857.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2858.                         </PropertyDesc>
  2859.                         <PropertyDesc idRef="21" propType="simple">
  2860.                             <SimpleValue valType="str">FTP iss scan</SimpleValue>
  2861.                         </PropertyDesc>
  2862.                         <PropertyDesc idRef="30" propType="simple">
  2863.                             <SimpleValue valType="binary">0D00000000000000000000000000000070617373202D69737340697373</SimpleValue>
  2864.                         </PropertyDesc>
  2865.                     </PropertyDescList>
  2866.                 </Rule>
  2867.                 <Rule guid="{F94CE505-F07E-44B7-B45C-84F07FF011F1}">
  2868.                     <ObjDescRef guidRef="{5E4ACF57-DB46-4088-92A3-6500E7900AF7}"/>
  2869.                     <AccessDescList>
  2870.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2871.                     </AccessDescList>
  2872.                     <PropertyDescList>
  2873.                         <PropertyDesc idRef="20" propType="simple">
  2874.                             <SimpleValue valType="int">1420</SimpleValue>
  2875.                         </PropertyDesc>
  2876.                         <PropertyDesc idRef="5" propType="objRef">
  2877.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2878.                         </PropertyDesc>
  2879.                         <PropertyDesc idRef="21" propType="simple">
  2880.                             <SimpleValue valType="str">FTP pass wh00t</SimpleValue>
  2881.                         </PropertyDesc>
  2882.                         <PropertyDesc idRef="30" propType="simple">
  2883.                             <SimpleValue valType="binary">0A00000000000000000000000000010070617373207768303074</SimpleValue>
  2884.                         </PropertyDesc>
  2885.                     </PropertyDescList>
  2886.                 </Rule>
  2887.                 <Rule guid="{2AADA2AC-A312-422D-8115-C75192E75810}">
  2888.                     <ObjDescRef guidRef="{2BE7F0F0-B2D6-48F0-8D9D-99ADD710D7E9}"/>
  2889.                     <AccessDescList>
  2890.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2891.                     </AccessDescList>
  2892.                     <PropertyDescList>
  2893.                         <PropertyDesc idRef="20" propType="simple">
  2894.                             <SimpleValue valType="int">1424</SimpleValue>
  2895.                         </PropertyDesc>
  2896.                         <PropertyDesc idRef="5" propType="objRef">
  2897.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2898.                         </PropertyDesc>
  2899.                         <PropertyDesc idRef="21" propType="simple">
  2900.                             <SimpleValue valType="str">FTP passwd retreval attempt</SimpleValue>
  2901.                         </PropertyDesc>
  2902.                         <PropertyDesc idRef="30" propType="simple">
  2903.                             <SimpleValue valType="binary">0400000000000000000000000000010052455452</SimpleValue>
  2904.                         </PropertyDesc>
  2905.                         <PropertyDesc idRef="30" propType="simple">
  2906.                             <SimpleValue valType="binary">06000000000000000000000000000000706173737764</SimpleValue>
  2907.                         </PropertyDesc>
  2908.                     </PropertyDescList>
  2909.                 </Rule>
  2910.                 <Rule guid="{C1760C3F-A89E-4C6C-AADB-C255E8B4D1EE}">
  2911.                     <ObjDescRef guidRef="{CF1F857F-51A5-4974-83BA-1C5860067232}"/>
  2912.                     <AccessDescList>
  2913.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2914.                     </AccessDescList>
  2915.                     <PropertyDescList>
  2916.                         <PropertyDesc idRef="20" propType="simple">
  2917.                             <SimpleValue valType="int">1428</SimpleValue>
  2918.                         </PropertyDesc>
  2919.                         <PropertyDesc idRef="5" propType="objRef">
  2920.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2921.                         </PropertyDesc>
  2922.                         <PropertyDesc idRef="21" propType="simple">
  2923.                             <SimpleValue valType="str">FTP piss scan</SimpleValue>
  2924.                         </PropertyDesc>
  2925.                         <PropertyDesc idRef="30" propType="simple">
  2926.                             <SimpleValue valType="binary">0C00000000000000000000000000000070617373202D636B6C617573</SimpleValue>
  2927.                         </PropertyDesc>
  2928.                     </PropertyDescList>
  2929.                 </Rule>
  2930.                 <Rule guid="{4C321A4B-C517-490F-A90E-788AA5378881}">
  2931.                     <ObjDescRef guidRef="{3772160A-9114-4324-B83F-A1E1BAB65B82}"/>
  2932.                     <AccessDescList>
  2933.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2934.                     </AccessDescList>
  2935.                     <PropertyDescList>
  2936.                         <PropertyDesc idRef="20" propType="simple">
  2937.                             <SimpleValue valType="int">1432</SimpleValue>
  2938.                         </PropertyDesc>
  2939.                         <PropertyDesc idRef="5" propType="objRef">
  2940.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2941.                         </PropertyDesc>
  2942.                         <PropertyDesc idRef="21" propType="simple">
  2943.                             <SimpleValue valType="str">FTP saint scan</SimpleValue>
  2944.                         </PropertyDesc>
  2945.                         <PropertyDesc idRef="30" propType="simple">
  2946.                             <SimpleValue valType="binary">0B00000000000000000000000000000070617373202D7361696E74</SimpleValue>
  2947.                         </PropertyDesc>
  2948.                     </PropertyDescList>
  2949.                 </Rule>
  2950.                 <Rule guid="{FBBF6169-4EB2-4C39-98C8-63DCD653A0ED}">
  2951.                     <ObjDescRef guidRef="{5838FB67-526E-4310-A296-D205B9F51CCA}"/>
  2952.                     <AccessDescList>
  2953.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2954.                     </AccessDescList>
  2955.                     <PropertyDescList>
  2956.                         <PropertyDesc idRef="20" propType="simple">
  2957.                             <SimpleValue valType="int">1436</SimpleValue>
  2958.                         </PropertyDesc>
  2959.                         <PropertyDesc idRef="5" propType="objRef">
  2960.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2961.                         </PropertyDesc>
  2962.                         <PropertyDesc idRef="21" propType="simple">
  2963.                             <SimpleValue valType="str">FTP satan scan</SimpleValue>
  2964.                         </PropertyDesc>
  2965.                         <PropertyDesc idRef="30" propType="simple">
  2966.                             <SimpleValue valType="binary">0B00000000000000000000000000000070617373202D736174616E</SimpleValue>
  2967.                         </PropertyDesc>
  2968.                     </PropertyDescList>
  2969.                 </Rule>
  2970.                 <Rule guid="{D81CB16F-247A-4FFA-9286-30509B4CD889}">
  2971.                     <ObjDescRef guidRef="{14FBE6BB-7630-4952-A587-3BC7A7CABBD0}"/>
  2972.                     <AccessDescList>
  2973.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2974.                     </AccessDescList>
  2975.                     <PropertyDescList>
  2976.                         <PropertyDesc idRef="20" propType="simple">
  2977.                             <SimpleValue valType="int">1440</SimpleValue>
  2978.                         </PropertyDesc>
  2979.                         <PropertyDesc idRef="5" propType="objRef">
  2980.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  2981.                         </PropertyDesc>
  2982.                         <PropertyDesc idRef="21" propType="simple">
  2983.                             <SimpleValue valType="str">FTP serv-u directory transversal</SimpleValue>
  2984.                         </PropertyDesc>
  2985.                         <PropertyDesc idRef="30" propType="simple">
  2986.                             <SimpleValue valType="binary">050000000000000000000000000001002E2532302E</SimpleValue>
  2987.                         </PropertyDesc>
  2988.                     </PropertyDescList>
  2989.                 </Rule>
  2990.                 <Rule guid="{EDA6CF74-6DF2-4BD5-9BC5-E9EB208787CA}">
  2991.                     <ObjDescRef guidRef="{01F959F9-4190-4668-9959-C8B381DC9BED}"/>
  2992.                     <AccessDescList>
  2993.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  2994.                     </AccessDescList>
  2995.                     <PropertyDescList>
  2996.                         <PropertyDesc idRef="20" propType="simple">
  2997.                             <SimpleValue valType="int">1444</SimpleValue>
  2998.                         </PropertyDesc>
  2999.                         <PropertyDesc idRef="5" propType="objRef">
  3000.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3001.                         </PropertyDesc>
  3002.                         <PropertyDesc idRef="21" propType="simple">
  3003.                             <SimpleValue valType="str">FTP site exec</SimpleValue>
  3004.                         </PropertyDesc>
  3005.                         <PropertyDesc idRef="30" propType="simple">
  3006.                             <SimpleValue valType="binary">050000000000000000000000000001007369746520</SimpleValue>
  3007.                         </PropertyDesc>
  3008.                         <PropertyDesc idRef="30" propType="simple">
  3009.                             <SimpleValue valType="binary">06000000040000000000000000000100206578656320</SimpleValue>
  3010.                         </PropertyDesc>
  3011.                     </PropertyDescList>
  3012.                 </Rule>
  3013.                 <Rule guid="{A68A42A9-BC1F-4774-959F-1FCFF776D2D4}">
  3014.                     <ObjDescRef guidRef="{935197C8-C9B5-4802-8B4D-F53F11487981}"/>
  3015.                     <AccessDescList>
  3016.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3017.                     </AccessDescList>
  3018.                     <PropertyDescList>
  3019.                         <PropertyDesc idRef="20" propType="simple">
  3020.                             <SimpleValue valType="int">1448</SimpleValue>
  3021.                         </PropertyDesc>
  3022.                         <PropertyDesc idRef="5" propType="objRef">
  3023.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3024.                         </PropertyDesc>
  3025.                         <PropertyDesc idRef="21" propType="simple">
  3026.                             <SimpleValue valType="str">FTP tar parameters</SimpleValue>
  3027.                         </PropertyDesc>
  3028.                         <PropertyDesc idRef="30" propType="simple">
  3029.                             <SimpleValue valType="binary">050000000000000000000000000001005245545220</SimpleValue>
  3030.                         </PropertyDesc>
  3031.                         <PropertyDesc idRef="30" propType="simple">
  3032.                             <SimpleValue valType="binary">17000000000000000000000000000100202D2D7573652D636F6D70726573732D70726F6772616D</SimpleValue>
  3033.                         </PropertyDesc>
  3034.                     </PropertyDescList>
  3035.                 </Rule>
  3036.                 <Rule guid="{BD982C85-81B6-462A-9E56-7877FB547B8F}">
  3037.                     <ObjDescRef guidRef="{B253E874-340A-4FE7-BB02-AC75F1660364}"/>
  3038.                     <AccessDescList>
  3039.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3040.                     </AccessDescList>
  3041.                     <PropertyDescList>
  3042.                         <PropertyDesc idRef="20" propType="simple">
  3043.                             <SimpleValue valType="int">2172</SimpleValue>
  3044.                         </PropertyDesc>
  3045.                         <PropertyDesc idRef="5" propType="objRef">
  3046.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3047.                         </PropertyDesc>
  3048.                         <PropertyDesc idRef="21" propType="simple">
  3049.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3050.                         </PropertyDesc>
  3051.                         <PropertyDesc idRef="30" propType="simple">
  3052.                             <SimpleValue valType="binary">0800000000000000080000000000010053544F5220314D42</SimpleValue>
  3053.                         </PropertyDesc>
  3054.                     </PropertyDescList>
  3055.                 </Rule>
  3056.                 <Rule guid="{463E0E75-8381-4A69-9E99-EA8A6FB2C668}">
  3057.                     <ObjDescRef guidRef="{1802AE83-273D-49F4-8483-CF344C5FAA7F}"/>
  3058.                     <AccessDescList>
  3059.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3060.                     </AccessDescList>
  3061.                     <PropertyDescList>
  3062.                         <PropertyDesc idRef="20" propType="simple">
  3063.                             <SimpleValue valType="int">2176</SimpleValue>
  3064.                         </PropertyDesc>
  3065.                         <PropertyDesc idRef="5" propType="objRef">
  3066.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3067.                         </PropertyDesc>
  3068.                         <PropertyDesc idRef="21" propType="simple">
  3069.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3070.                         </PropertyDesc>
  3071.                         <PropertyDesc idRef="30" propType="simple">
  3072.                             <SimpleValue valType="binary">080000000000000008000000000001005245545220314D42</SimpleValue>
  3073.                         </PropertyDesc>
  3074.                     </PropertyDescList>
  3075.                 </Rule>
  3076.                 <Rule guid="{658B5026-3C69-4C3D-B2A9-C5BC8084C73D}">
  3077.                     <ObjDescRef guidRef="{2EA3C3BF-D871-4B91-9A24-64868569BC92}"/>
  3078.                     <AccessDescList>
  3079.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3080.                     </AccessDescList>
  3081.                     <PropertyDescList>
  3082.                         <PropertyDesc idRef="20" propType="simple">
  3083.                             <SimpleValue valType="int">2180</SimpleValue>
  3084.                         </PropertyDesc>
  3085.                         <PropertyDesc idRef="5" propType="objRef">
  3086.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3087.                         </PropertyDesc>
  3088.                         <PropertyDesc idRef="21" propType="simple">
  3089.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3090.                         </PropertyDesc>
  3091.                         <PropertyDesc idRef="30" propType="simple">
  3092.                             <SimpleValue valType="binary">06000000000000000600000000000100435744202F20</SimpleValue>
  3093.                         </PropertyDesc>
  3094.                     </PropertyDescList>
  3095.                 </Rule>
  3096.                 <Rule guid="{C73A0D95-86F2-4C2F-B20A-4889D30077F5}">
  3097.                     <ObjDescRef guidRef="{B53EDFDE-1DFC-40CA-9609-E364EDACED8F}"/>
  3098.                     <AccessDescList>
  3099.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3100.                     </AccessDescList>
  3101.                     <PropertyDescList>
  3102.                         <PropertyDesc idRef="20" propType="simple">
  3103.                             <SimpleValue valType="int">2184</SimpleValue>
  3104.                         </PropertyDesc>
  3105.                         <PropertyDesc idRef="5" propType="objRef">
  3106.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3107.                         </PropertyDesc>
  3108.                         <PropertyDesc idRef="21" propType="simple">
  3109.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3110.                         </PropertyDesc>
  3111.                         <PropertyDesc idRef="30" propType="simple">
  3112.                             <SimpleValue valType="binary">050000000000000005000000000001004357442020</SimpleValue>
  3113.                         </PropertyDesc>
  3114.                     </PropertyDescList>
  3115.                 </Rule>
  3116.                 <Rule guid="{0956EFE0-0C48-4A4B-8F3A-9ED612E2F9FB}">
  3117.                     <ObjDescRef guidRef="{85E178B4-C6AC-42B9-B59B-732A403AF3C4}"/>
  3118.                     <AccessDescList>
  3119.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3120.                     </AccessDescList>
  3121.                     <PropertyDescList>
  3122.                         <PropertyDesc idRef="20" propType="simple">
  3123.                             <SimpleValue valType="int">2188</SimpleValue>
  3124.                         </PropertyDesc>
  3125.                         <PropertyDesc idRef="5" propType="objRef">
  3126.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3127.                         </PropertyDesc>
  3128.                         <PropertyDesc idRef="21" propType="simple">
  3129.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3130.                         </PropertyDesc>
  3131.                         <PropertyDesc idRef="30" propType="simple">
  3132.                             <SimpleValue valType="binary">050000000000000005000000000001004D4B442020</SimpleValue>
  3133.                         </PropertyDesc>
  3134.                     </PropertyDescList>
  3135.                 </Rule>
  3136.                 <Rule guid="{2B8AFABB-D2B6-4C65-AC77-7B55923E1034}">
  3137.                     <ObjDescRef guidRef="{B369756F-0FC3-4D78-961D-0400AC2436D7}"/>
  3138.                     <AccessDescList>
  3139.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3140.                     </AccessDescList>
  3141.                     <PropertyDescList>
  3142.                         <PropertyDesc idRef="20" propType="simple">
  3143.                             <SimpleValue valType="int">2192</SimpleValue>
  3144.                         </PropertyDesc>
  3145.                         <PropertyDesc idRef="5" propType="objRef">
  3146.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3147.                         </PropertyDesc>
  3148.                         <PropertyDesc idRef="21" propType="simple">
  3149.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3150.                         </PropertyDesc>
  3151.                         <PropertyDesc idRef="30" propType="simple">
  3152.                             <SimpleValue valType="binary">050000000000000005000000000001004D4B44202E</SimpleValue>
  3153.                         </PropertyDesc>
  3154.                     </PropertyDescList>
  3155.                 </Rule>
  3156.                 <Rule guid="{1087951A-D2E4-4E80-B777-296BAC9A744B}">
  3157.                     <ObjDescRef guidRef="{F7DC6827-E09B-45B5-ABB3-A61F4E552AD5}"/>
  3158.                     <AccessDescList>
  3159.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3160.                     </AccessDescList>
  3161.                     <PropertyDescList>
  3162.                         <PropertyDesc idRef="20" propType="simple">
  3163.                             <SimpleValue valType="int">2216</SimpleValue>
  3164.                         </PropertyDesc>
  3165.                         <PropertyDesc idRef="5" propType="objRef">
  3166.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3167.                         </PropertyDesc>
  3168.                         <PropertyDesc idRef="21" propType="simple">
  3169.                             <SimpleValue valType="str">FTP \</SimpleValue>
  3170.                         </PropertyDesc>
  3171.                         <PropertyDesc idRef="30" propType="simple">
  3172.                             <SimpleValue valType="binary">060000000000000006000000000001004D4B44202F20</SimpleValue>
  3173.                         </PropertyDesc>
  3174.                     </PropertyDescList>
  3175.                 </Rule>
  3176.                 <Rule guid="{4EA4137F-A1BE-4113-A2F2-5D6AA4EE1980}">
  3177.                     <ObjDescRef guidRef="{55AFBEBF-CEAC-4828-B640-206FD7A8380E}"/>
  3178.                     <AccessDescList>
  3179.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3180.                     </AccessDescList>
  3181.                     <PropertyDescList>
  3182.                         <PropertyDesc idRef="20" propType="simple">
  3183.                             <SimpleValue valType="int">4916</SimpleValue>
  3184.                         </PropertyDesc>
  3185.                         <PropertyDesc idRef="5" propType="objRef">
  3186.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3187.                         </PropertyDesc>
  3188.                         <PropertyDesc idRef="21" propType="simple">
  3189.                             <SimpleValue valType="str">FTP CWD ...</SimpleValue>
  3190.                         </PropertyDesc>
  3191.                         <PropertyDesc idRef="30" propType="simple">
  3192.                             <SimpleValue valType="binary">0400000000000000000000000000000043574420</SimpleValue>
  3193.                         </PropertyDesc>
  3194.                         <PropertyDesc idRef="30" propType="simple">
  3195.                             <SimpleValue valType="binary">04000000000000000000000000000000202E2E2E</SimpleValue>
  3196.                         </PropertyDesc>
  3197.                     </PropertyDescList>
  3198.                 </Rule>
  3199.                 <Rule guid="{E918A6CA-8698-4C0F-B800-6B425904952D}">
  3200.                     <ObjDescRef guidRef="{AC5583C1-122E-4AB2-BBF2-4744830431E0}"/>
  3201.                     <AccessDescList>
  3202.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3203.                     </AccessDescList>
  3204.                     <PropertyDescList>
  3205.                         <PropertyDesc idRef="20" propType="simple">
  3206.                             <SimpleValue valType="int">5508</SimpleValue>
  3207.                         </PropertyDesc>
  3208.                         <PropertyDesc idRef="5" propType="objRef">
  3209.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3210.                         </PropertyDesc>
  3211.                         <PropertyDesc idRef="21" propType="simple">
  3212.                             <SimpleValue valType="str">FTP wu-ftp file completion attempt [</SimpleValue>
  3213.                         </PropertyDesc>
  3214.                         <PropertyDesc idRef="30" propType="simple">
  3215.                             <SimpleValue valType="binary">010000000000000000000000000000007E</SimpleValue>
  3216.                         </PropertyDesc>
  3217.                         <PropertyDesc idRef="30" propType="simple">
  3218.                             <SimpleValue valType="binary">010000000000000000000000000000005B</SimpleValue>
  3219.                         </PropertyDesc>
  3220.                     </PropertyDescList>
  3221.                 </Rule>
  3222.                 <Rule guid="{976CE1D4-FCB1-46D6-B79E-7EBFC9669EAC}">
  3223.                     <ObjDescRef guidRef="{0A5214ED-7E00-48E5-9A5C-F44195A9164F}"/>
  3224.                     <AccessDescList>
  3225.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3226.                     </AccessDescList>
  3227.                     <PropertyDescList>
  3228.                         <PropertyDesc idRef="20" propType="simple">
  3229.                             <SimpleValue valType="int">5512</SimpleValue>
  3230.                         </PropertyDesc>
  3231.                         <PropertyDesc idRef="5" propType="objRef">
  3232.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3233.                         </PropertyDesc>
  3234.                         <PropertyDesc idRef="21" propType="simple">
  3235.                             <SimpleValue valType="str">FTP wu-ftp file completion attempt {</SimpleValue>
  3236.                         </PropertyDesc>
  3237.                         <PropertyDesc idRef="30" propType="simple">
  3238.                             <SimpleValue valType="binary">010000000000000000000000000000007E</SimpleValue>
  3239.                         </PropertyDesc>
  3240.                         <PropertyDesc idRef="30" propType="simple">
  3241.                             <SimpleValue valType="binary">010000000000000000000000000000007B</SimpleValue>
  3242.                         </PropertyDesc>
  3243.                     </PropertyDescList>
  3244.                 </Rule>
  3245.                 <Rule guid="{9DC9C398-23BB-4296-898D-1C08B2F7A891}">
  3246.                     <ObjDescRef guidRef="{C0F467E6-5E27-423E-96E8-189530345E36}"/>
  3247.                     <AccessDescList>
  3248.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3249.                     </AccessDescList>
  3250.                     <PropertyDescList>
  3251.                         <PropertyDesc idRef="20" propType="simple">
  3252.                             <SimpleValue valType="int">5516</SimpleValue>
  3253.                         </PropertyDesc>
  3254.                         <PropertyDesc idRef="5" propType="objRef">
  3255.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3256.                         </PropertyDesc>
  3257.                         <PropertyDesc idRef="21" propType="simple">
  3258.                             <SimpleValue valType="str">FTP STAT overflow</SimpleValue>
  3259.                         </PropertyDesc>
  3260.                         <PropertyDesc idRef="29" propType="simple">
  3261.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3262.                         </PropertyDesc>
  3263.                         <PropertyDesc idRef="30" propType="simple">
  3264.                             <SimpleValue valType="binary">050000000000000000000000000001005354415420</SimpleValue>
  3265.                         </PropertyDesc>
  3266.                     </PropertyDescList>
  3267.                 </Rule>
  3268.                 <Rule guid="{22B09355-FDEA-4A6B-9DE8-5AAE5B2D3419}">
  3269.                     <ObjDescRef guidRef="{5DFBDC3C-9062-405E-B26C-C37E755A34AC}"/>
  3270.                     <AccessDescList>
  3271.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3272.                     </AccessDescList>
  3273.                     <PropertyDescList>
  3274.                         <PropertyDesc idRef="20" propType="simple">
  3275.                             <SimpleValue valType="int">5780</SimpleValue>
  3276.                         </PropertyDesc>
  3277.                         <PropertyDesc idRef="5" propType="objRef">
  3278.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3279.                         </PropertyDesc>
  3280.                         <PropertyDesc idRef="21" propType="simple">
  3281.                             <SimpleValue valType="str">FTP file_id.diz access</SimpleValue>
  3282.                         </PropertyDesc>
  3283.                         <PropertyDesc idRef="30" propType="simple">
  3284.                             <SimpleValue valType="binary">050000000000000000000000000001005245545220</SimpleValue>
  3285.                         </PropertyDesc>
  3286.                         <PropertyDesc idRef="30" propType="simple">
  3287.                             <SimpleValue valType="binary">0B00000000000000000000000000010066696C655F69642E64697A</SimpleValue>
  3288.                         </PropertyDesc>
  3289.                     </PropertyDescList>
  3290.                 </Rule>
  3291.                 <Rule guid="{379CBA18-8908-4343-BCC4-3B2011A33EE5}">
  3292.                     <ObjDescRef guidRef="{FB6C9251-E03F-42D7-9057-21192CFC4432}"/>
  3293.                     <AccessDescList>
  3294.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3295.                     </AccessDescList>
  3296.                     <PropertyDescList>
  3297.                         <PropertyDesc idRef="20" propType="simple">
  3298.                             <SimpleValue valType="int">6116</SimpleValue>
  3299.                         </PropertyDesc>
  3300.                         <PropertyDesc idRef="5" propType="objRef">
  3301.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3302.                         </PropertyDesc>
  3303.                         <PropertyDesc idRef="21" propType="simple">
  3304.                             <SimpleValue valType="str">FTP SITE CHOWN overflow</SimpleValue>
  3305.                         </PropertyDesc>
  3306.                         <PropertyDesc idRef="29" propType="simple">
  3307.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3308.                         </PropertyDesc>
  3309.                         <PropertyDesc idRef="30" propType="simple">
  3310.                             <SimpleValue valType="binary">0B000000000000000000000000000100534954452043484F574E20</SimpleValue>
  3311.                         </PropertyDesc>
  3312.                     </PropertyDescList>
  3313.                 </Rule>
  3314.                 <Rule guid="{CA403AA2-E307-4282-8A69-0E9317ABC71C}">
  3315.                     <ObjDescRef guidRef="{8F64C81A-1410-4727-9AD0-001305B136C7}"/>
  3316.                     <AccessDescList>
  3317.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3318.                     </AccessDescList>
  3319.                     <PropertyDescList>
  3320.                         <PropertyDesc idRef="20" propType="simple">
  3321.                             <SimpleValue valType="int">6120</SimpleValue>
  3322.                         </PropertyDesc>
  3323.                         <PropertyDesc idRef="5" propType="objRef">
  3324.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3325.                         </PropertyDesc>
  3326.                         <PropertyDesc idRef="21" propType="simple">
  3327.                             <SimpleValue valType="str">FTP format string attempt</SimpleValue>
  3328.                         </PropertyDesc>
  3329.                         <PropertyDesc idRef="30" propType="simple">
  3330.                             <SimpleValue valType="binary">020000000000000000000000000001002570</SimpleValue>
  3331.                         </PropertyDesc>
  3332.                     </PropertyDescList>
  3333.                 </Rule>
  3334.                 <Rule guid="{EF863636-84D3-4844-B0C8-EE950E93AA33}">
  3335.                     <ObjDescRef guidRef="{9B2E5E82-725C-40F5-BA60-4092B3E3CF88}"/>
  3336.                     <AccessDescList>
  3337.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3338.                     </AccessDescList>
  3339.                     <PropertyDescList>
  3340.                         <PropertyDesc idRef="20" propType="simple">
  3341.                             <SimpleValue valType="int">6248</SimpleValue>
  3342.                         </PropertyDesc>
  3343.                         <PropertyDesc idRef="5" propType="objRef">
  3344.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3345.                         </PropertyDesc>
  3346.                         <PropertyDesc idRef="21" propType="simple">
  3347.                             <SimpleValue valType="str">FTP SITE CHOWN overflow attempt</SimpleValue>
  3348.                         </PropertyDesc>
  3349.                         <PropertyDesc idRef="29" propType="simple">
  3350.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3351.                         </PropertyDesc>
  3352.                         <PropertyDesc idRef="30" propType="simple">
  3353.                             <SimpleValue valType="binary">050000000000000000000000000001005349544520</SimpleValue>
  3354.                         </PropertyDesc>
  3355.                         <PropertyDesc idRef="30" propType="simple">
  3356.                             <SimpleValue valType="binary">070000000000000000000000000001002043484F574E20</SimpleValue>
  3357.                         </PropertyDesc>
  3358.                     </PropertyDescList>
  3359.                 </Rule>
  3360.                 <Rule guid="{3F6B3480-EAA8-44F8-B631-F41733CF0AB2}">
  3361.                     <ObjDescRef guidRef="{8BC33BBC-EB22-42D1-9A10-52F23B55E60D}"/>
  3362.                     <AccessDescList>
  3363.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3364.                     </AccessDescList>
  3365.                     <PropertyDescList>
  3366.                         <PropertyDesc idRef="20" propType="simple">
  3367.                             <SimpleValue valType="int">6484</SimpleValue>
  3368.                         </PropertyDesc>
  3369.                         <PropertyDesc idRef="5" propType="objRef">
  3370.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3371.                         </PropertyDesc>
  3372.                         <PropertyDesc idRef="21" propType="simple">
  3373.                             <SimpleValue valType="str">FTP CMD overflow</SimpleValue>
  3374.                         </PropertyDesc>
  3375.                         <PropertyDesc idRef="29" propType="simple">
  3376.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3377.                         </PropertyDesc>
  3378.                         <PropertyDesc idRef="30" propType="simple">
  3379.                             <SimpleValue valType="binary">04000000000000000000000000000100434D4420</SimpleValue>
  3380.                         </PropertyDesc>
  3381.                     </PropertyDescList>
  3382.                 </Rule>
  3383.                 <Rule guid="{26C13C77-6088-4CC2-85C4-F9D1F5D49BB9}">
  3384.                     <ObjDescRef guidRef="{1A53F312-3A79-4DAB-9792-7468DC76E15D}"/>
  3385.                     <AccessDescList>
  3386.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3387.                     </AccessDescList>
  3388.                     <PropertyDescList>
  3389.                         <PropertyDesc idRef="20" propType="simple">
  3390.                             <SimpleValue valType="int">6488</SimpleValue>
  3391.                         </PropertyDesc>
  3392.                         <PropertyDesc idRef="5" propType="objRef">
  3393.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3394.                         </PropertyDesc>
  3395.                         <PropertyDesc idRef="21" propType="simple">
  3396.                             <SimpleValue valType="str">FTP RNFR ././ attempt</SimpleValue>
  3397.                         </PropertyDesc>
  3398.                         <PropertyDesc idRef="30" propType="simple">
  3399.                             <SimpleValue valType="binary">05000000000000000000000000000100524E465220</SimpleValue>
  3400.                         </PropertyDesc>
  3401.                         <PropertyDesc idRef="30" propType="simple">
  3402.                             <SimpleValue valType="binary">05000000000000000000000000000100202E2F2E2F</SimpleValue>
  3403.                         </PropertyDesc>
  3404.                     </PropertyDescList>
  3405.                 </Rule>
  3406.                 <Rule guid="{92D96F57-0CCC-4076-901C-14853893CA00}">
  3407.                     <ObjDescRef guidRef="{66DEBAD2-8CAD-4FC9-B065-86713FDA1A25}"/>
  3408.                     <AccessDescList>
  3409.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3410.                     </AccessDescList>
  3411.                     <PropertyDescList>
  3412.                         <PropertyDesc idRef="20" propType="simple">
  3413.                             <SimpleValue valType="int">6492</SimpleValue>
  3414.                         </PropertyDesc>
  3415.                         <PropertyDesc idRef="5" propType="objRef">
  3416.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3417.                         </PropertyDesc>
  3418.                         <PropertyDesc idRef="21" propType="simple">
  3419.                             <SimpleValue valType="str">FTP invalid MODE</SimpleValue>
  3420.                         </PropertyDesc>
  3421.                         <PropertyDesc idRef="30" propType="simple">
  3422.                             <SimpleValue valType="binary">050000000000000000000000000001004D4F444520</SimpleValue>
  3423.                         </PropertyDesc>
  3424.                         <PropertyDesc idRef="30" propType="simple">
  3425.                             <SimpleValue valType="binary">020000000000000000000000010001002042</SimpleValue>
  3426.                         </PropertyDesc>
  3427.                         <PropertyDesc idRef="30" propType="simple">
  3428.                             <SimpleValue valType="binary">020000000000000000000000010001002041</SimpleValue>
  3429.                         </PropertyDesc>
  3430.                         <PropertyDesc idRef="30" propType="simple">
  3431.                             <SimpleValue valType="binary">020000000000000000000000010001002053</SimpleValue>
  3432.                         </PropertyDesc>
  3433.                         <PropertyDesc idRef="30" propType="simple">
  3434.                             <SimpleValue valType="binary">020000000000000000000000010001002043</SimpleValue>
  3435.                         </PropertyDesc>
  3436.                     </PropertyDescList>
  3437.                 </Rule>
  3438.                 <Rule guid="{AD010D7E-B4B3-4D6C-9307-20029B49DBD4}">
  3439.                     <ObjDescRef guidRef="{07BBCC09-8DE8-4D58-AFE5-F3026B92395D}"/>
  3440.                     <AccessDescList>
  3441.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3442.                     </AccessDescList>
  3443.                     <PropertyDescList>
  3444.                         <PropertyDesc idRef="20" propType="simple">
  3445.                             <SimpleValue valType="int">6496</SimpleValue>
  3446.                         </PropertyDesc>
  3447.                         <PropertyDesc idRef="5" propType="objRef">
  3448.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3449.                         </PropertyDesc>
  3450.                         <PropertyDesc idRef="21" propType="simple">
  3451.                             <SimpleValue valType="str">FTP large PWD command</SimpleValue>
  3452.                         </PropertyDesc>
  3453.                         <PropertyDesc idRef="30" propType="simple">
  3454.                             <SimpleValue valType="binary">03000000000000000000000000000100505744</SimpleValue>
  3455.                         </PropertyDesc>
  3456.                         <PropertyDesc idRef="29" propType="simple">
  3457.                             <SimpleValue valType="int" valRelation="==">10</SimpleValue>
  3458.                         </PropertyDesc>
  3459.                     </PropertyDescList>
  3460.                 </Rule>
  3461.                 <Rule guid="{F7224363-555F-478E-8EB4-A954830D09AE}">
  3462.                     <ObjDescRef guidRef="{E360F19B-3ED1-4108-A44B-EB4E2894967C}"/>
  3463.                     <AccessDescList>
  3464.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3465.                     </AccessDescList>
  3466.                     <PropertyDescList>
  3467.                         <PropertyDesc idRef="20" propType="simple">
  3468.                             <SimpleValue valType="int">6500</SimpleValue>
  3469.                         </PropertyDesc>
  3470.                         <PropertyDesc idRef="5" propType="objRef">
  3471.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3472.                         </PropertyDesc>
  3473.                         <PropertyDesc idRef="21" propType="simple">
  3474.                             <SimpleValue valType="str">FTP large SYST command</SimpleValue>
  3475.                         </PropertyDesc>
  3476.                         <PropertyDesc idRef="30" propType="simple">
  3477.                             <SimpleValue valType="binary">0400000000000000000000000000010053595354</SimpleValue>
  3478.                         </PropertyDesc>
  3479.                         <PropertyDesc idRef="29" propType="simple">
  3480.                             <SimpleValue valType="int" valRelation="==">10</SimpleValue>
  3481.                         </PropertyDesc>
  3482.                     </PropertyDescList>
  3483.                 </Rule>
  3484.                 <Rule guid="{9D52FF8E-DD4D-476E-86C8-EC72113504D6}">
  3485.                     <ObjDescRef guidRef="{B709EC9F-8056-40DB-B88F-13B5712815D4}"/>
  3486.                     <AccessDescList>
  3487.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3488.                     </AccessDescList>
  3489.                     <PropertyDescList>
  3490.                         <PropertyDesc idRef="20" propType="simple">
  3491.                             <SimpleValue valType="int">6520</SimpleValue>
  3492.                         </PropertyDesc>
  3493.                         <PropertyDesc idRef="5" propType="objRef">
  3494.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3495.                         </PropertyDesc>
  3496.                         <PropertyDesc idRef="21" propType="simple">
  3497.                             <SimpleValue valType="str">FTP EXPLOIT CWD overflow</SimpleValue>
  3498.                         </PropertyDesc>
  3499.                         <PropertyDesc idRef="29" propType="simple">
  3500.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3501.                         </PropertyDesc>
  3502.                         <PropertyDesc idRef="30" propType="simple">
  3503.                             <SimpleValue valType="binary">0400000000000000000000000000010043574420</SimpleValue>
  3504.                         </PropertyDesc>
  3505.                     </PropertyDescList>
  3506.                 </Rule>
  3507.                 <Rule guid="{F1CC7CC2-98F2-40C7-8675-42EF2EA289D1}">
  3508.                     <ObjDescRef guidRef="{E036B183-4E39-4A37-93CF-646281BA0E26}"/>
  3509.                     <AccessDescList>
  3510.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3511.                     </AccessDescList>
  3512.                     <PropertyDescList>
  3513.                         <PropertyDesc idRef="20" propType="simple">
  3514.                             <SimpleValue valType="int">6688</SimpleValue>
  3515.                         </PropertyDesc>
  3516.                         <PropertyDesc idRef="5" propType="objRef">
  3517.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3518.                         </PropertyDesc>
  3519.                         <PropertyDesc idRef="21" propType="simple">
  3520.                             <SimpleValue valType="str">FTP CWD ~&lt;NEWLINE&gt; attempt</SimpleValue>
  3521.                         </PropertyDesc>
  3522.                         <PropertyDesc idRef="30" propType="simple">
  3523.                             <SimpleValue valType="binary">0400000000000000000000000000000043574420</SimpleValue>
  3524.                         </PropertyDesc>
  3525.                         <PropertyDesc idRef="30" propType="simple">
  3526.                             <SimpleValue valType="binary">03000000000000000000000000000000207E0A</SimpleValue>
  3527.                         </PropertyDesc>
  3528.                     </PropertyDescList>
  3529.                 </Rule>
  3530.                 <Rule guid="{DAE6BDFF-6AC9-4F39-9F54-55F5F3C88D82}">
  3531.                     <ObjDescRef guidRef="{8AD4A403-2B9B-4584-9941-921150FC9998}"/>
  3532.                     <AccessDescList>
  3533.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3534.                     </AccessDescList>
  3535.                     <PropertyDescList>
  3536.                         <PropertyDesc idRef="20" propType="simple">
  3537.                             <SimpleValue valType="int">6912</SimpleValue>
  3538.                         </PropertyDesc>
  3539.                         <PropertyDesc idRef="5" propType="objRef">
  3540.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3541.                         </PropertyDesc>
  3542.                         <PropertyDesc idRef="21" propType="simple">
  3543.                             <SimpleValue valType="str">FTP CWD ~&lt;CR&gt;&lt;NEWLINE&gt; attempt</SimpleValue>
  3544.                         </PropertyDesc>
  3545.                         <PropertyDesc idRef="30" propType="simple">
  3546.                             <SimpleValue valType="binary">0400000000000000000000000000000043574420</SimpleValue>
  3547.                         </PropertyDesc>
  3548.                         <PropertyDesc idRef="30" propType="simple">
  3549.                             <SimpleValue valType="binary">04000000000000000000000000000000207E0D0A</SimpleValue>
  3550.                         </PropertyDesc>
  3551.                     </PropertyDescList>
  3552.                 </Rule>
  3553.                 <Rule guid="{9EAC73FA-BAD1-46AE-98A9-4E52FBF492C3}">
  3554.                     <ObjDescRef guidRef="{69CCA8AB-85D0-4137-AB83-A422F3C31F62}"/>
  3555.                     <AccessDescList>
  3556.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3557.                     </AccessDescList>
  3558.                     <PropertyDescList>
  3559.                         <PropertyDesc idRef="20" propType="simple">
  3560.                             <SimpleValue valType="int">6936</SimpleValue>
  3561.                         </PropertyDesc>
  3562.                         <PropertyDesc idRef="5" propType="objRef">
  3563.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3564.                         </PropertyDesc>
  3565.                         <PropertyDesc idRef="21" propType="simple">
  3566.                             <SimpleValue valType="str">FTP USER overflow attempt</SimpleValue>
  3567.                         </PropertyDesc>
  3568.                         <PropertyDesc idRef="29" propType="simple">
  3569.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3570.                         </PropertyDesc>
  3571.                         <PropertyDesc idRef="30" propType="simple">
  3572.                             <SimpleValue valType="binary">050000000000000000000000000001005553455220</SimpleValue>
  3573.                         </PropertyDesc>
  3574.                     </PropertyDescList>
  3575.                 </Rule>
  3576.                 <Rule guid="{4FFDB4E2-B91A-4D6D-B2FB-216B612505F6}">
  3577.                     <ObjDescRef guidRef="{5FE574D5-2D6C-40CF-8E5D-4A6952612536}"/>
  3578.                     <AccessDescList>
  3579.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3580.                     </AccessDescList>
  3581.                     <PropertyDescList>
  3582.                         <PropertyDesc idRef="20" propType="simple">
  3583.                             <SimpleValue valType="int">6992</SimpleValue>
  3584.                         </PropertyDesc>
  3585.                         <PropertyDesc idRef="5" propType="objRef">
  3586.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3587.                         </PropertyDesc>
  3588.                         <PropertyDesc idRef="21" propType="simple">
  3589.                             <SimpleValue valType="str">FTP command overflow attempt</SimpleValue>
  3590.                         </PropertyDesc>
  3591.                         <PropertyDesc idRef="29" propType="simple">
  3592.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  3593.                         </PropertyDesc>
  3594.                     </PropertyDescList>
  3595.                 </Rule>
  3596.                 <Rule guid="{4B629D5E-A763-46AC-99E3-11B95E3CBBF1}">
  3597.                     <ObjDescRef guidRef="{534E1C08-239E-43B5-BF6F-57DF2DBADAAC}"/>
  3598.                     <AccessDescList>
  3599.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3600.                     </AccessDescList>
  3601.                     <PropertyDescList>
  3602.                         <PropertyDesc idRef="20" propType="simple">
  3603.                             <SimpleValue valType="int">7108</SimpleValue>
  3604.                         </PropertyDesc>
  3605.                         <PropertyDesc idRef="5" propType="objRef">
  3606.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3607.                         </PropertyDesc>
  3608.                         <PropertyDesc idRef="21" propType="simple">
  3609.                             <SimpleValue valType="str">FTP EXPLOIT STAT * dos attempt</SimpleValue>
  3610.                         </PropertyDesc>
  3611.                         <PropertyDesc idRef="30" propType="simple">
  3612.                             <SimpleValue valType="binary">050000000000000000000000000001005354415420</SimpleValue>
  3613.                         </PropertyDesc>
  3614.                         <PropertyDesc idRef="30" propType="simple">
  3615.                             <SimpleValue valType="binary">010000000000000000000000000000002A</SimpleValue>
  3616.                         </PropertyDesc>
  3617.                     </PropertyDescList>
  3618.                 </Rule>
  3619.                 <Rule guid="{8CBEC7E4-6EA1-4345-BFA4-6761806FC08E}">
  3620.                     <ObjDescRef guidRef="{2CE9A7C2-F366-4E44-B843-CBA579F72A73}"/>
  3621.                     <AccessDescList>
  3622.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3623.                     </AccessDescList>
  3624.                     <PropertyDescList>
  3625.                         <PropertyDesc idRef="20" propType="simple">
  3626.                             <SimpleValue valType="int">7112</SimpleValue>
  3627.                         </PropertyDesc>
  3628.                         <PropertyDesc idRef="5" propType="objRef">
  3629.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3630.                         </PropertyDesc>
  3631.                         <PropertyDesc idRef="21" propType="simple">
  3632.                             <SimpleValue valType="str">FTP EXPLOIT STAT ? dos attempt</SimpleValue>
  3633.                         </PropertyDesc>
  3634.                         <PropertyDesc idRef="30" propType="simple">
  3635.                             <SimpleValue valType="binary">050000000000000000000000000001005354415420</SimpleValue>
  3636.                         </PropertyDesc>
  3637.                         <PropertyDesc idRef="30" propType="simple">
  3638.                             <SimpleValue valType="binary">010000000000000000000000000000003F</SimpleValue>
  3639.                         </PropertyDesc>
  3640.                     </PropertyDescList>
  3641.                 </Rule>
  3642.                 <Rule guid="{402215B0-03B0-4B06-B241-971A82DF6639}">
  3643.                     <ObjDescRef guidRef="{663BA2A3-6CC5-4F70-B855-5682D7BA642F}"/>
  3644.                     <AccessDescList>
  3645.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3646.                     </AccessDescList>
  3647.                     <PropertyDescList>
  3648.                         <PropertyDesc idRef="20" propType="simple">
  3649.                             <SimpleValue valType="int">7116</SimpleValue>
  3650.                         </PropertyDesc>
  3651.                         <PropertyDesc idRef="5" propType="objRef">
  3652.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3653.                         </PropertyDesc>
  3654.                         <PropertyDesc idRef="21" propType="simple">
  3655.                             <SimpleValue valType="str">FTP CWD .... attempt</SimpleValue>
  3656.                         </PropertyDesc>
  3657.                         <PropertyDesc idRef="30" propType="simple">
  3658.                             <SimpleValue valType="binary">0400000000000000000000000000000043574420</SimpleValue>
  3659.                         </PropertyDesc>
  3660.                         <PropertyDesc idRef="30" propType="simple">
  3661.                             <SimpleValue valType="binary">05000000000000000000000000000000202E2E2E2E</SimpleValue>
  3662.                         </PropertyDesc>
  3663.                     </PropertyDescList>
  3664.                 </Rule>
  3665.             </RuleByObjTypeList>
  3666.         </Profile>
  3667.         <Profile guid="{CEECA666-959F-4F73-AA2B-E2CC6BE7E0CA}">
  3668.             <ExecSetDescList/>
  3669.             <RuleByObjTypeList typeRef="262">
  3670.                 <Rule guid="{C10B0A51-3C41-4344-AE0F-73636CAF1339}">
  3671.                     <ObjDescRef guidRef="{D030BAF6-7557-46D7-9892-3B4BBB04FC9E}"/>
  3672.                     <AccessDescList>
  3673.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3674.                     </AccessDescList>
  3675.                     <PropertyDescList>
  3676.                         <PropertyDesc idRef="20" propType="simple">
  3677.                             <SimpleValue valType="int">884</SimpleValue>
  3678.                         </PropertyDesc>
  3679.                         <PropertyDesc idRef="5" propType="objRef">
  3680.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3681.                         </PropertyDesc>
  3682.                         <PropertyDesc idRef="21" propType="simple">
  3683.                             <SimpleValue valType="str">DDOS TFN Probe</SimpleValue>
  3684.                         </PropertyDesc>
  3685.                         <PropertyDesc idRef="24" propType="simple">
  3686.                             <SimpleValue valType="int" valRelation="==">678</SimpleValue>
  3687.                         </PropertyDesc>
  3688.                         <PropertyDesc idRef="30" propType="simple">
  3689.                             <SimpleValue valType="binary">0400000000000000000000000000000031323334</SimpleValue>
  3690.                         </PropertyDesc>
  3691.                     </PropertyDescList>
  3692.                 </Rule>
  3693.                 <Rule guid="{EA6800AE-AF6A-4D8D-BADA-8B185B03D97D}">
  3694.                     <ObjDescRef guidRef="{FC45B447-5D76-4054-99F9-C2D04B9A8180}"/>
  3695.                     <AccessDescList>
  3696.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3697.                     </AccessDescList>
  3698.                     <PropertyDescList>
  3699.                         <PropertyDesc idRef="20" propType="simple">
  3700.                             <SimpleValue valType="int">888</SimpleValue>
  3701.                         </PropertyDesc>
  3702.                         <PropertyDesc idRef="5" propType="objRef">
  3703.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3704.                         </PropertyDesc>
  3705.                         <PropertyDesc idRef="21" propType="simple">
  3706.                             <SimpleValue valType="str">DDOS tfn2k icmp possible communication</SimpleValue>
  3707.                         </PropertyDesc>
  3708.                         <PropertyDesc idRef="35" propType="simple">
  3709.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  3710.                         </PropertyDesc>
  3711.                         <PropertyDesc idRef="30" propType="simple">
  3712.                             <SimpleValue valType="binary">0A00000000000000000000000000000041414141414141414141</SimpleValue>
  3713.                         </PropertyDesc>
  3714.                     </PropertyDescList>
  3715.                 </Rule>
  3716.                 <Rule guid="{A6011705-013F-43CF-98DA-E168DCC98499}">
  3717.                     <ObjDescRef guidRef="{BB14CE4C-422D-4647-8392-89D1B737B8B1}"/>
  3718.                     <AccessDescList>
  3719.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3720.                     </AccessDescList>
  3721.                     <PropertyDescList>
  3722.                         <PropertyDesc idRef="20" propType="simple">
  3723.                             <SimpleValue valType="int">892</SimpleValue>
  3724.                         </PropertyDesc>
  3725.                         <PropertyDesc idRef="5" propType="objRef">
  3726.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3727.                         </PropertyDesc>
  3728.                         <PropertyDesc idRef="21" propType="simple">
  3729.                             <SimpleValue valType="str">DDOS Trin00\:DaemontoMaster(PONGdetected)</SimpleValue>
  3730.                         </PropertyDesc>
  3731.                         <PropertyDesc idRef="30" propType="simple">
  3732.                             <SimpleValue valType="binary">04000000000000000000000000000000504F4E47</SimpleValue>
  3733.                         </PropertyDesc>
  3734.                     </PropertyDescList>
  3735.                 </Rule>
  3736.                 <Rule guid="{AA7C78E0-326C-46E4-B767-A6E55F6CA118}">
  3737.                     <ObjDescRef guidRef="{D76FCF94-A334-4F70-984C-AED4C4ED8419}"/>
  3738.                     <AccessDescList>
  3739.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3740.                     </AccessDescList>
  3741.                     <PropertyDescList>
  3742.                         <PropertyDesc idRef="20" propType="simple">
  3743.                             <SimpleValue valType="int">896</SimpleValue>
  3744.                         </PropertyDesc>
  3745.                         <PropertyDesc idRef="5" propType="objRef">
  3746.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3747.                         </PropertyDesc>
  3748.                         <PropertyDesc idRef="21" propType="simple">
  3749.                             <SimpleValue valType="str">DDOS Stacheldraht server-spoof</SimpleValue>
  3750.                         </PropertyDesc>
  3751.                         <PropertyDesc idRef="35" propType="simple">
  3752.                             <SimpleValue valType="int" valRelation="==">666</SimpleValue>
  3753.                         </PropertyDesc>
  3754.                     </PropertyDescList>
  3755.                 </Rule>
  3756.                 <Rule guid="{A5319A3D-259E-4C7E-84CB-3B784920C53E}">
  3757.                     <ObjDescRef guidRef="{3D92843A-15CD-4D3B-AD8C-A6A3E7245F35}"/>
  3758.                     <AccessDescList>
  3759.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3760.                     </AccessDescList>
  3761.                     <PropertyDescList>
  3762.                         <PropertyDesc idRef="20" propType="simple">
  3763.                             <SimpleValue valType="int">900</SimpleValue>
  3764.                         </PropertyDesc>
  3765.                         <PropertyDesc idRef="5" propType="objRef">
  3766.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3767.                         </PropertyDesc>
  3768.                         <PropertyDesc idRef="21" propType="simple">
  3769.                             <SimpleValue valType="str">DDOS Stacheldraht server-response-gag</SimpleValue>
  3770.                         </PropertyDesc>
  3771.                         <PropertyDesc idRef="30" propType="simple">
  3772.                             <SimpleValue valType="binary">060000000000000000000000000000007369636B656E</SimpleValue>
  3773.                         </PropertyDesc>
  3774.                         <PropertyDesc idRef="35" propType="simple">
  3775.                             <SimpleValue valType="int" valRelation="==">669</SimpleValue>
  3776.                         </PropertyDesc>
  3777.                     </PropertyDescList>
  3778.                 </Rule>
  3779.                 <Rule guid="{4F8A3C7A-F4EB-4672-A889-8C523D5C85FA}">
  3780.                     <ObjDescRef guidRef="{B34991EF-04D3-45B4-A368-5A8DC9D4424F}"/>
  3781.                     <AccessDescList>
  3782.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3783.                     </AccessDescList>
  3784.                     <PropertyDescList>
  3785.                         <PropertyDesc idRef="20" propType="simple">
  3786.                             <SimpleValue valType="int">904</SimpleValue>
  3787.                         </PropertyDesc>
  3788.                         <PropertyDesc idRef="5" propType="objRef">
  3789.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3790.                         </PropertyDesc>
  3791.                         <PropertyDesc idRef="21" propType="simple">
  3792.                             <SimpleValue valType="str">DDOS Stacheldraht server-response</SimpleValue>
  3793.                         </PropertyDesc>
  3794.                         <PropertyDesc idRef="30" propType="simple">
  3795.                             <SimpleValue valType="binary">060000000000000000000000000000006669636B656E</SimpleValue>
  3796.                         </PropertyDesc>
  3797.                         <PropertyDesc idRef="35" propType="simple">
  3798.                             <SimpleValue valType="int" valRelation="==">667</SimpleValue>
  3799.                         </PropertyDesc>
  3800.                     </PropertyDescList>
  3801.                 </Rule>
  3802.                 <Rule guid="{BC3DD1EB-5FF4-4791-AE0E-EFC9F4665C05}">
  3803.                     <ObjDescRef guidRef="{8AD72D39-3C9A-4AFA-9323-FB5D2BFF4935}"/>
  3804.                     <AccessDescList>
  3805.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3806.                     </AccessDescList>
  3807.                     <PropertyDescList>
  3808.                         <PropertyDesc idRef="20" propType="simple">
  3809.                             <SimpleValue valType="int">908</SimpleValue>
  3810.                         </PropertyDesc>
  3811.                         <PropertyDesc idRef="5" propType="objRef">
  3812.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3813.                         </PropertyDesc>
  3814.                         <PropertyDesc idRef="21" propType="simple">
  3815.                             <SimpleValue valType="str">DDOS Stacheldraht client-spoofworks</SimpleValue>
  3816.                         </PropertyDesc>
  3817.                         <PropertyDesc idRef="30" propType="simple">
  3818.                             <SimpleValue valType="binary">0A00000000000000000000000000000073706F6F66776F726B73</SimpleValue>
  3819.                         </PropertyDesc>
  3820.                         <PropertyDesc idRef="35" propType="simple">
  3821.                             <SimpleValue valType="int" valRelation="==">1000</SimpleValue>
  3822.                         </PropertyDesc>
  3823.                     </PropertyDescList>
  3824.                 </Rule>
  3825.                 <Rule guid="{10D23655-9C57-4F4B-9B3B-AA6917011C42}">
  3826.                     <ObjDescRef guidRef="{56D2D34E-C4EE-4B33-9084-2438D02E9779}"/>
  3827.                     <AccessDescList>
  3828.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3829.                     </AccessDescList>
  3830.                     <PropertyDescList>
  3831.                         <PropertyDesc idRef="20" propType="simple">
  3832.                             <SimpleValue valType="int">912</SimpleValue>
  3833.                         </PropertyDesc>
  3834.                         <PropertyDesc idRef="5" propType="objRef">
  3835.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3836.                         </PropertyDesc>
  3837.                         <PropertyDesc idRef="21" propType="simple">
  3838.                             <SimpleValue valType="str">DDOS TFN client command BE</SimpleValue>
  3839.                         </PropertyDesc>
  3840.                         <PropertyDesc idRef="35" propType="simple">
  3841.                             <SimpleValue valType="int" valRelation="==">456</SimpleValue>
  3842.                         </PropertyDesc>
  3843.                         <PropertyDesc idRef="36" propType="simple">
  3844.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  3845.                         </PropertyDesc>
  3846.                     </PropertyDescList>
  3847.                 </Rule>
  3848.                 <Rule guid="{E814146E-F241-4004-8C5A-4D9FF77E7001}">
  3849.                     <ObjDescRef guidRef="{C2E4D336-BD6F-4C6C-BCD1-77CB1F5F9A7D}"/>
  3850.                     <AccessDescList>
  3851.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3852.                     </AccessDescList>
  3853.                     <PropertyDescList>
  3854.                         <PropertyDesc idRef="20" propType="simple">
  3855.                             <SimpleValue valType="int">916</SimpleValue>
  3856.                         </PropertyDesc>
  3857.                         <PropertyDesc idRef="5" propType="objRef">
  3858.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3859.                         </PropertyDesc>
  3860.                         <PropertyDesc idRef="21" propType="simple">
  3861.                             <SimpleValue valType="str">DDOS Stacheldraht client-check</SimpleValue>
  3862.                         </PropertyDesc>
  3863.                         <PropertyDesc idRef="30" propType="simple">
  3864.                             <SimpleValue valType="binary">06000000000000000000000000000000736B696C6C7A</SimpleValue>
  3865.                         </PropertyDesc>
  3866.                         <PropertyDesc idRef="35" propType="simple">
  3867.                             <SimpleValue valType="int" valRelation="==">666</SimpleValue>
  3868.                         </PropertyDesc>
  3869.                     </PropertyDescList>
  3870.                 </Rule>
  3871.                 <Rule guid="{42BAD10D-EC64-4422-AB27-B171B0D145E5}">
  3872.                     <ObjDescRef guidRef="{7599F8A8-6B0F-434E-A184-219E5D527EBA}"/>
  3873.                     <AccessDescList>
  3874.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3875.                     </AccessDescList>
  3876.                     <PropertyDescList>
  3877.                         <PropertyDesc idRef="20" propType="simple">
  3878.                             <SimpleValue valType="int">920</SimpleValue>
  3879.                         </PropertyDesc>
  3880.                         <PropertyDesc idRef="5" propType="objRef">
  3881.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3882.                         </PropertyDesc>
  3883.                         <PropertyDesc idRef="21" propType="simple">
  3884.                             <SimpleValue valType="str">DDOS shaft client to handler</SimpleValue>
  3885.                         </PropertyDesc>
  3886.                         <PropertyDesc idRef="31" propType="simple">
  3887.                             <SimpleValue valType="int">135168</SimpleValue>
  3888.                         </PropertyDesc>
  3889.                     </PropertyDescList>
  3890.                 </Rule>
  3891.                 <Rule guid="{CC01E497-2E74-4803-A1B3-8F4EDEA61069}">
  3892.                     <ObjDescRef guidRef="{044BB7E1-04A4-4DAE-AB59-D17442535945}"/>
  3893.                     <AccessDescList>
  3894.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3895.                     </AccessDescList>
  3896.                     <PropertyDescList>
  3897.                         <PropertyDesc idRef="20" propType="simple">
  3898.                             <SimpleValue valType="int">924</SimpleValue>
  3899.                         </PropertyDesc>
  3900.                         <PropertyDesc idRef="5" propType="objRef">
  3901.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3902.                         </PropertyDesc>
  3903.                         <PropertyDesc idRef="21" propType="simple">
  3904.                             <SimpleValue valType="str">DDOS Trin00\:DaemontoMaster(messagedetected)</SimpleValue>
  3905.                         </PropertyDesc>
  3906.                         <PropertyDesc idRef="30" propType="simple">
  3907.                             <SimpleValue valType="binary">030000000000000000000000000000006C3434</SimpleValue>
  3908.                         </PropertyDesc>
  3909.                     </PropertyDescList>
  3910.                 </Rule>
  3911.                 <Rule guid="{F0E7C05B-260F-4ED9-9727-7A73B8D16F67}">
  3912.                     <ObjDescRef guidRef="{FFCF5214-D01E-4A18-B165-123F16AFDD65}"/>
  3913.                     <AccessDescList>
  3914.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3915.                     </AccessDescList>
  3916.                     <PropertyDescList>
  3917.                         <PropertyDesc idRef="20" propType="simple">
  3918.                             <SimpleValue valType="int">928</SimpleValue>
  3919.                         </PropertyDesc>
  3920.                         <PropertyDesc idRef="5" propType="objRef">
  3921.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3922.                         </PropertyDesc>
  3923.                         <PropertyDesc idRef="21" propType="simple">
  3924.                             <SimpleValue valType="str">DDOS Trin00\:DaemontoMaster(*HELLO*detected)</SimpleValue>
  3925.                         </PropertyDesc>
  3926.                         <PropertyDesc idRef="30" propType="simple">
  3927.                             <SimpleValue valType="binary">070000000000000000000000000000002A48454C4C4F2A</SimpleValue>
  3928.                         </PropertyDesc>
  3929.                     </PropertyDescList>
  3930.                 </Rule>
  3931.                 <Rule guid="{0DB856B2-3FDB-49EA-9749-9124F0B78A3C}">
  3932.                     <ObjDescRef guidRef="{018862DF-337D-4A07-8870-A091CB833771}"/>
  3933.                     <AccessDescList>
  3934.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3935.                     </AccessDescList>
  3936.                     <PropertyDescList>
  3937.                         <PropertyDesc idRef="20" propType="simple">
  3938.                             <SimpleValue valType="int">932</SimpleValue>
  3939.                         </PropertyDesc>
  3940.                         <PropertyDesc idRef="5" propType="objRef">
  3941.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3942.                         </PropertyDesc>
  3943.                         <PropertyDesc idRef="21" propType="simple">
  3944.                             <SimpleValue valType="str">DDOS Trin00\:Attacker to Master default startup password</SimpleValue>
  3945.                         </PropertyDesc>
  3946.                         <PropertyDesc idRef="31" propType="simple">
  3947.                             <SimpleValue valType="int">135168</SimpleValue>
  3948.                         </PropertyDesc>
  3949.                         <PropertyDesc idRef="30" propType="simple">
  3950.                             <SimpleValue valType="binary">0E00000000000000000000000000000062657461616C6D6F7374646F6E65</SimpleValue>
  3951.                         </PropertyDesc>
  3952.                     </PropertyDescList>
  3953.                 </Rule>
  3954.                 <Rule guid="{EF00BB85-A67A-4A57-BBC8-EC094FE483E8}">
  3955.                     <ObjDescRef guidRef="{916CC15E-FD65-41FC-A73A-082AEEF0F757}"/>
  3956.                     <AccessDescList>
  3957.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3958.                     </AccessDescList>
  3959.                     <PropertyDescList>
  3960.                         <PropertyDesc idRef="20" propType="simple">
  3961.                             <SimpleValue valType="int">936</SimpleValue>
  3962.                         </PropertyDesc>
  3963.                         <PropertyDesc idRef="5" propType="objRef">
  3964.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3965.                         </PropertyDesc>
  3966.                         <PropertyDesc idRef="21" propType="simple">
  3967.                             <SimpleValue valType="str">DDOS Trin00 Attacker to Master default password</SimpleValue>
  3968.                         </PropertyDesc>
  3969.                         <PropertyDesc idRef="31" propType="simple">
  3970.                             <SimpleValue valType="int">135168</SimpleValue>
  3971.                         </PropertyDesc>
  3972.                         <PropertyDesc idRef="30" propType="simple">
  3973.                             <SimpleValue valType="binary">06000000000000000000000000000000674F72617665</SimpleValue>
  3974.                         </PropertyDesc>
  3975.                     </PropertyDescList>
  3976.                 </Rule>
  3977.                 <Rule guid="{85431F3D-9B08-4E1D-9EE2-675C79986DDA}">
  3978.                     <ObjDescRef guidRef="{B67957DF-A0F8-4524-B75C-341EEF16AE97}"/>
  3979.                     <AccessDescList>
  3980.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  3981.                     </AccessDescList>
  3982.                     <PropertyDescList>
  3983.                         <PropertyDesc idRef="20" propType="simple">
  3984.                             <SimpleValue valType="int">940</SimpleValue>
  3985.                         </PropertyDesc>
  3986.                         <PropertyDesc idRef="5" propType="objRef">
  3987.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  3988.                         </PropertyDesc>
  3989.                         <PropertyDesc idRef="21" propType="simple">
  3990.                             <SimpleValue valType="str">DDOS Trin00 Attacker to Master default mdie password</SimpleValue>
  3991.                         </PropertyDesc>
  3992.                         <PropertyDesc idRef="31" propType="simple">
  3993.                             <SimpleValue valType="int">135168</SimpleValue>
  3994.                         </PropertyDesc>
  3995.                         <PropertyDesc idRef="30" propType="simple">
  3996.                             <SimpleValue valType="binary">060000000000000000000000000000006B696C6C6D65</SimpleValue>
  3997.                         </PropertyDesc>
  3998.                     </PropertyDescList>
  3999.                 </Rule>
  4000.                 <Rule guid="{2CC964E8-9AA2-44C9-87B7-31CD3C604913}">
  4001.                     <ObjDescRef guidRef="{3A1F2771-3F2A-4834-8559-DF382F16B400}"/>
  4002.                     <AccessDescList>
  4003.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4004.                     </AccessDescList>
  4005.                     <PropertyDescList>
  4006.                         <PropertyDesc idRef="20" propType="simple">
  4007.                             <SimpleValue valType="int">944</SimpleValue>
  4008.                         </PropertyDesc>
  4009.                         <PropertyDesc idRef="5" propType="objRef">
  4010.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4011.                         </PropertyDesc>
  4012.                         <PropertyDesc idRef="21" propType="simple">
  4013.                             <SimpleValue valType="str">DDOS Stacheldraht client-check-gag</SimpleValue>
  4014.                         </PropertyDesc>
  4015.                         <PropertyDesc idRef="30" propType="simple">
  4016.                             <SimpleValue valType="binary">0B000000000000000000000000000000676573756E646865697421</SimpleValue>
  4017.                         </PropertyDesc>
  4018.                         <PropertyDesc idRef="35" propType="simple">
  4019.                             <SimpleValue valType="int" valRelation="==">668</SimpleValue>
  4020.                         </PropertyDesc>
  4021.                     </PropertyDescList>
  4022.                 </Rule>
  4023.                 <Rule guid="{E60518DF-4FD9-4A22-A550-247AA7B84CFC}">
  4024.                     <ObjDescRef guidRef="{90BED409-B0FC-47D8-9C22-B2EE5BEB08BB}"/>
  4025.                     <AccessDescList>
  4026.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4027.                     </AccessDescList>
  4028.                     <PropertyDescList>
  4029.                         <PropertyDesc idRef="20" propType="simple">
  4030.                             <SimpleValue valType="int">948</SimpleValue>
  4031.                         </PropertyDesc>
  4032.                         <PropertyDesc idRef="5" propType="objRef">
  4033.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4034.                         </PropertyDesc>
  4035.                         <PropertyDesc idRef="21" propType="simple">
  4036.                             <SimpleValue valType="str">DDOS Trin00\:MastertoDaemon(defaultpassdetected!)</SimpleValue>
  4037.                         </PropertyDesc>
  4038.                         <PropertyDesc idRef="30" propType="simple">
  4039.                             <SimpleValue valType="binary">070000000000000000000000000000006C34346164736C</SimpleValue>
  4040.                         </PropertyDesc>
  4041.                     </PropertyDescList>
  4042.                 </Rule>
  4043.                 <Rule guid="{800E0515-BD54-4754-9BBB-E9D43281CB87}">
  4044.                     <ObjDescRef guidRef="{71A395B8-4CFB-4409-96C0-E2CBA7A7E7C4}"/>
  4045.                     <AccessDescList>
  4046.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4047.                     </AccessDescList>
  4048.                     <PropertyDescList>
  4049.                         <PropertyDesc idRef="20" propType="simple">
  4050.                             <SimpleValue valType="int">952</SimpleValue>
  4051.                         </PropertyDesc>
  4052.                         <PropertyDesc idRef="5" propType="objRef">
  4053.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4054.                         </PropertyDesc>
  4055.                         <PropertyDesc idRef="21" propType="simple">
  4056.                             <SimpleValue valType="str">DDOS TFN server response</SimpleValue>
  4057.                         </PropertyDesc>
  4058.                         <PropertyDesc idRef="30" propType="simple">
  4059.                             <SimpleValue valType="binary">130000000000000000000000000000007368656C6C20626F756E6420746F20706F7274</SimpleValue>
  4060.                         </PropertyDesc>
  4061.                         <PropertyDesc idRef="35" propType="simple">
  4062.                             <SimpleValue valType="int" valRelation="==">123</SimpleValue>
  4063.                         </PropertyDesc>
  4064.                         <PropertyDesc idRef="36" propType="simple">
  4065.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  4066.                         </PropertyDesc>
  4067.                     </PropertyDescList>
  4068.                 </Rule>
  4069.                 <Rule guid="{57364676-F05C-4D6B-9EFE-67A90E6D7034}">
  4070.                     <ObjDescRef guidRef="{BEFE74D7-9B45-454F-98F3-F96D1C02C9DF}"/>
  4071.                     <AccessDescList>
  4072.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4073.                     </AccessDescList>
  4074.                     <PropertyDescList>
  4075.                         <PropertyDesc idRef="20" propType="simple">
  4076.                             <SimpleValue valType="int">956</SimpleValue>
  4077.                         </PropertyDesc>
  4078.                         <PropertyDesc idRef="5" propType="objRef">
  4079.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4080.                         </PropertyDesc>
  4081.                         <PropertyDesc idRef="21" propType="simple">
  4082.                             <SimpleValue valType="str">DDOS shaft handler to agent</SimpleValue>
  4083.                         </PropertyDesc>
  4084.                         <PropertyDesc idRef="30" propType="simple">
  4085.                             <SimpleValue valType="binary">0B000000000000000000000000000000616C6976652074696A6775</SimpleValue>
  4086.                         </PropertyDesc>
  4087.                     </PropertyDescList>
  4088.                 </Rule>
  4089.                 <Rule guid="{3B1E6959-7948-453F-9939-93B4234597DE}">
  4090.                     <ObjDescRef guidRef="{725012C8-DE88-4182-854B-D0E80EA839E3}"/>
  4091.                     <AccessDescList>
  4092.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4093.                     </AccessDescList>
  4094.                     <PropertyDescList>
  4095.                         <PropertyDesc idRef="20" propType="simple">
  4096.                             <SimpleValue valType="int">960</SimpleValue>
  4097.                         </PropertyDesc>
  4098.                         <PropertyDesc idRef="5" propType="objRef">
  4099.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4100.                         </PropertyDesc>
  4101.                         <PropertyDesc idRef="21" propType="simple">
  4102.                             <SimpleValue valType="str">DDOS shaft agent to handler</SimpleValue>
  4103.                         </PropertyDesc>
  4104.                         <PropertyDesc idRef="30" propType="simple">
  4105.                             <SimpleValue valType="binary">05000000000000000000000000000000616C697665</SimpleValue>
  4106.                         </PropertyDesc>
  4107.                     </PropertyDescList>
  4108.                 </Rule>
  4109.                 <Rule guid="{47BB0D98-4F71-4862-A966-F9096D1A8CA9}">
  4110.                     <ObjDescRef guidRef="{91C57010-D3AA-4858-AA5C-0C3282314C80}"/>
  4111.                     <AccessDescList>
  4112.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4113.                     </AccessDescList>
  4114.                     <PropertyDescList>
  4115.                         <PropertyDesc idRef="20" propType="simple">
  4116.                             <SimpleValue valType="int">964</SimpleValue>
  4117.                         </PropertyDesc>
  4118.                         <PropertyDesc idRef="5" propType="objRef">
  4119.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4120.                         </PropertyDesc>
  4121.                         <PropertyDesc idRef="21" propType="simple">
  4122.                             <SimpleValue valType="str">DDOS shaft synflood</SimpleValue>
  4123.                         </PropertyDesc>
  4124.                         <PropertyDesc idRef="31" propType="simple">
  4125.                             <SimpleValue valType="int">512</SimpleValue>
  4126.                         </PropertyDesc>
  4127.                         <PropertyDesc idRef="32" propType="simple">
  4128.                             <SimpleValue valType="int" valRelation="==">674711609</SimpleValue>
  4129.                         </PropertyDesc>
  4130.                     </PropertyDescList>
  4131.                 </Rule>
  4132.                 <Rule guid="{1E06C021-888F-4315-A120-151DFCD46D60}">
  4133.                     <ObjDescRef guidRef="{D1106E3F-9EE5-4174-B9C2-AC6F6D2818DC}"/>
  4134.                     <AccessDescList>
  4135.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4136.                     </AccessDescList>
  4137.                     <PropertyDescList>
  4138.                         <PropertyDesc idRef="20" propType="simple">
  4139.                             <SimpleValue valType="int">965</SimpleValue>
  4140.                         </PropertyDesc>
  4141.                         <PropertyDesc idRef="5" propType="objRef">
  4142.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4143.                         </PropertyDesc>
  4144.                         <PropertyDesc idRef="21" propType="simple">
  4145.                             <SimpleValue valType="str">DDOS shaft synflood</SimpleValue>
  4146.                         </PropertyDesc>
  4147.                         <PropertyDesc idRef="31" propType="simple">
  4148.                             <SimpleValue valType="int">512</SimpleValue>
  4149.                         </PropertyDesc>
  4150.                         <PropertyDesc idRef="32" propType="simple">
  4151.                             <SimpleValue valType="int" valRelation="==">674711609</SimpleValue>
  4152.                         </PropertyDesc>
  4153.                     </PropertyDescList>
  4154.                 </Rule>
  4155.                 <Rule guid="{3FCC7ED9-CB96-4D45-9D54-208F640F5279}">
  4156.                     <ObjDescRef guidRef="{1FA16355-DB82-4D6F-99F8-42BE20BF9CF9}"/>
  4157.                     <AccessDescList>
  4158.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4159.                     </AccessDescList>
  4160.                     <PropertyDescList>
  4161.                         <PropertyDesc idRef="20" propType="simple">
  4162.                             <SimpleValue valType="int">972</SimpleValue>
  4163.                         </PropertyDesc>
  4164.                         <PropertyDesc idRef="5" propType="objRef">
  4165.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4166.                         </PropertyDesc>
  4167.                         <PropertyDesc idRef="21" propType="simple">
  4168.                             <SimpleValue valType="str">DDOS mstream agent to handler</SimpleValue>
  4169.                         </PropertyDesc>
  4170.                         <PropertyDesc idRef="30" propType="simple">
  4171.                             <SimpleValue valType="binary">090000000000000000000000000000006E6577736572766572</SimpleValue>
  4172.                         </PropertyDesc>
  4173.                     </PropertyDescList>
  4174.                 </Rule>
  4175.                 <Rule guid="{D264E0F1-0E95-462C-B2B6-701C2ED935D6}">
  4176.                     <ObjDescRef guidRef="{6B93F315-ACBA-4F65-B42B-C6D01B42CFBF}"/>
  4177.                     <AccessDescList>
  4178.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4179.                     </AccessDescList>
  4180.                     <PropertyDescList>
  4181.                         <PropertyDesc idRef="20" propType="simple">
  4182.                             <SimpleValue valType="int">976</SimpleValue>
  4183.                         </PropertyDesc>
  4184.                         <PropertyDesc idRef="5" propType="objRef">
  4185.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4186.                         </PropertyDesc>
  4187.                         <PropertyDesc idRef="21" propType="simple">
  4188.                             <SimpleValue valType="str">DDOS mstream handler to agent</SimpleValue>
  4189.                         </PropertyDesc>
  4190.                         <PropertyDesc idRef="30" propType="simple">
  4191.                             <SimpleValue valType="binary">0700000000000000000000000000000073747265616D2F</SimpleValue>
  4192.                         </PropertyDesc>
  4193.                     </PropertyDescList>
  4194.                 </Rule>
  4195.                 <Rule guid="{73923219-C4EF-4D7B-85D9-E6AC1C8ED848}">
  4196.                     <ObjDescRef guidRef="{C1BB708A-9269-45F0-8622-5271F5E4CE69}"/>
  4197.                     <AccessDescList>
  4198.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4199.                     </AccessDescList>
  4200.                     <PropertyDescList>
  4201.                         <PropertyDesc idRef="20" propType="simple">
  4202.                             <SimpleValue valType="int">980</SimpleValue>
  4203.                         </PropertyDesc>
  4204.                         <PropertyDesc idRef="5" propType="objRef">
  4205.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4206.                         </PropertyDesc>
  4207.                         <PropertyDesc idRef="21" propType="simple">
  4208.                             <SimpleValue valType="str">DDOS mstream handler ping to agent</SimpleValue>
  4209.                         </PropertyDesc>
  4210.                         <PropertyDesc idRef="30" propType="simple">
  4211.                             <SimpleValue valType="binary">0400000000000000000000000000000070696E67</SimpleValue>
  4212.                         </PropertyDesc>
  4213.                     </PropertyDescList>
  4214.                 </Rule>
  4215.                 <Rule guid="{37FB83F4-B0DC-44DC-8283-F34A7E242CF3}">
  4216.                     <ObjDescRef guidRef="{E614E506-B503-412B-B83E-2F6021B6D8A7}"/>
  4217.                     <AccessDescList>
  4218.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4219.                     </AccessDescList>
  4220.                     <PropertyDescList>
  4221.                         <PropertyDesc idRef="20" propType="simple">
  4222.                             <SimpleValue valType="int">984</SimpleValue>
  4223.                         </PropertyDesc>
  4224.                         <PropertyDesc idRef="5" propType="objRef">
  4225.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4226.                         </PropertyDesc>
  4227.                         <PropertyDesc idRef="21" propType="simple">
  4228.                             <SimpleValue valType="str">DDOS mstream agent pong to handler</SimpleValue>
  4229.                         </PropertyDesc>
  4230.                         <PropertyDesc idRef="30" propType="simple">
  4231.                             <SimpleValue valType="binary">04000000000000000000000000000000706F6E67</SimpleValue>
  4232.                         </PropertyDesc>
  4233.                     </PropertyDescList>
  4234.                 </Rule>
  4235.                 <Rule guid="{9FA98507-F015-4FB0-A06E-E18A2FB0E8DA}">
  4236.                     <ObjDescRef guidRef="{1CA92506-9A24-484F-8448-425297F2964F}"/>
  4237.                     <AccessDescList>
  4238.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4239.                     </AccessDescList>
  4240.                     <PropertyDescList>
  4241.                         <PropertyDesc idRef="20" propType="simple">
  4242.                             <SimpleValue valType="int">988</SimpleValue>
  4243.                         </PropertyDesc>
  4244.                         <PropertyDesc idRef="5" propType="objRef">
  4245.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4246.                         </PropertyDesc>
  4247.                         <PropertyDesc idRef="21" propType="simple">
  4248.                             <SimpleValue valType="str">DDOS mstream client to handler</SimpleValue>
  4249.                         </PropertyDesc>
  4250.                         <PropertyDesc idRef="30" propType="simple">
  4251.                             <SimpleValue valType="binary">010000000000000000000000000000003E</SimpleValue>
  4252.                         </PropertyDesc>
  4253.                         <PropertyDesc idRef="31" propType="simple">
  4254.                             <SimpleValue valType="int">135168</SimpleValue>
  4255.                         </PropertyDesc>
  4256.                     </PropertyDescList>
  4257.                 </Rule>
  4258.                 <Rule guid="{D6EE0BB7-2C32-475A-83C3-D7A639317412}">
  4259.                     <ObjDescRef guidRef="{4AA75BA2-47B1-40D1-9221-06050D818348}"/>
  4260.                     <AccessDescList>
  4261.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4262.                     </AccessDescList>
  4263.                     <PropertyDescList>
  4264.                         <PropertyDesc idRef="20" propType="simple">
  4265.                             <SimpleValue valType="int">992</SimpleValue>
  4266.                         </PropertyDesc>
  4267.                         <PropertyDesc idRef="5" propType="objRef">
  4268.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4269.                         </PropertyDesc>
  4270.                         <PropertyDesc idRef="21" propType="simple">
  4271.                             <SimpleValue valType="str">DDOS mstream handler to client</SimpleValue>
  4272.                         </PropertyDesc>
  4273.                         <PropertyDesc idRef="30" propType="simple">
  4274.                             <SimpleValue valType="binary">010000000000000000000000000000003E</SimpleValue>
  4275.                         </PropertyDesc>
  4276.                         <PropertyDesc idRef="31" propType="simple">
  4277.                             <SimpleValue valType="int">135168</SimpleValue>
  4278.                         </PropertyDesc>
  4279.                     </PropertyDescList>
  4280.                 </Rule>
  4281.                 <Rule guid="{973A4365-66AD-4F9F-A6F3-D9CDD32EEB6D}">
  4282.                     <ObjDescRef guidRef="{19433F30-18BB-42E0-8F64-BC28B75EEC4F}"/>
  4283.                     <AccessDescList>
  4284.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4285.                     </AccessDescList>
  4286.                     <PropertyDescList>
  4287.                         <PropertyDesc idRef="20" propType="simple">
  4288.                             <SimpleValue valType="int">996</SimpleValue>
  4289.                         </PropertyDesc>
  4290.                         <PropertyDesc idRef="5" propType="objRef">
  4291.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4292.                         </PropertyDesc>
  4293.                         <PropertyDesc idRef="21" propType="simple">
  4294.                             <SimpleValue valType="str">DDOS mstream client to handler</SimpleValue>
  4295.                         </PropertyDesc>
  4296.                         <PropertyDesc idRef="31" propType="simple">
  4297.                             <SimpleValue valType="int">512</SimpleValue>
  4298.                         </PropertyDesc>
  4299.                     </PropertyDescList>
  4300.                 </Rule>
  4301.                 <Rule guid="{49182DF2-EE1D-4043-BCBA-61A82BC0A241}">
  4302.                     <ObjDescRef guidRef="{05F8DE6E-D38E-4959-8699-DCE6FC0BD4E5}"/>
  4303.                     <AccessDescList>
  4304.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4305.                     </AccessDescList>
  4306.                     <PropertyDescList>
  4307.                         <PropertyDesc idRef="20" propType="simple">
  4308.                             <SimpleValue valType="int">1000</SimpleValue>
  4309.                         </PropertyDesc>
  4310.                         <PropertyDesc idRef="5" propType="objRef">
  4311.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4312.                         </PropertyDesc>
  4313.                         <PropertyDesc idRef="21" propType="simple">
  4314.                             <SimpleValue valType="str">DDOS mstream handler to client</SimpleValue>
  4315.                         </PropertyDesc>
  4316.                         <PropertyDesc idRef="30" propType="simple">
  4317.                             <SimpleValue valType="binary">010000000000000000000000000000003E</SimpleValue>
  4318.                         </PropertyDesc>
  4319.                         <PropertyDesc idRef="31" propType="simple">
  4320.                             <SimpleValue valType="int">135168</SimpleValue>
  4321.                         </PropertyDesc>
  4322.                     </PropertyDescList>
  4323.                 </Rule>
  4324.                 <Rule guid="{445095AD-52D6-4F58-AD13-799BB1ED7C29}">
  4325.                     <ObjDescRef guidRef="{9B9C3E4F-2A8F-4E8D-8558-A16F6D62CD23}"/>
  4326.                     <AccessDescList>
  4327.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4328.                     </AccessDescList>
  4329.                     <PropertyDescList>
  4330.                         <PropertyDesc idRef="20" propType="simple">
  4331.                             <SimpleValue valType="int">1004</SimpleValue>
  4332.                         </PropertyDesc>
  4333.                         <PropertyDesc idRef="5" propType="objRef">
  4334.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4335.                         </PropertyDesc>
  4336.                         <PropertyDesc idRef="21" propType="simple">
  4337.                             <SimpleValue valType="str">DDOS - TFN client command LE</SimpleValue>
  4338.                         </PropertyDesc>
  4339.                         <PropertyDesc idRef="35" propType="simple">
  4340.                             <SimpleValue valType="int" valRelation="==">51201</SimpleValue>
  4341.                         </PropertyDesc>
  4342.                         <PropertyDesc idRef="36" propType="simple">
  4343.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  4344.                         </PropertyDesc>
  4345.                     </PropertyDescList>
  4346.                 </Rule>
  4347.             </RuleByObjTypeList>
  4348.         </Profile>
  4349.         <Profile guid="{2A85E40F-6C21-4F11-9EEC-358BD7504829}">
  4350.             <ExecSetDescList/>
  4351.             <RuleByObjTypeList typeRef="262">
  4352.                 <Rule guid="{61942D95-B744-4E64-A59D-63F364CCE307}">
  4353.                     <ObjDescRef guidRef="{1D59B8E7-32AF-47A0-A88F-71BCF9F83B6A}"/>
  4354.                     <AccessDescList>
  4355.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4356.                     </AccessDescList>
  4357.                     <PropertyDescList>
  4358.                         <PropertyDesc idRef="20" propType="simple">
  4359.                             <SimpleValue valType="int">1008</SimpleValue>
  4360.                         </PropertyDesc>
  4361.                         <PropertyDesc idRef="5" propType="objRef">
  4362.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4363.                         </PropertyDesc>
  4364.                         <PropertyDesc idRef="21" propType="simple">
  4365.                             <SimpleValue valType="str">DNS named iquery attempt</SimpleValue>
  4366.                         </PropertyDesc>
  4367.                         <PropertyDesc idRef="30" propType="simple">
  4368.                             <SimpleValue valType="binary">0A00000002000000100000000000000009800000000100000000</SimpleValue>
  4369.                         </PropertyDesc>
  4370.                     </PropertyDescList>
  4371.                 </Rule>
  4372.                 <Rule guid="{D7B94375-AED9-492E-896D-6B6308FECAE7}">
  4373.                     <ObjDescRef guidRef="{A021B2C5-6E15-4B26-950E-219076A687F7}"/>
  4374.                     <AccessDescList>
  4375.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4376.                     </AccessDescList>
  4377.                     <PropertyDescList>
  4378.                         <PropertyDesc idRef="20" propType="simple">
  4379.                             <SimpleValue valType="int">1012</SimpleValue>
  4380.                         </PropertyDesc>
  4381.                         <PropertyDesc idRef="5" propType="objRef">
  4382.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4383.                         </PropertyDesc>
  4384.                         <PropertyDesc idRef="21" propType="simple">
  4385.                             <SimpleValue valType="str">DNS SPOOF query response PTR with TTL\: 1 min. and no authority</SimpleValue>
  4386.                         </PropertyDesc>
  4387.                         <PropertyDesc idRef="30" propType="simple">
  4388.                             <SimpleValue valType="binary">0A00000000000000000000000000000085800001000100000000</SimpleValue>
  4389.                         </PropertyDesc>
  4390.                         <PropertyDesc idRef="30" propType="simple">
  4391.                             <SimpleValue valType="binary">0C000000000000000000000000000000C00C000C00010000003C000F</SimpleValue>
  4392.                         </PropertyDesc>
  4393.                     </PropertyDescList>
  4394.                 </Rule>
  4395.                 <Rule guid="{09785AA8-9E85-4A77-9E89-29D3B5B84CBB}">
  4396.                     <ObjDescRef guidRef="{059099DD-5677-4112-ADE1-2DEB06EE7B94}"/>
  4397.                     <AccessDescList>
  4398.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4399.                     </AccessDescList>
  4400.                     <PropertyDescList>
  4401.                         <PropertyDesc idRef="20" propType="simple">
  4402.                             <SimpleValue valType="int">1016</SimpleValue>
  4403.                         </PropertyDesc>
  4404.                         <PropertyDesc idRef="5" propType="objRef">
  4405.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4406.                         </PropertyDesc>
  4407.                         <PropertyDesc idRef="21" propType="simple">
  4408.                             <SimpleValue valType="str">DNS SPOOF query response with ttl\: 1 min. and no authority</SimpleValue>
  4409.                         </PropertyDesc>
  4410.                         <PropertyDesc idRef="30" propType="simple">
  4411.                             <SimpleValue valType="binary">0A00000000000000000000000000000081800001000100000000</SimpleValue>
  4412.                         </PropertyDesc>
  4413.                         <PropertyDesc idRef="30" propType="simple">
  4414.                             <SimpleValue valType="binary">0C000000000000000000000000000000C00C000100010000003C0004</SimpleValue>
  4415.                         </PropertyDesc>
  4416.                     </PropertyDescList>
  4417.                 </Rule>
  4418.                 <Rule guid="{D6D0CFBD-9060-41AF-BAED-1BFA2E3F3F3D}">
  4419.                     <ObjDescRef guidRef="{262E3D72-A856-420A-A9DE-DCC7A68B81C7}"/>
  4420.                     <AccessDescList>
  4421.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4422.                     </AccessDescList>
  4423.                     <PropertyDescList>
  4424.                         <PropertyDesc idRef="20" propType="simple">
  4425.                             <SimpleValue valType="int">1020</SimpleValue>
  4426.                         </PropertyDesc>
  4427.                         <PropertyDesc idRef="5" propType="objRef">
  4428.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4429.                         </PropertyDesc>
  4430.                         <PropertyDesc idRef="21" propType="simple">
  4431.                             <SimpleValue valType="str">DNS zone transfer</SimpleValue>
  4432.                         </PropertyDesc>
  4433.                         <PropertyDesc idRef="30" propType="simple">
  4434.                             <SimpleValue valType="binary">030000000D00000000000000000000000000FC</SimpleValue>
  4435.                         </PropertyDesc>
  4436.                     </PropertyDescList>
  4437.                 </Rule>
  4438.                 <Rule guid="{3751730A-5CC8-4BF3-A52C-B9D6C4F32C37}">
  4439.                     <ObjDescRef guidRef="{EC62ACCF-5C24-4D42-B49F-A5206070AAF8}"/>
  4440.                     <AccessDescList>
  4441.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4442.                     </AccessDescList>
  4443.                     <PropertyDescList>
  4444.                         <PropertyDesc idRef="20" propType="simple">
  4445.                             <SimpleValue valType="int">1024</SimpleValue>
  4446.                         </PropertyDesc>
  4447.                         <PropertyDesc idRef="5" propType="objRef">
  4448.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4449.                         </PropertyDesc>
  4450.                         <PropertyDesc idRef="21" propType="simple">
  4451.                             <SimpleValue valType="str">DNS named authors attempt</SimpleValue>
  4452.                         </PropertyDesc>
  4453.                         <PropertyDesc idRef="30" propType="simple">
  4454.                             <SimpleValue valType="binary">080000000C000000000000000000000007617574686F7273</SimpleValue>
  4455.                         </PropertyDesc>
  4456.                         <PropertyDesc idRef="30" propType="simple">
  4457.                             <SimpleValue valType="binary">050000000C00000000000000000001000462696E64</SimpleValue>
  4458.                         </PropertyDesc>
  4459.                     </PropertyDescList>
  4460.                 </Rule>
  4461.                 <Rule guid="{25674BE0-38AC-48A7-8995-926DF1F9D4E0}">
  4462.                     <ObjDescRef guidRef="{6EB63D06-60A4-43FD-90BD-0A96F1FA8D06}"/>
  4463.                     <AccessDescList>
  4464.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4465.                     </AccessDescList>
  4466.                     <PropertyDescList>
  4467.                         <PropertyDesc idRef="20" propType="simple">
  4468.                             <SimpleValue valType="int">1028</SimpleValue>
  4469.                         </PropertyDesc>
  4470.                         <PropertyDesc idRef="5" propType="objRef">
  4471.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4472.                         </PropertyDesc>
  4473.                         <PropertyDesc idRef="21" propType="simple">
  4474.                             <SimpleValue valType="str">DNS named version attempt</SimpleValue>
  4475.                         </PropertyDesc>
  4476.                         <PropertyDesc idRef="30" propType="simple">
  4477.                             <SimpleValue valType="binary">080000000C00000000000000000000000776657273696F6E</SimpleValue>
  4478.                         </PropertyDesc>
  4479.                         <PropertyDesc idRef="30" propType="simple">
  4480.                             <SimpleValue valType="binary">050000000C00000000000000000001000462696E64</SimpleValue>
  4481.                         </PropertyDesc>
  4482.                     </PropertyDescList>
  4483.                 </Rule>
  4484.                 <Rule guid="{A6E5A1DD-FF26-442C-94B6-7D6E14A1C3FB}">
  4485.                     <ObjDescRef guidRef="{4292F798-6A42-4228-B960-E12581E86E92}"/>
  4486.                     <AccessDescList>
  4487.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4488.                     </AccessDescList>
  4489.                     <PropertyDescList>
  4490.                         <PropertyDesc idRef="20" propType="simple">
  4491.                             <SimpleValue valType="int">1032</SimpleValue>
  4492.                         </PropertyDesc>
  4493.                         <PropertyDesc idRef="5" propType="objRef">
  4494.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4495.                         </PropertyDesc>
  4496.                         <PropertyDesc idRef="21" propType="simple">
  4497.                             <SimpleValue valType="str">DNS EXPLOIT named 8.2-&gt;8.2.1</SimpleValue>
  4498.                         </PropertyDesc>
  4499.                         <PropertyDesc idRef="30" propType="simple">
  4500.                             <SimpleValue valType="binary">090000000000000000000000000000002E2E2F2E2E2F2E2E2F</SimpleValue>
  4501.                         </PropertyDesc>
  4502.                     </PropertyDescList>
  4503.                 </Rule>
  4504.                 <Rule guid="{62979BD3-355A-4404-A6C3-2DCD5BA367F1}">
  4505.                     <ObjDescRef guidRef="{6E346FEE-0727-4DC7-87A9-DDFBF1C61E41}"/>
  4506.                     <AccessDescList>
  4507.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4508.                     </AccessDescList>
  4509.                     <PropertyDescList>
  4510.                         <PropertyDesc idRef="20" propType="simple">
  4511.                             <SimpleValue valType="int">1036</SimpleValue>
  4512.                         </PropertyDesc>
  4513.                         <PropertyDesc idRef="5" propType="objRef">
  4514.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4515.                         </PropertyDesc>
  4516.                         <PropertyDesc idRef="21" propType="simple">
  4517.                             <SimpleValue valType="str">DNS EXPLOIT named overflow (ADM)</SimpleValue>
  4518.                         </PropertyDesc>
  4519.                         <PropertyDesc idRef="30" propType="simple">
  4520.                             <SimpleValue valType="binary">6B000000000000000000000000000000746869736973736F6D6574656D707370616365666F72746865736F636B696E61646472696E7965616879656168696B6E6F777468697369736C616D65627574616E7977617977686F6361726573686F72697A6F6E676F746974776F726B696E67736F616C6C6973636F6F6C</SimpleValue>
  4521.                         </PropertyDesc>
  4522.                     </PropertyDescList>
  4523.                 </Rule>
  4524.                 <Rule guid="{DA9873EC-495E-4129-88EE-CACFD43DBBB3}">
  4525.                     <ObjDescRef guidRef="{AA343C94-8C48-4F24-9688-16AB0D67E9DA}"/>
  4526.                     <AccessDescList>
  4527.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4528.                     </AccessDescList>
  4529.                     <PropertyDescList>
  4530.                         <PropertyDesc idRef="20" propType="simple">
  4531.                             <SimpleValue valType="int">1040</SimpleValue>
  4532.                         </PropertyDesc>
  4533.                         <PropertyDesc idRef="5" propType="objRef">
  4534.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4535.                         </PropertyDesc>
  4536.                         <PropertyDesc idRef="21" propType="simple">
  4537.                             <SimpleValue valType="str">DNS EXPLOIT named overflow (ADMROCKS)</SimpleValue>
  4538.                         </PropertyDesc>
  4539.                         <PropertyDesc idRef="30" propType="simple">
  4540.                             <SimpleValue valType="binary">0800000000000000000000000000000041444D524F434B53</SimpleValue>
  4541.                         </PropertyDesc>
  4542.                     </PropertyDescList>
  4543.                 </Rule>
  4544.                 <Rule guid="{B95CF795-946B-4A0A-945F-7033790C1BA3}">
  4545.                     <ObjDescRef guidRef="{87FC72EF-55B4-423D-8109-B17237B8D469}"/>
  4546.                     <AccessDescList>
  4547.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4548.                     </AccessDescList>
  4549.                     <PropertyDescList>
  4550.                         <PropertyDesc idRef="20" propType="simple">
  4551.                             <SimpleValue valType="int">1044</SimpleValue>
  4552.                         </PropertyDesc>
  4553.                         <PropertyDesc idRef="5" propType="objRef">
  4554.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4555.                         </PropertyDesc>
  4556.                         <PropertyDesc idRef="21" propType="simple">
  4557.                             <SimpleValue valType="str">DNS EXPLOIT named overflow attempt</SimpleValue>
  4558.                         </PropertyDesc>
  4559.                         <PropertyDesc idRef="30" propType="simple">
  4560.                             <SimpleValue valType="binary">0E000000000000000000000000000000CD80E8D7FFFFFF2F62696E2F7368</SimpleValue>
  4561.                         </PropertyDesc>
  4562.                     </PropertyDescList>
  4563.                 </Rule>
  4564.                 <Rule guid="{A5DF5952-6B96-4378-A704-25CB8DFB099F}">
  4565.                     <ObjDescRef guidRef="{4D8B7687-E0D5-4BC0-B8C0-9064AF16D9E9}"/>
  4566.                     <AccessDescList>
  4567.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4568.                     </AccessDescList>
  4569.                     <PropertyDescList>
  4570.                         <PropertyDesc idRef="20" propType="simple">
  4571.                             <SimpleValue valType="int">1048</SimpleValue>
  4572.                         </PropertyDesc>
  4573.                         <PropertyDesc idRef="5" propType="objRef">
  4574.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4575.                         </PropertyDesc>
  4576.                         <PropertyDesc idRef="21" propType="simple">
  4577.                             <SimpleValue valType="str">DNS EXPLOIT x86 linux overflow attempt</SimpleValue>
  4578.                         </PropertyDesc>
  4579.                         <PropertyDesc idRef="30" propType="simple">
  4580.                             <SimpleValue valType="binary">0E00000000000000000000000000000031C0B03F31DBB3FF31C9CD8031C0</SimpleValue>
  4581.                         </PropertyDesc>
  4582.                     </PropertyDescList>
  4583.                 </Rule>
  4584.                 <Rule guid="{4B140FC0-7118-4D9F-8A2E-2B96A6146485}">
  4585.                     <ObjDescRef guidRef="{83A4BC8D-D900-4AE7-B867-9E57C2C63072}"/>
  4586.                     <AccessDescList>
  4587.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4588.                     </AccessDescList>
  4589.                     <PropertyDescList>
  4590.                         <PropertyDesc idRef="20" propType="simple">
  4591.                             <SimpleValue valType="int">1056</SimpleValue>
  4592.                         </PropertyDesc>
  4593.                         <PropertyDesc idRef="5" propType="objRef">
  4594.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4595.                         </PropertyDesc>
  4596.                         <PropertyDesc idRef="21" propType="simple">
  4597.                             <SimpleValue valType="str">DNS EXPLOIT x86 linux overflow attempt</SimpleValue>
  4598.                         </PropertyDesc>
  4599.                         <PropertyDesc idRef="30" propType="simple">
  4600.                             <SimpleValue valType="binary">0E00000000000000000000000000000031C0B002CD8085C0754CEB4C5EB0</SimpleValue>
  4601.                         </PropertyDesc>
  4602.                     </PropertyDescList>
  4603.                 </Rule>
  4604.                 <Rule guid="{388B4D6F-9750-4B11-8F5B-79031AA87186}">
  4605.                     <ObjDescRef guidRef="{3A093925-E238-451A-A3AD-EEF764140D8B}"/>
  4606.                     <AccessDescList>
  4607.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4608.                     </AccessDescList>
  4609.                     <PropertyDescList>
  4610.                         <PropertyDesc idRef="20" propType="simple">
  4611.                             <SimpleValue valType="int">1060</SimpleValue>
  4612.                         </PropertyDesc>
  4613.                         <PropertyDesc idRef="5" propType="objRef">
  4614.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4615.                         </PropertyDesc>
  4616.                         <PropertyDesc idRef="21" propType="simple">
  4617.                             <SimpleValue valType="str">DNS EXPLOIT x86 linux overflow attempt (ADMv2)</SimpleValue>
  4618.                         </PropertyDesc>
  4619.                         <PropertyDesc idRef="30" propType="simple">
  4620.                             <SimpleValue valType="binary">0D00000000000000000000000000000089F729C789F389F989F2AC3CFE</SimpleValue>
  4621.                         </PropertyDesc>
  4622.                     </PropertyDescList>
  4623.                 </Rule>
  4624.                 <Rule guid="{71A53C49-706F-4B9D-BF71-E765140B8C5A}">
  4625.                     <ObjDescRef guidRef="{B2B41048-6E96-4344-BF9D-538AF1386CAC}"/>
  4626.                     <AccessDescList>
  4627.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4628.                     </AccessDescList>
  4629.                     <PropertyDescList>
  4630.                         <PropertyDesc idRef="20" propType="simple">
  4631.                             <SimpleValue valType="int">1064</SimpleValue>
  4632.                         </PropertyDesc>
  4633.                         <PropertyDesc idRef="5" propType="objRef">
  4634.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4635.                         </PropertyDesc>
  4636.                         <PropertyDesc idRef="21" propType="simple">
  4637.                             <SimpleValue valType="str">DNS EXPLOIT x86 freebsd overflow attempt</SimpleValue>
  4638.                         </PropertyDesc>
  4639.                         <PropertyDesc idRef="30" propType="simple">
  4640.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB6E5EC6069A31C9894E01C64605</SimpleValue>
  4641.                         </PropertyDesc>
  4642.                     </PropertyDescList>
  4643.                 </Rule>
  4644.                 <Rule guid="{D7E3DBE1-7472-4725-BA92-74D1AC2C53D2}">
  4645.                     <ObjDescRef guidRef="{29503E98-15BC-4FA8-9AEA-9BC25E196D9E}"/>
  4646.                     <AccessDescList>
  4647.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4648.                     </AccessDescList>
  4649.                     <PropertyDescList>
  4650.                         <PropertyDesc idRef="20" propType="simple">
  4651.                             <SimpleValue valType="int">1068</SimpleValue>
  4652.                         </PropertyDesc>
  4653.                         <PropertyDesc idRef="5" propType="objRef">
  4654.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4655.                         </PropertyDesc>
  4656.                         <PropertyDesc idRef="21" propType="simple">
  4657.                             <SimpleValue valType="str">DNS EXPLOIT sparc overflow attempt</SimpleValue>
  4658.                         </PropertyDesc>
  4659.                         <PropertyDesc idRef="30" propType="simple">
  4660.                             <SimpleValue valType="binary">10000000000000000000000000000000901AC00F900220089202200FD023BFF8</SimpleValue>
  4661.                         </PropertyDesc>
  4662.                     </PropertyDescList>
  4663.                 </Rule>
  4664.                 <Rule guid="{401E1842-FAD0-49E4-B695-4E285B4167E1}">
  4665.                     <ObjDescRef guidRef="{8FD39D93-7FBA-4999-9424-4BE898636BC2}"/>
  4666.                     <AccessDescList>
  4667.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4668.                     </AccessDescList>
  4669.                     <PropertyDescList>
  4670.                         <PropertyDesc idRef="20" propType="simple">
  4671.                             <SimpleValue valType="int">1212</SimpleValue>
  4672.                         </PropertyDesc>
  4673.                         <PropertyDesc idRef="5" propType="objRef">
  4674.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4675.                         </PropertyDesc>
  4676.                         <PropertyDesc idRef="21" propType="simple">
  4677.                             <SimpleValue valType="str">DNS EXPLOIT named tsig overflow attempt</SimpleValue>
  4678.                         </PropertyDesc>
  4679.                         <PropertyDesc idRef="30" propType="simple">
  4680.                             <SimpleValue valType="binary">17000000000000000000000000000000ABCD098000000001000000000000010001202020200261</SimpleValue>
  4681.                         </PropertyDesc>
  4682.                     </PropertyDescList>
  4683.                 </Rule>
  4684.                 <Rule guid="{19CE4736-939D-4C6B-BB0D-E512CCB7D4CA}">
  4685.                     <ObjDescRef guidRef="{508D9E92-0980-4CE7-AF4C-BCB0A559430C}"/>
  4686.                     <AccessDescList>
  4687.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4688.                     </AccessDescList>
  4689.                     <PropertyDescList>
  4690.                         <PropertyDesc idRef="20" propType="simple">
  4691.                             <SimpleValue valType="int">1256</SimpleValue>
  4692.                         </PropertyDesc>
  4693.                         <PropertyDesc idRef="5" propType="objRef">
  4694.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4695.                         </PropertyDesc>
  4696.                         <PropertyDesc idRef="21" propType="simple">
  4697.                             <SimpleValue valType="str">DNS EXPLOIT named tsig overflow attempt</SimpleValue>
  4698.                         </PropertyDesc>
  4699.                         <PropertyDesc idRef="30" propType="simple">
  4700.                             <SimpleValue valType="binary">0D0000000000000000000000000000008000070000000000013F000102</SimpleValue>
  4701.                         </PropertyDesc>
  4702.                     </PropertyDescList>
  4703.                 </Rule>
  4704.                 <Rule guid="{A3164204-F1DE-43B9-814F-F2D5E83BB205}">
  4705.                     <ObjDescRef guidRef="{EB2B23A2-BE57-4F64-850B-31B01EF90481}"/>
  4706.                     <AccessDescList>
  4707.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4708.                     </AccessDescList>
  4709.                     <PropertyDescList>
  4710.                         <PropertyDesc idRef="20" propType="simple">
  4711.                             <SimpleValue valType="int">5740</SimpleValue>
  4712.                         </PropertyDesc>
  4713.                         <PropertyDesc idRef="5" propType="objRef">
  4714.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4715.                         </PropertyDesc>
  4716.                         <PropertyDesc idRef="21" propType="simple">
  4717.                             <SimpleValue valType="str">DNS named authors attempt</SimpleValue>
  4718.                         </PropertyDesc>
  4719.                         <PropertyDesc idRef="30" propType="simple">
  4720.                             <SimpleValue valType="binary">080000000C000000000000000000000007617574686F7273</SimpleValue>
  4721.                         </PropertyDesc>
  4722.                         <PropertyDesc idRef="30" propType="simple">
  4723.                             <SimpleValue valType="binary">050000000C00000000000000000001000462696E64</SimpleValue>
  4724.                         </PropertyDesc>
  4725.                     </PropertyDescList>
  4726.                 </Rule>
  4727.                 <Rule guid="{490ECE5A-0908-490A-BBD0-9DC64AEFE42E}">
  4728.                     <ObjDescRef guidRef="{488EE5C8-4021-4450-8641-0BEA9A2F279D}"/>
  4729.                     <AccessDescList>
  4730.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4731.                     </AccessDescList>
  4732.                     <PropertyDescList>
  4733.                         <PropertyDesc idRef="20" propType="simple">
  4734.                             <SimpleValue valType="int">6464</SimpleValue>
  4735.                         </PropertyDesc>
  4736.                         <PropertyDesc idRef="5" propType="objRef">
  4737.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4738.                         </PropertyDesc>
  4739.                         <PropertyDesc idRef="21" propType="simple">
  4740.                             <SimpleValue valType="str">DNS named version attempt</SimpleValue>
  4741.                         </PropertyDesc>
  4742.                         <PropertyDesc idRef="30" propType="simple">
  4743.                             <SimpleValue valType="binary">080000000C00000000000000000000000776657273696F6E</SimpleValue>
  4744.                         </PropertyDesc>
  4745.                         <PropertyDesc idRef="30" propType="simple">
  4746.                             <SimpleValue valType="binary">050000000C00000000000000000001000462696E64</SimpleValue>
  4747.                         </PropertyDesc>
  4748.                     </PropertyDescList>
  4749.                 </Rule>
  4750.             </RuleByObjTypeList>
  4751.         </Profile>
  4752.         <Profile guid="{2B34E2A8-F01D-48C1-9767-658843B58D3C}">
  4753.             <ExecSetDescList/>
  4754.             <RuleByObjTypeList typeRef="262">
  4755.                 <Rule guid="{4F8193E5-7D61-4252-B258-64CC1F56977D}">
  4756.                     <ObjDescRef guidRef="{F2B9B50F-EDB4-4399-BB48-03B72F106F3C}"/>
  4757.                     <AccessDescList>
  4758.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4759.                     </AccessDescList>
  4760.                     <PropertyDescList>
  4761.                         <PropertyDesc idRef="20" propType="simple">
  4762.                             <SimpleValue valType="int">1072</SimpleValue>
  4763.                         </PropertyDesc>
  4764.                         <PropertyDesc idRef="5" propType="objRef">
  4765.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4766.                         </PropertyDesc>
  4767.                         <PropertyDesc idRef="21" propType="simple">
  4768.                             <SimpleValue valType="str">DOS Jolt attack</SimpleValue>
  4769.                         </PropertyDesc>
  4770.                         <PropertyDesc idRef="26" propType="simple">
  4771.                             <SimpleValue valType="int">1</SimpleValue>
  4772.                         </PropertyDesc>
  4773.                         <PropertyDesc idRef="29" propType="simple">
  4774.                             <SimpleValue valType="int" valRelation="==">408</SimpleValue>
  4775.                         </PropertyDesc>
  4776.                     </PropertyDescList>
  4777.                 </Rule>
  4778.                 <Rule guid="{EE67AC86-89CB-4ACA-9C1B-745138E43544}">
  4779.                     <ObjDescRef guidRef="{16D6FAD2-8B86-4ACB-8D30-5CA342727F66}"/>
  4780.                     <AccessDescList>
  4781.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4782.                     </AccessDescList>
  4783.                     <PropertyDescList>
  4784.                         <PropertyDesc idRef="20" propType="simple">
  4785.                             <SimpleValue valType="int">1076</SimpleValue>
  4786.                         </PropertyDesc>
  4787.                         <PropertyDesc idRef="5" propType="objRef">
  4788.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4789.                         </PropertyDesc>
  4790.                         <PropertyDesc idRef="21" propType="simple">
  4791.                             <SimpleValue valType="str">DOS Land attack</SimpleValue>
  4792.                         </PropertyDesc>
  4793.                         <PropertyDesc idRef="24" propType="simple">
  4794.                             <SimpleValue valType="int" valRelation="==">3868</SimpleValue>
  4795.                         </PropertyDesc>
  4796.                         <PropertyDesc idRef="32" propType="simple">
  4797.                             <SimpleValue valType="int" valRelation="==">3868</SimpleValue>
  4798.                         </PropertyDesc>
  4799.                         <PropertyDesc idRef="31" propType="simple">
  4800.                             <SimpleValue valType="int">512</SimpleValue>
  4801.                         </PropertyDesc>
  4802.                     </PropertyDescList>
  4803.                 </Rule>
  4804.                 <Rule guid="{C94F63D3-1A0D-4395-873F-381B2D63B1AF}">
  4805.                     <ObjDescRef guidRef="{DB361ABD-11B6-4B2B-92AD-2C5AA0A43590}"/>
  4806.                     <AccessDescList>
  4807.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4808.                     </AccessDescList>
  4809.                     <PropertyDescList>
  4810.                         <PropertyDesc idRef="20" propType="simple">
  4811.                             <SimpleValue valType="int">1080</SimpleValue>
  4812.                         </PropertyDesc>
  4813.                         <PropertyDesc idRef="5" propType="objRef">
  4814.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4815.                         </PropertyDesc>
  4816.                         <PropertyDesc idRef="21" propType="simple">
  4817.                             <SimpleValue valType="str">DOS Teardrop attack</SimpleValue>
  4818.                         </PropertyDesc>
  4819.                         <PropertyDesc idRef="24" propType="simple">
  4820.                             <SimpleValue valType="int" valRelation="==">242</SimpleValue>
  4821.                         </PropertyDesc>
  4822.                         <PropertyDesc idRef="26" propType="simple">
  4823.                             <SimpleValue valType="int">1</SimpleValue>
  4824.                         </PropertyDesc>
  4825.                     </PropertyDescList>
  4826.                 </Rule>
  4827.                 <Rule guid="{BF7B7AD4-133F-41B0-8224-C426EA49F722}">
  4828.                     <ObjDescRef guidRef="{A687C385-E417-4D00-B7BA-AD9CA157C2CE}"/>
  4829.                     <AccessDescList>
  4830.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4831.                     </AccessDescList>
  4832.                     <PropertyDescList>
  4833.                         <PropertyDesc idRef="20" propType="simple">
  4834.                             <SimpleValue valType="int">1084</SimpleValue>
  4835.                         </PropertyDesc>
  4836.                         <PropertyDesc idRef="5" propType="objRef">
  4837.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4838.                         </PropertyDesc>
  4839.                         <PropertyDesc idRef="21" propType="simple">
  4840.                             <SimpleValue valType="str">DOS UDP echo+chargen bomb</SimpleValue>
  4841.                         </PropertyDesc>
  4842.                     </PropertyDescList>
  4843.                 </Rule>
  4844.                 <Rule guid="{0E3F8C1A-09D1-4402-B1C5-F139466F39D0}">
  4845.                     <ObjDescRef guidRef="{5D538A2B-2051-4A82-981D-4199F1091CFF}"/>
  4846.                     <AccessDescList>
  4847.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4848.                     </AccessDescList>
  4849.                     <PropertyDescList>
  4850.                         <PropertyDesc idRef="20" propType="simple">
  4851.                             <SimpleValue valType="int">1085</SimpleValue>
  4852.                         </PropertyDesc>
  4853.                         <PropertyDesc idRef="5" propType="objRef">
  4854.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4855.                         </PropertyDesc>
  4856.                         <PropertyDesc idRef="21" propType="simple">
  4857.                             <SimpleValue valType="str">DOS UDP echo+chargen bomb</SimpleValue>
  4858.                         </PropertyDesc>
  4859.                     </PropertyDescList>
  4860.                 </Rule>
  4861.                 <Rule guid="{46739C8D-A4CC-4414-888C-5BA2D772048D}">
  4862.                     <ObjDescRef guidRef="{0B0039C8-DA18-4BCE-81F2-7CEA9B66B274}"/>
  4863.                     <AccessDescList>
  4864.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4865.                     </AccessDescList>
  4866.                     <PropertyDescList>
  4867.                         <PropertyDesc idRef="20" propType="simple">
  4868.                             <SimpleValue valType="int">1086</SimpleValue>
  4869.                         </PropertyDesc>
  4870.                         <PropertyDesc idRef="5" propType="objRef">
  4871.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4872.                         </PropertyDesc>
  4873.                         <PropertyDesc idRef="21" propType="simple">
  4874.                             <SimpleValue valType="str">DOS UDP echo+chargen bomb</SimpleValue>
  4875.                         </PropertyDesc>
  4876.                     </PropertyDescList>
  4877.                 </Rule>
  4878.                 <Rule guid="{46A4C88A-2516-49CE-9A73-F248C585B305}">
  4879.                     <ObjDescRef guidRef="{EC36CBAB-A0DD-4E5D-8F05-62A8CA5B7199}"/>
  4880.                     <AccessDescList>
  4881.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4882.                     </AccessDescList>
  4883.                     <PropertyDescList>
  4884.                         <PropertyDesc idRef="20" propType="simple">
  4885.                             <SimpleValue valType="int">1087</SimpleValue>
  4886.                         </PropertyDesc>
  4887.                         <PropertyDesc idRef="5" propType="objRef">
  4888.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4889.                         </PropertyDesc>
  4890.                         <PropertyDesc idRef="21" propType="simple">
  4891.                             <SimpleValue valType="str">DOS UDP echo+chargen bomb</SimpleValue>
  4892.                         </PropertyDesc>
  4893.                     </PropertyDescList>
  4894.                 </Rule>
  4895.                 <Rule guid="{4D2EACBE-DEDA-406D-8E23-E5FA6888E3F9}">
  4896.                     <ObjDescRef guidRef="{92FE00BD-CD57-4DAC-AF0A-A65F750D8AD4}"/>
  4897.                     <AccessDescList>
  4898.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4899.                     </AccessDescList>
  4900.                     <PropertyDescList>
  4901.                         <PropertyDesc idRef="20" propType="simple">
  4902.                             <SimpleValue valType="int">1088</SimpleValue>
  4903.                         </PropertyDesc>
  4904.                         <PropertyDesc idRef="5" propType="objRef">
  4905.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4906.                         </PropertyDesc>
  4907.                         <PropertyDesc idRef="21" propType="simple">
  4908.                             <SimpleValue valType="str">DOS IGMP dos attack</SimpleValue>
  4909.                         </PropertyDesc>
  4910.                         <PropertyDesc idRef="30" propType="simple">
  4911.                             <SimpleValue valType="binary">020000000000000002000000000000000200</SimpleValue>
  4912.                         </PropertyDesc>
  4913.                         <PropertyDesc idRef="27" propType="simple">
  4914.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  4915.                         </PropertyDesc>
  4916.                         <PropertyDesc idRef="26" propType="simple">
  4917.                             <SimpleValue valType="int">131073</SimpleValue>
  4918.                         </PropertyDesc>
  4919.                     </PropertyDescList>
  4920.                 </Rule>
  4921.                 <Rule guid="{884E180F-9204-47F6-97B6-D78313A908E4}">
  4922.                     <ObjDescRef guidRef="{1554867D-0839-47B5-A817-98C8CC16396F}"/>
  4923.                     <AccessDescList>
  4924.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4925.                     </AccessDescList>
  4926.                     <PropertyDescList>
  4927.                         <PropertyDesc idRef="20" propType="simple">
  4928.                             <SimpleValue valType="int">1092</SimpleValue>
  4929.                         </PropertyDesc>
  4930.                         <PropertyDesc idRef="5" propType="objRef">
  4931.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4932.                         </PropertyDesc>
  4933.                         <PropertyDesc idRef="21" propType="simple">
  4934.                             <SimpleValue valType="str">DOS IGMP dos attack</SimpleValue>
  4935.                         </PropertyDesc>
  4936.                         <PropertyDesc idRef="30" propType="simple">
  4937.                             <SimpleValue valType="binary">020000000000000002000000000000000000</SimpleValue>
  4938.                         </PropertyDesc>
  4939.                         <PropertyDesc idRef="27" propType="simple">
  4940.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  4941.                         </PropertyDesc>
  4942.                         <PropertyDesc idRef="26" propType="simple">
  4943.                             <SimpleValue valType="int">131073</SimpleValue>
  4944.                         </PropertyDesc>
  4945.                     </PropertyDescList>
  4946.                 </Rule>
  4947.                 <Rule guid="{11E1B7F6-6C70-42BA-A708-17F7E6AF853D}">
  4948.                     <ObjDescRef guidRef="{93B49A8B-CAAB-49F0-ADB0-135F8D2D9E3E}"/>
  4949.                     <AccessDescList>
  4950.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4951.                     </AccessDescList>
  4952.                     <PropertyDescList>
  4953.                         <PropertyDesc idRef="20" propType="simple">
  4954.                             <SimpleValue valType="int">1096</SimpleValue>
  4955.                         </PropertyDesc>
  4956.                         <PropertyDesc idRef="5" propType="objRef">
  4957.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4958.                         </PropertyDesc>
  4959.                         <PropertyDesc idRef="21" propType="simple">
  4960.                             <SimpleValue valType="str">DOS ath</SimpleValue>
  4961.                         </PropertyDesc>
  4962.                         <PropertyDesc idRef="30" propType="simple">
  4963.                             <SimpleValue valType="binary">060000000000000000000000000001002B2B2B617468</SimpleValue>
  4964.                         </PropertyDesc>
  4965.                     </PropertyDescList>
  4966.                 </Rule>
  4967.                 <Rule guid="{8DF14C2F-6BF6-4FC4-8B98-29E1B096B2B9}">
  4968.                     <ObjDescRef guidRef="{0F292B64-CEEC-4C95-8F3B-C31C84366CD0}"/>
  4969.                     <AccessDescList>
  4970.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4971.                     </AccessDescList>
  4972.                     <PropertyDescList>
  4973.                         <PropertyDesc idRef="20" propType="simple">
  4974.                             <SimpleValue valType="int">1100</SimpleValue>
  4975.                         </PropertyDesc>
  4976.                         <PropertyDesc idRef="5" propType="objRef">
  4977.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  4978.                         </PropertyDesc>
  4979.                         <PropertyDesc idRef="21" propType="simple">
  4980.                             <SimpleValue valType="str">DOS NAPTHA</SimpleValue>
  4981.                         </PropertyDesc>
  4982.                         <PropertyDesc idRef="31" propType="simple">
  4983.                             <SimpleValue valType="int">512</SimpleValue>
  4984.                         </PropertyDesc>
  4985.                         <PropertyDesc idRef="32" propType="simple">
  4986.                             <SimpleValue valType="int" valRelation="==">6060842</SimpleValue>
  4987.                         </PropertyDesc>
  4988.                         <PropertyDesc idRef="24" propType="simple">
  4989.                             <SimpleValue valType="int" valRelation="==">413</SimpleValue>
  4990.                         </PropertyDesc>
  4991.                     </PropertyDescList>
  4992.                 </Rule>
  4993.                 <Rule guid="{529E3BC3-1578-4405-9CA1-2A58CA251EF2}">
  4994.                     <ObjDescRef guidRef="{07F86242-7797-41A3-819B-56D36EDCF233}"/>
  4995.                     <AccessDescList>
  4996.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  4997.                     </AccessDescList>
  4998.                     <PropertyDescList>
  4999.                         <PropertyDesc idRef="20" propType="simple">
  5000.                             <SimpleValue valType="int">1101</SimpleValue>
  5001.                         </PropertyDesc>
  5002.                         <PropertyDesc idRef="5" propType="objRef">
  5003.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5004.                         </PropertyDesc>
  5005.                         <PropertyDesc idRef="21" propType="simple">
  5006.                             <SimpleValue valType="str">DOS NAPTHA</SimpleValue>
  5007.                         </PropertyDesc>
  5008.                         <PropertyDesc idRef="31" propType="simple">
  5009.                             <SimpleValue valType="int">512</SimpleValue>
  5010.                         </PropertyDesc>
  5011.                         <PropertyDesc idRef="32" propType="simple">
  5012.                             <SimpleValue valType="int" valRelation="==">6060842</SimpleValue>
  5013.                         </PropertyDesc>
  5014.                         <PropertyDesc idRef="24" propType="simple">
  5015.                             <SimpleValue valType="int" valRelation="==">413</SimpleValue>
  5016.                         </PropertyDesc>
  5017.                     </PropertyDescList>
  5018.                 </Rule>
  5019.                 <Rule guid="{66F23EC5-9665-4635-9873-106F2192F5DD}">
  5020.                     <ObjDescRef guidRef="{BF51FEDC-33B0-4D99-BEF6-AF8ABEA8FF6F}"/>
  5021.                     <AccessDescList>
  5022.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5023.                     </AccessDescList>
  5024.                     <PropertyDescList>
  5025.                         <PropertyDesc idRef="20" propType="simple">
  5026.                             <SimpleValue valType="int">1104</SimpleValue>
  5027.                         </PropertyDesc>
  5028.                         <PropertyDesc idRef="5" propType="objRef">
  5029.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5030.                         </PropertyDesc>
  5031.                         <PropertyDesc idRef="21" propType="simple">
  5032.                             <SimpleValue valType="str">DOS Real Audio Server</SimpleValue>
  5033.                         </PropertyDesc>
  5034.                         <PropertyDesc idRef="30" propType="simple">
  5035.                             <SimpleValue valType="binary">05000000000000000000000000000000FFF4FFFD06</SimpleValue>
  5036.                         </PropertyDesc>
  5037.                     </PropertyDescList>
  5038.                 </Rule>
  5039.                 <Rule guid="{12381EF3-4D59-421B-814D-E757B8E27DBC}">
  5040.                     <ObjDescRef guidRef="{26714FC2-F584-4013-876B-B3013C0A0BC7}"/>
  5041.                     <AccessDescList>
  5042.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5043.                     </AccessDescList>
  5044.                     <PropertyDescList>
  5045.                         <PropertyDesc idRef="20" propType="simple">
  5046.                             <SimpleValue valType="int">1108</SimpleValue>
  5047.                         </PropertyDesc>
  5048.                         <PropertyDesc idRef="5" propType="objRef">
  5049.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5050.                         </PropertyDesc>
  5051.                         <PropertyDesc idRef="21" propType="simple">
  5052.                             <SimpleValue valType="str">DOS Real Server template.html</SimpleValue>
  5053.                         </PropertyDesc>
  5054.                         <PropertyDesc idRef="30" propType="simple">
  5055.                             <SimpleValue valType="binary">1A0000000000000000000000000001002F76696577736F757263652F74656D706C6174652E68746D6C3F</SimpleValue>
  5056.                         </PropertyDesc>
  5057.                     </PropertyDescList>
  5058.                 </Rule>
  5059.                 <Rule guid="{60C68277-6896-4BC1-B7B9-7294907B3FA8}">
  5060.                     <ObjDescRef guidRef="{C8DA05D8-7AF3-4C0F-9F2F-08DA7903E6D0}"/>
  5061.                     <AccessDescList>
  5062.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5063.                     </AccessDescList>
  5064.                     <PropertyDescList>
  5065.                         <PropertyDesc idRef="20" propType="simple">
  5066.                             <SimpleValue valType="int">1112</SimpleValue>
  5067.                         </PropertyDesc>
  5068.                         <PropertyDesc idRef="5" propType="objRef">
  5069.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5070.                         </PropertyDesc>
  5071.                         <PropertyDesc idRef="21" propType="simple">
  5072.                             <SimpleValue valType="str">DOS Real Server template.html</SimpleValue>
  5073.                         </PropertyDesc>
  5074.                         <PropertyDesc idRef="30" propType="simple">
  5075.                             <SimpleValue valType="binary">1A0000000000000000000000000001002F76696577736F757263652F74656D706C6174652E68746D6C3F</SimpleValue>
  5076.                         </PropertyDesc>
  5077.                     </PropertyDescList>
  5078.                 </Rule>
  5079.                 <Rule guid="{41D2105D-7231-4C40-BEAB-5E08F5546DCB}">
  5080.                     <ObjDescRef guidRef="{A8476477-C48A-46FA-A135-AFBDD6615F3A}"/>
  5081.                     <AccessDescList>
  5082.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5083.                     </AccessDescList>
  5084.                     <PropertyDescList>
  5085.                         <PropertyDesc idRef="20" propType="simple">
  5086.                             <SimpleValue valType="int">1116</SimpleValue>
  5087.                         </PropertyDesc>
  5088.                         <PropertyDesc idRef="5" propType="objRef">
  5089.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5090.                         </PropertyDesc>
  5091.                         <PropertyDesc idRef="21" propType="simple">
  5092.                             <SimpleValue valType="str">DOS Bay/Nortel Nautica Marlin</SimpleValue>
  5093.                         </PropertyDesc>
  5094.                         <PropertyDesc idRef="29" propType="simple">
  5095.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  5096.                         </PropertyDesc>
  5097.                     </PropertyDescList>
  5098.                 </Rule>
  5099.                 <Rule guid="{BFEA3535-EA57-4C88-8C83-EA59D012ECAF}">
  5100.                     <ObjDescRef guidRef="{3D4255E7-5E0D-4C9B-9D3E-520D76BFEA02}"/>
  5101.                     <AccessDescList>
  5102.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5103.                     </AccessDescList>
  5104.                     <PropertyDescList>
  5105.                         <PropertyDesc idRef="20" propType="simple">
  5106.                             <SimpleValue valType="int">1124</SimpleValue>
  5107.                         </PropertyDesc>
  5108.                         <PropertyDesc idRef="5" propType="objRef">
  5109.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5110.                         </PropertyDesc>
  5111.                         <PropertyDesc idRef="21" propType="simple">
  5112.                             <SimpleValue valType="str">DOS Ascend Route</SimpleValue>
  5113.                         </PropertyDesc>
  5114.                         <PropertyDesc idRef="30" propType="simple">
  5115.                             <SimpleValue valType="binary">080000001900000032000000000000004E414D454E414D45</SimpleValue>
  5116.                         </PropertyDesc>
  5117.                     </PropertyDescList>
  5118.                 </Rule>
  5119.                 <Rule guid="{F3586A90-FA3C-4610-BE2E-B932AEDC4E0D}">
  5120.                     <ObjDescRef guidRef="{036EC5ED-9463-48E5-B1C3-D5FAD1F88108}"/>
  5121.                     <AccessDescList>
  5122.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5123.                     </AccessDescList>
  5124.                     <PropertyDescList>
  5125.                         <PropertyDesc idRef="20" propType="simple">
  5126.                             <SimpleValue valType="int">1128</SimpleValue>
  5127.                         </PropertyDesc>
  5128.                         <PropertyDesc idRef="5" propType="objRef">
  5129.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5130.                         </PropertyDesc>
  5131.                         <PropertyDesc idRef="21" propType="simple">
  5132.                             <SimpleValue valType="str">DOS arkiea backup</SimpleValue>
  5133.                         </PropertyDesc>
  5134.                         <PropertyDesc idRef="29" propType="simple">
  5135.                             <SimpleValue valType="int" valRelation="&gt;">1445</SimpleValue>
  5136.                         </PropertyDesc>
  5137.                     </PropertyDescList>
  5138.                 </Rule>
  5139.                 <Rule guid="{47F8D4A8-1431-4C2D-A935-8EB10EEAFF99}">
  5140.                     <ObjDescRef guidRef="{50490FEC-998F-4691-802E-DAAEC6E16E99}"/>
  5141.                     <AccessDescList>
  5142.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5143.                     </AccessDescList>
  5144.                     <PropertyDescList>
  5145.                         <PropertyDesc idRef="20" propType="simple">
  5146.                             <SimpleValue valType="int">5028</SimpleValue>
  5147.                         </PropertyDesc>
  5148.                         <PropertyDesc idRef="5" propType="objRef">
  5149.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5150.                         </PropertyDesc>
  5151.                         <PropertyDesc idRef="21" propType="simple">
  5152.                             <SimpleValue valType="str">DOS Winnuke attack</SimpleValue>
  5153.                         </PropertyDesc>
  5154.                         <PropertyDesc idRef="31" propType="simple">
  5155.                             <SimpleValue valType="int">139264</SimpleValue>
  5156.                         </PropertyDesc>
  5157.                     </PropertyDescList>
  5158.                 </Rule>
  5159.                 <Rule guid="{6D8D4170-F46C-4D22-9E7F-0B952A8F19E1}">
  5160.                     <ObjDescRef guidRef="{230B28BC-ED3D-4E5C-8A4D-ABC6CE79E334}"/>
  5161.                     <AccessDescList>
  5162.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5163.                     </AccessDescList>
  5164.                     <PropertyDescList>
  5165.                         <PropertyDesc idRef="20" propType="simple">
  5166.                             <SimpleValue valType="int">5632</SimpleValue>
  5167.                         </PropertyDesc>
  5168.                         <PropertyDesc idRef="5" propType="objRef">
  5169.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5170.                         </PropertyDesc>
  5171.                         <PropertyDesc idRef="21" propType="simple">
  5172.                             <SimpleValue valType="str">DOS MSDTC attempt</SimpleValue>
  5173.                         </PropertyDesc>
  5174.                         <PropertyDesc idRef="29" propType="simple">
  5175.                             <SimpleValue valType="int" valRelation="&gt;">1023</SimpleValue>
  5176.                         </PropertyDesc>
  5177.                     </PropertyDescList>
  5178.                 </Rule>
  5179.             </RuleByObjTypeList>
  5180.         </Profile>
  5181.         <Profile guid="{19121B0A-BC57-41E9-8AC8-9C2AC6A41E6F}">
  5182.             <ExecSetDescList/>
  5183.             <RuleByObjTypeList typeRef="262">
  5184.                 <Rule guid="{36E93BDF-9665-41F2-8C13-F0491FC5BF2A}">
  5185.                     <ObjDescRef guidRef="{2A48E48D-104E-46A2-9B86-D1347823AFD9}"/>
  5186.                     <AccessDescList>
  5187.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5188.                     </AccessDescList>
  5189.                     <PropertyDescList>
  5190.                         <PropertyDesc idRef="20" propType="simple">
  5191.                             <SimpleValue valType="int">1132</SimpleValue>
  5192.                         </PropertyDesc>
  5193.                         <PropertyDesc idRef="5" propType="objRef">
  5194.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5195.                         </PropertyDesc>
  5196.                         <PropertyDesc idRef="21" propType="simple">
  5197.                             <SimpleValue valType="str">EXPLOIT netscape 4.7 client overflow</SimpleValue>
  5198.                         </PropertyDesc>
  5199.                         <PropertyDesc idRef="30" propType="simple">
  5200.                             <SimpleValue valType="binary">1100000000000000000000000000000033C9B1103FE906513CFA4733C050F7D050</SimpleValue>
  5201.                         </PropertyDesc>
  5202.                     </PropertyDescList>
  5203.                 </Rule>
  5204.                 <Rule guid="{9A5890CB-57ED-425E-B4DE-95A47E1A5D1A}">
  5205.                     <ObjDescRef guidRef="{11D56E8C-8B48-4430-8E8D-47CB80802792}"/>
  5206.                     <AccessDescList>
  5207.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5208.                     </AccessDescList>
  5209.                     <PropertyDescList>
  5210.                         <PropertyDesc idRef="20" propType="simple">
  5211.                             <SimpleValue valType="int">1136</SimpleValue>
  5212.                         </PropertyDesc>
  5213.                         <PropertyDesc idRef="5" propType="objRef">
  5214.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5215.                         </PropertyDesc>
  5216.                         <PropertyDesc idRef="21" propType="simple">
  5217.                             <SimpleValue valType="str">EXPLOIT pop2 x86 linux overflow</SimpleValue>
  5218.                         </PropertyDesc>
  5219.                         <PropertyDesc idRef="30" propType="simple">
  5220.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB2C5B89D980C10639D97C078001</SimpleValue>
  5221.                         </PropertyDesc>
  5222.                     </PropertyDescList>
  5223.                 </Rule>
  5224.                 <Rule guid="{E08ECB1F-DD29-4BD5-88A7-7BB36F6EE94C}">
  5225.                     <ObjDescRef guidRef="{41EED821-7960-4A8E-A329-44A676732C0F}"/>
  5226.                     <AccessDescList>
  5227.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5228.                     </AccessDescList>
  5229.                     <PropertyDescList>
  5230.                         <PropertyDesc idRef="20" propType="simple">
  5231.                             <SimpleValue valType="int">1140</SimpleValue>
  5232.                         </PropertyDesc>
  5233.                         <PropertyDesc idRef="5" propType="objRef">
  5234.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5235.                         </PropertyDesc>
  5236.                         <PropertyDesc idRef="21" propType="simple">
  5237.                             <SimpleValue valType="str">EXPLOIT pop2 x86 linux overflow</SimpleValue>
  5238.                         </PropertyDesc>
  5239.                         <PropertyDesc idRef="30" propType="simple">
  5240.                             <SimpleValue valType="binary">0B000000000000000000000000000000FFFFFF2F42494E2F534800</SimpleValue>
  5241.                         </PropertyDesc>
  5242.                     </PropertyDescList>
  5243.                 </Rule>
  5244.                 <Rule guid="{04AA39D0-9D79-4616-98FF-1988E4B69487}">
  5245.                     <ObjDescRef guidRef="{0D69AAF3-D50B-4E11-87CE-D5EACC549084}"/>
  5246.                     <AccessDescList>
  5247.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5248.                     </AccessDescList>
  5249.                     <PropertyDescList>
  5250.                         <PropertyDesc idRef="20" propType="simple">
  5251.                             <SimpleValue valType="int">1168</SimpleValue>
  5252.                         </PropertyDesc>
  5253.                         <PropertyDesc idRef="5" propType="objRef">
  5254.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5255.                         </PropertyDesc>
  5256.                         <PropertyDesc idRef="21" propType="simple">
  5257.                             <SimpleValue valType="str">EXPLOIT x86 linux samba overflow</SimpleValue>
  5258.                         </PropertyDesc>
  5259.                         <PropertyDesc idRef="30" propType="simple">
  5260.                             <SimpleValue valType="binary">0C000000000000000000000000000000EB2F5FEB4A5E89FB893E89F2</SimpleValue>
  5261.                         </PropertyDesc>
  5262.                     </PropertyDescList>
  5263.                 </Rule>
  5264.                 <Rule guid="{3BCF1625-D8FF-45B0-825A-5EF4E46B76D7}">
  5265.                     <ObjDescRef guidRef="{AB3E4ACE-6F1D-400D-B9D7-531F6FB18902}"/>
  5266.                     <AccessDescList>
  5267.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5268.                     </AccessDescList>
  5269.                     <PropertyDescList>
  5270.                         <PropertyDesc idRef="20" propType="simple">
  5271.                             <SimpleValue valType="int">1200</SimpleValue>
  5272.                         </PropertyDesc>
  5273.                         <PropertyDesc idRef="5" propType="objRef">
  5274.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5275.                         </PropertyDesc>
  5276.                         <PropertyDesc idRef="21" propType="simple">
  5277.                             <SimpleValue valType="str">EXPLOIT nlps x86 solaris overflow</SimpleValue>
  5278.                         </PropertyDesc>
  5279.                         <PropertyDesc idRef="30" propType="simple">
  5280.                             <SimpleValue valType="binary">0D000000000000000000000000000000EB235E33C08846FA8946F58936</SimpleValue>
  5281.                         </PropertyDesc>
  5282.                     </PropertyDescList>
  5283.                 </Rule>
  5284.                 <Rule guid="{483AD774-4A8B-4510-B000-0C706757E619}">
  5285.                     <ObjDescRef guidRef="{2D376335-97C9-4A1B-A791-F4B8D81DE4D6}"/>
  5286.                     <AccessDescList>
  5287.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5288.                     </AccessDescList>
  5289.                     <PropertyDescList>
  5290.                         <PropertyDesc idRef="20" propType="simple">
  5291.                             <SimpleValue valType="int">1204</SimpleValue>
  5292.                         </PropertyDesc>
  5293.                         <PropertyDesc idRef="5" propType="objRef">
  5294.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5295.                         </PropertyDesc>
  5296.                         <PropertyDesc idRef="21" propType="simple">
  5297.                             <SimpleValue valType="str">EXPLOIT LPRng overflow</SimpleValue>
  5298.                         </PropertyDesc>
  5299.                         <PropertyDesc idRef="30" propType="simple">
  5300.                             <SimpleValue valType="binary">220000000000000000000000000000004307895B088D4B0889430CB00BCD8031C0FEC0CD80E894FFFFFF2F62696E2F73680A</SimpleValue>
  5301.                         </PropertyDesc>
  5302.                     </PropertyDescList>
  5303.                 </Rule>
  5304.                 <Rule guid="{A4C388B5-79CB-4693-B2D9-6A6EC0050B8C}">
  5305.                     <ObjDescRef guidRef="{122FFA02-6C30-483A-B6FE-8B74F08159AD}"/>
  5306.                     <AccessDescList>
  5307.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5308.                     </AccessDescList>
  5309.                     <PropertyDescList>
  5310.                         <PropertyDesc idRef="20" propType="simple">
  5311.                             <SimpleValue valType="int">1208</SimpleValue>
  5312.                         </PropertyDesc>
  5313.                         <PropertyDesc idRef="5" propType="objRef">
  5314.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5315.                         </PropertyDesc>
  5316.                         <PropertyDesc idRef="21" propType="simple">
  5317.                             <SimpleValue valType="str">EXPLOIT redhat 7.0 lprd overflow</SimpleValue>
  5318.                         </PropertyDesc>
  5319.                         <PropertyDesc idRef="30" propType="simple">
  5320.                             <SimpleValue valType="binary">1000000000000000000000000000000058585858252E3137327525333030246E</SimpleValue>
  5321.                         </PropertyDesc>
  5322.                     </PropertyDescList>
  5323.                 </Rule>
  5324.                 <Rule guid="{46B48C82-C7B4-4573-89DF-F70A5329CDBE}">
  5325.                     <ObjDescRef guidRef="{F3002CC7-34BB-485D-A425-A8EA5C339420}"/>
  5326.                     <AccessDescList>
  5327.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5328.                     </AccessDescList>
  5329.                     <PropertyDescList>
  5330.                         <PropertyDesc idRef="20" propType="simple">
  5331.                             <SimpleValue valType="int">1216</SimpleValue>
  5332.                         </PropertyDesc>
  5333.                         <PropertyDesc idRef="5" propType="objRef">
  5334.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5335.                         </PropertyDesc>
  5336.                         <PropertyDesc idRef="21" propType="simple">
  5337.                             <SimpleValue valType="str">EXPLOIT sco calserver overflow</SimpleValue>
  5338.                         </PropertyDesc>
  5339.                         <PropertyDesc idRef="30" propType="simple">
  5340.                             <SimpleValue valType="binary">0A000000000000000000000000000000EB7F5D55FE4D98FE4D9B</SimpleValue>
  5341.                         </PropertyDesc>
  5342.                     </PropertyDescList>
  5343.                 </Rule>
  5344.                 <Rule guid="{ED1AA4E8-3E6A-4FE8-A57D-201609CAFCC0}">
  5345.                     <ObjDescRef guidRef="{97A0FF79-446D-47D7-94EE-F9C7DFD32EF9}"/>
  5346.                     <AccessDescList>
  5347.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5348.                     </AccessDescList>
  5349.                     <PropertyDescList>
  5350.                         <PropertyDesc idRef="20" propType="simple">
  5351.                             <SimpleValue valType="int">1220</SimpleValue>
  5352.                         </PropertyDesc>
  5353.                         <PropertyDesc idRef="5" propType="objRef">
  5354.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5355.                         </PropertyDesc>
  5356.                         <PropertyDesc idRef="21" propType="simple">
  5357.                             <SimpleValue valType="str">EXPLOIT delegate proxy overflow</SimpleValue>
  5358.                         </PropertyDesc>
  5359.                         <PropertyDesc idRef="30" propType="simple">
  5360.                             <SimpleValue valType="binary">0800000000000000000000000000010077686F69733A2F2F</SimpleValue>
  5361.                         </PropertyDesc>
  5362.                         <PropertyDesc idRef="29" propType="simple">
  5363.                             <SimpleValue valType="int" valRelation="&gt;">1000</SimpleValue>
  5364.                         </PropertyDesc>
  5365.                     </PropertyDescList>
  5366.                 </Rule>
  5367.                 <Rule guid="{8E00A024-BAB0-4F38-AE4D-B0943F9C24EC}">
  5368.                     <ObjDescRef guidRef="{211A9E89-2281-4DDA-B132-38E640C70DE1}"/>
  5369.                     <AccessDescList>
  5370.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5371.                     </AccessDescList>
  5372.                     <PropertyDescList>
  5373.                         <PropertyDesc idRef="20" propType="simple">
  5374.                             <SimpleValue valType="int">1224</SimpleValue>
  5375.                         </PropertyDesc>
  5376.                         <PropertyDesc idRef="5" propType="objRef">
  5377.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5378.                         </PropertyDesc>
  5379.                         <PropertyDesc idRef="21" propType="simple">
  5380.                             <SimpleValue valType="str">EXPLOIT VQServer admin</SimpleValue>
  5381.                         </PropertyDesc>
  5382.                         <PropertyDesc idRef="30" propType="simple">
  5383.                             <SimpleValue valType="binary">0E000000000000000000000000000100474554202F20485454502F312E31</SimpleValue>
  5384.                         </PropertyDesc>
  5385.                     </PropertyDescList>
  5386.                 </Rule>
  5387.                 <Rule guid="{8FA94671-D8B2-482C-9934-41059E428CFB}">
  5388.                     <ObjDescRef guidRef="{0AA7F3AB-8DF7-4CC1-A02C-53424317A30E}"/>
  5389.                     <AccessDescList>
  5390.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5391.                     </AccessDescList>
  5392.                     <PropertyDescList>
  5393.                         <PropertyDesc idRef="20" propType="simple">
  5394.                             <SimpleValue valType="int">1232</SimpleValue>
  5395.                         </PropertyDesc>
  5396.                         <PropertyDesc idRef="5" propType="objRef">
  5397.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5398.                         </PropertyDesc>
  5399.                         <PropertyDesc idRef="21" propType="simple">
  5400.                             <SimpleValue valType="str">EXPLOIT NextFTP client overflow</SimpleValue>
  5401.                         </PropertyDesc>
  5402.                         <PropertyDesc idRef="30" propType="simple">
  5403.                             <SimpleValue valType="binary">10000000000000000000000000000000B420B4218BCC83E9048B1933C966B910</SimpleValue>
  5404.                         </PropertyDesc>
  5405.                     </PropertyDescList>
  5406.                 </Rule>
  5407.                 <Rule guid="{F2AD850A-2D95-483F-BF92-915054F87862}">
  5408.                     <ObjDescRef guidRef="{20453D51-C678-49DD-9CCC-82A03CEC6922}"/>
  5409.                     <AccessDescList>
  5410.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5411.                     </AccessDescList>
  5412.                     <PropertyDescList>
  5413.                         <PropertyDesc idRef="20" propType="simple">
  5414.                             <SimpleValue valType="int">1236</SimpleValue>
  5415.                         </PropertyDesc>
  5416.                         <PropertyDesc idRef="5" propType="objRef">
  5417.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5418.                         </PropertyDesc>
  5419.                         <PropertyDesc idRef="21" propType="simple">
  5420.                             <SimpleValue valType="str">EXPLOIT sniffit overflow</SimpleValue>
  5421.                         </PropertyDesc>
  5422.                         <PropertyDesc idRef="31" propType="simple">
  5423.                             <SimpleValue valType="int">135168</SimpleValue>
  5424.                         </PropertyDesc>
  5425.                         <PropertyDesc idRef="30" propType="simple">
  5426.                             <SimpleValue valType="binary">1000000000000000000000000000010066726F6D3A9090909090909090909090</SimpleValue>
  5427.                         </PropertyDesc>
  5428.                         <PropertyDesc idRef="29" propType="simple">
  5429.                             <SimpleValue valType="int" valRelation="&gt;">512</SimpleValue>
  5430.                         </PropertyDesc>
  5431.                     </PropertyDescList>
  5432.                 </Rule>
  5433.                 <Rule guid="{1877E568-F2F7-457F-BCF7-E934C9465677}">
  5434.                     <ObjDescRef guidRef="{FB8F731F-3B81-4667-9605-A6A5950C9BAC}"/>
  5435.                     <AccessDescList>
  5436.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5437.                     </AccessDescList>
  5438.                     <PropertyDescList>
  5439.                         <PropertyDesc idRef="20" propType="simple">
  5440.                             <SimpleValue valType="int">1240</SimpleValue>
  5441.                         </PropertyDesc>
  5442.                         <PropertyDesc idRef="5" propType="objRef">
  5443.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5444.                         </PropertyDesc>
  5445.                         <PropertyDesc idRef="21" propType="simple">
  5446.                             <SimpleValue valType="str">EXPLOIT x86 windows MailMax overflow</SimpleValue>
  5447.                         </PropertyDesc>
  5448.                         <PropertyDesc idRef="30" propType="simple">
  5449.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB45EB205BFC33C9B1828BF3802B</SimpleValue>
  5450.                         </PropertyDesc>
  5451.                     </PropertyDescList>
  5452.                 </Rule>
  5453.                 <Rule guid="{59A26E3B-E892-4BFA-8713-DC7309D37FDF}">
  5454.                     <ObjDescRef guidRef="{3F6895E9-BB81-4B72-8C4A-8AAE2A756FC8}"/>
  5455.                     <AccessDescList>
  5456.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5457.                     </AccessDescList>
  5458.                     <PropertyDescList>
  5459.                         <PropertyDesc idRef="20" propType="simple">
  5460.                             <SimpleValue valType="int">1244</SimpleValue>
  5461.                         </PropertyDesc>
  5462.                         <PropertyDesc idRef="5" propType="objRef">
  5463.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5464.                         </PropertyDesc>
  5465.                         <PropertyDesc idRef="21" propType="simple">
  5466.                             <SimpleValue valType="str">EXPLOIT netscape 4.7 unsucessful overflow</SimpleValue>
  5467.                         </PropertyDesc>
  5468.                         <PropertyDesc idRef="30" propType="simple">
  5469.                             <SimpleValue valType="binary">1100000000000000000000000000000033C9B1103FE906513CFA4733C050F7D050</SimpleValue>
  5470.                         </PropertyDesc>
  5471.                     </PropertyDescList>
  5472.                 </Rule>
  5473.                 <Rule guid="{040ED4AE-1EFD-47AB-85EC-394EA40259A6}">
  5474.                     <ObjDescRef guidRef="{EB80C33A-B0CA-419A-AFE0-C69AB3290A24}"/>
  5475.                     <AccessDescList>
  5476.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5477.                     </AccessDescList>
  5478.                     <PropertyDescList>
  5479.                         <PropertyDesc idRef="20" propType="simple">
  5480.                             <SimpleValue valType="int">1248</SimpleValue>
  5481.                         </PropertyDesc>
  5482.                         <PropertyDesc idRef="5" propType="objRef">
  5483.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5484.                         </PropertyDesc>
  5485.                         <PropertyDesc idRef="21" propType="simple">
  5486.                             <SimpleValue valType="str">EXPLOIT ntpdx overflow attempt</SimpleValue>
  5487.                         </PropertyDesc>
  5488.                         <PropertyDesc idRef="29" propType="simple">
  5489.                             <SimpleValue valType="int" valRelation="&gt;">128</SimpleValue>
  5490.                         </PropertyDesc>
  5491.                     </PropertyDescList>
  5492.                 </Rule>
  5493.                 <Rule guid="{C5B6FBF1-13D7-40D6-9183-8C3CBA4054B5}">
  5494.                     <ObjDescRef guidRef="{A17490D7-264B-40C3-922B-3D59850BDE31}"/>
  5495.                     <AccessDescList>
  5496.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5497.                     </AccessDescList>
  5498.                     <PropertyDescList>
  5499.                         <PropertyDesc idRef="20" propType="simple">
  5500.                             <SimpleValue valType="int">1252</SimpleValue>
  5501.                         </PropertyDesc>
  5502.                         <PropertyDesc idRef="5" propType="objRef">
  5503.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5504.                         </PropertyDesc>
  5505.                         <PropertyDesc idRef="21" propType="simple">
  5506.                             <SimpleValue valType="str">EXPLOIT ntalkd x86 linux overflow</SimpleValue>
  5507.                         </PropertyDesc>
  5508.                         <PropertyDesc idRef="30" propType="simple">
  5509.                             <SimpleValue valType="binary">0C0000000000000000000000000000000103000000000001000202E8</SimpleValue>
  5510.                         </PropertyDesc>
  5511.                     </PropertyDescList>
  5512.                 </Rule>
  5513.                 <Rule guid="{EBA1AB7B-C35D-40CF-A6D3-D82AEE9221C8}">
  5514.                     <ObjDescRef guidRef="{78674E31-0B61-4EB1-AE7A-3AB4C82A0D4A}"/>
  5515.                     <AccessDescList>
  5516.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5517.                     </AccessDescList>
  5518.                     <PropertyDescList>
  5519.                         <PropertyDesc idRef="20" propType="simple">
  5520.                             <SimpleValue valType="int">1260</SimpleValue>
  5521.                         </PropertyDesc>
  5522.                         <PropertyDesc idRef="5" propType="objRef">
  5523.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5524.                         </PropertyDesc>
  5525.                         <PropertyDesc idRef="21" propType="simple">
  5526.                             <SimpleValue valType="str">EXPLOIT x86 linux mountd overflow</SimpleValue>
  5527.                         </PropertyDesc>
  5528.                         <PropertyDesc idRef="30" propType="simple">
  5529.                             <SimpleValue valType="binary">0E0000000000000000000000000000005EB0028906FEC8894604B0068946</SimpleValue>
  5530.                         </PropertyDesc>
  5531.                     </PropertyDescList>
  5532.                 </Rule>
  5533.                 <Rule guid="{9D242435-CDB0-48A8-8807-0A499B44C0DD}">
  5534.                     <ObjDescRef guidRef="{97F314B6-116B-417E-851E-09061A12FC5C}"/>
  5535.                     <AccessDescList>
  5536.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5537.                     </AccessDescList>
  5538.                     <PropertyDescList>
  5539.                         <PropertyDesc idRef="20" propType="simple">
  5540.                             <SimpleValue valType="int">1264</SimpleValue>
  5541.                         </PropertyDesc>
  5542.                         <PropertyDesc idRef="5" propType="objRef">
  5543.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5544.                         </PropertyDesc>
  5545.                         <PropertyDesc idRef="21" propType="simple">
  5546.                             <SimpleValue valType="str">EXPLOIT x86 linux mountd overflow</SimpleValue>
  5547.                         </PropertyDesc>
  5548.                         <PropertyDesc idRef="30" propType="simple">
  5549.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB565E56565631D288560B88561E</SimpleValue>
  5550.                         </PropertyDesc>
  5551.                     </PropertyDescList>
  5552.                 </Rule>
  5553.                 <Rule guid="{D817E9E4-F355-4C05-B819-2EB5F7BB7356}">
  5554.                     <ObjDescRef guidRef="{2FD149B0-16C0-4E18-B65E-61D4C5E66010}"/>
  5555.                     <AccessDescList>
  5556.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5557.                     </AccessDescList>
  5558.                     <PropertyDescList>
  5559.                         <PropertyDesc idRef="20" propType="simple">
  5560.                             <SimpleValue valType="int">1268</SimpleValue>
  5561.                         </PropertyDesc>
  5562.                         <PropertyDesc idRef="5" propType="objRef">
  5563.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5564.                         </PropertyDesc>
  5565.                         <PropertyDesc idRef="21" propType="simple">
  5566.                             <SimpleValue valType="str">EXPLOIT x86 linux mountd overflow</SimpleValue>
  5567.                         </PropertyDesc>
  5568.                         <PropertyDesc idRef="30" propType="simple">
  5569.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB405E31C04089460489C3408906</SimpleValue>
  5570.                         </PropertyDesc>
  5571.                     </PropertyDescList>
  5572.                 </Rule>
  5573.                 <Rule guid="{81419B95-2968-4163-B25E-F2345FC88722}">
  5574.                     <ObjDescRef guidRef="{D80032DB-DFA6-4F81-A2BF-CE4764FA0192}"/>
  5575.                     <AccessDescList>
  5576.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5577.                     </AccessDescList>
  5578.                     <PropertyDescList>
  5579.                         <PropertyDesc idRef="20" propType="simple">
  5580.                             <SimpleValue valType="int">1272</SimpleValue>
  5581.                         </PropertyDesc>
  5582.                         <PropertyDesc idRef="5" propType="objRef">
  5583.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5584.                         </PropertyDesc>
  5585.                         <PropertyDesc idRef="21" propType="simple">
  5586.                             <SimpleValue valType="str">EXPLOIT bootp x86 bsd overflow</SimpleValue>
  5587.                         </PropertyDesc>
  5588.                         <PropertyDesc idRef="30" propType="simple">
  5589.                             <SimpleValue valType="binary">100000000000000000000000000000006563686F206E6574726A732073747265</SimpleValue>
  5590.                         </PropertyDesc>
  5591.                     </PropertyDescList>
  5592.                 </Rule>
  5593.                 <Rule guid="{845BF35C-83DC-45EE-B2DA-4893C06AA1AD}">
  5594.                     <ObjDescRef guidRef="{583D1D1F-A2EC-4609-AA9D-B387DE8915E5}"/>
  5595.                     <AccessDescList>
  5596.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5597.                     </AccessDescList>
  5598.                     <PropertyDescList>
  5599.                         <PropertyDesc idRef="20" propType="simple">
  5600.                             <SimpleValue valType="int">1276</SimpleValue>
  5601.                         </PropertyDesc>
  5602.                         <PropertyDesc idRef="5" propType="objRef">
  5603.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5604.                         </PropertyDesc>
  5605.                         <PropertyDesc idRef="21" propType="simple">
  5606.                             <SimpleValue valType="str">EXPLOIT bootp x86 linux overflow</SimpleValue>
  5607.                         </PropertyDesc>
  5608.                         <PropertyDesc idRef="30" propType="simple">
  5609.                             <SimpleValue valType="binary">0F000000000000000000000000000000413930C0A801012F62696E2F736800</SimpleValue>
  5610.                         </PropertyDesc>
  5611.                     </PropertyDescList>
  5612.                 </Rule>
  5613.                 <Rule guid="{4FC4D1BC-E279-4833-9C5C-A48C3CDC8FD3}">
  5614.                     <ObjDescRef guidRef="{6421930E-8FD9-4A16-B2EB-8136E47A5B21}"/>
  5615.                     <AccessDescList>
  5616.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5617.                     </AccessDescList>
  5618.                     <PropertyDescList>
  5619.                         <PropertyDesc idRef="20" propType="simple">
  5620.                             <SimpleValue valType="int">4960</SimpleValue>
  5621.                         </PropertyDesc>
  5622.                         <PropertyDesc idRef="5" propType="objRef">
  5623.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5624.                         </PropertyDesc>
  5625.                         <PropertyDesc idRef="21" propType="simple">
  5626.                             <SimpleValue valType="str">EXPLOIT MDBMS overflow</SimpleValue>
  5627.                         </PropertyDesc>
  5628.                         <PropertyDesc idRef="30" propType="simple">
  5629.                             <SimpleValue valType="binary">0A0000000000000000000000000000000131DBCD80E85BFFFFFF</SimpleValue>
  5630.                         </PropertyDesc>
  5631.                     </PropertyDescList>
  5632.                 </Rule>
  5633.                 <Rule guid="{02978EB1-AE95-48CF-A1AA-BA2CF8089A82}">
  5634.                     <ObjDescRef guidRef="{73FB929C-B9AD-4241-ACA1-CB3045E225CF}"/>
  5635.                     <AccessDescList>
  5636.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5637.                     </AccessDescList>
  5638.                     <PropertyDescList>
  5639.                         <PropertyDesc idRef="20" propType="simple">
  5640.                             <SimpleValue valType="int">5044</SimpleValue>
  5641.                         </PropertyDesc>
  5642.                         <PropertyDesc idRef="5" propType="objRef">
  5643.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5644.                         </PropertyDesc>
  5645.                         <PropertyDesc idRef="21" propType="simple">
  5646.                             <SimpleValue valType="str">EXPLOIT aix pdnsd overflow</SimpleValue>
  5647.                         </PropertyDesc>
  5648.                         <PropertyDesc idRef="30" propType="simple">
  5649.                             <SimpleValue valType="binary">100000000000000000000000000000007FFFFB787FFFFB787FFFFB787FFFFB78</SimpleValue>
  5650.                         </PropertyDesc>
  5651.                         <PropertyDesc idRef="30" propType="simple">
  5652.                             <SimpleValue valType="binary">10000000000000000000000000000000408AFFC84082FFD83B36FE033B76FE02</SimpleValue>
  5653.                         </PropertyDesc>
  5654.                         <PropertyDesc idRef="29" propType="simple">
  5655.                             <SimpleValue valType="int" valRelation="&gt;">1000</SimpleValue>
  5656.                         </PropertyDesc>
  5657.                     </PropertyDescList>
  5658.                 </Rule>
  5659.                 <Rule guid="{C8198F4B-8AB5-46B6-824D-DD86758BE1B6}">
  5660.                     <ObjDescRef guidRef="{4F1DC57D-655B-4114-9665-FF42FA19C457}"/>
  5661.                     <AccessDescList>
  5662.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5663.                     </AccessDescList>
  5664.                     <PropertyDescList>
  5665.                         <PropertyDesc idRef="20" propType="simple">
  5666.                             <SimpleValue valType="int">5292</SimpleValue>
  5667.                         </PropertyDesc>
  5668.                         <PropertyDesc idRef="5" propType="objRef">
  5669.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5670.                         </PropertyDesc>
  5671.                         <PropertyDesc idRef="21" propType="simple">
  5672.                             <SimpleValue valType="str">EXPLOIT rwhoisd format string attempt</SimpleValue>
  5673.                         </PropertyDesc>
  5674.                         <PropertyDesc idRef="30" propType="simple">
  5675.                             <SimpleValue valType="binary">070000000000000000000000000000002D736F61202570</SimpleValue>
  5676.                         </PropertyDesc>
  5677.                     </PropertyDescList>
  5678.                 </Rule>
  5679.                 <Rule guid="{961A4B93-6E11-46E3-840C-172609E022D3}">
  5680.                     <ObjDescRef guidRef="{A3883AC0-8176-4248-9618-D758A2E68CB2}"/>
  5681.                     <AccessDescList>
  5682.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5683.                     </AccessDescList>
  5684.                     <PropertyDescList>
  5685.                         <PropertyDesc idRef="20" propType="simple">
  5686.                             <SimpleValue valType="int">5296</SimpleValue>
  5687.                         </PropertyDesc>
  5688.                         <PropertyDesc idRef="5" propType="objRef">
  5689.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5690.                         </PropertyDesc>
  5691.                         <PropertyDesc idRef="21" propType="simple">
  5692.                             <SimpleValue valType="str">EXPLOIT ssh CRC32 overflow /bin/sh</SimpleValue>
  5693.                         </PropertyDesc>
  5694.                         <PropertyDesc idRef="30" propType="simple">
  5695.                             <SimpleValue valType="binary">070000000000000000000000000000002F62696E2F7368</SimpleValue>
  5696.                         </PropertyDesc>
  5697.                     </PropertyDescList>
  5698.                 </Rule>
  5699.                 <Rule guid="{B63495E2-2657-424D-A573-6B821ACC468A}">
  5700.                     <ObjDescRef guidRef="{024B8DA0-87E2-4E21-AC60-9153516016F7}"/>
  5701.                     <AccessDescList>
  5702.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5703.                     </AccessDescList>
  5704.                     <PropertyDescList>
  5705.                         <PropertyDesc idRef="20" propType="simple">
  5706.                             <SimpleValue valType="int">5304</SimpleValue>
  5707.                         </PropertyDesc>
  5708.                         <PropertyDesc idRef="5" propType="objRef">
  5709.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5710.                         </PropertyDesc>
  5711.                         <PropertyDesc idRef="21" propType="simple">
  5712.                             <SimpleValue valType="str">EXPLOIT ssh CRC32 overflow NOOP</SimpleValue>
  5713.                         </PropertyDesc>
  5714.                         <PropertyDesc idRef="30" propType="simple">
  5715.                             <SimpleValue valType="binary">1000000000000000000000000000000090909090909090909090909090909090</SimpleValue>
  5716.                         </PropertyDesc>
  5717.                     </PropertyDescList>
  5718.                 </Rule>
  5719.                 <Rule guid="{9F30ECB1-041A-441B-B96F-47E2237F6221}">
  5720.                     <ObjDescRef guidRef="{4DDB087C-BA94-4AB0-AAC7-880AC37D6270}"/>
  5721.                     <AccessDescList>
  5722.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5723.                     </AccessDescList>
  5724.                     <PropertyDescList>
  5725.                         <PropertyDesc idRef="20" propType="simple">
  5726.                             <SimpleValue valType="int">5308</SimpleValue>
  5727.                         </PropertyDesc>
  5728.                         <PropertyDesc idRef="5" propType="objRef">
  5729.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5730.                         </PropertyDesc>
  5731.                         <PropertyDesc idRef="21" propType="simple">
  5732.                             <SimpleValue valType="str">EXPLOIT ssh CRC32 overflow</SimpleValue>
  5733.                         </PropertyDesc>
  5734.                         <PropertyDesc idRef="30" propType="simple">
  5735.                             <SimpleValue valType="binary">0700000000000000070000000000000000015700000018</SimpleValue>
  5736.                         </PropertyDesc>
  5737.                         <PropertyDesc idRef="30" propType="simple">
  5738.                             <SimpleValue valType="binary">06000000080000000E00000000000000FFFFFFFF0000</SimpleValue>
  5739.                         </PropertyDesc>
  5740.                     </PropertyDescList>
  5741.                 </Rule>
  5742.                 <Rule guid="{9DBF8DC9-D3EC-4B28-9D9C-270514EA7538}">
  5743.                     <ObjDescRef guidRef="{653C18D0-1616-4C24-A10B-6422CC896D81}"/>
  5744.                     <AccessDescList>
  5745.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5746.                     </AccessDescList>
  5747.                     <PropertyDescList>
  5748.                         <PropertyDesc idRef="20" propType="simple">
  5749.                             <SimpleValue valType="int">5592</SimpleValue>
  5750.                         </PropertyDesc>
  5751.                         <PropertyDesc idRef="5" propType="objRef">
  5752.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5753.                         </PropertyDesc>
  5754.                         <PropertyDesc idRef="21" propType="simple">
  5755.                             <SimpleValue valType="str">EXPLOIT CDE dtspcd exploit attempt</SimpleValue>
  5756.                         </PropertyDesc>
  5757.                         <PropertyDesc idRef="30" propType="simple">
  5758.                             <SimpleValue valType="binary">010000000A000000010000000000000031</SimpleValue>
  5759.                         </PropertyDesc>
  5760.                         <PropertyDesc idRef="30" propType="simple">
  5761.                             <SimpleValue valType="binary">030000000B0000000300000001000000303030</SimpleValue>
  5762.                         </PropertyDesc>
  5763.                     </PropertyDescList>
  5764.                 </Rule>
  5765.                 <Rule guid="{A0F925E2-4546-444D-A9A9-067867B16AD7}">
  5766.                     <ObjDescRef guidRef="{DEAC3710-B3F8-458B-950E-5AEE0DBE4047}"/>
  5767.                     <AccessDescList>
  5768.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5769.                     </AccessDescList>
  5770.                     <PropertyDescList>
  5771.                         <PropertyDesc idRef="20" propType="simple">
  5772.                             <SimpleValue valType="int">7004</SimpleValue>
  5773.                         </PropertyDesc>
  5774.                         <PropertyDesc idRef="5" propType="objRef">
  5775.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5776.                         </PropertyDesc>
  5777.                         <PropertyDesc idRef="21" propType="simple">
  5778.                             <SimpleValue valType="str">EXPLOIT cachefsd buffer overflow attempt</SimpleValue>
  5779.                         </PropertyDesc>
  5780.                         <PropertyDesc idRef="29" propType="simple">
  5781.                             <SimpleValue valType="int" valRelation="&gt;">720</SimpleValue>
  5782.                         </PropertyDesc>
  5783.                         <PropertyDesc idRef="30" propType="simple">
  5784.                             <SimpleValue valType="binary">0C000000000000000000000000000000000187860000000100000005</SimpleValue>
  5785.                         </PropertyDesc>
  5786.                     </PropertyDescList>
  5787.                 </Rule>
  5788.             </RuleByObjTypeList>
  5789.         </Profile>
  5790.         <Profile guid="{17905D9D-E937-4407-AFD1-4EF99F86DFC6}">
  5791.             <ExecSetDescList/>
  5792.             <RuleByObjTypeList typeRef="262">
  5793.                 <Rule guid="{35A75085-5781-4073-9F01-BDF233D0B90B}">
  5794.                     <ObjDescRef guidRef="{9986581E-5BB0-42BA-AF69-044A7A9C69FC}"/>
  5795.                     <AccessDescList>
  5796.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5797.                     </AccessDescList>
  5798.                     <PropertyDescList>
  5799.                         <PropertyDesc idRef="20" propType="simple">
  5800.                             <SimpleValue valType="int">1144</SimpleValue>
  5801.                         </PropertyDesc>
  5802.                         <PropertyDesc idRef="5" propType="objRef">
  5803.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5804.                         </PropertyDesc>
  5805.                         <PropertyDesc idRef="21" propType="simple">
  5806.                             <SimpleValue valType="str">POP3 EXPLOIT x86 bsd overflow</SimpleValue>
  5807.                         </PropertyDesc>
  5808.                         <PropertyDesc idRef="30" propType="simple">
  5809.                             <SimpleValue valType="binary">0E00000000000000000000000000000005E0E31C0B03B8D7E0E809FA89F9</SimpleValue>
  5810.                         </PropertyDesc>
  5811.                     </PropertyDescList>
  5812.                 </Rule>
  5813.                 <Rule guid="{50067802-907C-497D-AE0E-7B82EDD6EE43}">
  5814.                     <ObjDescRef guidRef="{675FFFA9-6774-4A98-AE74-848B65391D34}"/>
  5815.                     <AccessDescList>
  5816.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5817.                     </AccessDescList>
  5818.                     <PropertyDescList>
  5819.                         <PropertyDesc idRef="20" propType="simple">
  5820.                             <SimpleValue valType="int">1148</SimpleValue>
  5821.                         </PropertyDesc>
  5822.                         <PropertyDesc idRef="5" propType="objRef">
  5823.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5824.                         </PropertyDesc>
  5825.                         <PropertyDesc idRef="21" propType="simple">
  5826.                             <SimpleValue valType="str">POP3 EXPLOIT x86 bsd overflow</SimpleValue>
  5827.                         </PropertyDesc>
  5828.                         <PropertyDesc idRef="30" propType="simple">
  5829.                             <SimpleValue valType="binary">0E000000000000000000000000000000685D5EFFD5FFD4FFF58BF5906631</SimpleValue>
  5830.                         </PropertyDesc>
  5831.                     </PropertyDescList>
  5832.                 </Rule>
  5833.                 <Rule guid="{89FBCF97-445C-4BE8-847C-EA9B635DAF2B}">
  5834.                     <ObjDescRef guidRef="{A1330C65-D5FF-4C41-B758-4984CD54294A}"/>
  5835.                     <AccessDescList>
  5836.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5837.                     </AccessDescList>
  5838.                     <PropertyDescList>
  5839.                         <PropertyDesc idRef="20" propType="simple">
  5840.                             <SimpleValue valType="int">1152</SimpleValue>
  5841.                         </PropertyDesc>
  5842.                         <PropertyDesc idRef="5" propType="objRef">
  5843.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5844.                         </PropertyDesc>
  5845.                         <PropertyDesc idRef="21" propType="simple">
  5846.                             <SimpleValue valType="str">POP3 EXPLOIT x86 linux overflow</SimpleValue>
  5847.                         </PropertyDesc>
  5848.                         <PropertyDesc idRef="30" propType="simple">
  5849.                             <SimpleValue valType="binary">10000000000000000000000000000000D840CD80E8D9FFFFFF2F62696E2F7368</SimpleValue>
  5850.                         </PropertyDesc>
  5851.                     </PropertyDescList>
  5852.                 </Rule>
  5853.                 <Rule guid="{AC8241CE-5F15-41BE-B2B5-945D705F5C5D}">
  5854.                     <ObjDescRef guidRef="{606063B4-5C45-44E8-8A2B-3822E998E4E5}"/>
  5855.                     <AccessDescList>
  5856.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5857.                     </AccessDescList>
  5858.                     <PropertyDescList>
  5859.                         <PropertyDesc idRef="20" propType="simple">
  5860.                             <SimpleValue valType="int">1156</SimpleValue>
  5861.                         </PropertyDesc>
  5862.                         <PropertyDesc idRef="5" propType="objRef">
  5863.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5864.                         </PropertyDesc>
  5865.                         <PropertyDesc idRef="21" propType="simple">
  5866.                             <SimpleValue valType="str">POP3 EXPLOIT x86 sco overflow</SimpleValue>
  5867.                         </PropertyDesc>
  5868.                         <PropertyDesc idRef="30" propType="simple">
  5869.                             <SimpleValue valType="binary">0D000000000000000000000000000000560E31C0B03B8D7E1289F989F9</SimpleValue>
  5870.                         </PropertyDesc>
  5871.                     </PropertyDescList>
  5872.                 </Rule>
  5873.                 <Rule guid="{4887B8EF-3F34-4D68-A855-B30F61164CF9}">
  5874.                     <ObjDescRef guidRef="{FF777D7A-8395-4D23-835A-3FAF136339E0}"/>
  5875.                     <AccessDescList>
  5876.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5877.                     </AccessDescList>
  5878.                     <PropertyDescList>
  5879.                         <PropertyDesc idRef="20" propType="simple">
  5880.                             <SimpleValue valType="int">1160</SimpleValue>
  5881.                         </PropertyDesc>
  5882.                         <PropertyDesc idRef="5" propType="objRef">
  5883.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5884.                         </PropertyDesc>
  5885.                         <PropertyDesc idRef="21" propType="simple">
  5886.                             <SimpleValue valType="str">POP3 EXPLOIT qpopper overflow</SimpleValue>
  5887.                         </PropertyDesc>
  5888.                         <PropertyDesc idRef="30" propType="simple">
  5889.                             <SimpleValue valType="binary">0C000000000000000000000000000000E8D9FFFFFF2F62696E2F7368</SimpleValue>
  5890.                         </PropertyDesc>
  5891.                     </PropertyDescList>
  5892.                 </Rule>
  5893.                 <Rule guid="{88D7837D-749D-4B07-A60E-740693C49FC6}">
  5894.                     <ObjDescRef guidRef="{FB574E16-8020-4B02-BAB5-513EE9992ECD}"/>
  5895.                     <AccessDescList>
  5896.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5897.                     </AccessDescList>
  5898.                     <PropertyDescList>
  5899.                         <PropertyDesc idRef="20" propType="simple">
  5900.                             <SimpleValue valType="int">6536</SimpleValue>
  5901.                         </PropertyDesc>
  5902.                         <PropertyDesc idRef="5" propType="objRef">
  5903.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5904.                         </PropertyDesc>
  5905.                         <PropertyDesc idRef="21" propType="simple">
  5906.                             <SimpleValue valType="str">POP3 PASS overflow attempt</SimpleValue>
  5907.                         </PropertyDesc>
  5908.                         <PropertyDesc idRef="29" propType="simple">
  5909.                             <SimpleValue valType="int" valRelation="&gt;">500</SimpleValue>
  5910.                         </PropertyDesc>
  5911.                         <PropertyDesc idRef="30" propType="simple">
  5912.                             <SimpleValue valType="binary">050000000000000000000000000001005041535320</SimpleValue>
  5913.                         </PropertyDesc>
  5914.                     </PropertyDescList>
  5915.                 </Rule>
  5916.                 <Rule guid="{DBB25AE5-E4DB-413C-ADC7-8D3C4B915AEA}">
  5917.                     <ObjDescRef guidRef="{A8BF425C-D0EA-4A6B-995C-3FEA04BD5F75}"/>
  5918.                     <AccessDescList>
  5919.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5920.                     </AccessDescList>
  5921.                     <PropertyDescList>
  5922.                         <PropertyDesc idRef="20" propType="simple">
  5923.                             <SimpleValue valType="int">6540</SimpleValue>
  5924.                         </PropertyDesc>
  5925.                         <PropertyDesc idRef="5" propType="objRef">
  5926.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5927.                         </PropertyDesc>
  5928.                         <PropertyDesc idRef="21" propType="simple">
  5929.                             <SimpleValue valType="str">POP3 APOP overflow attempt</SimpleValue>
  5930.                         </PropertyDesc>
  5931.                         <PropertyDesc idRef="29" propType="simple">
  5932.                             <SimpleValue valType="int" valRelation="&gt;">500</SimpleValue>
  5933.                         </PropertyDesc>
  5934.                         <PropertyDesc idRef="30" propType="simple">
  5935.                             <SimpleValue valType="binary">0500000000000000000000000000010041504F5020</SimpleValue>
  5936.                         </PropertyDesc>
  5937.                     </PropertyDescList>
  5938.                 </Rule>
  5939.                 <Rule guid="{7C6E76B6-57BB-4703-85B7-42DF353E68DA}">
  5940.                     <ObjDescRef guidRef="{6E1C516B-565E-43DD-A496-C1BF731EBEB9}"/>
  5941.                     <AccessDescList>
  5942.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5943.                     </AccessDescList>
  5944.                     <PropertyDescList>
  5945.                         <PropertyDesc idRef="20" propType="simple">
  5946.                             <SimpleValue valType="int">7464</SimpleValue>
  5947.                         </PropertyDesc>
  5948.                         <PropertyDesc idRef="5" propType="objRef">
  5949.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5950.                         </PropertyDesc>
  5951.                         <PropertyDesc idRef="21" propType="simple">
  5952.                             <SimpleValue valType="str">POP3 USER overflow attempt</SimpleValue>
  5953.                         </PropertyDesc>
  5954.                         <PropertyDesc idRef="29" propType="simple">
  5955.                             <SimpleValue valType="int" valRelation="&gt;">500</SimpleValue>
  5956.                         </PropertyDesc>
  5957.                         <PropertyDesc idRef="30" propType="simple">
  5958.                             <SimpleValue valType="binary">050000000000000000000000000001005553455220</SimpleValue>
  5959.                         </PropertyDesc>
  5960.                     </PropertyDescList>
  5961.                 </Rule>
  5962.             </RuleByObjTypeList>
  5963.         </Profile>
  5964.         <Profile guid="{252700C2-2C2A-40C8-9A64-AB022A463CA4}">
  5965.             <ExecSetDescList/>
  5966.             <RuleByObjTypeList typeRef="262">
  5967.                 <Rule guid="{49BD99D5-FA3E-44CC-8A57-0CC562258F33}">
  5968.                     <ObjDescRef guidRef="{8E56C796-2910-4E61-9DB4-5EA173595046}"/>
  5969.                     <AccessDescList>
  5970.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5971.                     </AccessDescList>
  5972.                     <PropertyDescList>
  5973.                         <PropertyDesc idRef="20" propType="simple">
  5974.                             <SimpleValue valType="int">1164</SimpleValue>
  5975.                         </PropertyDesc>
  5976.                         <PropertyDesc idRef="5" propType="objRef">
  5977.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  5978.                         </PropertyDesc>
  5979.                         <PropertyDesc idRef="21" propType="simple">
  5980.                             <SimpleValue valType="str">NNTP Cassandra Overflow</SimpleValue>
  5981.                         </PropertyDesc>
  5982.                         <PropertyDesc idRef="30" propType="simple">
  5983.                             <SimpleValue valType="binary">0D00000000000000100000000000010041555448494E464F2055534552</SimpleValue>
  5984.                         </PropertyDesc>
  5985.                         <PropertyDesc idRef="29" propType="simple">
  5986.                             <SimpleValue valType="int" valRelation="&gt;">512</SimpleValue>
  5987.                         </PropertyDesc>
  5988.                     </PropertyDescList>
  5989.                 </Rule>
  5990.                 <Rule guid="{2CA91B3C-4BEB-4651-B564-6B0C06528F18}">
  5991.                     <ObjDescRef guidRef="{7D9700CA-2192-4AB3-B995-79DA59F341CE}"/>
  5992.                     <AccessDescList>
  5993.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  5994.                     </AccessDescList>
  5995.                     <PropertyDescList>
  5996.                         <PropertyDesc idRef="20" propType="simple">
  5997.                             <SimpleValue valType="int">6152</SimpleValue>
  5998.                         </PropertyDesc>
  5999.                         <PropertyDesc idRef="5" propType="objRef">
  6000.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6001.                         </PropertyDesc>
  6002.                         <PropertyDesc idRef="21" propType="simple">
  6003.                             <SimpleValue valType="str">NNTP AUTHINFO USER overflow attempt</SimpleValue>
  6004.                         </PropertyDesc>
  6005.                         <PropertyDesc idRef="29" propType="simple">
  6006.                             <SimpleValue valType="int" valRelation="&gt;">500</SimpleValue>
  6007.                         </PropertyDesc>
  6008.                         <PropertyDesc idRef="30" propType="simple">
  6009.                             <SimpleValue valType="binary">0E00000000000000000000000000010041555448494E464F205553455220</SimpleValue>
  6010.                         </PropertyDesc>
  6011.                     </PropertyDescList>
  6012.                 </Rule>
  6013.                 <Rule guid="{2CDEAB01-1BB3-4776-8A8D-51D5A086EB60}">
  6014.                     <ObjDescRef guidRef="{72194F38-B50C-45DA-8F48-01F2ECCBFA32}"/>
  6015.                     <AccessDescList>
  6016.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6017.                     </AccessDescList>
  6018.                     <PropertyDescList>
  6019.                         <PropertyDesc idRef="20" propType="simple">
  6020.                             <SimpleValue valType="int">7168</SimpleValue>
  6021.                         </PropertyDesc>
  6022.                         <PropertyDesc idRef="5" propType="objRef">
  6023.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6024.                         </PropertyDesc>
  6025.                         <PropertyDesc idRef="21" propType="simple">
  6026.                             <SimpleValue valType="str">NNTP return code buffer overflow attempt</SimpleValue>
  6027.                         </PropertyDesc>
  6028.                         <PropertyDesc idRef="30" propType="simple">
  6029.                             <SimpleValue valType="binary">0400000000000000040000000000000032303020</SimpleValue>
  6030.                         </PropertyDesc>
  6031.                         <PropertyDesc idRef="29" propType="simple">
  6032.                             <SimpleValue valType="int" valRelation="&gt;">100</SimpleValue>
  6033.                         </PropertyDesc>
  6034.                     </PropertyDescList>
  6035.                 </Rule>
  6036.             </RuleByObjTypeList>
  6037.         </Profile>
  6038.         <Profile guid="{17D74155-3C39-41FF-99CF-762859C2191B}">
  6039.             <ExecSetDescList/>
  6040.             <RuleByObjTypeList typeRef="262">
  6041.                 <Rule guid="{BDB48946-7B38-41D8-9FF1-0C8FFA759B2D}">
  6042.                     <ObjDescRef guidRef="{AF4510A4-1730-4AE0-A8D5-17465CB9DECE}"/>
  6043.                     <AccessDescList>
  6044.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6045.                     </AccessDescList>
  6046.                     <PropertyDescList>
  6047.                         <PropertyDesc idRef="20" propType="simple">
  6048.                             <SimpleValue valType="int">1172</SimpleValue>
  6049.                         </PropertyDesc>
  6050.                         <PropertyDesc idRef="5" propType="objRef">
  6051.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6052.                         </PropertyDesc>
  6053.                         <PropertyDesc idRef="21" propType="simple">
  6054.                             <SimpleValue valType="str">IMAP EXPLOIT overflow</SimpleValue>
  6055.                         </PropertyDesc>
  6056.                         <PropertyDesc idRef="30" propType="simple">
  6057.                             <SimpleValue valType="binary">0C000000000000000000000000000000E8C0FFFFFF2F62696E2F7368</SimpleValue>
  6058.                         </PropertyDesc>
  6059.                     </PropertyDescList>
  6060.                 </Rule>
  6061.                 <Rule guid="{7332C1C3-F03C-4304-B86C-9010A36CCE43}">
  6062.                     <ObjDescRef guidRef="{86191E61-F487-4370-BAEB-6D6F6AF0EB52}"/>
  6063.                     <AccessDescList>
  6064.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6065.                     </AccessDescList>
  6066.                     <PropertyDescList>
  6067.                         <PropertyDesc idRef="20" propType="simple">
  6068.                             <SimpleValue valType="int">1180</SimpleValue>
  6069.                         </PropertyDesc>
  6070.                         <PropertyDesc idRef="5" propType="objRef">
  6071.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6072.                         </PropertyDesc>
  6073.                         <PropertyDesc idRef="21" propType="simple">
  6074.                             <SimpleValue valType="str">IMAP EXPLOIT x86 linux overflow</SimpleValue>
  6075.                         </PropertyDesc>
  6076.                         <PropertyDesc idRef="30" propType="simple">
  6077.                             <SimpleValue valType="binary">0B00000000000000000000000000000089D840CD80E8C8FFFFFF2F</SimpleValue>
  6078.                         </PropertyDesc>
  6079.                     </PropertyDescList>
  6080.                 </Rule>
  6081.                 <Rule guid="{6C658A3B-F45B-43E2-99A7-E1C0126FBACF}">
  6082.                     <ObjDescRef guidRef="{A26BBC22-31F5-45D2-BAE8-9F29986D3744}"/>
  6083.                     <AccessDescList>
  6084.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6085.                     </AccessDescList>
  6086.                     <PropertyDescList>
  6087.                         <PropertyDesc idRef="20" propType="simple">
  6088.                             <SimpleValue valType="int">1184</SimpleValue>
  6089.                         </PropertyDesc>
  6090.                         <PropertyDesc idRef="5" propType="objRef">
  6091.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6092.                         </PropertyDesc>
  6093.                         <PropertyDesc idRef="21" propType="simple">
  6094.                             <SimpleValue valType="str">IMAP EXPLOIT x86 linux overflow</SimpleValue>
  6095.                         </PropertyDesc>
  6096.                         <PropertyDesc idRef="30" propType="simple">
  6097.                             <SimpleValue valType="binary">0D000000000000000000000000000000EB345E8D1E895E0B31D2895607</SimpleValue>
  6098.                         </PropertyDesc>
  6099.                     </PropertyDescList>
  6100.                 </Rule>
  6101.                 <Rule guid="{D798F784-DE6C-4567-A0D0-6A0A8EC10113}">
  6102.                     <ObjDescRef guidRef="{006DDC5A-36FC-49F0-830A-F2EB3AA26347}"/>
  6103.                     <AccessDescList>
  6104.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6105.                     </AccessDescList>
  6106.                     <PropertyDescList>
  6107.                         <PropertyDesc idRef="20" propType="simple">
  6108.                             <SimpleValue valType="int">1188</SimpleValue>
  6109.                         </PropertyDesc>
  6110.                         <PropertyDesc idRef="5" propType="objRef">
  6111.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6112.                         </PropertyDesc>
  6113.                         <PropertyDesc idRef="21" propType="simple">
  6114.                             <SimpleValue valType="str">IMAP EXPLOIT x86 linux overflow</SimpleValue>
  6115.                         </PropertyDesc>
  6116.                         <PropertyDesc idRef="30" propType="simple">
  6117.                             <SimpleValue valType="binary">0F000000000000000000000000000000EB355E804601308046023080460330</SimpleValue>
  6118.                         </PropertyDesc>
  6119.                     </PropertyDescList>
  6120.                 </Rule>
  6121.                 <Rule guid="{E715C8C9-CFF5-40C8-B523-2A43B783315C}">
  6122.                     <ObjDescRef guidRef="{AF56BA4F-D0FB-43BB-A35B-78F6F0541C6C}"/>
  6123.                     <AccessDescList>
  6124.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6125.                     </AccessDescList>
  6126.                     <PropertyDescList>
  6127.                         <PropertyDesc idRef="20" propType="simple">
  6128.                             <SimpleValue valType="int">1192</SimpleValue>
  6129.                         </PropertyDesc>
  6130.                         <PropertyDesc idRef="5" propType="objRef">
  6131.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6132.                         </PropertyDesc>
  6133.                         <PropertyDesc idRef="21" propType="simple">
  6134.                             <SimpleValue valType="str">IMAP EXPLOIT x86 linux overflow</SimpleValue>
  6135.                         </PropertyDesc>
  6136.                         <PropertyDesc idRef="30" propType="simple">
  6137.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB385E89F389D880460120804602</SimpleValue>
  6138.                         </PropertyDesc>
  6139.                     </PropertyDescList>
  6140.                 </Rule>
  6141.                 <Rule guid="{6E8DD3FF-2E10-4EEE-BFD1-89E5E0D60DEB}">
  6142.                     <ObjDescRef guidRef="{0CE40A62-B725-441F-BAC6-2E87CD8EB51D}"/>
  6143.                     <AccessDescList>
  6144.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6145.                     </AccessDescList>
  6146.                     <PropertyDescList>
  6147.                         <PropertyDesc idRef="20" propType="simple">
  6148.                             <SimpleValue valType="int">1196</SimpleValue>
  6149.                         </PropertyDesc>
  6150.                         <PropertyDesc idRef="5" propType="objRef">
  6151.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6152.                         </PropertyDesc>
  6153.                         <PropertyDesc idRef="21" propType="simple">
  6154.                             <SimpleValue valType="str">IMAP EXPLOIT x86 linux overflow</SimpleValue>
  6155.                         </PropertyDesc>
  6156.                         <PropertyDesc idRef="30" propType="simple">
  6157.                             <SimpleValue valType="binary">0E000000000000000000000000000000EB585E31DB83C30883C302885E26</SimpleValue>
  6158.                         </PropertyDesc>
  6159.                     </PropertyDescList>
  6160.                 </Rule>
  6161.                 <Rule guid="{8EF65961-DB24-47D1-9494-6ADA09BFFE6E}">
  6162.                     <ObjDescRef guidRef="{0F2227A6-46A9-43C2-8381-EEB7C76C8199}"/>
  6163.                     <AccessDescList>
  6164.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6165.                     </AccessDescList>
  6166.                     <PropertyDescList>
  6167.                         <PropertyDesc idRef="20" propType="simple">
  6168.                             <SimpleValue valType="int">7020</SimpleValue>
  6169.                         </PropertyDesc>
  6170.                         <PropertyDesc idRef="5" propType="objRef">
  6171.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6172.                         </PropertyDesc>
  6173.                         <PropertyDesc idRef="21" propType="simple">
  6174.                             <SimpleValue valType="str">IMAP EXPLOIT partial body attempt</SimpleValue>
  6175.                         </PropertyDesc>
  6176.                         <PropertyDesc idRef="30" propType="simple">
  6177.                             <SimpleValue valType="binary">09000000000000000000000000000000205041525449414C20</SimpleValue>
  6178.                         </PropertyDesc>
  6179.                         <PropertyDesc idRef="30" propType="simple">
  6180.                             <SimpleValue valType="binary">0500000000000000000000000000000020424F4459</SimpleValue>
  6181.                         </PropertyDesc>
  6182.                     </PropertyDescList>
  6183.                 </Rule>
  6184.                 <Rule guid="{623625D3-727A-439C-9DBA-51DC8B1F3B43}">
  6185.                     <ObjDescRef guidRef="{C03E547E-110E-4932-95E6-23C46B9D1BD0}"/>
  6186.                     <AccessDescList>
  6187.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6188.                     </AccessDescList>
  6189.                     <PropertyDescList>
  6190.                         <PropertyDesc idRef="20" propType="simple">
  6191.                             <SimpleValue valType="int">7120</SimpleValue>
  6192.                         </PropertyDesc>
  6193.                         <PropertyDesc idRef="5" propType="objRef">
  6194.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6195.                         </PropertyDesc>
  6196.                         <PropertyDesc idRef="21" propType="simple">
  6197.                             <SimpleValue valType="str">IMAP EXPLOIT partial body overflow attempt</SimpleValue>
  6198.                         </PropertyDesc>
  6199.                         <PropertyDesc idRef="30" propType="simple">
  6200.                             <SimpleValue valType="binary">120000000000000000000000000000002078205041525449414C203120424F44595B</SimpleValue>
  6201.                         </PropertyDesc>
  6202.                         <PropertyDesc idRef="29" propType="simple">
  6203.                             <SimpleValue valType="int" valRelation="&gt;">1092</SimpleValue>
  6204.                         </PropertyDesc>
  6205.                     </PropertyDescList>
  6206.                 </Rule>
  6207.             </RuleByObjTypeList>
  6208.         </Profile>
  6209.         <Profile guid="{C32C75FD-A2EF-48FC-A1C9-5CE007785F4C}">
  6210.             <ExecSetDescList/>
  6211.             <RuleByObjTypeList typeRef="262">
  6212.                 <Rule guid="{14D506AE-C4EB-46A5-AF4F-1C7A5613BFA8}">
  6213.                     <ObjDescRef guidRef="{FD461C95-15EC-4AFA-9CA2-EDB855CC742C}"/>
  6214.                     <AccessDescList>
  6215.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6216.                     </AccessDescList>
  6217.                     <PropertyDescList>
  6218.                         <PropertyDesc idRef="20" propType="simple">
  6219.                             <SimpleValue valType="int">1228</SimpleValue>
  6220.                         </PropertyDesc>
  6221.                         <PropertyDesc idRef="5" propType="objRef">
  6222.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6223.                         </PropertyDesc>
  6224.                         <PropertyDesc idRef="21" propType="simple">
  6225.                             <SimpleValue valType="str">CHAT IRC EXPLOIT topic overflow</SimpleValue>
  6226.                         </PropertyDesc>
  6227.                         <PropertyDesc idRef="30" propType="simple">
  6228.                             <SimpleValue valType="binary">0F000000000000000000000000000000EB4B5B5332E483C30B4B8823B85077</SimpleValue>
  6229.                         </PropertyDesc>
  6230.                     </PropertyDescList>
  6231.                 </Rule>
  6232.                 <Rule guid="{BC12DE81-C9C5-46EF-B589-7FCAC9311BED}">
  6233.                     <ObjDescRef guidRef="{A5DE220F-160C-48D4-ACDE-4AA0B24EC39A}"/>
  6234.                     <AccessDescList>
  6235.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6236.                     </AccessDescList>
  6237.                     <PropertyDescList>
  6238.                         <PropertyDesc idRef="20" propType="simple">
  6239.                             <SimpleValue valType="int">2160</SimpleValue>
  6240.                         </PropertyDesc>
  6241.                         <PropertyDesc idRef="5" propType="objRef">
  6242.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6243.                         </PropertyDesc>
  6244.                         <PropertyDesc idRef="21" propType="simple">
  6245.                             <SimpleValue valType="str">CHAT MSN chat access</SimpleValue>
  6246.                         </PropertyDesc>
  6247.                         <PropertyDesc idRef="30" propType="simple">
  6248.                             <SimpleValue valType="binary">0A000000000000006400000000000000746578742F706C61696E</SimpleValue>
  6249.                         </PropertyDesc>
  6250.                     </PropertyDescList>
  6251.                 </Rule>
  6252.                 <Rule guid="{DA339C6B-3B4A-462E-A637-A9033B2E851A}">
  6253.                     <ObjDescRef guidRef="{15CF7CB2-87B5-4E8F-A404-C02C58A69F80}"/>
  6254.                     <AccessDescList>
  6255.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6256.                     </AccessDescList>
  6257.                     <PropertyDescList>
  6258.                         <PropertyDesc idRef="20" propType="simple">
  6259.                             <SimpleValue valType="int">2164</SimpleValue>
  6260.                         </PropertyDesc>
  6261.                         <PropertyDesc idRef="5" propType="objRef">
  6262.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6263.                         </PropertyDesc>
  6264.                         <PropertyDesc idRef="21" propType="simple">
  6265.                             <SimpleValue valType="str">CHAT ICQ access</SimpleValue>
  6266.                         </PropertyDesc>
  6267.                         <PropertyDesc idRef="30" propType="simple">
  6268.                             <SimpleValue valType="binary">0F000000000000000000000000000000557365722D4167656E745C3A494351</SimpleValue>
  6269.                         </PropertyDesc>
  6270.                     </PropertyDescList>
  6271.                 </Rule>
  6272.                 <Rule guid="{6406ED0D-94CB-445D-8747-B7F0904F36A6}">
  6273.                     <ObjDescRef guidRef="{BBA5A50D-A4A9-4620-8FF5-B8C8DD016657}"/>
  6274.                     <AccessDescList>
  6275.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6276.                     </AccessDescList>
  6277.                     <PropertyDescList>
  6278.                         <PropertyDesc idRef="20" propType="simple">
  6279.                             <SimpleValue valType="int">2168</SimpleValue>
  6280.                         </PropertyDesc>
  6281.                         <PropertyDesc idRef="5" propType="objRef">
  6282.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6283.                         </PropertyDesc>
  6284.                         <PropertyDesc idRef="21" propType="simple">
  6285.                             <SimpleValue valType="str">CHAT IRC nick change</SimpleValue>
  6286.                         </PropertyDesc>
  6287.                         <PropertyDesc idRef="30" propType="simple">
  6288.                             <SimpleValue valType="binary">050000000000000000000000000000004E49434B20</SimpleValue>
  6289.                         </PropertyDesc>
  6290.                     </PropertyDescList>
  6291.                 </Rule>
  6292.                 <Rule guid="{AD618A07-2269-460D-AEA0-BC3CDE492A0D}">
  6293.                     <ObjDescRef guidRef="{AE572B82-700B-449B-BA26-3DEAD2E7FC29}"/>
  6294.                     <AccessDescList>
  6295.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6296.                     </AccessDescList>
  6297.                     <PropertyDescList>
  6298.                         <PropertyDesc idRef="20" propType="simple">
  6299.                             <SimpleValue valType="int">5528</SimpleValue>
  6300.                         </PropertyDesc>
  6301.                         <PropertyDesc idRef="5" propType="objRef">
  6302.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6303.                         </PropertyDesc>
  6304.                         <PropertyDesc idRef="21" propType="simple">
  6305.                             <SimpleValue valType="str">CHAT IRC EXPLOIT Ettercap parse overflow attempt</SimpleValue>
  6306.                         </PropertyDesc>
  6307.                         <PropertyDesc idRef="30" propType="simple">
  6308.                             <SimpleValue valType="binary">19000000000000000000000000000100505249564D5347206E69636B73657276204944454E54494659</SimpleValue>
  6309.                         </PropertyDesc>
  6310.                         <PropertyDesc idRef="29" propType="simple">
  6311.                             <SimpleValue valType="int" valRelation="&gt;">200</SimpleValue>
  6312.                         </PropertyDesc>
  6313.                     </PropertyDescList>
  6314.                 </Rule>
  6315.                 <Rule guid="{97D4C959-FA17-4992-B567-B884820E1097}">
  6316.                     <ObjDescRef guidRef="{BB99613E-7E34-4121-AA5D-A72F624A93C6}"/>
  6317.                     <AccessDescList>
  6318.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6319.                     </AccessDescList>
  6320.                     <PropertyDescList>
  6321.                         <PropertyDesc idRef="20" propType="simple">
  6322.                             <SimpleValue valType="int">5529</SimpleValue>
  6323.                         </PropertyDesc>
  6324.                         <PropertyDesc idRef="5" propType="objRef">
  6325.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6326.                         </PropertyDesc>
  6327.                         <PropertyDesc idRef="21" propType="simple">
  6328.                             <SimpleValue valType="str">CHAT IRC EXPLOIT Ettercap parse overflow attempt</SimpleValue>
  6329.                         </PropertyDesc>
  6330.                         <PropertyDesc idRef="30" propType="simple">
  6331.                             <SimpleValue valType="binary">19000000000000000000000000000100505249564D5347206E69636B73657276204944454E54494659</SimpleValue>
  6332.                         </PropertyDesc>
  6333.                         <PropertyDesc idRef="29" propType="simple">
  6334.                             <SimpleValue valType="int" valRelation="&gt;">200</SimpleValue>
  6335.                         </PropertyDesc>
  6336.                     </PropertyDescList>
  6337.                 </Rule>
  6338.                 <Rule guid="{3EF35FFC-BD95-44DF-8A1F-2E133CECC38C}">
  6339.                     <ObjDescRef guidRef="{80FD86BA-613D-44A0-9697-994EFBE7B1EF}"/>
  6340.                     <AccessDescList>
  6341.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6342.                     </AccessDescList>
  6343.                     <PropertyDescList>
  6344.                         <PropertyDesc idRef="20" propType="simple">
  6345.                             <SimpleValue valType="int">5852</SimpleValue>
  6346.                         </PropertyDesc>
  6347.                         <PropertyDesc idRef="5" propType="objRef">
  6348.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6349.                         </PropertyDesc>
  6350.                         <PropertyDesc idRef="21" propType="simple">
  6351.                             <SimpleValue valType="str">CHAT IRC message</SimpleValue>
  6352.                         </PropertyDesc>
  6353.                         <PropertyDesc idRef="30" propType="simple">
  6354.                             <SimpleValue valType="binary">08000000000000000000000000000100505249564D534720</SimpleValue>
  6355.                         </PropertyDesc>
  6356.                     </PropertyDescList>
  6357.                 </Rule>
  6358.                 <Rule guid="{E1B38B1E-7BB9-48C5-9049-47C53798CEBB}">
  6359.                     <ObjDescRef guidRef="{53E78E15-A2BC-44C1-BC17-BC0CC5844EE7}"/>
  6360.                     <AccessDescList>
  6361.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6362.                     </AccessDescList>
  6363.                     <PropertyDescList>
  6364.                         <PropertyDesc idRef="20" propType="simple">
  6365.                             <SimpleValue valType="int">6524</SimpleValue>
  6366.                         </PropertyDesc>
  6367.                         <PropertyDesc idRef="5" propType="objRef">
  6368.                             <ObjDescRef guidRef="{E3CB7D5E-55F7-48AE-8230-D34D37C9B869}"/>
  6369.                         </PropertyDesc>
  6370.                         <PropertyDesc idRef="21" propType="simple">
  6371.                             <SimpleValue valType="str">CHAT AIM login</SimpleValue>
  6372.                         </PropertyDesc>
  6373.                         <PropertyDesc idRef="30" propType="simple">
  6374.                             <SimpleValue valType="binary">020000000000000002000000000000002A01</SimpleValue>
  6375.                         </PropertyDesc>
  6376.                     </PropertyDescList>
  6377.                 </Rule>
  6378.                 <Rule guid="{F082C9B7-B156-46ED-8AED-2E44C3E01774}">
  6379.                     <ObjDescRef guidRef="{29E29F20-B8FD-460D-9C99-B0EBCC6CA367}"/>
  6380.                     <AccessDescList>
  6381.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6382.                     </AccessDescList>
  6383.                     <PropertyDescList>
  6384.                         <PropertyDesc idRef="20" propType="simple">
  6385.                             <SimpleValue valType="int">6528</SimpleValue>
  6386.                         </PropertyDesc>
  6387.                         <PropertyDesc idRef="5" propType="objRef">
  6388.                             <ObjDescRef guidRef="{E3CB7D5E-55F7-48AE-8230-D34D37C9B869}"/>
  6389.                         </PropertyDesc>
  6390.                         <PropertyDesc idRef="21" propType="simple">
  6391.                             <SimpleValue valType="str">CHAT AIM send message</SimpleValue>
  6392.                         </PropertyDesc>
  6393.                         <PropertyDesc idRef="30" propType="simple">
  6394.                             <SimpleValue valType="binary">020000000000000002000000000000002A02</SimpleValue>
  6395.                         </PropertyDesc>
  6396.                         <PropertyDesc idRef="30" propType="simple">
  6397.                             <SimpleValue valType="binary">0400000006000000040000000000000000040006</SimpleValue>
  6398.                         </PropertyDesc>
  6399.                     </PropertyDescList>
  6400.                 </Rule>
  6401.                 <Rule guid="{D5E724A3-1BFA-4112-8ED4-F0583664C5EC}">
  6402.                     <ObjDescRef guidRef="{93EE43FC-6580-4F04-ABAF-FB5614E2926D}"/>
  6403.                     <AccessDescList>
  6404.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6405.                     </AccessDescList>
  6406.                     <PropertyDescList>
  6407.                         <PropertyDesc idRef="20" propType="simple">
  6408.                             <SimpleValue valType="int">6532</SimpleValue>
  6409.                         </PropertyDesc>
  6410.                         <PropertyDesc idRef="5" propType="objRef">
  6411.                             <ObjDescRef guidRef="{E3CB7D5E-55F7-48AE-8230-D34D37C9B869}"/>
  6412.                         </PropertyDesc>
  6413.                         <PropertyDesc idRef="21" propType="simple">
  6414.                             <SimpleValue valType="str">CHAT AIM recieve message</SimpleValue>
  6415.                         </PropertyDesc>
  6416.                         <PropertyDesc idRef="30" propType="simple">
  6417.                             <SimpleValue valType="binary">020000000000000002000000000000002A02</SimpleValue>
  6418.                         </PropertyDesc>
  6419.                         <PropertyDesc idRef="30" propType="simple">
  6420.                             <SimpleValue valType="binary">0400000006000000040000000000000000040007</SimpleValue>
  6421.                         </PropertyDesc>
  6422.                     </PropertyDescList>
  6423.                 </Rule>
  6424.                 <Rule guid="{DE7C5295-DCBE-4BA8-ADFB-0D49F977AFD8}">
  6425.                     <ObjDescRef guidRef="{66A0ABB1-5058-40C7-B3BA-7C23CFED6289}"/>
  6426.                     <AccessDescList>
  6427.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6428.                     </AccessDescList>
  6429.                     <PropertyDescList>
  6430.                         <PropertyDesc idRef="20" propType="simple">
  6431.                             <SimpleValue valType="int">6556</SimpleValue>
  6432.                         </PropertyDesc>
  6433.                         <PropertyDesc idRef="5" propType="objRef">
  6434.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6435.                         </PropertyDesc>
  6436.                         <PropertyDesc idRef="21" propType="simple">
  6437.                             <SimpleValue valType="str">CHAT IRC DCC file transfer request</SimpleValue>
  6438.                         </PropertyDesc>
  6439.                         <PropertyDesc idRef="30" propType="simple">
  6440.                             <SimpleValue valType="binary">08000000000000000000000000000100505249564D534720</SimpleValue>
  6441.                         </PropertyDesc>
  6442.                         <PropertyDesc idRef="30" propType="simple">
  6443.                             <SimpleValue valType="binary">0C000000000000000000000000000100205C3A2E4443432053454E44</SimpleValue>
  6444.                         </PropertyDesc>
  6445.                     </PropertyDescList>
  6446.                 </Rule>
  6447.                 <Rule guid="{FCCC6CE7-F2D8-43F5-9B6B-DBA406A36D8C}">
  6448.                     <ObjDescRef guidRef="{5031A622-51A9-44DA-BB34-912FA96AC158}"/>
  6449.                     <AccessDescList>
  6450.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6451.                     </AccessDescList>
  6452.                     <PropertyDescList>
  6453.                         <PropertyDesc idRef="20" propType="simple">
  6454.                             <SimpleValue valType="int">6560</SimpleValue>
  6455.                         </PropertyDesc>
  6456.                         <PropertyDesc idRef="5" propType="objRef">
  6457.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6458.                         </PropertyDesc>
  6459.                         <PropertyDesc idRef="21" propType="simple">
  6460.                             <SimpleValue valType="str">CHAT IRC DCC chat request</SimpleValue>
  6461.                         </PropertyDesc>
  6462.                         <PropertyDesc idRef="30" propType="simple">
  6463.                             <SimpleValue valType="binary">08000000000000000000000000000100505249564D534720</SimpleValue>
  6464.                         </PropertyDesc>
  6465.                         <PropertyDesc idRef="30" propType="simple">
  6466.                             <SimpleValue valType="binary">11000000000000000000000000000100205C3A2E44434320434841542063686174</SimpleValue>
  6467.                         </PropertyDesc>
  6468.                     </PropertyDescList>
  6469.                 </Rule>
  6470.                 <Rule guid="{02811EDC-3531-41FA-901A-29D8DE3BD32C}">
  6471.                     <ObjDescRef guidRef="{7E1753C1-4BE9-4D2B-9D50-FEB10CF99BBA}"/>
  6472.                     <AccessDescList>
  6473.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6474.                     </AccessDescList>
  6475.                     <PropertyDescList>
  6476.                         <PropertyDesc idRef="20" propType="simple">
  6477.                             <SimpleValue valType="int">6916</SimpleValue>
  6478.                         </PropertyDesc>
  6479.                         <PropertyDesc idRef="5" propType="objRef">
  6480.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6481.                         </PropertyDesc>
  6482.                         <PropertyDesc idRef="21" propType="simple">
  6483.                             <SimpleValue valType="str">CHAT IRC channel join</SimpleValue>
  6484.                         </PropertyDesc>
  6485.                         <PropertyDesc idRef="30" propType="simple">
  6486.                             <SimpleValue valType="binary">0A0000000000000000000000000001004A4F494E205C3A205C23</SimpleValue>
  6487.                         </PropertyDesc>
  6488.                     </PropertyDescList>
  6489.                 </Rule>
  6490.                 <Rule guid="{C7BE8707-3859-4FB2-95E1-E058B96C2647}">
  6491.                     <ObjDescRef guidRef="{9596D447-EC90-4A93-B3B1-B84FB71FE1F9}"/>
  6492.                     <AccessDescList>
  6493.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6494.                     </AccessDescList>
  6495.                     <PropertyDescList>
  6496.                         <PropertyDesc idRef="20" propType="simple">
  6497.                             <SimpleValue valType="int">7156</SimpleValue>
  6498.                         </PropertyDesc>
  6499.                         <PropertyDesc idRef="5" propType="objRef">
  6500.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6501.                         </PropertyDesc>
  6502.                         <PropertyDesc idRef="21" propType="simple">
  6503.                             <SimpleValue valType="str">CHAT IRC dns request</SimpleValue>
  6504.                         </PropertyDesc>
  6505.                         <PropertyDesc idRef="30" propType="simple">
  6506.                             <SimpleValue valType="binary">0900000000000000000000000000010055534552484F535420</SimpleValue>
  6507.                         </PropertyDesc>
  6508.                     </PropertyDescList>
  6509.                 </Rule>
  6510.                 <Rule guid="{9A132766-A635-4EB1-A32E-4C5594E90266}">
  6511.                     <ObjDescRef guidRef="{331B936E-2AE3-4DBA-8572-C9C956E7B1A1}"/>
  6512.                     <AccessDescList>
  6513.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6514.                     </AccessDescList>
  6515.                     <PropertyDescList>
  6516.                         <PropertyDesc idRef="20" propType="simple">
  6517.                             <SimpleValue valType="int">7160</SimpleValue>
  6518.                         </PropertyDesc>
  6519.                         <PropertyDesc idRef="5" propType="objRef">
  6520.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6521.                         </PropertyDesc>
  6522.                         <PropertyDesc idRef="21" propType="simple">
  6523.                             <SimpleValue valType="str">CHAT IRC dns response</SimpleValue>
  6524.                         </PropertyDesc>
  6525.                         <PropertyDesc idRef="30" propType="simple">
  6526.                             <SimpleValue valType="binary">020000000000000000000000000000005C3A</SimpleValue>
  6527.                         </PropertyDesc>
  6528.                         <PropertyDesc idRef="30" propType="simple">
  6529.                             <SimpleValue valType="binary">050000000000000000000000000000002033303220</SimpleValue>
  6530.                         </PropertyDesc>
  6531.                         <PropertyDesc idRef="30" propType="simple">
  6532.                             <SimpleValue valType="binary">020000000000000000000000000000003D2B</SimpleValue>
  6533.                         </PropertyDesc>
  6534.                     </PropertyDescList>
  6535.                 </Rule>
  6536.             </RuleByObjTypeList>
  6537.         </Profile>
  6538.         <Profile guid="{9460A7F4-1146-4405-865D-2FE289D82082}">
  6539.             <ExecSetDescList/>
  6540.             <RuleByObjTypeList typeRef="262">
  6541.                 <Rule guid="{A8C36D76-7011-40DC-8D78-AD2ACF1350AA}">
  6542.                     <ObjDescRef guidRef="{4799E7E0-A9DA-4F9E-BBB4-E109C830B333}"/>
  6543.                     <AccessDescList>
  6544.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6545.                     </AccessDescList>
  6546.                     <PropertyDescList>
  6547.                         <PropertyDesc idRef="20" propType="simple">
  6548.                             <SimpleValue valType="int">1280</SimpleValue>
  6549.                         </PropertyDesc>
  6550.                         <PropertyDesc idRef="5" propType="objRef">
  6551.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6552.                         </PropertyDesc>
  6553.                         <PropertyDesc idRef="21" propType="simple">
  6554.                             <SimpleValue valType="str">FINGER cmd_rootsh backdoor attempt</SimpleValue>
  6555.                         </PropertyDesc>
  6556.                         <PropertyDesc idRef="30" propType="simple">
  6557.                             <SimpleValue valType="binary">0A000000000000000000000000000000636D645F726F6F747368</SimpleValue>
  6558.                         </PropertyDesc>
  6559.                     </PropertyDescList>
  6560.                 </Rule>
  6561.                 <Rule guid="{3B8B0C2D-1983-49AD-AFAA-F2D0BBDA9D89}">
  6562.                     <ObjDescRef guidRef="{82550737-AEDB-409D-881D-616EF373FE0E}"/>
  6563.                     <AccessDescList>
  6564.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6565.                     </AccessDescList>
  6566.                     <PropertyDescList>
  6567.                         <PropertyDesc idRef="20" propType="simple">
  6568.                             <SimpleValue valType="int">1284</SimpleValue>
  6569.                         </PropertyDesc>
  6570.                         <PropertyDesc idRef="5" propType="objRef">
  6571.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6572.                         </PropertyDesc>
  6573.                         <PropertyDesc idRef="21" propType="simple">
  6574.                             <SimpleValue valType="str">FINGER account enumeration attempt</SimpleValue>
  6575.                         </PropertyDesc>
  6576.                         <PropertyDesc idRef="30" propType="simple">
  6577.                             <SimpleValue valType="binary">0B0000000000000000000000000001006120622063206420652066</SimpleValue>
  6578.                         </PropertyDesc>
  6579.                     </PropertyDescList>
  6580.                 </Rule>
  6581.                 <Rule guid="{C23C1126-5DEB-4485-899A-50015E06C2D5}">
  6582.                     <ObjDescRef guidRef="{6941E7FF-2F32-41FD-966D-E9ABC37909E6}"/>
  6583.                     <AccessDescList>
  6584.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6585.                     </AccessDescList>
  6586.                     <PropertyDescList>
  6587.                         <PropertyDesc idRef="20" propType="simple">
  6588.                             <SimpleValue valType="int">1288</SimpleValue>
  6589.                         </PropertyDesc>
  6590.                         <PropertyDesc idRef="5" propType="objRef">
  6591.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6592.                         </PropertyDesc>
  6593.                         <PropertyDesc idRef="21" propType="simple">
  6594.                             <SimpleValue valType="str">FINGER search query</SimpleValue>
  6595.                         </PropertyDesc>
  6596.                         <PropertyDesc idRef="30" propType="simple">
  6597.                             <SimpleValue valType="binary">06000000000000000000000000000000736561726368</SimpleValue>
  6598.                         </PropertyDesc>
  6599.                     </PropertyDescList>
  6600.                 </Rule>
  6601.                 <Rule guid="{9FA98A44-6B9C-4F8B-A0EC-2CBD3AF6E332}">
  6602.                     <ObjDescRef guidRef="{714279DE-79CC-493B-BBA7-0A90665E5B42}"/>
  6603.                     <AccessDescList>
  6604.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6605.                     </AccessDescList>
  6606.                     <PropertyDescList>
  6607.                         <PropertyDesc idRef="20" propType="simple">
  6608.                             <SimpleValue valType="int">1292</SimpleValue>
  6609.                         </PropertyDesc>
  6610.                         <PropertyDesc idRef="5" propType="objRef">
  6611.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6612.                         </PropertyDesc>
  6613.                         <PropertyDesc idRef="21" propType="simple">
  6614.                             <SimpleValue valType="str">FINGER root query</SimpleValue>
  6615.                         </PropertyDesc>
  6616.                         <PropertyDesc idRef="30" propType="simple">
  6617.                             <SimpleValue valType="binary">04000000000000000000000000000000726F6F74</SimpleValue>
  6618.                         </PropertyDesc>
  6619.                     </PropertyDescList>
  6620.                 </Rule>
  6621.                 <Rule guid="{5C18CDEB-BAA8-46FD-A023-3D25EB7E13DE}">
  6622.                     <ObjDescRef guidRef="{6953DD74-AFC5-45CF-B59D-47D02F206466}"/>
  6623.                     <AccessDescList>
  6624.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6625.                     </AccessDescList>
  6626.                     <PropertyDescList>
  6627.                         <PropertyDesc idRef="20" propType="simple">
  6628.                             <SimpleValue valType="int">1296</SimpleValue>
  6629.                         </PropertyDesc>
  6630.                         <PropertyDesc idRef="5" propType="objRef">
  6631.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6632.                         </PropertyDesc>
  6633.                         <PropertyDesc idRef="21" propType="simple">
  6634.                             <SimpleValue valType="str">FINGER null request</SimpleValue>
  6635.                         </PropertyDesc>
  6636.                         <PropertyDesc idRef="30" propType="simple">
  6637.                             <SimpleValue valType="binary">0100000000000000000000000000000000</SimpleValue>
  6638.                         </PropertyDesc>
  6639.                     </PropertyDescList>
  6640.                 </Rule>
  6641.                 <Rule guid="{4AC8FB6B-B295-4943-81ED-4EDBE753D849}">
  6642.                     <ObjDescRef guidRef="{FD6B02E9-488E-4F42-ACF6-867A39B36703}"/>
  6643.                     <AccessDescList>
  6644.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6645.                     </AccessDescList>
  6646.                     <PropertyDescList>
  6647.                         <PropertyDesc idRef="20" propType="simple">
  6648.                             <SimpleValue valType="int">1304</SimpleValue>
  6649.                         </PropertyDesc>
  6650.                         <PropertyDesc idRef="5" propType="objRef">
  6651.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6652.                         </PropertyDesc>
  6653.                         <PropertyDesc idRef="21" propType="simple">
  6654.                             <SimpleValue valType="str">FINGER remote command \; execution attempt</SimpleValue>
  6655.                         </PropertyDesc>
  6656.                         <PropertyDesc idRef="30" propType="simple">
  6657.                             <SimpleValue valType="binary">010000000000000000000000000000003B</SimpleValue>
  6658.                         </PropertyDesc>
  6659.                     </PropertyDescList>
  6660.                 </Rule>
  6661.                 <Rule guid="{C340B666-76F4-4D25-AEA0-20F582622EC2}">
  6662.                     <ObjDescRef guidRef="{24BC1180-40B1-4F1C-B86B-82F93326F394}"/>
  6663.                     <AccessDescList>
  6664.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6665.                     </AccessDescList>
  6666.                     <PropertyDescList>
  6667.                         <PropertyDesc idRef="20" propType="simple">
  6668.                             <SimpleValue valType="int">1308</SimpleValue>
  6669.                         </PropertyDesc>
  6670.                         <PropertyDesc idRef="5" propType="objRef">
  6671.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6672.                         </PropertyDesc>
  6673.                         <PropertyDesc idRef="21" propType="simple">
  6674.                             <SimpleValue valType="str">FINGER remote command pipe execution attempt</SimpleValue>
  6675.                         </PropertyDesc>
  6676.                         <PropertyDesc idRef="30" propType="simple">
  6677.                             <SimpleValue valType="binary">010000000000000000000000000000007C</SimpleValue>
  6678.                         </PropertyDesc>
  6679.                     </PropertyDescList>
  6680.                 </Rule>
  6681.                 <Rule guid="{5F6809A1-3216-42D1-98EF-2E99B554467E}">
  6682.                     <ObjDescRef guidRef="{A4DCB608-2D07-4626-A16B-B218DE80B5B4}"/>
  6683.                     <AccessDescList>
  6684.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6685.                     </AccessDescList>
  6686.                     <PropertyDescList>
  6687.                         <PropertyDesc idRef="20" propType="simple">
  6688.                             <SimpleValue valType="int">1312</SimpleValue>
  6689.                         </PropertyDesc>
  6690.                         <PropertyDesc idRef="5" propType="objRef">
  6691.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6692.                         </PropertyDesc>
  6693.                         <PropertyDesc idRef="21" propType="simple">
  6694.                             <SimpleValue valType="str">FINGER bomb attempt</SimpleValue>
  6695.                         </PropertyDesc>
  6696.                         <PropertyDesc idRef="30" propType="simple">
  6697.                             <SimpleValue valType="binary">020000000000000000000000000000004040</SimpleValue>
  6698.                         </PropertyDesc>
  6699.                     </PropertyDescList>
  6700.                 </Rule>
  6701.                 <Rule guid="{A258E168-715B-4EFC-975E-9F6B33F19FCE}">
  6702.                     <ObjDescRef guidRef="{053676E9-2CD6-4595-A477-644FB172D572}"/>
  6703.                     <AccessDescList>
  6704.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6705.                     </AccessDescList>
  6706.                     <PropertyDescList>
  6707.                         <PropertyDesc idRef="20" propType="simple">
  6708.                             <SimpleValue valType="int">1320</SimpleValue>
  6709.                         </PropertyDesc>
  6710.                         <PropertyDesc idRef="5" propType="objRef">
  6711.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6712.                         </PropertyDesc>
  6713.                         <PropertyDesc idRef="21" propType="simple">
  6714.                             <SimpleValue valType="str">FINGER redirection attempt</SimpleValue>
  6715.                         </PropertyDesc>
  6716.                         <PropertyDesc idRef="30" propType="simple">
  6717.                             <SimpleValue valType="binary">0100000000000000000000000000000040</SimpleValue>
  6718.                         </PropertyDesc>
  6719.                     </PropertyDescList>
  6720.                 </Rule>
  6721.                 <Rule guid="{5C40DF64-B87E-4F64-BA7D-6C45A794FBC6}">
  6722.                     <ObjDescRef guidRef="{1E08E94F-A722-46EE-BFF8-141C9D7CCE58}"/>
  6723.                     <AccessDescList>
  6724.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6725.                     </AccessDescList>
  6726.                     <PropertyDescList>
  6727.                         <PropertyDesc idRef="20" propType="simple">
  6728.                             <SimpleValue valType="int">1324</SimpleValue>
  6729.                         </PropertyDesc>
  6730.                         <PropertyDesc idRef="5" propType="objRef">
  6731.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6732.                         </PropertyDesc>
  6733.                         <PropertyDesc idRef="21" propType="simple">
  6734.                             <SimpleValue valType="str">FINGER cybercop query</SimpleValue>
  6735.                         </PropertyDesc>
  6736.                         <PropertyDesc idRef="30" propType="simple">
  6737.                             <SimpleValue valType="binary">06000000000000000A000000000000000A2020202020</SimpleValue>
  6738.                         </PropertyDesc>
  6739.                     </PropertyDescList>
  6740.                 </Rule>
  6741.                 <Rule guid="{8C0DF965-D297-4293-96B9-978ADA8E70CF}">
  6742.                     <ObjDescRef guidRef="{57DDC8E4-A18F-403E-8DD6-FF3049D0E678}"/>
  6743.                     <AccessDescList>
  6744.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6745.                     </AccessDescList>
  6746.                     <PropertyDescList>
  6747.                         <PropertyDesc idRef="20" propType="simple">
  6748.                             <SimpleValue valType="int">1328</SimpleValue>
  6749.                         </PropertyDesc>
  6750.                         <PropertyDesc idRef="5" propType="objRef">
  6751.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6752.                         </PropertyDesc>
  6753.                         <PropertyDesc idRef="21" propType="simple">
  6754.                             <SimpleValue valType="str">FINGER 0 query</SimpleValue>
  6755.                         </PropertyDesc>
  6756.                         <PropertyDesc idRef="30" propType="simple">
  6757.                             <SimpleValue valType="binary">0100000000000000000000000000000030</SimpleValue>
  6758.                         </PropertyDesc>
  6759.                     </PropertyDescList>
  6760.                 </Rule>
  6761.                 <Rule guid="{A60BAA26-FCBA-4BD5-8479-CD6123C8E059}">
  6762.                     <ObjDescRef guidRef="{A6F0F247-7F0E-485D-ACCB-2DF0AE87627B}"/>
  6763.                     <AccessDescList>
  6764.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6765.                     </AccessDescList>
  6766.                     <PropertyDescList>
  6767.                         <PropertyDesc idRef="20" propType="simple">
  6768.                             <SimpleValue valType="int">1332</SimpleValue>
  6769.                         </PropertyDesc>
  6770.                         <PropertyDesc idRef="5" propType="objRef">
  6771.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6772.                         </PropertyDesc>
  6773.                         <PropertyDesc idRef="21" propType="simple">
  6774.                             <SimpleValue valType="str">FINGER . query</SimpleValue>
  6775.                         </PropertyDesc>
  6776.                         <PropertyDesc idRef="30" propType="simple">
  6777.                             <SimpleValue valType="binary">010000000000000000000000000000002E</SimpleValue>
  6778.                         </PropertyDesc>
  6779.                     </PropertyDescList>
  6780.                 </Rule>
  6781.                 <Rule guid="{1F5B1598-0849-4FD6-B86B-FBCFF991400E}">
  6782.                     <ObjDescRef guidRef="{0BDD9200-7D08-41C2-913A-7723084C3259}"/>
  6783.                     <AccessDescList>
  6784.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6785.                     </AccessDescList>
  6786.                     <PropertyDescList>
  6787.                         <PropertyDesc idRef="20" propType="simple">
  6788.                             <SimpleValue valType="int">6164</SimpleValue>
  6789.                         </PropertyDesc>
  6790.                         <PropertyDesc idRef="5" propType="objRef">
  6791.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6792.                         </PropertyDesc>
  6793.                         <PropertyDesc idRef="21" propType="simple">
  6794.                             <SimpleValue valType="str">FINGER version query</SimpleValue>
  6795.                         </PropertyDesc>
  6796.                         <PropertyDesc idRef="30" propType="simple">
  6797.                             <SimpleValue valType="binary">0700000000000000000000000000000076657273696F6E</SimpleValue>
  6798.                         </PropertyDesc>
  6799.                     </PropertyDescList>
  6800.                 </Rule>
  6801.             </RuleByObjTypeList>
  6802.         </Profile>
  6803.         <Profile guid="{DECC3BCE-4080-42C3-885E-760B7667E153}">
  6804.             <ExecSetDescList/>
  6805.             <RuleByObjTypeList typeRef="262">
  6806.                 <Rule guid="{7FDCF8DD-0F4C-4C85-BB90-50FB9CB5B6C1}">
  6807.                     <ObjDescRef guidRef="{3B380393-122D-4863-BC2C-3772A32A4914}"/>
  6808.                     <AccessDescList>
  6809.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6810.                     </AccessDescList>
  6811.                     <PropertyDescList>
  6812.                         <PropertyDesc idRef="20" propType="simple">
  6813.                             <SimpleValue valType="int">1452</SimpleValue>
  6814.                         </PropertyDesc>
  6815.                         <PropertyDesc idRef="5" propType="objRef">
  6816.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6817.                         </PropertyDesc>
  6818.                         <PropertyDesc idRef="21" propType="simple">
  6819.                             <SimpleValue valType="str">ICMP IRDP router advertisement</SimpleValue>
  6820.                         </PropertyDesc>
  6821.                     </PropertyDescList>
  6822.                 </Rule>
  6823.                 <Rule guid="{1AA9615D-51B7-4437-BBBF-15990F459868}">
  6824.                     <ObjDescRef guidRef="{2C76490A-7658-4770-B7B5-372498396CD1}"/>
  6825.                     <AccessDescList>
  6826.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6827.                     </AccessDescList>
  6828.                     <PropertyDescList>
  6829.                         <PropertyDesc idRef="20" propType="simple">
  6830.                             <SimpleValue valType="int">1456</SimpleValue>
  6831.                         </PropertyDesc>
  6832.                         <PropertyDesc idRef="5" propType="objRef">
  6833.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6834.                         </PropertyDesc>
  6835.                         <PropertyDesc idRef="21" propType="simple">
  6836.                             <SimpleValue valType="str">ICMP IRDP router selection</SimpleValue>
  6837.                         </PropertyDesc>
  6838.                     </PropertyDescList>
  6839.                 </Rule>
  6840.                 <Rule guid="{6C69BD7B-AE7E-4ED0-B325-D2109EA9CF85}">
  6841.                     <ObjDescRef guidRef="{F7274C7C-F438-4AB2-B791-42D31606E2FE}"/>
  6842.                     <AccessDescList>
  6843.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6844.                     </AccessDescList>
  6845.                     <PropertyDescList>
  6846.                         <PropertyDesc idRef="20" propType="simple">
  6847.                             <SimpleValue valType="int">1460</SimpleValue>
  6848.                         </PropertyDesc>
  6849.                         <PropertyDesc idRef="5" propType="objRef">
  6850.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6851.                         </PropertyDesc>
  6852.                         <PropertyDesc idRef="21" propType="simple">
  6853.                             <SimpleValue valType="str">ICMP PING (Undefined Code!)</SimpleValue>
  6854.                         </PropertyDesc>
  6855.                     </PropertyDescList>
  6856.                 </Rule>
  6857.                 <Rule guid="{1BF2ADFE-632B-4D40-9424-D7629155A038}">
  6858.                     <ObjDescRef guidRef="{7A665180-C465-40B4-84AA-A3A9B5FEFBB0}"/>
  6859.                     <AccessDescList>
  6860.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6861.                     </AccessDescList>
  6862.                     <PropertyDescList>
  6863.                         <PropertyDesc idRef="20" propType="simple">
  6864.                             <SimpleValue valType="int">1464</SimpleValue>
  6865.                         </PropertyDesc>
  6866.                         <PropertyDesc idRef="5" propType="objRef">
  6867.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6868.                         </PropertyDesc>
  6869.                         <PropertyDesc idRef="21" propType="simple">
  6870.                             <SimpleValue valType="str">ICMP PING *NIX</SimpleValue>
  6871.                         </PropertyDesc>
  6872.                         <PropertyDesc idRef="30" propType="simple">
  6873.                             <SimpleValue valType="binary">10000000000000002000000000000000101112131415161718191A1B1C1D1E1F</SimpleValue>
  6874.                         </PropertyDesc>
  6875.                     </PropertyDescList>
  6876.                 </Rule>
  6877.                 <Rule guid="{B464E6ED-6FEF-418D-BB36-4226CA4F8236}">
  6878.                     <ObjDescRef guidRef="{EAA0EBBD-98B8-41F6-8B33-67E60F5CD821}"/>
  6879.                     <AccessDescList>
  6880.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6881.                     </AccessDescList>
  6882.                     <PropertyDescList>
  6883.                         <PropertyDesc idRef="20" propType="simple">
  6884.                             <SimpleValue valType="int">1472</SimpleValue>
  6885.                         </PropertyDesc>
  6886.                         <PropertyDesc idRef="5" propType="objRef">
  6887.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6888.                         </PropertyDesc>
  6889.                         <PropertyDesc idRef="21" propType="simple">
  6890.                             <SimpleValue valType="str">ICMP PING BSDtype</SimpleValue>
  6891.                         </PropertyDesc>
  6892.                         <PropertyDesc idRef="30" propType="simple">
  6893.                             <SimpleValue valType="binary">1000000000000000200000000000000008090A0B0C0D0E0F1011121314151617</SimpleValue>
  6894.                         </PropertyDesc>
  6895.                     </PropertyDescList>
  6896.                 </Rule>
  6897.                 <Rule guid="{BB20246A-822B-4260-82F2-101139815040}">
  6898.                     <ObjDescRef guidRef="{36BA25E6-9E62-4C00-8174-AA9A01B22BFA}"/>
  6899.                     <AccessDescList>
  6900.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6901.                     </AccessDescList>
  6902.                     <PropertyDescList>
  6903.                         <PropertyDesc idRef="20" propType="simple">
  6904.                             <SimpleValue valType="int">1476</SimpleValue>
  6905.                         </PropertyDesc>
  6906.                         <PropertyDesc idRef="5" propType="objRef">
  6907.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6908.                         </PropertyDesc>
  6909.                         <PropertyDesc idRef="21" propType="simple">
  6910.                             <SimpleValue valType="str">ICMP PING BayRS Router</SimpleValue>
  6911.                         </PropertyDesc>
  6912.                         <PropertyDesc idRef="30" propType="simple">
  6913.                             <SimpleValue valType="binary">0F0000000000000020000000000000000102030405060708090A0B0C0D0E0F</SimpleValue>
  6914.                         </PropertyDesc>
  6915.                     </PropertyDescList>
  6916.                 </Rule>
  6917.                 <Rule guid="{3682C84F-4CBB-4BF2-8342-F5F0BF85AEED}">
  6918.                     <ObjDescRef guidRef="{7DEDD7CD-027B-4585-84D0-0E5BA77E8D4B}"/>
  6919.                     <AccessDescList>
  6920.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6921.                     </AccessDescList>
  6922.                     <PropertyDescList>
  6923.                         <PropertyDesc idRef="20" propType="simple">
  6924.                             <SimpleValue valType="int">1480</SimpleValue>
  6925.                         </PropertyDesc>
  6926.                         <PropertyDesc idRef="5" propType="objRef">
  6927.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6928.                         </PropertyDesc>
  6929.                         <PropertyDesc idRef="21" propType="simple">
  6930.                             <SimpleValue valType="str">ICMP PING BeOS4.x</SimpleValue>
  6931.                         </PropertyDesc>
  6932.                         <PropertyDesc idRef="30" propType="simple">
  6933.                             <SimpleValue valType="binary">1000000000000000200000000000000000000000000000000000000008090A0B</SimpleValue>
  6934.                         </PropertyDesc>
  6935.                     </PropertyDescList>
  6936.                 </Rule>
  6937.                 <Rule guid="{693F031E-A693-4F1B-B829-C403F4B8601B}">
  6938.                     <ObjDescRef guidRef="{D98C65D0-DEC5-4190-8168-72E36EC60926}"/>
  6939.                     <AccessDescList>
  6940.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6941.                     </AccessDescList>
  6942.                     <PropertyDescList>
  6943.                         <PropertyDesc idRef="20" propType="simple">
  6944.                             <SimpleValue valType="int">1484</SimpleValue>
  6945.                         </PropertyDesc>
  6946.                         <PropertyDesc idRef="5" propType="objRef">
  6947.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6948.                         </PropertyDesc>
  6949.                         <PropertyDesc idRef="21" propType="simple">
  6950.                             <SimpleValue valType="str">ICMP PING Cisco Type.x</SimpleValue>
  6951.                         </PropertyDesc>
  6952.                         <PropertyDesc idRef="30" propType="simple">
  6953.                             <SimpleValue valType="binary">10000000000000002000000000000000ABCDABCDABCDABCDABCDABCDABCDABCD</SimpleValue>
  6954.                         </PropertyDesc>
  6955.                     </PropertyDescList>
  6956.                 </Rule>
  6957.                 <Rule guid="{BD2E76A4-4545-4143-8FB8-C6423CCE9197}">
  6958.                     <ObjDescRef guidRef="{482D4C37-B42C-454B-9703-611B9DB69208}"/>
  6959.                     <AccessDescList>
  6960.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6961.                     </AccessDescList>
  6962.                     <PropertyDescList>
  6963.                         <PropertyDesc idRef="20" propType="simple">
  6964.                             <SimpleValue valType="int">1488</SimpleValue>
  6965.                         </PropertyDesc>
  6966.                         <PropertyDesc idRef="5" propType="objRef">
  6967.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6968.                         </PropertyDesc>
  6969.                         <PropertyDesc idRef="21" propType="simple">
  6970.                             <SimpleValue valType="str">ICMP PING Delphi-Piette Windows</SimpleValue>
  6971.                         </PropertyDesc>
  6972.                         <PropertyDesc idRef="30" propType="simple">
  6973.                             <SimpleValue valType="binary">1000000000000000200000000000000050696E67696E672066726F6D2044656C</SimpleValue>
  6974.                         </PropertyDesc>
  6975.                     </PropertyDescList>
  6976.                 </Rule>
  6977.                 <Rule guid="{55F20E0E-A42A-457C-A81E-B5017F8F61A3}">
  6978.                     <ObjDescRef guidRef="{B174FDF7-B946-46BF-B9FE-67F80B46F4E6}"/>
  6979.                     <AccessDescList>
  6980.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  6981.                     </AccessDescList>
  6982.                     <PropertyDescList>
  6983.                         <PropertyDesc idRef="20" propType="simple">
  6984.                             <SimpleValue valType="int">1492</SimpleValue>
  6985.                         </PropertyDesc>
  6986.                         <PropertyDesc idRef="5" propType="objRef">
  6987.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  6988.                         </PropertyDesc>
  6989.                         <PropertyDesc idRef="21" propType="simple">
  6990.                             <SimpleValue valType="str">ICMP PING Flowpoint2200 or Network Management Software</SimpleValue>
  6991.                         </PropertyDesc>
  6992.                         <PropertyDesc idRef="30" propType="simple">
  6993.                             <SimpleValue valType="binary">100000000000000020000000000000000102030405060708090A0B0C0D0E0F10</SimpleValue>
  6994.                         </PropertyDesc>
  6995.                     </PropertyDescList>
  6996.                 </Rule>
  6997.                 <Rule guid="{A61A39CC-AB1D-420B-AB3D-E5D59852CC18}">
  6998.                     <ObjDescRef guidRef="{6C428DAC-EF34-4FD4-A028-6B6ED250638C}"/>
  6999.                     <AccessDescList>
  7000.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7001.                     </AccessDescList>
  7002.                     <PropertyDescList>
  7003.                         <PropertyDesc idRef="20" propType="simple">
  7004.                             <SimpleValue valType="int">1496</SimpleValue>
  7005.                         </PropertyDesc>
  7006.                         <PropertyDesc idRef="5" propType="objRef">
  7007.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7008.                         </PropertyDesc>
  7009.                         <PropertyDesc idRef="21" propType="simple">
  7010.                             <SimpleValue valType="str">ICMP PING IP NetMonitor Macintosh</SimpleValue>
  7011.                         </PropertyDesc>
  7012.                         <PropertyDesc idRef="30" propType="simple">
  7013.                             <SimpleValue valType="binary">10000000000000002000000000000000A9205375737461696E61626C6520536F</SimpleValue>
  7014.                         </PropertyDesc>
  7015.                     </PropertyDescList>
  7016.                 </Rule>
  7017.                 <Rule guid="{51A3279E-4B60-46E8-9133-FA3E0265FF78}">
  7018.                     <ObjDescRef guidRef="{C6AAD712-1F7C-42A0-B2E3-1C86DF51A8FA}"/>
  7019.                     <AccessDescList>
  7020.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7021.                     </AccessDescList>
  7022.                     <PropertyDescList>
  7023.                         <PropertyDesc idRef="20" propType="simple">
  7024.                             <SimpleValue valType="int">1500</SimpleValue>
  7025.                         </PropertyDesc>
  7026.                         <PropertyDesc idRef="5" propType="objRef">
  7027.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7028.                         </PropertyDesc>
  7029.                         <PropertyDesc idRef="21" propType="simple">
  7030.                             <SimpleValue valType="str">ICMP PING LINUX/*BSD</SimpleValue>
  7031.                         </PropertyDesc>
  7032.                         <PropertyDesc idRef="29" propType="simple">
  7033.                             <SimpleValue valType="int" valRelation="==">8</SimpleValue>
  7034.                         </PropertyDesc>
  7035.                         <PropertyDesc idRef="24" propType="simple">
  7036.                             <SimpleValue valType="int" valRelation="==">13170</SimpleValue>
  7037.                         </PropertyDesc>
  7038.                     </PropertyDescList>
  7039.                 </Rule>
  7040.                 <Rule guid="{EABF987F-3033-4051-9E96-EE4112642B87}">
  7041.                     <ObjDescRef guidRef="{980BA476-4E6C-429A-83BF-FB2FDEA57E37}"/>
  7042.                     <AccessDescList>
  7043.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7044.                     </AccessDescList>
  7045.                     <PropertyDescList>
  7046.                         <PropertyDesc idRef="20" propType="simple">
  7047.                             <SimpleValue valType="int">1504</SimpleValue>
  7048.                         </PropertyDesc>
  7049.                         <PropertyDesc idRef="5" propType="objRef">
  7050.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7051.                         </PropertyDesc>
  7052.                         <PropertyDesc idRef="21" propType="simple">
  7053.                             <SimpleValue valType="str">ICMP PING Microsoft Windows</SimpleValue>
  7054.                         </PropertyDesc>
  7055.                         <PropertyDesc idRef="30" propType="simple">
  7056.                             <SimpleValue valType="binary">1A000000000000002000000000000000303132333435363738396162636465666768696A6B6C6D6E6F70</SimpleValue>
  7057.                         </PropertyDesc>
  7058.                     </PropertyDescList>
  7059.                 </Rule>
  7060.                 <Rule guid="{1DCED845-DE6F-4307-9228-A89F5408B0E8}">
  7061.                     <ObjDescRef guidRef="{7531D489-9AF0-4DD3-A559-F6F19E96B5F1}"/>
  7062.                     <AccessDescList>
  7063.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7064.                     </AccessDescList>
  7065.                     <PropertyDescList>
  7066.                         <PropertyDesc idRef="20" propType="simple">
  7067.                             <SimpleValue valType="int">1508</SimpleValue>
  7068.                         </PropertyDesc>
  7069.                         <PropertyDesc idRef="5" propType="objRef">
  7070.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7071.                         </PropertyDesc>
  7072.                         <PropertyDesc idRef="21" propType="simple">
  7073.                             <SimpleValue valType="str">ICMP PING Network Toolbox 3 Windows</SimpleValue>
  7074.                         </PropertyDesc>
  7075.                         <PropertyDesc idRef="30" propType="simple">
  7076.                             <SimpleValue valType="binary">100000000000000020000000000000003D3D3D3D3D3D3D3D3D3D3D3D3D3D3D3D</SimpleValue>
  7077.                         </PropertyDesc>
  7078.                     </PropertyDescList>
  7079.                 </Rule>
  7080.                 <Rule guid="{05BB4085-E4AA-49A0-A3BF-85956B60A8EF}">
  7081.                     <ObjDescRef guidRef="{73DAC9EC-AB8A-4F3F-B14D-0DE234A6BC30}"/>
  7082.                     <AccessDescList>
  7083.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7084.                     </AccessDescList>
  7085.                     <PropertyDescList>
  7086.                         <PropertyDesc idRef="20" propType="simple">
  7087.                             <SimpleValue valType="int">1512</SimpleValue>
  7088.                         </PropertyDesc>
  7089.                         <PropertyDesc idRef="5" propType="objRef">
  7090.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7091.                         </PropertyDesc>
  7092.                         <PropertyDesc idRef="21" propType="simple">
  7093.                             <SimpleValue valType="str">ICMP PING Ping-O-MeterWindows</SimpleValue>
  7094.                         </PropertyDesc>
  7095.                         <PropertyDesc idRef="30" propType="simple">
  7096.                             <SimpleValue valType="binary">100000000000000020000000000000004F4D657465724F6265736541726D6164</SimpleValue>
  7097.                         </PropertyDesc>
  7098.                     </PropertyDescList>
  7099.                 </Rule>
  7100.                 <Rule guid="{2A890165-BDC5-4904-832D-B0991E031188}">
  7101.                     <ObjDescRef guidRef="{12995A70-E325-4A72-803E-F2CE016B9489}"/>
  7102.                     <AccessDescList>
  7103.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7104.                     </AccessDescList>
  7105.                     <PropertyDescList>
  7106.                         <PropertyDesc idRef="20" propType="simple">
  7107.                             <SimpleValue valType="int">1516</SimpleValue>
  7108.                         </PropertyDesc>
  7109.                         <PropertyDesc idRef="5" propType="objRef">
  7110.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7111.                         </PropertyDesc>
  7112.                         <PropertyDesc idRef="21" propType="simple">
  7113.                             <SimpleValue valType="str">ICMP PING Pinger Windows</SimpleValue>
  7114.                         </PropertyDesc>
  7115.                         <PropertyDesc idRef="30" propType="simple">
  7116.                             <SimpleValue valType="binary">1000000000000000200000000000000044617461000000000000000000000000</SimpleValue>
  7117.                         </PropertyDesc>
  7118.                     </PropertyDescList>
  7119.                 </Rule>
  7120.                 <Rule guid="{FDAE9DDE-011A-4285-8BEA-74D37C38792B}">
  7121.                     <ObjDescRef guidRef="{6C7F5CD4-E79C-44C3-86CA-F3D3D58A973A}"/>
  7122.                     <AccessDescList>
  7123.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7124.                     </AccessDescList>
  7125.                     <PropertyDescList>
  7126.                         <PropertyDesc idRef="20" propType="simple">
  7127.                             <SimpleValue valType="int">1520</SimpleValue>
  7128.                         </PropertyDesc>
  7129.                         <PropertyDesc idRef="5" propType="objRef">
  7130.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7131.                         </PropertyDesc>
  7132.                         <PropertyDesc idRef="21" propType="simple">
  7133.                             <SimpleValue valType="str">ICMP PING Seer Windows</SimpleValue>
  7134.                         </PropertyDesc>
  7135.                         <PropertyDesc idRef="30" propType="simple">
  7136.                             <SimpleValue valType="binary">1000000000000000200000000000000088042020202020202020202020202020</SimpleValue>
  7137.                         </PropertyDesc>
  7138.                     </PropertyDescList>
  7139.                 </Rule>
  7140.                 <Rule guid="{2E2DB21C-AEAC-4A31-93AA-017CA81D3BC0}">
  7141.                     <ObjDescRef guidRef="{EFE41C7E-0078-4E7D-9CEA-BC3079E0A639}"/>
  7142.                     <AccessDescList>
  7143.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7144.                     </AccessDescList>
  7145.                     <PropertyDescList>
  7146.                         <PropertyDesc idRef="20" propType="simple">
  7147.                             <SimpleValue valType="int">1524</SimpleValue>
  7148.                         </PropertyDesc>
  7149.                         <PropertyDesc idRef="5" propType="objRef">
  7150.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7151.                         </PropertyDesc>
  7152.                         <PropertyDesc idRef="21" propType="simple">
  7153.                             <SimpleValue valType="str">ICMP PING Sun Solaris</SimpleValue>
  7154.                         </PropertyDesc>
  7155.                         <PropertyDesc idRef="29" propType="simple">
  7156.                             <SimpleValue valType="int" valRelation="==">8</SimpleValue>
  7157.                         </PropertyDesc>
  7158.                     </PropertyDescList>
  7159.                 </Rule>
  7160.                 <Rule guid="{23F6002F-1D75-4D8C-80D9-5A3C59667B4B}">
  7161.                     <ObjDescRef guidRef="{7B86C47D-E8F5-4C47-BF4E-081E86DEB743}"/>
  7162.                     <AccessDescList>
  7163.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7164.                     </AccessDescList>
  7165.                     <PropertyDescList>
  7166.                         <PropertyDesc idRef="20" propType="simple">
  7167.                             <SimpleValue valType="int">1528</SimpleValue>
  7168.                         </PropertyDesc>
  7169.                         <PropertyDesc idRef="5" propType="objRef">
  7170.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7171.                         </PropertyDesc>
  7172.                         <PropertyDesc idRef="21" propType="simple">
  7173.                             <SimpleValue valType="str">ICMP PING Windows</SimpleValue>
  7174.                         </PropertyDesc>
  7175.                         <PropertyDesc idRef="30" propType="simple">
  7176.                             <SimpleValue valType="binary">100000000000000010000000000000006162636465666768696A6B6C6D6E6F70</SimpleValue>
  7177.                         </PropertyDesc>
  7178.                     </PropertyDescList>
  7179.                 </Rule>
  7180.                 <Rule guid="{A02EEA05-6D13-4F7E-AACB-41913CB7F560}">
  7181.                     <ObjDescRef guidRef="{1D9BB591-C0D8-4ED3-863B-8C2CD737C22E}"/>
  7182.                     <AccessDescList>
  7183.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7184.                     </AccessDescList>
  7185.                     <PropertyDescList>
  7186.                         <PropertyDesc idRef="20" propType="simple">
  7187.                             <SimpleValue valType="int">1536</SimpleValue>
  7188.                         </PropertyDesc>
  7189.                         <PropertyDesc idRef="5" propType="objRef">
  7190.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7191.                         </PropertyDesc>
  7192.                         <PropertyDesc idRef="21" propType="simple">
  7193.                             <SimpleValue valType="str">ICMP PING</SimpleValue>
  7194.                         </PropertyDesc>
  7195.                         <PropertyDesc idRef="34" propType="simple">
  7196.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7197.                         </PropertyDesc>
  7198.                     </PropertyDescList>
  7199.                 </Rule>
  7200.                 <Rule guid="{6B47DD2F-85CA-4400-B956-8CCBCFD8F451}">
  7201.                     <ObjDescRef guidRef="{232B758B-D8CE-4BCC-B04C-8ED832A2D27C}"/>
  7202.                     <AccessDescList>
  7203.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7204.                     </AccessDescList>
  7205.                     <PropertyDescList>
  7206.                         <PropertyDesc idRef="20" propType="simple">
  7207.                             <SimpleValue valType="int">1540</SimpleValue>
  7208.                         </PropertyDesc>
  7209.                         <PropertyDesc idRef="5" propType="objRef">
  7210.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7211.                         </PropertyDesc>
  7212.                         <PropertyDesc idRef="21" propType="simple">
  7213.                             <SimpleValue valType="str">ICMP traceroute </SimpleValue>
  7214.                         </PropertyDesc>
  7215.                         <PropertyDesc idRef="22" propType="simple">
  7216.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  7217.                         </PropertyDesc>
  7218.                     </PropertyDescList>
  7219.                 </Rule>
  7220.                 <Rule guid="{167039D1-F963-4F86-A1BB-F1BDC24A3BDD}">
  7221.                     <ObjDescRef guidRef="{B1FBC6FA-3E14-4441-A196-D8D3603D6C57}"/>
  7222.                     <AccessDescList>
  7223.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7224.                     </AccessDescList>
  7225.                     <PropertyDescList>
  7226.                         <PropertyDesc idRef="20" propType="simple">
  7227.                             <SimpleValue valType="int">1544</SimpleValue>
  7228.                         </PropertyDesc>
  7229.                         <PropertyDesc idRef="5" propType="objRef">
  7230.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7231.                         </PropertyDesc>
  7232.                         <PropertyDesc idRef="21" propType="simple">
  7233.                             <SimpleValue valType="str">ICMP Address Mask Reply</SimpleValue>
  7234.                         </PropertyDesc>
  7235.                         <PropertyDesc idRef="34" propType="simple">
  7236.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7237.                         </PropertyDesc>
  7238.                     </PropertyDescList>
  7239.                 </Rule>
  7240.                 <Rule guid="{B74A5565-F82F-4BB8-845A-5405D3BFA9E1}">
  7241.                     <ObjDescRef guidRef="{444FBC72-8D33-4FF5-A889-6A24A47B6F79}"/>
  7242.                     <AccessDescList>
  7243.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7244.                     </AccessDescList>
  7245.                     <PropertyDescList>
  7246.                         <PropertyDesc idRef="20" propType="simple">
  7247.                             <SimpleValue valType="int">1548</SimpleValue>
  7248.                         </PropertyDesc>
  7249.                         <PropertyDesc idRef="5" propType="objRef">
  7250.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7251.                         </PropertyDesc>
  7252.                         <PropertyDesc idRef="21" propType="simple">
  7253.                             <SimpleValue valType="str">ICMP Address Mask Reply (Undefined Code!)</SimpleValue>
  7254.                         </PropertyDesc>
  7255.                     </PropertyDescList>
  7256.                 </Rule>
  7257.                 <Rule guid="{D8408EE3-6E3D-45D4-AB5F-F5B31D1A9A5C}">
  7258.                     <ObjDescRef guidRef="{4054A61F-9CEE-4D0A-B9D7-0784AB6BF2C4}"/>
  7259.                     <AccessDescList>
  7260.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7261.                     </AccessDescList>
  7262.                     <PropertyDescList>
  7263.                         <PropertyDesc idRef="20" propType="simple">
  7264.                             <SimpleValue valType="int">1552</SimpleValue>
  7265.                         </PropertyDesc>
  7266.                         <PropertyDesc idRef="5" propType="objRef">
  7267.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7268.                         </PropertyDesc>
  7269.                         <PropertyDesc idRef="21" propType="simple">
  7270.                             <SimpleValue valType="str">ICMP Address Mask Request</SimpleValue>
  7271.                         </PropertyDesc>
  7272.                         <PropertyDesc idRef="34" propType="simple">
  7273.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7274.                         </PropertyDesc>
  7275.                     </PropertyDescList>
  7276.                 </Rule>
  7277.                 <Rule guid="{930EF6E6-BECA-413C-A821-BF4B5AF3B8B1}">
  7278.                     <ObjDescRef guidRef="{8471BE0A-B7B2-41C4-BD2D-80BA06F892F5}"/>
  7279.                     <AccessDescList>
  7280.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7281.                     </AccessDescList>
  7282.                     <PropertyDescList>
  7283.                         <PropertyDesc idRef="20" propType="simple">
  7284.                             <SimpleValue valType="int">1556</SimpleValue>
  7285.                         </PropertyDesc>
  7286.                         <PropertyDesc idRef="5" propType="objRef">
  7287.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7288.                         </PropertyDesc>
  7289.                         <PropertyDesc idRef="21" propType="simple">
  7290.                             <SimpleValue valType="str">ICMP Address Mask Request (Undefined Code!)</SimpleValue>
  7291.                         </PropertyDesc>
  7292.                     </PropertyDescList>
  7293.                 </Rule>
  7294.                 <Rule guid="{F47CE3EA-0ED5-4C12-A7D5-A22195DAA1F3}">
  7295.                     <ObjDescRef guidRef="{A68FD4CC-FFA3-4B3C-A8C4-28574A635CCC}"/>
  7296.                     <AccessDescList>
  7297.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7298.                     </AccessDescList>
  7299.                     <PropertyDescList>
  7300.                         <PropertyDesc idRef="20" propType="simple">
  7301.                             <SimpleValue valType="int">1560</SimpleValue>
  7302.                         </PropertyDesc>
  7303.                         <PropertyDesc idRef="5" propType="objRef">
  7304.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7305.                         </PropertyDesc>
  7306.                         <PropertyDesc idRef="21" propType="simple">
  7307.                             <SimpleValue valType="str">ICMP Alternate Host Address</SimpleValue>
  7308.                         </PropertyDesc>
  7309.                         <PropertyDesc idRef="34" propType="simple">
  7310.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7311.                         </PropertyDesc>
  7312.                     </PropertyDescList>
  7313.                 </Rule>
  7314.                 <Rule guid="{84304B75-EF75-4DCE-94C8-3FCE24AE6077}">
  7315.                     <ObjDescRef guidRef="{1CBA1267-3D0F-4849-9D39-C7E1DC5CFA29}"/>
  7316.                     <AccessDescList>
  7317.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7318.                     </AccessDescList>
  7319.                     <PropertyDescList>
  7320.                         <PropertyDesc idRef="20" propType="simple">
  7321.                             <SimpleValue valType="int">1564</SimpleValue>
  7322.                         </PropertyDesc>
  7323.                         <PropertyDesc idRef="5" propType="objRef">
  7324.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7325.                         </PropertyDesc>
  7326.                         <PropertyDesc idRef="21" propType="simple">
  7327.                             <SimpleValue valType="str">ICMP Alternate Host Address (Undefined Code!)</SimpleValue>
  7328.                         </PropertyDesc>
  7329.                     </PropertyDescList>
  7330.                 </Rule>
  7331.                 <Rule guid="{88C282F6-580E-429A-8AA8-5674AE5FD8B3}">
  7332.                     <ObjDescRef guidRef="{03114804-FD30-466E-801E-47ABD2BF2015}"/>
  7333.                     <AccessDescList>
  7334.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7335.                     </AccessDescList>
  7336.                     <PropertyDescList>
  7337.                         <PropertyDesc idRef="20" propType="simple">
  7338.                             <SimpleValue valType="int">1568</SimpleValue>
  7339.                         </PropertyDesc>
  7340.                         <PropertyDesc idRef="5" propType="objRef">
  7341.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7342.                         </PropertyDesc>
  7343.                         <PropertyDesc idRef="21" propType="simple">
  7344.                             <SimpleValue valType="str">ICMP Datagram Conversion Error</SimpleValue>
  7345.                         </PropertyDesc>
  7346.                         <PropertyDesc idRef="34" propType="simple">
  7347.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7348.                         </PropertyDesc>
  7349.                     </PropertyDescList>
  7350.                 </Rule>
  7351.                 <Rule guid="{78F63DF8-8DEB-407B-8D16-A5673FCF90CC}">
  7352.                     <ObjDescRef guidRef="{AA65E343-A735-479D-BD98-7AD51103E6BD}"/>
  7353.                     <AccessDescList>
  7354.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7355.                     </AccessDescList>
  7356.                     <PropertyDescList>
  7357.                         <PropertyDesc idRef="20" propType="simple">
  7358.                             <SimpleValue valType="int">1572</SimpleValue>
  7359.                         </PropertyDesc>
  7360.                         <PropertyDesc idRef="5" propType="objRef">
  7361.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7362.                         </PropertyDesc>
  7363.                         <PropertyDesc idRef="21" propType="simple">
  7364.                             <SimpleValue valType="str">ICMP Datagram Conversion Error (Undefined Code!)</SimpleValue>
  7365.                         </PropertyDesc>
  7366.                     </PropertyDescList>
  7367.                 </Rule>
  7368.                 <Rule guid="{E3F1B7F0-68CB-4391-B5C3-435228044819}">
  7369.                     <ObjDescRef guidRef="{6B3D6F06-5F65-49F9-BB55-553D0B07E83F}"/>
  7370.                     <AccessDescList>
  7371.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7372.                     </AccessDescList>
  7373.                     <PropertyDescList>
  7374.                         <PropertyDesc idRef="20" propType="simple">
  7375.                             <SimpleValue valType="int">1576</SimpleValue>
  7376.                         </PropertyDesc>
  7377.                         <PropertyDesc idRef="5" propType="objRef">
  7378.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7379.                         </PropertyDesc>
  7380.                         <PropertyDesc idRef="21" propType="simple">
  7381.                             <SimpleValue valType="str">ICMP Destination Unreachable (Destination Host Unknown)</SimpleValue>
  7382.                         </PropertyDesc>
  7383.                         <PropertyDesc idRef="34" propType="simple">
  7384.                             <SimpleValue valType="int" valRelation="==">7</SimpleValue>
  7385.                         </PropertyDesc>
  7386.                     </PropertyDescList>
  7387.                 </Rule>
  7388.                 <Rule guid="{5EF91B66-F73B-42E2-9CF7-E34A9AFF4253}">
  7389.                     <ObjDescRef guidRef="{5C8DA114-A025-44F5-B24E-81B6D91D0A7A}"/>
  7390.                     <AccessDescList>
  7391.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7392.                     </AccessDescList>
  7393.                     <PropertyDescList>
  7394.                         <PropertyDesc idRef="20" propType="simple">
  7395.                             <SimpleValue valType="int">1580</SimpleValue>
  7396.                         </PropertyDesc>
  7397.                         <PropertyDesc idRef="5" propType="objRef">
  7398.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7399.                         </PropertyDesc>
  7400.                         <PropertyDesc idRef="21" propType="simple">
  7401.                             <SimpleValue valType="str">ICMP Destination Unreachable (Destination Network Unknown)</SimpleValue>
  7402.                         </PropertyDesc>
  7403.                         <PropertyDesc idRef="34" propType="simple">
  7404.                             <SimpleValue valType="int" valRelation="==">6</SimpleValue>
  7405.                         </PropertyDesc>
  7406.                     </PropertyDescList>
  7407.                 </Rule>
  7408.                 <Rule guid="{BA3A3223-302A-45AA-9C06-E9DBE6786840}">
  7409.                     <ObjDescRef guidRef="{455A39A2-BAFD-45F6-8ED3-C5AAF4EC4806}"/>
  7410.                     <AccessDescList>
  7411.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7412.                     </AccessDescList>
  7413.                     <PropertyDescList>
  7414.                         <PropertyDesc idRef="20" propType="simple">
  7415.                             <SimpleValue valType="int">1584</SimpleValue>
  7416.                         </PropertyDesc>
  7417.                         <PropertyDesc idRef="5" propType="objRef">
  7418.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7419.                         </PropertyDesc>
  7420.                         <PropertyDesc idRef="21" propType="simple">
  7421.                             <SimpleValue valType="str">ICMP Destination Unreachable (Fragmentation Needed and DF bit was set)</SimpleValue>
  7422.                         </PropertyDesc>
  7423.                         <PropertyDesc idRef="34" propType="simple">
  7424.                             <SimpleValue valType="int" valRelation="==">4</SimpleValue>
  7425.                         </PropertyDesc>
  7426.                     </PropertyDescList>
  7427.                 </Rule>
  7428.                 <Rule guid="{149B9C56-BC5D-4466-B321-9100A465C1B9}">
  7429.                     <ObjDescRef guidRef="{60EB4FAE-F2EB-4B15-AF18-F49952812005}"/>
  7430.                     <AccessDescList>
  7431.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7432.                     </AccessDescList>
  7433.                     <PropertyDescList>
  7434.                         <PropertyDesc idRef="20" propType="simple">
  7435.                             <SimpleValue valType="int">1588</SimpleValue>
  7436.                         </PropertyDesc>
  7437.                         <PropertyDesc idRef="5" propType="objRef">
  7438.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7439.                         </PropertyDesc>
  7440.                         <PropertyDesc idRef="21" propType="simple">
  7441.                             <SimpleValue valType="str">ICMP Destination Unreachable (Host Precedence Violation)</SimpleValue>
  7442.                         </PropertyDesc>
  7443.                         <PropertyDesc idRef="34" propType="simple">
  7444.                             <SimpleValue valType="int" valRelation="==">14</SimpleValue>
  7445.                         </PropertyDesc>
  7446.                     </PropertyDescList>
  7447.                 </Rule>
  7448.                 <Rule guid="{17BF2278-FEDF-4B60-9312-84C9CBE84E6A}">
  7449.                     <ObjDescRef guidRef="{AC864171-86A6-4B1D-88DC-976D08BACE2D}"/>
  7450.                     <AccessDescList>
  7451.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7452.                     </AccessDescList>
  7453.                     <PropertyDescList>
  7454.                         <PropertyDesc idRef="20" propType="simple">
  7455.                             <SimpleValue valType="int">1592</SimpleValue>
  7456.                         </PropertyDesc>
  7457.                         <PropertyDesc idRef="5" propType="objRef">
  7458.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7459.                         </PropertyDesc>
  7460.                         <PropertyDesc idRef="21" propType="simple">
  7461.                             <SimpleValue valType="str">ICMP Destination Unreachable (Host Unreachable for Type of Service)</SimpleValue>
  7462.                         </PropertyDesc>
  7463.                         <PropertyDesc idRef="34" propType="simple">
  7464.                             <SimpleValue valType="int" valRelation="==">12</SimpleValue>
  7465.                         </PropertyDesc>
  7466.                     </PropertyDescList>
  7467.                 </Rule>
  7468.                 <Rule guid="{15639648-839C-40EF-946E-D1D5B7DB2B9C}">
  7469.                     <ObjDescRef guidRef="{19DD375C-497D-4B35-9D42-B4D2D6B0D471}"/>
  7470.                     <AccessDescList>
  7471.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7472.                     </AccessDescList>
  7473.                     <PropertyDescList>
  7474.                         <PropertyDesc idRef="20" propType="simple">
  7475.                             <SimpleValue valType="int">1596</SimpleValue>
  7476.                         </PropertyDesc>
  7477.                         <PropertyDesc idRef="5" propType="objRef">
  7478.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7479.                         </PropertyDesc>
  7480.                         <PropertyDesc idRef="21" propType="simple">
  7481.                             <SimpleValue valType="str">ICMP Destination Unreachable (Host Unreachable)</SimpleValue>
  7482.                         </PropertyDesc>
  7483.                         <PropertyDesc idRef="34" propType="simple">
  7484.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  7485.                         </PropertyDesc>
  7486.                     </PropertyDescList>
  7487.                 </Rule>
  7488.                 <Rule guid="{6598C56D-6C91-4934-B814-140A9175A40D}">
  7489.                     <ObjDescRef guidRef="{8BB61BC7-B125-4032-B4D7-57E55AAA8C53}"/>
  7490.                     <AccessDescList>
  7491.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7492.                     </AccessDescList>
  7493.                     <PropertyDescList>
  7494.                         <PropertyDesc idRef="20" propType="simple">
  7495.                             <SimpleValue valType="int">1600</SimpleValue>
  7496.                         </PropertyDesc>
  7497.                         <PropertyDesc idRef="5" propType="objRef">
  7498.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7499.                         </PropertyDesc>
  7500.                         <PropertyDesc idRef="21" propType="simple">
  7501.                             <SimpleValue valType="str">ICMP Destination Unreachable (Network Unreachable for Type of Service)</SimpleValue>
  7502.                         </PropertyDesc>
  7503.                         <PropertyDesc idRef="34" propType="simple">
  7504.                             <SimpleValue valType="int" valRelation="==">11</SimpleValue>
  7505.                         </PropertyDesc>
  7506.                     </PropertyDescList>
  7507.                 </Rule>
  7508.                 <Rule guid="{ACE94EE9-B96B-44FB-AA5D-C29A062C497C}">
  7509.                     <ObjDescRef guidRef="{17F654FB-69AB-40CC-97FC-14B548B8E287}"/>
  7510.                     <AccessDescList>
  7511.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7512.                     </AccessDescList>
  7513.                     <PropertyDescList>
  7514.                         <PropertyDesc idRef="20" propType="simple">
  7515.                             <SimpleValue valType="int">1604</SimpleValue>
  7516.                         </PropertyDesc>
  7517.                         <PropertyDesc idRef="5" propType="objRef">
  7518.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7519.                         </PropertyDesc>
  7520.                         <PropertyDesc idRef="21" propType="simple">
  7521.                             <SimpleValue valType="str">ICMP Destination Unreachable (Network Unreachable)</SimpleValue>
  7522.                         </PropertyDesc>
  7523.                         <PropertyDesc idRef="34" propType="simple">
  7524.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7525.                         </PropertyDesc>
  7526.                     </PropertyDescList>
  7527.                 </Rule>
  7528.                 <Rule guid="{9FA8CEE0-6241-4FD5-807F-C0B1F6DA9A82}">
  7529.                     <ObjDescRef guidRef="{8EF46245-AB29-4CC0-A646-F6811D7B8DAD}"/>
  7530.                     <AccessDescList>
  7531.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7532.                     </AccessDescList>
  7533.                     <PropertyDescList>
  7534.                         <PropertyDesc idRef="20" propType="simple">
  7535.                             <SimpleValue valType="int">1608</SimpleValue>
  7536.                         </PropertyDesc>
  7537.                         <PropertyDesc idRef="5" propType="objRef">
  7538.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7539.                         </PropertyDesc>
  7540.                         <PropertyDesc idRef="21" propType="simple">
  7541.                             <SimpleValue valType="str">ICMP Destination Unreachable (Port Unreachable)</SimpleValue>
  7542.                         </PropertyDesc>
  7543.                         <PropertyDesc idRef="34" propType="simple">
  7544.                             <SimpleValue valType="int" valRelation="==">3</SimpleValue>
  7545.                         </PropertyDesc>
  7546.                     </PropertyDescList>
  7547.                 </Rule>
  7548.                 <Rule guid="{8B615048-4F2F-4802-AE5E-233F58FE3846}">
  7549.                     <ObjDescRef guidRef="{8E92CB72-1729-495B-B374-F4922D9BF857}"/>
  7550.                     <AccessDescList>
  7551.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7552.                     </AccessDescList>
  7553.                     <PropertyDescList>
  7554.                         <PropertyDesc idRef="20" propType="simple">
  7555.                             <SimpleValue valType="int">1612</SimpleValue>
  7556.                         </PropertyDesc>
  7557.                         <PropertyDesc idRef="5" propType="objRef">
  7558.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7559.                         </PropertyDesc>
  7560.                         <PropertyDesc idRef="21" propType="simple">
  7561.                             <SimpleValue valType="str">ICMP Destination Unreachable (Precedence Cutoff in effect)</SimpleValue>
  7562.                         </PropertyDesc>
  7563.                         <PropertyDesc idRef="34" propType="simple">
  7564.                             <SimpleValue valType="int" valRelation="==">15</SimpleValue>
  7565.                         </PropertyDesc>
  7566.                     </PropertyDescList>
  7567.                 </Rule>
  7568.                 <Rule guid="{6A6B2AA6-EDC5-483A-B8C0-08B489064DF9}">
  7569.                     <ObjDescRef guidRef="{EF5C6A0F-29B3-4FC9-8BC5-736157A80030}"/>
  7570.                     <AccessDescList>
  7571.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7572.                     </AccessDescList>
  7573.                     <PropertyDescList>
  7574.                         <PropertyDesc idRef="20" propType="simple">
  7575.                             <SimpleValue valType="int">1616</SimpleValue>
  7576.                         </PropertyDesc>
  7577.                         <PropertyDesc idRef="5" propType="objRef">
  7578.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7579.                         </PropertyDesc>
  7580.                         <PropertyDesc idRef="21" propType="simple">
  7581.                             <SimpleValue valType="str">ICMP Destination Unreachable (Protocol Unreachable)</SimpleValue>
  7582.                         </PropertyDesc>
  7583.                         <PropertyDesc idRef="34" propType="simple">
  7584.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  7585.                         </PropertyDesc>
  7586.                     </PropertyDescList>
  7587.                 </Rule>
  7588.                 <Rule guid="{4A534F1D-6263-4288-9398-DF54F70FD17A}">
  7589.                     <ObjDescRef guidRef="{BDD84BA8-43AB-434A-AE2E-CD987EC07369}"/>
  7590.                     <AccessDescList>
  7591.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7592.                     </AccessDescList>
  7593.                     <PropertyDescList>
  7594.                         <PropertyDesc idRef="20" propType="simple">
  7595.                             <SimpleValue valType="int">1620</SimpleValue>
  7596.                         </PropertyDesc>
  7597.                         <PropertyDesc idRef="5" propType="objRef">
  7598.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7599.                         </PropertyDesc>
  7600.                         <PropertyDesc idRef="21" propType="simple">
  7601.                             <SimpleValue valType="str">ICMP Destination Unreachable (Source Host Isolated)</SimpleValue>
  7602.                         </PropertyDesc>
  7603.                         <PropertyDesc idRef="34" propType="simple">
  7604.                             <SimpleValue valType="int" valRelation="==">8</SimpleValue>
  7605.                         </PropertyDesc>
  7606.                     </PropertyDescList>
  7607.                 </Rule>
  7608.                 <Rule guid="{93FA3A5A-DB8A-4827-AAB6-CC52EBC098B1}">
  7609.                     <ObjDescRef guidRef="{695DD646-0FA1-4B41-82EA-2980693BFCF9}"/>
  7610.                     <AccessDescList>
  7611.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7612.                     </AccessDescList>
  7613.                     <PropertyDescList>
  7614.                         <PropertyDesc idRef="20" propType="simple">
  7615.                             <SimpleValue valType="int">1624</SimpleValue>
  7616.                         </PropertyDesc>
  7617.                         <PropertyDesc idRef="5" propType="objRef">
  7618.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7619.                         </PropertyDesc>
  7620.                         <PropertyDesc idRef="21" propType="simple">
  7621.                             <SimpleValue valType="str">ICMP Destination Unreachable (Source Route Failed)</SimpleValue>
  7622.                         </PropertyDesc>
  7623.                         <PropertyDesc idRef="34" propType="simple">
  7624.                             <SimpleValue valType="int" valRelation="==">5</SimpleValue>
  7625.                         </PropertyDesc>
  7626.                     </PropertyDescList>
  7627.                 </Rule>
  7628.                 <Rule guid="{8D1F4E58-8921-4B09-A781-BB8918341C91}">
  7629.                     <ObjDescRef guidRef="{BE15246D-BBFC-47BB-8076-D889B460CC23}"/>
  7630.                     <AccessDescList>
  7631.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7632.                     </AccessDescList>
  7633.                     <PropertyDescList>
  7634.                         <PropertyDesc idRef="20" propType="simple">
  7635.                             <SimpleValue valType="int">1628</SimpleValue>
  7636.                         </PropertyDesc>
  7637.                         <PropertyDesc idRef="5" propType="objRef">
  7638.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7639.                         </PropertyDesc>
  7640.                         <PropertyDesc idRef="21" propType="simple">
  7641.                             <SimpleValue valType="str">ICMP Destination Unreachable (Undefined Code!)</SimpleValue>
  7642.                         </PropertyDesc>
  7643.                     </PropertyDescList>
  7644.                 </Rule>
  7645.                 <Rule guid="{25FB766F-5A46-44D3-8E2B-CF9DD40FCBC8}">
  7646.                     <ObjDescRef guidRef="{7A81C3D5-F191-4F95-A802-83DABA4DFE62}"/>
  7647.                     <AccessDescList>
  7648.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7649.                     </AccessDescList>
  7650.                     <PropertyDescList>
  7651.                         <PropertyDesc idRef="20" propType="simple">
  7652.                             <SimpleValue valType="int">1632</SimpleValue>
  7653.                         </PropertyDesc>
  7654.                         <PropertyDesc idRef="5" propType="objRef">
  7655.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7656.                         </PropertyDesc>
  7657.                         <PropertyDesc idRef="21" propType="simple">
  7658.                             <SimpleValue valType="str">ICMP Echo Reply</SimpleValue>
  7659.                         </PropertyDesc>
  7660.                         <PropertyDesc idRef="34" propType="simple">
  7661.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7662.                         </PropertyDesc>
  7663.                     </PropertyDescList>
  7664.                 </Rule>
  7665.                 <Rule guid="{08D7933A-F3C9-41A3-8147-F19068C7C36E}">
  7666.                     <ObjDescRef guidRef="{DA23BC55-BCD1-4989-B966-AD6C98A5FDA6}"/>
  7667.                     <AccessDescList>
  7668.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7669.                     </AccessDescList>
  7670.                     <PropertyDescList>
  7671.                         <PropertyDesc idRef="20" propType="simple">
  7672.                             <SimpleValue valType="int">1636</SimpleValue>
  7673.                         </PropertyDesc>
  7674.                         <PropertyDesc idRef="5" propType="objRef">
  7675.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7676.                         </PropertyDesc>
  7677.                         <PropertyDesc idRef="21" propType="simple">
  7678.                             <SimpleValue valType="str">ICMP Echo Reply (Undefined Code!)</SimpleValue>
  7679.                         </PropertyDesc>
  7680.                     </PropertyDescList>
  7681.                 </Rule>
  7682.                 <Rule guid="{285B3F6E-8F84-4E35-900E-5492B069604F}">
  7683.                     <ObjDescRef guidRef="{5BC113C9-50AB-4402-AADE-B75F39D890EA}"/>
  7684.                     <AccessDescList>
  7685.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7686.                     </AccessDescList>
  7687.                     <PropertyDescList>
  7688.                         <PropertyDesc idRef="20" propType="simple">
  7689.                             <SimpleValue valType="int">1640</SimpleValue>
  7690.                         </PropertyDesc>
  7691.                         <PropertyDesc idRef="5" propType="objRef">
  7692.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7693.                         </PropertyDesc>
  7694.                         <PropertyDesc idRef="21" propType="simple">
  7695.                             <SimpleValue valType="str">ICMP Fragment Reassembly Time Exceeded</SimpleValue>
  7696.                         </PropertyDesc>
  7697.                         <PropertyDesc idRef="34" propType="simple">
  7698.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  7699.                         </PropertyDesc>
  7700.                     </PropertyDescList>
  7701.                 </Rule>
  7702.                 <Rule guid="{6142B1C2-E6E4-41CA-AA71-C292F284EAA2}">
  7703.                     <ObjDescRef guidRef="{C0CA9066-C947-406F-A601-7A6A512D0AEE}"/>
  7704.                     <AccessDescList>
  7705.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7706.                     </AccessDescList>
  7707.                     <PropertyDescList>
  7708.                         <PropertyDesc idRef="20" propType="simple">
  7709.                             <SimpleValue valType="int">1644</SimpleValue>
  7710.                         </PropertyDesc>
  7711.                         <PropertyDesc idRef="5" propType="objRef">
  7712.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7713.                         </PropertyDesc>
  7714.                         <PropertyDesc idRef="21" propType="simple">
  7715.                             <SimpleValue valType="str">ICMP IPV6 I-Am-Here</SimpleValue>
  7716.                         </PropertyDesc>
  7717.                         <PropertyDesc idRef="34" propType="simple">
  7718.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7719.                         </PropertyDesc>
  7720.                     </PropertyDescList>
  7721.                 </Rule>
  7722.                 <Rule guid="{0A2A1F99-E602-405A-8464-547BDE298233}">
  7723.                     <ObjDescRef guidRef="{5E693E56-58B7-4CDD-BD5B-D8ABAB8B0C2F}"/>
  7724.                     <AccessDescList>
  7725.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7726.                     </AccessDescList>
  7727.                     <PropertyDescList>
  7728.                         <PropertyDesc idRef="20" propType="simple">
  7729.                             <SimpleValue valType="int">1648</SimpleValue>
  7730.                         </PropertyDesc>
  7731.                         <PropertyDesc idRef="5" propType="objRef">
  7732.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7733.                         </PropertyDesc>
  7734.                         <PropertyDesc idRef="21" propType="simple">
  7735.                             <SimpleValue valType="str">ICMP IPV6 I-Am-Here (Undefined Code!</SimpleValue>
  7736.                         </PropertyDesc>
  7737.                     </PropertyDescList>
  7738.                 </Rule>
  7739.                 <Rule guid="{B27F4588-ACB9-4AE5-8977-120A5FE2DAEE}">
  7740.                     <ObjDescRef guidRef="{279F7A66-E240-4A47-90A9-EDB77BF874C4}"/>
  7741.                     <AccessDescList>
  7742.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7743.                     </AccessDescList>
  7744.                     <PropertyDescList>
  7745.                         <PropertyDesc idRef="20" propType="simple">
  7746.                             <SimpleValue valType="int">1652</SimpleValue>
  7747.                         </PropertyDesc>
  7748.                         <PropertyDesc idRef="5" propType="objRef">
  7749.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7750.                         </PropertyDesc>
  7751.                         <PropertyDesc idRef="21" propType="simple">
  7752.                             <SimpleValue valType="str">ICMP IPV6 Where-Are-You</SimpleValue>
  7753.                         </PropertyDesc>
  7754.                         <PropertyDesc idRef="34" propType="simple">
  7755.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7756.                         </PropertyDesc>
  7757.                     </PropertyDescList>
  7758.                 </Rule>
  7759.                 <Rule guid="{E9B1D465-57C3-414A-980E-2E92F65630E6}">
  7760.                     <ObjDescRef guidRef="{6B308AF4-DA56-46A9-A549-8569899AB8F9}"/>
  7761.                     <AccessDescList>
  7762.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7763.                     </AccessDescList>
  7764.                     <PropertyDescList>
  7765.                         <PropertyDesc idRef="20" propType="simple">
  7766.                             <SimpleValue valType="int">1656</SimpleValue>
  7767.                         </PropertyDesc>
  7768.                         <PropertyDesc idRef="5" propType="objRef">
  7769.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7770.                         </PropertyDesc>
  7771.                         <PropertyDesc idRef="21" propType="simple">
  7772.                             <SimpleValue valType="str">ICMP IPV6 Where-Are-You (Undefined Code!)</SimpleValue>
  7773.                         </PropertyDesc>
  7774.                     </PropertyDescList>
  7775.                 </Rule>
  7776.                 <Rule guid="{88B320E2-8A35-4169-A198-1CFE09F47D5F}">
  7777.                     <ObjDescRef guidRef="{244DF2EC-A548-420D-88D7-49C9EB49C767}"/>
  7778.                     <AccessDescList>
  7779.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7780.                     </AccessDescList>
  7781.                     <PropertyDescList>
  7782.                         <PropertyDesc idRef="20" propType="simple">
  7783.                             <SimpleValue valType="int">1660</SimpleValue>
  7784.                         </PropertyDesc>
  7785.                         <PropertyDesc idRef="5" propType="objRef">
  7786.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7787.                         </PropertyDesc>
  7788.                         <PropertyDesc idRef="21" propType="simple">
  7789.                             <SimpleValue valType="str">ICMP Information Reply</SimpleValue>
  7790.                         </PropertyDesc>
  7791.                         <PropertyDesc idRef="34" propType="simple">
  7792.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7793.                         </PropertyDesc>
  7794.                     </PropertyDescList>
  7795.                 </Rule>
  7796.                 <Rule guid="{6FEF2DFE-717B-4BB4-A5A7-399B4D0A40B7}">
  7797.                     <ObjDescRef guidRef="{D386379F-FB05-49CE-9685-C2B19EB67558}"/>
  7798.                     <AccessDescList>
  7799.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7800.                     </AccessDescList>
  7801.                     <PropertyDescList>
  7802.                         <PropertyDesc idRef="20" propType="simple">
  7803.                             <SimpleValue valType="int">1664</SimpleValue>
  7804.                         </PropertyDesc>
  7805.                         <PropertyDesc idRef="5" propType="objRef">
  7806.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7807.                         </PropertyDesc>
  7808.                         <PropertyDesc idRef="21" propType="simple">
  7809.                             <SimpleValue valType="str">ICMP Information Reply (Undefined Code!)</SimpleValue>
  7810.                         </PropertyDesc>
  7811.                     </PropertyDescList>
  7812.                 </Rule>
  7813.                 <Rule guid="{1FA55FF0-A31C-4F4B-8049-635AC9A5EF33}">
  7814.                     <ObjDescRef guidRef="{78BBBEFD-3306-4626-A734-017312AC7213}"/>
  7815.                     <AccessDescList>
  7816.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7817.                     </AccessDescList>
  7818.                     <PropertyDescList>
  7819.                         <PropertyDesc idRef="20" propType="simple">
  7820.                             <SimpleValue valType="int">1668</SimpleValue>
  7821.                         </PropertyDesc>
  7822.                         <PropertyDesc idRef="5" propType="objRef">
  7823.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7824.                         </PropertyDesc>
  7825.                         <PropertyDesc idRef="21" propType="simple">
  7826.                             <SimpleValue valType="str">ICMP Information Request</SimpleValue>
  7827.                         </PropertyDesc>
  7828.                         <PropertyDesc idRef="34" propType="simple">
  7829.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7830.                         </PropertyDesc>
  7831.                     </PropertyDescList>
  7832.                 </Rule>
  7833.                 <Rule guid="{C62A631E-7536-4601-A100-E0BDC33FC98F}">
  7834.                     <ObjDescRef guidRef="{21F564E0-D2B5-4008-97D3-0B497FF23B5A}"/>
  7835.                     <AccessDescList>
  7836.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7837.                     </AccessDescList>
  7838.                     <PropertyDescList>
  7839.                         <PropertyDesc idRef="20" propType="simple">
  7840.                             <SimpleValue valType="int">1672</SimpleValue>
  7841.                         </PropertyDesc>
  7842.                         <PropertyDesc idRef="5" propType="objRef">
  7843.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7844.                         </PropertyDesc>
  7845.                         <PropertyDesc idRef="21" propType="simple">
  7846.                             <SimpleValue valType="str">ICMP Information Request (Undefined Code!)</SimpleValue>
  7847.                         </PropertyDesc>
  7848.                     </PropertyDescList>
  7849.                 </Rule>
  7850.                 <Rule guid="{442CE67E-A083-4C39-A71D-11FFAF28713E}">
  7851.                     <ObjDescRef guidRef="{3916B89B-A9F9-41D3-9818-F21D78EC3795}"/>
  7852.                     <AccessDescList>
  7853.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7854.                     </AccessDescList>
  7855.                     <PropertyDescList>
  7856.                         <PropertyDesc idRef="20" propType="simple">
  7857.                             <SimpleValue valType="int">1676</SimpleValue>
  7858.                         </PropertyDesc>
  7859.                         <PropertyDesc idRef="5" propType="objRef">
  7860.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7861.                         </PropertyDesc>
  7862.                         <PropertyDesc idRef="21" propType="simple">
  7863.                             <SimpleValue valType="str">ICMP Mobile Host Redirect</SimpleValue>
  7864.                         </PropertyDesc>
  7865.                         <PropertyDesc idRef="34" propType="simple">
  7866.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7867.                         </PropertyDesc>
  7868.                     </PropertyDescList>
  7869.                 </Rule>
  7870.                 <Rule guid="{C692C765-AC8F-419E-B29A-EA99B792099F}">
  7871.                     <ObjDescRef guidRef="{0EAE6161-FC6A-490D-9F8E-CCA80AFB0DF7}"/>
  7872.                     <AccessDescList>
  7873.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7874.                     </AccessDescList>
  7875.                     <PropertyDescList>
  7876.                         <PropertyDesc idRef="20" propType="simple">
  7877.                             <SimpleValue valType="int">1680</SimpleValue>
  7878.                         </PropertyDesc>
  7879.                         <PropertyDesc idRef="5" propType="objRef">
  7880.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7881.                         </PropertyDesc>
  7882.                         <PropertyDesc idRef="21" propType="simple">
  7883.                             <SimpleValue valType="str">ICMP Mobile Host Redirect (Undefined Code!)</SimpleValue>
  7884.                         </PropertyDesc>
  7885.                     </PropertyDescList>
  7886.                 </Rule>
  7887.                 <Rule guid="{9FD2C47D-750F-44EF-841C-8D9E90806594}">
  7888.                     <ObjDescRef guidRef="{5AB3C03E-F801-4899-A76E-51E9D409201D}"/>
  7889.                     <AccessDescList>
  7890.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7891.                     </AccessDescList>
  7892.                     <PropertyDescList>
  7893.                         <PropertyDesc idRef="20" propType="simple">
  7894.                             <SimpleValue valType="int">1684</SimpleValue>
  7895.                         </PropertyDesc>
  7896.                         <PropertyDesc idRef="5" propType="objRef">
  7897.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7898.                         </PropertyDesc>
  7899.                         <PropertyDesc idRef="21" propType="simple">
  7900.                             <SimpleValue valType="str">ICMP Mobile Registration Reply</SimpleValue>
  7901.                         </PropertyDesc>
  7902.                         <PropertyDesc idRef="34" propType="simple">
  7903.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7904.                         </PropertyDesc>
  7905.                     </PropertyDescList>
  7906.                 </Rule>
  7907.                 <Rule guid="{1BEB467F-A454-4F7C-AC52-1D9B48BA7F58}">
  7908.                     <ObjDescRef guidRef="{21BB3720-FCD7-4BD3-A245-F0BD8AC070B9}"/>
  7909.                     <AccessDescList>
  7910.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7911.                     </AccessDescList>
  7912.                     <PropertyDescList>
  7913.                         <PropertyDesc idRef="20" propType="simple">
  7914.                             <SimpleValue valType="int">1688</SimpleValue>
  7915.                         </PropertyDesc>
  7916.                         <PropertyDesc idRef="5" propType="objRef">
  7917.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7918.                         </PropertyDesc>
  7919.                         <PropertyDesc idRef="21" propType="simple">
  7920.                             <SimpleValue valType="str">ICMP Mobile Registration Reply (Undefined Code!)</SimpleValue>
  7921.                         </PropertyDesc>
  7922.                     </PropertyDescList>
  7923.                 </Rule>
  7924.                 <Rule guid="{AA11E080-3A7D-45CB-A602-ADEA3C86895B}">
  7925.                     <ObjDescRef guidRef="{E4DDABCC-69ED-4101-8C1D-AFC4A349A690}"/>
  7926.                     <AccessDescList>
  7927.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7928.                     </AccessDescList>
  7929.                     <PropertyDescList>
  7930.                         <PropertyDesc idRef="20" propType="simple">
  7931.                             <SimpleValue valType="int">1692</SimpleValue>
  7932.                         </PropertyDesc>
  7933.                         <PropertyDesc idRef="5" propType="objRef">
  7934.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7935.                         </PropertyDesc>
  7936.                         <PropertyDesc idRef="21" propType="simple">
  7937.                             <SimpleValue valType="str">ICMP Mobile Registration Request</SimpleValue>
  7938.                         </PropertyDesc>
  7939.                         <PropertyDesc idRef="34" propType="simple">
  7940.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  7941.                         </PropertyDesc>
  7942.                     </PropertyDescList>
  7943.                 </Rule>
  7944.                 <Rule guid="{86E2DD90-8D88-4CF7-96F2-81C7E184FC8D}">
  7945.                     <ObjDescRef guidRef="{DCC046B9-5CF4-460E-9F5C-BA6E6F9A566B}"/>
  7946.                     <AccessDescList>
  7947.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7948.                     </AccessDescList>
  7949.                     <PropertyDescList>
  7950.                         <PropertyDesc idRef="20" propType="simple">
  7951.                             <SimpleValue valType="int">1696</SimpleValue>
  7952.                         </PropertyDesc>
  7953.                         <PropertyDesc idRef="5" propType="objRef">
  7954.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7955.                         </PropertyDesc>
  7956.                         <PropertyDesc idRef="21" propType="simple">
  7957.                             <SimpleValue valType="str">ICMP Mobile Registration Request (Undefined Code!</SimpleValue>
  7958.                         </PropertyDesc>
  7959.                     </PropertyDescList>
  7960.                 </Rule>
  7961.                 <Rule guid="{C4B2049D-CA38-4CD4-94A7-8B1C8F21592C}">
  7962.                     <ObjDescRef guidRef="{3FFC68EA-07EF-42CF-B3A6-6C8C7D0C5BA1}"/>
  7963.                     <AccessDescList>
  7964.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7965.                     </AccessDescList>
  7966.                     <PropertyDescList>
  7967.                         <PropertyDesc idRef="20" propType="simple">
  7968.                             <SimpleValue valType="int">1700</SimpleValue>
  7969.                         </PropertyDesc>
  7970.                         <PropertyDesc idRef="5" propType="objRef">
  7971.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7972.                         </PropertyDesc>
  7973.                         <PropertyDesc idRef="21" propType="simple">
  7974.                             <SimpleValue valType="str">ICMP Parameter Problem (Bad Length)</SimpleValue>
  7975.                         </PropertyDesc>
  7976.                         <PropertyDesc idRef="34" propType="simple">
  7977.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  7978.                         </PropertyDesc>
  7979.                     </PropertyDescList>
  7980.                 </Rule>
  7981.                 <Rule guid="{D5D28AC3-BD7A-4382-BA31-F3274924E0C5}">
  7982.                     <ObjDescRef guidRef="{C9360ADC-A3AE-4774-B166-90749F3BE563}"/>
  7983.                     <AccessDescList>
  7984.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  7985.                     </AccessDescList>
  7986.                     <PropertyDescList>
  7987.                         <PropertyDesc idRef="20" propType="simple">
  7988.                             <SimpleValue valType="int">1704</SimpleValue>
  7989.                         </PropertyDesc>
  7990.                         <PropertyDesc idRef="5" propType="objRef">
  7991.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  7992.                         </PropertyDesc>
  7993.                         <PropertyDesc idRef="21" propType="simple">
  7994.                             <SimpleValue valType="str">ICMP Parameter Problem (Missing a Requiered Option)</SimpleValue>
  7995.                         </PropertyDesc>
  7996.                         <PropertyDesc idRef="34" propType="simple">
  7997.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  7998.                         </PropertyDesc>
  7999.                     </PropertyDescList>
  8000.                 </Rule>
  8001.                 <Rule guid="{34F6CF0E-9FE4-42F5-98D1-E5314120397C}">
  8002.                     <ObjDescRef guidRef="{5AECD9A5-4E72-42E4-81B5-FAA945BB5ADA}"/>
  8003.                     <AccessDescList>
  8004.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8005.                     </AccessDescList>
  8006.                     <PropertyDescList>
  8007.                         <PropertyDesc idRef="20" propType="simple">
  8008.                             <SimpleValue valType="int">1708</SimpleValue>
  8009.                         </PropertyDesc>
  8010.                         <PropertyDesc idRef="5" propType="objRef">
  8011.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8012.                         </PropertyDesc>
  8013.                         <PropertyDesc idRef="21" propType="simple">
  8014.                             <SimpleValue valType="str">ICMP Parameter Problem (Unspecified Error)</SimpleValue>
  8015.                         </PropertyDesc>
  8016.                         <PropertyDesc idRef="34" propType="simple">
  8017.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8018.                         </PropertyDesc>
  8019.                     </PropertyDescList>
  8020.                 </Rule>
  8021.                 <Rule guid="{8F70E957-AD45-4CCB-8111-26C7786D8558}">
  8022.                     <ObjDescRef guidRef="{A59085B5-D539-402D-8808-034197E7EF8D}"/>
  8023.                     <AccessDescList>
  8024.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8025.                     </AccessDescList>
  8026.                     <PropertyDescList>
  8027.                         <PropertyDesc idRef="20" propType="simple">
  8028.                             <SimpleValue valType="int">1712</SimpleValue>
  8029.                         </PropertyDesc>
  8030.                         <PropertyDesc idRef="5" propType="objRef">
  8031.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8032.                         </PropertyDesc>
  8033.                         <PropertyDesc idRef="21" propType="simple">
  8034.                             <SimpleValue valType="str">ICMP Parameter Problem (Undefined Code!)</SimpleValue>
  8035.                         </PropertyDesc>
  8036.                     </PropertyDescList>
  8037.                 </Rule>
  8038.                 <Rule guid="{F5F299EC-8C71-4856-97BE-BF6728F1CB62}">
  8039.                     <ObjDescRef guidRef="{48B91E5C-86A5-4F74-8B88-55FF2EACD0EB}"/>
  8040.                     <AccessDescList>
  8041.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8042.                     </AccessDescList>
  8043.                     <PropertyDescList>
  8044.                         <PropertyDesc idRef="20" propType="simple">
  8045.                             <SimpleValue valType="int">1716</SimpleValue>
  8046.                         </PropertyDesc>
  8047.                         <PropertyDesc idRef="5" propType="objRef">
  8048.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8049.                         </PropertyDesc>
  8050.                         <PropertyDesc idRef="21" propType="simple">
  8051.                             <SimpleValue valType="str">ICMP Photuris (Reserved)</SimpleValue>
  8052.                         </PropertyDesc>
  8053.                         <PropertyDesc idRef="34" propType="simple">
  8054.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8055.                         </PropertyDesc>
  8056.                     </PropertyDescList>
  8057.                 </Rule>
  8058.                 <Rule guid="{E732B6B7-B7E4-4F91-B0AB-880C15A12708}">
  8059.                     <ObjDescRef guidRef="{EA3B9538-8BA2-4B7A-A477-5AEDBDA8ACEC}"/>
  8060.                     <AccessDescList>
  8061.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8062.                     </AccessDescList>
  8063.                     <PropertyDescList>
  8064.                         <PropertyDesc idRef="20" propType="simple">
  8065.                             <SimpleValue valType="int">1720</SimpleValue>
  8066.                         </PropertyDesc>
  8067.                         <PropertyDesc idRef="5" propType="objRef">
  8068.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8069.                         </PropertyDesc>
  8070.                         <PropertyDesc idRef="21" propType="simple">
  8071.                             <SimpleValue valType="str">ICMP Photuris (Unknown Security Parameters Index)</SimpleValue>
  8072.                         </PropertyDesc>
  8073.                         <PropertyDesc idRef="34" propType="simple">
  8074.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  8075.                         </PropertyDesc>
  8076.                     </PropertyDescList>
  8077.                 </Rule>
  8078.                 <Rule guid="{76AD629D-C2EF-4488-AD85-4CB4DD89CFDA}">
  8079.                     <ObjDescRef guidRef="{CB9F57B5-1875-4ECC-8555-014754E56653}"/>
  8080.                     <AccessDescList>
  8081.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8082.                     </AccessDescList>
  8083.                     <PropertyDescList>
  8084.                         <PropertyDesc idRef="20" propType="simple">
  8085.                             <SimpleValue valType="int">1724</SimpleValue>
  8086.                         </PropertyDesc>
  8087.                         <PropertyDesc idRef="5" propType="objRef">
  8088.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8089.                         </PropertyDesc>
  8090.                         <PropertyDesc idRef="21" propType="simple">
  8091.                             <SimpleValue valType="str">ICMP Photuris (Valid Security Parameters, But Authentication Failed)</SimpleValue>
  8092.                         </PropertyDesc>
  8093.                         <PropertyDesc idRef="34" propType="simple">
  8094.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  8095.                         </PropertyDesc>
  8096.                     </PropertyDescList>
  8097.                 </Rule>
  8098.                 <Rule guid="{82AB3A40-8085-4774-8A52-FB68BD2CE058}">
  8099.                     <ObjDescRef guidRef="{A15BD553-BE59-46B5-BFB2-D000997637F2}"/>
  8100.                     <AccessDescList>
  8101.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8102.                     </AccessDescList>
  8103.                     <PropertyDescList>
  8104.                         <PropertyDesc idRef="20" propType="simple">
  8105.                             <SimpleValue valType="int">1728</SimpleValue>
  8106.                         </PropertyDesc>
  8107.                         <PropertyDesc idRef="5" propType="objRef">
  8108.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8109.                         </PropertyDesc>
  8110.                         <PropertyDesc idRef="21" propType="simple">
  8111.                             <SimpleValue valType="str">ICMP Photuris (Valid Security Parameters, But Decryption Failed)</SimpleValue>
  8112.                         </PropertyDesc>
  8113.                         <PropertyDesc idRef="34" propType="simple">
  8114.                             <SimpleValue valType="int" valRelation="==">3</SimpleValue>
  8115.                         </PropertyDesc>
  8116.                     </PropertyDescList>
  8117.                 </Rule>
  8118.                 <Rule guid="{673F0033-D9AA-4E1F-9D00-F4B87AE4D7CC}">
  8119.                     <ObjDescRef guidRef="{64366EEE-B147-487A-B233-208C67C7D2EE}"/>
  8120.                     <AccessDescList>
  8121.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8122.                     </AccessDescList>
  8123.                     <PropertyDescList>
  8124.                         <PropertyDesc idRef="20" propType="simple">
  8125.                             <SimpleValue valType="int">1732</SimpleValue>
  8126.                         </PropertyDesc>
  8127.                         <PropertyDesc idRef="5" propType="objRef">
  8128.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8129.                         </PropertyDesc>
  8130.                         <PropertyDesc idRef="21" propType="simple">
  8131.                             <SimpleValue valType="str">ICMP Photuris (Undefined Code!)</SimpleValue>
  8132.                         </PropertyDesc>
  8133.                     </PropertyDescList>
  8134.                 </Rule>
  8135.                 <Rule guid="{1C5F9B22-19AB-464F-9042-FDCE980FA988}">
  8136.                     <ObjDescRef guidRef="{DF029DA4-64F7-4654-8518-01F03C4DEB4F}"/>
  8137.                     <AccessDescList>
  8138.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8139.                     </AccessDescList>
  8140.                     <PropertyDescList>
  8141.                         <PropertyDesc idRef="20" propType="simple">
  8142.                             <SimpleValue valType="int">1744</SimpleValue>
  8143.                         </PropertyDesc>
  8144.                         <PropertyDesc idRef="5" propType="objRef">
  8145.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8146.                         </PropertyDesc>
  8147.                         <PropertyDesc idRef="21" propType="simple">
  8148.                             <SimpleValue valType="str">ICMP Redirect (for TOS and Host)</SimpleValue>
  8149.                         </PropertyDesc>
  8150.                         <PropertyDesc idRef="34" propType="simple">
  8151.                             <SimpleValue valType="int" valRelation="==">3</SimpleValue>
  8152.                         </PropertyDesc>
  8153.                     </PropertyDescList>
  8154.                 </Rule>
  8155.                 <Rule guid="{E5E75126-3E7D-4C95-917F-127D99C6BA93}">
  8156.                     <ObjDescRef guidRef="{5BF998EE-E442-4500-9AC3-8E939F3457AE}"/>
  8157.                     <AccessDescList>
  8158.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8159.                     </AccessDescList>
  8160.                     <PropertyDescList>
  8161.                         <PropertyDesc idRef="20" propType="simple">
  8162.                             <SimpleValue valType="int">1748</SimpleValue>
  8163.                         </PropertyDesc>
  8164.                         <PropertyDesc idRef="5" propType="objRef">
  8165.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8166.                         </PropertyDesc>
  8167.                         <PropertyDesc idRef="21" propType="simple">
  8168.                             <SimpleValue valType="str">ICMP Redirect (for TOS and Network)</SimpleValue>
  8169.                         </PropertyDesc>
  8170.                         <PropertyDesc idRef="34" propType="simple">
  8171.                             <SimpleValue valType="int" valRelation="==">2</SimpleValue>
  8172.                         </PropertyDesc>
  8173.                     </PropertyDescList>
  8174.                 </Rule>
  8175.                 <Rule guid="{01A9961F-7E99-41FE-8227-86E6B9B5F1B9}">
  8176.                     <ObjDescRef guidRef="{3B0D65F5-8D85-4FF2-8DAD-D681434CF3B2}"/>
  8177.                     <AccessDescList>
  8178.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8179.                     </AccessDescList>
  8180.                     <PropertyDescList>
  8181.                         <PropertyDesc idRef="20" propType="simple">
  8182.                             <SimpleValue valType="int">1752</SimpleValue>
  8183.                         </PropertyDesc>
  8184.                         <PropertyDesc idRef="5" propType="objRef">
  8185.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8186.                         </PropertyDesc>
  8187.                         <PropertyDesc idRef="21" propType="simple">
  8188.                             <SimpleValue valType="str">ICMP Redirect (Undefined Code!)</SimpleValue>
  8189.                         </PropertyDesc>
  8190.                     </PropertyDescList>
  8191.                 </Rule>
  8192.                 <Rule guid="{41FBAA5F-9118-4284-9E05-294D63B22FCE}">
  8193.                     <ObjDescRef guidRef="{B2E84D5F-0CF0-4B1D-A884-A3DF4BA506FD}"/>
  8194.                     <AccessDescList>
  8195.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8196.                     </AccessDescList>
  8197.                     <PropertyDescList>
  8198.                         <PropertyDesc idRef="20" propType="simple">
  8199.                             <SimpleValue valType="int">1756</SimpleValue>
  8200.                         </PropertyDesc>
  8201.                         <PropertyDesc idRef="5" propType="objRef">
  8202.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8203.                         </PropertyDesc>
  8204.                         <PropertyDesc idRef="21" propType="simple">
  8205.                             <SimpleValue valType="str">ICMP Reserved for Security (Type 19)</SimpleValue>
  8206.                         </PropertyDesc>
  8207.                         <PropertyDesc idRef="34" propType="simple">
  8208.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8209.                         </PropertyDesc>
  8210.                     </PropertyDescList>
  8211.                 </Rule>
  8212.                 <Rule guid="{5E5C3130-3229-4E9D-BDA7-7BB3E3433343}">
  8213.                     <ObjDescRef guidRef="{14A64B31-0A82-47A8-B130-157C4ED52180}"/>
  8214.                     <AccessDescList>
  8215.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8216.                     </AccessDescList>
  8217.                     <PropertyDescList>
  8218.                         <PropertyDesc idRef="20" propType="simple">
  8219.                             <SimpleValue valType="int">1760</SimpleValue>
  8220.                         </PropertyDesc>
  8221.                         <PropertyDesc idRef="5" propType="objRef">
  8222.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8223.                         </PropertyDesc>
  8224.                         <PropertyDesc idRef="21" propType="simple">
  8225.                             <SimpleValue valType="str">ICMP Reserved for Security (Type 19) (Undefined Code!)</SimpleValue>
  8226.                         </PropertyDesc>
  8227.                     </PropertyDescList>
  8228.                 </Rule>
  8229.                 <Rule guid="{6AF8A06B-D8B5-41AC-BC83-EB1C60CA4879}">
  8230.                     <ObjDescRef guidRef="{C95479B9-A6B0-4338-8F2D-035DF345B1F7}"/>
  8231.                     <AccessDescList>
  8232.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8233.                     </AccessDescList>
  8234.                     <PropertyDescList>
  8235.                         <PropertyDesc idRef="20" propType="simple">
  8236.                             <SimpleValue valType="int">1764</SimpleValue>
  8237.                         </PropertyDesc>
  8238.                         <PropertyDesc idRef="5" propType="objRef">
  8239.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8240.                         </PropertyDesc>
  8241.                         <PropertyDesc idRef="21" propType="simple">
  8242.                             <SimpleValue valType="str">ICMP Router Advertisment</SimpleValue>
  8243.                         </PropertyDesc>
  8244.                         <PropertyDesc idRef="34" propType="simple">
  8245.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8246.                         </PropertyDesc>
  8247.                     </PropertyDescList>
  8248.                 </Rule>
  8249.                 <Rule guid="{4731128D-B6A5-4130-94A1-CB704B50D1D1}">
  8250.                     <ObjDescRef guidRef="{E8E0268B-37F5-4678-93BD-1C122823EBC6}"/>
  8251.                     <AccessDescList>
  8252.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8253.                     </AccessDescList>
  8254.                     <PropertyDescList>
  8255.                         <PropertyDesc idRef="20" propType="simple">
  8256.                             <SimpleValue valType="int">1772</SimpleValue>
  8257.                         </PropertyDesc>
  8258.                         <PropertyDesc idRef="5" propType="objRef">
  8259.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8260.                         </PropertyDesc>
  8261.                         <PropertyDesc idRef="21" propType="simple">
  8262.                             <SimpleValue valType="str">ICMP Router Selection</SimpleValue>
  8263.                         </PropertyDesc>
  8264.                         <PropertyDesc idRef="34" propType="simple">
  8265.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8266.                         </PropertyDesc>
  8267.                     </PropertyDescList>
  8268.                 </Rule>
  8269.                 <Rule guid="{0F999872-B03D-4FCC-9172-D58BE6563F80}">
  8270.                     <ObjDescRef guidRef="{538963AD-D20B-4DD6-83A0-799B60F59DE7}"/>
  8271.                     <AccessDescList>
  8272.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8273.                     </AccessDescList>
  8274.                     <PropertyDescList>
  8275.                         <PropertyDesc idRef="20" propType="simple">
  8276.                             <SimpleValue valType="int">1780</SimpleValue>
  8277.                         </PropertyDesc>
  8278.                         <PropertyDesc idRef="5" propType="objRef">
  8279.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8280.                         </PropertyDesc>
  8281.                         <PropertyDesc idRef="21" propType="simple">
  8282.                             <SimpleValue valType="str">ICMP SKIP</SimpleValue>
  8283.                         </PropertyDesc>
  8284.                         <PropertyDesc idRef="34" propType="simple">
  8285.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8286.                         </PropertyDesc>
  8287.                     </PropertyDescList>
  8288.                 </Rule>
  8289.                 <Rule guid="{6967A68F-62A3-4A56-A876-BEA3A6369E7C}">
  8290.                     <ObjDescRef guidRef="{0BB917AC-739D-4EFE-A53A-7D45B4828D11}"/>
  8291.                     <AccessDescList>
  8292.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8293.                     </AccessDescList>
  8294.                     <PropertyDescList>
  8295.                         <PropertyDesc idRef="20" propType="simple">
  8296.                             <SimpleValue valType="int">1784</SimpleValue>
  8297.                         </PropertyDesc>
  8298.                         <PropertyDesc idRef="5" propType="objRef">
  8299.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8300.                         </PropertyDesc>
  8301.                         <PropertyDesc idRef="21" propType="simple">
  8302.                             <SimpleValue valType="str">ICMP SKIP (Undefined Code!</SimpleValue>
  8303.                         </PropertyDesc>
  8304.                     </PropertyDescList>
  8305.                 </Rule>
  8306.                 <Rule guid="{A8680BF2-7A5A-494A-8552-C3435B1266DF}">
  8307.                     <ObjDescRef guidRef="{299412DE-EC4F-4A03-96A9-E139EA335218}"/>
  8308.                     <AccessDescList>
  8309.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8310.                     </AccessDescList>
  8311.                     <PropertyDescList>
  8312.                         <PropertyDesc idRef="20" propType="simple">
  8313.                             <SimpleValue valType="int">1792</SimpleValue>
  8314.                         </PropertyDesc>
  8315.                         <PropertyDesc idRef="5" propType="objRef">
  8316.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8317.                         </PropertyDesc>
  8318.                         <PropertyDesc idRef="21" propType="simple">
  8319.                             <SimpleValue valType="str">ICMP Source Quench (Undefined Code!)</SimpleValue>
  8320.                         </PropertyDesc>
  8321.                     </PropertyDescList>
  8322.                 </Rule>
  8323.                 <Rule guid="{AFD976F7-CEE4-48DA-92CA-36C1A303D9B4}">
  8324.                     <ObjDescRef guidRef="{7BC48996-C906-4587-9D69-66F412BA6CCC}"/>
  8325.                     <AccessDescList>
  8326.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8327.                     </AccessDescList>
  8328.                     <PropertyDescList>
  8329.                         <PropertyDesc idRef="20" propType="simple">
  8330.                             <SimpleValue valType="int">1796</SimpleValue>
  8331.                         </PropertyDesc>
  8332.                         <PropertyDesc idRef="5" propType="objRef">
  8333.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8334.                         </PropertyDesc>
  8335.                         <PropertyDesc idRef="21" propType="simple">
  8336.                             <SimpleValue valType="str">ICMP Time-To-Live Exceeded in Transit</SimpleValue>
  8337.                         </PropertyDesc>
  8338.                         <PropertyDesc idRef="34" propType="simple">
  8339.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8340.                         </PropertyDesc>
  8341.                     </PropertyDescList>
  8342.                 </Rule>
  8343.                 <Rule guid="{EF8B34FF-BF32-4272-BDCB-68D0D7801E9F}">
  8344.                     <ObjDescRef guidRef="{D8665E4D-83CE-4A09-8A0E-C2CAB3DA06E1}"/>
  8345.                     <AccessDescList>
  8346.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8347.                     </AccessDescList>
  8348.                     <PropertyDescList>
  8349.                         <PropertyDesc idRef="20" propType="simple">
  8350.                             <SimpleValue valType="int">1800</SimpleValue>
  8351.                         </PropertyDesc>
  8352.                         <PropertyDesc idRef="5" propType="objRef">
  8353.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8354.                         </PropertyDesc>
  8355.                         <PropertyDesc idRef="21" propType="simple">
  8356.                             <SimpleValue valType="str">ICMP Time-To-Live Exceeded in Transit (Undefined Code!)</SimpleValue>
  8357.                         </PropertyDesc>
  8358.                     </PropertyDescList>
  8359.                 </Rule>
  8360.                 <Rule guid="{B0811388-5508-4638-AB25-2D7FCBA24088}">
  8361.                     <ObjDescRef guidRef="{405530AC-FF4C-435A-BA27-CFAA2ABD5A67}"/>
  8362.                     <AccessDescList>
  8363.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8364.                     </AccessDescList>
  8365.                     <PropertyDescList>
  8366.                         <PropertyDesc idRef="20" propType="simple">
  8367.                             <SimpleValue valType="int">1804</SimpleValue>
  8368.                         </PropertyDesc>
  8369.                         <PropertyDesc idRef="5" propType="objRef">
  8370.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8371.                         </PropertyDesc>
  8372.                         <PropertyDesc idRef="21" propType="simple">
  8373.                             <SimpleValue valType="str">ICMP Timestamp Reply</SimpleValue>
  8374.                         </PropertyDesc>
  8375.                         <PropertyDesc idRef="34" propType="simple">
  8376.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8377.                         </PropertyDesc>
  8378.                     </PropertyDescList>
  8379.                 </Rule>
  8380.                 <Rule guid="{4D9D3D8A-1F34-45B3-ABDF-4E7098F2AF0F}">
  8381.                     <ObjDescRef guidRef="{52BAE2A3-A247-4207-9C04-EFFA952E1B19}"/>
  8382.                     <AccessDescList>
  8383.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8384.                     </AccessDescList>
  8385.                     <PropertyDescList>
  8386.                         <PropertyDesc idRef="20" propType="simple">
  8387.                             <SimpleValue valType="int">1808</SimpleValue>
  8388.                         </PropertyDesc>
  8389.                         <PropertyDesc idRef="5" propType="objRef">
  8390.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8391.                         </PropertyDesc>
  8392.                         <PropertyDesc idRef="21" propType="simple">
  8393.                             <SimpleValue valType="str">ICMP Timestamp Reply (Undefined Code!)</SimpleValue>
  8394.                         </PropertyDesc>
  8395.                     </PropertyDescList>
  8396.                 </Rule>
  8397.                 <Rule guid="{B1A2AB2A-27F4-4018-8DB4-A7D2408E3D7C}">
  8398.                     <ObjDescRef guidRef="{AEB40EE3-D36F-4AD2-98EA-8B9BB292976B}"/>
  8399.                     <AccessDescList>
  8400.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8401.                     </AccessDescList>
  8402.                     <PropertyDescList>
  8403.                         <PropertyDesc idRef="20" propType="simple">
  8404.                             <SimpleValue valType="int">1812</SimpleValue>
  8405.                         </PropertyDesc>
  8406.                         <PropertyDesc idRef="5" propType="objRef">
  8407.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8408.                         </PropertyDesc>
  8409.                         <PropertyDesc idRef="21" propType="simple">
  8410.                             <SimpleValue valType="str">ICMP Timestamp Request</SimpleValue>
  8411.                         </PropertyDesc>
  8412.                         <PropertyDesc idRef="34" propType="simple">
  8413.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8414.                         </PropertyDesc>
  8415.                     </PropertyDescList>
  8416.                 </Rule>
  8417.                 <Rule guid="{1F7FEC3D-7C8C-4632-BC47-A43C20596616}">
  8418.                     <ObjDescRef guidRef="{5C2CB470-5409-4E23-B3B6-3E74D1C4A0BA}"/>
  8419.                     <AccessDescList>
  8420.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8421.                     </AccessDescList>
  8422.                     <PropertyDescList>
  8423.                         <PropertyDesc idRef="20" propType="simple">
  8424.                             <SimpleValue valType="int">1816</SimpleValue>
  8425.                         </PropertyDesc>
  8426.                         <PropertyDesc idRef="5" propType="objRef">
  8427.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8428.                         </PropertyDesc>
  8429.                         <PropertyDesc idRef="21" propType="simple">
  8430.                             <SimpleValue valType="str">ICMP Timestamp Request (Undefined Code!)</SimpleValue>
  8431.                         </PropertyDesc>
  8432.                     </PropertyDescList>
  8433.                 </Rule>
  8434.                 <Rule guid="{25FB50F1-894A-4259-83D4-01AA39D747F4}">
  8435.                     <ObjDescRef guidRef="{209EB404-23D7-4E51-A9BA-DA5819208DCE}"/>
  8436.                     <AccessDescList>
  8437.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8438.                     </AccessDescList>
  8439.                     <PropertyDescList>
  8440.                         <PropertyDesc idRef="20" propType="simple">
  8441.                             <SimpleValue valType="int">1820</SimpleValue>
  8442.                         </PropertyDesc>
  8443.                         <PropertyDesc idRef="5" propType="objRef">
  8444.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8445.                         </PropertyDesc>
  8446.                         <PropertyDesc idRef="21" propType="simple">
  8447.                             <SimpleValue valType="str">ICMP Traceroute ipopts</SimpleValue>
  8448.                         </PropertyDesc>
  8449.                         <PropertyDesc idRef="25" propType="simple">
  8450.                             <SimpleValue valType="int">0</SimpleValue>
  8451.                         </PropertyDesc>
  8452.                     </PropertyDescList>
  8453.                 </Rule>
  8454.                 <Rule guid="{D53C849D-E9FF-4BFD-B0C0-F3F7D1B2EAFE}">
  8455.                     <ObjDescRef guidRef="{676B4272-CE27-44D6-BC32-25FD838356F5}"/>
  8456.                     <AccessDescList>
  8457.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8458.                     </AccessDescList>
  8459.                     <PropertyDescList>
  8460.                         <PropertyDesc idRef="20" propType="simple">
  8461.                             <SimpleValue valType="int">1824</SimpleValue>
  8462.                         </PropertyDesc>
  8463.                         <PropertyDesc idRef="5" propType="objRef">
  8464.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8465.                         </PropertyDesc>
  8466.                         <PropertyDesc idRef="21" propType="simple">
  8467.                             <SimpleValue valType="str">ICMP Traceroute</SimpleValue>
  8468.                         </PropertyDesc>
  8469.                         <PropertyDesc idRef="34" propType="simple">
  8470.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8471.                         </PropertyDesc>
  8472.                     </PropertyDescList>
  8473.                 </Rule>
  8474.                 <Rule guid="{AC31E5AA-A324-459C-AF7B-F11239F1DAF2}">
  8475.                     <ObjDescRef guidRef="{351B491B-7BC8-418E-9139-82C6747F09C9}"/>
  8476.                     <AccessDescList>
  8477.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8478.                     </AccessDescList>
  8479.                     <PropertyDescList>
  8480.                         <PropertyDesc idRef="20" propType="simple">
  8481.                             <SimpleValue valType="int">1828</SimpleValue>
  8482.                         </PropertyDesc>
  8483.                         <PropertyDesc idRef="5" propType="objRef">
  8484.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8485.                         </PropertyDesc>
  8486.                         <PropertyDesc idRef="21" propType="simple">
  8487.                             <SimpleValue valType="str">ICMP Traceroute (Undefined Code!)</SimpleValue>
  8488.                         </PropertyDesc>
  8489.                     </PropertyDescList>
  8490.                 </Rule>
  8491.                 <Rule guid="{86F2E937-6849-49D5-B655-195EB1A729A2}">
  8492.                     <ObjDescRef guidRef="{0F54CFA0-1D13-436E-9E8A-5CB4A6816700}"/>
  8493.                     <AccessDescList>
  8494.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8495.                     </AccessDescList>
  8496.                     <PropertyDescList>
  8497.                         <PropertyDesc idRef="20" propType="simple">
  8498.                             <SimpleValue valType="int">1832</SimpleValue>
  8499.                         </PropertyDesc>
  8500.                         <PropertyDesc idRef="5" propType="objRef">
  8501.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8502.                         </PropertyDesc>
  8503.                         <PropertyDesc idRef="21" propType="simple">
  8504.                             <SimpleValue valType="str">ICMP Unassigned! (Type 1)</SimpleValue>
  8505.                         </PropertyDesc>
  8506.                         <PropertyDesc idRef="34" propType="simple">
  8507.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8508.                         </PropertyDesc>
  8509.                     </PropertyDescList>
  8510.                 </Rule>
  8511.                 <Rule guid="{C500F9EB-7190-4FF2-AC0A-7A23DB59B32E}">
  8512.                     <ObjDescRef guidRef="{C116C6B1-100E-40D1-B24E-F01681D8AA83}"/>
  8513.                     <AccessDescList>
  8514.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8515.                     </AccessDescList>
  8516.                     <PropertyDescList>
  8517.                         <PropertyDesc idRef="20" propType="simple">
  8518.                             <SimpleValue valType="int">1836</SimpleValue>
  8519.                         </PropertyDesc>
  8520.                         <PropertyDesc idRef="5" propType="objRef">
  8521.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8522.                         </PropertyDesc>
  8523.                         <PropertyDesc idRef="21" propType="simple">
  8524.                             <SimpleValue valType="str">ICMP Unassigned! (Type 1) (Undefined Code)</SimpleValue>
  8525.                         </PropertyDesc>
  8526.                     </PropertyDescList>
  8527.                 </Rule>
  8528.                 <Rule guid="{9BA01A4A-39FF-42D4-ACD3-D4AB084C9367}">
  8529.                     <ObjDescRef guidRef="{DA2F16F7-9AAC-45EB-AF56-4674E5A43C46}"/>
  8530.                     <AccessDescList>
  8531.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8532.                     </AccessDescList>
  8533.                     <PropertyDescList>
  8534.                         <PropertyDesc idRef="20" propType="simple">
  8535.                             <SimpleValue valType="int">1840</SimpleValue>
  8536.                         </PropertyDesc>
  8537.                         <PropertyDesc idRef="5" propType="objRef">
  8538.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8539.                         </PropertyDesc>
  8540.                         <PropertyDesc idRef="21" propType="simple">
  8541.                             <SimpleValue valType="str">ICMP Unassigned! (Type 2)</SimpleValue>
  8542.                         </PropertyDesc>
  8543.                         <PropertyDesc idRef="34" propType="simple">
  8544.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8545.                         </PropertyDesc>
  8546.                     </PropertyDescList>
  8547.                 </Rule>
  8548.                 <Rule guid="{626F70F2-9CD1-48A3-84FE-D85980B790D3}">
  8549.                     <ObjDescRef guidRef="{32EDBC49-B8C3-4EB8-B1FB-91AEA04D963F}"/>
  8550.                     <AccessDescList>
  8551.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8552.                     </AccessDescList>
  8553.                     <PropertyDescList>
  8554.                         <PropertyDesc idRef="20" propType="simple">
  8555.                             <SimpleValue valType="int">1844</SimpleValue>
  8556.                         </PropertyDesc>
  8557.                         <PropertyDesc idRef="5" propType="objRef">
  8558.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8559.                         </PropertyDesc>
  8560.                         <PropertyDesc idRef="21" propType="simple">
  8561.                             <SimpleValue valType="str">ICMP Unassigned! (Type 2) (Undefined Code)</SimpleValue>
  8562.                         </PropertyDesc>
  8563.                     </PropertyDescList>
  8564.                 </Rule>
  8565.                 <Rule guid="{4CA5EFF5-63FC-4337-B227-83985B368983}">
  8566.                     <ObjDescRef guidRef="{609A61E6-25CC-41AF-B8B5-07A5F22343B0}"/>
  8567.                     <AccessDescList>
  8568.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8569.                     </AccessDescList>
  8570.                     <PropertyDescList>
  8571.                         <PropertyDesc idRef="20" propType="simple">
  8572.                             <SimpleValue valType="int">1848</SimpleValue>
  8573.                         </PropertyDesc>
  8574.                         <PropertyDesc idRef="5" propType="objRef">
  8575.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8576.                         </PropertyDesc>
  8577.                         <PropertyDesc idRef="21" propType="simple">
  8578.                             <SimpleValue valType="str">ICMP Unassigned! (Type 7)</SimpleValue>
  8579.                         </PropertyDesc>
  8580.                         <PropertyDesc idRef="34" propType="simple">
  8581.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8582.                         </PropertyDesc>
  8583.                     </PropertyDescList>
  8584.                 </Rule>
  8585.                 <Rule guid="{0C81C984-08F0-4783-B86F-2325EC9858D3}">
  8586.                     <ObjDescRef guidRef="{9B73F722-AC09-452A-B632-18501FE128A6}"/>
  8587.                     <AccessDescList>
  8588.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8589.                     </AccessDescList>
  8590.                     <PropertyDescList>
  8591.                         <PropertyDesc idRef="20" propType="simple">
  8592.                             <SimpleValue valType="int">1852</SimpleValue>
  8593.                         </PropertyDesc>
  8594.                         <PropertyDesc idRef="5" propType="objRef">
  8595.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8596.                         </PropertyDesc>
  8597.                         <PropertyDesc idRef="21" propType="simple">
  8598.                             <SimpleValue valType="str">ICMP Unassigned! (Type 7) (Undefined Code!)</SimpleValue>
  8599.                         </PropertyDesc>
  8600.                     </PropertyDescList>
  8601.                 </Rule>
  8602.             </RuleByObjTypeList>
  8603.         </Profile>
  8604.         <Profile guid="{9CBA8500-40F4-458D-ABB4-FE5970E9E31E}">
  8605.             <ExecSetDescList/>
  8606.             <RuleByObjTypeList typeRef="262">
  8607.                 <Rule guid="{CEE73D3A-1E24-40F2-BF2D-5AF72B387029}">
  8608.                     <ObjDescRef guidRef="{7247A2E9-E0A6-4F80-A181-AFBBC9FDD115}"/>
  8609.                     <AccessDescList>
  8610.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8611.                     </AccessDescList>
  8612.                     <PropertyDescList>
  8613.                         <PropertyDesc idRef="20" propType="simple">
  8614.                             <SimpleValue valType="int">1860</SimpleValue>
  8615.                         </PropertyDesc>
  8616.                         <PropertyDesc idRef="5" propType="objRef">
  8617.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8618.                         </PropertyDesc>
  8619.                         <PropertyDesc idRef="21" propType="simple">
  8620.                             <SimpleValue valType="str">ICMP ISS Pinger</SimpleValue>
  8621.                         </PropertyDesc>
  8622.                         <PropertyDesc idRef="30" propType="simple">
  8623.                             <SimpleValue valType="binary">08000000000000002000000000000000495353504E475251</SimpleValue>
  8624.                         </PropertyDesc>
  8625.                     </PropertyDescList>
  8626.                 </Rule>
  8627.                 <Rule guid="{99C40677-216C-46CD-A708-4F52190E19AC}">
  8628.                     <ObjDescRef guidRef="{538DB122-AF18-4F0A-8AAE-5A4BF9FF2A59}"/>
  8629.                     <AccessDescList>
  8630.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8631.                     </AccessDescList>
  8632.                     <PropertyDescList>
  8633.                         <PropertyDesc idRef="20" propType="simple">
  8634.                             <SimpleValue valType="int">1864</SimpleValue>
  8635.                         </PropertyDesc>
  8636.                         <PropertyDesc idRef="5" propType="objRef">
  8637.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8638.                         </PropertyDesc>
  8639.                         <PropertyDesc idRef="21" propType="simple">
  8640.                             <SimpleValue valType="str">ICMP L3retriever Ping</SimpleValue>
  8641.                         </PropertyDesc>
  8642.                         <PropertyDesc idRef="30" propType="simple">
  8643.                             <SimpleValue valType="binary">200000000000000020000000000000004142434445464748494A4B4C4D4E4F5051525354555657414243444546474849</SimpleValue>
  8644.                         </PropertyDesc>
  8645.                         <PropertyDesc idRef="34" propType="simple">
  8646.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8647.                         </PropertyDesc>
  8648.                     </PropertyDescList>
  8649.                 </Rule>
  8650.                 <Rule guid="{68353AE5-5BB3-4066-BC25-16C270B67004}">
  8651.                     <ObjDescRef guidRef="{B27A59CD-4394-4AD1-B0FC-831C0E8D8505}"/>
  8652.                     <AccessDescList>
  8653.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8654.                     </AccessDescList>
  8655.                     <PropertyDescList>
  8656.                         <PropertyDesc idRef="20" propType="simple">
  8657.                             <SimpleValue valType="int">1868</SimpleValue>
  8658.                         </PropertyDesc>
  8659.                         <PropertyDesc idRef="5" propType="objRef">
  8660.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8661.                         </PropertyDesc>
  8662.                         <PropertyDesc idRef="21" propType="simple">
  8663.                             <SimpleValue valType="str">ICMP Nemesis v1.1 Echo</SimpleValue>
  8664.                         </PropertyDesc>
  8665.                         <PropertyDesc idRef="29" propType="simple">
  8666.                             <SimpleValue valType="int" valRelation="==">20</SimpleValue>
  8667.                         </PropertyDesc>
  8668.                         <PropertyDesc idRef="35" propType="simple">
  8669.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8670.                         </PropertyDesc>
  8671.                         <PropertyDesc idRef="36" propType="simple">
  8672.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8673.                         </PropertyDesc>
  8674.                         <PropertyDesc idRef="30" propType="simple">
  8675.                             <SimpleValue valType="binary">140000000000000000000000000000000000000000000000000000000000000000000000</SimpleValue>
  8676.                         </PropertyDesc>
  8677.                     </PropertyDescList>
  8678.                 </Rule>
  8679.                 <Rule guid="{46873A92-28CB-4E4C-9A9C-C172C4B28E9E}">
  8680.                     <ObjDescRef guidRef="{9AD08DC9-69E7-440D-A623-C92F6A2C2C41}"/>
  8681.                     <AccessDescList>
  8682.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8683.                     </AccessDescList>
  8684.                     <PropertyDescList>
  8685.                         <PropertyDesc idRef="20" propType="simple">
  8686.                             <SimpleValue valType="int">1876</SimpleValue>
  8687.                         </PropertyDesc>
  8688.                         <PropertyDesc idRef="5" propType="objRef">
  8689.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8690.                         </PropertyDesc>
  8691.                         <PropertyDesc idRef="21" propType="simple">
  8692.                             <SimpleValue valType="str">ICMP PING NMAP</SimpleValue>
  8693.                         </PropertyDesc>
  8694.                         <PropertyDesc idRef="29" propType="simple">
  8695.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8696.                         </PropertyDesc>
  8697.                     </PropertyDescList>
  8698.                 </Rule>
  8699.                 <Rule guid="{F8806154-79B6-44D1-98B8-DEADCC2155B9}">
  8700.                     <ObjDescRef guidRef="{DA6B7A6B-0475-44BA-B255-D2BB5B5A35CE}"/>
  8701.                     <AccessDescList>
  8702.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8703.                     </AccessDescList>
  8704.                     <PropertyDescList>
  8705.                         <PropertyDesc idRef="20" propType="simple">
  8706.                             <SimpleValue valType="int">1884</SimpleValue>
  8707.                         </PropertyDesc>
  8708.                         <PropertyDesc idRef="5" propType="objRef">
  8709.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8710.                         </PropertyDesc>
  8711.                         <PropertyDesc idRef="21" propType="simple">
  8712.                             <SimpleValue valType="str">ICMP icmpenum v1.1.1</SimpleValue>
  8713.                         </PropertyDesc>
  8714.                         <PropertyDesc idRef="24" propType="simple">
  8715.                             <SimpleValue valType="int" valRelation="==">666</SimpleValue>
  8716.                         </PropertyDesc>
  8717.                         <PropertyDesc idRef="29" propType="simple">
  8718.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8719.                         </PropertyDesc>
  8720.                         <PropertyDesc idRef="35" propType="simple">
  8721.                             <SimpleValue valType="int" valRelation="==">666</SimpleValue>
  8722.                         </PropertyDesc>
  8723.                         <PropertyDesc idRef="36" propType="simple">
  8724.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8725.                         </PropertyDesc>
  8726.                     </PropertyDescList>
  8727.                 </Rule>
  8728.                 <Rule guid="{75FF130E-DCF6-4C5C-9890-BBC39D25B131}">
  8729.                     <ObjDescRef guidRef="{8FAC9A54-2C8F-49A2-9A65-FB33F5E9390B}"/>
  8730.                     <AccessDescList>
  8731.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8732.                     </AccessDescList>
  8733.                     <PropertyDescList>
  8734.                         <PropertyDesc idRef="20" propType="simple">
  8735.                             <SimpleValue valType="int">1888</SimpleValue>
  8736.                         </PropertyDesc>
  8737.                         <PropertyDesc idRef="5" propType="objRef">
  8738.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8739.                         </PropertyDesc>
  8740.                         <PropertyDesc idRef="21" propType="simple">
  8741.                             <SimpleValue valType="str">ICMP redirect host</SimpleValue>
  8742.                         </PropertyDesc>
  8743.                         <PropertyDesc idRef="34" propType="simple">
  8744.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  8745.                         </PropertyDesc>
  8746.                     </PropertyDescList>
  8747.                 </Rule>
  8748.                 <Rule guid="{91366851-6637-413F-9DB4-919676E4FACB}">
  8749.                     <ObjDescRef guidRef="{C0E4CE73-235D-4D85-92B2-36F2B98D1C51}"/>
  8750.                     <AccessDescList>
  8751.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8752.                     </AccessDescList>
  8753.                     <PropertyDescList>
  8754.                         <PropertyDesc idRef="20" propType="simple">
  8755.                             <SimpleValue valType="int">1892</SimpleValue>
  8756.                         </PropertyDesc>
  8757.                         <PropertyDesc idRef="5" propType="objRef">
  8758.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8759.                         </PropertyDesc>
  8760.                         <PropertyDesc idRef="21" propType="simple">
  8761.                             <SimpleValue valType="str">ICMP redirect net</SimpleValue>
  8762.                         </PropertyDesc>
  8763.                         <PropertyDesc idRef="34" propType="simple">
  8764.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8765.                         </PropertyDesc>
  8766.                     </PropertyDescList>
  8767.                 </Rule>
  8768.                 <Rule guid="{291065CC-94B3-421D-839E-4F2DE4DD378E}">
  8769.                     <ObjDescRef guidRef="{74C91923-815F-4A90-91B8-2F1D2ED9D27A}"/>
  8770.                     <AccessDescList>
  8771.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8772.                     </AccessDescList>
  8773.                     <PropertyDescList>
  8774.                         <PropertyDesc idRef="20" propType="simple">
  8775.                             <SimpleValue valType="int">1896</SimpleValue>
  8776.                         </PropertyDesc>
  8777.                         <PropertyDesc idRef="5" propType="objRef">
  8778.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8779.                         </PropertyDesc>
  8780.                         <PropertyDesc idRef="21" propType="simple">
  8781.                             <SimpleValue valType="str">ICMP superscan echo</SimpleValue>
  8782.                         </PropertyDesc>
  8783.                         <PropertyDesc idRef="30" propType="simple">
  8784.                             <SimpleValue valType="binary">080000000000000000000000000000000000000000000000</SimpleValue>
  8785.                         </PropertyDesc>
  8786.                         <PropertyDesc idRef="29" propType="simple">
  8787.                             <SimpleValue valType="int" valRelation="==">8</SimpleValue>
  8788.                         </PropertyDesc>
  8789.                     </PropertyDescList>
  8790.                 </Rule>
  8791.                 <Rule guid="{CF41186B-F73A-497C-B80B-B83431B0BE1B}">
  8792.                     <ObjDescRef guidRef="{DB4A9BAF-1529-4699-AE72-456A3758A0FD}"/>
  8793.                     <AccessDescList>
  8794.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8795.                     </AccessDescList>
  8796.                     <PropertyDescList>
  8797.                         <PropertyDesc idRef="20" propType="simple">
  8798.                             <SimpleValue valType="int">1900</SimpleValue>
  8799.                         </PropertyDesc>
  8800.                         <PropertyDesc idRef="5" propType="objRef">
  8801.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8802.                         </PropertyDesc>
  8803.                         <PropertyDesc idRef="21" propType="simple">
  8804.                             <SimpleValue valType="str">ICMP traceroute ipopts</SimpleValue>
  8805.                         </PropertyDesc>
  8806.                         <PropertyDesc idRef="25" propType="simple">
  8807.                             <SimpleValue valType="int">0</SimpleValue>
  8808.                         </PropertyDesc>
  8809.                     </PropertyDescList>
  8810.                 </Rule>
  8811.                 <Rule guid="{E8750071-62C3-4621-A350-F05AD87A3D6E}">
  8812.                     <ObjDescRef guidRef="{6BFDA2F2-B62C-4CF1-A1F3-624E8DC3E31A}"/>
  8813.                     <AccessDescList>
  8814.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8815.                     </AccessDescList>
  8816.                     <PropertyDescList>
  8817.                         <PropertyDesc idRef="20" propType="simple">
  8818.                             <SimpleValue valType="int">1904</SimpleValue>
  8819.                         </PropertyDesc>
  8820.                         <PropertyDesc idRef="5" propType="objRef">
  8821.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8822.                         </PropertyDesc>
  8823.                         <PropertyDesc idRef="21" propType="simple">
  8824.                             <SimpleValue valType="str">ICMP webtrends scanner</SimpleValue>
  8825.                         </PropertyDesc>
  8826.                         <PropertyDesc idRef="30" propType="simple">
  8827.                             <SimpleValue valType="binary">1000000000000000000000000000000000000000454545454545454545454545</SimpleValue>
  8828.                         </PropertyDesc>
  8829.                         <PropertyDesc idRef="34" propType="simple">
  8830.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8831.                         </PropertyDesc>
  8832.                     </PropertyDescList>
  8833.                 </Rule>
  8834.                 <Rule guid="{AEC55537-39B4-4B3C-ADAE-2D3855C372CA}">
  8835.                     <ObjDescRef guidRef="{86CEBA81-F7C3-4AB6-92DA-F6B9B8A648B4}"/>
  8836.                     <AccessDescList>
  8837.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8838.                     </AccessDescList>
  8839.                     <PropertyDescList>
  8840.                         <PropertyDesc idRef="20" propType="simple">
  8841.                             <SimpleValue valType="int">1908</SimpleValue>
  8842.                         </PropertyDesc>
  8843.                         <PropertyDesc idRef="5" propType="objRef">
  8844.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8845.                         </PropertyDesc>
  8846.                         <PropertyDesc idRef="21" propType="simple">
  8847.                             <SimpleValue valType="str">ICMP Source Quench</SimpleValue>
  8848.                         </PropertyDesc>
  8849.                         <PropertyDesc idRef="34" propType="simple">
  8850.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8851.                         </PropertyDesc>
  8852.                     </PropertyDescList>
  8853.                 </Rule>
  8854.                 <Rule guid="{33A4AD00-6796-4649-B376-B03C73872E75}">
  8855.                     <ObjDescRef guidRef="{39E608DF-2E35-464C-9107-EBFE95FF0557}"/>
  8856.                     <AccessDescList>
  8857.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8858.                     </AccessDescList>
  8859.                     <PropertyDescList>
  8860.                         <PropertyDesc idRef="20" propType="simple">
  8861.                             <SimpleValue valType="int">1912</SimpleValue>
  8862.                         </PropertyDesc>
  8863.                         <PropertyDesc idRef="5" propType="objRef">
  8864.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8865.                         </PropertyDesc>
  8866.                         <PropertyDesc idRef="21" propType="simple">
  8867.                             <SimpleValue valType="str">ICMP Broadscan Smurf Scanner</SimpleValue>
  8868.                         </PropertyDesc>
  8869.                         <PropertyDesc idRef="35" propType="simple">
  8870.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8871.                         </PropertyDesc>
  8872.                         <PropertyDesc idRef="36" propType="simple">
  8873.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  8874.                         </PropertyDesc>
  8875.                         <PropertyDesc idRef="29" propType="simple">
  8876.                             <SimpleValue valType="int" valRelation="==">4</SimpleValue>
  8877.                         </PropertyDesc>
  8878.                     </PropertyDescList>
  8879.                 </Rule>
  8880.                 <Rule guid="{43E3CA95-0869-467D-B277-D2CA62259CEE}">
  8881.                     <ObjDescRef guidRef="{D745FAC3-8BBE-4203-A6F1-17B696D4E754}"/>
  8882.                     <AccessDescList>
  8883.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8884.                     </AccessDescList>
  8885.                     <PropertyDescList>
  8886.                         <PropertyDesc idRef="20" propType="simple">
  8887.                             <SimpleValue valType="int">1920</SimpleValue>
  8888.                         </PropertyDesc>
  8889.                         <PropertyDesc idRef="5" propType="objRef">
  8890.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8891.                         </PropertyDesc>
  8892.                         <PropertyDesc idRef="21" propType="simple">
  8893.                             <SimpleValue valType="str">ICMP PING speedera</SimpleValue>
  8894.                         </PropertyDesc>
  8895.                         <PropertyDesc idRef="30" propType="simple">
  8896.                             <SimpleValue valType="binary">0800000000000000640000000000000038393A3B3C3D3E3F</SimpleValue>
  8897.                         </PropertyDesc>
  8898.                     </PropertyDescList>
  8899.                 </Rule>
  8900.                 <Rule guid="{25F71DCD-60D7-488C-971A-806F8DBA370A}">
  8901.                     <ObjDescRef guidRef="{79CD51BD-0741-4232-9AB6-85A72D8D1353}"/>
  8902.                     <AccessDescList>
  8903.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8904.                     </AccessDescList>
  8905.                     <PropertyDescList>
  8906.                         <PropertyDesc idRef="20" propType="simple">
  8907.                             <SimpleValue valType="int">1924</SimpleValue>
  8908.                         </PropertyDesc>
  8909.                         <PropertyDesc idRef="5" propType="objRef">
  8910.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8911.                         </PropertyDesc>
  8912.                         <PropertyDesc idRef="21" propType="simple">
  8913.                             <SimpleValue valType="str">ICMP TJPingPro1.1Build 2 Windows</SimpleValue>
  8914.                         </PropertyDesc>
  8915.                         <PropertyDesc idRef="30" propType="simple">
  8916.                             <SimpleValue valType="binary">10000000000000002000000000000000544A50696E6750726F206279204A696D</SimpleValue>
  8917.                         </PropertyDesc>
  8918.                     </PropertyDescList>
  8919.                 </Rule>
  8920.                 <Rule guid="{5A1B4DC4-2CFA-4BAC-8A17-46D3D1842D20}">
  8921.                     <ObjDescRef guidRef="{D3ACFE0B-0D19-452B-8219-271D568F3CB7}"/>
  8922.                     <AccessDescList>
  8923.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8924.                     </AccessDescList>
  8925.                     <PropertyDescList>
  8926.                         <PropertyDesc idRef="20" propType="simple">
  8927.                             <SimpleValue valType="int">1928</SimpleValue>
  8928.                         </PropertyDesc>
  8929.                         <PropertyDesc idRef="5" propType="objRef">
  8930.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8931.                         </PropertyDesc>
  8932.                         <PropertyDesc idRef="21" propType="simple">
  8933.                             <SimpleValue valType="str">ICMP PING WhatsupGold Windows</SimpleValue>
  8934.                         </PropertyDesc>
  8935.                         <PropertyDesc idRef="30" propType="simple">
  8936.                             <SimpleValue valType="binary">1000000000000000200000000000000057686174735570202D2041204E657477</SimpleValue>
  8937.                         </PropertyDesc>
  8938.                     </PropertyDescList>
  8939.                 </Rule>
  8940.                 <Rule guid="{99E5E14C-8E17-433A-96F0-7EA647A09D9A}">
  8941.                     <ObjDescRef guidRef="{9A1A518E-E8A2-4C36-A052-1C3D1F61D589}"/>
  8942.                     <AccessDescList>
  8943.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8944.                     </AccessDescList>
  8945.                     <PropertyDescList>
  8946.                         <PropertyDesc idRef="20" propType="simple">
  8947.                             <SimpleValue valType="int">1932</SimpleValue>
  8948.                         </PropertyDesc>
  8949.                         <PropertyDesc idRef="5" propType="objRef">
  8950.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8951.                         </PropertyDesc>
  8952.                         <PropertyDesc idRef="21" propType="simple">
  8953.                             <SimpleValue valType="str">ICMP PING CyberKit 2.2 Windows</SimpleValue>
  8954.                         </PropertyDesc>
  8955.                         <PropertyDesc idRef="30" propType="simple">
  8956.                             <SimpleValue valType="binary">10000000000000002000000000000000AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA</SimpleValue>
  8957.                         </PropertyDesc>
  8958.                     </PropertyDescList>
  8959.                 </Rule>
  8960.                 <Rule guid="{60408EB5-6BA3-4666-8A0D-13BCA012AEFA}">
  8961.                     <ObjDescRef guidRef="{2B953C2F-A3FF-47F1-A91D-FC71091E82B0}"/>
  8962.                     <AccessDescList>
  8963.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8964.                     </AccessDescList>
  8965.                     <PropertyDescList>
  8966.                         <PropertyDesc idRef="20" propType="simple">
  8967.                             <SimpleValue valType="int">1936</SimpleValue>
  8968.                         </PropertyDesc>
  8969.                         <PropertyDesc idRef="5" propType="objRef">
  8970.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8971.                         </PropertyDesc>
  8972.                         <PropertyDesc idRef="21" propType="simple">
  8973.                             <SimpleValue valType="str">ICMP PING Sniffer Pro/NetXRay network scan</SimpleValue>
  8974.                         </PropertyDesc>
  8975.                         <PropertyDesc idRef="30" propType="simple">
  8976.                             <SimpleValue valType="binary">1300000000000000200000000000000043696E636F204E6574776F726B2C20496E632E</SimpleValue>
  8977.                         </PropertyDesc>
  8978.                     </PropertyDescList>
  8979.                 </Rule>
  8980.                 <Rule guid="{A87D4754-69AC-48E0-A575-17BEBE9500F5}">
  8981.                     <ObjDescRef guidRef="{6BECA7FA-DCA3-4DF5-BB57-84745604DBB2}"/>
  8982.                     <AccessDescList>
  8983.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  8984.                     </AccessDescList>
  8985.                     <PropertyDescList>
  8986.                         <PropertyDesc idRef="20" propType="simple">
  8987.                             <SimpleValue valType="int">1940</SimpleValue>
  8988.                         </PropertyDesc>
  8989.                         <PropertyDesc idRef="5" propType="objRef">
  8990.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  8991.                         </PropertyDesc>
  8992.                         <PropertyDesc idRef="21" propType="simple">
  8993.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication Administratively Prohibited)</SimpleValue>
  8994.                         </PropertyDesc>
  8995.                         <PropertyDesc idRef="34" propType="simple">
  8996.                             <SimpleValue valType="int" valRelation="==">13</SimpleValue>
  8997.                         </PropertyDesc>
  8998.                     </PropertyDescList>
  8999.                 </Rule>
  9000.                 <Rule guid="{8A2AE038-6A2A-4975-A04B-A2606C8D4022}">
  9001.                     <ObjDescRef guidRef="{912EC529-50BA-473E-9572-68D839A57678}"/>
  9002.                     <AccessDescList>
  9003.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9004.                     </AccessDescList>
  9005.                     <PropertyDescList>
  9006.                         <PropertyDesc idRef="20" propType="simple">
  9007.                             <SimpleValue valType="int">1941</SimpleValue>
  9008.                         </PropertyDesc>
  9009.                         <PropertyDesc idRef="5" propType="objRef">
  9010.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9011.                         </PropertyDesc>
  9012.                         <PropertyDesc idRef="21" propType="simple">
  9013.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication Administratively Prohibited)</SimpleValue>
  9014.                         </PropertyDesc>
  9015.                         <PropertyDesc idRef="34" propType="simple">
  9016.                             <SimpleValue valType="int" valRelation="==">13</SimpleValue>
  9017.                         </PropertyDesc>
  9018.                     </PropertyDescList>
  9019.                 </Rule>
  9020.                 <Rule guid="{3CFDF887-AD9D-40C3-891C-F6FB73990BF3}">
  9021.                     <ObjDescRef guidRef="{E5191140-906D-48FC-BB5B-625433507A3F}"/>
  9022.                     <AccessDescList>
  9023.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9024.                     </AccessDescList>
  9025.                     <PropertyDescList>
  9026.                         <PropertyDesc idRef="20" propType="simple">
  9027.                             <SimpleValue valType="int">1944</SimpleValue>
  9028.                         </PropertyDesc>
  9029.                         <PropertyDesc idRef="5" propType="objRef">
  9030.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9031.                         </PropertyDesc>
  9032.                         <PropertyDesc idRef="21" propType="simple">
  9033.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited)</SimpleValue>
  9034.                         </PropertyDesc>
  9035.                         <PropertyDesc idRef="34" propType="simple">
  9036.                             <SimpleValue valType="int" valRelation="==">10</SimpleValue>
  9037.                         </PropertyDesc>
  9038.                     </PropertyDescList>
  9039.                 </Rule>
  9040.                 <Rule guid="{3BA8D0F7-8111-4554-9F6D-AC730E290864}">
  9041.                     <ObjDescRef guidRef="{5D39ED8E-194E-4C55-BD54-62750E233A71}"/>
  9042.                     <AccessDescList>
  9043.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9044.                     </AccessDescList>
  9045.                     <PropertyDescList>
  9046.                         <PropertyDesc idRef="20" propType="simple">
  9047.                             <SimpleValue valType="int">1945</SimpleValue>
  9048.                         </PropertyDesc>
  9049.                         <PropertyDesc idRef="5" propType="objRef">
  9050.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9051.                         </PropertyDesc>
  9052.                         <PropertyDesc idRef="21" propType="simple">
  9053.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited)</SimpleValue>
  9054.                         </PropertyDesc>
  9055.                         <PropertyDesc idRef="34" propType="simple">
  9056.                             <SimpleValue valType="int" valRelation="==">10</SimpleValue>
  9057.                         </PropertyDesc>
  9058.                     </PropertyDescList>
  9059.                 </Rule>
  9060.                 <Rule guid="{E1EC233F-C326-4E8F-A601-E818C4FD9CCC}">
  9061.                     <ObjDescRef guidRef="{1B2A9180-C237-4E99-85C0-B9B9C6F878E1}"/>
  9062.                     <AccessDescList>
  9063.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9064.                     </AccessDescList>
  9065.                     <PropertyDescList>
  9066.                         <PropertyDesc idRef="20" propType="simple">
  9067.                             <SimpleValue valType="int">1948</SimpleValue>
  9068.                         </PropertyDesc>
  9069.                         <PropertyDesc idRef="5" propType="objRef">
  9070.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9071.                         </PropertyDesc>
  9072.                         <PropertyDesc idRef="21" propType="simple">
  9073.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication with Destination Network is Administratively Prohibited)</SimpleValue>
  9074.                         </PropertyDesc>
  9075.                         <PropertyDesc idRef="34" propType="simple">
  9076.                             <SimpleValue valType="int" valRelation="==">9</SimpleValue>
  9077.                         </PropertyDesc>
  9078.                     </PropertyDescList>
  9079.                 </Rule>
  9080.                 <Rule guid="{10418927-D576-4E04-A46E-FA0D1D30D21C}">
  9081.                     <ObjDescRef guidRef="{AF1942AD-39D6-4B6F-87F8-583597AD4EA9}"/>
  9082.                     <AccessDescList>
  9083.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9084.                     </AccessDescList>
  9085.                     <PropertyDescList>
  9086.                         <PropertyDesc idRef="20" propType="simple">
  9087.                             <SimpleValue valType="int">1949</SimpleValue>
  9088.                         </PropertyDesc>
  9089.                         <PropertyDesc idRef="5" propType="objRef">
  9090.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9091.                         </PropertyDesc>
  9092.                         <PropertyDesc idRef="21" propType="simple">
  9093.                             <SimpleValue valType="str">ICMP Destination Unreachable (Communication with Destination Network is Administratively Prohibited)</SimpleValue>
  9094.                         </PropertyDesc>
  9095.                         <PropertyDesc idRef="34" propType="simple">
  9096.                             <SimpleValue valType="int" valRelation="==">9</SimpleValue>
  9097.                         </PropertyDesc>
  9098.                     </PropertyDescList>
  9099.                 </Rule>
  9100.                 <Rule guid="{1CF2F11F-25B7-469A-B3E5-4C309B587F30}">
  9101.                     <ObjDescRef guidRef="{311B9940-2199-42EB-9509-07297001B73C}"/>
  9102.                     <AccessDescList>
  9103.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9104.                     </AccessDescList>
  9105.                     <PropertyDescList>
  9106.                         <PropertyDesc idRef="20" propType="simple">
  9107.                             <SimpleValue valType="int">1996</SimpleValue>
  9108.                         </PropertyDesc>
  9109.                         <PropertyDesc idRef="5" propType="objRef">
  9110.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9111.                         </PropertyDesc>
  9112.                         <PropertyDesc idRef="21" propType="simple">
  9113.                             <SimpleValue valType="str">ICMP Large ICMP Packet</SimpleValue>
  9114.                         </PropertyDesc>
  9115.                         <PropertyDesc idRef="29" propType="simple">
  9116.                             <SimpleValue valType="int" valRelation="&gt;">800</SimpleValue>
  9117.                         </PropertyDesc>
  9118.                     </PropertyDescList>
  9119.                 </Rule>
  9120.                 <Rule guid="{B4D23F4C-DAAC-4330-ADFF-2F6642446C18}">
  9121.                     <ObjDescRef guidRef="{F136D739-CB5E-4048-ABEE-B024FAB763C9}"/>
  9122.                     <AccessDescList>
  9123.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9124.                     </AccessDescList>
  9125.                     <PropertyDescList>
  9126.                         <PropertyDesc idRef="20" propType="simple">
  9127.                             <SimpleValue valType="int">7252</SimpleValue>
  9128.                         </PropertyDesc>
  9129.                         <PropertyDesc idRef="5" propType="objRef">
  9130.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9131.                         </PropertyDesc>
  9132.                         <PropertyDesc idRef="21" propType="simple">
  9133.                             <SimpleValue valType="str">ICMP digital island bandwidth query</SimpleValue>
  9134.                         </PropertyDesc>
  9135.                         <PropertyDesc idRef="30" propType="simple">
  9136.                             <SimpleValue valType="binary">170000000000000016000000000000006D61696C746F5C3A6F70734064696769736C652E636F6D</SimpleValue>
  9137.                         </PropertyDesc>
  9138.                     </PropertyDescList>
  9139.                 </Rule>
  9140.             </RuleByObjTypeList>
  9141.         </Profile>
  9142.         <Profile guid="{1C5ECF85-6CFB-4BA2-946E-6DDC5C97DD3E}">
  9143.             <ExecSetDescList/>
  9144.             <RuleByObjTypeList typeRef="262">
  9145.                 <Rule guid="{D9D2106D-F20B-4EEA-8147-DF447027735E}">
  9146.                     <ObjDescRef guidRef="{50CF19C0-3AE7-49CC-98E6-7D710B285B1D}"/>
  9147.                     <AccessDescList>
  9148.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9149.                     </AccessDescList>
  9150.                     <PropertyDescList>
  9151.                         <PropertyDesc idRef="20" propType="simple">
  9152.                             <SimpleValue valType="int">1952</SimpleValue>
  9153.                         </PropertyDesc>
  9154.                         <PropertyDesc idRef="5" propType="objRef">
  9155.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9156.                         </PropertyDesc>
  9157.                         <PropertyDesc idRef="21" propType="simple">
  9158.                             <SimpleValue valType="str">INFO Connection Closed MSG from Port 80</SimpleValue>
  9159.                         </PropertyDesc>
  9160.                         <PropertyDesc idRef="30" propType="simple">
  9161.                             <SimpleValue valType="binary">21000000000000000000000000000100436F6E6E656374696F6E20636C6F73656420627920666F726569676E20686F7374</SimpleValue>
  9162.                         </PropertyDesc>
  9163.                     </PropertyDescList>
  9164.                 </Rule>
  9165.                 <Rule guid="{30F36643-26A9-4C53-875A-98FEBC06AC91}">
  9166.                     <ObjDescRef guidRef="{B157DCFD-F889-45D2-9BB9-9C70122194C0}"/>
  9167.                     <AccessDescList>
  9168.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9169.                     </AccessDescList>
  9170.                     <PropertyDescList>
  9171.                         <PropertyDesc idRef="20" propType="simple">
  9172.                             <SimpleValue valType="int">1956</SimpleValue>
  9173.                         </PropertyDesc>
  9174.                         <PropertyDesc idRef="5" propType="objRef">
  9175.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9176.                         </PropertyDesc>
  9177.                         <PropertyDesc idRef="21" propType="simple">
  9178.                             <SimpleValue valType="str">INFO FTP No Password</SimpleValue>
  9179.                         </PropertyDesc>
  9180.                         <PropertyDesc idRef="30" propType="simple">
  9181.                             <SimpleValue valType="binary">0600000000000000000000000000010070617373200D</SimpleValue>
  9182.                         </PropertyDesc>
  9183.                     </PropertyDescList>
  9184.                 </Rule>
  9185.                 <Rule guid="{97475EAF-7EF9-4676-93FB-F28B63AAFEF1}">
  9186.                     <ObjDescRef guidRef="{A6E8FA90-147C-4D84-819A-7D7719FAE220}"/>
  9187.                     <AccessDescList>
  9188.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9189.                     </AccessDescList>
  9190.                     <PropertyDescList>
  9191.                         <PropertyDesc idRef="20" propType="simple">
  9192.                             <SimpleValue valType="int">1960</SimpleValue>
  9193.                         </PropertyDesc>
  9194.                         <PropertyDesc idRef="5" propType="objRef">
  9195.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9196.                         </PropertyDesc>
  9197.                         <PropertyDesc idRef="21" propType="simple">
  9198.                             <SimpleValue valType="str">INFO battle-mail traffic</SimpleValue>
  9199.                         </PropertyDesc>
  9200.                         <PropertyDesc idRef="30" propType="simple">
  9201.                             <SimpleValue valType="binary">0A000000000000000000000000000000426174746C654D61696C</SimpleValue>
  9202.                         </PropertyDesc>
  9203.                     </PropertyDescList>
  9204.                 </Rule>
  9205.                 <Rule guid="{427D8B70-1404-4C2F-BCB2-22A76FCF3D73}">
  9206.                     <ObjDescRef guidRef="{652446E6-2E85-4774-A7FC-421875FDF3F0}"/>
  9207.                     <AccessDescList>
  9208.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9209.                     </AccessDescList>
  9210.                     <PropertyDescList>
  9211.                         <PropertyDesc idRef="20" propType="simple">
  9212.                             <SimpleValue valType="int">1964</SimpleValue>
  9213.                         </PropertyDesc>
  9214.                         <PropertyDesc idRef="5" propType="objRef">
  9215.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9216.                         </PropertyDesc>
  9217.                         <PropertyDesc idRef="21" propType="simple">
  9218.                             <SimpleValue valType="str">FTP Bad login</SimpleValue>
  9219.                         </PropertyDesc>
  9220.                         <PropertyDesc idRef="30" propType="simple">
  9221.                             <SimpleValue valType="binary">0A000000000000000000000000000100353330204C6F67696E20</SimpleValue>
  9222.                         </PropertyDesc>
  9223.                     </PropertyDescList>
  9224.                 </Rule>
  9225.                 <Rule guid="{1540950C-30B0-4007-8D5E-2DF720A1DEB8}">
  9226.                     <ObjDescRef guidRef="{007F75D7-AF16-45AC-8C77-A0E32E483618}"/>
  9227.                     <AccessDescList>
  9228.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9229.                     </AccessDescList>
  9230.                     <PropertyDescList>
  9231.                         <PropertyDesc idRef="20" propType="simple">
  9232.                             <SimpleValue valType="int">1968</SimpleValue>
  9233.                         </PropertyDesc>
  9234.                         <PropertyDesc idRef="5" propType="objRef">
  9235.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9236.                         </PropertyDesc>
  9237.                         <PropertyDesc idRef="21" propType="simple">
  9238.                             <SimpleValue valType="str">TELNET Bad Login</SimpleValue>
  9239.                         </PropertyDesc>
  9240.                         <PropertyDesc idRef="30" propType="simple">
  9241.                             <SimpleValue valType="binary">0C0000000000000000000000000001004C6F67696E206661696C6564</SimpleValue>
  9242.                         </PropertyDesc>
  9243.                     </PropertyDescList>
  9244.                 </Rule>
  9245.                 <Rule guid="{0ADCDEB3-CFE7-453A-B17A-951E2CD9E2A3}">
  9246.                     <ObjDescRef guidRef="{A2E84114-BA51-4DF9-93DD-DE688FED3954}"/>
  9247.                     <AccessDescList>
  9248.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9249.                     </AccessDescList>
  9250.                     <PropertyDescList>
  9251.                         <PropertyDesc idRef="20" propType="simple">
  9252.                             <SimpleValue valType="int">1972</SimpleValue>
  9253.                         </PropertyDesc>
  9254.                         <PropertyDesc idRef="5" propType="objRef">
  9255.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9256.                         </PropertyDesc>
  9257.                         <PropertyDesc idRef="21" propType="simple">
  9258.                             <SimpleValue valType="str">INFO psyBNC access</SimpleValue>
  9259.                         </PropertyDesc>
  9260.                         <PropertyDesc idRef="30" propType="simple">
  9261.                             <SimpleValue valType="binary">1800000000000000000000000000000057656C636F6D6521707379424E43406C616D33727A2E6465</SimpleValue>
  9262.                         </PropertyDesc>
  9263.                     </PropertyDescList>
  9264.                 </Rule>
  9265.                 <Rule guid="{DFBE7CA9-9B40-4C9B-81DB-37D784F468A8}">
  9266.                     <ObjDescRef guidRef="{FF87AFF5-4BAC-4ADA-BC37-EF1962EA3586}"/>
  9267.                     <AccessDescList>
  9268.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9269.                     </AccessDescList>
  9270.                     <PropertyDescList>
  9271.                         <PropertyDesc idRef="20" propType="simple">
  9272.                             <SimpleValue valType="int">5004</SimpleValue>
  9273.                         </PropertyDesc>
  9274.                         <PropertyDesc idRef="5" propType="objRef">
  9275.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9276.                         </PropertyDesc>
  9277.                         <PropertyDesc idRef="21" propType="simple">
  9278.                             <SimpleValue valType="str">TELNET Bad Login</SimpleValue>
  9279.                         </PropertyDesc>
  9280.                         <PropertyDesc idRef="30" propType="simple">
  9281.                             <SimpleValue valType="binary">0F0000000000000000000000000001004C6F67696E20696E636F7272656374</SimpleValue>
  9282.                         </PropertyDesc>
  9283.                     </PropertyDescList>
  9284.                 </Rule>
  9285.             </RuleByObjTypeList>
  9286.         </Profile>
  9287.         <Profile guid="{90788267-0049-4CD6-9E68-297B00F437A3}">
  9288.             <ExecSetDescList/>
  9289.             <RuleByObjTypeList typeRef="262">
  9290.                 <Rule guid="{C19299D8-4B8C-4605-8BF8-FA36CFD5EDD8}">
  9291.                     <ObjDescRef guidRef="{9A947238-AA95-4D82-8BFD-208C34665380}"/>
  9292.                     <AccessDescList>
  9293.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9294.                     </AccessDescList>
  9295.                     <PropertyDescList>
  9296.                         <PropertyDesc idRef="20" propType="simple">
  9297.                             <SimpleValue valType="int">1976</SimpleValue>
  9298.                         </PropertyDesc>
  9299.                         <PropertyDesc idRef="5" propType="objRef">
  9300.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9301.                         </PropertyDesc>
  9302.                         <PropertyDesc idRef="21" propType="simple">
  9303.                             <SimpleValue valType="str">ATTACK RESPONSES command completed</SimpleValue>
  9304.                         </PropertyDesc>
  9305.                         <PropertyDesc idRef="30" propType="simple">
  9306.                             <SimpleValue valType="binary">11000000000000000000000000000100436F6D6D616E6420636F6D706C65746564</SimpleValue>
  9307.                         </PropertyDesc>
  9308.                     </PropertyDescList>
  9309.                 </Rule>
  9310.                 <Rule guid="{93803127-5C9B-4054-834D-C20B25C1086E}">
  9311.                     <ObjDescRef guidRef="{33C17B32-F4E2-4B6E-A668-9A76C3094BD9}"/>
  9312.                     <AccessDescList>
  9313.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9314.                     </AccessDescList>
  9315.                     <PropertyDescList>
  9316.                         <PropertyDesc idRef="20" propType="simple">
  9317.                             <SimpleValue valType="int">1980</SimpleValue>
  9318.                         </PropertyDesc>
  9319.                         <PropertyDesc idRef="5" propType="objRef">
  9320.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9321.                         </PropertyDesc>
  9322.                         <PropertyDesc idRef="21" propType="simple">
  9323.                             <SimpleValue valType="str">ATTACK RESPONSES command error</SimpleValue>
  9324.                         </PropertyDesc>
  9325.                         <PropertyDesc idRef="30" propType="simple">
  9326.                             <SimpleValue valType="binary">1700000000000000000000000000010042616420636F6D6D616E64206F722066696C656E616D65</SimpleValue>
  9327.                         </PropertyDesc>
  9328.                     </PropertyDescList>
  9329.                 </Rule>
  9330.                 <Rule guid="{AEB5C393-E8BF-4EEB-B8CC-44DEA2D06E80}">
  9331.                     <ObjDescRef guidRef="{53EF3B9D-3898-4E36-91F0-AC5AEC566D12}"/>
  9332.                     <AccessDescList>
  9333.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9334.                     </AccessDescList>
  9335.                     <PropertyDescList>
  9336.                         <PropertyDesc idRef="20" propType="simple">
  9337.                             <SimpleValue valType="int">1988</SimpleValue>
  9338.                         </PropertyDesc>
  9339.                         <PropertyDesc idRef="5" propType="objRef">
  9340.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9341.                         </PropertyDesc>
  9342.                         <PropertyDesc idRef="21" propType="simple">
  9343.                             <SimpleValue valType="str">ATTACK RESPONSES file copied ok</SimpleValue>
  9344.                         </PropertyDesc>
  9345.                         <PropertyDesc idRef="30" propType="simple">
  9346.                             <SimpleValue valType="binary">10000000000000000000000000000100312066696C6528732920636F70696564</SimpleValue>
  9347.                         </PropertyDesc>
  9348.                     </PropertyDescList>
  9349.                 </Rule>
  9350.                 <Rule guid="{0BE52482-E23F-4C44-BD87-2D9E133E74B2}">
  9351.                     <ObjDescRef guidRef="{4B42713D-573C-4F72-9C66-31AE64F88ECB}"/>
  9352.                     <AccessDescList>
  9353.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9354.                     </AccessDescList>
  9355.                     <PropertyDescList>
  9356.                         <PropertyDesc idRef="20" propType="simple">
  9357.                             <SimpleValue valType="int">1992</SimpleValue>
  9358.                         </PropertyDesc>
  9359.                         <PropertyDesc idRef="5" propType="objRef">
  9360.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9361.                         </PropertyDesc>
  9362.                         <PropertyDesc idRef="21" propType="simple">
  9363.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned root</SimpleValue>
  9364.                         </PropertyDesc>
  9365.                         <PropertyDesc idRef="30" propType="simple">
  9366.                             <SimpleValue valType="binary">0B0000000000000000000000000000007569643D3028726F6F7429</SimpleValue>
  9367.                         </PropertyDesc>
  9368.                     </PropertyDescList>
  9369.                 </Rule>
  9370.                 <Rule guid="{8C9EAAAD-E9CD-4005-B106-6874784E04F1}">
  9371.                     <ObjDescRef guidRef="{2E455307-3510-4A82-B2BE-3330291A50F7}"/>
  9372.                     <AccessDescList>
  9373.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9374.                     </AccessDescList>
  9375.                     <PropertyDescList>
  9376.                         <PropertyDesc idRef="20" propType="simple">
  9377.                             <SimpleValue valType="int">1993</SimpleValue>
  9378.                         </PropertyDesc>
  9379.                         <PropertyDesc idRef="5" propType="objRef">
  9380.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9381.                         </PropertyDesc>
  9382.                         <PropertyDesc idRef="21" propType="simple">
  9383.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned root</SimpleValue>
  9384.                         </PropertyDesc>
  9385.                         <PropertyDesc idRef="30" propType="simple">
  9386.                             <SimpleValue valType="binary">0B0000000000000000000000000000007569643D3028726F6F7429</SimpleValue>
  9387.                         </PropertyDesc>
  9388.                     </PropertyDescList>
  9389.                 </Rule>
  9390.                 <Rule guid="{65589287-1440-44E0-939C-F37EAC53470B}">
  9391.                     <ObjDescRef guidRef="{1A9A66C7-4ADB-46EB-B927-A8610AFC2DEB}"/>
  9392.                     <AccessDescList>
  9393.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9394.                     </AccessDescList>
  9395.                     <PropertyDescList>
  9396.                         <PropertyDesc idRef="20" propType="simple">
  9397.                             <SimpleValue valType="int">4800</SimpleValue>
  9398.                         </PropertyDesc>
  9399.                         <PropertyDesc idRef="5" propType="objRef">
  9400.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9401.                         </PropertyDesc>
  9402.                         <PropertyDesc idRef="21" propType="simple">
  9403.                             <SimpleValue valType="str">ATTACK RESPONSES Invalid URL</SimpleValue>
  9404.                         </PropertyDesc>
  9405.                         <PropertyDesc idRef="30" propType="simple">
  9406.                             <SimpleValue valType="binary">0B000000000000000000000000000100496E76616C69642055524C</SimpleValue>
  9407.                         </PropertyDesc>
  9408.                     </PropertyDescList>
  9409.                 </Rule>
  9410.                 <Rule guid="{89648AEA-2D3E-4C3C-9415-6D30A11A5B83}">
  9411.                     <ObjDescRef guidRef="{6A861C9A-C1F6-474D-A0C1-8936F499F29E}"/>
  9412.                     <AccessDescList>
  9413.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9414.                     </AccessDescList>
  9415.                     <PropertyDescList>
  9416.                         <PropertyDesc idRef="20" propType="simple">
  9417.                             <SimpleValue valType="int">4804</SimpleValue>
  9418.                         </PropertyDesc>
  9419.                         <PropertyDesc idRef="5" propType="objRef">
  9420.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9421.                         </PropertyDesc>
  9422.                         <PropertyDesc idRef="21" propType="simple">
  9423.                             <SimpleValue valType="str">ATTACK RESPONSES 403 Forbidden</SimpleValue>
  9424.                         </PropertyDesc>
  9425.                         <PropertyDesc idRef="30" propType="simple">
  9426.                             <SimpleValue valType="binary">0C000000000000000C00000000000000485454502F312E3120343033</SimpleValue>
  9427.                         </PropertyDesc>
  9428.                     </PropertyDescList>
  9429.                 </Rule>
  9430.                 <Rule guid="{53B41CC8-2244-4BBD-88C0-D3A0BB37961E}">
  9431.                     <ObjDescRef guidRef="{46B00BB1-AD32-4671-B881-59632D6D1DD2}"/>
  9432.                     <AccessDescList>
  9433.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9434.                     </AccessDescList>
  9435.                     <PropertyDescList>
  9436.                         <PropertyDesc idRef="20" propType="simple">
  9437.                             <SimpleValue valType="int">5168</SimpleValue>
  9438.                         </PropertyDesc>
  9439.                         <PropertyDesc idRef="5" propType="objRef">
  9440.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9441.                         </PropertyDesc>
  9442.                         <PropertyDesc idRef="21" propType="simple">
  9443.                             <SimpleValue valType="str">ATTACK RESPONSES http dir listing</SimpleValue>
  9444.                         </PropertyDesc>
  9445.                         <PropertyDesc idRef="30" propType="simple">
  9446.                             <SimpleValue valType="binary">14000000000000000000000000000000566F6C756D652053657269616C204E756D626572</SimpleValue>
  9447.                         </PropertyDesc>
  9448.                     </PropertyDescList>
  9449.                 </Rule>
  9450.                 <Rule guid="{CB78D080-8AD4-4903-ACE1-FE431931FD23}">
  9451.                     <ObjDescRef guidRef="{9A3D33F2-9B97-4BE5-9967-988F0FDA2673}"/>
  9452.                     <AccessDescList>
  9453.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9454.                     </AccessDescList>
  9455.                     <PropertyDescList>
  9456.                         <PropertyDesc idRef="20" propType="simple">
  9457.                             <SimpleValue valType="int">5856</SimpleValue>
  9458.                         </PropertyDesc>
  9459.                         <PropertyDesc idRef="5" propType="objRef">
  9460.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9461.                         </PropertyDesc>
  9462.                         <PropertyDesc idRef="21" propType="simple">
  9463.                             <SimpleValue valType="str">ATTACK RESPONSES oracle one hour install</SimpleValue>
  9464.                         </PropertyDesc>
  9465.                         <PropertyDesc idRef="30" propType="simple">
  9466.                             <SimpleValue valType="binary">240000000000000000000000000000004F7261636C65204170706C69636174696F6E73204F6E652D486F757220496E7374616C6C</SimpleValue>
  9467.                         </PropertyDesc>
  9468.                     </PropertyDescList>
  9469.                 </Rule>
  9470.                 <Rule guid="{28BE6D53-1ADD-4367-8D31-735B9C74AAF7}">
  9471.                     <ObjDescRef guidRef="{47118ECF-C849-4DF2-A4D7-484E1D9EDB66}"/>
  9472.                     <AccessDescList>
  9473.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9474.                     </AccessDescList>
  9475.                     <PropertyDescList>
  9476.                         <PropertyDesc idRef="20" propType="simple">
  9477.                             <SimpleValue valType="int">6664</SimpleValue>
  9478.                         </PropertyDesc>
  9479.                         <PropertyDesc idRef="5" propType="objRef">
  9480.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9481.                         </PropertyDesc>
  9482.                         <PropertyDesc idRef="21" propType="simple">
  9483.                             <SimpleValue valType="str">ATTACK RESPONSES index of /cgi-bin/ response</SimpleValue>
  9484.                         </PropertyDesc>
  9485.                         <PropertyDesc idRef="30" propType="simple">
  9486.                             <SimpleValue valType="binary">12000000000000000000000000000100496E646578206F66202F6367692D62696E2F</SimpleValue>
  9487.                         </PropertyDesc>
  9488.                     </PropertyDescList>
  9489.                 </Rule>
  9490.                 <Rule guid="{886363AF-4382-4BF5-8543-FE95FEDB4197}">
  9491.                     <ObjDescRef guidRef="{2F752E3E-E244-48AD-94A6-4FE5E4149A7A}"/>
  9492.                     <AccessDescList>
  9493.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9494.                     </AccessDescList>
  9495.                     <PropertyDescList>
  9496.                         <PropertyDesc idRef="20" propType="simple">
  9497.                             <SimpleValue valType="int">7528</SimpleValue>
  9498.                         </PropertyDesc>
  9499.                         <PropertyDesc idRef="5" propType="objRef">
  9500.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9501.                         </PropertyDesc>
  9502.                         <PropertyDesc idRef="21" propType="simple">
  9503.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned www</SimpleValue>
  9504.                         </PropertyDesc>
  9505.                         <PropertyDesc idRef="30" propType="simple">
  9506.                             <SimpleValue valType="binary">040000000000000000000000000000007569643D</SimpleValue>
  9507.                         </PropertyDesc>
  9508.                         <PropertyDesc idRef="30" propType="simple">
  9509.                             <SimpleValue valType="binary">050000000000000000000000000000002877777729</SimpleValue>
  9510.                         </PropertyDesc>
  9511.                     </PropertyDescList>
  9512.                 </Rule>
  9513.                 <Rule guid="{1B857051-5158-4273-BA61-A292A4623C2C}">
  9514.                     <ObjDescRef guidRef="{36B2F04A-804C-43FD-912B-155D3B8897D0}"/>
  9515.                     <AccessDescList>
  9516.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9517.                     </AccessDescList>
  9518.                     <PropertyDescList>
  9519.                         <PropertyDesc idRef="20" propType="simple">
  9520.                             <SimpleValue valType="int">7532</SimpleValue>
  9521.                         </PropertyDesc>
  9522.                         <PropertyDesc idRef="5" propType="objRef">
  9523.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9524.                         </PropertyDesc>
  9525.                         <PropertyDesc idRef="21" propType="simple">
  9526.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned nobody</SimpleValue>
  9527.                         </PropertyDesc>
  9528.                         <PropertyDesc idRef="30" propType="simple">
  9529.                             <SimpleValue valType="binary">040000000000000000000000000000007569643D</SimpleValue>
  9530.                         </PropertyDesc>
  9531.                         <PropertyDesc idRef="30" propType="simple">
  9532.                             <SimpleValue valType="binary">08000000000000000000000000000000286E6F626F647929</SimpleValue>
  9533.                         </PropertyDesc>
  9534.                     </PropertyDescList>
  9535.                 </Rule>
  9536.                 <Rule guid="{C1731A6D-6520-414E-A584-3D21FECD95D2}">
  9537.                     <ObjDescRef guidRef="{5BCAC280-D2E2-4EE7-A304-955F4D6A29AC}"/>
  9538.                     <AccessDescList>
  9539.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9540.                     </AccessDescList>
  9541.                     <PropertyDescList>
  9542.                         <PropertyDesc idRef="20" propType="simple">
  9543.                             <SimpleValue valType="int">7536</SimpleValue>
  9544.                         </PropertyDesc>
  9545.                         <PropertyDesc idRef="5" propType="objRef">
  9546.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9547.                         </PropertyDesc>
  9548.                         <PropertyDesc idRef="21" propType="simple">
  9549.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned web</SimpleValue>
  9550.                         </PropertyDesc>
  9551.                         <PropertyDesc idRef="30" propType="simple">
  9552.                             <SimpleValue valType="binary">040000000000000000000000000000007569643D</SimpleValue>
  9553.                         </PropertyDesc>
  9554.                         <PropertyDesc idRef="30" propType="simple">
  9555.                             <SimpleValue valType="binary">050000000000000000000000000000002877656229</SimpleValue>
  9556.                         </PropertyDesc>
  9557.                     </PropertyDescList>
  9558.                 </Rule>
  9559.                 <Rule guid="{FF654CE4-4AAB-4D14-B049-B289E2ACEBDD}">
  9560.                     <ObjDescRef guidRef="{4EC8D76E-793C-4622-A810-079CB5719206}"/>
  9561.                     <AccessDescList>
  9562.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9563.                     </AccessDescList>
  9564.                     <PropertyDescList>
  9565.                         <PropertyDesc idRef="20" propType="simple">
  9566.                             <SimpleValue valType="int">7540</SimpleValue>
  9567.                         </PropertyDesc>
  9568.                         <PropertyDesc idRef="5" propType="objRef">
  9569.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9570.                         </PropertyDesc>
  9571.                         <PropertyDesc idRef="21" propType="simple">
  9572.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned http</SimpleValue>
  9573.                         </PropertyDesc>
  9574.                         <PropertyDesc idRef="30" propType="simple">
  9575.                             <SimpleValue valType="binary">040000000000000000000000000000007569643D</SimpleValue>
  9576.                         </PropertyDesc>
  9577.                         <PropertyDesc idRef="30" propType="simple">
  9578.                             <SimpleValue valType="binary">06000000000000000000000000000000286874747029</SimpleValue>
  9579.                         </PropertyDesc>
  9580.                     </PropertyDescList>
  9581.                 </Rule>
  9582.                 <Rule guid="{7964B267-876C-4764-889D-4591103A831E}">
  9583.                     <ObjDescRef guidRef="{F7987BA4-359C-414B-9A01-997B3B6FBF53}"/>
  9584.                     <AccessDescList>
  9585.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9586.                     </AccessDescList>
  9587.                     <PropertyDescList>
  9588.                         <PropertyDesc idRef="20" propType="simple">
  9589.                             <SimpleValue valType="int">7544</SimpleValue>
  9590.                         </PropertyDesc>
  9591.                         <PropertyDesc idRef="5" propType="objRef">
  9592.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9593.                         </PropertyDesc>
  9594.                         <PropertyDesc idRef="21" propType="simple">
  9595.                             <SimpleValue valType="str">ATTACK RESPONSES id check returned apache</SimpleValue>
  9596.                         </PropertyDesc>
  9597.                         <PropertyDesc idRef="30" propType="simple">
  9598.                             <SimpleValue valType="binary">040000000000000000000000000000007569643D</SimpleValue>
  9599.                         </PropertyDesc>
  9600.                         <PropertyDesc idRef="30" propType="simple">
  9601.                             <SimpleValue valType="binary">080000000000000000000000000000002861706163686529</SimpleValue>
  9602.                         </PropertyDesc>
  9603.                     </PropertyDescList>
  9604.                 </Rule>
  9605.             </RuleByObjTypeList>
  9606.         </Profile>
  9607.         <Profile guid="{AD2D121E-09B6-4B9F-A721-969110787D15}">
  9608.             <ExecSetDescList/>
  9609.             <RuleByObjTypeList typeRef="262">
  9610.                 <Rule guid="{E4D448AD-ED66-47AD-999A-72BEFE9C10D3}">
  9611.                     <ObjDescRef guidRef="{C1996BA1-FF4D-48F8-A393-97FC1D30777B}"/>
  9612.                     <AccessDescList>
  9613.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9614.                     </AccessDescList>
  9615.                     <PropertyDescList>
  9616.                         <PropertyDesc idRef="20" propType="simple">
  9617.                             <SimpleValue valType="int">2000</SimpleValue>
  9618.                         </PropertyDesc>
  9619.                         <PropertyDesc idRef="5" propType="objRef">
  9620.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9621.                         </PropertyDesc>
  9622.                         <PropertyDesc idRef="21" propType="simple">
  9623.                             <SimpleValue valType="str">MISC source route lssr</SimpleValue>
  9624.                         </PropertyDesc>
  9625.                         <PropertyDesc idRef="25" propType="simple">
  9626.                             <SimpleValue valType="int">5</SimpleValue>
  9627.                         </PropertyDesc>
  9628.                     </PropertyDescList>
  9629.                 </Rule>
  9630.                 <Rule guid="{93302000-E2ED-47DF-90AC-9DC93129FD5C}">
  9631.                     <ObjDescRef guidRef="{5C28D1AD-55C7-4B6B-84E0-A51B3A4CABBD}"/>
  9632.                     <AccessDescList>
  9633.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9634.                     </AccessDescList>
  9635.                     <PropertyDescList>
  9636.                         <PropertyDesc idRef="20" propType="simple">
  9637.                             <SimpleValue valType="int">2004</SimpleValue>
  9638.                         </PropertyDesc>
  9639.                         <PropertyDesc idRef="5" propType="objRef">
  9640.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9641.                         </PropertyDesc>
  9642.                         <PropertyDesc idRef="21" propType="simple">
  9643.                             <SimpleValue valType="str">MISC source route lssre</SimpleValue>
  9644.                         </PropertyDesc>
  9645.                         <PropertyDesc idRef="25" propType="simple">
  9646.                             <SimpleValue valType="int">5</SimpleValue>
  9647.                         </PropertyDesc>
  9648.                     </PropertyDescList>
  9649.                 </Rule>
  9650.                 <Rule guid="{461EBD30-9E4C-4D79-80E4-49AAFEA2E982}">
  9651.                     <ObjDescRef guidRef="{B862F571-BE09-4018-B67A-2856C7A05D39}"/>
  9652.                     <AccessDescList>
  9653.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9654.                     </AccessDescList>
  9655.                     <PropertyDescList>
  9656.                         <PropertyDesc idRef="20" propType="simple">
  9657.                             <SimpleValue valType="int">2008</SimpleValue>
  9658.                         </PropertyDesc>
  9659.                         <PropertyDesc idRef="5" propType="objRef">
  9660.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9661.                         </PropertyDesc>
  9662.                         <PropertyDesc idRef="21" propType="simple">
  9663.                             <SimpleValue valType="str">MISC source route ssrr</SimpleValue>
  9664.                         </PropertyDesc>
  9665.                         <PropertyDesc idRef="25" propType="simple">
  9666.                             <SimpleValue valType="int">6</SimpleValue>
  9667.                         </PropertyDesc>
  9668.                     </PropertyDescList>
  9669.                 </Rule>
  9670.                 <Rule guid="{4A994C5B-7A09-49D1-89AE-7C593A00E587}">
  9671.                     <ObjDescRef guidRef="{C0426ACC-75A8-4625-A26C-AFE008691825}"/>
  9672.                     <AccessDescList>
  9673.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9674.                     </AccessDescList>
  9675.                     <PropertyDescList>
  9676.                         <PropertyDesc idRef="20" propType="simple">
  9677.                             <SimpleValue valType="int">2012</SimpleValue>
  9678.                         </PropertyDesc>
  9679.                         <PropertyDesc idRef="5" propType="objRef">
  9680.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9681.                         </PropertyDesc>
  9682.                         <PropertyDesc idRef="21" propType="simple">
  9683.                             <SimpleValue valType="str">MISC Source Port 20 to &lt;1024</SimpleValue>
  9684.                         </PropertyDesc>
  9685.                         <PropertyDesc idRef="31" propType="simple">
  9686.                             <SimpleValue valType="int">512</SimpleValue>
  9687.                         </PropertyDesc>
  9688.                     </PropertyDescList>
  9689.                 </Rule>
  9690.                 <Rule guid="{D339FA49-1D6D-4994-BEC6-167A28665634}">
  9691.                     <ObjDescRef guidRef="{15483147-C2CA-4277-9BD1-E9BFD345A447}"/>
  9692.                     <AccessDescList>
  9693.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9694.                     </AccessDescList>
  9695.                     <PropertyDescList>
  9696.                         <PropertyDesc idRef="20" propType="simple">
  9697.                             <SimpleValue valType="int">2016</SimpleValue>
  9698.                         </PropertyDesc>
  9699.                         <PropertyDesc idRef="5" propType="objRef">
  9700.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9701.                         </PropertyDesc>
  9702.                         <PropertyDesc idRef="21" propType="simple">
  9703.                             <SimpleValue valType="str">MISC source port 53 to &lt;1024</SimpleValue>
  9704.                         </PropertyDesc>
  9705.                         <PropertyDesc idRef="31" propType="simple">
  9706.                             <SimpleValue valType="int">512</SimpleValue>
  9707.                         </PropertyDesc>
  9708.                     </PropertyDescList>
  9709.                 </Rule>
  9710.                 <Rule guid="{DA23B450-6E8D-4305-B65D-B48139D45B06}">
  9711.                     <ObjDescRef guidRef="{34FC38F5-E196-4B63-8043-A8F7B7CF3665}"/>
  9712.                     <AccessDescList>
  9713.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9714.                     </AccessDescList>
  9715.                     <PropertyDescList>
  9716.                         <PropertyDesc idRef="20" propType="simple">
  9717.                             <SimpleValue valType="int">2020</SimpleValue>
  9718.                         </PropertyDesc>
  9719.                         <PropertyDesc idRef="5" propType="objRef">
  9720.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9721.                         </PropertyDesc>
  9722.                         <PropertyDesc idRef="21" propType="simple">
  9723.                             <SimpleValue valType="str">MISC Insecure TIMBUKTU Password</SimpleValue>
  9724.                         </PropertyDesc>
  9725.                         <PropertyDesc idRef="30" propType="simple">
  9726.                             <SimpleValue valType="binary">0300000000000000100000000000000005003E</SimpleValue>
  9727.                         </PropertyDesc>
  9728.                     </PropertyDescList>
  9729.                 </Rule>
  9730.                 <Rule guid="{0260B7F4-2343-4E61-8CC5-9E92996DF7F2}">
  9731.                     <ObjDescRef guidRef="{2025B006-D2D8-4B02-9FAF-7AFEF3A638E6}"/>
  9732.                     <AccessDescList>
  9733.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9734.                     </AccessDescList>
  9735.                     <PropertyDescList>
  9736.                         <PropertyDesc idRef="20" propType="simple">
  9737.                             <SimpleValue valType="int">2028</SimpleValue>
  9738.                         </PropertyDesc>
  9739.                         <PropertyDesc idRef="5" propType="objRef">
  9740.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9741.                         </PropertyDesc>
  9742.                         <PropertyDesc idRef="21" propType="simple">
  9743.                             <SimpleValue valType="str">MISC PCAnywhere Attempted Administrator Login</SimpleValue>
  9744.                         </PropertyDesc>
  9745.                         <PropertyDesc idRef="30" propType="simple">
  9746.                             <SimpleValue valType="binary">0D00000000000000000000000000000041444D494E4953545241544F52</SimpleValue>
  9747.                         </PropertyDesc>
  9748.                     </PropertyDescList>
  9749.                 </Rule>
  9750.                 <Rule guid="{2DE4998A-4078-4339-8B77-9C3F44CB6BE6}">
  9751.                     <ObjDescRef guidRef="{A03AE6B4-74F1-42AC-A2AB-A7C7BBA66F5A}"/>
  9752.                     <AccessDescList>
  9753.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9754.                     </AccessDescList>
  9755.                     <PropertyDescList>
  9756.                         <PropertyDesc idRef="20" propType="simple">
  9757.                             <SimpleValue valType="int">2032</SimpleValue>
  9758.                         </PropertyDesc>
  9759.                         <PropertyDesc idRef="5" propType="objRef">
  9760.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9761.                         </PropertyDesc>
  9762.                         <PropertyDesc idRef="21" propType="simple">
  9763.                             <SimpleValue valType="str">MISC gopher proxy</SimpleValue>
  9764.                         </PropertyDesc>
  9765.                         <PropertyDesc idRef="30" propType="simple">
  9766.                             <SimpleValue valType="binary">040000000000000000000000000001006674703A</SimpleValue>
  9767.                         </PropertyDesc>
  9768.                         <PropertyDesc idRef="30" propType="simple">
  9769.                             <SimpleValue valType="binary">02000000000000000000000000000000402F</SimpleValue>
  9770.                         </PropertyDesc>
  9771.                     </PropertyDescList>
  9772.                 </Rule>
  9773.                 <Rule guid="{10400E9F-C0C4-4A72-9A1E-0E8A5A9427F6}">
  9774.                     <ObjDescRef guidRef="{688082BA-64C2-4601-8276-F770B0BAE073}"/>
  9775.                     <AccessDescList>
  9776.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9777.                     </AccessDescList>
  9778.                     <PropertyDescList>
  9779.                         <PropertyDesc idRef="20" propType="simple">
  9780.                             <SimpleValue valType="int">2048</SimpleValue>
  9781.                         </PropertyDesc>
  9782.                         <PropertyDesc idRef="5" propType="objRef">
  9783.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9784.                         </PropertyDesc>
  9785.                         <PropertyDesc idRef="21" propType="simple">
  9786.                             <SimpleValue valType="str">MISC PCAnywhere Failed Login</SimpleValue>
  9787.                         </PropertyDesc>
  9788.                         <PropertyDesc idRef="30" propType="simple">
  9789.                             <SimpleValue valType="binary">0D000000000000001000000000000000496E76616C6964206C6F67696E</SimpleValue>
  9790.                         </PropertyDesc>
  9791.                     </PropertyDescList>
  9792.                 </Rule>
  9793.                 <Rule guid="{8701EDFE-2C7A-4756-88C4-B80137C6D104}">
  9794.                     <ObjDescRef guidRef="{C0BC5669-D34B-47B2-8624-B4FBC1987F6B}"/>
  9795.                     <AccessDescList>
  9796.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9797.                     </AccessDescList>
  9798.                     <PropertyDescList>
  9799.                         <PropertyDesc idRef="20" propType="simple">
  9800.                             <SimpleValue valType="int">2052</SimpleValue>
  9801.                         </PropertyDesc>
  9802.                         <PropertyDesc idRef="5" propType="objRef">
  9803.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9804.                         </PropertyDesc>
  9805.                         <PropertyDesc idRef="21" propType="simple">
  9806.                             <SimpleValue valType="str">MISC Cisco Catalyst Remote Access</SimpleValue>
  9807.                         </PropertyDesc>
  9808.                         <PropertyDesc idRef="31" propType="simple">
  9809.                             <SimpleValue valType="int">4608</SimpleValue>
  9810.                         </PropertyDesc>
  9811.                     </PropertyDescList>
  9812.                 </Rule>
  9813.                 <Rule guid="{92ABF078-BC0C-4244-ACBB-8D9862466E19}">
  9814.                     <ObjDescRef guidRef="{D28800FF-AE5D-4C78-9A02-695E9EAD09E8}"/>
  9815.                     <AccessDescList>
  9816.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9817.                     </AccessDescList>
  9818.                     <PropertyDescList>
  9819.                         <PropertyDesc idRef="20" propType="simple">
  9820.                             <SimpleValue valType="int">2056</SimpleValue>
  9821.                         </PropertyDesc>
  9822.                         <PropertyDesc idRef="5" propType="objRef">
  9823.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9824.                         </PropertyDesc>
  9825.                         <PropertyDesc idRef="21" propType="simple">
  9826.                             <SimpleValue valType="str">MISC ramen worm</SimpleValue>
  9827.                         </PropertyDesc>
  9828.                         <PropertyDesc idRef="30" propType="simple">
  9829.                             <SimpleValue valType="binary">0400000000000000080000000000010047455420</SimpleValue>
  9830.                         </PropertyDesc>
  9831.                     </PropertyDescList>
  9832.                 </Rule>
  9833.                 <Rule guid="{ACD40CCD-4961-430E-8AE3-DB8DC12F183F}">
  9834.                     <ObjDescRef guidRef="{B02343FF-3976-44FC-9FAE-05E35C016703}"/>
  9835.                     <AccessDescList>
  9836.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9837.                     </AccessDescList>
  9838.                     <PropertyDescList>
  9839.                         <PropertyDesc idRef="20" propType="simple">
  9840.                             <SimpleValue valType="int">2064</SimpleValue>
  9841.                         </PropertyDesc>
  9842.                         <PropertyDesc idRef="5" propType="objRef">
  9843.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9844.                         </PropertyDesc>
  9845.                         <PropertyDesc idRef="21" propType="simple">
  9846.                             <SimpleValue valType="str">MISC SNMP NT UserList</SimpleValue>
  9847.                         </PropertyDesc>
  9848.                         <PropertyDesc idRef="30" propType="simple">
  9849.                             <SimpleValue valType="binary">080000000000000000000000000000002B06104014D10219</SimpleValue>
  9850.                         </PropertyDesc>
  9851.                     </PropertyDescList>
  9852.                 </Rule>
  9853.                 <Rule guid="{51DD6F2F-D9F0-4F46-8C45-9619E0A0DDB2}">
  9854.                     <ObjDescRef guidRef="{187CD89D-B713-4D54-8501-C67D3BFB9C3A}"/>
  9855.                     <AccessDescList>
  9856.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9857.                     </AccessDescList>
  9858.                     <PropertyDescList>
  9859.                         <PropertyDesc idRef="20" propType="simple">
  9860.                             <SimpleValue valType="int">2068</SimpleValue>
  9861.                         </PropertyDesc>
  9862.                         <PropertyDesc idRef="5" propType="objRef">
  9863.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9864.                         </PropertyDesc>
  9865.                         <PropertyDesc idRef="21" propType="simple">
  9866.                             <SimpleValue valType="str">MISC xdmcp query</SimpleValue>
  9867.                         </PropertyDesc>
  9868.                         <PropertyDesc idRef="30" propType="simple">
  9869.                             <SimpleValue valType="binary">0700000000000000000000000000000000010003000100</SimpleValue>
  9870.                         </PropertyDesc>
  9871.                     </PropertyDescList>
  9872.                 </Rule>
  9873.                 <Rule guid="{7B235783-620A-4DF7-9DA7-C61A485CCA4E}">
  9874.                     <ObjDescRef guidRef="{F8A1916F-C1B4-4006-A958-5AB638F28735}"/>
  9875.                     <AccessDescList>
  9876.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9877.                     </AccessDescList>
  9878.                     <PropertyDescList>
  9879.                         <PropertyDesc idRef="20" propType="simple">
  9880.                             <SimpleValue valType="int">2084</SimpleValue>
  9881.                         </PropertyDesc>
  9882.                         <PropertyDesc idRef="5" propType="objRef">
  9883.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9884.                         </PropertyDesc>
  9885.                         <PropertyDesc idRef="21" propType="simple">
  9886.                             <SimpleValue valType="str">MISC Large UDP Packet</SimpleValue>
  9887.                         </PropertyDesc>
  9888.                         <PropertyDesc idRef="29" propType="simple">
  9889.                             <SimpleValue valType="int" valRelation="&gt;">4000</SimpleValue>
  9890.                         </PropertyDesc>
  9891.                     </PropertyDescList>
  9892.                 </Rule>
  9893.                 <Rule guid="{E3FBD009-17BB-4DE2-90E1-CFE54D8650F4}">
  9894.                     <ObjDescRef guidRef="{90A7B39C-E915-4C65-A03C-C456BAB6BD2B}"/>
  9895.                     <AccessDescList>
  9896.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9897.                     </AccessDescList>
  9898.                     <PropertyDescList>
  9899.                         <PropertyDesc idRef="20" propType="simple">
  9900.                             <SimpleValue valType="int">2088</SimpleValue>
  9901.                         </PropertyDesc>
  9902.                         <PropertyDesc idRef="5" propType="objRef">
  9903.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9904.                         </PropertyDesc>
  9905.                         <PropertyDesc idRef="21" propType="simple">
  9906.                             <SimpleValue valType="str">MISC Tiny Fragments</SimpleValue>
  9907.                         </PropertyDesc>
  9908.                         <PropertyDesc idRef="26" propType="simple">
  9909.                             <SimpleValue valType="int">1</SimpleValue>
  9910.                         </PropertyDesc>
  9911.                         <PropertyDesc idRef="29" propType="simple">
  9912.                             <SimpleValue valType="int" valRelation="&lt;">25</SimpleValue>
  9913.                         </PropertyDesc>
  9914.                     </PropertyDescList>
  9915.                 </Rule>
  9916.                 <Rule guid="{6ED86139-8FED-4E38-B913-BAB4F07C55C4}">
  9917.                     <ObjDescRef guidRef="{5CB418F3-07D4-464C-9C3C-8C928DCDAF0F}"/>
  9918.                     <AccessDescList>
  9919.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9920.                     </AccessDescList>
  9921.                     <PropertyDescList>
  9922.                         <PropertyDesc idRef="20" propType="simple">
  9923.                             <SimpleValue valType="int">5536</SimpleValue>
  9924.                         </PropertyDesc>
  9925.                         <PropertyDesc idRef="5" propType="objRef">
  9926.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9927.                         </PropertyDesc>
  9928.                         <PropertyDesc idRef="21" propType="simple">
  9929.                             <SimpleValue valType="str">MISC UPNP malformed advertisement</SimpleValue>
  9930.                         </PropertyDesc>
  9931.                         <PropertyDesc idRef="30" propType="simple">
  9932.                             <SimpleValue valType="binary">090000000000000000000000000001004E4F54494659202A20</SimpleValue>
  9933.                         </PropertyDesc>
  9934.                     </PropertyDescList>
  9935.                 </Rule>
  9936.                 <Rule guid="{88F2C788-6FF4-4D9C-A51E-4EAC647ADC8C}">
  9937.                     <ObjDescRef guidRef="{3EDF39EE-CA6F-4ACF-BF82-9E6EF2621546}"/>
  9938.                     <AccessDescList>
  9939.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9940.                     </AccessDescList>
  9941.                     <PropertyDescList>
  9942.                         <PropertyDesc idRef="20" propType="simple">
  9943.                             <SimpleValue valType="int">5552</SimpleValue>
  9944.                         </PropertyDesc>
  9945.                         <PropertyDesc idRef="5" propType="objRef">
  9946.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  9947.                         </PropertyDesc>
  9948.                         <PropertyDesc idRef="21" propType="simple">
  9949.                             <SimpleValue valType="str">MISC UPNP Location overflow</SimpleValue>
  9950.                         </PropertyDesc>
  9951.                         <PropertyDesc idRef="30" propType="simple">
  9952.                             <SimpleValue valType="binary">0A0000000000000000000000000001000D4C6F636174696F6E3A</SimpleValue>
  9953.                         </PropertyDesc>
  9954.                         <PropertyDesc idRef="29" propType="simple">
  9955.                             <SimpleValue valType="int" valRelation="&gt;">500</SimpleValue>
  9956.                         </PropertyDesc>
  9957.                     </PropertyDescList>
  9958.                 </Rule>
  9959.                 <Rule guid="{A8D804D8-6F9F-458C-B6F1-9646112B189F}">
  9960.                     <ObjDescRef guidRef="{B7AED75B-F582-4418-82F3-12F4BF7CB879}"/>
  9961.                     <AccessDescList>
  9962.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9963.                     </AccessDescList>
  9964.                     <PropertyDescList>
  9965.                         <PropertyDesc idRef="20" propType="simple">
  9966.                             <SimpleValue valType="int">5572</SimpleValue>
  9967.                         </PropertyDesc>
  9968.                         <PropertyDesc idRef="5" propType="objRef">
  9969.                             <ObjDescRef guidRef="{E3CB7D5E-55F7-48AE-8230-D34D37C9B869}"/>
  9970.                         </PropertyDesc>
  9971.                         <PropertyDesc idRef="21" propType="simple">
  9972.                             <SimpleValue valType="str">MISC AIM AddGame attempt</SimpleValue>
  9973.                         </PropertyDesc>
  9974.                         <PropertyDesc idRef="30" propType="simple">
  9975.                             <SimpleValue valType="binary">0D00000000000000000000000000010061696D5C3A41646447616D653F</SimpleValue>
  9976.                         </PropertyDesc>
  9977.                     </PropertyDescList>
  9978.                 </Rule>
  9979.                 <Rule guid="{493060FC-96D5-4031-A578-76C496F001A9}">
  9980.                     <ObjDescRef guidRef="{8D55B878-8876-43F2-B30A-EE670E258B4A}"/>
  9981.                     <AccessDescList>
  9982.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  9983.                     </AccessDescList>
  9984.                     <PropertyDescList>
  9985.                         <PropertyDesc idRef="20" propType="simple">
  9986.                             <SimpleValue valType="int">7008</SimpleValue>
  9987.                         </PropertyDesc>
  9988.                         <PropertyDesc idRef="5" propType="objRef">
  9989.                             <ObjDescRef guidRef="{E3CB7D5E-55F7-48AE-8230-D34D37C9B869}"/>
  9990.                         </PropertyDesc>
  9991.                         <PropertyDesc idRef="21" propType="simple">
  9992.                             <SimpleValue valType="str">MISC AIM AddExternalApp attempt</SimpleValue>
  9993.                         </PropertyDesc>
  9994.                         <PropertyDesc idRef="30" propType="simple">
  9995.                             <SimpleValue valType="binary">1400000000000000000000000000010061696D5C3A41646445787465726E616C4170703F</SimpleValue>
  9996.                         </PropertyDesc>
  9997.                     </PropertyDescList>
  9998.                 </Rule>
  9999.                 <Rule guid="{3197824D-400F-4730-B1FF-17D06FE6FAAD}">
  10000.                     <ObjDescRef guidRef="{60C6FE43-10FC-4690-9CA3-989764088FB7}"/>
  10001.                     <AccessDescList>
  10002.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10003.                     </AccessDescList>
  10004.                     <PropertyDescList>
  10005.                         <PropertyDesc idRef="20" propType="simple">
  10006.                             <SimpleValue valType="int">7468</SimpleValue>
  10007.                         </PropertyDesc>
  10008.                         <PropertyDesc idRef="5" propType="objRef">
  10009.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10010.                         </PropertyDesc>
  10011.                         <PropertyDesc idRef="21" propType="simple">
  10012.                             <SimpleValue valType="str">MISC xdmcp info query</SimpleValue>
  10013.                         </PropertyDesc>
  10014.                         <PropertyDesc idRef="30" propType="simple">
  10015.                             <SimpleValue valType="binary">0700000000000000000000000000000000010002000100</SimpleValue>
  10016.                         </PropertyDesc>
  10017.                     </PropertyDescList>
  10018.                 </Rule>
  10019.             </RuleByObjTypeList>
  10020.         </Profile>
  10021.         <Profile guid="{F425E245-6F7C-43B4-A854-30ACD5E21005}">
  10022.             <ExecSetDescList/>
  10023.             <RuleByObjTypeList typeRef="262">
  10024.                 <Rule guid="{2A17658E-9511-4C3E-999F-C80B9C6D28C2}">
  10025.                     <ObjDescRef guidRef="{C0803EBB-934D-47EF-98DA-7146979B659B}"/>
  10026.                     <AccessDescList>
  10027.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10028.                     </AccessDescList>
  10029.                     <PropertyDescList>
  10030.                         <PropertyDesc idRef="20" propType="simple">
  10031.                             <SimpleValue valType="int">2036</SimpleValue>
  10032.                         </PropertyDesc>
  10033.                         <PropertyDesc idRef="5" propType="objRef">
  10034.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10035.                         </PropertyDesc>
  10036.                         <PropertyDesc idRef="21" propType="simple">
  10037.                             <SimpleValue valType="str">WEB-MISC PCCS mysql database admin tool access</SimpleValue>
  10038.                         </PropertyDesc>
  10039.                         <PropertyDesc idRef="30" propType="simple">
  10040.                             <SimpleValue valType="binary">1F000000000000002400000000000100706363736D7973716C61646D2F696E63732F6462636F6E6E6563742E696E63</SimpleValue>
  10041.                         </PropertyDesc>
  10042.                     </PropertyDescList>
  10043.                 </Rule>
  10044.                 <Rule guid="{9CCC66B2-8306-4194-9343-9E87333F8BF8}">
  10045.                     <ObjDescRef guidRef="{A369B121-74F8-4DAF-87C5-C43DEA4F31EB}"/>
  10046.                     <AccessDescList>
  10047.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10048.                     </AccessDescList>
  10049.                     <PropertyDescList>
  10050.                         <PropertyDesc idRef="20" propType="simple">
  10051.                             <SimpleValue valType="int">4004</SimpleValue>
  10052.                         </PropertyDesc>
  10053.                         <PropertyDesc idRef="5" propType="objRef">
  10054.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10055.                         </PropertyDesc>
  10056.                         <PropertyDesc idRef="21" propType="simple">
  10057.                             <SimpleValue valType="str">WEB-MISC carbo.dll access</SimpleValue>
  10058.                         </PropertyDesc>
  10059.                         <PropertyDesc idRef="30" propType="simple">
  10060.                             <SimpleValue valType="binary">0A0000000000000000000000000100002F636172626F2E646C6C</SimpleValue>
  10061.                         </PropertyDesc>
  10062.                         <PropertyDesc idRef="30" propType="simple">
  10063.                             <SimpleValue valType="binary">0C00000000000000000000000000010069636174636F6D6D616E643D</SimpleValue>
  10064.                         </PropertyDesc>
  10065.                     </PropertyDescList>
  10066.                 </Rule>
  10067.                 <Rule guid="{68D94AD6-8364-4C62-B59C-761291AE64BC}">
  10068.                     <ObjDescRef guidRef="{1F363E21-6084-4914-8C63-910AFEF5874B}"/>
  10069.                     <AccessDescList>
  10070.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10071.                     </AccessDescList>
  10072.                     <PropertyDescList>
  10073.                         <PropertyDesc idRef="20" propType="simple">
  10074.                             <SimpleValue valType="int">4188</SimpleValue>
  10075.                         </PropertyDesc>
  10076.                         <PropertyDesc idRef="5" propType="objRef">
  10077.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10078.                         </PropertyDesc>
  10079.                         <PropertyDesc idRef="21" propType="simple">
  10080.                             <SimpleValue valType="str">WEB-MISC Netscape Enterprise DOS</SimpleValue>
  10081.                         </PropertyDesc>
  10082.                         <PropertyDesc idRef="30" propType="simple">
  10083.                             <SimpleValue valType="binary">090000000000000009000000000000005245564C4F47202F20</SimpleValue>
  10084.                         </PropertyDesc>
  10085.                     </PropertyDescList>
  10086.                 </Rule>
  10087.                 <Rule guid="{F94C966F-1A6A-4699-8CA9-DF57DB4FFD47}">
  10088.                     <ObjDescRef guidRef="{ACED41C5-2AEF-4562-B12C-31FD802D3BDF}"/>
  10089.                     <AccessDescList>
  10090.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10091.                     </AccessDescList>
  10092.                     <PropertyDescList>
  10093.                         <PropertyDesc idRef="20" propType="simple">
  10094.                             <SimpleValue valType="int">4192</SimpleValue>
  10095.                         </PropertyDesc>
  10096.                         <PropertyDesc idRef="5" propType="objRef">
  10097.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10098.                         </PropertyDesc>
  10099.                         <PropertyDesc idRef="21" propType="simple">
  10100.                             <SimpleValue valType="str">WEB-MISC Netscape Enterprise directory listing attempt</SimpleValue>
  10101.                         </PropertyDesc>
  10102.                         <PropertyDesc idRef="30" propType="simple">
  10103.                             <SimpleValue valType="binary">06000000000000000600000000000000494E44455820</SimpleValue>
  10104.                         </PropertyDesc>
  10105.                     </PropertyDescList>
  10106.                 </Rule>
  10107.                 <Rule guid="{A18C8042-5E56-4B8F-8BD4-4220C5C5DB2A}">
  10108.                     <ObjDescRef guidRef="{812A80A5-E774-49F6-9FBE-AAC8F948A065}"/>
  10109.                     <AccessDescList>
  10110.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10111.                     </AccessDescList>
  10112.                     <PropertyDescList>
  10113.                         <PropertyDesc idRef="20" propType="simple">
  10114.                             <SimpleValue valType="int">4200</SimpleValue>
  10115.                         </PropertyDesc>
  10116.                         <PropertyDesc idRef="5" propType="objRef">
  10117.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10118.                         </PropertyDesc>
  10119.                         <PropertyDesc idRef="21" propType="simple">
  10120.                             <SimpleValue valType="str">WEB-MISC iPlanet GETPROPERTIES attempt</SimpleValue>
  10121.                         </PropertyDesc>
  10122.                         <PropertyDesc idRef="30" propType="simple">
  10123.                             <SimpleValue valType="binary">0D000000000000000D0000000000000047455450524F50455254494553</SimpleValue>
  10124.                         </PropertyDesc>
  10125.                     </PropertyDescList>
  10126.                 </Rule>
  10127.                 <Rule guid="{FD99778B-FD12-4D7B-AD02-D3DDEC235460}">
  10128.                     <ObjDescRef guidRef="{1C422715-6F6D-4B90-9EEC-ABC117407792}"/>
  10129.                     <AccessDescList>
  10130.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10131.                     </AccessDescList>
  10132.                     <PropertyDescList>
  10133.                         <PropertyDesc idRef="20" propType="simple">
  10134.                             <SimpleValue valType="int">4216</SimpleValue>
  10135.                         </PropertyDesc>
  10136.                         <PropertyDesc idRef="5" propType="objRef">
  10137.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10138.                         </PropertyDesc>
  10139.                         <PropertyDesc idRef="21" propType="simple">
  10140.                             <SimpleValue valType="str">WEB-MISC weblogic view source attempt</SimpleValue>
  10141.                         </PropertyDesc>
  10142.                         <PropertyDesc idRef="30" propType="simple">
  10143.                             <SimpleValue valType="binary">060000000000000000000000000100002E6A73253730</SimpleValue>
  10144.                         </PropertyDesc>
  10145.                     </PropertyDescList>
  10146.                 </Rule>
  10147.                 <Rule guid="{88CB0EF0-25CC-4599-BA44-3B852ABA1AB3}">
  10148.                     <ObjDescRef guidRef="{796133B7-701E-40C4-BF12-090CDBA467E0}"/>
  10149.                     <AccessDescList>
  10150.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10151.                     </AccessDescList>
  10152.                     <PropertyDescList>
  10153.                         <PropertyDesc idRef="20" propType="simple">
  10154.                             <SimpleValue valType="int">4220</SimpleValue>
  10155.                         </PropertyDesc>
  10156.                         <PropertyDesc idRef="5" propType="objRef">
  10157.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10158.                         </PropertyDesc>
  10159.                         <PropertyDesc idRef="21" propType="simple">
  10160.                             <SimpleValue valType="str">WEB-MISC tomcat directory traversal attempt</SimpleValue>
  10161.                         </PropertyDesc>
  10162.                         <PropertyDesc idRef="30" propType="simple">
  10163.                             <SimpleValue valType="binary">070000000000000000000000000100002530302E6A7370</SimpleValue>
  10164.                         </PropertyDesc>
  10165.                     </PropertyDescList>
  10166.                 </Rule>
  10167.                 <Rule guid="{DC06720F-3C5F-4692-ACF0-BB6E963CC827}">
  10168.                     <ObjDescRef guidRef="{E9FA9807-FE83-48CF-A8FC-2E5273527E9E}"/>
  10169.                     <AccessDescList>
  10170.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10171.                     </AccessDescList>
  10172.                     <PropertyDescList>
  10173.                         <PropertyDesc idRef="20" propType="simple">
  10174.                             <SimpleValue valType="int">4224</SimpleValue>
  10175.                         </PropertyDesc>
  10176.                         <PropertyDesc idRef="5" propType="objRef">
  10177.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10178.                         </PropertyDesc>
  10179.                         <PropertyDesc idRef="21" propType="simple">
  10180.                             <SimpleValue valType="str">WEB-MISC tomcat view source attempt</SimpleValue>
  10181.                         </PropertyDesc>
  10182.                         <PropertyDesc idRef="30" propType="simple">
  10183.                             <SimpleValue valType="binary">0800000000000000000000000001000025323532656A7370</SimpleValue>
  10184.                         </PropertyDesc>
  10185.                     </PropertyDescList>
  10186.                 </Rule>
  10187.                 <Rule guid="{FDDECD0B-9DC0-4CBC-948F-DA20E2B99C06}">
  10188.                     <ObjDescRef guidRef="{A42DE3BB-AA9D-438B-ABC9-910A1E4E72D0}"/>
  10189.                     <AccessDescList>
  10190.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10191.                     </AccessDescList>
  10192.                     <PropertyDescList>
  10193.                         <PropertyDesc idRef="20" propType="simple">
  10194.                             <SimpleValue valType="int">4228</SimpleValue>
  10195.                         </PropertyDesc>
  10196.                         <PropertyDesc idRef="5" propType="objRef">
  10197.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10198.                         </PropertyDesc>
  10199.                         <PropertyDesc idRef="21" propType="simple">
  10200.                             <SimpleValue valType="str">WEB-MISC ftp attempt</SimpleValue>
  10201.                         </PropertyDesc>
  10202.                         <PropertyDesc idRef="30" propType="simple">
  10203.                             <SimpleValue valType="binary">070000000000000000000000000001006674702E657865</SimpleValue>
  10204.                         </PropertyDesc>
  10205.                     </PropertyDescList>
  10206.                 </Rule>
  10207.                 <Rule guid="{42F48805-DF37-475C-8127-7F68A713136B}">
  10208.                     <ObjDescRef guidRef="{53AB43A7-41AE-4637-BD4A-43A772DE3333}"/>
  10209.                     <AccessDescList>
  10210.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10211.                     </AccessDescList>
  10212.                     <PropertyDescList>
  10213.                         <PropertyDesc idRef="20" propType="simple">
  10214.                             <SimpleValue valType="int">4232</SimpleValue>
  10215.                         </PropertyDesc>
  10216.                         <PropertyDesc idRef="5" propType="objRef">
  10217.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10218.                         </PropertyDesc>
  10219.                         <PropertyDesc idRef="21" propType="simple">
  10220.                             <SimpleValue valType="str">WEB-MISC enumdsn attempt</SimpleValue>
  10221.                         </PropertyDesc>
  10222.                         <PropertyDesc idRef="30" propType="simple">
  10223.                             <SimpleValue valType="binary">0A00000000000000000000000000010078705F656E756D64736E</SimpleValue>
  10224.                         </PropertyDesc>
  10225.                     </PropertyDescList>
  10226.                 </Rule>
  10227.                 <Rule guid="{CD42976D-1DAA-46D1-8D78-868C59CD71B0}">
  10228.                     <ObjDescRef guidRef="{6AB683A3-1EB6-4266-81DE-70A92D8C56B7}"/>
  10229.                     <AccessDescList>
  10230.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10231.                     </AccessDescList>
  10232.                     <PropertyDescList>
  10233.                         <PropertyDesc idRef="20" propType="simple">
  10234.                             <SimpleValue valType="int">4236</SimpleValue>
  10235.                         </PropertyDesc>
  10236.                         <PropertyDesc idRef="5" propType="objRef">
  10237.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10238.                         </PropertyDesc>
  10239.                         <PropertyDesc idRef="21" propType="simple">
  10240.                             <SimpleValue valType="str">WEB-MISC filelist attempt</SimpleValue>
  10241.                         </PropertyDesc>
  10242.                         <PropertyDesc idRef="30" propType="simple">
  10243.                             <SimpleValue valType="binary">0B00000000000000000000000000010078705F66696C656C697374</SimpleValue>
  10244.                         </PropertyDesc>
  10245.                     </PropertyDescList>
  10246.                 </Rule>
  10247.                 <Rule guid="{8395EBDE-34A2-4038-905A-D55693C2138E}">
  10248.                     <ObjDescRef guidRef="{A8B81E37-7DDF-4001-A9CC-6740D7EBFD48}"/>
  10249.                     <AccessDescList>
  10250.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10251.                     </AccessDescList>
  10252.                     <PropertyDescList>
  10253.                         <PropertyDesc idRef="20" propType="simple">
  10254.                             <SimpleValue valType="int">4240</SimpleValue>
  10255.                         </PropertyDesc>
  10256.                         <PropertyDesc idRef="5" propType="objRef">
  10257.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10258.                         </PropertyDesc>
  10259.                         <PropertyDesc idRef="21" propType="simple">
  10260.                             <SimpleValue valType="str">WEB-MISC availablemedia attempt</SimpleValue>
  10261.                         </PropertyDesc>
  10262.                         <PropertyDesc idRef="30" propType="simple">
  10263.                             <SimpleValue valType="binary">1100000000000000000000000000010078705F617661696C61626C656D65646961</SimpleValue>
  10264.                         </PropertyDesc>
  10265.                     </PropertyDescList>
  10266.                 </Rule>
  10267.                 <Rule guid="{79FC6EC3-31FA-4F04-8024-BE73F1640CC6}">
  10268.                     <ObjDescRef guidRef="{B7452E75-0A06-4EDB-A236-A184697951FD}"/>
  10269.                     <AccessDescList>
  10270.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10271.                     </AccessDescList>
  10272.                     <PropertyDescList>
  10273.                         <PropertyDesc idRef="20" propType="simple">
  10274.                             <SimpleValue valType="int">4244</SimpleValue>
  10275.                         </PropertyDesc>
  10276.                         <PropertyDesc idRef="5" propType="objRef">
  10277.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10278.                         </PropertyDesc>
  10279.                         <PropertyDesc idRef="21" propType="simple">
  10280.                             <SimpleValue valType="str">WEB-MISC cmdshell attempt</SimpleValue>
  10281.                         </PropertyDesc>
  10282.                         <PropertyDesc idRef="30" propType="simple">
  10283.                             <SimpleValue valType="binary">0B00000000000000000000000000010078705F636D647368656C6C</SimpleValue>
  10284.                         </PropertyDesc>
  10285.                     </PropertyDescList>
  10286.                 </Rule>
  10287.                 <Rule guid="{EEA51ED8-4347-41E2-9440-5715CAA1754A}">
  10288.                     <ObjDescRef guidRef="{C095DA9B-FC1E-445F-AB0A-BEB9994FFE54}"/>
  10289.                     <AccessDescList>
  10290.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10291.                     </AccessDescList>
  10292.                     <PropertyDescList>
  10293.                         <PropertyDesc idRef="20" propType="simple">
  10294.                             <SimpleValue valType="int">4248</SimpleValue>
  10295.                         </PropertyDesc>
  10296.                         <PropertyDesc idRef="5" propType="objRef">
  10297.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10298.                         </PropertyDesc>
  10299.                         <PropertyDesc idRef="21" propType="simple">
  10300.                             <SimpleValue valType="str">WEB-MISC nc.exe attempt</SimpleValue>
  10301.                         </PropertyDesc>
  10302.                         <PropertyDesc idRef="30" propType="simple">
  10303.                             <SimpleValue valType="binary">060000000000000000000000000001006E632E657865</SimpleValue>
  10304.                         </PropertyDesc>
  10305.                     </PropertyDescList>
  10306.                 </Rule>
  10307.                 <Rule guid="{E831A743-5DFF-4C67-9500-21517A0CA08A}">
  10308.                     <ObjDescRef guidRef="{9A1EE9B9-146E-42CE-BCB3-EA6295954CF2}"/>
  10309.                     <AccessDescList>
  10310.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10311.                     </AccessDescList>
  10312.                     <PropertyDescList>
  10313.                         <PropertyDesc idRef="20" propType="simple">
  10314.                             <SimpleValue valType="int">4256</SimpleValue>
  10315.                         </PropertyDesc>
  10316.                         <PropertyDesc idRef="5" propType="objRef">
  10317.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10318.                         </PropertyDesc>
  10319.                         <PropertyDesc idRef="21" propType="simple">
  10320.                             <SimpleValue valType="str">WEB-MISC wsh attempt</SimpleValue>
  10321.                         </PropertyDesc>
  10322.                         <PropertyDesc idRef="30" propType="simple">
  10323.                             <SimpleValue valType="binary">070000000000000000000000000001007773682E657865</SimpleValue>
  10324.                         </PropertyDesc>
  10325.                     </PropertyDescList>
  10326.                 </Rule>
  10327.                 <Rule guid="{9759A1CC-9CCD-4717-A9EC-A96F40A9BF17}">
  10328.                     <ObjDescRef guidRef="{3BECF3A4-D68D-4195-B588-D6E25D4E1CDB}"/>
  10329.                     <AccessDescList>
  10330.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10331.                     </AccessDescList>
  10332.                     <PropertyDescList>
  10333.                         <PropertyDesc idRef="20" propType="simple">
  10334.                             <SimpleValue valType="int">4260</SimpleValue>
  10335.                         </PropertyDesc>
  10336.                         <PropertyDesc idRef="5" propType="objRef">
  10337.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10338.                         </PropertyDesc>
  10339.                         <PropertyDesc idRef="21" propType="simple">
  10340.                             <SimpleValue valType="str">WEB-MISC rcmd attempt</SimpleValue>
  10341.                         </PropertyDesc>
  10342.                         <PropertyDesc idRef="30" propType="simple">
  10343.                             <SimpleValue valType="binary">0800000000000000000000000000010072636D642E657865</SimpleValue>
  10344.                         </PropertyDesc>
  10345.                     </PropertyDescList>
  10346.                 </Rule>
  10347.                 <Rule guid="{BEB9F07C-D999-49C3-A20D-74B6654B8CA5}">
  10348.                     <ObjDescRef guidRef="{0413079F-6ED6-4C71-9931-66AD248A9DEF}"/>
  10349.                     <AccessDescList>
  10350.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10351.                     </AccessDescList>
  10352.                     <PropertyDescList>
  10353.                         <PropertyDesc idRef="20" propType="simple">
  10354.                             <SimpleValue valType="int">4264</SimpleValue>
  10355.                         </PropertyDesc>
  10356.                         <PropertyDesc idRef="5" propType="objRef">
  10357.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10358.                         </PropertyDesc>
  10359.                         <PropertyDesc idRef="21" propType="simple">
  10360.                             <SimpleValue valType="str">WEB-MISC telnet attempt</SimpleValue>
  10361.                         </PropertyDesc>
  10362.                         <PropertyDesc idRef="30" propType="simple">
  10363.                             <SimpleValue valType="binary">0A00000000000000000000000000010074656C6E65742E657865</SimpleValue>
  10364.                         </PropertyDesc>
  10365.                     </PropertyDescList>
  10366.                 </Rule>
  10367.                 <Rule guid="{03EA623D-1D7B-43C0-B8B5-EF8BEF956C57}">
  10368.                     <ObjDescRef guidRef="{386543E7-FEEF-48FD-A666-17FABFFCEF75}"/>
  10369.                     <AccessDescList>
  10370.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10371.                     </AccessDescList>
  10372.                     <PropertyDescList>
  10373.                         <PropertyDesc idRef="20" propType="simple">
  10374.                             <SimpleValue valType="int">4268</SimpleValue>
  10375.                         </PropertyDesc>
  10376.                         <PropertyDesc idRef="5" propType="objRef">
  10377.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10378.                         </PropertyDesc>
  10379.                         <PropertyDesc idRef="21" propType="simple">
  10380.                             <SimpleValue valType="str">WEB-MISC net attempt</SimpleValue>
  10381.                         </PropertyDesc>
  10382.                         <PropertyDesc idRef="30" propType="simple">
  10383.                             <SimpleValue valType="binary">070000000000000000000000000001006E65742E657865</SimpleValue>
  10384.                         </PropertyDesc>
  10385.                     </PropertyDescList>
  10386.                 </Rule>
  10387.                 <Rule guid="{8EEC884C-4E3C-41E5-ADFE-CB8FA49BEB14}">
  10388.                     <ObjDescRef guidRef="{BE4A3E35-F18C-4EA3-911E-7E256FA76EA6}"/>
  10389.                     <AccessDescList>
  10390.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10391.                     </AccessDescList>
  10392.                     <PropertyDescList>
  10393.                         <PropertyDesc idRef="20" propType="simple">
  10394.                             <SimpleValue valType="int">4272</SimpleValue>
  10395.                         </PropertyDesc>
  10396.                         <PropertyDesc idRef="5" propType="objRef">
  10397.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10398.                         </PropertyDesc>
  10399.                         <PropertyDesc idRef="21" propType="simple">
  10400.                             <SimpleValue valType="str">WEB-MISC tftp attempt</SimpleValue>
  10401.                         </PropertyDesc>
  10402.                         <PropertyDesc idRef="30" propType="simple">
  10403.                             <SimpleValue valType="binary">08000000000000000000000000000100746674702E657865</SimpleValue>
  10404.                         </PropertyDesc>
  10405.                     </PropertyDescList>
  10406.                 </Rule>
  10407.                 <Rule guid="{E66A9EBE-7BCC-49C5-A6FB-BD25B6CDFE00}">
  10408.                     <ObjDescRef guidRef="{79CD4B85-CA0C-4EE2-B906-8578A33671F8}"/>
  10409.                     <AccessDescList>
  10410.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10411.                     </AccessDescList>
  10412.                     <PropertyDescList>
  10413.                         <PropertyDesc idRef="20" propType="simple">
  10414.                             <SimpleValue valType="int">4276</SimpleValue>
  10415.                         </PropertyDesc>
  10416.                         <PropertyDesc idRef="5" propType="objRef">
  10417.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10418.                         </PropertyDesc>
  10419.                         <PropertyDesc idRef="21" propType="simple">
  10420.                             <SimpleValue valType="str">WEB-MISC regread attempt</SimpleValue>
  10421.                         </PropertyDesc>
  10422.                         <PropertyDesc idRef="30" propType="simple">
  10423.                             <SimpleValue valType="binary">0A00000000000000000000000000010078705F72656772656164</SimpleValue>
  10424.                         </PropertyDesc>
  10425.                     </PropertyDescList>
  10426.                 </Rule>
  10427.                 <Rule guid="{1875AF0F-28A2-4BB2-8019-D49719C9188F}">
  10428.                     <ObjDescRef guidRef="{D7B5D409-222D-426C-AF9A-9A0ACBCCDF6A}"/>
  10429.                     <AccessDescList>
  10430.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10431.                     </AccessDescList>
  10432.                     <PropertyDescList>
  10433.                         <PropertyDesc idRef="20" propType="simple">
  10434.                             <SimpleValue valType="int">4280</SimpleValue>
  10435.                         </PropertyDesc>
  10436.                         <PropertyDesc idRef="5" propType="objRef">
  10437.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10438.                         </PropertyDesc>
  10439.                         <PropertyDesc idRef="21" propType="simple">
  10440.                             <SimpleValue valType="str">WEB-MISC webdav search access</SimpleValue>
  10441.                         </PropertyDesc>
  10442.                         <PropertyDesc idRef="30" propType="simple">
  10443.                             <SimpleValue valType="binary">0700000000000000080000000000010053454152434820</SimpleValue>
  10444.                         </PropertyDesc>
  10445.                     </PropertyDescList>
  10446.                 </Rule>
  10447.                 <Rule guid="{55327982-4252-4856-B5B2-137DAC77A94F}">
  10448.                     <ObjDescRef guidRef="{54AC1361-F1C1-4B80-8C23-3E2455CE3543}"/>
  10449.                     <AccessDescList>
  10450.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10451.                     </AccessDescList>
  10452.                     <PropertyDescList>
  10453.                         <PropertyDesc idRef="20" propType="simple">
  10454.                             <SimpleValue valType="int">4284</SimpleValue>
  10455.                         </PropertyDesc>
  10456.                         <PropertyDesc idRef="5" propType="objRef">
  10457.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10458.                         </PropertyDesc>
  10459.                         <PropertyDesc idRef="21" propType="simple">
  10460.                             <SimpleValue valType="str">WEB-MISC .htpasswd access</SimpleValue>
  10461.                         </PropertyDesc>
  10462.                         <PropertyDesc idRef="30" propType="simple">
  10463.                             <SimpleValue valType="binary">090000000000000000000000000001002E6874706173737764</SimpleValue>
  10464.                         </PropertyDesc>
  10465.                     </PropertyDescList>
  10466.                 </Rule>
  10467.                 <Rule guid="{7C113348-54A4-4E90-95F3-9CED4925CB07}">
  10468.                     <ObjDescRef guidRef="{2B23B727-6EFD-4B41-ACFC-5A2F9787D025}"/>
  10469.                     <AccessDescList>
  10470.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10471.                     </AccessDescList>
  10472.                     <PropertyDescList>
  10473.                         <PropertyDesc idRef="20" propType="simple">
  10474.                             <SimpleValue valType="int">4288</SimpleValue>
  10475.                         </PropertyDesc>
  10476.                         <PropertyDesc idRef="5" propType="objRef">
  10477.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10478.                         </PropertyDesc>
  10479.                         <PropertyDesc idRef="21" propType="simple">
  10480.                             <SimpleValue valType="str">WEB-MISC Lotus Domino directory traversal</SimpleValue>
  10481.                         </PropertyDesc>
  10482.                         <PropertyDesc idRef="30" propType="simple">
  10483.                             <SimpleValue valType="binary">050000000000000000000000000100002E6E73662F</SimpleValue>
  10484.                         </PropertyDesc>
  10485.                         <PropertyDesc idRef="30" propType="simple">
  10486.                             <SimpleValue valType="binary">030000000000000000000000000101002E2E2F</SimpleValue>
  10487.                         </PropertyDesc>
  10488.                     </PropertyDescList>
  10489.                 </Rule>
  10490.                 <Rule guid="{019FEC35-B515-4AAB-9DF0-BFD3DBA1985C}">
  10491.                     <ObjDescRef guidRef="{51173E6A-F0EB-49AB-A5F1-870BCD405426}"/>
  10492.                     <AccessDescList>
  10493.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10494.                     </AccessDescList>
  10495.                     <PropertyDescList>
  10496.                         <PropertyDesc idRef="20" propType="simple">
  10497.                             <SimpleValue valType="int">4300</SimpleValue>
  10498.                         </PropertyDesc>
  10499.                         <PropertyDesc idRef="5" propType="objRef">
  10500.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10501.                         </PropertyDesc>
  10502.                         <PropertyDesc idRef="21" propType="simple">
  10503.                             <SimpleValue valType="str">WEB-MISC postinfo.asp access</SimpleValue>
  10504.                         </PropertyDesc>
  10505.                         <PropertyDesc idRef="30" propType="simple">
  10506.                             <SimpleValue valType="binary">150000000000000000000000000101002F736372697074732F706F7374696E666F2E617370</SimpleValue>
  10507.                         </PropertyDesc>
  10508.                     </PropertyDescList>
  10509.                 </Rule>
  10510.                 <Rule guid="{D3DB335F-A0E0-4A77-B680-A587705A645A}">
  10511.                     <ObjDescRef guidRef="{54FDEE3D-8A74-4197-A70D-4EBA269597FF}"/>
  10512.                     <AccessDescList>
  10513.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10514.                     </AccessDescList>
  10515.                     <PropertyDescList>
  10516.                         <PropertyDesc idRef="20" propType="simple">
  10517.                             <SimpleValue valType="int">4308</SimpleValue>
  10518.                         </PropertyDesc>
  10519.                         <PropertyDesc idRef="5" propType="objRef">
  10520.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10521.                         </PropertyDesc>
  10522.                         <PropertyDesc idRef="21" propType="simple">
  10523.                             <SimpleValue valType="str">WEB-MISC queryhit.htm access</SimpleValue>
  10524.                         </PropertyDesc>
  10525.                         <PropertyDesc idRef="30" propType="simple">
  10526.                             <SimpleValue valType="binary">1C0000000000000000000000000101002F73616D706C65732F7365617263682F71756572796869742E68746D</SimpleValue>
  10527.                         </PropertyDesc>
  10528.                     </PropertyDescList>
  10529.                 </Rule>
  10530.                 <Rule guid="{BB0F9E53-508D-4141-BDF1-539F65666C14}">
  10531.                     <ObjDescRef guidRef="{93328593-6240-4E41-A561-71F31967C2AC}"/>
  10532.                     <AccessDescList>
  10533.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10534.                     </AccessDescList>
  10535.                     <PropertyDescList>
  10536.                         <PropertyDesc idRef="20" propType="simple">
  10537.                             <SimpleValue valType="int">4312</SimpleValue>
  10538.                         </PropertyDesc>
  10539.                         <PropertyDesc idRef="5" propType="objRef">
  10540.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10541.                         </PropertyDesc>
  10542.                         <PropertyDesc idRef="21" propType="simple">
  10543.                             <SimpleValue valType="str">WEB-MISC counter.exe access</SimpleValue>
  10544.                         </PropertyDesc>
  10545.                         <PropertyDesc idRef="30" propType="simple">
  10546.                             <SimpleValue valType="binary">140000000000000000000000000101002F736372697074732F636F756E7465722E657865</SimpleValue>
  10547.                         </PropertyDesc>
  10548.                     </PropertyDescList>
  10549.                 </Rule>
  10550.                 <Rule guid="{7A7A4919-B830-4CFB-996F-8FFDB4321D46}">
  10551.                     <ObjDescRef guidRef="{5C4D531D-DBC8-4010-B739-AAC8E9574251}"/>
  10552.                     <AccessDescList>
  10553.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10554.                     </AccessDescList>
  10555.                     <PropertyDescList>
  10556.                         <PropertyDesc idRef="20" propType="simple">
  10557.                             <SimpleValue valType="int">4316</SimpleValue>
  10558.                         </PropertyDesc>
  10559.                         <PropertyDesc idRef="5" propType="objRef">
  10560.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10561.                         </PropertyDesc>
  10562.                         <PropertyDesc idRef="21" propType="simple">
  10563.                             <SimpleValue valType="str">WEB-MISC webdav propfind access</SimpleValue>
  10564.                         </PropertyDesc>
  10565.                         <PropertyDesc idRef="30" propType="simple">
  10566.                             <SimpleValue valType="binary">0C0000000000000000000000000001003C615C3A70726F7066696E64</SimpleValue>
  10567.                         </PropertyDesc>
  10568.                         <PropertyDesc idRef="30" propType="simple">
  10569.                             <SimpleValue valType="binary">0A000000000000000000000000000100786D6C6E735C3A613D5C</SimpleValue>
  10570.                         </PropertyDesc>
  10571.                     </PropertyDescList>
  10572.                 </Rule>
  10573.                 <Rule guid="{F7B3EC76-8E18-4DE6-8DD5-B52FF8DE85E5}">
  10574.                     <ObjDescRef guidRef="{74FC3A69-E8B6-4C89-9F88-EA17B1CD2361}"/>
  10575.                     <AccessDescList>
  10576.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10577.                     </AccessDescList>
  10578.                     <PropertyDescList>
  10579.                         <PropertyDesc idRef="20" propType="simple">
  10580.                             <SimpleValue valType="int">4320</SimpleValue>
  10581.                         </PropertyDesc>
  10582.                         <PropertyDesc idRef="5" propType="objRef">
  10583.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10584.                         </PropertyDesc>
  10585.                         <PropertyDesc idRef="21" propType="simple">
  10586.                             <SimpleValue valType="str">WEB-MISC unify eWave ServletExec upload</SimpleValue>
  10587.                         </PropertyDesc>
  10588.                         <PropertyDesc idRef="30" propType="simple">
  10589.                             <SimpleValue valType="binary">2C0000000000000000000000000101002F736572766C65742F636F6D2E756E6966792E736572766C6574657865632E55706C6F6164536572766C6574</SimpleValue>
  10590.                         </PropertyDesc>
  10591.                     </PropertyDescList>
  10592.                 </Rule>
  10593.                 <Rule guid="{EF77FE97-9730-440E-A817-0D860CF4DA24}">
  10594.                     <ObjDescRef guidRef="{3515DCB1-934B-4558-8E12-973AF1EBBC39}"/>
  10595.                     <AccessDescList>
  10596.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10597.                     </AccessDescList>
  10598.                     <PropertyDescList>
  10599.                         <PropertyDesc idRef="20" propType="simple">
  10600.                             <SimpleValue valType="int">4324</SimpleValue>
  10601.                         </PropertyDesc>
  10602.                         <PropertyDesc idRef="5" propType="objRef">
  10603.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10604.                         </PropertyDesc>
  10605.                         <PropertyDesc idRef="21" propType="simple">
  10606.                             <SimpleValue valType="str">WEB-MISC netscape servers suite DOS</SimpleValue>
  10607.                         </PropertyDesc>
  10608.                         <PropertyDesc idRef="30" propType="simple">
  10609.                             <SimpleValue valType="binary">190000000000000000000000000101002F647367772F62696E2F7365617263683F636F6E746578743D</SimpleValue>
  10610.                         </PropertyDesc>
  10611.                     </PropertyDescList>
  10612.                 </Rule>
  10613.                 <Rule guid="{2B24F1DA-435B-48FE-88D9-14D0FD8DCE68}">
  10614.                     <ObjDescRef guidRef="{99966068-5F9C-4493-8852-7490E0757D73}"/>
  10615.                     <AccessDescList>
  10616.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10617.                     </AccessDescList>
  10618.                     <PropertyDescList>
  10619.                         <PropertyDesc idRef="20" propType="simple">
  10620.                             <SimpleValue valType="int">4328</SimpleValue>
  10621.                         </PropertyDesc>
  10622.                         <PropertyDesc idRef="5" propType="objRef">
  10623.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10624.                         </PropertyDesc>
  10625.                         <PropertyDesc idRef="21" propType="simple">
  10626.                             <SimpleValue valType="str">WEB-MISC amazon 1-click cookie theft</SimpleValue>
  10627.                         </PropertyDesc>
  10628.                         <PropertyDesc idRef="30" propType="simple">
  10629.                             <SimpleValue valType="binary">270000000000000000000000000001007265662533437363726970742532306C616E67756167652533442532324A617661736372697074</SimpleValue>
  10630.                         </PropertyDesc>
  10631.                     </PropertyDescList>
  10632.                 </Rule>
  10633.                 <Rule guid="{E2FEC445-F847-4793-92FA-1603ABAC847F}">
  10634.                     <ObjDescRef guidRef="{E011AA16-1CBB-4A88-A738-D45FA6C48ED4}"/>
  10635.                     <AccessDescList>
  10636.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10637.                     </AccessDescList>
  10638.                     <PropertyDescList>
  10639.                         <PropertyDesc idRef="20" propType="simple">
  10640.                             <SimpleValue valType="int">4332</SimpleValue>
  10641.                         </PropertyDesc>
  10642.                         <PropertyDesc idRef="5" propType="objRef">
  10643.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10644.                         </PropertyDesc>
  10645.                         <PropertyDesc idRef="21" propType="simple">
  10646.                             <SimpleValue valType="str">WEB-MISC unify eWave ServletExec DOS</SimpleValue>
  10647.                         </PropertyDesc>
  10648.                         <PropertyDesc idRef="30" propType="simple">
  10649.                             <SimpleValue valType="binary">140000000000000000000000000100002F736572766C65742F536572766C657445786563</SimpleValue>
  10650.                         </PropertyDesc>
  10651.                     </PropertyDescList>
  10652.                 </Rule>
  10653.                 <Rule guid="{9EB24ECE-E486-4FE8-AC2A-C2ECF3A9A685}">
  10654.                     <ObjDescRef guidRef="{0F8C9FA6-B9EB-47D2-BAD7-A93C7C171A13}"/>
  10655.                     <AccessDescList>
  10656.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10657.                     </AccessDescList>
  10658.                     <PropertyDescList>
  10659.                         <PropertyDesc idRef="20" propType="simple">
  10660.                             <SimpleValue valType="int">4336</SimpleValue>
  10661.                         </PropertyDesc>
  10662.                         <PropertyDesc idRef="5" propType="objRef">
  10663.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10664.                         </PropertyDesc>
  10665.                         <PropertyDesc idRef="21" propType="simple">
  10666.                             <SimpleValue valType="str">WEB-MISC Allaire JRUN DOS attempt</SimpleValue>
  10667.                         </PropertyDesc>
  10668.                         <PropertyDesc idRef="30" propType="simple">
  10669.                             <SimpleValue valType="binary">0F000000000000000000000000000100736572766C65742F2E2E2E2E2E2E2E</SimpleValue>
  10670.                         </PropertyDesc>
  10671.                     </PropertyDescList>
  10672.                 </Rule>
  10673.                 <Rule guid="{F4C3467F-B21A-4F33-944F-1F6E7EEC83DA}">
  10674.                     <ObjDescRef guidRef="{2D95EE10-A068-4FBE-8A9F-6DD09BB37300}"/>
  10675.                     <AccessDescList>
  10676.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10677.                     </AccessDescList>
  10678.                     <PropertyDescList>
  10679.                         <PropertyDesc idRef="20" propType="simple">
  10680.                             <SimpleValue valType="int">4340</SimpleValue>
  10681.                         </PropertyDesc>
  10682.                         <PropertyDesc idRef="5" propType="objRef">
  10683.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10684.                         </PropertyDesc>
  10685.                         <PropertyDesc idRef="21" propType="simple">
  10686.                             <SimpleValue valType="str">WEB-MISC PHP strings overflow</SimpleValue>
  10687.                         </PropertyDesc>
  10688.                         <PropertyDesc idRef="30" propType="simple">
  10689.                             <SimpleValue valType="binary">0E000000000000000000000000000000BA49FEFFFFF7D2B9BFFFFFFFF7D1</SimpleValue>
  10690.                         </PropertyDesc>
  10691.                     </PropertyDescList>
  10692.                 </Rule>
  10693.                 <Rule guid="{80E4A07A-A8CE-4E5F-80E6-6E020638745F}">
  10694.                     <ObjDescRef guidRef="{8B2FAE17-CB73-4E2D-97B9-0C14886E61CE}"/>
  10695.                     <AccessDescList>
  10696.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10697.                     </AccessDescList>
  10698.                     <PropertyDescList>
  10699.                         <PropertyDesc idRef="20" propType="simple">
  10700.                             <SimpleValue valType="int">4344</SimpleValue>
  10701.                         </PropertyDesc>
  10702.                         <PropertyDesc idRef="5" propType="objRef">
  10703.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10704.                         </PropertyDesc>
  10705.                         <PropertyDesc idRef="21" propType="simple">
  10706.                             <SimpleValue valType="str">WEB-MISC PHP strings overflow</SimpleValue>
  10707.                         </PropertyDesc>
  10708.                         <PropertyDesc idRef="30" propType="simple">
  10709.                             <SimpleValue valType="binary">0A0000000000000000000000000000003F535452454E47555220</SimpleValue>
  10710.                         </PropertyDesc>
  10711.                     </PropertyDescList>
  10712.                 </Rule>
  10713.                 <Rule guid="{51E06C2A-B141-423D-9734-CA94D4E4F765}">
  10714.                     <ObjDescRef guidRef="{5F13D1F8-AC7F-4143-8929-E55D4A6F3C5B}"/>
  10715.                     <AccessDescList>
  10716.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10717.                     </AccessDescList>
  10718.                     <PropertyDescList>
  10719.                         <PropertyDesc idRef="20" propType="simple">
  10720.                             <SimpleValue valType="int">4348</SimpleValue>
  10721.                         </PropertyDesc>
  10722.                         <PropertyDesc idRef="5" propType="objRef">
  10723.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10724.                         </PropertyDesc>
  10725.                         <PropertyDesc idRef="21" propType="simple">
  10726.                             <SimpleValue valType="str">WEB-MISC whisker tab splice attack</SimpleValue>
  10727.                         </PropertyDesc>
  10728.                         <PropertyDesc idRef="29" propType="simple">
  10729.                             <SimpleValue valType="int" valRelation="&lt;">5</SimpleValue>
  10730.                         </PropertyDesc>
  10731.                         <PropertyDesc idRef="30" propType="simple">
  10732.                             <SimpleValue valType="binary">0100000000000000000000000000000009</SimpleValue>
  10733.                         </PropertyDesc>
  10734.                     </PropertyDescList>
  10735.                 </Rule>
  10736.                 <Rule guid="{739BC916-32CB-4FFA-B631-26CE89B6B1E3}">
  10737.                     <ObjDescRef guidRef="{A907F836-5E8D-4D9D-A85F-3AFF26F9B8D6}"/>
  10738.                     <AccessDescList>
  10739.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10740.                     </AccessDescList>
  10741.                     <PropertyDescList>
  10742.                         <PropertyDesc idRef="20" propType="simple">
  10743.                             <SimpleValue valType="int">4364</SimpleValue>
  10744.                         </PropertyDesc>
  10745.                         <PropertyDesc idRef="5" propType="objRef">
  10746.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10747.                         </PropertyDesc>
  10748.                         <PropertyDesc idRef="21" propType="simple">
  10749.                             <SimpleValue valType="str">WEB-MISC ICQ Webfront HTTP DOS</SimpleValue>
  10750.                         </PropertyDesc>
  10751.                         <PropertyDesc idRef="30" propType="simple">
  10752.                             <SimpleValue valType="binary">0A0000000000000000000000000100003F3F3F3F3F3F3F3F3F3F</SimpleValue>
  10753.                         </PropertyDesc>
  10754.                     </PropertyDescList>
  10755.                 </Rule>
  10756.                 <Rule guid="{48D1F302-FC50-43A3-93FF-91E860866C5C}">
  10757.                     <ObjDescRef guidRef="{2D84726E-8A05-4811-9DB7-6F90B1FFFAB5}"/>
  10758.                     <AccessDescList>
  10759.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10760.                     </AccessDescList>
  10761.                     <PropertyDescList>
  10762.                         <PropertyDesc idRef="20" propType="simple">
  10763.                             <SimpleValue valType="int">4380</SimpleValue>
  10764.                         </PropertyDesc>
  10765.                         <PropertyDesc idRef="5" propType="objRef">
  10766.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10767.                         </PropertyDesc>
  10768.                         <PropertyDesc idRef="21" propType="simple">
  10769.                             <SimpleValue valType="str">WEB-MISC Talentsoft Web+ Source Code view access</SimpleValue>
  10770.                         </PropertyDesc>
  10771.                         <PropertyDesc idRef="30" propType="simple">
  10772.                             <SimpleValue valType="binary">1C0000000000000000000000000100002F776562706C75732E6578653F7363726970743D746573742E776D6C</SimpleValue>
  10773.                         </PropertyDesc>
  10774.                     </PropertyDescList>
  10775.                 </Rule>
  10776.                 <Rule guid="{E1F6EB40-BC06-436F-A19D-A8910D082DA0}">
  10777.                     <ObjDescRef guidRef="{0455636C-8B80-44C6-811E-68D9E3873551}"/>
  10778.                     <AccessDescList>
  10779.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10780.                     </AccessDescList>
  10781.                     <PropertyDescList>
  10782.                         <PropertyDesc idRef="20" propType="simple">
  10783.                             <SimpleValue valType="int">4384</SimpleValue>
  10784.                         </PropertyDesc>
  10785.                         <PropertyDesc idRef="5" propType="objRef">
  10786.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10787.                         </PropertyDesc>
  10788.                         <PropertyDesc idRef="21" propType="simple">
  10789.                             <SimpleValue valType="str">WEB-MISC Talentsoft Web+ internal IP Address access</SimpleValue>
  10790.                         </PropertyDesc>
  10791.                         <PropertyDesc idRef="30" propType="simple">
  10792.                             <SimpleValue valType="binary">120000000000000000000000000100002F776562706C75732E6578653F61626F7574</SimpleValue>
  10793.                         </PropertyDesc>
  10794.                     </PropertyDescList>
  10795.                 </Rule>
  10796.                 <Rule guid="{885F40EE-9D01-4833-807F-8DF8DE387652}">
  10797.                     <ObjDescRef guidRef="{86F4472A-DF5B-4375-8E43-D81034BB3D17}"/>
  10798.                     <AccessDescList>
  10799.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10800.                     </AccessDescList>
  10801.                     <PropertyDescList>
  10802.                         <PropertyDesc idRef="20" propType="simple">
  10803.                             <SimpleValue valType="int">4392</SimpleValue>
  10804.                         </PropertyDesc>
  10805.                         <PropertyDesc idRef="5" propType="objRef">
  10806.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10807.                         </PropertyDesc>
  10808.                         <PropertyDesc idRef="21" propType="simple">
  10809.                             <SimpleValue valType="str">WEB-MISC SmartWin CyberOffice Shopping Cart access</SimpleValue>
  10810.                         </PropertyDesc>
  10811.                         <PropertyDesc idRef="30" propType="simple">
  10812.                             <SimpleValue valType="binary">1A0000000000000000000000000100005F707269766174652F73686F7070696E675F636172742E6D6462</SimpleValue>
  10813.                         </PropertyDesc>
  10814.                     </PropertyDescList>
  10815.                 </Rule>
  10816.                 <Rule guid="{674F5146-1B48-4F09-96BF-3B0EC913574A}">
  10817.                     <ObjDescRef guidRef="{A1097F43-9839-431F-9461-119A5AC8BC50}"/>
  10818.                     <AccessDescList>
  10819.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10820.                     </AccessDescList>
  10821.                     <PropertyDescList>
  10822.                         <PropertyDesc idRef="20" propType="simple">
  10823.                             <SimpleValue valType="int">4396</SimpleValue>
  10824.                         </PropertyDesc>
  10825.                         <PropertyDesc idRef="5" propType="objRef">
  10826.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10827.                         </PropertyDesc>
  10828.                         <PropertyDesc idRef="21" propType="simple">
  10829.                             <SimpleValue valType="str">WEB-MISC cybercop scan</SimpleValue>
  10830.                         </PropertyDesc>
  10831.                         <PropertyDesc idRef="30" propType="simple">
  10832.                             <SimpleValue valType="binary">090000000000000000000000000101002F6379626572636F70</SimpleValue>
  10833.                         </PropertyDesc>
  10834.                     </PropertyDescList>
  10835.                 </Rule>
  10836.                 <Rule guid="{62F618CE-6E5C-4F60-85C0-22927D36849B}">
  10837.                     <ObjDescRef guidRef="{22A4ECD6-76F0-4A54-A959-514BD44A3DEA}"/>
  10838.                     <AccessDescList>
  10839.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10840.                     </AccessDescList>
  10841.                     <PropertyDescList>
  10842.                         <PropertyDesc idRef="20" propType="simple">
  10843.                             <SimpleValue valType="int">4400</SimpleValue>
  10844.                         </PropertyDesc>
  10845.                         <PropertyDesc idRef="5" propType="objRef">
  10846.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10847.                         </PropertyDesc>
  10848.                         <PropertyDesc idRef="21" propType="simple">
  10849.                             <SimpleValue valType="str">WEB-MISC L3retriever HTTP Probe</SimpleValue>
  10850.                         </PropertyDesc>
  10851.                         <PropertyDesc idRef="30" propType="simple">
  10852.                             <SimpleValue valType="binary">17000000000000000000000000000000557365722D4167656E743A204A617661312E322E310D0A</SimpleValue>
  10853.                         </PropertyDesc>
  10854.                     </PropertyDescList>
  10855.                 </Rule>
  10856.                 <Rule guid="{E5552C6A-F89C-4ED4-94FE-0F9273F6F82F}">
  10857.                     <ObjDescRef guidRef="{8B6475A0-AB25-4A16-9241-FE29B544FFBB}"/>
  10858.                     <AccessDescList>
  10859.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10860.                     </AccessDescList>
  10861.                     <PropertyDescList>
  10862.                         <PropertyDesc idRef="20" propType="simple">
  10863.                             <SimpleValue valType="int">4404</SimpleValue>
  10864.                         </PropertyDesc>
  10865.                         <PropertyDesc idRef="5" propType="objRef">
  10866.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10867.                         </PropertyDesc>
  10868.                         <PropertyDesc idRef="21" propType="simple">
  10869.                             <SimpleValue valType="str">WEB-MISC Webtrends HTTP probe</SimpleValue>
  10870.                         </PropertyDesc>
  10871.                         <PropertyDesc idRef="30" propType="simple">
  10872.                             <SimpleValue valType="binary">29000000000000000000000000000000557365722D4167656E743A205765627472656E647320536563757269747920416E616C797A65720D0A</SimpleValue>
  10873.                         </PropertyDesc>
  10874.                     </PropertyDescList>
  10875.                 </Rule>
  10876.                 <Rule guid="{56D9072C-4C82-4B5B-9B41-49E4F1DFEB84}">
  10877.                     <ObjDescRef guidRef="{24B40BED-B556-4616-B51E-5CA051CD3E76}"/>
  10878.                     <AccessDescList>
  10879.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10880.                     </AccessDescList>
  10881.                     <PropertyDescList>
  10882.                         <PropertyDesc idRef="20" propType="simple">
  10883.                             <SimpleValue valType="int">4408</SimpleValue>
  10884.                         </PropertyDesc>
  10885.                         <PropertyDesc idRef="5" propType="objRef">
  10886.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10887.                         </PropertyDesc>
  10888.                         <PropertyDesc idRef="21" propType="simple">
  10889.                             <SimpleValue valType="str">WEB-MISC Nessus 404 probe</SimpleValue>
  10890.                         </PropertyDesc>
  10891.                         <PropertyDesc idRef="30" propType="simple">
  10892.                             <SimpleValue valType="binary">170000000000000020000000000100002F6E65737375735F69735F70726F62696E675F796F755F</SimpleValue>
  10893.                         </PropertyDesc>
  10894.                     </PropertyDescList>
  10895.                 </Rule>
  10896.                 <Rule guid="{DBD0C4FE-51ED-4823-8F87-9B7472F12A82}">
  10897.                     <ObjDescRef guidRef="{DD0FED3F-D739-440B-81F6-256D6AB3EF58}"/>
  10898.                     <AccessDescList>
  10899.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10900.                     </AccessDescList>
  10901.                     <PropertyDescList>
  10902.                         <PropertyDesc idRef="20" propType="simple">
  10903.                             <SimpleValue valType="int">4412</SimpleValue>
  10904.                         </PropertyDesc>
  10905.                         <PropertyDesc idRef="5" propType="objRef">
  10906.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10907.                         </PropertyDesc>
  10908.                         <PropertyDesc idRef="21" propType="simple">
  10909.                             <SimpleValue valType="str">WEB-MISC netscape admin passwd</SimpleValue>
  10910.                         </PropertyDesc>
  10911.                         <PropertyDesc idRef="30" propType="simple">
  10912.                             <SimpleValue valType="binary">180000000000000000000000000101002F61646D696E2D736572762F636F6E6669672F61646D7077</SimpleValue>
  10913.                         </PropertyDesc>
  10914.                     </PropertyDescList>
  10915.                 </Rule>
  10916.                 <Rule guid="{B10B196C-43D8-467F-A550-F42029E023EB}">
  10917.                     <ObjDescRef guidRef="{B0313D9D-3FB9-4DC5-A970-53C549B191AC}"/>
  10918.                     <AccessDescList>
  10919.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10920.                     </AccessDescList>
  10921.                     <PropertyDescList>
  10922.                         <PropertyDesc idRef="20" propType="simple">
  10923.                             <SimpleValue valType="int">4416</SimpleValue>
  10924.                         </PropertyDesc>
  10925.                         <PropertyDesc idRef="5" propType="objRef">
  10926.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10927.                         </PropertyDesc>
  10928.                         <PropertyDesc idRef="21" propType="simple">
  10929.                             <SimpleValue valType="str">WEB-MISC whisker space splice attack</SimpleValue>
  10930.                         </PropertyDesc>
  10931.                         <PropertyDesc idRef="30" propType="simple">
  10932.                             <SimpleValue valType="binary">0100000000000000000000000000000020</SimpleValue>
  10933.                         </PropertyDesc>
  10934.                         <PropertyDesc idRef="29" propType="simple">
  10935.                             <SimpleValue valType="int" valRelation="==">1</SimpleValue>
  10936.                         </PropertyDesc>
  10937.                     </PropertyDescList>
  10938.                 </Rule>
  10939.                 <Rule guid="{D4D36606-2C4E-4F54-A26D-08AEEE190DD5}">
  10940.                     <ObjDescRef guidRef="{E2E8E94C-E2EE-4D3C-8894-6A5A520111C0}"/>
  10941.                     <AccessDescList>
  10942.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10943.                     </AccessDescList>
  10944.                     <PropertyDescList>
  10945.                         <PropertyDesc idRef="20" propType="simple">
  10946.                             <SimpleValue valType="int">4420</SimpleValue>
  10947.                         </PropertyDesc>
  10948.                         <PropertyDesc idRef="5" propType="objRef">
  10949.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10950.                         </PropertyDesc>
  10951.                         <PropertyDesc idRef="21" propType="simple">
  10952.                             <SimpleValue valType="str">WEB-MISC BigBrother access</SimpleValue>
  10953.                         </PropertyDesc>
  10954.                         <PropertyDesc idRef="30" propType="simple">
  10955.                             <SimpleValue valType="binary">160000000000000000000000000101002F62622D686F73747376632E73683F484F5354535643</SimpleValue>
  10956.                         </PropertyDesc>
  10957.                     </PropertyDescList>
  10958.                 </Rule>
  10959.                 <Rule guid="{3A5E37B7-90F3-436F-BA6A-6386933C71FE}">
  10960.                     <ObjDescRef guidRef="{ADA70936-CE98-40B3-881B-3A1B98A22340}"/>
  10961.                     <AccessDescList>
  10962.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10963.                     </AccessDescList>
  10964.                     <PropertyDescList>
  10965.                         <PropertyDesc idRef="20" propType="simple">
  10966.                             <SimpleValue valType="int">4428</SimpleValue>
  10967.                         </PropertyDesc>
  10968.                         <PropertyDesc idRef="5" propType="objRef">
  10969.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10970.                         </PropertyDesc>
  10971.                         <PropertyDesc idRef="21" propType="simple">
  10972.                             <SimpleValue valType="str">WEB-MISC ftp.pl access</SimpleValue>
  10973.                         </PropertyDesc>
  10974.                         <PropertyDesc idRef="30" propType="simple">
  10975.                             <SimpleValue valType="binary">070000000000000000000000000101002F6674702E706C</SimpleValue>
  10976.                         </PropertyDesc>
  10977.                     </PropertyDescList>
  10978.                 </Rule>
  10979.                 <Rule guid="{8A67CA73-7D48-48E5-88C4-9F4088334A3D}">
  10980.                     <ObjDescRef guidRef="{7E9D28D9-0970-43D6-8D3E-D2CC6EFE012D}"/>
  10981.                     <AccessDescList>
  10982.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  10983.                     </AccessDescList>
  10984.                     <PropertyDescList>
  10985.                         <PropertyDesc idRef="20" propType="simple">
  10986.                             <SimpleValue valType="int">4432</SimpleValue>
  10987.                         </PropertyDesc>
  10988.                         <PropertyDesc idRef="5" propType="objRef">
  10989.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  10990.                         </PropertyDesc>
  10991.                         <PropertyDesc idRef="21" propType="simple">
  10992.                             <SimpleValue valType="str">WEB-MISC tomcat server snoop access</SimpleValue>
  10993.                         </PropertyDesc>
  10994.                         <PropertyDesc idRef="30" propType="simple">
  10995.                             <SimpleValue valType="binary">0E0000000000000000000000000100012F6A73702F736E702F2A2E736E70</SimpleValue>
  10996.                         </PropertyDesc>
  10997.                     </PropertyDescList>
  10998.                 </Rule>
  10999.                 <Rule guid="{2F989DCA-6751-4C11-9D0C-7F30C191073E}">
  11000.                     <ObjDescRef guidRef="{CEDA42BA-D6A0-4FF9-9C84-EE68B98D26B3}"/>
  11001.                     <AccessDescList>
  11002.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11003.                     </AccessDescList>
  11004.                     <PropertyDescList>
  11005.                         <PropertyDesc idRef="20" propType="simple">
  11006.                             <SimpleValue valType="int">4436</SimpleValue>
  11007.                         </PropertyDesc>
  11008.                         <PropertyDesc idRef="5" propType="objRef">
  11009.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11010.                         </PropertyDesc>
  11011.                         <PropertyDesc idRef="21" propType="simple">
  11012.                             <SimpleValue valType="str">WEB-MISC ROXEN directory list attempt</SimpleValue>
  11013.                         </PropertyDesc>
  11014.                         <PropertyDesc idRef="30" propType="simple">
  11015.                             <SimpleValue valType="binary">040000000000000000000000000100002F253030</SimpleValue>
  11016.                         </PropertyDesc>
  11017.                     </PropertyDescList>
  11018.                 </Rule>
  11019.                 <Rule guid="{DDD0E925-A04E-489F-8548-1D2C327BF79E}">
  11020.                     <ObjDescRef guidRef="{47E650A3-72D8-4504-A79D-C58D7F13ED3D}"/>
  11021.                     <AccessDescList>
  11022.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11023.                     </AccessDescList>
  11024.                     <PropertyDescList>
  11025.                         <PropertyDesc idRef="20" propType="simple">
  11026.                             <SimpleValue valType="int">4440</SimpleValue>
  11027.                         </PropertyDesc>
  11028.                         <PropertyDesc idRef="5" propType="objRef">
  11029.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11030.                         </PropertyDesc>
  11031.                         <PropertyDesc idRef="21" propType="simple">
  11032.                             <SimpleValue valType="str">WEB-MISC apache source.asp file access</SimpleValue>
  11033.                         </PropertyDesc>
  11034.                         <PropertyDesc idRef="30" propType="simple">
  11035.                             <SimpleValue valType="binary">130000000000000000000000000101002F736974652F65672F736F757263652E617370</SimpleValue>
  11036.                         </PropertyDesc>
  11037.                     </PropertyDescList>
  11038.                 </Rule>
  11039.                 <Rule guid="{5E7757D2-368E-4797-AE91-8F771B39DD69}">
  11040.                     <ObjDescRef guidRef="{510672AE-B21A-43B8-8848-8C260F885990}"/>
  11041.                     <AccessDescList>
  11042.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11043.                     </AccessDescList>
  11044.                     <PropertyDescList>
  11045.                         <PropertyDesc idRef="20" propType="simple">
  11046.                             <SimpleValue valType="int">4444</SimpleValue>
  11047.                         </PropertyDesc>
  11048.                         <PropertyDesc idRef="5" propType="objRef">
  11049.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11050.                         </PropertyDesc>
  11051.                         <PropertyDesc idRef="21" propType="simple">
  11052.                             <SimpleValue valType="str">WEB-MISC tomcat server exploit access</SimpleValue>
  11053.                         </PropertyDesc>
  11054.                         <PropertyDesc idRef="30" propType="simple">
  11055.                             <SimpleValue valType="binary">1F0000000000000000000000000101002F636F6E7465787441646D696E2F636F6E7465787441646D696E2E68746D6C</SimpleValue>
  11056.                         </PropertyDesc>
  11057.                     </PropertyDescList>
  11058.                 </Rule>
  11059.                 <Rule guid="{4EDB923D-E66D-4353-887E-6F71740C691C}">
  11060.                     <ObjDescRef guidRef="{E5B2DCFF-320B-4B90-9E42-660692133890}"/>
  11061.                     <AccessDescList>
  11062.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11063.                     </AccessDescList>
  11064.                     <PropertyDescList>
  11065.                         <PropertyDesc idRef="20" propType="simple">
  11066.                             <SimpleValue valType="int">4448</SimpleValue>
  11067.                         </PropertyDesc>
  11068.                         <PropertyDesc idRef="5" propType="objRef">
  11069.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11070.                         </PropertyDesc>
  11071.                         <PropertyDesc idRef="21" propType="simple">
  11072.                             <SimpleValue valType="str">WEB-MISC http directory traversal</SimpleValue>
  11073.                         </PropertyDesc>
  11074.                         <PropertyDesc idRef="30" propType="simple">
  11075.                             <SimpleValue valType="binary">040000000000000000000000000000002E2E5C5C</SimpleValue>
  11076.                         </PropertyDesc>
  11077.                     </PropertyDescList>
  11078.                 </Rule>
  11079.                 <Rule guid="{2A1C75BF-8DAE-4DDA-92BC-E54FCCF09843}">
  11080.                     <ObjDescRef guidRef="{40D5B263-DB22-4F74-913E-CDE5A5C08DDD}"/>
  11081.                     <AccessDescList>
  11082.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11083.                     </AccessDescList>
  11084.                     <PropertyDescList>
  11085.                         <PropertyDesc idRef="20" propType="simple">
  11086.                             <SimpleValue valType="int">4452</SimpleValue>
  11087.                         </PropertyDesc>
  11088.                         <PropertyDesc idRef="5" propType="objRef">
  11089.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11090.                         </PropertyDesc>
  11091.                         <PropertyDesc idRef="21" propType="simple">
  11092.                             <SimpleValue valType="str">WEB-MISC http directory traversal</SimpleValue>
  11093.                         </PropertyDesc>
  11094.                         <PropertyDesc idRef="30" propType="simple">
  11095.                             <SimpleValue valType="binary">030000000000000000000000000000002E2E2F</SimpleValue>
  11096.                         </PropertyDesc>
  11097.                     </PropertyDescList>
  11098.                 </Rule>
  11099.                 <Rule guid="{0D7D7CBF-0851-4119-8282-2285BD22E12A}">
  11100.                     <ObjDescRef guidRef="{1FD60E52-5DC4-4532-92BA-BA505333C19D}"/>
  11101.                     <AccessDescList>
  11102.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11103.                     </AccessDescList>
  11104.                     <PropertyDescList>
  11105.                         <PropertyDesc idRef="20" propType="simple">
  11106.                             <SimpleValue valType="int">4460</SimpleValue>
  11107.                         </PropertyDesc>
  11108.                         <PropertyDesc idRef="5" propType="objRef">
  11109.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11110.                         </PropertyDesc>
  11111.                         <PropertyDesc idRef="21" propType="simple">
  11112.                             <SimpleValue valType="str">WEB-MISC ICQ webserver DOS</SimpleValue>
  11113.                         </PropertyDesc>
  11114.                         <PropertyDesc idRef="30" propType="simple">
  11115.                             <SimpleValue valType="binary">0C0000000000000000000000000101002E68746D6C2F2E2E2E2E2E2E</SimpleValue>
  11116.                         </PropertyDesc>
  11117.                     </PropertyDescList>
  11118.                 </Rule>
  11119.                 <Rule guid="{C71CE25E-2021-46F9-AA9C-D6510FC52D4B}">
  11120.                     <ObjDescRef guidRef="{00B56C32-B635-4C82-B9E7-23F00629C74A}"/>
  11121.                     <AccessDescList>
  11122.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11123.                     </AccessDescList>
  11124.                     <PropertyDescList>
  11125.                         <PropertyDesc idRef="20" propType="simple">
  11126.                             <SimpleValue valType="int">4464</SimpleValue>
  11127.                         </PropertyDesc>
  11128.                         <PropertyDesc idRef="5" propType="objRef">
  11129.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11130.                         </PropertyDesc>
  11131.                         <PropertyDesc idRef="21" propType="simple">
  11132.                             <SimpleValue valType="str">WEB-MISC Lotus DelDoc attempt</SimpleValue>
  11133.                         </PropertyDesc>
  11134.                         <PropertyDesc idRef="30" propType="simple">
  11135.                             <SimpleValue valType="binary">0F0000000000000000000000000101003F44656C657465446F63756D656E74</SimpleValue>
  11136.                         </PropertyDesc>
  11137.                     </PropertyDescList>
  11138.                 </Rule>
  11139.                 <Rule guid="{C7FC0964-B026-4B26-BCE6-6A0F64FAFD6E}">
  11140.                     <ObjDescRef guidRef="{946329CB-3AA1-43DE-A8CF-5FE093454CF3}"/>
  11141.                     <AccessDescList>
  11142.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11143.                     </AccessDescList>
  11144.                     <PropertyDescList>
  11145.                         <PropertyDesc idRef="20" propType="simple">
  11146.                             <SimpleValue valType="int">4468</SimpleValue>
  11147.                         </PropertyDesc>
  11148.                         <PropertyDesc idRef="5" propType="objRef">
  11149.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11150.                         </PropertyDesc>
  11151.                         <PropertyDesc idRef="21" propType="simple">
  11152.                             <SimpleValue valType="str">WEB-MISC Lotus EditDoc attempt</SimpleValue>
  11153.                         </PropertyDesc>
  11154.                         <PropertyDesc idRef="30" propType="simple">
  11155.                             <SimpleValue valType="binary">0D0000000000000000000000000101003F45646974446F63756D656E74</SimpleValue>
  11156.                         </PropertyDesc>
  11157.                     </PropertyDescList>
  11158.                 </Rule>
  11159.                 <Rule guid="{E97898B3-79AD-4CA8-83F3-107C1428551A}">
  11160.                     <ObjDescRef guidRef="{40519616-0C8E-48CA-B70E-D732360E04BA}"/>
  11161.                     <AccessDescList>
  11162.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11163.                     </AccessDescList>
  11164.                     <PropertyDescList>
  11165.                         <PropertyDesc idRef="20" propType="simple">
  11166.                             <SimpleValue valType="int">4472</SimpleValue>
  11167.                         </PropertyDesc>
  11168.                         <PropertyDesc idRef="5" propType="objRef">
  11169.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11170.                         </PropertyDesc>
  11171.                         <PropertyDesc idRef="21" propType="simple">
  11172.                             <SimpleValue valType="str">WEB-MISC ls%20-l</SimpleValue>
  11173.                         </PropertyDesc>
  11174.                         <PropertyDesc idRef="30" propType="simple">
  11175.                             <SimpleValue valType="binary">070000000000000000000000000001006C732532302D6C</SimpleValue>
  11176.                         </PropertyDesc>
  11177.                     </PropertyDescList>
  11178.                 </Rule>
  11179.                 <Rule guid="{43DD5AA9-8D5D-43B5-8410-672DDF1B5CDA}">
  11180.                     <ObjDescRef guidRef="{22527548-8200-4D84-AC38-074B791CFDCA}"/>
  11181.                     <AccessDescList>
  11182.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11183.                     </AccessDescList>
  11184.                     <PropertyDescList>
  11185.                         <PropertyDesc idRef="20" propType="simple">
  11186.                             <SimpleValue valType="int">4476</SimpleValue>
  11187.                         </PropertyDesc>
  11188.                         <PropertyDesc idRef="5" propType="objRef">
  11189.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11190.                         </PropertyDesc>
  11191.                         <PropertyDesc idRef="21" propType="simple">
  11192.                             <SimpleValue valType="str">WEB-MISC mlog.phtml access</SimpleValue>
  11193.                         </PropertyDesc>
  11194.                         <PropertyDesc idRef="30" propType="simple">
  11195.                             <SimpleValue valType="binary">0B0000000000000000000000000101002F6D6C6F672E7068746D6C</SimpleValue>
  11196.                         </PropertyDesc>
  11197.                     </PropertyDescList>
  11198.                 </Rule>
  11199.                 <Rule guid="{BAB17659-1BF4-4C6E-97F8-F42BB4404EE4}">
  11200.                     <ObjDescRef guidRef="{DB4F1FD4-B63E-4C36-A54B-ED4DD8A6744F}"/>
  11201.                     <AccessDescList>
  11202.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11203.                     </AccessDescList>
  11204.                     <PropertyDescList>
  11205.                         <PropertyDesc idRef="20" propType="simple">
  11206.                             <SimpleValue valType="int">4480</SimpleValue>
  11207.                         </PropertyDesc>
  11208.                         <PropertyDesc idRef="5" propType="objRef">
  11209.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11210.                         </PropertyDesc>
  11211.                         <PropertyDesc idRef="21" propType="simple">
  11212.                             <SimpleValue valType="str">WEB-MISC mylog.phtml access</SimpleValue>
  11213.                         </PropertyDesc>
  11214.                         <PropertyDesc idRef="30" propType="simple">
  11215.                             <SimpleValue valType="binary">0C0000000000000000000000000101002F6D796C6F672E7068746D6C</SimpleValue>
  11216.                         </PropertyDesc>
  11217.                     </PropertyDescList>
  11218.                 </Rule>
  11219.                 <Rule guid="{81505717-9CC7-436A-98A1-74CA63AEB552}">
  11220.                     <ObjDescRef guidRef="{2217DE68-D6DB-483A-9222-6A70CA39DF6C}"/>
  11221.                     <AccessDescList>
  11222.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11223.                     </AccessDescList>
  11224.                     <PropertyDescList>
  11225.                         <PropertyDesc idRef="20" propType="simple">
  11226.                             <SimpleValue valType="int">4488</SimpleValue>
  11227.                         </PropertyDesc>
  11228.                         <PropertyDesc idRef="5" propType="objRef">
  11229.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11230.                         </PropertyDesc>
  11231.                         <PropertyDesc idRef="21" propType="simple">
  11232.                             <SimpleValue valType="str">WEB-MISC /etc/passwd</SimpleValue>
  11233.                         </PropertyDesc>
  11234.                         <PropertyDesc idRef="30" propType="simple">
  11235.                             <SimpleValue valType="binary">0B0000000000000000000000000001002F6574632F706173737764</SimpleValue>
  11236.                         </PropertyDesc>
  11237.                     </PropertyDescList>
  11238.                 </Rule>
  11239.                 <Rule guid="{0D896794-DF95-4AF1-B1C0-80FC2350963B}">
  11240.                     <ObjDescRef guidRef="{B2CFFAA9-9F49-438E-9BC3-3B4D7C4BC7F1}"/>
  11241.                     <AccessDescList>
  11242.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11243.                     </AccessDescList>
  11244.                     <PropertyDescList>
  11245.                         <PropertyDesc idRef="20" propType="simple">
  11246.                             <SimpleValue valType="int">4492</SimpleValue>
  11247.                         </PropertyDesc>
  11248.                         <PropertyDesc idRef="5" propType="objRef">
  11249.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11250.                         </PropertyDesc>
  11251.                         <PropertyDesc idRef="21" propType="simple">
  11252.                             <SimpleValue valType="str">WEB-MISC ?PageServices access</SimpleValue>
  11253.                         </PropertyDesc>
  11254.                         <PropertyDesc idRef="30" propType="simple">
  11255.                             <SimpleValue valType="binary">0D0000000000000000000000000101003F506167655365727669636573</SimpleValue>
  11256.                         </PropertyDesc>
  11257.                     </PropertyDescList>
  11258.                 </Rule>
  11259.                 <Rule guid="{D695AA23-0124-4557-B6D9-0BE95E328B77}">
  11260.                     <ObjDescRef guidRef="{40E69D66-BDE9-4185-AA40-A2EF17006464}"/>
  11261.                     <AccessDescList>
  11262.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11263.                     </AccessDescList>
  11264.                     <PropertyDescList>
  11265.                         <PropertyDesc idRef="20" propType="simple">
  11266.                             <SimpleValue valType="int">4496</SimpleValue>
  11267.                         </PropertyDesc>
  11268.                         <PropertyDesc idRef="5" propType="objRef">
  11269.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11270.                         </PropertyDesc>
  11271.                         <PropertyDesc idRef="21" propType="simple">
  11272.                             <SimpleValue valType="str">WEB-MISC Ecommerce check.txt access</SimpleValue>
  11273.                         </PropertyDesc>
  11274.                         <PropertyDesc idRef="30" propType="simple">
  11275.                             <SimpleValue valType="binary">110000000000000000000000000101002F636F6E6669672F636865636B2E747874</SimpleValue>
  11276.                         </PropertyDesc>
  11277.                     </PropertyDescList>
  11278.                 </Rule>
  11279.                 <Rule guid="{F6E52256-30CD-4BE9-AFAE-27BB5D135806}">
  11280.                     <ObjDescRef guidRef="{0256D156-D288-463C-99CB-00CB295CA2CB}"/>
  11281.                     <AccessDescList>
  11282.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11283.                     </AccessDescList>
  11284.                     <PropertyDescList>
  11285.                         <PropertyDesc idRef="20" propType="simple">
  11286.                             <SimpleValue valType="int">4500</SimpleValue>
  11287.                         </PropertyDesc>
  11288.                         <PropertyDesc idRef="5" propType="objRef">
  11289.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11290.                         </PropertyDesc>
  11291.                         <PropertyDesc idRef="21" propType="simple">
  11292.                             <SimpleValue valType="str">WEB-MISC webcart access</SimpleValue>
  11293.                         </PropertyDesc>
  11294.                         <PropertyDesc idRef="30" propType="simple">
  11295.                             <SimpleValue valType="binary">090000000000000000000000000101002F776562636172742F</SimpleValue>
  11296.                         </PropertyDesc>
  11297.                     </PropertyDescList>
  11298.                 </Rule>
  11299.                 <Rule guid="{A9D8BC87-B43D-4E0D-8DDE-F644E93CF526}">
  11300.                     <ObjDescRef guidRef="{E6DFF718-BBE5-42A8-A006-798EBD1F8696}"/>
  11301.                     <AccessDescList>
  11302.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11303.                     </AccessDescList>
  11304.                     <PropertyDescList>
  11305.                         <PropertyDesc idRef="20" propType="simple">
  11306.                             <SimpleValue valType="int">4504</SimpleValue>
  11307.                         </PropertyDesc>
  11308.                         <PropertyDesc idRef="5" propType="objRef">
  11309.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11310.                         </PropertyDesc>
  11311.                         <PropertyDesc idRef="21" propType="simple">
  11312.                             <SimpleValue valType="str">WEB-MISC AuthChangeUrl access</SimpleValue>
  11313.                         </PropertyDesc>
  11314.                         <PropertyDesc idRef="30" propType="simple">
  11315.                             <SimpleValue valType="binary">0F0000000000000000000000000101005F417574684368616E676555726C3F</SimpleValue>
  11316.                         </PropertyDesc>
  11317.                     </PropertyDescList>
  11318.                 </Rule>
  11319.                 <Rule guid="{C34AC2F0-2004-4695-8D41-AD22CE2FCC0C}">
  11320.                     <ObjDescRef guidRef="{81170951-1B1E-44D1-974C-CF14B05EDD6A}"/>
  11321.                     <AccessDescList>
  11322.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11323.                     </AccessDescList>
  11324.                     <PropertyDescList>
  11325.                         <PropertyDesc idRef="20" propType="simple">
  11326.                             <SimpleValue valType="int">4508</SimpleValue>
  11327.                         </PropertyDesc>
  11328.                         <PropertyDesc idRef="5" propType="objRef">
  11329.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11330.                         </PropertyDesc>
  11331.                         <PropertyDesc idRef="21" propType="simple">
  11332.                             <SimpleValue valType="str">WEB-MISC convert.bas access</SimpleValue>
  11333.                         </PropertyDesc>
  11334.                         <PropertyDesc idRef="30" propType="simple">
  11335.                             <SimpleValue valType="binary">140000000000000000000000000101002F736372697074732F636F6E766572742E626173</SimpleValue>
  11336.                         </PropertyDesc>
  11337.                     </PropertyDescList>
  11338.                 </Rule>
  11339.                 <Rule guid="{A881AA4D-B208-4EF1-B94C-153CABAB5B09}">
  11340.                     <ObjDescRef guidRef="{0EEF0FB2-9846-419D-9104-471CBF9FF371}"/>
  11341.                     <AccessDescList>
  11342.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11343.                     </AccessDescList>
  11344.                     <PropertyDescList>
  11345.                         <PropertyDesc idRef="20" propType="simple">
  11346.                             <SimpleValue valType="int">4512</SimpleValue>
  11347.                         </PropertyDesc>
  11348.                         <PropertyDesc idRef="5" propType="objRef">
  11349.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11350.                         </PropertyDesc>
  11351.                         <PropertyDesc idRef="21" propType="simple">
  11352.                             <SimpleValue valType="str">WEB-MISC cpshost.dll access</SimpleValue>
  11353.                         </PropertyDesc>
  11354.                         <PropertyDesc idRef="30" propType="simple">
  11355.                             <SimpleValue valType="binary">140000000000000000000000000101002F736372697074732F637073686F73742E646C6C</SimpleValue>
  11356.                         </PropertyDesc>
  11357.                     </PropertyDescList>
  11358.                 </Rule>
  11359.                 <Rule guid="{3776E410-C6E5-4C14-9CD7-FCDC142188E8}">
  11360.                     <ObjDescRef guidRef="{DF010BF0-7CC3-4D99-9589-631A799F36AF}"/>
  11361.                     <AccessDescList>
  11362.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11363.                     </AccessDescList>
  11364.                     <PropertyDescList>
  11365.                         <PropertyDesc idRef="20" propType="simple">
  11366.                             <SimpleValue valType="int">4516</SimpleValue>
  11367.                         </PropertyDesc>
  11368.                         <PropertyDesc idRef="5" propType="objRef">
  11369.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11370.                         </PropertyDesc>
  11371.                         <PropertyDesc idRef="21" propType="simple">
  11372.                             <SimpleValue valType="str">WEB-MISC .htaccess access</SimpleValue>
  11373.                         </PropertyDesc>
  11374.                         <PropertyDesc idRef="30" propType="simple">
  11375.                             <SimpleValue valType="binary">090000000000000000000000000001002E6874616363657373</SimpleValue>
  11376.                         </PropertyDesc>
  11377.                     </PropertyDescList>
  11378.                 </Rule>
  11379.                 <Rule guid="{2010FAE4-503F-4A09-8ACE-C0C7F967E83B}">
  11380.                     <ObjDescRef guidRef="{40AFAC1C-2AAA-4F23-88A0-B3E034D1F49A}"/>
  11381.                     <AccessDescList>
  11382.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11383.                     </AccessDescList>
  11384.                     <PropertyDescList>
  11385.                         <PropertyDesc idRef="20" propType="simple">
  11386.                             <SimpleValue valType="int">4520</SimpleValue>
  11387.                         </PropertyDesc>
  11388.                         <PropertyDesc idRef="5" propType="objRef">
  11389.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11390.                         </PropertyDesc>
  11391.                         <PropertyDesc idRef="21" propType="simple">
  11392.                             <SimpleValue valType="str">WEB-MISC .wwwacl access</SimpleValue>
  11393.                         </PropertyDesc>
  11394.                         <PropertyDesc idRef="30" propType="simple">
  11395.                             <SimpleValue valType="binary">070000000000000000000000000101002E77777761636C</SimpleValue>
  11396.                         </PropertyDesc>
  11397.                     </PropertyDescList>
  11398.                 </Rule>
  11399.                 <Rule guid="{DADB91A8-7751-431B-A890-D67DBF447D1E}">
  11400.                     <ObjDescRef guidRef="{6455A344-479C-4C99-B214-2DCCCBED4E02}"/>
  11401.                     <AccessDescList>
  11402.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11403.                     </AccessDescList>
  11404.                     <PropertyDescList>
  11405.                         <PropertyDesc idRef="20" propType="simple">
  11406.                             <SimpleValue valType="int">4524</SimpleValue>
  11407.                         </PropertyDesc>
  11408.                         <PropertyDesc idRef="5" propType="objRef">
  11409.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11410.                         </PropertyDesc>
  11411.                         <PropertyDesc idRef="21" propType="simple">
  11412.                             <SimpleValue valType="str">WEB-MISC .wwwacl access</SimpleValue>
  11413.                         </PropertyDesc>
  11414.                         <PropertyDesc idRef="30" propType="simple">
  11415.                             <SimpleValue valType="binary">080000000000000000000000000101002E7777775F61636C</SimpleValue>
  11416.                         </PropertyDesc>
  11417.                     </PropertyDescList>
  11418.                 </Rule>
  11419.                 <Rule guid="{21FA294A-D662-4E1F-8AA0-0E22ED790381}">
  11420.                     <ObjDescRef guidRef="{BAFF7749-9CBF-40AC-B7F8-DC469BC39883}"/>
  11421.                     <AccessDescList>
  11422.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11423.                     </AccessDescList>
  11424.                     <PropertyDescList>
  11425.                         <PropertyDesc idRef="20" propType="simple">
  11426.                             <SimpleValue valType="int">4528</SimpleValue>
  11427.                         </PropertyDesc>
  11428.                         <PropertyDesc idRef="5" propType="objRef">
  11429.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11430.                         </PropertyDesc>
  11431.                         <PropertyDesc idRef="21" propType="simple">
  11432.                             <SimpleValue valType="str">WEB-MISC netscape unixware overflow</SimpleValue>
  11433.                         </PropertyDesc>
  11434.                         <PropertyDesc idRef="30" propType="simple">
  11435.                             <SimpleValue valType="binary">10000000000000000000000000000000EB5F9AFFFFFFFF07FFC35E31C089469D</SimpleValue>
  11436.                         </PropertyDesc>
  11437.                     </PropertyDescList>
  11438.                 </Rule>
  11439.                 <Rule guid="{8EEB043A-3DD1-4C3D-A739-797C0F117919}">
  11440.                     <ObjDescRef guidRef="{E038D326-FB85-4E55-8A3C-D37B513DF3F7}"/>
  11441.                     <AccessDescList>
  11442.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11443.                     </AccessDescList>
  11444.                     <PropertyDescList>
  11445.                         <PropertyDesc idRef="20" propType="simple">
  11446.                             <SimpleValue valType="int">4532</SimpleValue>
  11447.                         </PropertyDesc>
  11448.                         <PropertyDesc idRef="5" propType="objRef">
  11449.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11450.                         </PropertyDesc>
  11451.                         <PropertyDesc idRef="21" propType="simple">
  11452.                             <SimpleValue valType="str">SCAN cybercop os probe</SimpleValue>
  11453.                         </PropertyDesc>
  11454.                         <PropertyDesc idRef="30" propType="simple">
  11455.                             <SimpleValue valType="binary">1000000000000000100000000000000041414141414141414141414141414141</SimpleValue>
  11456.                         </PropertyDesc>
  11457.                         <PropertyDesc idRef="31" propType="simple">
  11458.                             <SimpleValue valType="int">2816</SimpleValue>
  11459.                         </PropertyDesc>
  11460.                         <PropertyDesc idRef="33" propType="simple">
  11461.                             <SimpleValue valType="int" valRelation="==">0</SimpleValue>
  11462.                         </PropertyDesc>
  11463.                     </PropertyDescList>
  11464.                 </Rule>
  11465.                 <Rule guid="{0841A57F-0BB3-45CF-9B74-DD8CD79EB53F}">
  11466.                     <ObjDescRef guidRef="{825BF04B-44B4-449F-9EA0-BA35E76DA429}"/>
  11467.                     <AccessDescList>
  11468.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11469.                     </AccessDescList>
  11470.                     <PropertyDescList>
  11471.                         <PropertyDesc idRef="20" propType="simple">
  11472.                             <SimpleValue valType="int">4536</SimpleValue>
  11473.                         </PropertyDesc>
  11474.                         <PropertyDesc idRef="5" propType="objRef">
  11475.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11476.                         </PropertyDesc>
  11477.                         <PropertyDesc idRef="21" propType="simple">
  11478.                             <SimpleValue valType="str">WEB-MISC Phorum admin access</SimpleValue>
  11479.                         </PropertyDesc>
  11480.                         <PropertyDesc idRef="30" propType="simple">
  11481.                             <SimpleValue valType="binary">0B0000000000000000000000000101002F61646D696E2E70687033</SimpleValue>
  11482.                         </PropertyDesc>
  11483.                     </PropertyDescList>
  11484.                 </Rule>
  11485.                 <Rule guid="{F44319CA-6E94-4CE7-ACC2-3240C98A1C3E}">
  11486.                     <ObjDescRef guidRef="{4FA0D17A-4827-4327-9319-4882BDB5D5D5}"/>
  11487.                     <AccessDescList>
  11488.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11489.                     </AccessDescList>
  11490.                     <PropertyDescList>
  11491.                         <PropertyDesc idRef="20" propType="simple">
  11492.                             <SimpleValue valType="int">4544</SimpleValue>
  11493.                         </PropertyDesc>
  11494.                         <PropertyDesc idRef="5" propType="objRef">
  11495.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11496.                         </PropertyDesc>
  11497.                         <PropertyDesc idRef="21" propType="simple">
  11498.                             <SimpleValue valType="str">WEB-MISC cd..</SimpleValue>
  11499.                         </PropertyDesc>
  11500.                         <PropertyDesc idRef="30" propType="simple">
  11501.                             <SimpleValue valType="binary">0400000000000000000000000000010063642E2E</SimpleValue>
  11502.                         </PropertyDesc>
  11503.                     </PropertyDescList>
  11504.                 </Rule>
  11505.                 <Rule guid="{9B19FDD1-B6D6-426B-9365-3B6762B5EEFF}">
  11506.                     <ObjDescRef guidRef="{9F647C70-BE84-4B5C-92E0-E8D929169EAC}"/>
  11507.                     <AccessDescList>
  11508.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11509.                     </AccessDescList>
  11510.                     <PropertyDescList>
  11511.                         <PropertyDesc idRef="20" propType="simple">
  11512.                             <SimpleValue valType="int">4548</SimpleValue>
  11513.                         </PropertyDesc>
  11514.                         <PropertyDesc idRef="5" propType="objRef">
  11515.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11516.                         </PropertyDesc>
  11517.                         <PropertyDesc idRef="21" propType="simple">
  11518.                             <SimpleValue valType="str">WEB-MISC Phorum auth access</SimpleValue>
  11519.                         </PropertyDesc>
  11520.                         <PropertyDesc idRef="30" propType="simple">
  11521.                             <SimpleValue valType="binary">170000000000000000000000000001005048505F415554485F555345523D626F6F6769656D616E</SimpleValue>
  11522.                         </PropertyDesc>
  11523.                     </PropertyDescList>
  11524.                 </Rule>
  11525.                 <Rule guid="{7AFFE3C0-8BD0-48B2-961E-9B31165CB4B8}">
  11526.                     <ObjDescRef guidRef="{9EE5730E-A1EE-4585-B108-1943C8B25557}"/>
  11527.                     <AccessDescList>
  11528.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11529.                     </AccessDescList>
  11530.                     <PropertyDescList>
  11531.                         <PropertyDesc idRef="20" propType="simple">
  11532.                             <SimpleValue valType="int">4552</SimpleValue>
  11533.                         </PropertyDesc>
  11534.                         <PropertyDesc idRef="5" propType="objRef">
  11535.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11536.                         </PropertyDesc>
  11537.                         <PropertyDesc idRef="21" propType="simple">
  11538.                             <SimpleValue valType="str">WEB-MISC Cisco Web DOS attempt</SimpleValue>
  11539.                         </PropertyDesc>
  11540.                         <PropertyDesc idRef="30" propType="simple">
  11541.                             <SimpleValue valType="binary">04000000000000001000000000000000202F2525</SimpleValue>
  11542.                         </PropertyDesc>
  11543.                     </PropertyDescList>
  11544.                 </Rule>
  11545.                 <Rule guid="{09BC2FE1-29B1-486B-95AD-2107013A231E}">
  11546.                     <ObjDescRef guidRef="{D73508D8-292F-472A-AB6B-F87B6478566E}"/>
  11547.                     <AccessDescList>
  11548.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11549.                     </AccessDescList>
  11550.                     <PropertyDescList>
  11551.                         <PropertyDesc idRef="20" propType="simple">
  11552.                             <SimpleValue valType="int">4556</SimpleValue>
  11553.                         </PropertyDesc>
  11554.                         <PropertyDesc idRef="5" propType="objRef">
  11555.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11556.                         </PropertyDesc>
  11557.                         <PropertyDesc idRef="21" propType="simple">
  11558.                             <SimpleValue valType="str">WEB-MISC whisker HEAD/./</SimpleValue>
  11559.                         </PropertyDesc>
  11560.                         <PropertyDesc idRef="30" propType="simple">
  11561.                             <SimpleValue valType="binary">07000000000000000000000000000000484541442F2E2F</SimpleValue>
  11562.                         </PropertyDesc>
  11563.                     </PropertyDescList>
  11564.                 </Rule>
  11565.                 <Rule guid="{61E9FCD1-1036-4FDC-BC53-162BD10E6F73}">
  11566.                     <ObjDescRef guidRef="{89CE3B61-DECB-436E-B8AD-38FD5FDF12BC}"/>
  11567.                     <AccessDescList>
  11568.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11569.                     </AccessDescList>
  11570.                     <PropertyDescList>
  11571.                         <PropertyDesc idRef="20" propType="simple">
  11572.                             <SimpleValue valType="int">4560</SimpleValue>
  11573.                         </PropertyDesc>
  11574.                         <PropertyDesc idRef="5" propType="objRef">
  11575.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11576.                         </PropertyDesc>
  11577.                         <PropertyDesc idRef="21" propType="simple">
  11578.                             <SimpleValue valType="str">WEB-MISC guestbook.pl access</SimpleValue>
  11579.                         </PropertyDesc>
  11580.                         <PropertyDesc idRef="30" propType="simple">
  11581.                             <SimpleValue valType="binary">0D0000000000000000000000000101002F6775657374626F6F6B2E706C</SimpleValue>
  11582.                         </PropertyDesc>
  11583.                     </PropertyDescList>
  11584.                 </Rule>
  11585.                 <Rule guid="{956E4849-C477-4DF1-ACF0-620916E848C9}">
  11586.                     <ObjDescRef guidRef="{A8BB9E57-8D77-49D3-A6D6-CE176453D33D}"/>
  11587.                     <AccessDescList>
  11588.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11589.                     </AccessDescList>
  11590.                     <PropertyDescList>
  11591.                         <PropertyDesc idRef="20" propType="simple">
  11592.                             <SimpleValue valType="int">4564</SimpleValue>
  11593.                         </PropertyDesc>
  11594.                         <PropertyDesc idRef="5" propType="objRef">
  11595.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11596.                         </PropertyDesc>
  11597.                         <PropertyDesc idRef="21" propType="simple">
  11598.                             <SimpleValue valType="str">WEB-MISC handler access</SimpleValue>
  11599.                         </PropertyDesc>
  11600.                         <PropertyDesc idRef="30" propType="simple">
  11601.                             <SimpleValue valType="binary">080000000000000000000000000101002F68616E646C6572</SimpleValue>
  11602.                         </PropertyDesc>
  11603.                     </PropertyDescList>
  11604.                 </Rule>
  11605.                 <Rule guid="{C5BFE682-BC0E-43CC-B11C-B1553DEDEED9}">
  11606.                     <ObjDescRef guidRef="{676EBB47-7296-4035-AE64-2F7BD4159168}"/>
  11607.                     <AccessDescList>
  11608.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11609.                     </AccessDescList>
  11610.                     <PropertyDescList>
  11611.                         <PropertyDesc idRef="20" propType="simple">
  11612.                             <SimpleValue valType="int">4568</SimpleValue>
  11613.                         </PropertyDesc>
  11614.                         <PropertyDesc idRef="5" propType="objRef">
  11615.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11616.                         </PropertyDesc>
  11617.                         <PropertyDesc idRef="21" propType="simple">
  11618.                             <SimpleValue valType="str">WEB-MISC /....</SimpleValue>
  11619.                         </PropertyDesc>
  11620.                         <PropertyDesc idRef="30" propType="simple">
  11621.                             <SimpleValue valType="binary">050000000000000000000000000000002F2E2E2E2E</SimpleValue>
  11622.                         </PropertyDesc>
  11623.                     </PropertyDescList>
  11624.                 </Rule>
  11625.                 <Rule guid="{FAE2260B-9AEB-45A0-8585-D488C4B661E6}">
  11626.                     <ObjDescRef guidRef="{00F13028-C1D4-4163-A316-EDDDCAD52591}"/>
  11627.                     <AccessDescList>
  11628.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11629.                     </AccessDescList>
  11630.                     <PropertyDescList>
  11631.                         <PropertyDesc idRef="20" propType="simple">
  11632.                             <SimpleValue valType="int">4572</SimpleValue>
  11633.                         </PropertyDesc>
  11634.                         <PropertyDesc idRef="5" propType="objRef">
  11635.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11636.                         </PropertyDesc>
  11637.                         <PropertyDesc idRef="21" propType="simple">
  11638.                             <SimpleValue valType="str">WEB-MISC ///cgi-bin</SimpleValue>
  11639.                         </PropertyDesc>
  11640.                         <PropertyDesc idRef="30" propType="simple">
  11641.                             <SimpleValue valType="binary">0A0000000000000000000000000101002F2F2F6367692D62696E</SimpleValue>
  11642.                         </PropertyDesc>
  11643.                     </PropertyDescList>
  11644.                 </Rule>
  11645.                 <Rule guid="{0AC62894-C88B-4C16-A0CD-216EF08CEEB7}">
  11646.                     <ObjDescRef guidRef="{9754197C-1AEE-4768-BE32-187380158025}"/>
  11647.                     <AccessDescList>
  11648.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11649.                     </AccessDescList>
  11650.                     <PropertyDescList>
  11651.                         <PropertyDesc idRef="20" propType="simple">
  11652.                             <SimpleValue valType="int">4576</SimpleValue>
  11653.                         </PropertyDesc>
  11654.                         <PropertyDesc idRef="5" propType="objRef">
  11655.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11656.                         </PropertyDesc>
  11657.                         <PropertyDesc idRef="21" propType="simple">
  11658.                             <SimpleValue valType="str">WEB-MISC /cgi-bin/// access</SimpleValue>
  11659.                         </PropertyDesc>
  11660.                         <PropertyDesc idRef="30" propType="simple">
  11661.                             <SimpleValue valType="binary">0B0000000000000000000000000101002F6367692D62696E2F2F2F</SimpleValue>
  11662.                         </PropertyDesc>
  11663.                     </PropertyDescList>
  11664.                 </Rule>
  11665.                 <Rule guid="{89C08107-2E22-45A4-8567-B3212A268285}">
  11666.                     <ObjDescRef guidRef="{4045FF59-3A86-4336-BFEA-7C6025009955}"/>
  11667.                     <AccessDescList>
  11668.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11669.                     </AccessDescList>
  11670.                     <PropertyDescList>
  11671.                         <PropertyDesc idRef="20" propType="simple">
  11672.                             <SimpleValue valType="int">4580</SimpleValue>
  11673.                         </PropertyDesc>
  11674.                         <PropertyDesc idRef="5" propType="objRef">
  11675.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11676.                         </PropertyDesc>
  11677.                         <PropertyDesc idRef="21" propType="simple">
  11678.                             <SimpleValue valType="str">WEB-MISC /~root access</SimpleValue>
  11679.                         </PropertyDesc>
  11680.                         <PropertyDesc idRef="30" propType="simple">
  11681.                             <SimpleValue valType="binary">060000000000000000000000000101002F7E726F6F74</SimpleValue>
  11682.                         </PropertyDesc>
  11683.                     </PropertyDescList>
  11684.                 </Rule>
  11685.                 <Rule guid="{89CDC2A7-91F7-42B5-8784-231D3C601063}">
  11686.                     <ObjDescRef guidRef="{9F65FB27-CD2D-4068-8ECF-E5FE332CDF07}"/>
  11687.                     <AccessDescList>
  11688.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11689.                     </AccessDescList>
  11690.                     <PropertyDescList>
  11691.                         <PropertyDesc idRef="20" propType="simple">
  11692.                             <SimpleValue valType="int">4584</SimpleValue>
  11693.                         </PropertyDesc>
  11694.                         <PropertyDesc idRef="5" propType="objRef">
  11695.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11696.                         </PropertyDesc>
  11697.                         <PropertyDesc idRef="21" propType="simple">
  11698.                             <SimpleValue valType="str">WEB-MISC Ecommerce import.txt access</SimpleValue>
  11699.                         </PropertyDesc>
  11700.                         <PropertyDesc idRef="30" propType="simple">
  11701.                             <SimpleValue valType="binary">120000000000000000000000000101002F636F6E6669672F696D706F72742E747874</SimpleValue>
  11702.                         </PropertyDesc>
  11703.                     </PropertyDescList>
  11704.                 </Rule>
  11705.                 <Rule guid="{9A0EA76B-4352-4200-B430-071F14ADEE2B}">
  11706.                     <ObjDescRef guidRef="{DAC9E30B-1B89-407B-82FF-758DCA5530FB}"/>
  11707.                     <AccessDescList>
  11708.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11709.                     </AccessDescList>
  11710.                     <PropertyDescList>
  11711.                         <PropertyDesc idRef="20" propType="simple">
  11712.                             <SimpleValue valType="int">4588</SimpleValue>
  11713.                         </PropertyDesc>
  11714.                         <PropertyDesc idRef="5" propType="objRef">
  11715.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11716.                         </PropertyDesc>
  11717.                         <PropertyDesc idRef="21" propType="simple">
  11718.                             <SimpleValue valType="str">WEB-MISC cat%20 access</SimpleValue>
  11719.                         </PropertyDesc>
  11720.                         <PropertyDesc idRef="30" propType="simple">
  11721.                             <SimpleValue valType="binary">06000000000000000000000000000100636174253230</SimpleValue>
  11722.                         </PropertyDesc>
  11723.                     </PropertyDescList>
  11724.                 </Rule>
  11725.                 <Rule guid="{D5487255-A096-407D-B1C6-52F745F859D9}">
  11726.                     <ObjDescRef guidRef="{BBC191C7-3D81-4B6C-8583-816BCB4DB2A9}"/>
  11727.                     <AccessDescList>
  11728.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11729.                     </AccessDescList>
  11730.                     <PropertyDescList>
  11731.                         <PropertyDesc idRef="20" propType="simple">
  11732.                             <SimpleValue valType="int">4592</SimpleValue>
  11733.                         </PropertyDesc>
  11734.                         <PropertyDesc idRef="5" propType="objRef">
  11735.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11736.                         </PropertyDesc>
  11737.                         <PropertyDesc idRef="21" propType="simple">
  11738.                             <SimpleValue valType="str">WEB-MISC Ecommerce import.txt access</SimpleValue>
  11739.                         </PropertyDesc>
  11740.                         <PropertyDesc idRef="30" propType="simple">
  11741.                             <SimpleValue valType="binary">120000000000000000000000000101002F6F72646572732F696D706F72742E747874</SimpleValue>
  11742.                         </PropertyDesc>
  11743.                     </PropertyDescList>
  11744.                 </Rule>
  11745.                 <Rule guid="{2EACDD84-BA42-41B3-85EA-852CAB994A32}">
  11746.                     <ObjDescRef guidRef="{59EAA7C8-D300-497B-8D9C-D0C7E8075450}"/>
  11747.                     <AccessDescList>
  11748.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11749.                     </AccessDescList>
  11750.                     <PropertyDescList>
  11751.                         <PropertyDesc idRef="20" propType="simple">
  11752.                             <SimpleValue valType="int">4600</SimpleValue>
  11753.                         </PropertyDesc>
  11754.                         <PropertyDesc idRef="5" propType="objRef">
  11755.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11756.                         </PropertyDesc>
  11757.                         <PropertyDesc idRef="21" propType="simple">
  11758.                             <SimpleValue valType="str">WEB-MISC Domino catalog.nsf access</SimpleValue>
  11759.                         </PropertyDesc>
  11760.                         <PropertyDesc idRef="30" propType="simple">
  11761.                             <SimpleValue valType="binary">0C0000000000000000000000000101002F636174616C6F672E6E7366</SimpleValue>
  11762.                         </PropertyDesc>
  11763.                     </PropertyDescList>
  11764.                 </Rule>
  11765.                 <Rule guid="{3F0ADBB0-9923-4CF6-93DF-46E9953F0671}">
  11766.                     <ObjDescRef guidRef="{0B5F47B0-6F62-4A6C-AE60-FD5C29F16456}"/>
  11767.                     <AccessDescList>
  11768.                         <AccessDesc atRef="55" arRef="1" alRef="1"/>
  11769.                     </AccessDescList>
  11770.                     <PropertyDescList>
  11771.                         <PropertyDesc idRef="20" propType="simple">
  11772.                             <SimpleValue valType="int">4604</SimpleValue>
  11773.                         </PropertyDesc>
  11774.                         <PropertyDesc idRef="5" propType="objRef">
  11775.                             <ObjDescRef guidRef="{77D08516-AFC4-4F22-AD48-D5BDE6AEB1A2}"/>
  11776.                         </PropertyDesc>
  11777.                         <PropertyDesc idRef="21" propType="simple">
  11778.                             <SimpleValue valType="str">WEB-MISC Domino domcfg.nsf access</SimpleValue>
  11779.                         </PropertyDesc>
  11780.                         <PropertyDesc idRef="30" propType="simple">
  11781.                             <SimpleValue