559075560 | 2024-06-04T11:16:36.304288
135 /
tcp
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 134.119.193.98:49664
ncalrpc: WindowsShutdown
ncacn_np: \\HOST13411919398\PIPE\InitShutdown
ncalrpc: WMsgKRpc078E2B0
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\HOST13411919398\PIPE\InitShutdown
ncalrpc: WMsgKRpc078E2B0
ncalrpc: WMsgKRpc07F0921
ncalrpc: WMsgKRpc0125A8F2
fc48cd89-98d6-4628-9839-86f7a3e4161a
version: v1.0
ncalrpc: dabrpc
ncalrpc: csebpub
ncalrpc: LRPC-4c0009eba7fa8b4a68
ncalrpc: LRPC-c96566818634260bbf
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
d09bdeb5-6171-4a34-bfe2-06fa82652568
version: v1.0
ncalrpc: csebpub
ncalrpc: LRPC-4c0009eba7fa8b4a68
ncalrpc: LRPC-c96566818634260bbf
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-c96566818634260bbf
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-62885e6c2f527e86b5
ncalrpc: LRPC-671b6e5b11b04bdc92
697dcda9-3ba9-4eb2-9247-e11f1901b0d2
version: v1.0
ncalrpc: LRPC-4c0009eba7fa8b4a68
ncalrpc: LRPC-c96566818634260bbf
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
9b008953-f195-4bf9-bde0-4471971e58ed
version: v1.0
ncalrpc: LRPC-c96566818634260bbf
ncalrpc: LRPC-d9a020622f4df78342
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
dd59071b-3215-4c59-8481-972edadc0f6a
version: v1.0
ncalrpc: umpo
0d47017b-b33b-46ad-9e18-fe96456c5078
version: v1.0
ncalrpc: umpo
95406f0b-b239-4318-91bb-cea3a46ff0dc
version: v1.0
ncalrpc: umpo
4ed8abcc-f1e2-438b-981f-bb0e8abc010c
version: v1.0
ncalrpc: umpo
0ff1f646-13bb-400a-ab50-9a78f2b7a85a
version: v1.0
ncalrpc: umpo
6982a06e-5fe2-46b1-b39c-a2c545bfa069
version: v1.0
ncalrpc: umpo
082a3471-31b6-422a-b931-a54401960c62
version: v1.0
ncalrpc: umpo
fae436b0-b864-4a87-9eda-298547cd82f2
version: v1.0
ncalrpc: umpo
e53d94ca-7464-4839-b044-09a2fb8b3ae5
version: v1.0
ncalrpc: umpo
178d84be-9291-4994-82c6-3f909aca5a03
version: v1.0
ncalrpc: umpo
4dace966-a243-4450-ae3f-9b7bcb5315b8
version: v2.0
ncalrpc: umpo
1832bcf6-cab8-41d4-85d2-c9410764f75a
version: v1.0
ncalrpc: umpo
c521facf-09a9-42c5-b155-72388595cbf0
version: v0.0
ncalrpc: umpo
2c7fd9ce-e706-4b40-b412-953107ef9bb0
version: v0.0
ncalrpc: umpo
88abcbc3-34ea-76ae-8215-767520655a23
version: v0.0
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
76c217bc-c8b4-4201-a745-373ad9032b1a
version: v1.0
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
55e6b932-1979-45d6-90c5-7f6270724112
version: v1.0
ncalrpc: LRPC-62e27a1f673b9d386e
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
version: v1.0
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
b8cadbaf-e84b-46b9-84f2-6f71c03f9e55
version: v1.0
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
20c40295-8dba-48e6-aebf-3e78ef3bb144
version: v1.0
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
2513bcbe-6cd4-4348-855e-7efb3c336dd3
version: v1.0
ncalrpc: LRPC-d0d37734a178eda9df
ncalrpc: OLE95FD4EE914DB290396704DC67759
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: LRPC-46cba7e0697cec7fae
ncalrpc: actkernel
ncalrpc: umpo
0361ae94-0316-4c6c-8ad8-c594375800e2
version: v1.0
ncalrpc: umpo
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
version: v1.0
ncalrpc: umpo
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
version: v1.0
ncalrpc: umpo
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: umpo
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-908f00b9e4b72976f7
ncalrpc: LRPC-482619cb0ee4b91b24
ncalrpc: IUserProfile2
ncalrpc: LRPC-1aa8b6e6c03ca67985
ncalrpc: senssvc
ncalrpc: LRPC-ea28f4c97671c3497e
f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
version: v1.0
ncalrpc: LRPC-f5576b3ad7b1dd318b
ncalrpc: LRPC-b636152e43b5ebe892
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
version: v1.0
annotation: Network Connection Broker server endpoint
ncalrpc: LRPC-0ef0ba74e3a06dc23e
ncalrpc: OLEBDDBEA74D993ED8E0FC94EE458A9
ncalrpc: LRPC-5a9a62a5150597d377
ncalrpc: LRPC-62885e6c2f527e86b5
880fd55e-43b9-11e0-b1a8-cf4edfd72085
version: v1.0
annotation: KAPI Service endpoint
ncalrpc: LRPC-0ef0ba74e3a06dc23e
ncalrpc: OLEBDDBEA74D993ED8E0FC94EE458A9
ncalrpc: LRPC-5a9a62a5150597d377
ncalrpc: LRPC-62885e6c2f527e86b5
5222821f-d5e2-4885-84f1-5f6185a0ec41
version: v1.0
annotation: Network Connection Broker server endpoint for NCB Reset module
ncalrpc: LRPC-5a9a62a5150597d377
ncalrpc: LRPC-62885e6c2f527e86b5
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
version: v1.0
ncalrpc: LRPC-bb06b805e41952f4ec
ncalrpc: LRPC-671b6e5b11b04bdc92
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 134.119.193.98:49665
ncacn_np: \\HOST13411919398\pipe\eventlog
ncalrpc: eventlog
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-a1c524d4e0cb3837b9
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
annotation: Group Policy RPC Interface
provider: gpsvc.dll
ncalrpc: LRPC-64bba74ff143086fba
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncalrpc: dhcpcsvc
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
df4df73a-c52d-4e3a-8003-8437fdf8302a
version: v0.0
annotation: WM_WindowManagerRPC\Server
ncalrpc: LRPC-e6b0e829f330c527bb
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 134.119.193.98:49666
ncalrpc: LRPC-0cec9d5d2138d4e642
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\HOST13411919398\PIPE\atsvc
ncalrpc: LRPC-82a945433faec17e88
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 134.119.193.98:49666
ncalrpc: LRPC-0cec9d5d2138d4e642
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\HOST13411919398\PIPE\atsvc
ncalrpc: LRPC-82a945433faec17e88
33d84484-3626-47ee-8c6f-e7e98b113be1
version: v2.0
ncalrpc: LRPC-0cec9d5d2138d4e642
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\HOST13411919398\PIPE\atsvc
ncalrpc: LRPC-82a945433faec17e88
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\HOST13411919398\PIPE\atsvc
ncalrpc: LRPC-82a945433faec17e88
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\HOST13411919398\PIPE\atsvc
ncalrpc: LRPC-82a945433faec17e88
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: LRPC-82a945433faec17e88
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-0fae52de4f3ac846b3
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\HOST13411919398\PIPE\wkssvc
ncalrpc: LRPC-de8b685e7354f84688
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-de8b685e7354f84688
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-de8b685e7354f84688
c2d1b5dd-fa81-4460-9dd6-e7658b85454b
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
f44e62af-dab1-44c2-8013-049a9de417d6
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
7aeb6705-3ae6-471a-882d-f39c109edc12
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
e7f76134-9ef5-4949-a2d6-3368cc0988f3
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
b37f900a-eae4-4304-a2ab-12bb668c0188
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
version: v1.0
ncalrpc: LRPC-8c5a597805ddf73304
ncalrpc: OLEA3CFC120D9FFDB551D708F9F2E22
0d3c7f20-1c8d-4654-a1b3-51563b298bda
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-295750b349c5ab3842
ncalrpc: OLE90E73E63438BAC9B48F7DEA0B2E9
b18fbab6-56f8-4702-84e0-41053293a869
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-295750b349c5ab3842
ncalrpc: OLE90E73E63438BAC9B48F7DEA0B2E9
29770a8f-829b-4158-90a2-78cd488501f7
version: v1.0
ncacn_ip_tcp: 134.119.193.98:49667
ncacn_np: \\HOST13411919398\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncalrpc: LRPC-ea28f4c97671c3497e
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-dc7b34407487b119c9
ncalrpc: LRPC-b305fb8322fff613ab
ncalrpc: LRPC-3e64738468a61bd632
ncalrpc: LRPC-0ce16409621d3de601
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-b305fb8322fff613ab
ncalrpc: LRPC-3e64738468a61bd632
ncalrpc: LRPC-0ce16409621d3de601
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-3e64738468a61bd632
ncalrpc: LRPC-0ce16409621d3de601
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-0ce16409621d3de601
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 134.119.193.98:49668
ncalrpc: LRPC-520bbece5b5ed9647c
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
provider: spoolsv.exe
ncacn_ip_tcp: 134.119.193.98:49668
ncalrpc: LRPC-520bbece5b5ed9647c
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 134.119.193.98:49668
ncalrpc: LRPC-520bbece5b5ed9647c
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 134.119.193.98:49668
ncalrpc: LRPC-520bbece5b5ed9647c
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 134.119.193.98:49668
ncalrpc: LRPC-520bbece5b5ed9647c
b58aa02e-2884-4e97-8176-4ee06d794184
version: v1.0
provider: sysmain.dll
ncalrpc: LRPC-af16b1b175b0044ef9
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncalrpc: OLE494675CE50A9D4749E1666BB45D5
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-835fe1c8e1a71e9ff9
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-835fe1c8e1a71e9ff9
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-835fe1c8e1a71e9ff9
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncalrpc: LRPC-835fe1c8e1a71e9ff9
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncalrpc: LRPC-170fd037298c42e2a5
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncalrpc: LRPC-170fd037298c42e2a5
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-dbd3ec2f10de912fcf
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 134.119.193.98:49675
650a7e26-eab8-5533-ce43-9c1dfce11511
version: v1.0
annotation: Vpn APIs
ncalrpc: LRPC-9c32d73537c1de9cdc
ncalrpc: VpnikeRpc
ncalrpc: RasmanLrpc
ncacn_np: \\HOST13411919398\PIPE\ROUTER
98cd761e-e77d-41c8-a3c0-0fb756d90ec2
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
d22895ef-aff4-42c5-a5b2-b14466d34ab4
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
e38f5360-8572-473e-b696-1b46873beeab
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
95095ec8-32ea-4eb0-a3e2-041f97b36168
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
4c9dbf19-d39e-4bb9-90ee-8f7179b20283
version: v1.0
ncalrpc: LRPC-1e73f948e772ea97bd
51a227ae-825b-41f2-b4a9-1ac9557a1018
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 134.119.193.98:49855
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\HOST13411919398\pipe\lsass
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 134.119.193.98:49855
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\HOST13411919398\pipe\lsass
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
version: v2.0
annotation: KeyIso
ncacn_ip_tcp: 134.119.193.98:49855
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\HOST13411919398\pipe\lsass
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 134.119.193.98:49855
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: LSA_IDPEXT_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\HOST13411919398\pipe\lsass
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc0125A8F2
b1ef227e-dfa5-421e-82bb-67a6a129c496
version: v0.0
ncalrpc: LRPC-719ff6fb38d711f66e
ncalrpc: OLEC41481525E14A57797B1D4FA5C2F
0fc77b1a-95d8-4a2e-a0c0-cff54237462b
version: v0.0
ncalrpc: LRPC-719ff6fb38d711f66e
ncalrpc: OLEC41481525E14A57797B1D4FA5C2F
8ec21e98-b5ce-4916-a3d6-449fa428a007
version: v0.0
ncalrpc: LRPC-719ff6fb38d711f66e
ncalrpc: OLEC41481525E14A57797B1D4FA5C2F
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-6202f06501907e1ab5
ncalrpc: LRPC-6202f06501907e1ab5
ncalrpc: LRPC-6202f06501907e1ab5
0767a036-0d22-48aa-ba69-b619480f38cb
version: v1.0
annotation: PcaSvc
provider: pcasvc.dll
ncalrpc: LRPC-0eeb2377ea118e21aa
54b4c689-969a-476f-8dc2-990885e9f562
version: v0.0
ncalrpc: LRPC-b9d3ac2cc82813c4cc
be7f785e-0e3a-4ab7-91de-7e46e443be29
version: v0.0
ncalrpc: LRPC-b9d3ac2cc82813c4cc
a4b8d482-80ce-40d6-934d-b22a01a44fe7
version: v1.0
annotation: LicenseManager
ncalrpc: LicenseServiceEndpoint
51c15a14-a823-4e36-85ee-b595457949c6
version: v1.0
ncacn_np: \\HOST13411919398\pipe\9e70dca23f957de4
ncalrpc: LRPC-fb2aa8a8681d4aba5c
4cc3c222-f0f4-4f14-955d-d7869b63209e
version: v1.0
ncacn_np: \\HOST13411919398\pipe\9e70dca23f957de4
ncalrpc: LRPC-fb2aa8a8681d4aba5c
d54d5cab-4051-463f-8fed-aa5fbc09162a
version: v10.0
ncacn_np: \\HOST13411919398\pipe\9e70dca23f957de4
ncalrpc: LRPC-fb2aa8a8681d4aba5c
2d742d59-a677-43fe-8126-3983c00ebdda
version: v1.0
ncacn_np: \\HOST13411919398\pipe\9e70dca23f957de4
ncalrpc: LRPC-fb2aa8a8681d4aba5c
bc00b455-eb14-4f4f-8791-8eb28b76db6a
version: v2.0
ncalrpc: LRPC-3ca4756f5035aec9ff
e2e16531-c467-4aca-9186-14e38708ed3d
version: v1.0
ncalrpc: LRPC-7e9f99e9e2876d952c
bf4dc912-e52f-4904-8ebe-9317c1bdd497
version: v1.0
ncalrpc: LRPC-5d2580453ac129d3e6
ncalrpc: OLE970127873EC65DF8EBC38DB5E1B4
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncalrpc: 8f91bd05-fda0-48f0-bdd7-6c3ddeb254c5
ncalrpc: LRPC-e3d0418d89d4cd9bac
c503f532-443a-4c69-8300-ccd1fbdb3839
version: v2.0
ncalrpc: LRPC-eddff3e73f1582eb6c
ncalrpc: OLE23FF7BEDAD530E4C5FBEE9178BBD
a111f1c5-5923-47c0-9a68-d0bafb577901
version: v1.0
annotation: NetSetup API
ncalrpc: LRPC-069b55d589262e141f
965804968 | 2024-05-30T11:10:05.151769
137 /
udp
NetBIOS Response:
Server Name: HOST13411919398
MAC Address: 0C:C4:7A:35:10:04
Names:
HOST13411919398 <0x20>
HOST13411919398 <0x0>
WORKGROUP <0x0>
MAC Addresses
0C:C4:7A:35:10:04
OUI: 0C:C4:7A
Organization: Super Micro Computer, Inc.
Assignment: MA-L
Registration Date: 2013-10-24
-1166656618 | 2024-06-03T14:28:49.552116
445 /
tcp
SMB Status:
Authentication: enabled
SMB Version: 2
Capabilities: raw-mode
2000330786 | 2024-06-08T09:29:06.944290
1521 /
tcp
Oracle TNS Listener:
VSNNUM: 202375680
Error Code: 1189
-302343507 | 2024-05-26T14:00:00.796233
3389 /
tcp
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows 10 (version 1809)/Windows Server 2019 (version 1809)
OS Build: 10.0.17763
Target Name: HOST13411919398
NetBIOS Domain Name: HOST13411919398
NetBIOS Computer Name: HOST13411919398
DNS Domain Name: host13411919398
FQDN: host13411919398
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2f:25:9a:c4:75:c5:8e:4d:d8:6e:6b:7c:18:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=host13411919398
Validity
Not Before: Apr 24 16:04:38 2024 GMT
Not After : Oct 24 16:04:38 2024 GMT
Subject: CN=host13411919398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bf:bb:6d:85:78:7b:b7:2c:6b:e3:ff:66:7b:3a:
ed:40:ac:16:28:02:06:e7:8e:ef:41:f4:af:74:80:
4f:8e:8f:8d:2c:10:55:b4:15:fd:2d:c7:8d:56:31:
c5:b4:78:f4:3d:76:3e:9f:64:14:aa:f5:e4:7f:13:
0d:b4:01:54:1e:24:38:bb:c5:95:dd:e7:e9:29:76:
d8:1f:8b:26:01:e2:9f:a1:79:11:56:ee:8e:6f:61:
01:73:f7:8e:50:14:d1:84:67:ac:08:09:7e:e9:75:
73:b7:24:44:47:a6:43:24:51:fb:b9:24:0d:70:ed:
a0:ed:1f:50:22:2f:ea:31:78:cb:11:68:4d:62:9b:
b9:23:68:2d:a7:fc:f8:96:6e:21:46:55:79:66:de:
d8:8b:10:7e:8f:ea:c8:16:e8:09:86:78:34:53:31:
0c:8a:c3:ca:88:90:cb:f8:2b:dc:15:97:e8:5c:51:
2e:14:50:43:9f:a6:c3:e1:8e:24:89:ab:a4:a8:d8:
2f:65:7e:3e:8b:58:3c:d5:5a:26:30:7b:b5:cb:b5:
4c:6c:84:42:03:08:84:d6:47:03:e4:35:76:f3:dd:
25:0f:2e:9c:4c:57:f9:7a:20:3c:e8:f4:c3:51:4a:
78:80:91:c5:ce:44:82:3e:df:88:f0:99:8a:6a:6e:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
74:2b:05:4f:d7:e5:f7:42:9b:8e:3c:0a:a6:77:82:ae:f9:f2:
9c:c0:6b:f0:b0:fa:15:d2:5e:cb:d2:7d:18:9a:08:26:d7:29:
e3:d4:81:c6:c1:00:16:3e:b2:65:65:50:48:72:f5:df:40:86:
5e:54:36:ee:18:34:c5:f0:4d:28:d8:b2:dd:e3:e2:49:16:6e:
1e:d2:c4:06:65:63:ef:1b:7e:81:1a:9f:94:07:8d:a9:5f:9b:
bf:a3:a2:37:be:5b:70:d1:ec:d4:53:b2:57:9f:18:e4:01:58:
47:e5:c4:fb:8d:fc:2c:e4:b2:21:9a:63:bf:7a:63:ce:a1:64:
a1:cf:ae:e5:00:62:06:49:f3:4f:6b:52:5a:14:99:03:b6:cf:
59:d5:0a:ba:8c:65:7c:04:2a:98:96:60:d4:41:98:42:53:1a:
6b:32:bc:81:2d:54:37:3d:e0:2f:af:23:4e:0b:fd:dd:c9:c4:
00:dd:c2:82:92:38:70:b2:0f:15:f7:64:73:e6:8a:ff:88:4b:
51:ab:6d:2d:bf:62:c5:0e:83:81:17:e5:1f:13:33:06:6f:f1:
34:66:ab:60:5a:b3:4f:b9:55:aa:0b:34:0e:2b:ae:9e:17:f0:
c0:fe:3d:18:15:4c:90:1c:6b:c8:e4:2d:13:ca:65:5c:7f:7f:
cc:6f:e4:d3
-1684583448 | 2024-05-31T06:20:30.595383
5357 /
tcp
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 31 May 2024 06:20:30 GMT
Connection: close
Content-Length: 326
1489525118 | 2024-05-24T01:59:31.347790
5985 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 24 May 2024 01:59:31 GMT
Connection: close
Content-Length: 315
WinRM NTLM Info:
OS: Windows Server 2019 (version 1809)
OS Build: 10.0.17763
Target Name: HOST13411919398
NetBIOS Domain Name: HOST13411919398
NetBIOS Computer Name: HOST13411919398
DNS Domain Name: host13411919398
FQDN: host13411919398
-989755128 | 2024-06-01T18:41:03.755890
7001 /
tcp
HTTP/1.1 404 Not Found
Connection: close
Date: Sat, 01 Jun 2024 18:41:03 GMT
Content-Length: 1164
Content-Type: text/html; charset=UTF-8
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
<HTML>
<HEAD>
<TITLE>Error 404--Not Found</TITLE>
</HEAD>
<BODY bgcolor="white">
<FONT FACE=Helvetica><BR CLEAR=all>
<TABLE border=0 cellspacing=5><TR><TD><BR CLEAR=all>
<FONT FACE="Helvetica" COLOR="black" SIZE="3"><H2>Error 404--Not Found</H2>
</FONT></TD></TR>
</TABLE>
<TABLE border=0 width=100% cellpadding=10><TR><TD VALIGN=top WIDTH=100% BGCOLOR=white><FONT FACE="Courier New"><FONT FACE="Helvetica" SIZE="3"><H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
</FONT><FONT FACE="Helvetica" SIZE="3"><H4>10.4.5 404 Not Found</H4>
</FONT><P><FONT FACE="Courier New">The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.</p><p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
</FONT></TD></TR>
</TABLE>
</BODY>
</HTML>