Hostnames |
codia.heberdomaine.net taiba.heberdomaine.net |
Domains | heberdomaine.net |
Country | Germany |
City | Falkenstein |
Organization | Hetzner Online GmbH |
ISP | Hetzner Online GmbH |
ASN | AS24940 |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
CVE-2023-51767 | OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. |
CVE-2023-51385 | In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. |
CVE-2023-51384 | In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys. |
CVE-2023-48795 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust. |
CVE-2023-44487 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
CVE-2023-38408 | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. |
CVE-2021-41617 | 4.4sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. |
CVE-2021-36368 | 2.6An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed. |
CVE-2021-3618 | 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. |
CVE-2016-20012 | 4.3OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product |
CVE-2008-3844 | 9.3Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known. |
CVE-2007-2768 | 4.3OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243. |
-1246908516 | 2024-05-14T21:06:54.62965622 / tcp
SSH-2.0-OpenSSH_8.7 Key type: ecdsa-sha2-nistp256 Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFeMHF6GBNomQHvL3L+cLddg mafUs8ESm2ymLUhwyfUcg096XRRBFowyLPmanUoLmp0LtEI++tYYN+ehABVMntc= Fingerprint: 4b:a9:e5:86:c4:ac:15:ae:a7:e7:15:f6:dd:c2:ff:eb Kex Algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 kex-strict-s-v00@openssh.com Server Host Key Algorithms: rsa-sha2-512 rsa-sha2-256 ecdsa-sha2-nistp256 ssh-ed25519 Encryption Algorithms: aes256-gcm@openssh.com chacha20-poly1305@openssh.com aes256-ctr aes128-gcm@openssh.com aes128-ctr MAC Algorithms: hmac-sha2-256-etm@openssh.com hmac-sha1-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha2-256 hmac-sha1 umac-128@openssh.com hmac-sha2-512 Compression Algorithms: none zlib@openssh.com
-553166942 | 2024-04-24T02:23:50.87100953 / tcp
Recursion: enabled
364139637 | 2024-05-13T23:29:13.59931880 / tcp
HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Mon, 13 May 2024 23:29:13 GMT Content-Type: text/html Content-Length: 861 Last-Modified: Tue, 07 May 2024 14:29:33 GMT Connection: keep-alive ETag: "663a3acd-35d" Accept-Ranges: bytes
-1003205516 | 2024-04-22T07:07:57.077664123 / udp
NTP protocolversion: 3 stratum: 3 leap: 0 precision: -23 rootdelay: 0.0117645263672 rootdisp: 0.0646057128906 refid: 3589271462 reftime: 3922757959.37 poll: 0
2057297876 | 2024-04-23T20:26:53.656254135 / tcp
Microsoft RPC Endpoint Mapper 12345678-1234-abcd-ef00-01234567cffb version: v1.0 protocol: [MS-NRPC]: Netlogon Remote Protocol provider: netlogon.dll ncacn_ip_tcp: 176.9.102.120:54267 ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 version: v0.0 annotation: RemoteAccessCheck protocol: [MS-RAA]: Remote Authorization API Protocol ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 12345778-1234-abcd-ef00-0123456789ab version: v0.0 protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote provider: lsasrv.dll ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass e3514235-4b06-11d1-ab04-00c04fc2dcd2 version: v4.0 annotation: MS NT Directory DRS Interface protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol provider: ntdsai.dll ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass ncalrpc: LRPC-33a3b3d5c14d4a866a ncalrpc: IUserProfile2 ncalrpc: LRPC-cb191be13eb91ea311 ncalrpc: senssvc ncalrpc: LRPC-d545154b4205ca14e1 ncalrpc: LRPC-76546d53b23a5a63e4 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 176.9.102.120:49665 ncalrpc: WindowsShutdown ncacn_np: \\TAIBA\PIPE\InitShutdown ncalrpc: WMsgKRpc083840 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\TAIBA\PIPE\InitShutdown ncalrpc: WMsgKRpc083840 ncalrpc: WMsgKRpc089A31 ncalrpc: WMsgKRpc063A7B2 ncalrpc: WMsgKRpc1FAD34649A fc48cd89-98d6-4628-9839-86f7a3e4161a version: v1.0 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-7843f46835b4bed9f6 ncalrpc: LRPC-d0108359e4888354e6 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 0d47017b-b33b-46ad-9e18-fe96456c5078 version: v1.0 ncalrpc: umpo 95406f0b-b239-4318-91bb-cea3a46ff0dc version: v1.0 ncalrpc: umpo 4ed8abcc-f1e2-438b-981f-bb0e8abc010c version: v1.0 ncalrpc: umpo 0ff1f646-13bb-400a-ab50-9a78f2b7a85a version: v1.0 ncalrpc: umpo 6982a06e-5fe2-46b1-b39c-a2c545bfa069 version: v1.0 ncalrpc: umpo 082a3471-31b6-422a-b931-a54401960c62 version: v1.0 ncalrpc: umpo fae436b0-b864-4a87-9eda-298547cd82f2 version: v1.0 ncalrpc: umpo e53d94ca-7464-4839-b044-09a2fb8b3ae5 version: v1.0 ncalrpc: umpo 178d84be-9291-4994-82c6-3f909aca5a03 version: v1.0 ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v2.0 ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v2.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v2.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo dd59071b-3215-4c59-8481-972edadc0f6a version: v1.0 ncalrpc: actkernel ncalrpc: umpo 0361ae94-0316-4c6c-8ad8-c594375800e2 version: v1.0 ncalrpc: umpo 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: umpo f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-1e261afcd30f80f93c ncalrpc: LRPC-0cca4d14414b7ddbb4 ncalrpc: LRPC-563b23777f2ee81740 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-acd98271a9a3d35a24 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 ncalrpc: LRPC-b93b7b2731e511e9f4 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-a747df2261a043274e ncalrpc: OLED5F7A0CE789056A6D930D19A12B4 ncalrpc: LRPC-7843f46835b4bed9f6 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 ncalrpc: LRPC-d361a2212aa4f577f3 a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-9c7232bca057c99d09 ncalrpc: LRPC-d0108359e4888354e6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-9f7a90e81e7ebc8714 ncalrpc: DNSResolver f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 176.9.102.120:49666 ncacn_np: \\TAIBA\pipe\eventlog ncalrpc: eventlog 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 176.9.102.120:49667 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 176.9.102.120:49667 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-d98be83edd665e628d 3f787932-3452-4363-8651-6ea97bb373bb version: v1.0 annotation: NSP Rpc Interface ncalrpc: LRPC-6088317d7d89c29e1b ncalrpc: OLE55D381BA927E6D7D2F7D6B47B652 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-a3c00f22b867b3db21 ncalrpc: LRPC-d7c0c8741f8f425206 ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-d7c0c8741f8f425206 ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-fb4706cf8384abfb90 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: 08c3af11-1ea8-4572-8bcb-d32c1888d6e8 ncalrpc: LRPC-167e160658f634d0d6 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-cef8fcc2c3689c3b64 c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: OLEE1C9A25A5E0896A73439B656544F ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-9e2f2504fb4e0372d7 509bc7ae-77be-4ee8-b07c-0d096bb44345 version: v1.0 ncalrpc: LRPC-c40aa27dba65932328 ncalrpc: OLE1B22B46F7513EEC93CFF0FD6ED35 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-c92ec6c8c24df0b111 ncalrpc: OLED581786C7EE25F1FA94B8739E3B5 b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-c92ec6c8c24df0b111 ncalrpc: OLED581786C7EE25F1FA94B8739E3B5 e64b9aee-f372-4312-9a14-8f1502b5c8e3 version: v1.0 ncalrpc: LRPC-f26672a47e3d707c9f 13560fa9-8c09-4b56-a1fd-04d083b9b2a1 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA c2d1b5dd-fa81-4460-9dd6-e7658b85454b version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA f44e62af-dab1-44c2-8013-049a9de417d6 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\TAIBA\PIPE\wkssvc ncalrpc: LRPC-b3386bc56a648af4fa eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-b3386bc56a648af4fa f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-b3386bc56a648af4fa 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_ip_tcp: 176.9.102.120:57265 ncacn_np: \\TAIBA\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncalrpc: LRPC-d545154b4205ca14e1 e7a216af-1ec1-447f-8d3f-a87278db564d version: v1.0 ncalrpc: LRPC-dc6f3d7cae2e2a928c 26268c86-e770-433e-86ef-5f3ba6731fba version: v1.0 ncalrpc: LRPC-04cf686a79bb7eaaf7 ncalrpc: OLE61B2EAB32F6C54FFD0B0150FD04F 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-66e222520760116002 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-66e222520760116002 76f03f96-cdfd-44fc-a22c-64950a001209 version: v1.0 protocol: [MS-PAR]: Print System Asynchronous Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 12345678-1234-abcd-ef00-0123456789ab version: v1.0 protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 b58aa02e-2884-4e97-8176-4ee06d794184 version: v1.0 provider: sysmain.dll ncalrpc: LRPC-ab0fafa66c4f87df9a a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncalrpc: LRPC-8647e1850274b4c8f2 650a7e26-eab8-5533-ce43-9c1dfce11511 version: v1.0 annotation: Vpn APIs ncalrpc: LRPC-38e4325f830272b52e ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\TAIBA\PIPE\ROUTER 1d45e083-478f-437c-9618-3594ced8c235 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 d22895ef-aff4-42c5-a5b2-b14466d34ab4 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 95095ec8-32ea-4eb0-a3e2-041f97b36168 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 d4051bde-9cdd-4910-b393-4aa85ec3c482 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 7df1ceae-de4e-4e6f-ab14-49636e7c2052 version: v1.0 ncalrpc: LRPC-883fd5741c3cf06999 a9086cbe-b9de-913a-4b50-525250524f50 version: v29725.15362 annotation: DEFER_THREAD_INIT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-c75c-28ad-4b50-52524f424a53 version: v29725.15362 annotation: PRRoot ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-acd6-389b-4b50-52524f424a53 version: v29725.15362 annotation: AntiRansom ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-97cf-5c32-4b50-525250524f50 version: v29725.15362 annotation: native file io object streams ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-d7d6-630a-4b50-525250524f50 version: v29725.15362 annotation: native file io object is a stream really ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-49dd-4e78-4b50-525250524f50 version: v29725.15362 annotation: antimalware.oas.PenderPtr ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-3fdc-66a9-4b50-525250524f50 version: v29725.15362 annotation: npOBJECT_STARTUP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-da96-8fb3-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_INTEGRAL_PARENT_IO ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-dfbb-7d89-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_SET_WRITE_ACCESS_tERROR ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-b130-2d78-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_EXECUTABLE_PARENT_IO_hOBJECT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-7dc3-c215-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_READONLY_tERROR ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-56be-b1b4-4b50-525250524f50 version: v29725.15362 annotation: npSCAN_OBJECT_CONTEXT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-7819-d199-4b50-525250524f50 version: v29725.15362 annotation: antimalware.am_core_dll.registered ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-1d09-1186-4b50-525250524f50 version: v29725.15362 annotation: npAVS_SCAN_AREA_ID ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-62c7-816c-4b50-525250524f50 version: v29725.15362 annotation: npUserContext ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-6122-0a2a-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_VIRTUAL_OBJECT_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-c49b-fe45-4b50-525250524f50 version: v29725.15362 annotation: PROTOCOL_TYPE ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-0276-35b6-4b50-525250524f50 version: v29725.15362 annotation: MESSAGE_CHECK_ONLY ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-86c2-73eb-4b50-525250524f50 version: v29725.15362 annotation: MESSAGE_IS_INCOMING ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-f7aa-5ba3-4b50-525250524f50 version: v29725.15362 annotation: npAVS_HTTP_RSP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-a39b-5baa-4b50-525250524f50 version: v29725.15362 annotation: npAVS_HTTP_REQ ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-050c-2b49-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_TASK_ID ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-f9a8-d5cb-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_PROFILE_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-1441-c93d-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_TASK_TYPE_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-e474-f035-4b50-525250524f50 version: v29725.15362 annotation: cpnPRAGUE_REMOTE_API ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-d801-7233-4b50-525250524f50 version: v29725.15362 annotation: PR_REMOTE_MANAGER_PROP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-454d-264a-4b50-525250494453 version: v29725.15362 annotation: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRUniversal#5658482A2813820E:572 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 176.9.102.120:54266 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc063A7B2 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 176.9.102.120:54295 897e2e5f-93f3-4376-9c9c-fd2277495c27 version: v1.0 annotation: Frs2 Service protocol: [MS-FRS2]: Distributed File System Replication Protocol provider: dfsrmig.exe ncacn_ip_tcp: 176.9.102.120:54330 ncalrpc: OLE07C23D345B2ABC7C3707F7742FE0 d249bd56-4cc0-4fd3-8ce6-6fe050d590cb version: v0.0 ncalrpc: LRPC-8562108f331b02ba3b d8140e00-5c46-4ae6-80ac-2f9a76df224c version: v0.0 ncalrpc: LRPC-8562108f331b02ba3b b1ef227e-dfa5-421e-82bb-67a6a129c496 version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 0fc77b1a-95d8-4a2e-a0c0-cff54237462b version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 8ec21e98-b5ce-4916-a3d6-449fa428a007 version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 a9086cbe-b30f-c865-4b50-525250494453 version: v29725.63512 annotation: PRRUniversal#1CD01B081AE5F6BC:6392 ncalrpc: PRRUniversal#1CD01B081AE5F6BC:6392 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-a5fb081076a4c131c6 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-74f537e18d0a86d959 ncalrpc: LRPC-74f537e18d0a86d959 ncalrpc: LRPC-74f537e18d0a86d959 a4b8d482-80ce-40d6-934d-b22a01a44fe7 version: v1.0 annotation: LicenseManager ncalrpc: LicenseServiceEndpoint bf4dc912-e52f-4904-8ebe-9317c1bdd497 version: v1.0 ncalrpc: LRPC-c2558dd879ec146a13 ncalrpc: OLE59FEEFEAEAEBFDB811A6187D9642 8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 version: v1.0 annotation: Group Policy RPC Interface provider: appmgmts.dll ncalrpc: LRPC-062005ba2b491b6426 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-e29f448c2045c2c9bf c503f532-443a-4c69-8300-ccd1fbdb3839 version: v2.0 ncalrpc: LRPC-356bcf17ebed844237 ncalrpc: OLE9EB24367B6F9245C9E6B3ED3FC63
2038832278 | 2024-04-18T10:27:47.513601389 / tcp
LDAP: SupportedExtension: 1.2.840.113556.1.4.1781 1.2.840.113556.1.4.2212 1.3.6.1.4.1.1466.101.119.1 1.3.6.1.4.1.1466.20037 1.3.6.1.4.1.4203.1.11.3 SupportedSASLMechanisms: DIGEST-MD5 EXTERNAL GSS-SPNEGO GSSAPI SupportedLDAPVersion: 2 3 SupportedLDAPPolicies: InitRecvTimeout MaxBatchReturnMessages MaxConnIdleTime MaxConnections MaxDatagramRecv MaxDirSyncDuration MaxNotificationPerConn MaxPageSize MaxPercentDirSyncRequests MaxPoolThreads MaxQueryDuration MaxReceiveBuffer MaxResultSetSize MaxResultSetsPerConn MaxTempTableSize MaxValRange MaxValRangeTransitive MinResultSets SystemMemoryLimitPercent ThreadMemoryLimit SupportedControl: 1.2.840.113556.1.4.1338 1.2.840.113556.1.4.1339 1.2.840.113556.1.4.1340 1.2.840.113556.1.4.1341 1.2.840.113556.1.4.1413 1.2.840.113556.1.4.1504 1.2.840.113556.1.4.1852 1.2.840.113556.1.4.1907 1.2.840.113556.1.4.1948 1.2.840.113556.1.4.1974 1.2.840.113556.1.4.2026 1.2.840.113556.1.4.2064 1.2.840.113556.1.4.2065 1.2.840.113556.1.4.2066 1.2.840.113556.1.4.2090 1.2.840.113556.1.4.2204 1.2.840.113556.1.4.2205 1.2.840.113556.1.4.2206 1.2.840.113556.1.4.2211 1.2.840.113556.1.4.2239 1.2.840.113556.1.4.2255 1.2.840.113556.1.4.2256 1.2.840.113556.1.4.2309 1.2.840.113556.1.4.2330 1.2.840.113556.1.4.2354 1.2.840.113556.1.4.319 1.2.840.113556.1.4.417 1.2.840.113556.1.4.473 1.2.840.113556.1.4.474 1.2.840.113556.1.4.521 1.2.840.113556.1.4.528 1.2.840.113556.1.4.529 1.2.840.113556.1.4.619 1.2.840.113556.1.4.801 1.2.840.113556.1.4.802 1.2.840.113556.1.4.805 1.2.840.113556.1.4.841 1.2.840.113556.1.4.970 2.16.840.1.113730.3.4.10 2.16.840.1.113730.3.4.9 SupportedCapabilities: 1.2.840.113556.1.4.1670 1.2.840.113556.1.4.1791 1.2.840.113556.1.4.1935 1.2.840.113556.1.4.2080 1.2.840.113556.1.4.2237 1.2.840.113556.1.4.800 SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=taibagroup,DC=ma ServerName: CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma SchemaNamingContext: CN=Schema,CN=Configuration,DC=taibagroup,DC=ma RootDomainNamingContext: DC=taibagroup,DC=ma NamingContexts: CN=Configuration,DC=taibagroup,DC=ma CN=Schema,CN=Configuration,DC=taibagroup,DC=ma DC=DomainDnsZones,DC=taibagroup,DC=ma DC=ForestDnsZones,DC=taibagroup,DC=ma DC=taibagroup,DC=ma LdapServiceName: taibagroup.ma:taiba$@TAIBAGROUP.MA IsSynchronized: TRUE IsGlobalCatalogReady: TRUE HighestCommittedUSN: 48747335 ForestFunctionality: 7 DsServiceName: CN=NTDS Settings,CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma DomainFunctionality: 7 DnsHostName: taiba.taibagroup.ma DefaultNamingContext: DC=taibagroup,DC=ma CurrentTime: 20240418102746.0Z ConfigurationNamingContext: CN=Configuration,DC=taibagroup,DC=ma
-1641318613 | 2024-04-18T19:25:52.637297389 / udp
0\x84\x00\x00\x0b\xa1\x02\x01\x07d\x84\x00\x00\x0b\x98\x04\x000\x84\x00\x00\x0b\x900\x84\x00\x00\x00\x1e\x04\x13domainFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00\x1e\x04\x13forestFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00(\x04\x1ddomainControllerFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x004\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x15\x04\x13DC=taibagroup,DC=ma0\x84\x00\x00\x00;\x04\x0fldapServiceName1\x84\x00\x00\x00$\x04"taibagroup.ma:taiba$@TAIBAGROUP.MA0\x84\x00\x00\x00"\x04\x14isGlobalCatalogReady1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00I\x04\x17supportedSASLMechanisms1\x84\x00\x00\x00*\x04\x06GSSAPI\x04\nGSS-SPNEGO\x04\x08EXTERNAL\x04\nDIGEST-MD50\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x9a\x04\x15supportedLDAPPolicies1\x84\x00\x00\x01}\x04\x0eMaxPoolThreads\x04\x19MaxPercentDirSyncRequests\x04\x0fMaxDatagramRecv\x04\x10MaxReceiveBuffer\x04\x0fInitRecvTimeout\x04\x0eMaxConnections\x04\x0fMaxConnIdleTime\x04\x0bMaxPageSize\x04\x16MaxBatchReturnMessages\x04\x10MaxQueryDuration\x04\x12MaxDirSyncDuration\x04\x10MaxTempTableSize\x04\x10MaxResultSetSize\x04\rMinResultSets\x04\x14MaxResultSetsPerConn\x04\x16MaxNotificationPerConn\x04\x0bMaxValRange\x04\x15MaxValRangeTransitive\x04\x11ThreadMemoryLimit\x04\x18SystemMemoryLimitPercent0\x84\x00\x00\x03\xf4\x04\x10supportedControl1\x84\x00\x00\x03\xdc\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.1948\x04\x171.2.840.113556.1.4.1974\x04\x171.2.840.11355@\x06\x00\x00\xc0s!fk\x87F\x06\xea\x05\x00\x00\xea\x05\x00\x00\x01\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x02\x00\x00\x00\x01\x00\x00\x06\x001F7\xf6\xc1\x08\x00EH\x00,\x0f\xa6@\x002\x06a\xbfE@\x19\x1e\xb9\xa5\xec\xf4\xbb\xcf\xca\x84\x001F7\xf6\xc1\x08\x00EH\x05\xdc\x1f| \xb9m\x11xQ\xb0\tfx\xb9\xa5\xbf\x1b6.1.4.1341\x04\x171.2.840.113556.1.4.2026\x04\x171.2.840.113556.1.4.2064\x04\x171.2.840.113556.1.4.2065\x04\x171.2.840.113556.1.4.2066\x04\x171.2.840.113556.1.4.2090\x04\x171.2.840.113556.1.4.2205\x04\x171.2.840.113556.1.4.2204\x04\x171.2.840.113556.1.4.2206\x04\x171.2.840.113556.1.4.2211\x04\x171.2.840.113556.1.4.2239\x04\x171.2.840.113556.1.4.2255\x04\x171.2.840.113556.1.4.2256\x04\x171.2.840.113556.1.4.2309\x04\x171.2.840.113556.1.4.2330\x04\x171.2.840.113556.1.4.23540\x84\x00\x00\x00\xb2\x04\x15supportedCapabilities1\x84\x00\x00\x00\x95\x04\x161.2.840.113556.1.4.800\x04\x171.2.840.113556.1.4.1670\x04\x171.2.840.113556.1.4.1791\x04\x171.2.840.113556.1.4.1935\x04\x171.2.840.113556.1.4.2080\x04\x171.2.840.113556.1.4.22370\x84\x00\x00\x00V\x04\x11subschemaSubentry1\x84\x00\x00\x00=\x04;CN=Aggregate,CN=Schema,CN=Configuration,DC=taibagroup,DC=ma0\x84\x00\x00\x00p\x04\nserverName1\x84\x00\x00\x00^\x04\\CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma0\x84\x00\x00\x00K\x04\x13schemaNamingContext1\x84\x00\x00\x000\x04.CN=Schema,CN=Configuration,DC=taibagroup,DC=ma0\x84\x00\x00\x00\xcf\x04\x0enamingContexts1\x84\x00\x00\x00\xb9\x04\x13DC=taibagroup,DC=ma\x04$CN=Configuration,DC=taibagroup,DC=ma\x04.CN=Schema,CN=Configuration,DC=taibagroup,DC=ma\x04%DC=DomainDnsZones,DC=taibagroup,DC=ma\x04%DC=ForestDnsZones,DC=taibagroup,DC=ma0\x84\x00\x00\x00\x1c\x04\x0eisSynchronized1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00%\x04\x13highestCommittedUSN1\x84\x00\x00\x00\n\x04\x08487481890\x84\x00\x00\x00\x84\x04\rdsServiceName1\x84\x00\x00\x00o\x04mCN=NTDS Settings,CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma0\x84\x00\x00\x00(\x04\x0bdnsHostName1\x84\x00\x00\x00\x15\x04\x13taiba.taibagroup.ma0\x84\x00\x00\x001\x04\x14defaultNamingContext1\x84\x00\x00\x00\x15\x04\x13DC=taibagroup,DC=ma0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00
454654350 | 2024-04-17T17:58:15.697896593 / tcp
ncacn_http/1.0 Microsoft RPC Endpoint Mapper over HTTP 12345678-1234-abcd-ef00-01234567cffb version: v1.0 protocol: [MS-NRPC]: Netlogon Remote Protocol provider: netlogon.dll ncacn_ip_tcp: 176.9.102.120:54267 ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7 version: v0.0 annotation: RemoteAccessCheck protocol: [MS-RAA]: Remote Authorization API Protocol ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass ncalrpc: NETLOGON_LRPC ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 12345778-1234-abcd-ef00-0123456789ab version: v0.0 protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote provider: lsasrv.dll ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass e3514235-4b06-11d1-ab04-00c04fc2dcd2 version: v4.0 annotation: MS NT Directory DRS Interface protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol provider: ntdsai.dll ncacn_np: \\TAIBA\pipe\ba74f7e19483d9e7 ncacn_ip_http: 176.9.102.120:54259 ncalrpc: NTDS_LPC ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: OLE5551F5BBF527AD2125CFE77D3032 ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass ncalrpc: LRPC-33a3b3d5c14d4a866a ncalrpc: IUserProfile2 ncalrpc: LRPC-cb191be13eb91ea311 ncalrpc: senssvc ncalrpc: LRPC-d545154b4205ca14e1 ncalrpc: LRPC-76546d53b23a5a63e4 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncacn_ip_tcp: 176.9.102.120:49668 ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 176.9.102.120:49664 ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\TAIBA\pipe\lsass d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 176.9.102.120:49665 ncalrpc: WindowsShutdown ncacn_np: \\TAIBA\PIPE\InitShutdown ncalrpc: WMsgKRpc083840 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\TAIBA\PIPE\InitShutdown ncalrpc: WMsgKRpc083840 ncalrpc: WMsgKRpc089A31 ncalrpc: WMsgKRpc063A7B2 fc48cd89-98d6-4628-9839-86f7a3e4161a version: v1.0 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-7843f46835b4bed9f6 ncalrpc: LRPC-d0108359e4888354e6 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-da302b96782a41eccc ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-dd7de4328ae208244e ncalrpc: LRPC-e14de72c21171d3ed7 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 0d47017b-b33b-46ad-9e18-fe96456c5078 version: v1.0 ncalrpc: umpo 95406f0b-b239-4318-91bb-cea3a46ff0dc version: v1.0 ncalrpc: umpo 4ed8abcc-f1e2-438b-981f-bb0e8abc010c version: v1.0 ncalrpc: umpo 0ff1f646-13bb-400a-ab50-9a78f2b7a85a version: v1.0 ncalrpc: umpo 6982a06e-5fe2-46b1-b39c-a2c545bfa069 version: v1.0 ncalrpc: umpo 082a3471-31b6-422a-b931-a54401960c62 version: v1.0 ncalrpc: umpo fae436b0-b864-4a87-9eda-298547cd82f2 version: v1.0 ncalrpc: umpo e53d94ca-7464-4839-b044-09a2fb8b3ae5 version: v1.0 ncalrpc: umpo 178d84be-9291-4994-82c6-3f909aca5a03 version: v1.0 ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v2.0 ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-ee0bb33c8f2a455494 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v2.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v2.0 ncalrpc: OLE9D94CF61EE1184EE9C77DD5A56A9 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: LRPC-2ec7144259382b5b78 ncalrpc: actkernel ncalrpc: umpo dd59071b-3215-4c59-8481-972edadc0f6a version: v1.0 ncalrpc: actkernel ncalrpc: umpo 0361ae94-0316-4c6c-8ad8-c594375800e2 version: v1.0 ncalrpc: umpo 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: umpo f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-1e261afcd30f80f93c ncalrpc: LRPC-0cca4d14414b7ddbb4 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-acd98271a9a3d35a24 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 ncalrpc: LRPC-b93b7b2731e511e9f4 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-a747df2261a043274e ncalrpc: OLED5F7A0CE789056A6D930D19A12B4 ncalrpc: LRPC-7843f46835b4bed9f6 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 ncalrpc: LRPC-d361a2212aa4f577f3 a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-9c7232bca057c99d09 ncalrpc: LRPC-d0108359e4888354e6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-9f7a90e81e7ebc8714 ncalrpc: DNSResolver f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 176.9.102.120:49666 ncacn_np: \\TAIBA\pipe\eventlog ncalrpc: eventlog 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 176.9.102.120:49667 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 176.9.102.120:49667 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-fca9f063df54c3f83d ncalrpc: ubpmtaskhostchannel ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\TAIBA\PIPE\atsvc ncalrpc: LRPC-d98be83edd665e628d 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-d98be83edd665e628d 3f787932-3452-4363-8651-6ea97bb373bb version: v1.0 annotation: NSP Rpc Interface ncalrpc: LRPC-6088317d7d89c29e1b ncalrpc: OLE55D381BA927E6D7D2F7D6B47B652 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-a3c00f22b867b3db21 ncalrpc: LRPC-d7c0c8741f8f425206 ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-d7c0c8741f8f425206 ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-73a570215dfab0c402 ncalrpc: LRPC-fb4706cf8384abfb90 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-fb4706cf8384abfb90 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: 08c3af11-1ea8-4572-8bcb-d32c1888d6e8 ncalrpc: LRPC-167e160658f634d0d6 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-cef8fcc2c3689c3b64 c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: OLEE1C9A25A5E0896A73439B656544F ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-9e2f2504fb4e0372d7 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-9e2f2504fb4e0372d7 509bc7ae-77be-4ee8-b07c-0d096bb44345 version: v1.0 ncalrpc: LRPC-c40aa27dba65932328 ncalrpc: OLE1B22B46F7513EEC93CFF0FD6ED35 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-c92ec6c8c24df0b111 ncalrpc: OLED581786C7EE25F1FA94B8739E3B5 b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-c92ec6c8c24df0b111 ncalrpc: OLED581786C7EE25F1FA94B8739E3B5 e64b9aee-f372-4312-9a14-8f1502b5c8e3 version: v1.0 ncalrpc: LRPC-f26672a47e3d707c9f 13560fa9-8c09-4b56-a1fd-04d083b9b2a1 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA c2d1b5dd-fa81-4460-9dd6-e7658b85454b version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA f44e62af-dab1-44c2-8013-049a9de417d6 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-775083c1ccb92b28b9 ncalrpc: OLE746DBCE48B44AAD9AB6C4F62C0BA 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\TAIBA\PIPE\wkssvc ncalrpc: LRPC-b3386bc56a648af4fa eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-b3386bc56a648af4fa f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-b3386bc56a648af4fa 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_ip_tcp: 176.9.102.120:57265 ncacn_np: \\TAIBA\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncalrpc: LRPC-d545154b4205ca14e1 e7a216af-1ec1-447f-8d3f-a87278db564d version: v1.0 ncalrpc: LRPC-dc6f3d7cae2e2a928c 26268c86-e770-433e-86ef-5f3ba6731fba version: v1.0 ncalrpc: LRPC-04cf686a79bb7eaaf7 ncalrpc: OLE61B2EAB32F6C54FFD0B0150FD04F 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-66e222520760116002 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-66e222520760116002 76f03f96-cdfd-44fc-a22c-64950a001209 version: v1.0 protocol: [MS-PAR]: Print System Asynchronous Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 12345678-1234-abcd-ef00-0123456789ab version: v1.0 protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 176.9.102.120:54260 ncalrpc: LRPC-33bd702e2e901bde87 b58aa02e-2884-4e97-8176-4ee06d794184 version: v1.0 provider: sysmain.dll ncalrpc: LRPC-ab0fafa66c4f87df9a a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncalrpc: LRPC-8647e1850274b4c8f2 650a7e26-eab8-5533-ce43-9c1dfce11511 version: v1.0 annotation: Vpn APIs ncalrpc: LRPC-38e4325f830272b52e ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\TAIBA\PIPE\ROUTER 1d45e083-478f-437c-9618-3594ced8c235 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 d22895ef-aff4-42c5-a5b2-b14466d34ab4 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 95095ec8-32ea-4eb0-a3e2-041f97b36168 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 d4051bde-9cdd-4910-b393-4aa85ec3c482 version: v1.0 ncalrpc: LRPC-3705b6b25e7b8e8c7f ncalrpc: OLE5BE909F5953C0081DC6DC671E5B5 7df1ceae-de4e-4e6f-ab14-49636e7c2052 version: v1.0 ncalrpc: LRPC-883fd5741c3cf06999 a9086cbe-b9de-913a-4b50-525250524f50 version: v29725.15362 annotation: DEFER_THREAD_INIT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-c75c-28ad-4b50-52524f424a53 version: v29725.15362 annotation: PRRoot ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-acd6-389b-4b50-52524f424a53 version: v29725.15362 annotation: AntiRansom ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-97cf-5c32-4b50-525250524f50 version: v29725.15362 annotation: native file io object streams ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-d7d6-630a-4b50-525250524f50 version: v29725.15362 annotation: native file io object is a stream really ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-49dd-4e78-4b50-525250524f50 version: v29725.15362 annotation: antimalware.oas.PenderPtr ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-3fdc-66a9-4b50-525250524f50 version: v29725.15362 annotation: npOBJECT_STARTUP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-da96-8fb3-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_INTEGRAL_PARENT_IO ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-dfbb-7d89-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_SET_WRITE_ACCESS_tERROR ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-b130-2d78-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_EXECUTABLE_PARENT_IO_hOBJECT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-7dc3-c215-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_OBJECT_READONLY_tERROR ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-56be-b1b4-4b50-525250524f50 version: v29725.15362 annotation: npSCAN_OBJECT_CONTEXT ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-7819-d199-4b50-525250524f50 version: v29725.15362 annotation: antimalware.am_core_dll.registered ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-1d09-1186-4b50-525250524f50 version: v29725.15362 annotation: npAVS_SCAN_AREA_ID ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-62c7-816c-4b50-525250524f50 version: v29725.15362 annotation: npUserContext ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-6122-0a2a-4b50-525250524f50 version: v29725.15362 annotation: npENGINE_VIRTUAL_OBJECT_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-c49b-fe45-4b50-525250524f50 version: v29725.15362 annotation: PROTOCOL_TYPE ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-0276-35b6-4b50-525250524f50 version: v29725.15362 annotation: MESSAGE_CHECK_ONLY ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-86c2-73eb-4b50-525250524f50 version: v29725.15362 annotation: MESSAGE_IS_INCOMING ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-f7aa-5ba3-4b50-525250524f50 version: v29725.15362 annotation: npAVS_HTTP_RSP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-a39b-5baa-4b50-525250524f50 version: v29725.15362 annotation: npAVS_HTTP_REQ ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-050c-2b49-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_TASK_ID ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-f9a8-d5cb-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_PROFILE_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-1441-c93d-4b50-525250524f50 version: v29725.15362 annotation: cpTASK_MANAGER_TASK_TYPE_NAME ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-e474-f035-4b50-525250524f50 version: v29725.15362 annotation: cpnPRAGUE_REMOTE_API ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-d801-7233-4b50-525250524f50 version: v29725.15362 annotation: PR_REMOTE_MANAGER_PROP ncalrpc: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRNameService:572 a9086cbe-454d-264a-4b50-525250494453 version: v29725.15362 annotation: PRRUniversal#5658482A2813820E:572 ncalrpc: PRRUniversal#5658482A2813820E:572 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 176.9.102.120:54266 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc063A7B2 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 176.9.102.120:54295 897e2e5f-93f3-4376-9c9c-fd2277495c27 version: v1.0 annotation: Frs2 Service protocol: [MS-FRS2]: Distributed File System Replication Protocol provider: dfsrmig.exe ncacn_ip_tcp: 176.9.102.120:54330 ncalrpc: OLE07C23D345B2ABC7C3707F7742FE0 d249bd56-4cc0-4fd3-8ce6-6fe050d590cb version: v0.0 ncalrpc: LRPC-8562108f331b02ba3b d8140e00-5c46-4ae6-80ac-2f9a76df224c version: v0.0 ncalrpc: LRPC-8562108f331b02ba3b b1ef227e-dfa5-421e-82bb-67a6a129c496 version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 0fc77b1a-95d8-4a2e-a0c0-cff54237462b version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 8ec21e98-b5ce-4916-a3d6-449fa428a007 version: v0.0 ncalrpc: LRPC-bb3aaa3f71723c45c6 ncalrpc: OLE43E3CE1851CFAB411D789FF2BD11 a9086cbe-b30f-c865-4b50-525250494453 version: v29725.63512 annotation: PRRUniversal#1CD01B081AE5F6BC:6392 ncalrpc: PRRUniversal#1CD01B081AE5F6BC:6392 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-a5fb081076a4c131c6 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-74f537e18d0a86d959 ncalrpc: LRPC-74f537e18d0a86d959 ncalrpc: LRPC-74f537e18d0a86d959 a4b8d482-80ce-40d6-934d-b22a01a44fe7 version: v1.0 annotation: LicenseManager ncalrpc: LicenseServiceEndpoint bf4dc912-e52f-4904-8ebe-9317c1bdd497 version: v1.0 ncalrpc: LRPC-c2558dd879ec146a13 ncalrpc: OLE59FEEFEAEAEBFDB811A6187D9642 8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 version: v1.0 annotation: Group Policy RPC Interface provider: appmgmts.dll ncalrpc: LRPC-062005ba2b491b6426 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-e29f448c2045c2c9bf c503f532-443a-4c69-8300-ccd1fbdb3839 version: v2.0 ncalrpc: LRPC-356bcf17ebed844237 ncalrpc: OLE9EB24367B6F9245C9E6B3ED3FC63
1670374961 | 2024-04-19T21:34:48.3491013268 / tcp
LDAP: SupportedExtension: 1.2.840.113556.1.4.1781 1.2.840.113556.1.4.2212 1.3.6.1.4.1.1466.101.119.1 1.3.6.1.4.1.1466.20037 1.3.6.1.4.1.4203.1.11.3 SupportedSASLMechanisms: DIGEST-MD5 EXTERNAL GSS-SPNEGO GSSAPI SupportedLDAPVersion: 2 3 SupportedLDAPPolicies: InitRecvTimeout MaxBatchReturnMessages MaxConnIdleTime MaxConnections MaxDatagramRecv MaxDirSyncDuration MaxNotificationPerConn MaxPageSize MaxPercentDirSyncRequests MaxPoolThreads MaxQueryDuration MaxReceiveBuffer MaxResultSetSize MaxResultSetsPerConn MaxTempTableSize MaxValRange MaxValRangeTransitive MinResultSets SystemMemoryLimitPercent ThreadMemoryLimit SupportedControl: 1.2.840.113556.1.4.1338 1.2.840.113556.1.4.1339 1.2.840.113556.1.4.1340 1.2.840.113556.1.4.1341 1.2.840.113556.1.4.1413 1.2.840.113556.1.4.1504 1.2.840.113556.1.4.1852 1.2.840.113556.1.4.1907 1.2.840.113556.1.4.1948 1.2.840.113556.1.4.1974 1.2.840.113556.1.4.2026 1.2.840.113556.1.4.2064 1.2.840.113556.1.4.2065 1.2.840.113556.1.4.2066 1.2.840.113556.1.4.2090 1.2.840.113556.1.4.2204 1.2.840.113556.1.4.2205 1.2.840.113556.1.4.2206 1.2.840.113556.1.4.2211 1.2.840.113556.1.4.2239 1.2.840.113556.1.4.2255 1.2.840.113556.1.4.2256 1.2.840.113556.1.4.2309 1.2.840.113556.1.4.2330 1.2.840.113556.1.4.2354 1.2.840.113556.1.4.319 1.2.840.113556.1.4.417 1.2.840.113556.1.4.473 1.2.840.113556.1.4.474 1.2.840.113556.1.4.521 1.2.840.113556.1.4.528 1.2.840.113556.1.4.529 1.2.840.113556.1.4.619 1.2.840.113556.1.4.801 1.2.840.113556.1.4.802 1.2.840.113556.1.4.805 1.2.840.113556.1.4.841 1.2.840.113556.1.4.970 2.16.840.1.113730.3.4.10 2.16.840.1.113730.3.4.9 SupportedCapabilities: 1.2.840.113556.1.4.1670 1.2.840.113556.1.4.1791 1.2.840.113556.1.4.1935 1.2.840.113556.1.4.2080 1.2.840.113556.1.4.2237 1.2.840.113556.1.4.800 SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=taibagroup,DC=ma ServerName: CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma SchemaNamingContext: CN=Schema,CN=Configuration,DC=taibagroup,DC=ma RootDomainNamingContext: DC=taibagroup,DC=ma NamingContexts: CN=Configuration,DC=taibagroup,DC=ma CN=Schema,CN=Configuration,DC=taibagroup,DC=ma DC=DomainDnsZones,DC=taibagroup,DC=ma DC=ForestDnsZones,DC=taibagroup,DC=ma DC=taibagroup,DC=ma LdapServiceName: taibagroup.ma:taiba$@TAIBAGROUP.MA IsSynchronized: TRUE IsGlobalCatalogReady: TRUE HighestCommittedUSN: 48751015 ForestFunctionality: 7 DsServiceName: CN=NTDS Settings,CN=TAIBA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=taibagroup,DC=ma DomainFunctionality: 7 DnsHostName: taiba.taibagroup.ma DefaultNamingContext: DC=taibagroup,DC=ma CurrentTime: 20240419213447.0Z ConfigurationNamingContext: CN=Configuration,DC=taibagroup,DC=ma
1917794375 | 2024-05-11T03:24:01.5112463306 / tcp
MySQL: Protocol Version: 10 Version: 8.0.36 Capabilities: 65535 Server Language: 255 Server Status: 2 Extended Server Capabilities: 57343 Authentication Plugin: caching_sha2_password
1489525118 | 2024-04-24T09:10:59.8333495985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 24 Apr 2024 09:10:58 GMT Connection: close Content-Length: 315 WinRM NTLM Info: OS: Windows Server 2022 OS Build: 10.0.20348 Target Name: TAIBAGROUP NetBIOS Domain Name: TAIBAGROUP NetBIOS Computer Name: TAIBA DNS Domain Name: taibagroup.ma DNS Tree Name: taibagroup.ma FQDN: taiba.taibagroup.ma
839434290 | 2024-05-09T23:21:32.6793808443 / tcp
HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 431 Date: Thu, 09 May 2024 23:21:29 GMT <!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1></body></html>