| Hostnames |
2-228-70-150.ip190.fastwebnet.it autodiscover.ferrarisoft.com ftp.ferrarisoft.com imap.ferrarisoft.com mail.ferrarisoft.com pop3.ferrarisoft.com services.ferrarisoft.com smtp.ferrarisoft.com www.ferrarisoft.com |
| Domains | fastwebnet.it ferrarisoft.com |
| Country | Italy |
| City | Florence |
| Organization | Fastweb SpA |
| ISP | Fastweb SpA |
| ASN | AS12874 |
| Operating System | Windows (build 6.1.7601) |
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
| CVE-2010-3972 | 10.0Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information. |
| CVE-2010-2730 | 9.3Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability." |
| CVE-2010-1899 | 4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability." |
-2133547905 | 2024-06-04T00:36:57.88550925 / tcp
220 ferrarisoft.com Microsoft ESMTP MAIL Service ready at Tue, 4 Jun 2024 02:37:49 +0200 250-ferrarisoft.com Hello [224.53.88.105] 250-SIZE 41943040 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-AUTH NTLM LOGIN 250-8BITMIME 250-BINARYMIME 250 CHUNKING SMTP NTLM Info: OS: Windows 7/Windows Server 2008 R2 OS Build: 6.1.7601 Target Name: FERRARISOFT NetBIOS Domain Name: FERRARISOFT NetBIOS Computer Name: 2010EXCHSERVER DNS Domain Name: FERRARISOFT.LOCAL DNS Tree Name: FERRARISOFT.LOCAL FQDN: 2010EXCHSERVER.FERRARISOFT.LOCAL
-418162222 | 2024-05-26T08:59:16.46000680 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Fri, 01 Jan 2021 18:41:55 GMT Accept-Ranges: bytes ETag: "f4f56ac76de0d61:0" Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sun, 26 May 2024 09:00:12 GMT Content-Length: 120
-1615554685 | 2024-05-16T14:22:30.367515110 / tcp
+OK The Microsoft Exchange POP3 service is ready. +OK TOP UIDL SASL NTLM GSSAPI PLAIN USER STLS .
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:bb:85:68:f0:17:00:e6:cf:de:d8:1f:b2:34:24:9a:03:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Dec 16 17:27:35 2020 GMT
Not After : Mar 16 17:27:35 2021 GMT
Subject: CN=www.ferrarisoft.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:d1:13:9c:ba:0d:e4:ee:44:db:64:67:4d:c8:fd:
a1:11:29:5c:47:6a:f3:44:29:01:8f:b0:10:7e:f8:
2c:a2:64:cc:cf:68:f8:85:c9:72:15:14:05:55:08:
8b:c4:7a:5d:f5:83:03:d2:85:39:5b:a5:88:81:bb:
0b:58:31:7a:f3:9e:ff:1f:a7:93:1a:03:5d:37:e5:
76:76:60:6b:cc:95:81:57:d9:17:88:70:ab:3b:a8:
c1:54:d1:91:3f:2c:7b:f0:fb:ea:e7:aa:8d:89:45:
c7:cd:55:1d:87:41:2b:1f:cd:1b:79:28:f3:49:f0:
18:01:87:60:2c:a4:8d:d2:3e:2a:52:33:65:0d:21:
e6:e1:91:a1:59:c8:35:dd:32:cd:d6:c4:52:48:f8:
8e:f5:a7:1d:13:77:4d:50:7b:a5:00:33:4b:ab:f1:
a6:3f:b6:28:15:d0:d4:55:72:c9:6c:27:f6:2e:1a:
b8:b9:e7:5d:46:df:7b:6c:f9:f7:17:c3:52:00:d7:
88:fd:dd:e6:18:f9:d2:c7:9c:29:12:36:60:9c:61:
35:d8:bc:f9:dd:7f:ee:f3:62:d3:d8:c8:64:f1:9e:
9e:eb:73:b5:51:77:0b:28:1b:4f:52:bd:68:64:61:
6c:68:c2:ee:86:c5:45:cc:74:a4:2a:e6:a4:b0:d4:
11:16:50:7f:05:d5:d1:79:0a:d7:7e:b5:37:21:2b:
be:28:99:20:85:df:8f:a6:c7:72:51:0b:21:77:eb:
49:5f:1c:7d:66:ac:66:f5:78:a7:e8:54:fd:44:bb:
5e:16:3a:30:80:57:c8:a2:07:40:1a:aa:b2:d9:69:
ce:07:76:f9:5c:18:20:7e:e4:88:a0:98:4e:c0:c6:
58:da:ab:a6:31:64:9e:70:91:42:6f:5f:7a:b8:71:
58:31:29:9b:57:e0:52:c0:32:c8:f1:70:0b:50:15:
7f:19:78:88:c7:ac:49:13:72:95:f4:18:75:6f:84:
b7:27:2a:62:03:a3:5b:14:7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
06:F0:A2:96:A1:31:C6:9F:2A:DB:FA:84:E0:4D:B7:1B:B4:1E:CD:25
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:autodiscover.ferrarisoft.com, DNS:imap.ferrarisoft.com, DNS:mail.ferrarisoft.com, DNS:pop3.ferrarisoft.com, DNS:smtp.ferrarisoft.com, DNS:www.ferrarisoft.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
Timestamp : Dec 16 18:27:35.945 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:AC:30:D5:D2:E4:68:0B:B5:79:25:95:
79:08:44:5B:31:78:4C:D5:EB:7A:32:FB:76:60:92:1F:
D7:6F:0D:A9:3E:02:20:1E:1E:67:93:EE:E6:00:AB:B1:
D3:4B:F6:43:C6:F4:20:C7:CF:CD:06:D6:A1:FE:3B:81:
20:7A:51:70:D9:12:D1
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
Timestamp : Dec 16 18:27:35.925 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:71:24:C5:83:95:42:FC:03:E6:11:0E:A9:
C4:04:87:5B:20:D4:EC:FF:BA:7A:2A:C0:2D:3E:D8:82:
68:85:99:08:02:21:00:F1:B3:B0:16:9A:C1:23:45:07:
C8:99:52:5B:67:11:3F:1A:CB:31:FE:9D:D8:12:A9:0D:
34:F0:CB:C3:D1:A9:B1
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
1d:26:ba:78:df:08:cc:d3:03:e5:a4:5c:78:07:c8:b0:06:aa:
e5:05:c8:3a:c2:55:01:a7:8d:5d:a7:86:92:70:c4:bb:9f:ef:
00:59:99:cb:6d:2d:57:7b:c5:de:27:15:4d:63:31:22:12:d7:
01:d7:3d:b3:ac:32:e9:4d:26:96:e7:de:32:da:9a:41:bd:d1:
5b:b1:d3:ed:ef:cb:47:3a:d8:de:49:03:47:8d:f4:72:ad:50:
fc:48:d8:28:05:8a:cd:1f:6b:97:f6:d1:97:5f:d5:fe:97:1a:
79:c7:51:9d:6b:82:e8:46:d6:66:e6:5d:9e:83:da:82:a0:d5:
a8:16:55:f3:14:e5:79:f6:0b:e5:2c:78:47:2f:6e:3d:99:22:
62:1c:8c:1c:d0:70:04:c7:e8:99:96:f4:56:11:0a:21:95:bf:
9c:14:75:39:92:97:4c:8f:db:34:0a:07:87:c4:e4:b3:9e:9d:
e4:4a:8d:93:e4:62:16:00:5a:c1:38:4f:b6:51:b6:02:cd:3c:
23:81:32:1e:1e:d5:52:ca:1f:c3:0e:a7:cf:38:1c:89:8f:c7:
60:0b:7d:21:24:64:c0:c3:9c:a4:e1:14:e9:93:64:a3:b8:5e:
e4:f3:b2:a6:db:d5:ec:a9:55:aa:ee:93:71:f4:be:22:65:c4:
c3:d0:24:f4
678992546 | 2024-05-10T11:32:01.227058123 / udp
NTP protocolversion: 3 stratum: 1 leap: 0 precision: -6 rootdelay: 0.0 rootdisp: 10.8970336914 refid: 1280262988 reftime: 3924253411.87 poll: 0
1676092964 | 2024-05-19T07:13:10.067349135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 10.0.0.116:6005 ncalrpc: WindowsShutdown ncacn_np: \\2010EXCHSERVER\PIPE\InitShutdown ncalrpc: WMsgKRpc0FB440 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\2010EXCHSERVER\PIPE\InitShutdown ncalrpc: WMsgKRpc0FB440 ncalrpc: WMsgKRpc0FB651 ncalrpc: WMsgKRpc0C28052 c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-0ce5260cb0bd571153 ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 provider: gpsvc.dll ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 24019106-a203-4642-b88d-82dae9158929 version: v1.0 provider: authui.dll ncalrpc: LRPC-f0688193da309f2b72 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\2010EXCHSERVER\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-7b3a173e9a644c55ae ncalrpc: OLEF08AA430F1CE42F48BE32700A964 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-7b3a173e9a644c55ae ncalrpc: OLEF08AA430F1CE42F48BE32700A964 b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v1.0 annotation: KeyIso provider: keyiso.dll ncalrpc: OLE8A2DE3C897DE4404B6118DD294B7 ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345678-1234-abcd-ef00-01234567cffb version: v1.0 protocol: [MS-NRPC]: Netlogon Remote Protocol provider: netlogon.dll ncalrpc: OLE8A2DE3C897DE4404B6118DD294B7 ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345778-1234-abcd-ef00-0123456789ab version: v0.0 protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote provider: lsasrv.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass f5cc5a18-4264-101a-8c59-08002b2f8426 version: v56.0 annotation: MS NT Directory NSP Interface protocol: [MS-NSPI]: Name Service Provider Interface (NSPI) Protocol provider: ntdsai.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass e3514235-4b06-11d1-ab04-00c04fc2dcd2 version: v4.0 annotation: MS NT Directory DRS Interface protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol provider: ntdsai.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 74103b90-29af-413f-b203-a3eb4f7e95b8 version: v4.0 ncalrpc: AVGAntivirus-public-endpoint ncalrpc: AVGAvService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGToolService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGBusinessService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGAvUI-FCFB76DC-1ABC-4319-A592-4B0CBD461637:2 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-1e28e62cd5c9481447 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-1e28e62cd5c9481447 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-1e28e62cd5c9481447 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\2010EXCHSERVER\PIPE\wkssvc ncalrpc: OLE19EE39FBF77E4BBF832519E745CA ncalrpc: keysvc2 ncalrpc: keysvc ncacn_np: \\2010EXCHSERVER\pipe\keysvc ncalrpc: DNSResolver 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 annotation: Spooler function endpoint provider: spoolsv.exe ncalrpc: spoolss ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 annotation: Spooler base remote object endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 annotation: Spooler function endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 10.0.0.116:6028 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 10.0.0.116:60391 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-0ddff308042c633c81 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc0C28052 897e2e5f-93f3-4376-9c9c-fd2277495c27 version: v1.0 annotation: Frs2 Service protocol: [MS-FRS2]: Distributed File System Replication Protocol provider: dfsrmig.exe ncacn_ip_tcp: 10.0.0.116:5722 ncalrpc: OLE28A2845D833C4345A0DA8B5C3740 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 b9fadb8d-53a1-41d7-b763-88d884b6b829 version: v1.0 annotation: Microsoft Exchange Topology Information Server RPC Interface ncalrpc: LRPC-bf233dfdc34aa30735 ncacn_ip_tcp: 10.0.0.116:31996 1544f5e0-613c-11d1-93df-00c04fd7bd09 version: v1.0 annotation: Microsoft Exchange RFR Interface protocol: [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol ncacn_ip_http: 10.0.0.116:6002 ncacn_ip_tcp: 10.0.0.116:32003 52d3f3f5-248c-4d74-a01f-a06e41d5cd59 version: v1.0 ncalrpc: LRPC-cdb9279405e17f229a ncacn_ip_tcp: 10.0.0.116:32008 41f5fae1-e0ac-414c-a721-0d287466cb23 version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 640aa52e-d472-443a-952c-4d3fe97f480c version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 bd5790c9-d855-42b0-990f-3dfed8c184b3 version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 8384fc47-956a-4d1e-ab2a-1205014f96ec version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 5df3c257-334b-4e96-9efb-a0619255be09 version: v1.0 annotation: 10448 EdgeTransport ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 ncalrpc: LRPC-d2239ddc8001a7a8e8 ncacn_ip_tcp: 10.0.0.116:32079 ncalrpc: LRPC-d2239ddc8001a7a8e8 ncacn_ip_tcp: 10.0.0.116:32079 4d88f820-8c32-4453-9e30-7297e2fcf025 version: v1.0 ncalrpc: LRPC-6b8dc1805c71bee186 ncacn_ip_tcp: 10.0.0.116:32028 20434699-5e7e-47d6-95f6-698c4a0ec2f0 version: v1.0 ncalrpc: LRPC-44fb126f2aaff69cc4 ncacn_ip_tcp: 10.0.0.116:32032 d9318e75-8a8b-4abb-88e7-aceb01f09e60 version: v1.0 ncalrpc: LRPC-44fb126f2aaff69cc4 ncacn_ip_tcp: 10.0.0.116:32032 abb2ba17-588c-4c52-8dd9-c9a7030bdf26 version: v2.0 ncalrpc: LRPC-28de081d27734db544 ncacn_ip_tcp: 10.0.0.116:32047 5261574a-4572-206e-b268-6b199213b4e4 version: v0.256 protocol: [MS-OXCRPC]: Wire Format Protocol ncacn_ip_http: 10.0.0.116:6001 ncacn_ip_tcp: 10.0.0.116:32050 a4f1db00-ca47-1067-b31f-00dd010662da version: v0.20736 protocol: [MS-OXCRPC]: Wire Format Protocol ncacn_ip_http: 10.0.0.116:6001 ncacn_ip_tcp: 10.0.0.116:32050 37fc1b02-da36-4b27-a745-bf2f58a98ff6 version: v3.0 ncalrpc: LRPC-3d30899a9e9515b76d ncacn_ip_tcp: 10.0.0.116:32055 f224209f-9076-40f7-98ad-5416dbfa178e version: v3.0 ncalrpc: LRPC-3d30899a9e9515b76d ncacn_ip_tcp: 10.0.0.116:32055 76c0d124-a18e-49d4-adf1-d8c6ba868ea6 version: v1.0 ncalrpc: LRPC-9fb93bcab3c9e182bb ncacn_ip_tcp: 10.0.0.116:32086 4a020372-bb0a-4031-a5a7-7c6896522c00 version: v1.0 ncalrpc: LRPC-9fb93bcab3c9e182bb ncacn_ip_tcp: 10.0.0.116:32086 f1f21151-7185-4170-ac8d-9bb077c29bd3 version: v1.0 ncalrpc: LRPC-d0329e4ae718c5d7e7 ncacn_ip_tcp: 10.0.0.116:32118 88d01b61-c20b-4dc0-a4d9-1d72952e42b8 version: v1.256 annotation: Microsoft Exchange Forms Based Authentication RPC Interface ncalrpc: LRPC-2fff0f147eff1ed913 938fe036-ede6-4f6c-966e-a3d7300279c8 version: v0.256 annotation: Exchange Server STORE EMSMDBPOOL Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 31e68719-d4fc-401a-8788-bc56169a336b version: v0.256 annotation: Exchange Server STORE Async EMSMDBMT Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 df831451-edad-415d-905f-9d3793f92db3 version: v0.20736 annotation: Exchange Server STORE EMSMDBMT Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 a9e05b20-6f57-4e24-a540-52412017e6ff version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 bf6dd426-77b4-44b3-984e-d413fc075562 version: v2.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 1453c42c-0fa6-11d2-a910-00c04f990f3b version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 10f24e8e-0fa6-11d2-a910-00c04f990f3b version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 da107c01-2b50-44d7-9d5f-bfd4fd8e95ed version: v5.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 99e64010-b032-11d0-97a4-00c04fd6551d version: v4.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 89742ace-a9ed-11cf-9c0c-08002be7ae86 version: v2.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 3cb4be69-9ba1-448c-9a44-a1f759a1878a version: v1.256 annotation: MS Exchange Recipient Update Service RPC Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 f930c514-1215-11d3-99a5-00a0c9b61b04 version: v1.0 annotation: MS Exchange System Attendant Cluster Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 83d72bf0-0d89-11ce-b13f-00aa003bac6c version: v6.0 annotation: MS Exchange System Attendant Private Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 469d6ec0-0d87-11ce-b13f-00aa003bac6c version: v16.256 annotation: MS Exchange System Attendant Public Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126
1374829731 | 2024-05-16T13:37:13.037656143 / tcp
220 ferrarisoft.com Microsoft ESMTP MAIL Service ready at Thu, 16 May 2024 15:37:38 +0200\r\n
-418162222 | 2024-06-02T03:34:04.023320443 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Fri, 01 Jan 2021 18:41:55 GMT Accept-Ranges: bytes ETag: "f4f56ac76de0d61:0" Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sun, 02 Jun 2024 03:35:04 GMT Content-Length: 120
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d6:5d:b5:4d:a9:fa:c0:19:ee:55:b3:be:15:ba:fa:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: May 7 09:41:51 2024 GMT
Not After : Aug 5 09:41:50 2024 GMT
Subject: CN=www.ferrarisoft.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:80:07:87:d7:dd:3a:7b:7e:81:d7:ba:12:cf:2a:
36:43:b9:0e:fe:31:de:56:b1:98:2d:7e:56:56:83:
06:f1:e7:49:fa:0e:3c:75:68:47:00:0b:fe:f6:7d:
37:b7:b3:a2:e4:c5:61:cc:0f:07:ec:91:d2:50:93:
35:50:e6:04:ef:d8:44:31:1a:44:fe:79:aa:58:8d:
fe:35:97:36:84:c1:7c:cf:14:2d:0a:f4:44:23:71:
ce:89:2c:09:41:a6:cb:b1:db:12:db:ea:c5:64:ef:
cd:5e:5b:bd:c9:80:2d:0d:e0:21:cd:71:0a:1c:da:
89:93:ce:e8:cf:61:a0:e4:86:e0:f4:f9:02:f8:3b:
df:a7:e1:14:fd:51:67:c9:1c:17:cb:09:6f:f5:38:
3c:b8:ad:64:a7:33:03:89:2f:9f:94:80:80:5b:63:
01:01:08:ce:62:15:4c:3d:43:d6:c3:7b:b9:d0:78:
bd:d0:cb:2b:b8:55:55:7f:87:3a:53:6d:77:67:b9:
c0:4f:e1:8b:2d:6c:81:95:89:e4:40:1c:14:01:be:
f3:3a:65:3f:0b:c4:48:50:e1:91:36:3b:a7:18:77:
b5:14:3c:ba:94:42:15:5c:29:81:9b:7a:28:b2:56:
6c:a0:5c:53:ed:18:cf:66:c6:86:bf:57:99:35:be:
18:4d:9a:e1:73:49:1e:11:4a:21:14:49:07:00:8b:
be:0e:68:6e:b6:f4:78:92:30:10:67:a8:62:d7:9c:
08:92:dd:47:f2:62:a0:fa:99:c5:ed:96:17:da:11:
00:52:c8:db:aa:9a:4e:3c:af:80:21:39:07:21:de:
f9:e4:82:a9:f6:c7:21:84:70:10:47:18:55:d9:fe:
8f:91:df:c1:42:72:ae:c2:ca:c5:c2:99:2d:26:50:
a2:a6:f0:aa:6c:01:e7:66:e7:26:a7:c3:2c:66:7a:
bb:74:c6:65:7d:b9:8b:03:4a:9e:22:ca:e8:c4:99:
88:3f:b8:c7:98:d5:44:b4:84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
B1:8E:6B:A0:B9:1A:E0:77:23:88:68:9E:BD:7F:73:88:56:F3:98:92
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:ftp.ferrarisoft.com, DNS:services.ferrarisoft.com, DNS:www.ferrarisoft.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
Timestamp : May 7 10:41:52.063 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:17:F9:ED:34:99:9D:83:87:52:0F:69:F7:
52:73:08:66:82:21:BE:E7:B0:10:88:AB:93:E2:F3:9F:
43:CC:8C:F2:02:20:5F:07:42:95:1F:7A:27:4C:70:4A:
AB:47:E2:7F:95:26:B6:81:AF:D0:66:DF:F0:61:AA:70:
D2:8B:6F:F0:E4:5F
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : May 7 10:41:52.116 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:E3:63:24:D3:4B:BA:65:F5:E8:70:3E:
C8:95:54:B5:1F:27:C3:42:9A:93:A0:09:E1:B3:37:76:
37:DE:88:D6:0B:02:21:00:BE:44:59:5F:9C:20:A3:CE:
6B:AD:29:2B:27:24:AD:17:85:D6:07:5E:18:AD:B1:1B:
76:F0:24:51:D5:C7:EA:26
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
b3:d8:87:2d:58:79:97:7d:2f:3c:f6:54:6b:95:35:66:9d:fb:
60:3a:56:c7:f1:57:16:49:b3:e4:eb:f5:de:92:dd:1d:fb:46:
61:8a:ee:ea:90:98:7d:7c:36:73:cf:02:b8:07:52:e6:78:ce:
2f:7d:1f:f0:5f:8d:df:6e:1f:7e:5e:30:fc:dd:f6:72:a7:8c:
2d:9f:ae:8a:1c:0f:06:e3:d4:00:22:b1:74:4c:fe:fb:06:a4:
55:5a:ba:d0:0d:aa:58:b6:13:25:c9:fc:6d:49:c0:8e:47:f3:
8c:22:21:da:dc:57:27:65:8c:67:73:54:dc:11:4f:78:c6:7a:
0b:c2:3f:9e:fe:a7:99:a7:87:e6:34:f0:ae:7e:26:23:ec:8f:
d9:ad:80:2d:2b:6d:83:cf:fd:3e:ac:da:53:0f:5d:3c:85:da:
ce:53:02:2d:12:3e:26:fc:fd:d4:e1:5a:b6:cd:bc:ee:1b:0c:
1b:4c:01:1e:f3:44:7b:62:ed:11:6d:9a:66:f4:01:36:1b:d6:
00:cb:5e:58:8a:85:91:d4:e7:f4:c1:eb:c3:c1:76:4d:45:cc:
9f:e6:5c:99:13:bf:cd:6a:3e:c4:75:d6:9d:6a:1e:cd:32:0b:
04:c8:e9:ba:11:ba:82:76:fa:6f:bf:75:33:50:bc:2f:21:6b:
8e:1e:e0:85
446609599 | 2024-06-03T01:47:24.470716587 / tcp
220 ferrarisoft.com Microsoft ESMTP MAIL Service ready at Mon, 3 Jun 2024 03:48:25 +0200\r\n
-2003396792 | 2024-05-25T10:33:33.703139593 / tcp
ncacn_http/1.0 Microsoft RPC Endpoint Mapper over HTTP d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 10.0.0.116:6005 ncalrpc: WindowsShutdown ncacn_np: \\2010EXCHSERVER\PIPE\InitShutdown ncalrpc: WMsgKRpc0FB440 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\2010EXCHSERVER\PIPE\InitShutdown ncalrpc: WMsgKRpc0FB440 ncalrpc: WMsgKRpc0FB651 ncalrpc: WMsgKRpc0C28052 c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-0ce5260cb0bd571153 ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: IUserProfile2 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 10.0.0.116:6006 ncacn_np: \\2010EXCHSERVER\pipe\eventlog ncalrpc: eventlog 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncacn_np: \\2010EXCHSERVER\PIPE\srvsvc ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 10.0.0.116:6011 ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 provider: gpsvc.dll ncalrpc: OLE026E686473F74A6A86D278E3D532 ncalrpc: senssvc ncalrpc: IUserProfile2 24019106-a203-4642-b88d-82dae9158929 version: v1.0 provider: authui.dll ncalrpc: LRPC-f0688193da309f2b72 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\2010EXCHSERVER\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-7b3a173e9a644c55ae ncalrpc: OLEF08AA430F1CE42F48BE32700A964 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-7b3a173e9a644c55ae ncalrpc: OLEF08AA430F1CE42F48BE32700A964 b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v1.0 annotation: KeyIso provider: keyiso.dll ncalrpc: OLE8A2DE3C897DE4404B6118DD294B7 ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345678-1234-abcd-ef00-01234567cffb version: v1.0 protocol: [MS-NRPC]: Netlogon Remote Protocol provider: netlogon.dll ncalrpc: OLE8A2DE3C897DE4404B6118DD294B7 ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 10.0.0.116:6010 ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 12345778-1234-abcd-ef00-0123456789ab version: v0.0 protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote provider: lsasrv.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass f5cc5a18-4264-101a-8c59-08002b2f8426 version: v56.0 annotation: MS NT Directory NSP Interface protocol: [MS-NSPI]: Name Service Provider Interface (NSPI) Protocol provider: ntdsai.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass e3514235-4b06-11d1-ab04-00c04fc2dcd2 version: v4.0 annotation: MS NT Directory DRS Interface protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol provider: ntdsai.dll ncacn_ip_http: 10.0.0.116:6004 ncacn_ip_http: 10.0.0.116:6009 ncalrpc: NTDS_LPC ncacn_ip_tcp: 10.0.0.116:6008 ncalrpc: samss lpc ncalrpc: dsrole ncacn_np: \\2010EXCHSERVER\PIPE\protected_storage ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncalrpc: LRPC-f63a647b4824f6f221 ncacn_np: \\2010EXCHSERVER\pipe\lsass 74103b90-29af-413f-b203-a3eb4f7e95b8 version: v4.0 ncalrpc: AVGAntivirus-public-endpoint ncalrpc: AVGAvService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGToolService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGBusinessService-FCFB76DC-1ABC-4319-A592-4B0CBD461637 ncalrpc: AVGAvUI-FCFB76DC-1ABC-4319-A592-4B0CBD461637:2 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-1e28e62cd5c9481447 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-1e28e62cd5c9481447 dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-1e28e62cd5c9481447 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\2010EXCHSERVER\PIPE\wkssvc ncalrpc: OLE19EE39FBF77E4BBF832519E745CA ncalrpc: keysvc2 ncalrpc: keysvc ncacn_np: \\2010EXCHSERVER\pipe\keysvc ncalrpc: DNSResolver 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 annotation: Spooler function endpoint provider: spoolsv.exe ncalrpc: spoolss ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 annotation: Spooler base remote object endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 annotation: Spooler function endpoint protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncalrpc: spoolss 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 10.0.0.116:6028 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 10.0.0.116:60391 12345678-1234-abcd-ef00-0123456789ab version: v1.0 annotation: IPSec Policy agent endpoint protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncalrpc: LRPC-0ddff308042c633c81 12e65dd8-887f-41ef-91bf-8d816c42c2e7 version: v1.0 annotation: Secure Desktop LRPC interface provider: winlogon.exe ncalrpc: WMsgKRpc0C28052 897e2e5f-93f3-4376-9c9c-fd2277495c27 version: v1.0 annotation: Frs2 Service protocol: [MS-FRS2]: Distributed File System Replication Protocol provider: dfsrmig.exe ncacn_ip_tcp: 10.0.0.116:5722 ncalrpc: OLE28A2845D833C4345A0DA8B5C3740 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 ncalrpc: LRPC-724503b6fab39c32e5 b9fadb8d-53a1-41d7-b763-88d884b6b829 version: v1.0 annotation: Microsoft Exchange Topology Information Server RPC Interface ncalrpc: LRPC-bf233dfdc34aa30735 ncacn_ip_tcp: 10.0.0.116:31996 1544f5e0-613c-11d1-93df-00c04fd7bd09 version: v1.0 annotation: Microsoft Exchange RFR Interface protocol: [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol ncacn_ip_http: 10.0.0.116:6002 ncacn_ip_tcp: 10.0.0.116:32003 52d3f3f5-248c-4d74-a01f-a06e41d5cd59 version: v1.0 ncalrpc: LRPC-cdb9279405e17f229a ncacn_ip_tcp: 10.0.0.116:32008 41f5fae1-e0ac-414c-a721-0d287466cb23 version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 640aa52e-d472-443a-952c-4d3fe97f480c version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 bd5790c9-d855-42b0-990f-3dfed8c184b3 version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 8384fc47-956a-4d1e-ab2a-1205014f96ec version: v1.0 ncalrpc: OLE823D2129131541B89897633E90C0 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 5df3c257-334b-4e96-9efb-a0619255be09 version: v1.0 annotation: 10448 EdgeTransport ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 ncalrpc: LRPC-522729556b90b0695f ncacn_ip_tcp: 10.0.0.116:32017 ncalrpc: LRPC-d2239ddc8001a7a8e8 ncacn_ip_tcp: 10.0.0.116:32079 ncalrpc: LRPC-d2239ddc8001a7a8e8 ncacn_ip_tcp: 10.0.0.116:32079 4d88f820-8c32-4453-9e30-7297e2fcf025 version: v1.0 ncalrpc: LRPC-6b8dc1805c71bee186 ncacn_ip_tcp: 10.0.0.116:32028 20434699-5e7e-47d6-95f6-698c4a0ec2f0 version: v1.0 ncalrpc: LRPC-44fb126f2aaff69cc4 ncacn_ip_tcp: 10.0.0.116:32032 d9318e75-8a8b-4abb-88e7-aceb01f09e60 version: v1.0 ncalrpc: LRPC-44fb126f2aaff69cc4 ncacn_ip_tcp: 10.0.0.116:32032 abb2ba17-588c-4c52-8dd9-c9a7030bdf26 version: v2.0 ncalrpc: LRPC-28de081d27734db544 ncacn_ip_tcp: 10.0.0.116:32047 5261574a-4572-206e-b268-6b199213b4e4 version: v0.256 protocol: [MS-OXCRPC]: Wire Format Protocol ncacn_ip_http: 10.0.0.116:6001 ncacn_ip_tcp: 10.0.0.116:32050 a4f1db00-ca47-1067-b31f-00dd010662da version: v0.20736 protocol: [MS-OXCRPC]: Wire Format Protocol ncacn_ip_http: 10.0.0.116:6001 ncacn_ip_tcp: 10.0.0.116:32050 37fc1b02-da36-4b27-a745-bf2f58a98ff6 version: v3.0 ncalrpc: LRPC-3d30899a9e9515b76d ncacn_ip_tcp: 10.0.0.116:32055 f224209f-9076-40f7-98ad-5416dbfa178e version: v3.0 ncalrpc: LRPC-3d30899a9e9515b76d ncacn_ip_tcp: 10.0.0.116:32055 76c0d124-a18e-49d4-adf1-d8c6ba868ea6 version: v1.0 ncalrpc: LRPC-9fb93bcab3c9e182bb ncacn_ip_tcp: 10.0.0.116:32086 4a020372-bb0a-4031-a5a7-7c6896522c00 version: v1.0 ncalrpc: LRPC-9fb93bcab3c9e182bb ncacn_ip_tcp: 10.0.0.116:32086 f1f21151-7185-4170-ac8d-9bb077c29bd3 version: v1.0 ncalrpc: LRPC-d0329e4ae718c5d7e7 ncacn_ip_tcp: 10.0.0.116:32118 88d01b61-c20b-4dc0-a4d9-1d72952e42b8 version: v1.256 annotation: Microsoft Exchange Forms Based Authentication RPC Interface ncalrpc: LRPC-2fff0f147eff1ed913 938fe036-ede6-4f6c-966e-a3d7300279c8 version: v0.256 annotation: Exchange Server STORE EMSMDBPOOL Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 31e68719-d4fc-401a-8788-bc56169a336b version: v0.256 annotation: Exchange Server STORE Async EMSMDBMT Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 df831451-edad-415d-905f-9d3793f92db3 version: v0.20736 annotation: Exchange Server STORE EMSMDBMT Interface ncalrpc: OLE3F5388D16C194B009CF05685A8E9 ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 a9e05b20-6f57-4e24-a540-52412017e6ff version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 bf6dd426-77b4-44b3-984e-d413fc075562 version: v2.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 1453c42c-0fa6-11d2-a910-00c04f990f3b version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 10f24e8e-0fa6-11d2-a910-00c04f990f3b version: v1.0 annotation: Microsoft Information Store ncalrpc: MSExchangeIS_LPC ncacn_ip_tcp: 10.0.0.116:32124 da107c01-2b50-44d7-9d5f-bfd4fd8e95ed version: v5.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 99e64010-b032-11d0-97a4-00c04fd6551d version: v4.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 89742ace-a9ed-11cf-9c0c-08002be7ae86 version: v2.0 annotation: Exchange Server STORE ADMIN Interface ncalrpc: MSExchangeIS_LPC ncacn_ip_http: 10.0.0.116:6003 ncacn_ip_tcp: 10.0.0.116:32124 3cb4be69-9ba1-448c-9a44-a1f759a1878a version: v1.256 annotation: MS Exchange Recipient Update Service RPC Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 f930c514-1215-11d3-99a5-00a0c9b61b04 version: v1.0 annotation: MS Exchange System Attendant Cluster Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 83d72bf0-0d89-11ce-b13f-00aa003bac6c version: v6.0 annotation: MS Exchange System Attendant Private Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126 469d6ec0-0d87-11ce-b13f-00aa003bac6c version: v16.256 annotation: MS Exchange System Attendant Public Interface ncalrpc: LRPC-7621c693ce6580f21e ncacn_ip_tcp: 10.0.0.116:32126
38256582 | 2024-06-03T22:16:32.306691993 / tcp
220 ferrarisoft.com Microsoft ESMTP MAIL Service ready at Tue, 4 Jun 2024 00:17:33 +0200\r\n
-1300951327 | 2024-05-24T10:56:21.189483995 / tcp
+OK The Microsoft Exchange POP3 service is ready. +OK TOP UIDL SASL NTLM GSSAPI PLAIN USER .
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:bb:85:68:f0:17:00:e6:cf:de:d8:1f:b2:34:24:9a:03:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Dec 16 17:27:35 2020 GMT
Not After : Mar 16 17:27:35 2021 GMT
Subject: CN=www.ferrarisoft.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (3072 bit)
Modulus:
00:d1:13:9c:ba:0d:e4:ee:44:db:64:67:4d:c8:fd:
a1:11:29:5c:47:6a:f3:44:29:01:8f:b0:10:7e:f8:
2c:a2:64:cc:cf:68:f8:85:c9:72:15:14:05:55:08:
8b:c4:7a:5d:f5:83:03:d2:85:39:5b:a5:88:81:bb:
0b:58:31:7a:f3:9e:ff:1f:a7:93:1a:03:5d:37:e5:
76:76:60:6b:cc:95:81:57:d9:17:88:70:ab:3b:a8:
c1:54:d1:91:3f:2c:7b:f0:fb:ea:e7:aa:8d:89:45:
c7:cd:55:1d:87:41:2b:1f:cd:1b:79:28:f3:49:f0:
18:01:87:60:2c:a4:8d:d2:3e:2a:52:33:65:0d:21:
e6:e1:91:a1:59:c8:35:dd:32:cd:d6:c4:52:48:f8:
8e:f5:a7:1d:13:77:4d:50:7b:a5:00:33:4b:ab:f1:
a6:3f:b6:28:15:d0:d4:55:72:c9:6c:27:f6:2e:1a:
b8:b9:e7:5d:46:df:7b:6c:f9:f7:17:c3:52:00:d7:
88:fd:dd:e6:18:f9:d2:c7:9c:29:12:36:60:9c:61:
35:d8:bc:f9:dd:7f:ee:f3:62:d3:d8:c8:64:f1:9e:
9e:eb:73:b5:51:77:0b:28:1b:4f:52:bd:68:64:61:
6c:68:c2:ee:86:c5:45:cc:74:a4:2a:e6:a4:b0:d4:
11:16:50:7f:05:d5:d1:79:0a:d7:7e:b5:37:21:2b:
be:28:99:20:85:df:8f:a6:c7:72:51:0b:21:77:eb:
49:5f:1c:7d:66:ac:66:f5:78:a7:e8:54:fd:44:bb:
5e:16:3a:30:80:57:c8:a2:07:40:1a:aa:b2:d9:69:
ce:07:76:f9:5c:18:20:7e:e4:88:a0:98:4e:c0:c6:
58:da:ab:a6:31:64:9e:70:91:42:6f:5f:7a:b8:71:
58:31:29:9b:57:e0:52:c0:32:c8:f1:70:0b:50:15:
7f:19:78:88:c7:ac:49:13:72:95:f4:18:75:6f:84:
b7:27:2a:62:03:a3:5b:14:7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
06:F0:A2:96:A1:31:C6:9F:2A:DB:FA:84:E0:4D:B7:1B:B4:1E:CD:25
X509v3 Authority Key Identifier:
14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:autodiscover.ferrarisoft.com, DNS:imap.ferrarisoft.com, DNS:mail.ferrarisoft.com, DNS:pop3.ferrarisoft.com, DNS:smtp.ferrarisoft.com, DNS:www.ferrarisoft.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
Timestamp : Dec 16 18:27:35.945 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:AC:30:D5:D2:E4:68:0B:B5:79:25:95:
79:08:44:5B:31:78:4C:D5:EB:7A:32:FB:76:60:92:1F:
D7:6F:0D:A9:3E:02:20:1E:1E:67:93:EE:E6:00:AB:B1:
D3:4B:F6:43:C6:F4:20:C7:CF:CD:06:D6:A1:FE:3B:81:
20:7A:51:70:D9:12:D1
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
Timestamp : Dec 16 18:27:35.925 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:71:24:C5:83:95:42:FC:03:E6:11:0E:A9:
C4:04:87:5B:20:D4:EC:FF:BA:7A:2A:C0:2D:3E:D8:82:
68:85:99:08:02:21:00:F1:B3:B0:16:9A:C1:23:45:07:
C8:99:52:5B:67:11:3F:1A:CB:31:FE:9D:D8:12:A9:0D:
34:F0:CB:C3:D1:A9:B1
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
1d:26:ba:78:df:08:cc:d3:03:e5:a4:5c:78:07:c8:b0:06:aa:
e5:05:c8:3a:c2:55:01:a7:8d:5d:a7:86:92:70:c4:bb:9f:ef:
00:59:99:cb:6d:2d:57:7b:c5:de:27:15:4d:63:31:22:12:d7:
01:d7:3d:b3:ac:32:e9:4d:26:96:e7:de:32:da:9a:41:bd:d1:
5b:b1:d3:ed:ef:cb:47:3a:d8:de:49:03:47:8d:f4:72:ad:50:
fc:48:d8:28:05:8a:cd:1f:6b:97:f6:d1:97:5f:d5:fe:97:1a:
79:c7:51:9d:6b:82:e8:46:d6:66:e6:5d:9e:83:da:82:a0:d5:
a8:16:55:f3:14:e5:79:f6:0b:e5:2c:78:47:2f:6e:3d:99:22:
62:1c:8c:1c:d0:70:04:c7:e8:99:96:f4:56:11:0a:21:95:bf:
9c:14:75:39:92:97:4c:8f:db:34:0a:07:87:c4:e4:b3:9e:9d:
e4:4a:8d:93:e4:62:16:00:5a:c1:38:4f:b6:51:b6:02:cd:3c:
23:81:32:1e:1e:d5:52:ca:1f:c3:0e:a7:cf:38:1c:89:8f:c7:
60:0b:7d:21:24:64:c0:c3:9c:a4:e1:14:e9:93:64:a3:b8:5e:
e4:f3:b2:a6:db:d5:ec:a9:55:aa:ee:93:71:f4:be:22:65:c4:
c3:d0:24:f4
1308377066 | 2024-05-20T21:38:06.9468796001 / tcp
ncacn_http/1.0
1308377066 | 2024-05-31T03:40:58.0520096002 / tcp
ncacn_http/1.0
1308377066 | 2024-05-13T02:29:49.5540366003 / tcp
ncacn_http/1.0
1308377066 | 2024-05-31T10:47:21.6193716004 / tcp
ncacn_http/1.0
1308377066 | 2024-05-22T16:02:25.8631986009 / tcp
ncacn_http/1.0