-553166942 | 2024-05-10T07:49:44.873898
53 /
udp
1489525118 | 2024-05-19T07:35:40.486074
80 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Sun, 19 May 2024 01:35:14 GMT
Connection: close
Content-Length: 315
2093946933 | 2024-05-17T14:23:55.275847
88 /
udp
Microsoft Windows Kerberos
Server Time: 2024-05-17 08:23:35Z
-1071874302 | 2024-05-10T16:02:31.351595
123 /
udp
NTP
protocolversion: 3
stratum: 1
leap: 0
precision: -23
rootdelay: 0.0
rootdisp: 10.8130187988
refid: 1280262988
reftime: 3924275490.62
poll: 0
1537069094 | 2024-05-08T10:44:23.703569
135 /
tcp
Microsoft RPC Endpoint Mapper
51a227ae-825b-41f2-b4a9-1ac9557a1018
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 45.90.12.44:49683
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 45.90.12.44:49683
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
version: v2.0
annotation: KeyIso
ncacn_ip_tcp: 45.90.12.44:49683
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
12345678-1234-abcd-ef00-01234567cffb
version: v1.0
protocol: [MS-NRPC]: Netlogon Remote Protocol
provider: netlogon.dll
ncacn_ip_tcp: 45.90.12.44:49683
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
version: v0.0
annotation: RemoteAccessCheck
protocol: [MS-RAA]: Remote Authorization API Protocol
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
12345778-1234-abcd-ef00-0123456789ab
version: v0.0
protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
provider: lsasrv.dll
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
e3514235-4b06-11d1-ab04-00c04fc2dcd2
version: v4.0
annotation: MS NT Directory DRS Interface
protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
provider: ntdsai.dll
ncacn_np: \\SEATTLEGRACE\pipe\8bddcf9e6cfee419
ncacn_ip_http: 45.90.12.44:49674
ncalrpc: NTDS_LPC
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: OLEF7DB7DD29EB4F051C5225357814A
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
ncalrpc: LRPC-71cbbdf35c87c00b35
ncalrpc: LRPC-f670f2f3fd26c42f96
ncalrpc: IUserProfile2
ncalrpc: LRPC-08d5de1c2086b13072
ncalrpc: senssvc
ncalrpc: LRPC-74e0298718ed52b95e
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 45.90.12.44:49665
ncalrpc: WindowsShutdown
ncacn_np: \\SEATTLEGRACE\PIPE\InitShutdown
ncalrpc: WMsgKRpc0590E0
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\SEATTLEGRACE\PIPE\InitShutdown
ncalrpc: WMsgKRpc0590E0
ncalrpc: WMsgKRpc05B731
ncalrpc: WMsgKRpc0B8F8DA13
ncalrpc: WMsgKRpc023B9D2394
fc48cd89-98d6-4628-9839-86f7a3e4161a
version: v1.0
ncalrpc: dabrpc
ncalrpc: csebpub
ncalrpc: LRPC-490621e5d83d20bdd5
ncalrpc: LRPC-7127dd73c574ee5dfb
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
d09bdeb5-6171-4a34-bfe2-06fa82652568
version: v1.0
ncalrpc: csebpub
ncalrpc: LRPC-490621e5d83d20bdd5
ncalrpc: LRPC-7127dd73c574ee5dfb
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-7127dd73c574ee5dfb
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-c92d52e7ed481b8b62
ncalrpc: LRPC-968b061c10b2392e85
697dcda9-3ba9-4eb2-9247-e11f1901b0d2
version: v1.0
ncalrpc: LRPC-490621e5d83d20bdd5
ncalrpc: LRPC-7127dd73c574ee5dfb
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
9b008953-f195-4bf9-bde0-4471971e58ed
version: v1.0
ncalrpc: LRPC-7127dd73c574ee5dfb
ncalrpc: LRPC-08e65c462c243d05c7
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
0d47017b-b33b-46ad-9e18-fe96456c5078
version: v1.0
ncalrpc: umpo
95406f0b-b239-4318-91bb-cea3a46ff0dc
version: v1.0
ncalrpc: umpo
4ed8abcc-f1e2-438b-981f-bb0e8abc010c
version: v1.0
ncalrpc: umpo
0ff1f646-13bb-400a-ab50-9a78f2b7a85a
version: v1.0
ncalrpc: umpo
6982a06e-5fe2-46b1-b39c-a2c545bfa069
version: v1.0
ncalrpc: umpo
082a3471-31b6-422a-b931-a54401960c62
version: v1.0
ncalrpc: umpo
fae436b0-b864-4a87-9eda-298547cd82f2
version: v1.0
ncalrpc: umpo
e53d94ca-7464-4839-b044-09a2fb8b3ae5
version: v1.0
ncalrpc: umpo
178d84be-9291-4994-82c6-3f909aca5a03
version: v1.0
ncalrpc: umpo
4dace966-a243-4450-ae3f-9b7bcb5315b8
version: v2.0
ncalrpc: umpo
1832bcf6-cab8-41d4-85d2-c9410764f75a
version: v1.0
ncalrpc: umpo
c521facf-09a9-42c5-b155-72388595cbf0
version: v0.0
ncalrpc: umpo
2c7fd9ce-e706-4b40-b412-953107ef9bb0
version: v0.0
ncalrpc: umpo
88abcbc3-34ea-76ae-8215-767520655a23
version: v0.0
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
76c217bc-c8b4-4201-a745-373ad9032b1a
version: v1.0
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
55e6b932-1979-45d6-90c5-7f6270724112
version: v1.0
ncalrpc: LRPC-a5088a0f5bb340ee52
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
version: v1.0
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
20c40295-8dba-48e6-aebf-3e78ef3bb144
version: v2.0
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
2513bcbe-6cd4-4348-855e-7efb3c336dd3
version: v2.0
ncalrpc: OLE249CBD7AD3F9F78FC9C8F2DA7508
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: LRPC-cd944b8368ded15991
ncalrpc: actkernel
ncalrpc: umpo
dd59071b-3215-4c59-8481-972edadc0f6a
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
0361ae94-0316-4c6c-8ad8-c594375800e2
version: v1.0
ncalrpc: umpo
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
version: v1.0
ncalrpc: umpo
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
version: v1.0
ncalrpc: umpo
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: umpo
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
version: v1.0
ncalrpc: LRPC-10414391db8db38d4e
880fd55e-43b9-11e0-b1a8-cf4edfd72085
version: v1.0
annotation: KAPI Service endpoint
ncalrpc: LRPC-4522eb222c8d15ec7e
ncalrpc: OLEC03CF586A7994B90E8351B9A1269
ncalrpc: LRPC-c92d52e7ed481b8b62
5222821f-d5e2-4885-84f1-5f6185a0ec41
version: v1.0
ncalrpc: LRPC-ca4e8ff6da9d487d35
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
version: v1.0
ncalrpc: LRPC-5b8223f4249bbc2c58
ncalrpc: LRPC-968b061c10b2392e85
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-4323c7ec9c184e3a8f
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 45.90.12.44:49666
ncacn_np: \\SEATTLEGRACE\pipe\eventlog
ncalrpc: eventlog
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-aebc14f89e04a7c7e8
ncalrpc: DNSResolver
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
annotation: Group Policy RPC Interface
provider: gpsvc.dll
ncalrpc: LRPC-5abbe87a82b9fed45e
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 45.90.12.44:49667
ncalrpc: LRPC-0e8a479e1ece20b446
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-6bc3e3722ed330e96f
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 45.90.12.44:49667
ncalrpc: LRPC-0e8a479e1ece20b446
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-6bc3e3722ed330e96f
33d84484-3626-47ee-8c6f-e7e98b113be1
version: v2.0
ncalrpc: LRPC-0e8a479e1ece20b446
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-6bc3e3722ed330e96f
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-6bc3e3722ed330e96f
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-6bc3e3722ed330e96f
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: LRPC-6bc3e3722ed330e96f
3f787932-3452-4363-8651-6ea97bb373bb
version: v1.0
annotation: NSP Rpc Interface
ncalrpc: LRPC-b8c744f4d49e883698
ncalrpc: OLE34308A05435B0936AEF9CCA8BEEE
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-b4771d04a83e4969f7
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\SEATTLEGRACE\PIPE\wkssvc
ncalrpc: LRPC-15d1b2010f72c8b230
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-15d1b2010f72c8b230
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-15d1b2010f72c8b230
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncalrpc: 98777252-2ae8-49a7-8827-6d2f60df6c3a
ncalrpc: LRPC-68e533241bd429289f
29770a8f-829b-4158-90a2-78cd488501f7
version: v1.0
ncacn_ip_tcp: 45.90.12.44:49668
ncacn_np: \\SEATTLEGRACE\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncalrpc: LRPC-74e0298718ed52b95e
13560fa9-8c09-4b56-a1fd-04d083b9b2a1
version: v1.0
ncalrpc: LRPC-97440862269d393acb
ncalrpc: OLED3886718133C9DD9AA1F8E1D6383
c2d1b5dd-fa81-4460-9dd6-e7658b85454b
version: v1.0
ncalrpc: LRPC-97440862269d393acb
ncalrpc: OLED3886718133C9DD9AA1F8E1D6383
f44e62af-dab1-44c2-8013-049a9de417d6
version: v1.0
ncalrpc: LRPC-97440862269d393acb
ncalrpc: OLED3886718133C9DD9AA1F8E1D6383
b37f900a-eae4-4304-a2ab-12bb668c0188
version: v1.0
ncalrpc: LRPC-97440862269d393acb
ncalrpc: OLED3886718133C9DD9AA1F8E1D6383
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
version: v1.0
ncalrpc: LRPC-97440862269d393acb
ncalrpc: OLED3886718133C9DD9AA1F8E1D6383
0d3c7f20-1c8d-4654-a1b3-51563b298bda
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-4cb72eaf64fecb658b
ncalrpc: OLEAE96DE1A8FC07CC3961CFD973641
b18fbab6-56f8-4702-84e0-41053293a869
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-4cb72eaf64fecb658b
ncalrpc: OLEAE96DE1A8FC07CC3961CFD973641
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-d403bbc46c262ecd68
ncalrpc: LRPC-f3adf9f1455ffa6c18
ncalrpc: LRPC-bd5bff021046344cb4
ncalrpc: LRPC-0bd50280db1c7a5c7b
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-f3adf9f1455ffa6c18
ncalrpc: LRPC-bd5bff021046344cb4
ncalrpc: LRPC-0bd50280db1c7a5c7b
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-bd5bff021046344cb4
ncalrpc: LRPC-0bd50280db1c7a5c7b
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-0bd50280db1c7a5c7b
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-29a44442eb935c0df5
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-29a44442eb935c0df5
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-29a44442eb935c0df5
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncalrpc: LRPC-29a44442eb935c0df5
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncalrpc: LRPC-840d7e0aa328c6939f
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncalrpc: LRPC-bd609734e21809af68
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncalrpc: LRPC-bd609734e21809af68
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49675
ncalrpc: LRPC-ffd37a19ad27a29bf0
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49675
ncalrpc: LRPC-ffd37a19ad27a29bf0
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49675
ncalrpc: LRPC-ffd37a19ad27a29bf0
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49675
ncalrpc: LRPC-ffd37a19ad27a29bf0
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49675
ncalrpc: LRPC-ffd37a19ad27a29bf0
b58aa02e-2884-4e97-8176-4ee06d794184
version: v1.0
provider: sysmain.dll
ncalrpc: LRPC-2b704ff911d3cafc7c
1d45e083-478f-437c-9618-3594ced8c235
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
98cd761e-e77d-41c8-a3c0-0fb756d90ec2
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
d22895ef-aff4-42c5-a5b2-b14466d34ab4
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
e38f5360-8572-473e-b696-1b46873beeab
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
95095ec8-32ea-4eb0-a3e2-041f97b36168
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
4c9dbf19-d39e-4bb9-90ee-8f7179b20283
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
d4051bde-9cdd-4910-b393-4aa85ec3c482
version: v1.0
ncalrpc: LRPC-d73f06f0bae840347e
ncalrpc: OLE0EA9183427DFC90E304FEE2114F8
7df1ceae-de4e-4e6f-ab14-49636e7c2052
version: v1.0
ncalrpc: LRPC-2a0b523ef09edf1ef1
650a7e26-eab8-5533-ce43-9c1dfce11511
version: v1.0
annotation: Vpn APIs
ncalrpc: LRPC-f42777425754a10a7f
ncalrpc: VpnikeRpc
ncalrpc: RasmanLrpc
ncacn_np: \\SEATTLEGRACE\PIPE\ROUTER
f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
version: v1.0
ncalrpc: LRPC-c1e102ad86e062577a
ncalrpc: LRPC-8d442c2f4a0fa9493b
ncalrpc: LRPC-3fbaa0a9ad4eca2070
509bc7ae-77be-4ee8-b07c-0d096bb44345
version: v1.0
ncalrpc: LRPC-515d4ece2fa254d40d
ncalrpc: OLE1521A2647A2E4E3C2AE50D3D27F3
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 45.90.12.44:49689
c503f532-443a-4c69-8300-ccd1fbdb3839
version: v2.0
ncalrpc: LRPC-3f540fe8dc7d21291f
ncalrpc: OLE9CD0E442F3DB6988A26034886E87
50abc2a4-574d-40b3-9d66-ee4fd5fba076
version: v5.0
protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
provider: dns.exe
ncacn_ip_tcp: 45.90.12.44:49696
d249bd56-4cc0-4fd3-8ce6-6fe050d590cb
version: v0.0
ncalrpc: LRPC-ef890c26f55e351d71
d8140e00-5c46-4ae6-80ac-2f9a76df224c
version: v0.0
ncalrpc: LRPC-ef890c26f55e351d71
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-83826c11c02f51daba
ncalrpc: LRPC-83826c11c02f51daba
ncalrpc: LRPC-83826c11c02f51daba
0767a036-0d22-48aa-ba69-b619480f38cb
version: v1.0
annotation: PcaSvc
provider: pcasvc.dll
ncalrpc: LRPC-6b2031c1f3d88131e2
897e2e5f-93f3-4376-9c9c-fd2277495c27
version: v1.0
annotation: Frs2 Service
protocol: [MS-FRS2]: Distributed File System Replication Protocol
provider: dfsrmig.exe
ncacn_ip_tcp: 45.90.12.44:49836
ncalrpc: OLE14CE263216E911169E3A01DDD0FB
58e604e8-9adb-4d2e-a464-3b0683fb1480
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-c695d60ce8ee046b5c
fd7a0523-dc70-43dd-9b2e-9c5ed48225b1
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-c695d60ce8ee046b5c
5f54ce7d-5b79-4175-8584-cb65313a0e98
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-c695d60ce8ee046b5c
201ef99a-7fa0-444c-9399-19ba84f12a1a
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-c695d60ce8ee046b5c
0497b57d-2e66-424f-a0c6-157cd5d41700
version: v1.0
annotation: AppInfo
ncalrpc: LRPC-c695d60ce8ee046b5c
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc0B8F8DA13
ncalrpc: WMsgKRpc023B9D2394
b1ef227e-dfa5-421e-82bb-67a6a129c496
version: v0.0
ncalrpc: LRPC-3c1a102abab4e19839
ncalrpc: OLEF02D9C7A84A70FF3A4A996CD109D
ncalrpc: LRPC-2df39d200ff26d05bf
ncalrpc: OLE6160AC0480BA0A06635A6781FB81
0fc77b1a-95d8-4a2e-a0c0-cff54237462b
version: v0.0
ncalrpc: LRPC-3c1a102abab4e19839
ncalrpc: OLEF02D9C7A84A70FF3A4A996CD109D
ncalrpc: LRPC-2df39d200ff26d05bf
ncalrpc: OLE6160AC0480BA0A06635A6781FB81
8ec21e98-b5ce-4916-a3d6-449fa428a007
version: v0.0
ncalrpc: LRPC-3c1a102abab4e19839
ncalrpc: OLEF02D9C7A84A70FF3A4A996CD109D
ncalrpc: LRPC-2df39d200ff26d05bf
ncalrpc: OLE6160AC0480BA0A06635A6781FB81
a4b8d482-80ce-40d6-934d-b22a01a44fe7
version: v1.0
annotation: LicenseManager
ncalrpc: LicenseServiceEndpoint
bf4dc912-e52f-4904-8ebe-9317c1bdd497
version: v1.0
ncalrpc: LRPC-96e9ae2f8de7bc18c9
ncalrpc: OLE8AFE4857E503F91ED46D08BC6FD4
267918665 | 2024-05-13T03:50:45.825713
389 /
tcp
LDAP:
SupportedExtension:
1.2.840.113556.1.4.1781
1.2.840.113556.1.4.2212
1.3.6.1.4.1.1466.101.119.1
1.3.6.1.4.1.1466.20037
1.3.6.1.4.1.4203.1.11.3
SupportedSASLMechanisms:
DIGEST-MD5
EXTERNAL
GSS-SPNEGO
GSSAPI
SupportedLDAPVersion:
2
3
SupportedLDAPPolicies:
InitRecvTimeout
MaxBatchReturnMessages
MaxConnIdleTime
MaxConnections
MaxDatagramRecv
MaxDirSyncDuration
MaxNotificationPerConn
MaxPageSize
MaxPercentDirSyncRequests
MaxPoolThreads
MaxQueryDuration
MaxReceiveBuffer
MaxResultSetSize
MaxResultSetsPerConn
MaxTempTableSize
MaxValRange
MaxValRangeTransitive
MinResultSets
SystemMemoryLimitPercent
ThreadMemoryLimit
SupportedControl:
1.2.840.113556.1.4.1338
1.2.840.113556.1.4.1339
1.2.840.113556.1.4.1340
1.2.840.113556.1.4.1341
1.2.840.113556.1.4.1413
1.2.840.113556.1.4.1504
1.2.840.113556.1.4.1852
1.2.840.113556.1.4.1907
1.2.840.113556.1.4.1948
1.2.840.113556.1.4.1974
1.2.840.113556.1.4.2026
1.2.840.113556.1.4.2064
1.2.840.113556.1.4.2065
1.2.840.113556.1.4.2066
1.2.840.113556.1.4.2090
1.2.840.113556.1.4.2204
1.2.840.113556.1.4.2205
1.2.840.113556.1.4.2206
1.2.840.113556.1.4.2211
1.2.840.113556.1.4.2239
1.2.840.113556.1.4.2255
1.2.840.113556.1.4.2256
1.2.840.113556.1.4.2309
1.2.840.113556.1.4.2330
1.2.840.113556.1.4.2354
1.2.840.113556.1.4.319
1.2.840.113556.1.4.417
1.2.840.113556.1.4.473
1.2.840.113556.1.4.474
1.2.840.113556.1.4.521
1.2.840.113556.1.4.528
1.2.840.113556.1.4.529
1.2.840.113556.1.4.619
1.2.840.113556.1.4.801
1.2.840.113556.1.4.802
1.2.840.113556.1.4.805
1.2.840.113556.1.4.841
1.2.840.113556.1.4.970
2.16.840.1.113730.3.4.10
2.16.840.1.113730.3.4.9
SupportedCapabilities:
1.2.840.113556.1.4.1670
1.2.840.113556.1.4.1791
1.2.840.113556.1.4.1935
1.2.840.113556.1.4.2080
1.2.840.113556.1.4.2237
1.2.840.113556.1.4.800
SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
ServerName: CN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us
SchemaNamingContext: CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
RootDomainNamingContext: DC=seattlegrace,DC=us
NamingContexts:
CN=Configuration,DC=seattlegrace,DC=us
CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
DC=DomainDnsZones,DC=seattlegrace,DC=us
DC=ForestDnsZones,DC=seattlegrace,DC=us
DC=seattlegrace,DC=us
LdapServiceName: seattlegrace.us:seattlegrace$@SEATTLEGRACE.US
IsSynchronized: TRUE
IsGlobalCatalogReady: TRUE
HighestCommittedUSN: 2394679
ForestFunctionality: 7
DsServiceName: CN=NTDS Settings,CN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us
DomainFunctionality: 7
DnsHostName: Seattlegrace.seattlegrace.us
DefaultNamingContext: DC=seattlegrace,DC=us
CurrentTime: 20240512215042.0Z
ConfigurationNamingContext: CN=Configuration,DC=seattlegrace,DC=us
-989805585 | 2024-05-15T20:04:06.233835
389 /
udp
0\x84\x00\x00\x0b\xda\x02\x01\x07d\x84\x00\x00\x0b\xd1\x04\x000\x84\x00\x00\x0b\xc90\x84\x00\x00\x00\x1e\x04\x13domainFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00\x1e\x04\x13forestFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x00(\x04\x1ddomainControllerFunctionality1\x84\x00\x00\x00\x03\x04\x0170\x84\x00\x00\x006\x04\x17rootDomainNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=seattlegrace,DC=us0\x84\x00\x00\x00F\x04\x0fldapServiceName1\x84\x00\x00\x00/\x04-seattlegrace.us:seattlegrace$@SEATTLEGRACE.US0\x84\x00\x00\x00"\x04\x14isGlobalCatalogReady1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00I\x04\x17supportedSASLMechanisms1\x84\x00\x00\x00*\x04\x06GSSAPI\x04\nGSS-SPNEGO\x04\x08EXTERNAL\x04\nDIGEST-MD50\x84\x00\x00\x00"\x04\x14supportedLDAPVersion1\x84\x00\x00\x00\x06\x04\x013\x04\x0120\x84\x00\x00\x01\x9a\x04\x15supportedLDAPPolicies1\x84\x00\x00\x01}\x04\x0eMaxPoolThreads\x04\x19MaxPercentDirSyncRequests\x04\x0fMaxDatagramRecv\x04\x10MaxReceiveBuffer\x04\x0fInitRecvTimeout\x04\x0eMaxConnections\x04\x0fMaxConnIdleTime\x04\x0bMaxPageSize\x04\x16MaxBatchReturnMessages\x04\x10MaxQueryDuration\x04\x12MaxDirSyncDuration\x04\x10MaxTempTableSize\x04\x10MaxResultSetSize\x04\rMinResultSets\x04\x14MaxResultSetsPerConn\x04\x16MaxNotificationPerConn\x04\x0bMaxValRange\x04\x15MaxValRangeTransitive\x04\x11ThreadMemoryLimit\x04\x18SystemMemoryLimitPercent0\x84\x00\x00\x03\xf4\x04\x10supportedControl1\x84\x00\x00\x03\xdc\x04\x161.2.840.113556.1.4.319\x04\x161.2.840.113556.1.4.801\x04\x161.2.840.113556.1.4.473\x04\x161.2.840.113556.1.4.528\x04\x161.2.840.113556.1.4.417\x04\x161.2.840.113556.1.4.619\x04\x161.2.840.113556.1.4.841\x04\x161.2.840.113556.1.4.529\x04\x161.2.840.113556.1.4.805\x04\x161.2.840.113556.1.4.521\x04\x161.2.840.113556.1.4.970\x04\x171.2.840.113556.1.4.1338\x04\x161.2.840.113556.1.4.474\x04\x171.2.840.113556.1.4.1339\x04\x171.2.840.113556.1.4.1340\x04\x171.2.840.113556.1.4.1413\x04\x172.16.840.1.113730.3.4.9\x04\x182.16.840.1.113730.3.4.10\x04\x171.2.840.113556.1.4.1504\x04\x171.2.840.113556.1.4.1852\x04\x161.2.840.113556.1.4.802\x04\x171.2.840.113556.1.4.1907\x04\x171.2.840.113556.1.4.1948\x04\x171.2.840.113556.1.4.1974\x04\x17@\x06\x00\x003\x15Ef\xac\xc4\xc39\xea\x05\x00\x00\xea\x05\x00\x00\x01\x00\x00 V\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x08\x00\x04\x00\x00\x00\x01\x00\x00\x06\xa06\x9f\xdeq&jm\xcfZ\xf4\x03\x1f\x95\xd0\xc2y\xf5\xa4\xa9&\xe1\n5\xa0\x12\xec\xf4\xbb\xe9\x94\xf0\xa06\x9f\xdeq&\x08\x00E(\x05\xdc\xd6\x15 \xb9t\x11M6-Z\x0c,\xcfZ\xf4\x031.2.840.113556.1.4.1341\x04\x171.2.840.113556.1.4.2026\x04\x171.2.840.113556.1.4.2064\x04\x171.2.840.113556.1.4.2065\x04\x171.2.840.113556.1.4.2066\x04\x171.2.840.113556.1.4.2090\x04\x171.2.840.113556.1.4.2205\x04\x171.2.840.113556.1.4.2204\x04\x171.2.840.113556.1.4.2206\x04\x171.2.840.113556.1.4.2211\x04\x171.2.840.113556.1.4.2239\x04\x171.2.840.113556.1.4.2255\x04\x171.2.840.113556.1.4.2256\x04\x171.2.840.113556.1.4.2309\x04\x171.2.840.113556.1.4.2330\x04\x171.2.840.113556.1.4.23540\x84\x00\x00\x00\xb2\x04\x15supportedCapabilities1\x84\x00\x00\x00\x95\x04\x161.2.840.113556.1.4.800\x04\x171.2.840.113556.1.4.1670\x04\x171.2.840.113556.1.4.1791\x04\x171.2.840.113556.1.4.1935\x04\x171.2.840.113556.1.4.2080\x04\x171.2.840.113556.1.4.22370\x84\x00\x00\x00X\x04\x11subschemaSubentry1\x84\x00\x00\x00?\x04=CN=Aggregate,CN=Schema,CN=Configuration,DC=seattlegrace,DC=us0\x84\x00\x00\x00y\x04\nserverName1\x84\x00\x00\x00g\x04eCN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us0\x84\x00\x00\x00M\x04\x13schemaNamingContext1\x84\x00\x00\x002\x040CN=Schema,CN=Configuration,DC=seattlegrace,DC=us0\x84\x00\x00\x00\xd9\x04\x0enamingContexts1\x84\x00\x00\x00\xc3\x04\x15DC=seattlegrace,DC=us\x04&CN=Configuration,DC=seattlegrace,DC=us\x040CN=Schema,CN=Configuration,DC=seattlegrace,DC=us\x04\'DC=DomainDnsZones,DC=seattlegrace,DC=us\x04\'DC=ForestDnsZones,DC=seattlegrace,DC=us0\x84\x00\x00\x00\x1c\x04\x0eisSynchronized1\x84\x00\x00\x00\x06\x04\x04TRUE0\x84\x00\x00\x00$\x04\x13highestCommittedUSN1\x84\x00\x00\x00\t\x04\x0725945410\x84\x00\x00\x00\x8d\x04\rdsServiceName1\x84\x00\x00\x00x\x04vCN=NTDS Settings,CN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us0\x84\x00\x00\x001\x04\x0bdnsHostName1\x84\x00\x00\x00\x1e\x04\x1cSeattlegrace.seattlegrace.us0\x84\x00\x00\x003\x04\x14defaultNamingContext1\x84\x00\x00\x00\x17\x04\x15DC=seattlegrace,DC=us0\x84\x00\x00\x00&\x04\x0bcurrentTime1\x84\x00\x00\x00\x13\x04
-1166656618 | 2024-05-18T08:32:12.477362
445 /
tcp
SMB Status:
Authentication: enabled
SMB Version: 2
Capabilities: raw-mode
-1948811838 | 2024-05-17T12:54:34.576181
593 /
tcp
ncacn_http/1.0
Microsoft RPC Endpoint Mapper over HTTP
51a227ae-825b-41f2-b4a9-1ac9557a1018
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 45.90.12.44:49682
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
8fb74744-b2ff-4c00-be0d-9ef9a191fe1b
version: v1.0
annotation: Ngc Pop Key Service
ncacn_ip_tcp: 45.90.12.44:49682
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
version: v2.0
annotation: KeyIso
ncacn_ip_tcp: 45.90.12.44:49682
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
12345678-1234-abcd-ef00-01234567cffb
version: v1.0
protocol: [MS-NRPC]: Netlogon Remote Protocol
provider: netlogon.dll
ncacn_ip_tcp: 45.90.12.44:49682
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7
version: v0.0
annotation: RemoteAccessCheck
protocol: [MS-RAA]: Remote Authorization API Protocol
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
ncalrpc: NETLOGON_LRPC
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
12345778-1234-abcd-ef00-0123456789ab
version: v0.0
protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
provider: lsasrv.dll
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
e3514235-4b06-11d1-ab04-00c04fc2dcd2
version: v4.0
annotation: MS NT Directory DRS Interface
protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
provider: ntdsai.dll
ncacn_np: \\SEATTLEGRACE\pipe\8c2bf39ee517f46b
ncacn_ip_http: 45.90.12.44:49675
ncalrpc: NTDS_LPC
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: OLEA44806FA33380AD66DF0E08A2A17
ncacn_ip_tcp: 45.90.12.44:49669
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
ncalrpc: LRPC-999db8bf7fbf09283a
ncalrpc: LRPC-bc0fc63c414709a1e2
ncalrpc: IUserProfile2
ncalrpc: LRPC-3c49cfc772b90d2c89
ncalrpc: senssvc
ncalrpc: LRPC-aae0e079742f8dc194
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 45.90.12.44:49664
ncalrpc: MicrosoftLaps_LRPC_0fb2f016-fe45-4a08-a7f9-a467f5e5fa0b
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\SEATTLEGRACE\pipe\lsass
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 45.90.12.44:49665
ncalrpc: WindowsShutdown
ncacn_np: \\SEATTLEGRACE\PIPE\InitShutdown
ncalrpc: WMsgKRpc068FF0
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\SEATTLEGRACE\PIPE\InitShutdown
ncalrpc: WMsgKRpc068FF0
ncalrpc: WMsgKRpc06B9D1
d09bdeb5-6171-4a34-bfe2-06fa82652568
version: v1.0
ncalrpc: csebpub
ncalrpc: LRPC-9aec2307417235f3b8
ncalrpc: LRPC-7343b027413fab607a
ncalrpc: LRPC-fbc021134a2f62589e
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-7343b027413fab607a
ncalrpc: LRPC-fbc021134a2f62589e
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-fbc021134a2f62589e
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
ncalrpc: LRPC-25a3c196650d003a5a
ncalrpc: LRPC-5ae499a2d99fdd9532
697dcda9-3ba9-4eb2-9247-e11f1901b0d2
version: v1.0
ncalrpc: LRPC-9aec2307417235f3b8
ncalrpc: LRPC-7343b027413fab607a
ncalrpc: LRPC-fbc021134a2f62589e
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
9b008953-f195-4bf9-bde0-4471971e58ed
version: v1.0
ncalrpc: LRPC-7343b027413fab607a
ncalrpc: LRPC-fbc021134a2f62589e
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
0d47017b-b33b-46ad-9e18-fe96456c5078
version: v1.0
ncalrpc: umpo
95406f0b-b239-4318-91bb-cea3a46ff0dc
version: v1.0
ncalrpc: umpo
4ed8abcc-f1e2-438b-981f-bb0e8abc010c
version: v1.0
ncalrpc: umpo
0ff1f646-13bb-400a-ab50-9a78f2b7a85a
version: v1.0
ncalrpc: umpo
6982a06e-5fe2-46b1-b39c-a2c545bfa069
version: v1.0
ncalrpc: umpo
082a3471-31b6-422a-b931-a54401960c62
version: v1.0
ncalrpc: umpo
fae436b0-b864-4a87-9eda-298547cd82f2
version: v1.0
ncalrpc: umpo
e53d94ca-7464-4839-b044-09a2fb8b3ae5
version: v1.0
ncalrpc: umpo
178d84be-9291-4994-82c6-3f909aca5a03
version: v1.0
ncalrpc: umpo
4dace966-a243-4450-ae3f-9b7bcb5315b8
version: v2.0
ncalrpc: umpo
1832bcf6-cab8-41d4-85d2-c9410764f75a
version: v1.0
ncalrpc: umpo
c521facf-09a9-42c5-b155-72388595cbf0
version: v0.0
ncalrpc: umpo
2c7fd9ce-e706-4b40-b412-953107ef9bb0
version: v0.0
ncalrpc: umpo
88abcbc3-34ea-76ae-8215-767520655a23
version: v0.0
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
76c217bc-c8b4-4201-a745-373ad9032b1a
version: v1.0
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
55e6b932-1979-45d6-90c5-7f6270724112
version: v1.0
ncalrpc: LRPC-6ea48f380adca1df60
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
857fb1be-084f-4fb5-b59c-4b2c4be5f0cf
version: v1.0
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
20c40295-8dba-48e6-aebf-3e78ef3bb144
version: v2.0
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
2513bcbe-6cd4-4348-855e-7efb3c336dd3
version: v2.0
ncalrpc: OLE0A2D34B198E1F320BA8E21E98B2D
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: LRPC-ab301e638d4c4640ff
ncalrpc: actkernel
ncalrpc: umpo
dd59071b-3215-4c59-8481-972edadc0f6a
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
0361ae94-0316-4c6c-8ad8-c594375800e2
version: v1.0
ncalrpc: umpo
5824833b-3c1a-4ad2-bdfd-c31d19e23ed2
version: v1.0
ncalrpc: umpo
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
version: v1.0
ncalrpc: umpo
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: umpo
e40f7b57-7a25-4cd3-a135-7f7d3df9d16b
version: v1.0
ncalrpc: LRPC-5d7775e9d97838a121
880fd55e-43b9-11e0-b1a8-cf4edfd72085
version: v1.0
annotation: KAPI Service endpoint
ncalrpc: LRPC-89aba368424f1a8cce
ncalrpc: OLE44ABFE7D61C0892B7F45A68F6FB8
ncalrpc: LRPC-25a3c196650d003a5a
5222821f-d5e2-4885-84f1-5f6185a0ec41
version: v1.0
ncalrpc: LRPC-70c82f1468a32c3446
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-e59c0439a8e9fa3b3b
a500d4c6-0dd1-4543-bc0c-d5f93486eaf8
version: v1.0
ncalrpc: LRPC-055d20d5b6baf81469
ncalrpc: LRPC-5ae499a2d99fdd9532
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 45.90.12.44:49666
ncacn_np: \\SEATTLEGRACE\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-a05e81c1228f37a1eb
ncalrpc: DNSResolver
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
annotation: Group Policy RPC Interface
provider: gpsvc.dll
ncalrpc: LRPC-15c11bd3800171fdbb
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 45.90.12.44:49667
ncalrpc: LRPC-9568c6d2a6b0bc7da9
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-454d87fa8ccd824fd3
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 45.90.12.44:49667
ncalrpc: LRPC-9568c6d2a6b0bc7da9
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-454d87fa8ccd824fd3
33d84484-3626-47ee-8c6f-e7e98b113be1
version: v2.0
ncalrpc: LRPC-9568c6d2a6b0bc7da9
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-454d87fa8ccd824fd3
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-454d87fa8ccd824fd3
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\SEATTLEGRACE\PIPE\atsvc
ncalrpc: LRPC-454d87fa8ccd824fd3
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: LRPC-454d87fa8ccd824fd3
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-8ecc74650b36973e42
3f787932-3452-4363-8651-6ea97bb373bb
version: v1.0
annotation: NSP Rpc Interface
ncalrpc: LRPC-8e46d5f531f534880d
ncalrpc: OLE48094E8B51BD3C2B4CE1097E1716
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\SEATTLEGRACE\PIPE\wkssvc
ncalrpc: LRPC-f9531135a358a53687
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-f9531135a358a53687
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-f9531135a358a53687
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncalrpc: 0b2ea2ab-080e-46ab-ad73-01d989b0f9f1
ncalrpc: LRPC-d0b530ed9d2ceb499e
29770a8f-829b-4158-90a2-78cd488501f7
version: v1.0
ncacn_ip_tcp: 45.90.12.44:49668
ncacn_np: \\SEATTLEGRACE\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncalrpc: LRPC-aae0e079742f8dc194
13560fa9-8c09-4b56-a1fd-04d083b9b2a1
version: v1.0
ncalrpc: LRPC-fb86dc8b46b576770c
ncalrpc: OLEE8A9180A931551FCD8846162CA3B
c2d1b5dd-fa81-4460-9dd6-e7658b85454b
version: v1.0
ncalrpc: LRPC-fb86dc8b46b576770c
ncalrpc: OLEE8A9180A931551FCD8846162CA3B
f44e62af-dab1-44c2-8013-049a9de417d6
version: v1.0
ncalrpc: LRPC-fb86dc8b46b576770c
ncalrpc: OLEE8A9180A931551FCD8846162CA3B
b37f900a-eae4-4304-a2ab-12bb668c0188
version: v1.0
ncalrpc: LRPC-fb86dc8b46b576770c
ncalrpc: OLEE8A9180A931551FCD8846162CA3B
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
version: v1.0
ncalrpc: LRPC-fb86dc8b46b576770c
ncalrpc: OLEE8A9180A931551FCD8846162CA3B
0d3c7f20-1c8d-4654-a1b3-51563b298bda
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-0404704019faeee52b
ncalrpc: OLE0AB8253E3962E55D0BBC00A18C2F
b18fbab6-56f8-4702-84e0-41053293a869
version: v1.0
annotation: UserMgrCli
ncalrpc: LRPC-0404704019faeee52b
ncalrpc: OLE0AB8253E3962E55D0BBC00A18C2F
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-69794ccce1b7c2c640
ncalrpc: LRPC-eaef75e91ba360792f
ncalrpc: LRPC-4bb774214af881ccbf
ncalrpc: LRPC-21268a40b857d9653b
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-eaef75e91ba360792f
ncalrpc: LRPC-4bb774214af881ccbf
ncalrpc: LRPC-21268a40b857d9653b
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-4bb774214af881ccbf
ncalrpc: LRPC-21268a40b857d9653b
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-21268a40b857d9653b
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncalrpc: OLE3D017EFC44FE3AFCDA5312C5D5A1
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-58f7669796e81977ff
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-58f7669796e81977ff
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncalrpc: TeredoControl
ncalrpc: TeredoDiagnostics
ncalrpc: LRPC-58f7669796e81977ff
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncalrpc: LRPC-58f7669796e81977ff
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncalrpc: LRPC-62c7e379da994cffe1
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncalrpc: LRPC-62c7e379da994cffe1
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49676
ncalrpc: LRPC-25851d6842dd72a2cb
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49676
ncalrpc: LRPC-25851d6842dd72a2cb
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49676
ncalrpc: LRPC-25851d6842dd72a2cb
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49676
ncalrpc: LRPC-25851d6842dd72a2cb
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 45.90.12.44:49676
ncalrpc: LRPC-25851d6842dd72a2cb
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncalrpc: LRPC-ae653befae81dbb909
b58aa02e-2884-4e97-8176-4ee06d794184
version: v1.0
provider: sysmain.dll
ncalrpc: LRPC-4a0edfa138b0d094a6
1d45e083-478f-437c-9618-3594ced8c235
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
98cd761e-e77d-41c8-a3c0-0fb756d90ec2
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
d22895ef-aff4-42c5-a5b2-b14466d34ab4
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
e38f5360-8572-473e-b696-1b46873beeab
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
95095ec8-32ea-4eb0-a3e2-041f97b36168
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
4c9dbf19-d39e-4bb9-90ee-8f7179b20283
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
d4051bde-9cdd-4910-b393-4aa85ec3c482
version: v1.0
ncalrpc: LRPC-da36bebdbb132c2125
ncalrpc: OLE96A0FE677D6F1404A1C5A17C4E50
7df1ceae-de4e-4e6f-ab14-49636e7c2052
version: v1.0
ncalrpc: LRPC-5b103551ee28d6be82
650a7e26-eab8-5533-ce43-9c1dfce11511
version: v1.0
annotation: Vpn APIs
ncalrpc: LRPC-ec26c2e43c2883f5c9
ncalrpc: VpnikeRpc
ncalrpc: RasmanLrpc
ncacn_np: \\SEATTLEGRACE\PIPE\ROUTER
f3f09ffd-fbcf-4291-944d-70ad6e0e73bb
version: v1.0
ncalrpc: LRPC-897da934a21a7a661f
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 45.90.12.44:49688
509bc7ae-77be-4ee8-b07c-0d096bb44345
version: v1.0
ncalrpc: LRPC-331060e87dab9f5ca0
ncalrpc: OLEA3564241BE8F66EF8640B7261961
c503f532-443a-4c69-8300-ccd1fbdb3839
version: v2.0
ncalrpc: LRPC-66b3a4b973e63d6201
ncalrpc: OLE5E6B0E68A06F6479E4D0A9D2ABAF
50abc2a4-574d-40b3-9d66-ee4fd5fba076
version: v5.0
protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
provider: dns.exe
ncacn_ip_tcp: 45.90.12.44:49694
d249bd56-4cc0-4fd3-8ce6-6fe050d590cb
version: v0.0
ncalrpc: LRPC-c61b47436655e1483b
d8140e00-5c46-4ae6-80ac-2f9a76df224c
version: v0.0
ncalrpc: LRPC-c61b47436655e1483b
6b5bdd1e-528c-422c-af8c-a4079be4fe48
version: v1.0
annotation: Remote Fw APIs
protocol: [MS-FASP]: Firewall and Advanced Security Protocol
provider: FwRemoteSvr.dll
ncacn_ip_tcp: 45.90.12.44:49735
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-3a378da4c43f65dbdf
ncalrpc: LRPC-3a378da4c43f65dbdf
ncalrpc: LRPC-3a378da4c43f65dbdf
0767a036-0d22-48aa-ba69-b619480f38cb
version: v1.0
annotation: PcaSvc
provider: pcasvc.dll
ncalrpc: LRPC-e043d09fa9507e3ed7
897e2e5f-93f3-4376-9c9c-fd2277495c27
version: v1.0
annotation: Frs2 Service
protocol: [MS-FRS2]: Distributed File System Replication Protocol
provider: dfsrmig.exe
ncacn_ip_tcp: 45.90.12.44:49862
ncalrpc: OLE5E1488235BA5FC2FA991C3D35151
bf4dc912-e52f-4904-8ebe-9317c1bdd497
version: v1.0
ncalrpc: LRPC-01ab3c5429dcea0182
ncalrpc: OLECE0ECE3DA30440059D368E5DF76D
-133757202 | 2024-05-17T11:01:01.448176
3268 /
tcp
LDAP:
SupportedExtension:
1.2.840.113556.1.4.1781
1.2.840.113556.1.4.2212
1.3.6.1.4.1.1466.101.119.1
1.3.6.1.4.1.1466.20037
1.3.6.1.4.1.4203.1.11.3
SupportedSASLMechanisms:
DIGEST-MD5
EXTERNAL
GSS-SPNEGO
GSSAPI
SupportedLDAPVersion:
2
3
SupportedLDAPPolicies:
InitRecvTimeout
MaxBatchReturnMessages
MaxConnIdleTime
MaxConnections
MaxDatagramRecv
MaxDirSyncDuration
MaxNotificationPerConn
MaxPageSize
MaxPercentDirSyncRequests
MaxPoolThreads
MaxQueryDuration
MaxReceiveBuffer
MaxResultSetSize
MaxResultSetsPerConn
MaxTempTableSize
MaxValRange
MaxValRangeTransitive
MinResultSets
SystemMemoryLimitPercent
ThreadMemoryLimit
SupportedControl:
1.2.840.113556.1.4.1338
1.2.840.113556.1.4.1339
1.2.840.113556.1.4.1340
1.2.840.113556.1.4.1341
1.2.840.113556.1.4.1413
1.2.840.113556.1.4.1504
1.2.840.113556.1.4.1852
1.2.840.113556.1.4.1907
1.2.840.113556.1.4.1948
1.2.840.113556.1.4.1974
1.2.840.113556.1.4.2026
1.2.840.113556.1.4.2064
1.2.840.113556.1.4.2065
1.2.840.113556.1.4.2066
1.2.840.113556.1.4.2090
1.2.840.113556.1.4.2204
1.2.840.113556.1.4.2205
1.2.840.113556.1.4.2206
1.2.840.113556.1.4.2211
1.2.840.113556.1.4.2239
1.2.840.113556.1.4.2255
1.2.840.113556.1.4.2256
1.2.840.113556.1.4.2309
1.2.840.113556.1.4.2330
1.2.840.113556.1.4.2354
1.2.840.113556.1.4.319
1.2.840.113556.1.4.417
1.2.840.113556.1.4.473
1.2.840.113556.1.4.474
1.2.840.113556.1.4.521
1.2.840.113556.1.4.528
1.2.840.113556.1.4.529
1.2.840.113556.1.4.619
1.2.840.113556.1.4.801
1.2.840.113556.1.4.802
1.2.840.113556.1.4.805
1.2.840.113556.1.4.841
1.2.840.113556.1.4.970
2.16.840.1.113730.3.4.10
2.16.840.1.113730.3.4.9
SupportedCapabilities:
1.2.840.113556.1.4.1670
1.2.840.113556.1.4.1791
1.2.840.113556.1.4.1935
1.2.840.113556.1.4.2080
1.2.840.113556.1.4.2237
1.2.840.113556.1.4.800
SubschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
ServerName: CN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us
SchemaNamingContext: CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
RootDomainNamingContext: DC=seattlegrace,DC=us
NamingContexts:
CN=Configuration,DC=seattlegrace,DC=us
CN=Schema,CN=Configuration,DC=seattlegrace,DC=us
DC=DomainDnsZones,DC=seattlegrace,DC=us
DC=ForestDnsZones,DC=seattlegrace,DC=us
DC=seattlegrace,DC=us
LdapServiceName: seattlegrace.us:seattlegrace$@SEATTLEGRACE.US
IsSynchronized: TRUE
IsGlobalCatalogReady: TRUE
HighestCommittedUSN: 2765341
ForestFunctionality: 7
DsServiceName: CN=NTDS Settings,CN=SEATTLEGRACE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=seattlegrace,DC=us
DomainFunctionality: 7
DnsHostName: Seattlegrace.seattlegrace.us
DefaultNamingContext: DC=seattlegrace,DC=us
CurrentTime: 20240517050042.0Z
ConfigurationNamingContext: CN=Configuration,DC=seattlegrace,DC=us
1422255891 | 2024-06-02T17:28:13.239437
3306 /
tcp
MariaDB:
Protocol Version: 10
Version: 10.6.16-MariaDB-0ubuntu0.22.04.1
Capabilities: 63486
Server Language: 45
Server Status: 2
Extended Server Capabilities: 33279
Authentication Plugin: mysql_native_password
-2011875149 | 2024-05-14T22:57:43.010819
3389 /
tcp
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows Server 2022
OS Build: 10.0.20348
Target Name: SGH
NetBIOS Domain Name: SGH
NetBIOS Computer Name: SEATTLEGRACE
DNS Domain Name: seattlegrace.us
DNS Tree Name: seattlegrace.us
FQDN: Seattlegrace.seattlegrace.us
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ae:77:7f:fd:b5:93:b1:4a:28:be:ea:0b:5a:76:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Seattlegrace.seattlegrace.us
Validity
Not Before: Apr 14 03:48:35 2024 GMT
Not After : Oct 14 03:48:35 2024 GMT
Subject: CN=Seattlegrace.seattlegrace.us
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a9:d5:e7:6a:11:43:db:da:2f:fc:8e:f6:19:0d:
d9:80:5f:4c:9a:9d:15:05:c6:91:af:3b:e3:dc:4f:
45:d8:e6:0e:05:11:94:25:6e:5a:09:8e:1e:7b:4b:
83:b4:98:88:37:d0:7e:4f:1a:10:1c:a9:ee:3d:41:
c5:da:80:22:87:9f:53:15:9e:8e:b2:a7:06:17:03:
8d:5e:be:22:8d:b0:f3:3e:a6:d3:12:6a:d8:e0:8f:
fb:04:4b:b2:17:14:e2:cf:ee:ae:fd:5f:34:49:86:
91:9f:d1:05:67:c3:ae:cb:57:9d:45:ff:10:a0:c6:
5d:35:05:eb:33:d2:12:84:dd:e6:ee:2f:ac:28:2b:
50:3c:5a:38:19:d3:15:77:f4:05:2b:23:96:26:78:
43:6a:25:07:35:a7:d8:c0:e4:01:90:4c:38:b8:49:
a7:99:bf:22:27:9c:39:63:40:c5:39:b2:20:a3:a1:
7c:c6:72:d2:d7:4a:62:de:3e:d5:7e:d5:33:1a:4c:
24:30:58:1d:d0:75:51:6f:cd:bb:01:f2:89:7c:a8:
2b:3d:9c:42:8e:61:a1:23:63:f5:0f:25:27:ee:1b:
6c:86:0a:22:ce:a1:24:e0:40:59:eb:1e:a8:bc:a3:
f5:f4:6d:a9:81:6b:07:f6:1f:8a:83:8c:4d:5d:e7:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
2d:d8:07:3c:3c:19:0e:4f:ee:0f:76:63:ea:99:9a:00:52:f0:
d0:eb:1e:88:c4:c2:b2:db:81:ac:b7:a3:1b:ff:4e:d2:42:4d:
be:2c:7d:37:c9:f1:a4:f7:13:37:3f:6a:2e:a9:aa:35:35:cf:
d2:10:a7:96:59:4b:a4:b9:98:d9:7d:32:7d:63:8e:0a:0b:b9:
df:79:82:ed:1b:80:ae:31:53:c0:ce:0c:69:b9:59:48:ab:4a:
3f:72:4f:18:20:bc:76:66:f5:41:3b:5d:2a:a4:4c:08:6e:27:
fe:2e:2f:ee:ce:ad:43:76:9d:0a:1f:29:27:b4:80:44:fb:1a:
12:b9:12:b2:6b:7e:44:79:b5:27:27:ca:03:42:79:54:d4:6c:
30:3a:61:c8:a3:a1:f3:8e:bf:65:44:45:ef:27:be:96:7d:4a:
c1:c3:8c:d5:de:f2:af:38:46:5f:16:47:6b:a9:a0:da:80:89:
25:03:1f:89:db:a1:f7:5b:f2:62:28:c1:d8:1c:cf:21:55:fb:
59:8b:ec:01:03:5e:1b:ef:89:de:cd:33:b6:13:08:c3:27:fc:
36:37:92:e7:75:d5:06:c4:bc:35:d3:3a:00:df:de:9a:1f:56:
43:32:9f:c9:20:b6:de:35:1d:4e:c8:8c:04:8a:47:42:5e:84:
51:ee:66:6e