| Hostnames |
davidlove1147.example.com jiuweiyun.cn |
| Domains | example.com jiuweiyun.cn |
| Country | Japan |
| City | Nihonbashi-bakurochÅ |
| Organization | G-Core Labs S.A. |
| ISP | G-Core Labs S.A. |
| ASN | AS202422 |
1489525118 | 2024-05-09T22:21:32.15186880 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 09 May 2024 22:21:31 GMT Connection: close Content-Length: 315
-1019083862 | 2024-05-10T22:12:11.323638135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 5.8.71.117:49664 ncalrpc: WindowsShutdown ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\InitShutdown ncalrpc: WMsgKRpc043BD0 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\InitShutdown ncalrpc: WMsgKRpc043BD0 ncalrpc: WMsgKRpc045B01 fc48cd89-98d6-4628-9839-86f7a3e4161a version: v1.0 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-384db322cb977eb84c ncalrpc: LRPC-2cb94fa0652b7009d9 ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-384db322cb977eb84c ncalrpc: LRPC-2cb94fa0652b7009d9 ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-2cb94fa0652b7009d9 ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-3d7fb3a032c9624edd ncalrpc: LRPC-694fa682b9b39de6a2 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-384db322cb977eb84c ncalrpc: LRPC-2cb94fa0652b7009d9 ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-2cb94fa0652b7009d9 ncalrpc: LRPC-4c24d09301eb02d788 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo dd59071b-3215-4c59-8481-972edadc0f6a version: v1.0 ncalrpc: umpo 0d47017b-b33b-46ad-9e18-fe96456c5078 version: v1.0 ncalrpc: umpo 95406f0b-b239-4318-91bb-cea3a46ff0dc version: v1.0 ncalrpc: umpo 4ed8abcc-f1e2-438b-981f-bb0e8abc010c version: v1.0 ncalrpc: umpo 0ff1f646-13bb-400a-ab50-9a78f2b7a85a version: v1.0 ncalrpc: umpo 6982a06e-5fe2-46b1-b39c-a2c545bfa069 version: v1.0 ncalrpc: umpo 082a3471-31b6-422a-b931-a54401960c62 version: v1.0 ncalrpc: umpo fae436b0-b864-4a87-9eda-298547cd82f2 version: v1.0 ncalrpc: umpo e53d94ca-7464-4839-b044-09a2fb8b3ae5 version: v1.0 ncalrpc: umpo 178d84be-9291-4994-82c6-3f909aca5a03 version: v1.0 ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v2.0 ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-2c5869baaabdbb6843 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo b8cadbaf-e84b-46b9-84f2-6f71c03f9e55 version: v1.0 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v1.0 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v1.0 ncalrpc: LRPC-2adf62418d6e607d45 ncalrpc: OLEAD0B5602293085BB3E4B7684017B ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncalrpc: LRPC-d13203b5a76671cb0f ncalrpc: actkernel ncalrpc: umpo 0361ae94-0316-4c6c-8ad8-c594375800e2 version: v1.0 ncalrpc: umpo 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: umpo c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-cd3645e19078f03f31 ncalrpc: LRPC-a4c2ed1c2ed0f017ba ncalrpc: IUserProfile2 ncalrpc: LRPC-0ca29bd5ffc7057e5c ncalrpc: senssvc ncalrpc: LRPC-2cf35a98497d096407 f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-fcbaa0248927eb1d13 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-1e5e36f26c9131081f e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 annotation: Network Connection Broker server endpoint ncalrpc: LRPC-37aa1df7a6adc3d28f ncalrpc: OLEF33623EBF8D6DA52B64C7C2119CB ncalrpc: LRPC-a6793e0c1963fb7019 ncalrpc: LRPC-3d7fb3a032c9624edd 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-37aa1df7a6adc3d28f ncalrpc: OLEF33623EBF8D6DA52B64C7C2119CB ncalrpc: LRPC-a6793e0c1963fb7019 ncalrpc: LRPC-3d7fb3a032c9624edd 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 annotation: Network Connection Broker server endpoint for NCB Reset module ncalrpc: LRPC-a6793e0c1963fb7019 ncalrpc: LRPC-3d7fb3a032c9624edd a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-6af9780843cdf5b1fb ncalrpc: LRPC-694fa682b9b39de6a2 f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 5.8.71.117:49665 ncacn_np: \\WIN-LIVFRVQFMKO\pipe\eventlog ncalrpc: eventlog 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-4dae4dfadec0461e37 df4df73a-c52d-4e3a-8003-8437fdf8302a version: v0.0 annotation: WM_WindowManagerRPC\Server ncalrpc: LRPC-d933122cc9b1bb01c4 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-07d9d4a4b6bc51a469 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 5.8.71.117:49666 ncalrpc: LRPC-0467c1d6941eaa4865 ncalrpc: ubpmtaskhostchannel ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\atsvc ncalrpc: LRPC-9d0c0c58f38cee6908 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 5.8.71.117:49666 ncalrpc: LRPC-0467c1d6941eaa4865 ncalrpc: ubpmtaskhostchannel ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\atsvc ncalrpc: LRPC-9d0c0c58f38cee6908 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-0467c1d6941eaa4865 ncalrpc: ubpmtaskhostchannel ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\atsvc ncalrpc: LRPC-9d0c0c58f38cee6908 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\atsvc ncalrpc: LRPC-9d0c0c58f38cee6908 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\atsvc ncalrpc: LRPC-9d0c0c58f38cee6908 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-9d0c0c58f38cee6908 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-7418f55f4029775f82 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\wkssvc ncalrpc: LRPC-6cd93f85e99b694a57 eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-6cd93f85e99b694a57 f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-6cd93f85e99b694a57 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_ip_tcp: 5.8.71.117:49667 ncacn_np: \\WIN-LIVFRVQFMKO\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncalrpc: LRPC-2cf35a98497d096407 c2d1b5dd-fa81-4460-9dd6-e7658b85454b version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B f44e62af-dab1-44c2-8013-049a9de417d6 version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B 7aeb6705-3ae6-471a-882d-f39c109edc12 version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B e7f76134-9ef5-4949-a2d6-3368cc0988f3 version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-47113c93ee23148254 ncalrpc: OLEC3151E4A917887CCF8F67A7F118B 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-a21b6e8ccfd4f63c97 ncalrpc: OLECB8CB367F21EF4CC1FA78F32F932 b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-a21b6e8ccfd4f63c97 ncalrpc: OLECB8CB367F21EF4CC1FA78F32F932 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-c1225107a50bb73a1b ncalrpc: LRPC-cfaa889ef275b2675c ncalrpc: LRPC-d9f7de82018e9c0784 ncalrpc: LRPC-bbb9d4b44a353a82ef f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-cfaa889ef275b2675c ncalrpc: LRPC-d9f7de82018e9c0784 ncalrpc: LRPC-bbb9d4b44a353a82ef 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-d9f7de82018e9c0784 ncalrpc: LRPC-bbb9d4b44a353a82ef dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-bbb9d4b44a353a82ef a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncalrpc: LRPC-15e3262f6b56443a4d 76f03f96-cdfd-44fc-a22c-64950a001209 version: v1.0 protocol: [MS-PAR]: Print System Asynchronous Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 5.8.71.117:49668 ncalrpc: LRPC-c6247dd22280f3afdc 4a452661-8290-4b36-8fbe-7f4093a94978 version: v1.0 provider: spoolsv.exe ncacn_ip_tcp: 5.8.71.117:49668 ncalrpc: LRPC-c6247dd22280f3afdc ae33069b-a2a8-46ee-a235-ddfd339be281 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 5.8.71.117:49668 ncalrpc: LRPC-c6247dd22280f3afdc 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 version: v1.0 protocol: [MS-PAN]: Print System Asynchronous Notification Protocol provider: spoolsv.exe ncacn_ip_tcp: 5.8.71.117:49668 ncalrpc: LRPC-c6247dd22280f3afdc 12345678-1234-abcd-ef00-0123456789ab version: v1.0 protocol: [MS-RPRN]: Print System Remote Protocol provider: spoolsv.exe ncacn_ip_tcp: 5.8.71.117:49668 ncalrpc: LRPC-c6247dd22280f3afdc 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 5.8.71.117:49674 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\WIN-LIVFRVQFMKO\pipe\lsass 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\WIN-LIVFRVQFMKO\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\WIN-LIVFRVQFMKO\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\WIN-LIVFRVQFMKO\pipe\lsass 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-4d511ecb4ba2d2e9d4 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-4d511ecb4ba2d2e9d4 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: OLEF93A4C7CDE8CA6883C65224A4E76 ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-20d44982907328e6be 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: OLEF93A4C7CDE8CA6883C65224A4E76 ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-20d44982907328e6be c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: TeredoControl ncalrpc: TeredoDiagnostics ncalrpc: LRPC-20d44982907328e6be 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-20d44982907328e6be 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 d22895ef-aff4-42c5-a5b2-b14466d34ab4 version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 95095ec8-32ea-4eb0-a3e2-041f97b36168 version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-45df32d6ef994ad553 b58aa02e-2884-4e97-8176-4ee06d794184 version: v1.0 provider: sysmain.dll ncalrpc: LRPC-a73e60ab8eb48a160c 1a9134dd-7b39-45ba-ad88-44d01ca47f28 version: v1.0 annotation: Message Queuing - RemoteRead V1 protocol: [MS-MQRR]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 5.8.71.117:2105 ncacn_ip_tcp: 5.8.71.117:2103 ncacn_ip_tcp: 5.8.71.117:2107 ncacn_ip_tcp: 5.8.71.117:49669 ncalrpc: QMMgmtFacility$win-livfrvqfmko ncalrpc: QMsvc$win-livfrvqfmko 1088a980-eae5-11d0-8d9b-00a02453c337 version: v1.0 annotation: Message Queuing - QM2QM V1 protocol: [MS-MQQP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 5.8.71.117:2105 ncacn_ip_tcp: 5.8.71.117:2103 ncacn_ip_tcp: 5.8.71.117:2107 ncacn_ip_tcp: 5.8.71.117:49669 ncalrpc: QMMgmtFacility$win-livfrvqfmko ncalrpc: QMsvc$win-livfrvqfmko 76d12b80-3467-11d3-91ff-0090272f9ea3 version: v1.0 annotation: Message Queuing - QMRT V2 protocol: [MS-MQMP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 5.8.71.117:2105 ncacn_ip_tcp: 5.8.71.117:2103 ncacn_ip_tcp: 5.8.71.117:2107 ncacn_ip_tcp: 5.8.71.117:49669 ncalrpc: QMMgmtFacility$win-livfrvqfmko ncalrpc: QMsvc$win-livfrvqfmko fdb3a030-065f-11d1-bb9b-00a024ea5525 version: v1.0 annotation: Message Queuing - QMRT V1 protocol: [MS-MQMP]: Message Queuing (MSMQ): provider: mqqm.dll ncacn_ip_tcp: 5.8.71.117:2105 ncacn_ip_tcp: 5.8.71.117:2103 ncacn_ip_tcp: 5.8.71.117:2107 ncacn_ip_tcp: 5.8.71.117:49669 ncalrpc: QMMgmtFacility$win-livfrvqfmko ncalrpc: QMsvc$win-livfrvqfmko 6b5bdd1e-528c-422c-af8c-a4079be4fe48 version: v1.0 annotation: Remote Fw APIs protocol: [MS-FASP]: Firewall and Advanced Security Protocol provider: FwRemoteSvr.dll ncacn_ip_tcp: 5.8.71.117:49670 ncalrpc: ipsec 650a7e26-eab8-5533-ce43-9c1dfce11511 version: v1.0 annotation: Vpn APIs ncalrpc: LRPC-cd6129284f31265fad ncalrpc: VpnikeRpc ncalrpc: RasmanLrpc ncacn_np: \\WIN-LIVFRVQFMKO\PIPE\ROUTER 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 5.8.71.117:49673 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-d2cd808f85add29ac5 ncalrpc: LRPC-d2cd808f85add29ac5 ncalrpc: LRPC-d2cd808f85add29ac5 54b4c689-969a-476f-8dc2-990885e9f562 version: v0.0 ncalrpc: LRPC-4149560ec5066b4cb4 be7f785e-0e3a-4ab7-91de-7e46e443be29 version: v0.0 ncalrpc: LRPC-4149560ec5066b4cb4 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-9e99987cbd970e1bee 58e604e8-9adb-4d2e-a464-3b0683fb1480 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-ff54c9c19efe5d1f65 fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-ff54c9c19efe5d1f65 5f54ce7d-5b79-4175-8584-cb65313a0e98 version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-ff54c9c19efe5d1f65 201ef99a-7fa0-444c-9399-19ba84f12a1a version: v1.0 annotation: AppInfo provider: appinfo.dll ncalrpc: LRPC-ff54c9c19efe5d1f65 0497b57d-2e66-424f-a0c6-157cd5d41700 version: v1.0 annotation: AppInfo ncalrpc: LRPC-ff54c9c19efe5d1f65 a4b8d482-80ce-40d6-934d-b22a01a44fe7 version: v1.0 annotation: LicenseManager ncalrpc: LicenseServiceEndpoint bf4dc912-e52f-4904-8ebe-9317c1bdd497 version: v1.0 ncalrpc: LRPC-ca421deffc1988edde ncalrpc: OLE4CB24EB5962A349DCAFC6B8EEB91 572e35b4-1344-4565-96a1-f5df3bfa89bb version: v1.0 annotation: LiveIdSvcNotify RPC Interface ncalrpc: liveidsvcnotify faf2447b-b348-4feb-8dbe-beee5b7f7778 version: v1.0 annotation: OnlineProviderCert RPC Interface ncalrpc: LRPC-0e20fbbaa0ed2602ba cc105610-da03-467e-bc73-5b9e2937458d version: v1.0 annotation: LiveIdSvc RPC Interface ncalrpc: LRPC-0e20fbbaa0ed2602ba c503f532-443a-4c69-8300-ccd1fbdb3839 version: v2.0 ncalrpc: LRPC-959031738bb44e0293 ncalrpc: OLEDCC8B28099F471EC89389FA5A8B5 8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 version: v1.0 annotation: Group Policy RPC Interface provider: appmgmts.dll ncalrpc: LRPC-54b3a0304fd30b314c 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncalrpc: 9131483a-103c-4749-a49a-01fcca6c4fab ncalrpc: LRPC-cc0551326285177536
-757264002 | 2024-05-15T07:03:47.327221139 / tcp
\x83\x00\x00\x01\x8f
1489525118 | 2024-05-09T02:27:29.700651443 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 09 May 2024 02:27:29 GMT Connection: close Content-Length: 315
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a0:21:45:2e:2a:a3:2f:e9:92:08:b3:5b:4e:8e:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: Apr 30 00:00:00 2024 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=*.jiuweiyun.cn
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:93:e7:7e:46:3f:84:5f:56:82:9d:a3:23:8a:07:
b9:f2:3a:d3:63:19:de:cf:82:60:1c:78:d1:18:8f:
48:ca:45:79:0f:2f:4d:30:e1:31:2d:08:8d:cd:a9:
32:57:6f:63:1a:2e:c8:ae:8d:0b:cf:a5:b7:dd:b3:
cd:93:22:15:c3:23:b7:b0:4e:34:7c:8d:67:29:63:
45:7f:b8:67:e8:89:85:39:af:07:b3:16:a0:66:0b:
6f:6b:f1:fd:5f:d3:24:1c:3b:d9:62:12:4b:d8:62:
60:9a:74:df:3d:f8:5a:fd:57:56:a5:44:70:94:8c:
f6:ae:b3:9e:8d:a4:55:43:7c:14:fb:56:37:0c:2b:
76:3c:3f:9b:ff:71:d7:b2:be:a8:26:61:4d:0f:cc:
24:c3:6a:1b:74:d8:e6:eb:9a:8c:69:c9:d5:44:a6:
31:9e:66:94:9a:cd:86:20:56:46:b8:22:f9:7c:8b:
76:16:02:d9:e7:0e:2b:8b:70:22:a5:38:bf:51:ec:
38:92:91:60:90:97:37:11:c8:d1:3c:90:a4:cd:22:
62:6e:67:7c:e0:56:e0:66:20:13:02:89:16:58:2d:
e3:5f:a2:5f:c2:21:4b:4b:77:45:05:ea:9f:c9:74:
1c:ee:85:f4:51:9d:86:11:e3:ed:27:4c:88:ec:88:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
3C:1D:5E:00:DF:A2:69:6D:8B:CA:E4:09:17:43:93:46:D2:40:D8:D4
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:*.jiuweiyun.cn, DNS:jiuweiyun.cn
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Apr 30 05:28:10.741 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:9C:59:CB:0E:72:FF:EE:1B:E6:05:7A:
74:0E:91:98:B1:76:8D:64:E2:E3:0D:44:D3:5E:DB:83:
2B:82:3F:A2:7A:02:21:00:D2:D0:B9:33:57:7F:D5:11:
10:B3:73:CA:FF:6E:D7:5B:13:4E:03:C3:B6:58:68:DC:
6A:48:D9:79:E3:BC:C7:DF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Apr 30 05:28:10.677 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:D5:3C:A0:EE:D6:FF:A4:E0:E6:D9:B9:
B3:7D:63:66:06:33:D4:CC:EE:5C:7E:05:3B:F9:D6:BB:
50:E4:C9:C9:41:02:21:00:DC:01:FF:11:40:A5:67:2F:
F0:C4:5A:30:4E:E5:5B:1A:DB:0F:EC:D4:D4:87:2B:7F:
EF:28:0A:DA:01:3E:88:2E
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 30 05:28:10.634 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D9:67:DE:34:B8:E7:41:75:B5:9E:58:
1A:CA:7E:64:B0:52:06:42:A4:F2:5E:D2:C0:59:27:5A:
35:D3:52:5B:A2:02:20:4E:0D:23:C2:6F:18:85:98:44:
68:75:53:E0:4C:14:E8:B8:76:09:B9:AE:40:9E:6D:D1:
27:15:B3:2A:70:CC:0D
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
72:6c:e7:24:8a:19:e6:83:6b:e6:6b:5a:c8:38:1d:aa:4b:01:
d3:ba:c4:13:18:42:18:e8:48:fe:0c:1a:47:6e:63:f0:f8:20:
83:4b:0f:0b:0e:17:c9:ea:fd:99:a4:ec:7f:dc:83:e7:60:7c:
73:74:e4:71:cf:18:b4:cc:56:02:b5:f4:e9:bc:b7:bb:28:86:
94:60:a0:e2:3f:ca:35:df:46:89:f0:40:6e:0e:fb:61:06:d9:
59:7a:e6:70:6e:6c:f3:a9:b3:6e:cd:23:67:0f:b1:92:9b:ae:
62:01:d8:0e:a4:ea:df:d8:ec:ee:cc:0c:7e:99:5d:5e:f9:fa:
62:50:2d:10:17:ee:d7:01:08:5c:cd:d9:4f:41:92:09:4f:12:
e9:92:1e:ac:4f:89:1e:35:4f:8d:e9:7e:25:48:02:5c:58:c8:
6d:fd:e0:4f:cd:dd:5e:9b:04:80:45:de:3e:89:b6:8f:3f:69:
8e:62:6a:fd:3d:b1:e4:88:21:cf:37:3b:e0:f6:15:84:3a:f2:
cb:91:2a:c2:36:8a:bf:0b:61:de:7d:fd:8b:e6:1f:59:e2:71:
43:20:a6:c0:c4:2a:07:7f:dd:00:77:81:c8:a9:46:3a:01:35:
5d:61:e8:73:c5:9a:6a:38:0c:c4:b6:fa:27:ff:8c:7a:4c:03:
a8:69:08:91
-1609676984 | 2024-05-11T03:39:34.6499931433 / tcp
MS-SQL NTLM Info: OS: Windows 10 (version 1809)/Windows Server 2019 (version 1809) OS Build: 10.0.17763 Target Name: WIN-LIVFRVQFMKO NetBIOS Domain Name: WIN-LIVFRVQFMKO NetBIOS Computer Name: WIN-LIVFRVQFMKO DNS Domain Name: WIN-LIVFRVQFMKO FQDN: WIN-LIVFRVQFMKO
39774799 | 2024-05-15T07:38:57.3746301801 / tcp
\x10Z\x0b\x00LIOR<\x02\x00\x00\xff\xff\xff\xff\x00\x00\x12\x00\x06U=Q6\xdf\xc7@\x96C\x17\\<\xe7l\xaa\xaf\x7f\x1bk\xc6DmA\x8a\x92S\x01\xb5\xb7\xfe\xa7\x00\x00\x00\x00\x10\x02\x00\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
642323041 | 2024-04-30T00:14:31.8030223389 / tcp
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 10 (version 1809)/Windows Server 2019 (version 1809) OS Build: 10.0.17763 Target Name: WIN-LIVFRVQFMKO NetBIOS Domain Name: WIN-LIVFRVQFMKO NetBIOS Computer Name: WIN-LIVFRVQFMKO DNS Domain Name: WIN-LIVFRVQFMKO FQDN: WIN-LIVFRVQFMKO
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8b:ca:d1:5e:c1:07:ba:4b:13:63:c3:1a:61:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=WIN-LIVFRVQFMKO
Validity
Not Before: Mar 24 14:40:54 2024 GMT
Not After : Sep 23 14:40:54 2024 GMT
Subject: CN=WIN-LIVFRVQFMKO
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9c:7c:ab:9b:fe:93:3a:6f:f7:fc:d4:3a:21:dc:
7e:3e:27:27:33:33:c7:cd:8d:dc:61:74:c8:b9:1b:
e6:34:0d:f1:99:cb:4d:67:57:0b:36:03:8b:7f:47:
4c:39:c9:6b:57:34:40:4a:3c:d8:f1:89:47:1b:64:
9a:9d:87:36:db:b1:cc:d6:c7:a5:c7:69:47:5a:6b:
4b:c6:ff:9c:0a:38:da:9b:ce:b4:33:f9:e2:f2:97:
59:8b:e5:64:e7:c1:da:51:c5:05:92:18:c4:18:bf:
d4:bb:5e:58:7d:a9:77:d5:d2:96:d1:72:2d:0a:b5:
a6:a9:8a:89:d0:58:be:5d:c2:1f:fd:26:66:33:50:
d3:6c:1f:f3:4e:1e:60:22:ef:b7:78:ef:85:95:f6:
b2:56:4d:10:4d:3a:df:20:94:af:2a:76:76:33:57:
92:66:94:8b:b0:f3:92:e6:38:1b:bc:99:0a:a2:e7:
ed:f4:55:93:53:26:d5:89:08:50:ed:23:3a:df:2e:
f1:29:2d:92:cf:19:02:53:66:d4:13:8c:73:bc:c4:
47:b8:f7:6b:aa:3e:24:59:f8:56:da:7d:d7:36:a5:
df:b2:9b:14:9f:0f:3a:65:0c:d1:7a:be:ce:61:48:
fc:43:a5:92:36:af:05:f3:6e:22:41:75:94:95:7f:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
90:e4:11:59:9e:8e:b2:ff:51:e4:da:0c:d7:f4:85:76:bd:6a:
80:3d:91:ef:0e:24:e8:9c:35:a6:1d:21:9f:99:44:f2:e7:9f:
65:d0:d8:4b:76:79:81:ae:f5:5a:ac:6e:19:62:b0:bd:8f:7a:
40:19:08:c8:45:d7:01:d1:39:b7:89:4b:4b:24:e7:92:da:be:
21:79:5e:4a:62:0b:cf:e8:f2:ba:52:5c:df:49:fa:e0:24:01:
20:40:8f:c1:6a:47:5e:a5:4f:c3:87:7c:97:fd:2f:49:6f:a5:
30:21:5b:d9:c7:23:97:d5:0b:d0:da:a1:77:f4:c6:bb:97:59:
66:ee:4c:e2:50:aa:42:ab:19:86:6e:96:41:6b:9a:56:54:d3:
c5:27:84:8b:02:8a:67:1c:bf:11:12:98:41:58:01:68:8e:7a:
cb:20:41:a0:1f:46:e2:9b:2a:c0:c6:d7:7b:6a:fd:b7:00:c3:
77:f6:1d:d6:96:01:b1:07:91:e6:f8:77:85:c1:58:72:e5:9f:
c3:f9:d1:38:fb:19:58:17:65:f4:6e:1e:40:3f:ad:0b:b3:81:
b0:e5:c2:a4:dc:5d:33:46:34:cb:0f:b5:b0:bc:a6:91:66:43:
a3:4b:b8:bf:9b:13:da:67:2f:02:91:e8:f5:78:52:5e:92:ab:
19:4e:16:09
1489525118 | 2024-05-09T09:02:47.9231445985 / tcp
HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 09 May 2024 09:02:27 GMT Connection: close Content-Length: 315 WinRM NTLM Info: OS: Windows Server 2019 (version 1809) OS Build: 10.0.17763 Target Name: WIN-LIVFRVQFMKO NetBIOS Domain Name: WIN-LIVFRVQFMKO NetBIOS Computer Name: WIN-LIVFRVQFMKO DNS Domain Name: WIN-LIVFRVQFMKO FQDN: WIN-LIVFRVQFMKO