-1873860414 | 2024-05-17T07:44:06.262702
135 /
tcp
Microsoft RPC Endpoint Mapper
d95afe70-a6d5-4259-822e-2c84da1ddb0d
version: v1.0
protocol: [MS-RSP]: Remote Shutdown Protocol
provider: wininit.exe
ncacn_ip_tcp: 198.46.132.213:49152
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\InitShutdown
ncalrpc: WMsgKRpc05FF60
76f226c3-ec14-4325-8a99-6a46348418af
version: v1.0
provider: winlogon.exe
ncalrpc: WindowsShutdown
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\InitShutdown
ncalrpc: WMsgKRpc05FF60
ncalrpc: WMsgKRpc0381FD2
ncalrpc: WMsgKRpc031AFD593
ncalrpc: WMsgKRpc05A310114
ncalrpc: WMsgKRpc069F7F535
ncalrpc: WMsgKRpc070FD4706
ncalrpc: WMsgKRpc0784C7BE9
ncalrpc: WMsgKRpc07D5B20A8
ncalrpc: WMsgKRpc084667487
ncalrpc: WMsgKRpc099069F2A
ncalrpc: WMsgKRpc09AC08EFC
ncalrpc: WMsgKRpc09AD0AE1B
ncalrpc: WMsgKRpc0A501B06D
ncalrpc: WMsgKRpc0B388291E
ncalrpc: WMsgKRpc0C623881F
ncalrpc: WMsgKRpc0F768A9310
ncalrpc: WMsgKRpc0FAB762411
ncalrpc: WMsgKRpc01073A78A13
ncalrpc: WMsgKRpc010A6E58112
ncalrpc: WMsgKRpc0111613B215
ncalrpc: WMsgKRpc01135F4DA14
ncalrpc: WMsgKRpc0114C929F16
ncalrpc: WMsgKRpc011A807A519
ncalrpc: WMsgKRpc011D20C5517
ncalrpc: WMsgKRpc011E2C2161A
ncalrpc: WMsgKRpc011EAC14918
ncalrpc: WMsgKRpc0128215171B
ncalrpc: WMsgKRpc01284574E1D
ncalrpc: WMsgKRpc012C6C2101E
ncalrpc: WMsgKRpc0130FD9EE1C
ncalrpc: WMsgKRpc01487207B1F
ncalrpc: WMsgKRpc0150B033920
ncalrpc: WMsgKRpc01742878E23
ncalrpc: WMsgKRpc0175E995C21
ncalrpc: WMsgKRpc0180EFD5922
ncalrpc: WMsgKRpc01835E71B24
ncalrpc: WMsgKRpc01840F61825
ncalrpc: WMsgKRpc01AFD43CD26
ncalrpc: WMsgKRpc01B06B71927
ncalrpc: WMsgKRpc01DFFD28728
ncalrpc: WMsgKRpc01E4565D329
ncalrpc: WMsgKRpc02000D6EB2A
ncalrpc: WMsgKRpc0204221FC2B
ncalrpc: WMsgKRpc02047AC4D2F
ncalrpc: WMsgKRpc020A0CCCF2C
ncalrpc: WMsgKRpc020A531E62D
ncalrpc: WMsgKRpc020F1D57D2E
ncalrpc: WMsgKRpc020F6019B31
ncalrpc: WMsgKRpc021070EAB30
ncalrpc: WMsgKRpc02243A8ED33
ncalrpc: WMsgKRpc0225F579F32
ncalrpc: WMsgKRpc022704B7134
ncalrpc: WMsgKRpc02279654636
ncalrpc: WMsgKRpc022A3B1D637
ncalrpc: WMsgKRpc022E441ED35
ncalrpc: WMsgKRpc024A8313442
ncalrpc: WMsgKRpc025074F0A38
ncalrpc: WMsgKRpc0254C61B93B
ncalrpc: WMsgKRpc0263FAF173E
ncalrpc: WMsgKRpc026438CAD54
ncalrpc: WMsgKRpc026588A6646
ncalrpc: WMsgKRpc0266E35B062
ncalrpc: WMsgKRpc0277C690939
ncalrpc: WMsgKRpc027CF9A1644
ncalrpc: WMsgKRpc033DB5C163C
ncalrpc: WMsgKRpc03BC1668D3A
ncalrpc: WMsgKRpc041860E273F
ncalrpc: WMsgKRpc04305C89C3D
ncalrpc: WMsgKRpc04305E15740
ncalrpc: WMsgKRpc043216B4841
ncalrpc: WMsgKRpc0434A2E0145
ncalrpc: WMsgKRpc043950B0A43
ncalrpc: WMsgKRpc04483B17247
ncalrpc: WMsgKRpc044D2E65348
ncalrpc: WMsgKRpc0482BE3904A
ncalrpc: WMsgKRpc0495BC35F4B
ncalrpc: WMsgKRpc049CCD7464C
ncalrpc: WMsgKRpc04BDBBB864D
ncalrpc: WMsgKRpc051198F794F
ncalrpc: WMsgKRpc0518F74A851
ncalrpc: WMsgKRpc0519127A94E
ncalrpc: WMsgKRpc05191F3C652
ncalrpc: WMsgKRpc0519273CA53
ncalrpc: WMsgKRpc051934B6350
ncalrpc: WMsgKRpc05202915655
ncalrpc: WMsgKRpc0525C630857
ncalrpc: WMsgKRpc0525DC63A58
ncalrpc: WMsgKRpc05285F2FA56
ncalrpc: WMsgKRpc05385B12A59
ncalrpc: WMsgKRpc05385D7495A
ncalrpc: WMsgKRpc05494764B5C
ncalrpc: WMsgKRpc05498660E60
ncalrpc: WMsgKRpc05498AD725E
ncalrpc: WMsgKRpc0549C238A5B
ncalrpc: WMsgKRpc0549DA75761
ncalrpc: WMsgKRpc054B915D85F
ncalrpc: WMsgKRpc054BD842E63
ncalrpc: WMsgKRpc054DBD8B45D
ncalrpc: WMsgKRpc0551CD98364
ncalrpc: WMsgKRpc0554994BA65
ncalrpc: WMsgKRpc05575E9B968
ncalrpc: WMsgKRpc05600E13866
ncalrpc: WMsgKRpc0574A9CA267
ncalrpc: WMsgKRpc05806E6E369
ncalrpc: WMsgKRpc0591659786A
ncalrpc: WMsgKRpc059BF5AD86C
ncalrpc: WMsgKRpc05B56E7556E
ncalrpc: WMsgKRpc05B590A2E6D
ncalrpc: WMsgKRpc05B6500796B
ncalrpc: WMsgKRpc05B7333A56F
ncalrpc: WMsgKRpc05B73DD7572
ncalrpc: WMsgKRpc05B98C4D670
ncalrpc: WMsgKRpc05BB3556673
ncalrpc: WMsgKRpc05BB7D5A471
ncalrpc: WMsgKRpc05BD3F35975
ncalrpc: WMsgKRpc05BE5019874
ncalrpc: WMsgKRpc05BF8A78A78
ncalrpc: WMsgKRpc05BFE41EF77
ncalrpc: WMsgKRpc05C07C7AD76
ncalrpc: WMsgKRpc05C15BA5579
ncalrpc: WMsgKRpc05C7C70AB7B
ncalrpc: WMsgKRpc05CB607867A
ncalrpc: WMsgKRpc05D3063837C
ncalrpc: WMsgKRpc05DC6944D7D
ncalrpc: WMsgKRpc074A239A887
ncalrpc: WMsgKRpc0746E5C9F1
ncalrpc: WMsgKRpc073A2D0BD86
ncalrpc: WMsgKRpc07180A70B85
ncalrpc: WMsgKRpc070D205B184
ncalrpc: WMsgKRpc06E1ABA7B83
ncalrpc: WMsgKRpc06D01E1BA81
ncalrpc: WMsgKRpc06BCBD62D82
ncalrpc: WMsgKRpc06B5B632480
ncalrpc: WMsgKRpc06026FCE77F
ncalrpc: WMsgKRpc05FA0F8D57E
9b008953-f195-4bf9-bde0-4471971e58ed
version: v1.0
ncalrpc: dabrpc
ncalrpc: LRPC-b2f0415a7fe18380df
ncalrpc: OLE292ED98C51B467890E2E888F26DA
ncacn_np: \\WIN-46S82Q2PKTK\pipe\LSM_API_service
ncalrpc: LSMApi
ncalrpc: LRPC-6846265e096e44c5dd
ncalrpc: actkernel
ncalrpc: umpo
697dcda9-3ba9-4eb2-9247-e11f1901b0d2
version: v1.0
ncalrpc: LRPC-b2f0415a7fe18380df
ncalrpc: OLE292ED98C51B467890E2E888F26DA
ncacn_np: \\WIN-46S82Q2PKTK\pipe\LSM_API_service
ncalrpc: LSMApi
ncalrpc: LRPC-6846265e096e44c5dd
ncalrpc: actkernel
ncalrpc: umpo
c9ac6db5-82b7-4e55-ae8a-e464ed7b4277
version: v1.0
annotation: Impl friendly name
provider: sysntfy.dll
ncalrpc: LRPC-6846265e096e44c5dd
ncalrpc: actkernel
ncalrpc: umpo
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
ncalrpc: IUserProfile2
0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
c605f9fb-f0a3-4e2a-a073-73560f8d9e3e
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
8bfc3be1-6def-4e2d-af74-7c47cd0ade4a
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
2d98a740-581d-41b9-aa0d-a88b9d5ce938
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
3b338d89-6cfa-44b8-847e-531531bc9992
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
8782d3b9-ebbd-4644-a3d8-e8725381919b
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
085b0334-e454-4d91-9b8c-4134f9e793f3
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9
version: v1.0
ncalrpc: actkernel
ncalrpc: umpo
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5
version: v1.0
annotation: DHCP Client LRPC Endpoint
provider: dhcpcsvc.dll
ncalrpc: dhcpcsvc
ncalrpc: dhcpcsvc6
ncalrpc: LRPC-b7b72ed81d4f93fafd
ncacn_ip_tcp: 198.46.132.213:49153
ncacn_np: \\WIN-46S82Q2PKTK\pipe\eventlog
ncalrpc: eventlog
3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6
version: v1.0
annotation: DHCPv6 Client LRPC Endpoint
provider: dhcpcsvc6.dll
ncalrpc: dhcpcsvc6
ncalrpc: LRPC-b7b72ed81d4f93fafd
ncacn_ip_tcp: 198.46.132.213:49153
ncacn_np: \\WIN-46S82Q2PKTK\pipe\eventlog
ncalrpc: eventlog
abfb6ca3-0c5e-4734-9285-0aee72fe8d1c
version: v1.0
annotation: Wcm Service
ncalrpc: LRPC-b7b72ed81d4f93fafd
ncacn_ip_tcp: 198.46.132.213:49153
ncacn_np: \\WIN-46S82Q2PKTK\pipe\eventlog
ncalrpc: eventlog
30adc50c-5cbc-46ce-9a0e-91914789e23c
version: v1.0
annotation: NRP server endpoint
provider: nrpsrv.dll
ncalrpc: LRPC-b7b72ed81d4f93fafd
ncacn_ip_tcp: 198.46.132.213:49153
ncacn_np: \\WIN-46S82Q2PKTK\pipe\eventlog
ncalrpc: eventlog
f6beaff7-1e19-4fbb-9f8f-b89e2018337c
version: v1.0
annotation: Event log TCPIP
protocol: [MS-EVEN6]: EventLog Remoting Protocol
provider: wevtsvc.dll
ncacn_ip_tcp: 198.46.132.213:49153
ncacn_np: \\WIN-46S82Q2PKTK\pipe\eventlog
ncalrpc: eventlog
58e604e8-9adb-4d2e-a464-3b0683fb1480
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-ec3dab6d7645e03d71
ncacn_np: \\WIN-46S82Q2PKTK\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
fd7a0523-dc70-43dd-9b2e-9c5ed48225b1
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-ec3dab6d7645e03d71
ncacn_np: \\WIN-46S82Q2PKTK\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
5f54ce7d-5b79-4175-8584-cb65313a0e98
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-ec3dab6d7645e03d71
ncacn_np: \\WIN-46S82Q2PKTK\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
201ef99a-7fa0-444c-9399-19ba84f12a1a
version: v1.0
annotation: AppInfo
provider: appinfo.dll
ncalrpc: LRPC-ec3dab6d7645e03d71
ncacn_np: \\WIN-46S82Q2PKTK\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
30b044a5-a225-43f0-b3a4-e060df91f9c1
version: v1.0
provider: certprop.dll
ncalrpc: LRPC-ec3dab6d7645e03d71
ncacn_np: \\WIN-46S82Q2PKTK\pipe\SessEnvPublicRpc
ncalrpc: SessEnvPrivateRpc
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\srvsvc
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
1a0d010f-1c33-432c-b0f5-8cf4e8053099
version: v1.0
annotation: IdSegSrv service
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
98716d03-89ac-44c7-bb8c-285824e51c4a
version: v1.0
annotation: XactSrv service
provider: srvsvc.dll
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1
version: v1.0
annotation: Adh APIs
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
c36be077-e14b-4fe9-8abc-e856ef4f048b
version: v1.0
annotation: Proxy Manager client server endpoint
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
2e6035b2-e8f1-41a7-a044-656b439c4c34
version: v1.0
annotation: Proxy Manager provider server endpoint
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
552d076a-cb29-4e44-8b6a-d15e59e2c0af
version: v1.0
annotation: IP Transition Configuration endpoint
provider: iphlpsvc.dll
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
a398e520-d59a-4bdd-aa7a-3c1e0303a511
version: v1.0
annotation: IKE/Authip API
provider: IKEEXT.DLL
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
3a9ef155-691d-4449-8d05-09ad57031823
version: v1.0
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
86d35949-83c9-4044-b424-db363231fd0c
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: schedsvc.dll
ncacn_ip_tcp: 198.46.132.213:49154
ncalrpc: ubpmtaskhostchannel
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
378e52b0-c0a9-11cf-822d-00aa0051e40f
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
1ff70682-0a51-30e8-076d-740be8cee98b
version: v1.0
protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
provider: taskcomp.dll
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\atsvc
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
version: v1.0
provider: schedsvc.dll
ncalrpc: senssvc
ncalrpc: OLE0B79636BC2DDB0C870D3AD2AB9D7
ncalrpc: IUserProfile2
2eb08e3e-639f-4fba-97b1-14f878961076
version: v1.0
annotation: Group Policy RPC Interface
provider: gpsvc.dll
ncalrpc: LRPC-87db4589ccfbf4ac6d
3473dd4d-2e88-4006-9cba-22570909dd10
version: v5.256
annotation: WinHttp Auto-Proxy Service
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\W32TIME_ALT
ncalrpc: W32TIME_ALT
ncalrpc: LRPC-55bae9b33f14d5882d
ncalrpc: OLE26E4DDD5C37C59517E3B19AF2A4D
7ea70bcf-48af-4f6a-8968-6a440754d5fa
version: v1.0
annotation: NSI server endpoint
provider: nsisvc.dll
ncalrpc: LRPC-55bae9b33f14d5882d
ncalrpc: OLE26E4DDD5C37C59517E3B19AF2A4D
2fb92682-6599-42dc-ae13-bd2ca89bd11c
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-db150e2a1e72535ebf
ncalrpc: LRPC-7336a6b96cd6ec63e0
f47433c3-3e9d-4157-aad4-83aa1f5c2d4c
version: v1.0
annotation: Fw APIs
ncalrpc: LRPC-db150e2a1e72535ebf
ncalrpc: LRPC-7336a6b96cd6ec63e0
7f9d11bf-7fb9-436b-a812-b2d50c5d4c03
version: v1.0
annotation: Fw APIs
provider: MPSSVC.dll
ncalrpc: LRPC-db150e2a1e72535ebf
ncalrpc: LRPC-7336a6b96cd6ec63e0
dd490425-5325-4565-b774-7e27d6c09c24
version: v1.0
annotation: Base Firewall Engine API
provider: BFE.DLL
ncalrpc: LRPC-7336a6b96cd6ec63e0
7f1343fe-50a9-4927-a778-0c5859517bac
version: v1.0
annotation: DfsDs service
ncacn_np: \\WIN-46S82Q2PKTK\PIPE\wkssvc
ncalrpc: LRPC-8e0d71229c14687750
ncalrpc: DNSResolver
eb081a0d-10ee-478a-a1dd-50995283e7a8
version: v3.0
annotation: Witness Client Test Interface
ncalrpc: LRPC-8e0d71229c14687750
ncalrpc: DNSResolver
f2c9b409-c1c9-4100-8639-d8ab1486694a
version: v1.0
annotation: Witness Client Upcall Server
ncalrpc: LRPC-8e0d71229c14687750
ncalrpc: DNSResolver
76f03f96-cdfd-44fc-a22c-64950a001209
version: v1.0
protocol: [MS-PAR]: Print System Asynchronous Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 198.46.132.213:49155
ncalrpc: LRPC-1763ca5323ac305830
4a452661-8290-4b36-8fbe-7f4093a94978
version: v1.0
provider: spoolsv.exe
ncacn_ip_tcp: 198.46.132.213:49155
ncalrpc: LRPC-1763ca5323ac305830
ae33069b-a2a8-46ee-a235-ddfd339be281
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 198.46.132.213:49155
ncalrpc: LRPC-1763ca5323ac305830
0b6edbfa-4a24-4fc6-8a23-942b1eca65d1
version: v1.0
protocol: [MS-PAN]: Print System Asynchronous Notification Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 198.46.132.213:49155
ncalrpc: LRPC-1763ca5323ac305830
12345678-1234-abcd-ef00-0123456789ab
version: v1.0
protocol: [MS-RPRN]: Print System Remote Protocol
provider: spoolsv.exe
ncacn_ip_tcp: 198.46.132.213:49155
ncalrpc: LRPC-1763ca5323ac305830
b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86
version: v2.0
annotation: KeyIso
ncacn_ip_tcp: 198.46.132.213:49156
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\WIN-46S82Q2PKTK\pipe\lsass
12345778-1234-abcd-ef00-0123456789ac
version: v1.0
protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
provider: samsrv.dll
ncacn_ip_tcp: 198.46.132.213:49156
ncalrpc: samss lpc
ncalrpc: SidKey Local End Point
ncalrpc: protected_storage
ncalrpc: lsasspirpc
ncalrpc: lsapolicylookup
ncalrpc: LSA_EAS_ENDPOINT
ncalrpc: lsacap
ncalrpc: LSARPC_ENDPOINT
ncalrpc: securityevent
ncalrpc: audit
ncacn_np: \\WIN-46S82Q2PKTK\pipe\lsass
367abb81-9844-35f1-ad32-98f038001003
version: v2.0
protocol: [MS-SCMR]: Service Control Manager Remote Protocol
provider: services.exe
ncacn_ip_tcp: 198.46.132.213:49158
6b5bdd1e-528c-422c-af8c-a4079be4fe48
version: v1.0
annotation: Remote Fw APIs
protocol: [MS-FASP]: Firewall and Advanced Security Protocol
provider: FwRemoteSvr.dll
ncacn_ip_tcp: 198.46.132.213:49159
906b0ce0-c70b-1067-b317-00dd010662da
version: v1.0
protocol: [MS-CMPO]: MSDTC Connection Manager:
provider: msdtcprx.dll
ncalrpc: LRPC-9bf63095830af55821
ncalrpc: LRPC-9bf63095830af55821
ncalrpc: LRPC-9bf63095830af55821
12e65dd8-887f-41ef-91bf-8d816c42c2e7
version: v1.0
annotation: Secure Desktop LRPC interface
provider: winlogon.exe
ncalrpc: WMsgKRpc0381FD2
b2507c30-b126-494a-92ac-ee32b6eeb039
version: v1.0
ncalrpc: LRPC-cd676ef6e20c3684c5
ncalrpc: LRPC-58d88b8aaf55251e3d
ncalrpc: LRPC-a7e1b617bebcc1c2c8
ncalrpc: LRPC-3a9fa7cef14a28f49f
ncalrpc: LRPC-a78ee9690b38fbf1db
ncalrpc: LRPC-c5e289f1d8f90d3c08
ncalrpc: LRPC-dce68e133c1b32a1b4
ncalrpc: LRPC-6c02b615f0b442df19
ncalrpc: LRPC-58317261245d36271e
ncalrpc: LRPC-aa126591557cfa1e38
ncalrpc: LRPC-5cf1e679ef9e391201
ncalrpc: LRPC-de4985fb521177aabc
ncalrpc: LRPC-15ade8b62deec895e7
ncalrpc: LRPC-7cf5db0876e729f3fb
ncalrpc: LRPC-2ec236dfa422548880
ncalrpc: LRPC-92b0c78785ef4cf883
ncalrpc: LRPC-0e6b56b6f36fd580fd
ncalrpc: LRPC-c5655bb07e1559ccfa
ncalrpc: LRPC-1a1b266bf99c95baa7
ncalrpc: LRPC-82754ab305be0301ee
ncalrpc: LRPC-6a3e33c80ed273f437
ncalrpc: LRPC-da1538af782ad7a619
ncalrpc: LRPC-ed5dd5f64ca5a80cf8
ncalrpc: LRPC-a17c0f0fe7baad723b
ncalrpc: LRPC-62b7c7478f193e5153
ncalrpc: LRPC-e512a8aed8889b3035
ncalrpc: LRPC-6722dc5c609dbc22d3
ncalrpc: LRPC-6a83c2dcfc6568d597
ncalrpc: LRPC-5a704db5c772d6cbdc
ncalrpc: LRPC-3388744f4095ce205f
ncalrpc: LRPC-80fce0d27881212b28
ncalrpc: LRPC-1470e534c1807e1e57
ncalrpc: LRPC-544ec4704f52103e7a
ncalrpc: LRPC-634b51444cf7da637e
ncalrpc: LRPC-40bdb1ff11c75e0619
ncalrpc: LRPC-076e479058e97a940b
ncalrpc: LRPC-3e01e6eb9acbd5244c
ncalrpc: LRPC-dab71fe6b4014e04ee
ncalrpc: LRPC-4b5d87794eb357a5e3
ncalrpc: LRPC-92b53daccc824a1dfd
ncalrpc: LRPC-db66cfb0d0a68076fa
ncalrpc: LRPC-b7417c1eb66257acae
ncalrpc: LRPC-1abec069a443d0ca61
ncalrpc: LRPC-38b653453fcac4130f
ncalrpc: LRPC-4b817e1eb6577cb3b5
ncalrpc: LRPC-53b034aec7f5b45ec4
ncalrpc: LRPC-878f75dc384670c65f
ncalrpc: LRPC-eb3176d0576de1a7ae
ncalrpc: LRPC-e0c495bbfe2df62397
ncalrpc: LRPC-6bfa100c440c205506
ncalrpc: LRPC-d82d43c514f031a93d
ncalrpc: LRPC-930c60d999ed999423
ncalrpc: LRPC-e10af167060ea8252d
ncalrpc: LRPC-4cf9f9964b09fb9547
ncalrpc: LRPC-caaf05df7e5d792d93
ncalrpc: LRPC-bd88d3c7a3a33d6325
ncalrpc: LRPC-a62f98ad56c99ae1a0
ncalrpc: LRPC-4b69a86d86783dac02
ncalrpc: LRPC-88e5a482854e073c52
ncalrpc: LRPC-5283fd6c97c4f00b91
ncalrpc: LRPC-d178bb81f21cf0dca3
ncalrpc: LRPC-24fe39f86e89a93bdb
ncalrpc: LRPC-82a1f00eeaa2962f51
ncalrpc: LRPC-d78be842a90f123bb1
ncalrpc: LRPC-8db0fb746c0a0f8de2
ncalrpc: LRPC-b2dc0b726d40b34d19
ncalrpc: LRPC-5cb40bb5c4e2e05db4
ncalrpc: LRPC-854a06789198f7c83d
ncalrpc: LRPC-a130cd20e79e0d4eb6
ncalrpc: LRPC-6a40166c9df3a7ba8c
ncalrpc: LRPC-e85c4e8f6985b370ae
ncalrpc: LRPC-c8f235a52dc09b0864
ncalrpc: LRPC-86a8986b1b2b40ff6b
ncalrpc: LRPC-e619ce5cf531ee864e
ncalrpc: LRPC-87fd2853f519dfd594
ncalrpc: LRPC-22bd51372b6f1563e6
ncalrpc: LRPC-9eb1c113eecf5d5a9f
ncalrpc: LRPC-4f6ea5816bd75a8ce2
ncalrpc: LRPC-0b8913eee194b487a0
ncalrpc: LRPC-11dd7517372d820f84
ncalrpc: LRPC-00165b0b1961b90835
ncalrpc: LRPC-705bbb2ad58bafa315
ncalrpc: LRPC-c93ec662f2e9b8c98d
ncalrpc: LRPC-11e75f1c67f8df7ad2
ncalrpc: LRPC-589bcf9acb8641b50e
ncalrpc: LRPC-839a24c5972457fc50
ncalrpc: LRPC-17e681f302984026d1
ncalrpc: LRPC-c7c0668137f5d6f7ea
ncalrpc: LRPC-44c7c0aa81228a178e
ncalrpc: LRPC-31f9b808c6ebcf0154
ncalrpc: LRPC-45524aa240980f871d
ncalrpc: LRPC-34c8462389bb50f882
ncalrpc: LRPC-1d2207012748111f88
ncalrpc: LRPC-c31d14e09e03ded38b
ncalrpc: LRPC-6c6340aa1940a75e60
ncalrpc: LRPC-540bbadcc93ac8e846
ncalrpc: LRPC-48ddd554e36c11ce5d
ncalrpc: LRPC-08a0b71f92ac205063
ncalrpc: LRPC-d26e8afe13dba431e9
ncalrpc: LRPC-43768c38da919f2caa
ncalrpc: LRPC-b9338fbdc08df87ca8
ncalrpc: LRPC-c7fe38c97fbf16424e
ncalrpc: LRPC-55c01d9141e5e40fed
ncalrpc: LRPC-ddf4f100244866ded3
ncalrpc: LRPC-5387396978e2647b6c
ncalrpc: LRPC-83e212a1a2a3ea50cd
ncalrpc: LRPC-c7ee56a3899107b22c
ncalrpc: LRPC-22cbfbaa18e9195f09
ncalrpc: LRPC-0bd6fef3d647381a96
ncalrpc: LRPC-e8c4733f09563ebb1d
ncalrpc: LRPC-2cb10840546b86eb33
ncalrpc: LRPC-b4c06f97b9d4540898
ncalrpc: LRPC-690b54489742df456f
ncalrpc: LRPC-e7c2d5eabce0572196
ncalrpc: LRPC-2d7aa2b5f1c38e7e5a
ncalrpc: LRPC-f39d5f02e602305a71
ncalrpc: LRPC-c0d7db131c66abe99d
ncalrpc: LRPC-e225fc264421d7de44
ncalrpc: LRPC-1f74375e89c3e9ef5c
ncalrpc: LRPC-13b9f9b6e6346182ba
ncalrpc: LRPC-6d7a740eddb13a2287
ncalrpc: LRPC-c95234a0506c32efc2
ncalrpc: LRPC-c973f850394d5d5193
ncalrpc: LRPC-68202db179a0c6193d
ncalrpc: LRPC-dbf950518e78db8171
ncalrpc: LRPC-04d4de6cba68a28238
ncalrpc: LRPC-89e0bdc755efec557c
ncalrpc: LRPC-4f6491e88169d3856e
ncalrpc: LRPC-e216be92f18b4d0912
ncalrpc: LRPC-da412490ef81f2a4c3
ncalrpc: LRPC-47320b98267de43ed5
ncalrpc: LRPC-0ee21a1ba7d893ed54
ncalrpc: LRPC-dd1827b2f6af8c4a8d
1688663994 | 2024-04-25T09:34:18.810502
445 /
tcp
SMB Status:
Authentication: enabled
SMB Version: 1
OS: Windows Server 2012 R2 Standard 9600
Software: Windows Server 2012 R2 Standard 6.3
Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
1489525118 | 2024-05-16T18:39:24.556313
5985 /
tcp
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 16 May 2024 18:39:24 GMT
Connection: close
Content-Length: 315
WinRM NTLM Info:
OS: Windows Server 2012 R2
OS Build: 6.3.9600
Target Name: WIN-46S82Q2PKTK
NetBIOS Domain Name: WIN-46S82Q2PKTK
NetBIOS Computer Name: WIN-46S82Q2PKTK
DNS Domain Name: WIN-46S82Q2PKTK
FQDN: WIN-46S82Q2PKTK
