FOFA Search Engine

ASN: 134258

2025-01-02

Header

Banner

Products

CName

\x05\x00 \x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00 ServerAlive2: IP1: Bhavani-WhatsUPGold IP2: 157.119.171.28 NTLMSSP: Target_Name: BHAVANI-WHATSUP Product_Version: 10.0.19041 Ntlm 15 OS: Windows 10, Version 2004/Windows Server, Version 2004 NetBIOS_Domain_Name: BHAVANI-WHATSUP NetBIOS_Computer_Name: BHAVANI-WHATSUP DNS_Domain_Name: Bhavani-WhatsUPGold DNS_Computer_Name: Bhavani-WhatsUPGold System_Time: 2025-01-02 09:14:34 +0000 UTC DCERPC Dump: c521facf-09a9-42c5-b155-72388595cbf0 (psmserviceexthost.dll): - NCALRPC: umpo\x00 bd84cd86-9825-4376-813d-334c543f89b1 (das.dll): - NCALRPC: LRPC-9a35c40941c4931862\x00 95095ec8-32ea-4eb0-a3e2-041f97b36168 (diagtrack.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 fd8be72b-a9cd-4b2c-a9ca-4ded242fbe4d (diagtrack.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 9b008953-f195-4bf9-bde0-4471971e58ed (systemeventsbrokerserver.dll): - NCALRPC: LRPC-6da3b015a20836c2bc\x00 - NCALRPC: LRPC-86953dd110450eb199\x00 - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf (bisrv.dll): - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 c36be077-e14b-4fe9-8abc-e856ef4f048b (httpprxm.dll): - NCALRPC: TeredoControl\x00 - NCALRPC: TeredoDiagnostics\x00 - NCALRPC: LRPC-68ea37b0e91208a2bc\x00 906b0ce0-c70b-1067-b317-00dd010662da ([MS-CMPO]: MSDTC Connection Manager:): - NCALRPC: LRPC-07049941e462545854\x00 - NCALRPC: OLE8B3CF9E404291BCEA1A58401778D\x00 - NCALRPC: LRPC-f39235fe6ca43fd4f8\x00 b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 (keyiso.dll): - NCACN: 157.119.171.28:49664 - NCALRPC: samss lpc\x00 - NCALRPC: SidKey Local End Point\x00 - NCALRPC: protected_storage\x00 - NCALRPC: lsasspirpc\x00 - NCALRPC: lsapolicylookup\x00 - NCALRPC: LSA_EAS_ENDPOINT\x00 - NCALRPC: LSA_IDPEXT_ENDPOINT\x00 - NCALRPC: lsacap\x00 - NCALRPC: LSARPC_ENDPOINT\x00 - NCALRPC: securityevent\x00 - NCALRPC: audit\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\lsass\x00 bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 (psmsrv.dll): - NCALRPC: umpo\x00 509bc7ae-77be-4ee8-b07c-0d096bb44345: - NCALRPC: LRPC-4af4671392dcf61a42\x00 - NCALRPC: OLE4494251C5B0FA62CCE4BECD56D85\x00 e53d94ca-7464-4839-b044-09a2fb8b3ae5 (psmserviceexthost.dll): - NCALRPC: umpo\x00 7f1343fe-50a9-4927-a778-0c5859517bac (wkssvc.dll): - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\wkssvc\x00 - NCALRPC: LRPC-0908e4a2fc2878d248\x00 dd490425-5325-4565-b774-7e27d6c09c24 (bfe.dll): - NCALRPC: LRPC-997bd3cdfe3f66bb1d\x00 76f226c3-ec14-4325-8a99-6a46348418af (WinLogon.exe): - NCALRPC: WindowsShutdown\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\InitShutdown\x00 - NCALRPC: WMsgKRpc09B940\x00 - NCALRPC: WMsgKRpc09F9B1\x00 1832bcf6-cab8-41d4-85d2-c9410764f75a (psmserviceexthost.dll): - NCALRPC: umpo\x00 650a7e26-eab8-5533-ce43-9c1dfce11511 (rascustom.dll): - NCALRPC: LRPC-ab0b46f4668e197129\x00 - NCALRPC: VpnikeRpc\x00 - NCALRPC: RasmanLrpc\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\ROUTER\x00 fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 (appinfo.dll): - NCALRPC: LRPC-3b1ecccbc2d9f190fa\x00 201ef99a-7fa0-444c-9399-19ba84f12a1a (appinfo.dll): - NCALRPC: LRPC-3b1ecccbc2d9f190fa\x00 0d47017b-b33b-46ad-9e18-fe96456c5078 (psmserviceexthost.dll): - NCALRPC: umpo\x00 1ff70682-0a51-30e8-076d-740be8cee98b (taskcomp.dll): - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\atsvc\x00 - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 (schedsvc.dll): - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 54b4c689-969a-476f-8dc2-990885e9f562 (storsvc.dll): - NCALRPC: LRPC-9b76b5407667845878\x00 58e604e8-9adb-4d2e-a464-3b0683fb1480 (appinfo.dll): - NCALRPC: LRPC-3b1ecccbc2d9f190fa\x00 f44e62af-dab1-44c2-8013-049a9de417d6 (wcmsvc.dll): - NCALRPC: LRPC-09dddd16d584fb081b\x00 76f03f96-cdfd-44fc-a22c-64950a001209 (spoolsv.exe): - NCACN: 157.119.171.28:49677 - NCALRPC: LRPC-b7f94e6288aea0ef2f\x00 e38f5360-8572-473e-b696-1b46873beeab (diagtrack.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 178d84be-9291-4994-82c6-3f909aca5a03 (psmserviceexthost.dll): - NCALRPC: umpo\x00 12e65dd8-887f-41ef-91bf-8d816c42c2e7 (WinLogon.exe): - NCALRPC: WMsgKRpc09F9B1\x00 5222821f-d5e2-4885-84f1-5f6185a0ec41 (ncbservice.dll): - NCALRPC: LRPC-e788670e2c290733be\x00 4c8d0bef-d7f1-49f0-9102-caa05f58d114 (nlasvc.dll): - NCALRPC: nlaapi\x00 - NCALRPC: nlaplg\x00 2f5f6521-cb55-1059-b446-00df0bce31db (unimdm.tsp): - NCALRPC: unimdmsvc\x00 - NCALRPC: tapsrvlpc\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\tapsrv\x00 fc48cd89-98d6-4628-9839-86f7a3e4161a (ACPBackgroundManagerPolicy.dll): - NCALRPC: dabrpc\x00 - NCALRPC: csebpub\x00 - NCALRPC: LRPC-5e45179af6c679e295\x00 - NCALRPC: LRPC-6da3b015a20836c2bc\x00 - NCALRPC: LRPC-86953dd110450eb199\x00 - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 d09bdeb5-6171-4a34-bfe2-06fa82652568 (BrokerLib.dll): - NCALRPC: csebpub\x00 - NCALRPC: LRPC-5e45179af6c679e295\x00 - NCALRPC: LRPC-6da3b015a20836c2bc\x00 - NCALRPC: LRPC-86953dd110450eb199\x00 - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 - NCALRPC: LRPC-1723b36fb9c1aaa320\x00 - NCALRPC: LRPC-0f9e5ef1378d65c79d\x00 - NCALRPC: LRPC-4dc1606f08304e1c06\x00 - NCALRPC: OLE4187016D8A90FFD3B4C678408913\x00 - NCALRPC: LRPC-314ae6153b7b514b6f\x00 eb081a0d-10ee-478a-a1dd-50995283e7a8 (wkssvc.dll): - NCALRPC: LRPC-0908e4a2fc2878d248\x00 552d076a-cb29-4e44-8b6a-d15e59e2c0af (iphlpsvc.dll): - NCALRPC: LRPC-68ea37b0e91208a2bc\x00 c8ba73d2-3d55-429c-8e9a-c44f006f69fc (userdataservice.dll): - NCALRPC: OLE707882C87BE3B1C8B8D1BE7D07F2\x00 - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 12345678-1234-abcd-ef00-0123456789ab (spoolsv.exe): - NCACN: 157.119.171.28:49677 - NCALRPC: LRPC-b7f94e6288aea0ef2f\x00 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 (mpssvc.dll): - NCALRPC: LRPC-d925c1ee7324d63e33\x00 - NCALRPC: LRPC-997bd3cdfe3f66bb1d\x00 d95afe70-a6d5-4259-822e-2c84da1ddb0d (wininit.exe): - NCACN: 157.119.171.28:49665 - NCALRPC: WindowsShutdown\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\InitShutdown\x00 - NCALRPC: WMsgKRpc09B940\x00 2513bcbe-6cd4-4348-855e-7efb3c336dd3 (bisrv.dll): - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 (SYSNTFY.dll): - NCALRPC: LRPC-ad36da6fa7fb8c0430\x00 - NCALRPC: IUserProfile2\x00 - NCALRPC: LRPC-059b9a37429a3050d9\x00 - NCALRPC: senssvc\x00 - NCALRPC: LRPC-17b409e7a9eb58d565\x00 - NCALRPC: LRPC-d861fd2b4d53ae9675\x00 - NCALRPC: OLE2C29724A0A11039089A2E4D1F834\x00 880fd55e-43b9-11e0-b1a8-cf4edfd72085 (ncbservice.dll): - NCALRPC: LRPC-3f1973a65ada61671b\x00 - NCALRPC: OLE2B6B4B949A4E69B6976B9EF553C6\x00 - NCALRPC: LRPC-1723b36fb9c1aaa320\x00 0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 (spoolsv.exe): - NCACN: 157.119.171.28:49677 - NCALRPC: LRPC-b7f94e6288aea0ef2f\x00 0c53aa2e-fb1c-49c5-bfb6-c54f8e5857cd (SyncController.dll): - NCALRPC: OLE707882C87BE3B1C8B8D1BE7D07F2\x00 - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 4dace966-a243-4450-ae3f-9b7bcb5315b8 (psmserviceexthost.dll): - NCALRPC: umpo\x00 c605f9fb-f0a3-4e2a-a073-73560f8d9e3e (bisrv.dll): - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 74103b90-29af-413f-b203-a3eb4f7e95b8: - NCALRPC: AvastAntivirus-public-endpoint\x00 - NCALRPC: AvastAvService-FCFB76DC-1ABC-4319-A592-4B0CBD461637\x00 - NCALRPC: AvastAntivirus_tools-public-endpoint\x00 - NCALRPC: AvastToolService-FCFB76DC-1ABC-4319-A592-4B0CBD461637\x00 - NCALRPC: AvastAvUI-FCFB76DC-1ABC-4319-A592-4B0CBD461637:1\x00 850cee52-3038-4277-b9b4-e05db8b2c35c (das.dll): - NCALRPC: LRPC-9a35c40941c4931862\x00 43890c94-bfd7-4655-ad6a-b4a68397cdcb (pimindexmaintenance.dll): - NCALRPC: OLE707882C87BE3B1C8B8D1BE7D07F2\x00 - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 (bisrv.dll): - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 30b044a5-a225-43f0-b3a4-e060df91f9c1 (certprop.dll): - NCALRPC: LRPC-94adc778b9b0ea8509\x00 29770a8f-829b-4158-90a2-78cd488501f7 (sessenv.dll): - NCACN: 157.119.171.28:49668 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\SessEnvPublicRpc\x00 - NCALRPC: SessEnvPrivateRpc\x00 - NCALRPC: LRPC-17b409e7a9eb58d565\x00 1a0d010f-1c33-432c-b0f5-8cf4e8053099 (srvsvc.dll): - NCALRPC: LRPC-662a073a03a2c4aa42\x00 7a20fcec-dec4-4c59-be57-212e8f65d3de (SgrmBroker.exe): - NCALRPC: LRPC-aac6dbecb243e81592\x00 55e6b932-1979-45d6-90c5-7f6270724112 (resourcepolicyserver.dll): - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 0361ae94-0316-4c6c-8ad8-c594375800e2 (psmsrv.dll): - NCALRPC: umpo\x00 b18fbab6-56f8-4702-84e0-41053293a869 (usermgr.dll): - NCALRPC: LRPC-bd0aa3765cdbbb4cf7\x00 - NCALRPC: OLEFB3CF63B9F5A02D8DA0AE856FF85\x00 f47433c3-3e9d-4157-aad4-83aa1f5c2d4c (mpssvc.dll): - NCALRPC: LRPC-8984b5e3128ece871f\x00 - NCALRPC: LRPC-d925c1ee7324d63e33\x00 - NCALRPC: LRPC-997bd3cdfe3f66bb1d\x00 d4051bde-9cdd-4910-b393-4aa85ec3c482: - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b (keyiso.dll): - NCACN: 157.119.171.28:49664 - NCALRPC: samss lpc\x00 - NCALRPC: SidKey Local End Point\x00 - NCALRPC: protected_storage\x00 - NCALRPC: lsasspirpc\x00 - NCALRPC: lsapolicylookup\x00 - NCALRPC: LSA_EAS_ENDPOINT\x00 - NCALRPC: LSA_IDPEXT_ENDPOINT\x00 - NCALRPC: lsacap\x00 - NCALRPC: LSARPC_ENDPOINT\x00 - NCALRPC: securityevent\x00 - NCALRPC: audit\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\lsass\x00 3b338d89-6cfa-44b8-847e-531531bc9992 (psmsrv.dll): - NCALRPC: umpo\x00 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 (dhcpcore6.dll): - NCALRPC: dhcpcsvc6\x00 2e7d4935-59d2-4312-a2c8-41900aa5495f (das.dll): - NCALRPC: LRPC-9a35c40941c4931862\x00 923c9623-db7f-4b34-9e6d-e86580f8ca2a (SyncController.dll): - NCALRPC: OLE707882C87BE3B1C8B8D1BE7D07F2\x00 - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 6982a06e-5fe2-46b1-b39c-a2c545bfa069: - NCALRPC: umpo\x00 082a3471-31b6-422a-b931-a54401960c62 (psmserviceexthost.dll): - NCALRPC: umpo\x00 76c217bc-c8b4-4201-a745-373ad9032b1a (resourcepolicyserver.dll): - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 f2c9b409-c1c9-4100-8639-d8ab1486694a (wkssvc.dll): - NCALRPC: LRPC-0908e4a2fc2878d248\x00 06bba54a-be05-49f9-b0a0-30f790261023 (wscsvc.dll): - NCALRPC: LRPC-98da6c671a002ba884\x00 - NCALRPC: OLEB311A83E4A4B661BCC5CB0A3B7EC\x00 0d3c7f20-1c8d-4654-a1b3-51563b298bda (usermgr.dll): - NCALRPC: LRPC-bd0aa3765cdbbb4cf7\x00 - NCALRPC: OLEFB3CF63B9F5A02D8DA0AE856FF85\x00 95406f0b-b239-4318-91bb-cea3a46ff0dc (psmserviceexthost.dll): - NCALRPC: umpo\x00 4ed8abcc-f1e2-438b-981f-bb0e8abc010c (psmserviceexthost.dll): - NCALRPC: umpo\x00 30adc50c-5cbc-46ce-9a0e-91914789e23c (nrpsrv.DLL): - NCALRPC: LRPC-dc431749c7cd44016c\x00 - NCALRPC: DNSResolver\x00 e7f76134-9ef5-4949-a2d6-3368cc0988f3 (wcmsvc.dll): - NCALRPC: LRPC-09dddd16d584fb081b\x00 abfb6ca3-0c5e-4734-9285-0aee72fe8d1c (wcmsvc.dll): - NCALRPC: LRPC-09dddd16d584fb081b\x00 0767a036-0d22-48aa-ba69-b619480f38cb (pcasvc.dll): - NCALRPC: LRPC-432b487036d604f294\x00 b1ef227e-dfa5-421e-82bb-67a6a129c496 (modernexecserver.dll): - NCALRPC: LRPC-82875f5707c93812d7\x00 - NCALRPC: OLE87E8CA430B4778E5084C5F3B072C\x00 2c7fd9ce-e706-4b40-b412-953107ef9bb0 (psmserviceexthost.dll): - NCALRPC: umpo\x00 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e (bisrv.dll): - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 (dhcpcore.dll): - NCALRPC: dhcpcsvc\x00 - NCALRPC: dhcpcsvc6\x00 b58aa02e-2884-4e97-8176-4ee06d794184 (sysmain.dll): - NCALRPC: LRPC-dca01f66c82066b666\x00 2fb92682-6599-42dc-ae13-bd2ca89bd11c (mpssvc.dll): - NCALRPC: LRPC-f7e23aeb0a37746164\x00 - NCALRPC: LRPC-8984b5e3128ece871f\x00 - NCALRPC: LRPC-d925c1ee7324d63e33\x00 - NCALRPC: LRPC-997bd3cdfe3f66bb1d\x00 0ff1f646-13bb-400a-ab50-9a78f2b7a85a: - NCALRPC: umpo\x00 3473dd4d-2e88-4006-9cba-22570909dd10 (winhttp.dll): - NCALRPC: 1916f9e5-efce-4ca6-92f2-83611cce8ddf\x00 - NCALRPC: LRPC-f763f0801ce4e9d1fd\x00 c27f3c08-92ba-478c-b446-b419c4cef0e2 (dusmsvc.dll): - NCALRPC: LRPC-6de10ed5d6e82b9266\x00 a398e520-d59a-4bdd-aa7a-3c1e0303a511: - NCALRPC: LRPC-23f6c133f08e45c69b\x00 d2716e94-25cb-4820-bc15-537866578562 (aphostservice.dll): - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 (psmsrv.dll): - NCALRPC: umpo\x00 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b (ncbservice.dll): - NCALRPC: LRPC-ff08b864da327e1579\x00 d22895ef-aff4-42c5-a5b2-b14466d34ab4 (diagtrack.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 f6beaff7-1e19-4fbb-9f8f-b89e2018337c (wevtsvc.dll): - NCACN: 157.119.171.28:49666 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\eventlog\x00 - NCALRPC: eventlog\x00 be6293d3-2827-4dda-8057-8588240124c9: - NCALRPC: LRPC-9b76b5407667845878\x00 51a227ae-825b-41f2-b4a9-1ac9557a1018 (keyiso.dll): - NCACN: 157.119.171.28:49664 - NCALRPC: samss lpc\x00 - NCALRPC: SidKey Local End Point\x00 - NCALRPC: protected_storage\x00 - NCALRPC: lsasspirpc\x00 - NCALRPC: lsapolicylookup\x00 - NCALRPC: LSA_EAS_ENDPOINT\x00 - NCALRPC: LSA_IDPEXT_ENDPOINT\x00 - NCALRPC: lsacap\x00 - NCALRPC: LSARPC_ENDPOINT\x00 - NCALRPC: securityevent\x00 - NCALRPC: audit\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\lsass\x00 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 (diagtrack.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 0fc77b1a-95d8-4a2e-a0c0-cff54237462b (modernexecserver.dll): - NCALRPC: LRPC-82875f5707c93812d7\x00 - NCALRPC: OLE87E8CA430B4778E5084C5F3B072C\x00 4a452661-8290-4b36-8fbe-7f4093a94978 (spoolsv.exe): - NCACN: 157.119.171.28:49677 - NCALRPC: LRPC-b7f94e6288aea0ef2f\x00 98cd761e-e77d-41c8-a3c0-0fb756d90ec2 (tellib.dll): - NCALRPC: LRPC-c59b038760d56b0e2b\x00 - NCALRPC: OLEE5CDE86A5151166FC3ED99865646\x00 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 (systemeventsbrokerserver.dll): - NCALRPC: LRPC-5e45179af6c679e295\x00 - NCALRPC: LRPC-6da3b015a20836c2bc\x00 - NCALRPC: LRPC-86953dd110450eb199\x00 - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 88abcbc3-34ea-76ae-8215-767520655a23 (resourcepolicyserver.dll): - NCALRPC: LRPC-2fe207510ccba650a9\x00 - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 378e52b0-c0a9-11cf-822d-00aa0051e40f (taskcomp.dll): - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\atsvc\x00 - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 7ea70bcf-48af-4f6a-8968-6a440754d5fa (nsisvc.dll): - NCALRPC: LRPC-648c3ab98c00050b65\x00 c2d1b5dd-fa81-4460-9dd6-e7658b85454b: - NCALRPC: LRPC-09dddd16d584fb081b\x00 dd59071b-3215-4c59-8481-972edadc0f6a (psmserviceexthost.dll): - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 33d84484-3626-47ee-8c6f-e7e98b113be1 (WPTaskScheduler.dll): - NCALRPC: LRPC-859d7302f3f8a9d9c6\x00 - NCALRPC: ubpmtaskhostchannel\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\atsvc\x00 - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 2e6035b2-e8f1-41a7-a044-656b439c4c34 (httpprxm.dll): - NCALRPC: TeredoControl\x00 - NCALRPC: TeredoDiagnostics\x00 - NCALRPC: LRPC-68ea37b0e91208a2bc\x00 12345778-1234-abcd-ef00-0123456789ac (samsrv.dll): - NCACN: 157.119.171.28:49664 - NCALRPC: samss lpc\x00 - NCALRPC: SidKey Local End Point\x00 - NCALRPC: protected_storage\x00 - NCALRPC: lsasspirpc\x00 - NCALRPC: lsapolicylookup\x00 - NCALRPC: LSA_EAS_ENDPOINT\x00 - NCALRPC: LSA_IDPEXT_ENDPOINT\x00 - NCALRPC: lsacap\x00 - NCALRPC: LSARPC_ENDPOINT\x00 - NCALRPC: securityevent\x00 - NCALRPC: audit\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\pipe\lsass\x00 98716d03-89ac-44c7-bb8c-285824e51c4a (srvsvc.dll): - NCALRPC: LRPC-662a073a03a2c4aa42\x00 b37f900a-eae4-4304-a2ab-12bb668c0188 (wcmsvc.dll): - NCALRPC: LRPC-09dddd16d584fb081b\x00 6b5bdd1e-528c-422c-af8c-a4079be4fe48 ([MS-FASP]: Firewall and Advanced Security Protocol): - NCACN: 157.119.171.28:49685 - NCALRPC: ipsec\x00 a1d4eae7-39f8-4bca-8e72-832767f5082a (das.dll): - NCALRPC: LRPC-9a35c40941c4931862\x00 a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 (timebrokerserver.dll): - NCALRPC: LRPC-2fb5bb70ce7baebab8\x00 - NCALRPC: LRPC-0f9e5ef1378d65c79d\x00 367abb81-9844-35f1-ad32-98f038001003 (services.exe): - NCACN: 157.119.171.28:49688 0497b57d-2e66-424f-a0c6-157cd5d41700 (appinfo.dll): - NCALRPC: LRPC-3b1ecccbc2d9f190fa\x00 fae436b0-b864-4a87-9eda-298547cd82f2 (psmserviceexthost.dll): - NCALRPC: umpo\x00 86d35949-83c9-4044-b424-db363231fd0c (schedsvc.dll): - NCACN: 157.119.171.28:49667 - NCALRPC: LRPC-859d7302f3f8a9d9c6\x00 - NCALRPC: ubpmtaskhostchannel\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\atsvc\x00 - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 ae33069b-a2a8-46ee-a235-ddfd339be281 (spoolsv.exe): - NCACN: 157.119.171.28:49677 - NCALRPC: LRPC-b7f94e6288aea0ef2f\x00 c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 (adhsvc.dll): - NCALRPC: OLE4A5D49906414E2460EBE74DF8F70\x00 - NCALRPC: TeredoControl\x00 - NCALRPC: TeredoDiagnostics\x00 - NCALRPC: LRPC-68ea37b0e91208a2bc\x00 5b665b9a-a086-4e26-ae24-96ab050b0ec3 (das.dll): - NCALRPC: LRPC-9a35c40941c4931862\x00 20c40295-8dba-48e6-aebf-3e78ef3bb144 (bisrv.dll): - NCALRPC: OLE18AB36685F94AA9921E144E48CE4\x00 - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a (bisrv.dll): - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 (psmsrv.dll): - NCALRPC: umpo\x00 4b112204-0e19-11d3-b42b-0000f81feb9f (ssdpsrv.dll): - NCALRPC: LRPC-051475d39a87337c16\x00 8782d3b9-ebbd-4644-a3d8-e8725381919b (psmsrv.dll): - NCALRPC: umpo\x00 7aeb6705-3ae6-471a-882d-f39c109edc12 (wcmsvc.dll): - NCALRPC: LRPC-09dddd16d584fb081b\x00 a4b8d482-80ce-40d6-934d-b22a01a44fe7 (licensemanagersvc.dll): - NCALRPC: LicenseServiceEndpoint\x00 8ec21e98-b5ce-4916-a3d6-449fa428a007 (modernexecserver.dll): - NCALRPC: LRPC-82875f5707c93812d7\x00 - NCALRPC: OLE87E8CA430B4778E5084C5F3B072C\x00 e8748f69-a2a4-40df-9366-62dbeb696e26 (unistore.dll): - NCALRPC: OLE707882C87BE3B1C8B8D1BE7D07F2\x00 - NCALRPC: LRPC-47f9110c8d2c6caf57\x00 2d98a740-581d-41b9-aa0d-a88b9d5ce938 (bisrv.dll): - NCALRPC: LRPC-1a3a57b4044e52468e\x00 - NCALRPC: actkernel\x00 - NCALRPC: umpo\x00 085b0334-e454-4d91-9b8c-4134f9e793f3 (psmsrv.dll): - NCALRPC: umpo\x00 3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll): - NCACN: 157.119.171.28:49667 - NCALRPC: LRPC-859d7302f3f8a9d9c6\x00 - NCALRPC: ubpmtaskhostchannel\x00 - NCACN: \\BHAVANI-WHATSUP\x00\\PIPE\atsvc\x00 - NCALRPC: LRPC-c5c4f75dbf8d52bf5f\x00 ba4aa15a-be94-47fb-9bfb-fef110e7efad: - NCALRPC: LRPC-9ec52e1a44100b8522\x00 5f54ce7d-5b79-4175-8584-cb65313a0e98 (appinfo.dll): - NCALRPC: LRPC-3b1ecccbc2d9f190fa\x00

157.119.171.28:445

445 smb

ASN: 134258

2025-01-01

Banner

Version: 10.0Build 19041 Target Name : BHAVANI-WHATSUP

157.119.171.28:8081

8081

ASN: 134258

2024-12-31

WhatsUp_Gold/8.0

Header

Banner

Products

CName

HTTP/1.0 401 Unauthorized Connection: close Content-Type: text/html Date: Mon, 30 Dec 2024 22:57:35 GMT Server: WhatsUp_Gold/8.0 Www-Authenticate: Basic realm="WhatsUp Gold"

157.119.171.28:8081

8081 http

ASN: 134258

2024-12-31

WhatsUp_Gold/8.0

Header

Banner

Products

CName

HTTP/1.0 401 Unauthorized Date: Mon, 30 Dec 2024 22:57:34 GMT Server: WhatsUp_Gold/8.0 WWW-Authenticate: Basic realm="WhatsUp Gold" Content-Type: text/html

157.119.171.28:3389

3389 rdp

ASN: 134258

2024-12-28

Header

Banner

Products

CName

Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x08\x00\x00\x00 Flag: PROTOCOL_HYBRID_EX Target_Name: BHAVANI-WHATSUP Product_Version: 10.0.19041 Ntlm 15 OS: Windows 10, Version 2004/Windows Server, Version 2004 NetBIOS_Domain_Name: BHAVANI-WHATSUP NetBIOS_Computer_Name: BHAVANI-WHATSUP DNS_Domain_Name: Bhavani-WhatsUPGold DNS_Computer_Name: Bhavani-WhatsUPGold System_Time: 2024-12-28 10:29:16 +0000 UTC

Issuer

Organization:

CommonName:Bhavani-WhatsUPGold

Validity

ValidType:Untrust

Subject

Organization:

CommonName:Bhavani-WhatsUPGold

Version: v3 Serial Number: 131762282317884011383308109446355300103 Signature Algorithm: SHA256-RSA Issuer: CommonName: Bhavani-WhatsUPGold Validity: Not Before: 2024-11-05 09:32 UTC Not After : 2025-05-07 09:32 UTC Subject: CommonName: Bhavani-WhatsUPGold Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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ey Usage: Key Encipherment Data Encipherment Extended Key Usage: Server Auth Certificate Signature Algorithm: SHA256-RSA Certificate Signature: 48:38:3A:C2:9A:E3:0B:F7:87:BB:F9:9B:71:51:63:84: 8A:57:BD:C8:0F:D0:2D:DA:4C:76:E2:F3:68:A1:81:FE: 8A:EE:87:4B:DE:BC:79:F6:80:F2:AD:D8:D2:B8:BB:0D: 84:55:B2:23:D9:43:66:98:61:0B:D0:6D:D1:31:DF:02: 2B:80:A8:F1:7E:97:47:90:FD:98:41:D7:21:60:71:39: 25:EA:6A:14:36:95:6E:2F:14:60:B2:74:F1:85:DD:C6: 34:CE:B7:AB:2A:FD:16:5C:3D:9E:79:47:C3:47:78:E8: FD:1B:09:59:7C:CD:11:31:0D:C7:84:9C:46:EA:92:E9: B0:A1:75:D1:13:DB:4C:83:13:0B:14:AA:D7:E9:68:EB: 2D:A6:AA:C2:0A:08:55:46:66:7B:A0:09:0F:5A:02:DA: 57:18:1F:7D:34:DA:8F:97:35:68:D8:25:A0:E3:E3:05: 19:C7:DB:BB:A9:65:BD:F9:8A:4B:4B:67:D6:FB:8E:9F: D5:27:A7:BA:83:37:AB:B5:D2:10:DE:49:43:DA:FC:A9: B1:14:9C:13:75:AD:BC:E1:9F:E0:4B:A2:76:99:37:EA: 50:36:5D:70:3F:4C:05:E1:DC:BE:93:0F:3B:EF:25:48: 88:12:08:63:B2:56:B4:36:57:9D:67:CD:77:32:CC:06

157.119.171.28:5357

5357 http

ASN: 134258

2024-12-28

Microsoft-HTTPAPI/2.0

Header

Banner

Products

CName

HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Fri, 27 Dec 2024 16:37:09 GMT Connection: close Content-Length: 326

157.119.171.28:49664

49664 dcerpc

ASN: 134258

2024-12-27

Banner

\x05\x00 \x03\x10\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x04\x00\x01\x05\x00\x00\x00\x00

157.119.171.28:139

139 netbios-ssn